@kontextmind/kxm 0.7.121 → 0.7.123

package/plugins/kxm/dist/cli.js

@@ -18560,8 +18560,8 @@ function validateWorkflow(workflow, agents, models, repositories, gates, issues)
       const writable = Object.values(objectValue(step.repositories) ?? {}).filter((access) => access === "write").length;
       if (maxWriteRepositories > writable) issues.push(issue2("semantic", "write_repository_bound_invalid", file, `${stepId} maxWriteRepositories exceeds writable repository scope`));
     }
-    const join54 = objectValue(step.join);
-    const minimumPassed = join54 && typeof join54.minimumPassed === "number" ? join54.minimumPassed : void 0;
+    const join56 = objectValue(step.join);
+    const minimumPassed = join56 && typeof join56.minimumPassed === "number" ? join56.minimumPassed : void 0;
     if (minimumPassed !== void 0 && minimumPassed > maximum) issues.push(issue2("semantic", "join_impossible", file, `${stepId} minimumPassed exceeds assignment maximum`));
     const distinctBy = names(assignment?.distinctBy);
     if (distinctBy.length > 0) {
@@ -20863,7 +20863,7 @@ function compileStep(step, index, stepIndex, requirePlanHash, sink) {
   const maxAttempts = compileCountField(step.maxAttempts, 1, `${id}.maxAttempts`, id, sink);
   const timeoutMs = compileOptionalDuration(step.timeoutMs, `${id}.timeoutMs`, id, sink);
   const assignments = compileAssignments(step, id, agent, sink);
-  const join54 = compileJoin(step, id, sink);
+  const join56 = compileJoin(step, id, sink);
   const requiredEvidence = compileEvidence(step, id, sink);
   const transitions = compileTransitions(step, id, index, stepIndex, sink);
   const outcomes = Object.keys(transitions).sort(compareCodeUnits4);
@@ -20891,7 +20891,7 @@ function compileStep(step, index, stepIndex, requirePlanHash, sink) {
     transitions: orderedTransitions,
     requiresPlanHash: requirePlanHash.includes(id),
     assignments,
-    join: join54
+    join: join56
   };
   if (kind === "agent" || kind === "moa") {
     if (!agent) return void 0;
@@ -20941,15 +20941,15 @@ function compileAssignments(step, stepId, primaryAgentId, sink) {
   };
 }
 function compileJoin(step, stepId, sink) {
-  const join54 = objectValue2(step.join);
-  if (!join54) return { strategy: "all" };
-  const declared = stringValue2(join54.strategy);
+  const join56 = objectValue2(step.join);
+  if (!join56) return { strategy: "all" };
+  const declared = stringValue2(join56.strategy);
   const strategy = declared && JOIN_STRATEGIES.has(declared) ? declared : "all";
-  const minimumPassed = compileOptionalCount(join54.minimumPassed, `${stepId}.join.minimumPassed`, stepId, sink);
+  const minimumPassed = compileOptionalCount(join56.minimumPassed, `${stepId}.join.minimumPassed`, stepId, sink);
   const compiled = {
     strategy,
     ...minimumPassed !== void 0 ? { minimumPassed } : {},
-    ...typeof join54.cancelRemaining === "boolean" ? { cancelRemaining: join54.cancelRemaining } : {}
+    ...typeof join56.cancelRemaining === "boolean" ? { cancelRemaining: join56.cancelRemaining } : {}
   };
   return compiled;
 }
@@ -30324,10 +30324,10 @@ Expecting one of '${allowedValues.join("', '")}'`);
    * @param {string} flag
    * @private
    */
-  unknownOption(flag) {
+  unknownOption(flag2) {
     if (this._allowUnknownOption) return;
     let suggestion = "";
-    if (flag.startsWith("--") && this._showSuggestionAfterError) {
+    if (flag2.startsWith("--") && this._showSuggestionAfterError) {
       let candidateFlags = [];
       let command = this;
       do {
@@ -30335,9 +30335,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
         candidateFlags = candidateFlags.concat(moreFlags);
         command = command.parent;
       } while (command && !command._enablePositionalOptions);
-      suggestion = suggestSimilar(flag, candidateFlags);
+      suggestion = suggestSimilar(flag2, candidateFlags);
     }
-    const message = `error: unknown option '${flag}'${suggestion}`;
+    const message = `error: unknown option '${flag2}'${suggestion}`;
     this.error(message, { code: "commander.unknownOption" });
   }
   /**
@@ -34136,7 +34136,7 @@ async function cmdWorkflowDefinitions(runtime, options) {
 }
 async function cmdWorkflowAdd(runtime, workflowId, options) {
   const scope = options.scope ?? "local";
-  const refuse3 = (error, message, code = 2) => {
+  const refuse4 = (error, message, code = 2) => {
     print(runtime.io, runtime.json, { ok: false, command: "workflow add", error, message }, `workflow add failed: ${message}`);
     return code;
   };
@@ -34144,12 +34144,12 @@ async function cmdWorkflowAdd(runtime, workflowId, options) {
     let content;
     if (options.template !== void 0) {
       if (options.file !== void 0 || options.pick !== void 0) {
-        return refuse3("workflow_add_conflict", "--template cannot be combined with --file or --pick");
+        return refuse4("workflow_add_conflict", "--template cannot be combined with --file or --pick");
       }
-      if (!workflowId) return refuse3("workflow_id_required", "usage: kxm workflow add <workflowId> --template <name>");
+      if (!workflowId) return refuse4("workflow_id_required", "usage: kxm workflow add <workflowId> --template <name>");
       const template = Object.hasOwn(WORKFLOW_TEMPLATES, options.template) ? WORKFLOW_TEMPLATES[options.template] : void 0;
       if (!template) {
-        return refuse3("workflow_template_unknown", `unknown template ${options.template}; choose ${Object.keys(WORKFLOW_TEMPLATES).join(", ")}`);
+        return refuse4("workflow_template_unknown", `unknown template ${options.template}; choose ${Object.keys(WORKFLOW_TEMPLATES).join(", ")}`);
       }
       content = { ...template, ...options.description !== void 0 ? { description: options.description } : {} };
     } else if (!workflowId || options.pick) {
@@ -34169,7 +34169,7 @@ async function cmdWorkflowAdd(runtime, workflowId, options) {
       }
       const picked = await resolvePickItem(runtime.io, `Select a workflow template to add (${scope})`, candidates, options.pick, runtime.env);
       if (!picked) {
-        return refuse3("workflow_id_required", "provide a workflowId or select an available workflow with --pick <id>", 1);
+        return refuse4("workflow_id_required", "provide a workflowId or select an available workflow with --pick <id>", 1);
       }
       workflowId ??= picked.id;
       if (options.file === void 0) {
@@ -34191,7 +34191,7 @@ async function cmdWorkflowAdd(runtime, workflowId, options) {
     if (scope === "local") {
       const projectRoot = discoverKxmProjectRoot(runtime.cwd);
       if (!projectRoot) {
-        return refuse3("project_not_found", "local workflows belong to a KXM project; run kxm init at the repository root, or pass --scope global");
+        return refuse4("project_not_found", "local workflows belong to a KXM project; run kxm init at the repository root, or pass --scope global");
       }
       const issues = kxmWorkflowWriteIssues(projectRoot, workflowId, document);
       if (issues.length > 0) {
@@ -34226,7 +34226,7 @@ ${issues.map((entry) => `  ${entry.file}: ${entry.code}: ${entry.message}`).join
     );
     return 0;
   } catch (err) {
-    return refuse3("workflow_add_failed", err instanceof Error ? err.message : String(err), 1);
+    return refuse4("workflow_add_failed", err instanceof Error ? err.message : String(err), 1);
   }
 }
 async function cmdWorkflowRemove(runtime, workflowId, options) {
@@ -36612,19 +36612,90 @@ async function cmdPluginInstall(runtime, options) {
   return ok ? 0 : 1;
 }
 
+// plugins/kxm/src/cli/docs.ts
+init_project_config();
+init_types();
+import { spawn as spawn4 } from "node:child_process";
+import { existsSync as existsSync29 } from "node:fs";
+import { join as join35 } from "node:path";
+var GENERATOR = "plans/kxm-roadmap/update-dashboard.mjs";
+var SERVER = "ops/docs-site/serve.py";
+function requireProject(runtime, command) {
+  const root = discoverKxmProjectRoot(runtime.cwd);
+  if (!root) {
+    print(
+      runtime.io,
+      runtime.json,
+      { ok: false, command, error: "project_required" },
+      `kxm ${command} requires a KXM project (run kxm init first)`
+    );
+    return 1;
+  }
+  return root;
+}
+function requireFile(runtime, command, root, relative8, error) {
+  const file = join35(root, relative8);
+  if (existsSync29(file)) return file;
+  print(
+    runtime.io,
+    runtime.json,
+    { ok: false, command, error, path: relative8 },
+    `kxm ${command} requires ${relative8}`
+  );
+  return 1;
+}
+function printCommand(runtime, command, line) {
+  print(
+    runtime.io,
+    runtime.json,
+    { ok: true, command, dryRun: true, detail: line },
+    line
+  );
+  return 0;
+}
+function runInherited(command, args, cwd) {
+  return new Promise((resolveExit) => {
+    const child = spawn4(command, [...args], { cwd, stdio: "inherit" });
+    child.once("error", () => resolveExit(1));
+    child.once("exit", (code) => resolveExit(code ?? 1));
+  });
+}
+async function cmdDocsBuild(runtime) {
+  const command = "docs build";
+  const root = requireProject(runtime, command);
+  if (typeof root === "number") return root;
+  const file = requireFile(runtime, command, root, GENERATOR, "docs_generator_missing");
+  if (typeof file === "number") return file;
+  const line = `node ${GENERATOR}`;
+  if (runtime.dryRun) return printCommand(runtime, command, line);
+  return runInherited(process.execPath, [file], root);
+}
+async function cmdDocsServe(runtime, options = {}) {
+  const command = "docs serve";
+  const root = requireProject(runtime, command);
+  if (typeof root === "number") return root;
+  const file = requireFile(runtime, command, root, SERVER, "docs_server_missing");
+  if (typeof file === "number") return file;
+  const args = [file];
+  if (options.port !== void 0 && options.port !== "") args.push("--port", options.port);
+  const line = ["python3", SERVER, ...args.slice(1)].join(" ");
+  if (runtime.dryRun) return printCommand(runtime, command, line);
+  return runInherited("python3", args, root);
+}
+
 // plugins/kxm/src/cli/lanes.ts
 init_project_config();
 init_runtime_supervisor();
 init_types();
 import { spawnSync as spawnSync6 } from "node:child_process";
-import { chmodSync as chmodSync6, existsSync as existsSync29, mkdirSync as mkdirSync24, readFileSync as readFileSync29, writeFileSync as writeFileSync22 } from "node:fs";
-import { basename as basename8, dirname as dirname18, join as join35, resolve as resolve25 } from "node:path";
+import { chmodSync as chmodSync6, existsSync as existsSync30, mkdirSync as mkdirSync24, readFileSync as readFileSync29, writeFileSync as writeFileSync22 } from "node:fs";
+import { basename as basename8, dirname as dirname18, join as join36, resolve as resolve25 } from "node:path";
 var LANE_SCHEMA = "kxm.lanes.v1";
 var SHA_RE = /^[a-f0-9]{40,64}$/;
 var TIMESTAMP_RE = /^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\.[0-9]{1,9})?Z$/;
 var SETTLED_RUN = /* @__PURE__ */ new Set(["completed", "failed", "cancelled"]);
 function lanesFile(runtime) {
-  return join35(runtime.dirs.state, "lanes.json");
+  return join36(runtime.dirs.state, "lanes.json");
 }
 function gitEnv() {
   return Object.fromEntries(Object.entries(process.env).filter(([name]) => !name.toUpperCase().startsWith("GIT_")));
@@ -36672,7 +36743,7 @@ function isLaneFile(value) {
 }
 function loadLanes(runtime, command) {
   const file = lanesFile(runtime);
-  if (!existsSync29(file)) return { schema: LANE_SCHEMA, lanes: {} };
+  if (!existsSync30(file)) return { schema: LANE_SCHEMA, lanes: {} };
   try {
     const parsed = JSON.parse(readFileSync29(file, "utf8"));
     if (!isLaneFile(parsed)) return refuse(runtime, command, "lanes_unreadable", `lane record ${file} is malformed`);
@@ -36731,7 +36802,7 @@ function withLaneCwd(runtime, unit, command = "lane") {
   const loaded = loadLanes(runtime, command);
   if (typeof loaded === "number") return loaded;
   const lane = loaded.lanes[unit];
-  if (!lane || !existsSync29(lane.path)) {
+  if (!lane || !existsSync30(lane.path)) {
     return refuse(runtime, command, "lane_missing", `lane ${unit} is not recorded or its worktree is absent`, { unit });
   }
   return {
@@ -36802,7 +36873,7 @@ function aheadBehind(path4, baseSha) {
   return { behind: Number(match[1]), ahead: Number(match[2]) };
 }
 function laneView(unit, record) {
-  const exists = existsSync29(record.path);
+  const exists = existsSync30(record.path);
   const counts = exists ? aheadBehind(record.path, record.baseSha) : { ahead: null, behind: null };
   return {
     unit,
@@ -36893,7 +36964,7 @@ async function cmdLaneCreate(runtime, unit, options = {}) {
   const loaded = loadLanes(runtime, command);
   if (typeof loaded === "number") return loaded;
   const path4 = laneWorktreePath(root, unit);
-  if (loaded.lanes[unit] || existsSync29(path4) || branchExists(root, unit)) {
+  if (loaded.lanes[unit] || existsSync30(path4) || branchExists(root, unit)) {
     return refuse(runtime, command, "lane_exists", `lane ${unit} already exists`, { unit });
   }
   const baseSha = resolveBase(root, base);
@@ -36918,7 +36989,7 @@ async function cmdLaneCreate(runtime, unit, options = {}) {
     return refuse(runtime, command, "lane_git_failed", `git worktree add failed: ${added.stderr.trim().slice(0, 300)}`, { unit });
   }
   const recordedPath = discoverKxmProjectRoot(path4) ?? path4;
-  if (!existsSync29(join35(recordedPath, ".kxm", "project.yaml"))) {
+  if (!existsSync30(join36(recordedPath, ".kxm", "project.yaml"))) {
     git2(root, ["worktree", "remove", "--force", path4]);
     return refuse(runtime, command, "lane_not_project", `lane ${recordedPath} has no .kxm/project.yaml; the worktree was removed`, { unit, path: recordedPath });
   }
@@ -36982,7 +37053,7 @@ async function cmdLaneDrop(runtime, unit, options = {}) {
   if (!record) return refuse(runtime, command, "lane_missing", `lane ${unit} is not recorded`, { unit });
   const force = options.force === true;
   if (!force) {
-    if (existsSync29(record.path)) {
+    if (existsSync30(record.path)) {
       const dirty = porcelainCount(record.path);
       if (dirty === null) {
         return refuse(runtime, command, "lane_git_failed", `lane ${unit} worktree status could not be read`, { unit });
@@ -37001,7 +37072,7 @@ async function cmdLaneDrop(runtime, unit, options = {}) {
     ], `drop lane ${unit}; branch ${record.branch} is not deleted`);
     return 0;
   }
-  if (existsSync29(record.path)) {
+  if (existsSync30(record.path)) {
     const removed = git2(root, ["worktree", "remove", ...force ? ["--force"] : [], record.path]);
     if (removed.status !== 0) {
       return refuse(runtime, command, "lane_git_failed", `git worktree remove failed: ${removed.stderr.trim().slice(0, 300)}`, { unit });
@@ -37071,8 +37142,8 @@ async function cmdLaneRun(runtime, unit, options) {
 init_project_config();
 init_repo_root();
 init_types();
-import { spawn as spawn4 } from "node:child_process";
-import { join as join36 } from "node:path";
+import { spawn as spawn5 } from "node:child_process";
+import { join as join37 } from "node:path";
 function childEnv() {
   const env = {};
   for (const [name, value] of Object.entries(process.env)) {
@@ -37091,7 +37162,7 @@ function cmdLand(runtime, options = {}) {
   if (!root) {
     return Promise.resolve(refuse2(runtime, "project_required", "land requires a KXM project (run kxm init first)"));
   }
-  const script = join36(findKxmRepoRoot(import.meta.url), "scripts", "pr-land.mjs");
+  const script = join37(findKxmRepoRoot(import.meta.url), "scripts", "pr-land.mjs");
   const args = [script];
   if (options.pr) args.push("--pr", options.pr);
   if (options.stage) args.push("--stage", options.stage);
@@ -37099,7 +37170,7 @@ function cmdLand(runtime, options = {}) {
   if (runtime.json) args.push("--json");
   if (runtime.dryRun) args.push("--dry-run");
   return new Promise((resolveExit) => {
-    const child = spawn4(process.execPath, args, { cwd: root, env: childEnv(), windowsHide: true });
+    const child = spawn5(process.execPath, args, { cwd: root, env: childEnv(), windowsHide: true });
     child.stdout.on("data", (chunk) => runtime.io.stdout(chunk.toString("utf8")));
     child.stderr.on("data", (chunk) => runtime.io.stderr(chunk.toString("utf8")));
     child.once("error", () => resolveExit(1));
@@ -37107,11 +37178,116 @@ function cmdLand(runtime, options = {}) {
   });
 }
 
+// plugins/kxm/src/cli/assign.ts
+init_project_config();
+init_types();
+import { spawnSync as spawnSync7 } from "node:child_process";
+import { existsSync as existsSync31 } from "node:fs";
+import { join as join38 } from "node:path";
+var kxmAssignCliSeams = {};
+var RUNNER_REL = "scripts/assignment-run.mjs";
+function refuse3(runtime, command, error, text) {
+  print(runtime.io, runtime.json, { ok: false, command, error }, text);
+  return 1;
+}
+function flag(value) {
+  if (value === void 0) throw new Error("assign invocation missing a parsed flag");
+  return value;
+}
+function runnerArgv(subcommand, args) {
+  switch (subcommand) {
+    case "run":
+      return ["run", "--manifest", flag(args.manifest)];
+    case "witness":
+      return ["witness", "--record-dir", flag(args.recordDir)];
+    case "plan-current":
+      return [
+        "plan-current",
+        "--task-dir",
+        flag(args.taskDir),
+        "--plan",
+        flag(args.plan),
+        "--sha256",
+        flag(args.sha256),
+        "--base-commit",
+        flag(args.baseCommit),
+        "--expected-generation",
+        flag(args.expectedGeneration)
+      ];
+    case "attribute":
+      return [
+        "attribute",
+        "--task-dir",
+        flag(args.taskDir),
+        "--record-dir",
+        flag(args.recordDir),
+        "--class",
+        flag(args.classification),
+        "--explanation-file",
+        flag(args.explanationFile)
+      ];
+    case "observe-cost":
+      return ["observe-cost", "--task-dir", flag(args.taskDir), "--input", flag(args.input)];
+    case "accept": {
+      const argv = [
+        "accept",
+        "--task-dir",
+        flag(args.taskDir),
+        "--commit",
+        flag(args.commit),
+        "--record-dir",
+        flag(args.recordDir)
+      ];
+      for (const critic of args.critics ?? []) argv.push("--critic", critic);
+      if (args.observedPr !== void 0) argv.push("--observed-pr", args.observedPr);
+      if (args.observedCi !== void 0) argv.push("--observed-ci", args.observedCi);
+      return argv;
+    }
+    case "change-report":
+      return ["change-report", "--task-dir", flag(args.taskDir)];
+    default: {
+      const unreachable = subcommand;
+      throw new Error(`unknown assign verb ${String(unreachable)}`);
+    }
+  }
+}
+async function cmdAssign(runtime, subcommand, args) {
+  const command = `assign ${subcommand}`;
+  const root = discoverKxmProjectRoot(runtime.cwd);
+  if (!root) return refuse3(runtime, command, "project_required", `${command} requires a KXM project (run kxm init first)`);
+  if (!existsSync31(join38(root, "scripts", "assignment-run.mjs"))) {
+    return refuse3(runtime, command, "assign_runner_missing", `${command} requires scripts/assignment-run.mjs in the project root`);
+  }
+  const argv = ["node", RUNNER_REL, ...runnerArgv(subcommand, args)];
+  if (runtime.dryRun) {
+    const payload = { schema: CLI_RESULT_SCHEMA, ok: true, command, dryRun: true, argv };
+    runtime.io.stdout(runtime.json ? `${JSON.stringify(payload)}
+` : `${argv.join(" ")}
+`);
+    return 0;
+  }
+  const spawn6 = kxmAssignCliSeams.spawn ?? ((commandName, commandArgs, options) => {
+    const result2 = spawnSync7(commandName, commandArgs, {
+      cwd: options.cwd,
+      stdio: options.stdio,
+      env: options.env,
+      windowsHide: true
+    });
+    return { status: result2.status, ...result2.error ? { error: result2.error } : {} };
+  });
+  const result = spawn6("node", argv.slice(1), { cwd: root, stdio: "inherit", env: runtime.env });
+  if (result.status === null) {
+    const detail = result.error?.message ?? "the assignment runner could not be started";
+    return refuse3(runtime, command, "assign_spawn_failed", detail);
+  }
+  return result.status;
+}
+
 // plugins/kxm/src/cli/hub.ts
 init_redact();
 import { randomUUID as randomUUID13 } from "node:crypto";
-import { existsSync as existsSync35, mkdirSync as mkdirSync28, readFileSync as readFileSync35, readdirSync as readdirSync12, rmSync as rmSync11, writeFileSync as writeFileSync25 } from "node:fs";
-import { join as join46, resolve as resolve28 } from "node:path";
+import { existsSync as existsSync37, mkdirSync as mkdirSync28, readFileSync as readFileSync35, readdirSync as readdirSync12, rmSync as rmSync11, writeFileSync as writeFileSync25 } from "node:fs";
+import { join as join48, resolve as resolve28 } from "node:path";
 init_hub_env();
 init_envelope();
 
@@ -42809,7 +42985,7 @@ import * as path2 from "node:path";
 
 // node_modules/@earendil-works/pi-tui/dist/native-module-path.js
 import { createRequire as createRequire2 } from "node:module";
-import { dirname as dirname19, join as join37 } from "node:path";
+import { dirname as dirname19, join as join39 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var moduleRequire = createRequire2(import.meta.url);
 var TUI_PACKAGE_NAME = "@earendil-works/pi-tui";
@@ -42818,10 +42994,10 @@ function getNativeModuleCandidates(nativePath, options = {}) {
   const candidates = [];
   try {
     const packageEntry = (options.resolvePackage ?? moduleRequire.resolve)(TUI_PACKAGE_NAME);
-    candidates.push(join37(dirname19(packageEntry), "..", nativePath));
+    candidates.push(join39(dirname19(packageEntry), "..", nativePath));
   } catch {
   }
-  candidates.push(join37(moduleDir, "..", nativePath), join37(moduleDir, nativePath), join37(dirname19(options.execPath ?? process.execPath), nativePath));
+  candidates.push(join39(moduleDir, "..", nativePath), join39(moduleDir, nativePath), join39(dirname19(options.execPath ?? process.execPath), nativePath));
   return Array.from(new Set(candidates));
 }
 
@@ -45552,8 +45728,8 @@ var MAX_RENDER_WRITE_CHARS = 1024 * 1024;
 
 // plugins/kxm/src/tui.ts
 import { mkdirSync as mkdirSync25 } from "node:fs";
-import { join as join41, resolve as resolve27, dirname as dirname20 } from "node:path";
-import { spawnSync as spawnSync7 } from "node:child_process";
+import { join as join43, resolve as resolve27, dirname as dirname20 } from "node:path";
+import { spawnSync as spawnSync8 } from "node:child_process";
 
 // packages/core/tui/src/types/surface.ts
 var KXM_TUI_LIMITS = Object.freeze({
@@ -45696,9 +45872,9 @@ var SHARED_EFFECT_KINDS = Object.freeze([
 // plugins/kxm/src/local-snapshot.ts
 init_sqlite();
 init_telemetry();
-import { existsSync as existsSync30, readdirSync as readdirSync11, readFileSync as readFileSync30 } from "node:fs";
+import { existsSync as existsSync32, readdirSync as readdirSync11, readFileSync as readFileSync30 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
-import { isAbsolute as isAbsolute9, join as join40, resolve as resolve26 } from "node:path";
+import { isAbsolute as isAbsolute9, join as join42, resolve as resolve26 } from "node:path";
 var DEFAULT_BUSY_TIMEOUT_MS = 5e3;
 var RUNTIME_PROJECT_KEY = /^[A-Za-z0-9_-][A-Za-z0-9._-]*$/;
 function processExists2(pid) {
@@ -45823,36 +45999,36 @@ function readOpenMessageMetadata(database, where = OPEN_MESSAGE_WHERE, params =
   return messages;
 }
 function resolveKxmSnapshotPaths(cwd, env = process.env) {
-  const stateDir = env.KXM_STATE_DIR?.trim() || join40(cwd, ".kxm", "state");
+  const stateDir = env.KXM_STATE_DIR?.trim() || join42(cwd, ".kxm", "state");
   const configured = env.KXM_DATA_PATH?.trim();
-  const dataPath = configured ? resolve26(cwd, configured) : join40(stateDir, "kxm.db");
+  const dataPath = configured ? resolve26(cwd, configured) : join42(stateDir, "kxm.db");
   return { dataPath, stateDir };
 }
 function resolveKxmStateRoot(stateDir, options) {
-  if (options?.kxmStateRoot && existsSync30(options.kxmStateRoot)) {
+  if (options?.kxmStateRoot && existsSync32(options.kxmStateRoot)) {
     return resolve26(options.kxmStateRoot);
   }
-  if (existsSync30(join40(stateDir, "runtime", "registry.db")) || existsSync30(join40(stateDir, "runtime", "projects"))) {
+  if (existsSync32(join42(stateDir, "runtime", "registry.db")) || existsSync32(join42(stateDir, "runtime", "projects"))) {
     return stateDir;
   }
   const env = options?.env ?? process.env;
   const explicit = env.KXM_STATE_HOME?.trim() || env.KXM_USER_STATE_DIR?.trim() || env.KXM_STATE_ROOT?.trim();
-  if (explicit && isAbsolute9(explicit) && existsSync30(resolve26(explicit))) {
+  if (explicit && isAbsolute9(explicit) && existsSync32(resolve26(explicit))) {
     return resolve26(explicit);
   }
   let base;
   if (process.platform === "win32") {
     const localAppData = env.LOCALAPPDATA?.trim();
-    base = localAppData && isAbsolute9(localAppData) ? localAppData : join40(homedir6(), "AppData", "Local");
+    base = localAppData && isAbsolute9(localAppData) ? localAppData : join42(homedir6(), "AppData", "Local");
     base = resolve26(base, "KXM");
   } else if (process.platform === "darwin") {
     base = resolve26(homedir6(), "Library", "Application Support", "KXM");
   } else {
     const xdgState = env.XDG_STATE_HOME?.trim();
-    base = xdgState && isAbsolute9(xdgState) ? xdgState : join40(homedir6(), ".local", "state");
+    base = xdgState && isAbsolute9(xdgState) ? xdgState : join42(homedir6(), ".local", "state");
     base = resolve26(base, "kxm");
   }
-  if (existsSync30(base)) return base;
+  if (existsSync32(base)) return base;
   return void 0;
 }
 function readRuntimeRuns(eventDb, projectId) {
@@ -45885,7 +46061,7 @@ function loadLocalMeshSnapshot(dataPath, stateDir, options) {
   let legacyRuns = [];
   let legacyRunTotal = 0;
   let plans = [];
-  if (existsSync30(dataPath)) {
+  if (existsSync32(dataPath)) {
     hasLegacy = true;
     const database = openReadOnlyDatabase(dataPath);
     try {
@@ -45916,11 +46092,11 @@ function loadLocalMeshSnapshot(dataPath, stateDir, options) {
   let kxmRunTotal = 0;
   const kxmStateRoot = scope && !scope.runtimeProjectId ? void 0 : resolveKxmStateRoot(stateDir, options);
   if (kxmStateRoot) {
-    const runtimeDir = join40(kxmStateRoot, "runtime");
-    const registryDbPath = join40(runtimeDir, "registry.db");
-    const projectsDir = join40(runtimeDir, "projects");
+    const runtimeDir = join42(kxmStateRoot, "runtime");
+    const registryDbPath = join42(runtimeDir, "registry.db");
+    const projectsDir = join42(runtimeDir, "projects");
     const projectKeys = /* @__PURE__ */ new Set();
-    if (existsSync30(registryDbPath)) {
+    if (existsSync32(registryDbPath)) {
       hasKxm = true;
       try {
         const regDb = openReadOnlyDatabase(registryDbPath);
@@ -45936,7 +46112,7 @@ function loadLocalMeshSnapshot(dataPath, stateDir, options) {
       } catch {
       }
     }
-    if (!scope && existsSync30(projectsDir)) {
+    if (!scope && existsSync32(projectsDir)) {
       try {
         for (const entry of readdirSync11(projectsDir, { withFileTypes: true })) {
           if (entry.isDirectory()) {
@@ -45948,8 +46124,8 @@ function loadLocalMeshSnapshot(dataPath, stateDir, options) {
     }
     for (const key of projectKeys) {
       if (scope && !RUNTIME_PROJECT_KEY.test(key)) continue;
-      const eventDbPath = join40(projectsDir, key, "run-events.db");
-      if (existsSync30(eventDbPath)) {
+      const eventDbPath = join42(projectsDir, key, "run-events.db");
+      if (existsSync32(eventDbPath)) {
         hasKxm = true;
         try {
           const eventDb = openReadOnlyDatabase(eventDbPath);
@@ -45967,10 +46143,10 @@ function loadLocalMeshSnapshot(dataPath, stateDir, options) {
     }
   }
   const pids = [];
-  if (existsSync30(stateDir)) {
+  if (existsSync32(stateDir)) {
     for (const file of readdirSync11(stateDir).filter((name) => name.endsWith(".pid"))) {
       try {
-        const record = JSON.parse(readFileSync30(join40(stateDir, file), "utf8"));
+        const record = JSON.parse(readFileSync30(join42(stateDir, file), "utf8"));
         pids.push({
           file,
           ...record.role ? { role: record.role } : {},
@@ -46009,8 +46185,8 @@ function loadLocalMeshSnapshot(dataPath, stateDir, options) {
   } else {
     source = "legacy";
   }
-  const telemetryFile = join40(stateDir, "telemetry.jsonl");
-  const spend = existsSync30(telemetryFile) ? readRoutingRecords(telemetryFile) : [];
+  const telemetryFile = join42(stateDir, "telemetry.jsonl");
+  const spend = existsSync32(telemetryFile) ? readRoutingRecords(telemetryFile) : [];
   return {
     source,
     agents: agents.sort((a, b2) => Number(b2.online) - Number(a.online) || a.name.localeCompare(b2.name)),
@@ -46110,16 +46286,16 @@ function applyMeshTuiKey(view, key, itemCount = 0) {
 function copyToClipboard(text) {
   try {
     if (process.platform === "darwin") {
-      const proc = spawnSync7("pbcopy", { input: text, encoding: "utf8", windowsHide: true });
+      const proc = spawnSync8("pbcopy", { input: text, encoding: "utf8", windowsHide: true });
       return proc.status === 0;
     }
     if (process.platform === "win32") {
-      const proc = spawnSync7("clip", { input: text, encoding: "utf8", windowsHide: true });
+      const proc = spawnSync8("clip", { input: text, encoding: "utf8", windowsHide: true });
       return proc.status === 0;
     }
-    const wl = spawnSync7("wl-copy", [text], { encoding: "utf8", windowsHide: true });
+    const wl = spawnSync8("wl-copy", [text], { encoding: "utf8", windowsHide: true });
     if (wl.status === 0) return true;
-    const xclip = spawnSync7("xclip", ["-selection", "clipboard"], { input: text, encoding: "utf8", windowsHide: true });
+    const xclip = spawnSync8("xclip", ["-selection", "clipboard"], { input: text, encoding: "utf8", windowsHide: true });
     return xclip.status === 0;
   } catch {
     return false;
@@ -46127,7 +46303,7 @@ function copyToClipboard(text) {
 }
 function spawnDegradeWorktree(repoRoot, runId, options) {
   const runner = options?.execFn ?? ((cmd, args) => {
-    const res = spawnSync7(cmd, args, {
+    const res = spawnSync8(cmd, args, {
       cwd: repoRoot,
       encoding: "utf8",
       windowsHide: true,
@@ -46144,7 +46320,7 @@ function spawnDegradeWorktree(repoRoot, runId, options) {
   const cleanRunId = runId.replace(/^run_/, "");
   const desc = options?.description ? slugifyBranchPart(options.description, 30) : "degrade";
   const branchName = `kxm/run-${cleanRunId}-${desc}`;
-  const relativeWtPath = join41(".kxm", "worktrees", `run-${cleanRunId}-${desc}`);
+  const relativeWtPath = join43(".kxm", "worktrees", `run-${cleanRunId}-${desc}`);
   const absoluteWtPath = resolve27(repoRoot, relativeWtPath);
   const jumpCommand = `cd "${absoluteWtPath}"`;
   try {
@@ -46911,10 +47087,10 @@ async function runMeshTui(input) {
 }
 
 // plugins/kxm/src/session-work.ts
-import { spawnSync as spawnSync8 } from "node:child_process";
+import { spawnSync as spawnSync9 } from "node:child_process";
 import { randomUUID as randomUUID12 } from "node:crypto";
-import { existsSync as existsSync31, mkdirSync as mkdirSync26, readFileSync as readFileSync31, renameSync as renameSync8, writeFileSync as writeFileSync23 } from "node:fs";
-import { join as join42 } from "node:path";
+import { existsSync as existsSync33, mkdirSync as mkdirSync26, readFileSync as readFileSync31, renameSync as renameSync8, writeFileSync as writeFileSync23 } from "node:fs";
+import { join as join44 } from "node:path";
 init_hub_binding();
 init_telemetry();
 var MAX_SESSION_BRIEF_TASKS = 5;
@@ -46972,10 +47148,10 @@ function formatShipLine(ship) {
 }
 function readGitShip(cwd) {
   try {
-    const dirty = spawnSync8("git", ["-C", cwd, "status", "--porcelain"], { encoding: "utf8", windowsHide: true });
+    const dirty = spawnSync9("git", ["-C", cwd, "status", "--porcelain"], { encoding: "utf8", windowsHide: true });
     if (dirty.status !== 0) return void 0;
     const isDirty = dirty.stdout.trim().length > 0;
-    const upstream = spawnSync8("git", ["-C", cwd, "rev-list", "--count", "@{u}..HEAD"], { encoding: "utf8", windowsHide: true });
+    const upstream = spawnSync9("git", ["-C", cwd, "rev-list", "--count", "@{u}..HEAD"], { encoding: "utf8", windowsHide: true });
     if (upstream.status === 0) {
       return {
         dirty: isDirty,
@@ -46983,9 +47159,9 @@ function readGitShip(cwd) {
       };
     }
     for (const baseRef of ["origin/HEAD", "main", "origin/main", "master", "origin/master"]) {
-      const mb = spawnSync8("git", ["-C", cwd, "merge-base", baseRef, "HEAD"], { encoding: "utf8", windowsHide: true });
+      const mb = spawnSync9("git", ["-C", cwd, "merge-base", baseRef, "HEAD"], { encoding: "utf8", windowsHide: true });
       if (mb.status === 0 && mb.stdout.trim()) {
-        const count = spawnSync8("git", ["-C", cwd, "rev-list", "--count", `${mb.stdout.trim()}..HEAD`], { encoding: "utf8", windowsHide: true });
+        const count = spawnSync9("git", ["-C", cwd, "rev-list", "--count", `${mb.stdout.trim()}..HEAD`], { encoding: "utf8", windowsHide: true });
         if (count.status === 0) {
           return {
             dirty: isDirty,
@@ -47073,9 +47249,9 @@ function buildSessionBrief(snapshot, current, hub, ship, updateLatest, cost, ses
   };
 }
 function readCachedSessionBrief(stateDir) {
-  const file = join42(stateDir, "session-brief.json");
+  const file = join44(stateDir, "session-brief.json");
   try {
-    if (!existsSync31(file)) return void 0;
+    if (!existsSync33(file)) return void 0;
     const raw = readFileSync31(file, "utf8");
     const parsed = JSON.parse(raw);
     if (parsed && parsed.schema === "kxm.session-brief.v1" && typeof parsed.generatedAt === "string") {
@@ -47092,7 +47268,7 @@ function readCachedSessionBrief(stateDir) {
 function writeCachedSessionBrief(stateDir, brief) {
   try {
     mkdirSync26(stateDir, { recursive: true, mode: 448 });
-    const file = join42(stateDir, "session-brief.json");
+    const file = join44(stateDir, "session-brief.json");
     const tmp = `${file}.tmp.${randomUUID12().slice(0, 8)}`;
     writeFileSync23(tmp, JSON.stringify(brief, null, 2), { encoding: "utf8", mode: 384 });
     renameSync8(tmp, file);
@@ -47101,8 +47277,8 @@ function writeCachedSessionBrief(stateDir, brief) {
 }
 function estimateSessionCost(stateDir) {
   try {
-    const telemetryFile = join42(stateDir, "telemetry.jsonl");
-    if (!existsSync31(telemetryFile)) return void 0;
+    const telemetryFile = join44(stateDir, "telemetry.jsonl");
+    if (!existsSync33(telemetryFile)) return void 0;
     const records = readRoutingRecords(telemetryFile);
     if (records.length === 0) return void 0;
     let totalCost = 0;
@@ -47274,11 +47450,11 @@ init_hub_binding();
 
 // plugins/kxm/src/kxm-install-kind.ts
 init_bindings();
-import { existsSync as existsSync32, readFileSync as readFileSync32 } from "node:fs";
-import { dirname as dirname21, join as join43 } from "node:path";
+import { existsSync as existsSync34, readFileSync as readFileSync32 } from "node:fs";
+import { dirname as dirname21, join as join45 } from "node:path";
 function packageIsKxm(root) {
   try {
-    const pkg = JSON.parse(readFileSync32(join43(root, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync32(join45(root, "package.json"), "utf8"));
     return pkg.name === "@kontextmind/kxm";
   } catch {
     return false;
@@ -47327,12 +47503,12 @@ function report(kind, root) {
   return { kind, root, instruction: installKindInstruction(kind, root) };
 }
 function classifyInstallRoot(probe) {
-  const piGitRoot = join43(probe.homeDir, ".pi", "agent", "git");
+  const piGitRoot = join45(probe.homeDir, ".pi", "agent", "git");
   if (isUnder(probe.repoRoot, piGitRoot, probe.platform)) return report("pi-git", probe.repoRoot);
-  const claudeHome = probe.env.CLAUDE_CONFIG_DIR?.trim() || join43(probe.homeDir, ".claude");
-  const pluginsRoot = join43(claudeHome, "plugins");
+  const claudeHome = probe.env.CLAUDE_CONFIG_DIR?.trim() || join45(probe.homeDir, ".claude");
+  const pluginsRoot = join45(claudeHome, "plugins");
   if (isUnder(probe.moduleDir, pluginsRoot, probe.platform)) return report("claude-marketplace", probe.moduleDir);
-  const hasGit = existsSync32(join43(probe.repoRoot, ".git"));
+  const hasGit = existsSync34(join45(probe.repoRoot, ".git"));
   if (hasGit && packageIsKxm(probe.repoRoot)) return report("source", probe.repoRoot);
   if (isNpmPackageLayout(probe.repoRoot, probe.platform) && packageIsKxm(probe.repoRoot) && !hasGit) {
     return report("npm-package", probe.repoRoot);
@@ -47356,12 +47532,12 @@ init_bindings();
 
 // plugins/kxm/src/kxm-update-config.ts
 var import_yaml16 = __toESM(require_dist(), 1);
-import { existsSync as existsSync33, readFileSync as readFileSync33 } from "node:fs";
-import { join as join44 } from "node:path";
+import { existsSync as existsSync35, readFileSync as readFileSync33 } from "node:fs";
+import { join as join46 } from "node:path";
 init_bindings();
 function loadKxmUpdateConfig(env = process.env) {
-  const path4 = join44(kxmUserStateRoot({ env }), "update.yaml");
-  if (!existsSync33(path4)) return { schema: KXM_UPDATE_SCHEMA, auto: false, source: "github" };
+  const path4 = join46(kxmUserStateRoot({ env }), "update.yaml");
+  if (!existsSync35(path4)) return { schema: KXM_UPDATE_SCHEMA, auto: false, source: "github" };
   let parsed;
   try {
     parsed = (0, import_yaml16.parse)(readFileSync33(path4, "utf8"));
@@ -47392,8 +47568,8 @@ function loadKxmUpdateConfig(env = process.env) {
 // plugins/kxm/src/session.ts
 init_protocol();
 init_envelope();
-import { existsSync as existsSync34, mkdirSync as mkdirSync27, readFileSync as readFileSync34, writeFileSync as writeFileSync24 } from "node:fs";
-import { join as join45 } from "node:path";
+import { existsSync as existsSync36, mkdirSync as mkdirSync27, readFileSync as readFileSync34, writeFileSync as writeFileSync24 } from "node:fs";
+import { join as join47 } from "node:path";
 var SESSION_SCHEMA = "kxm.session.v1";
 var SessionConfigError = class extends Error {
   code = "session_config_invalid";
@@ -47403,12 +47579,12 @@ var SessionConfigError = class extends Error {
   }
 };
 function workflowAssetDirs(assetsDir, workflowId) {
-  const root = join45(assetsDir, "workflows", workflowId);
-  return [root, join45(root, "inputs"), join45(root, "outputs"), join45(root, "generated")];
+  const root = join47(assetsDir, "workflows", workflowId);
+  return [root, join47(root, "inputs"), join47(root, "outputs"), join47(root, "generated")];
 }
 function sessionAssetDirs(assetsDir, sessionId) {
-  const root = join45(assetsDir, "sessions", sessionId);
-  return [root, join45(root, "inputs"), join45(root, "outputs")];
+  const root = join47(assetsDir, "sessions", sessionId);
+  return [root, join47(root, "inputs"), join47(root, "outputs")];
 }
 function rosterNames(configDir) {
   return [...loadRosterMap(configDir).values()].map((row) => String(row.name));
@@ -47458,7 +47634,7 @@ function workerFromRosterRow(name, row, project) {
 function loadRosterMap(configDir) {
   const byName = /* @__PURE__ */ new Map();
   for (const [file, key] of [["agents.json", "agents"], ["gates.json", "gates"]]) {
-    const path4 = join45(configDir, file);
+    const path4 = join47(configDir, file);
     for (const row of loadRoster(path4, key)) {
       const name = String(row.name).trim();
       const lowered = name.toLowerCase();
@@ -47472,7 +47648,7 @@ function loadRosterMap(configDir) {
   return byName;
 }
 function loadRoster(path4, key) {
-  if (!existsSync34(path4)) return [];
+  if (!existsSync36(path4)) return [];
   let parsed;
   try {
     parsed = JSON.parse(readFileSync34(path4, "utf8"));
@@ -47500,7 +47676,7 @@ function loadRoster(path4, key) {
   });
 }
 function createSession(input) {
-  const assetDir = input.mode === "workflow" && input.workflowId ? join45("assets", "workflows", input.workflowId) : join45("assets", "sessions", input.id);
+  const assetDir = input.mode === "workflow" && input.workflowId ? join47("assets", "workflows", input.workflowId) : join47("assets", "sessions", input.id);
   return {
     schema: SESSION_SCHEMA,
     id: input.id,
@@ -47513,8 +47689,8 @@ function createSession(input) {
   };
 }
 function writeSession(assetsDir, session, dryRun = false) {
-  const dir = join45(assetsDir, "sessions", session.id);
-  const path4 = join45(dir, "session.json");
+  const dir = join47(assetsDir, "sessions", session.id);
+  const path4 = join47(dir, "session.json");
   if (!dryRun) {
     mkdirSync27(dir, { recursive: true });
     writeFileSync24(path4, `${JSON.stringify(session, null, 2)}
@@ -47570,9 +47746,9 @@ function moduleInstallRoot() {
   }
 }
 function warnIgnoredProjectUpdateYaml(runtime) {
-  const projectFile = join46(runtime.dirs.workspace, "update.yaml");
-  if (!existsSync35(projectFile)) return;
-  const userFile = join46(kxmUserStateRoot({ env: runtime.env }), "update.yaml");
+  const projectFile = join48(runtime.dirs.workspace, "update.yaml");
+  if (!existsSync37(projectFile)) return;
+  const userFile = join48(kxmUserStateRoot({ env: runtime.env }), "update.yaml");
   runtime.io.stderr(`kxm: ignoring .kxm/update.yaml in ${runtime.dirs.workdir}; update settings are read only from ${userFile}
 `);
 }
@@ -47620,7 +47796,7 @@ async function cmdDash(runtime, options = {}) {
     return 2;
   }
   const screen = requested;
-  const dataPath = resolve28(runtime.dirs.workdir, runtime.env.KXM_DATA_PATH?.trim() || join46(runtime.dirs.state, "kxm.db"));
+  const dataPath = resolve28(runtime.dirs.workdir, runtime.env.KXM_DATA_PATH?.trim() || join48(runtime.dirs.state, "kxm.db"));
   if (runtime.dryRun) {
     print(runtime.io, runtime.json, {
       ok: true,
@@ -47666,7 +47842,7 @@ async function cmdHub(runtime) {
         config = loadKxmUpdateConfig(runtime.env);
       } catch (error) {
         if (error instanceof KxmUpdateConfigError) {
-          const yamlPath = join46(kxmUserStateRoot({ env: runtime.env }), "update.yaml");
+          const yamlPath = join48(kxmUserStateRoot({ env: runtime.env }), "update.yaml");
           runtime.io.stderr(`kxm: ${error.message}; update check skipped; fix or remove ${yamlPath}
 `);
         } else {
@@ -47853,7 +48029,7 @@ async function cmdWorker(runtime, options) {
   return await (runtime.io.spawnWorker ?? ((launchEnv) => spawnScript("kxm-worker.mjs", launchEnv)))(extraEnv);
 }
 async function cmdStop(runtime, waitMsFlag) {
-  const pids = existsSync35(runtime.dirs.state) ? readdirSync12(runtime.dirs.state).filter((name) => name.endsWith(".pid")) : [];
+  const pids = existsSync37(runtime.dirs.state) ? readdirSync12(runtime.dirs.state).filter((name) => name.endsWith(".pid")) : [];
   if (runtime.dryRun) {
     print(runtime.io, runtime.json, { ok: true, command: "stop", dryRun: true, pidFiles: pids }, "would signal pid files");
     return 0;
@@ -47868,7 +48044,7 @@ async function cmdStop(runtime, waitMsFlag) {
   const orphans = [];
   for (const file of pids) {
     try {
-      const record = JSON.parse(readFileSync35(join46(runtime.dirs.state, file), "utf8"));
+      const record = JSON.parse(readFileSync35(join48(runtime.dirs.state, file), "utf8"));
       const expectedControl = file === "hub.pid" ? "hub.stop" : file.startsWith("worker-") ? `${file.slice(0, -4)}.stop` : void 0;
       const expectedRole = file === "hub.pid" ? "hub" : file.startsWith("worker-") ? "worker" : void 0;
       if (record.version !== 1 || !Number.isInteger(record.pid) || record.pid <= 0 || !record.startedAt || !expectedControl || record.controlFile !== expectedControl || record.role !== expectedRole) {
@@ -47888,7 +48064,7 @@ async function cmdStop(runtime, waitMsFlag) {
         ignored.push(file);
         continue;
       }
-      writeFileSync25(join46(runtime.dirs.state, record.controlFile), `${JSON.stringify({ startedAt: record.startedAt, ...record.generation ? { generation: record.generation } : {}, requestedAt: (/* @__PURE__ */ new Date()).toISOString() })}
+      writeFileSync25(join48(runtime.dirs.state, record.controlFile), `${JSON.stringify({ startedAt: record.startedAt, ...record.generation ? { generation: record.generation } : {}, requestedAt: (/* @__PURE__ */ new Date()).toISOString() })}
 `, { encoding: "utf8", mode: 384 });
       requested.push(file);
       records.set(file, { pid: record.pid, startedAt: record.startedAt, ...record.generation ? { generation: record.generation } : {} });
@@ -47906,7 +48082,7 @@ async function cmdStop(runtime, waitMsFlag) {
   while (Date.now() <= deadline && stopped.size < requested.length) {
     for (const [file, record] of records) {
       try {
-        const current = JSON.parse(readFileSync35(join46(runtime.dirs.state, file), "utf8"));
+        const current = JSON.parse(readFileSync35(join48(runtime.dirs.state, file), "utf8"));
         if (current.pid !== record.pid || current.startedAt !== record.startedAt || current.generation !== record.generation || !processExists(record.pid)) stopped.add(file);
       } catch {
         stopped.add(file);
@@ -47919,7 +48095,7 @@ async function cmdStop(runtime, waitMsFlag) {
   for (const file of orphans) {
     while (Date.now() <= deadlineOrphans) {
       try {
-        const current = JSON.parse(readFileSync35(join46(runtime.dirs.state, file), "utf8"));
+        const current = JSON.parse(readFileSync35(join48(runtime.dirs.state, file), "utf8"));
         if (!Number.isInteger(current.serverPid) || !processExists(current.serverPid)) break;
       } catch {
         break;
@@ -47927,14 +48103,14 @@ async function cmdStop(runtime, waitMsFlag) {
       await (runtime.io.sleep ?? ((ms) => new Promise((resolveSleep) => setTimeout(resolveSleep, ms))))(100);
     }
     try {
-      const current = JSON.parse(readFileSync35(join46(runtime.dirs.state, file), "utf8"));
+      const current = JSON.parse(readFileSync35(join48(runtime.dirs.state, file), "utf8"));
       if (Number.isInteger(current.serverPid) && processExists(current.serverPid)) {
         try {
           process.kill(current.serverPid, "SIGKILL");
         } catch {
         }
       }
-      rmSync11(join46(runtime.dirs.state, file), { force: true });
+      rmSync11(join48(runtime.dirs.state, file), { force: true });
     } catch {
     }
     stopped.add(file);
@@ -47945,11 +48121,11 @@ async function cmdStop(runtime, waitMsFlag) {
 }
 async function cmdSessionStatus(runtime) {
   const stateDir = runtime.dirs.state;
-  const names3 = existsSync35(stateDir) ? readdirSync12(stateDir) : [];
+  const names3 = existsSync37(stateDir) ? readdirSync12(stateDir) : [];
   const claims = [];
   for (const file of names3.filter((name) => name.endsWith(".pid"))) {
     try {
-      const record = JSON.parse(readFileSync35(join46(stateDir, file), "utf8"));
+      const record = JSON.parse(readFileSync35(join48(stateDir, file), "utf8"));
       claims.push({
         file,
         role: record.role,
@@ -47964,7 +48140,7 @@ async function cmdSessionStatus(runtime) {
   const recoveries = [];
   for (const file of names3.filter((name) => name.startsWith("worker-recovery-") && name.endsWith(".json"))) {
     try {
-      const envelope = JSON.parse(readFileSync35(join46(stateDir, file), "utf8"));
+      const envelope = JSON.parse(readFileSync35(join48(stateDir, file), "utf8"));
       recoveries.push({
         file,
         reason: envelope.reason,
@@ -47990,7 +48166,7 @@ async function cmdSessionStatus(runtime) {
 async function cmdAuthToken(runtime, options = {}) {
   const tokenFile = sessionTokenPath(runtime.env.KXM_USER_CONFIG_DIR);
   if (options.clear && runtime.dryRun) {
-    const present = existsSync35(tokenFile);
+    const present = existsSync37(tokenFile);
     printPlan(runtime, { command: "auth token", cleared: present }, present ? [{ action: "delete", target: tokenFile }] : [], present ? "clear the session token from disk" : "no session token file to clear");
     return 0;
   }
@@ -48079,7 +48255,7 @@ async function cmdSessionBrief(runtime, options = {}) {
     print(runtime.io, runtime.json, { ok: true, command: "session brief", sessionToken }, sessionToken);
     return 0;
   }
-  const dataPath = resolve28(runtime.dirs.workdir, runtime.env.KXM_DATA_PATH?.trim() || join46(runtime.dirs.state, "kxm.db"));
+  const dataPath = resolve28(runtime.dirs.workdir, runtime.env.KXM_DATA_PATH?.trim() || join48(runtime.dirs.state, "kxm.db"));
   const env = {
     ...runtime.env,
     KXM_STATE_DIR: runtime.dirs.state,
@@ -48105,7 +48281,7 @@ async function cmdSessionBrief(runtime, options = {}) {
     writeCache: !runtime.dryRun
   });
   if (runtime.dryRun) {
-    if (!readCachedSessionBrief(runtime.dirs.state)) planned.push({ action: "write", target: join46(runtime.dirs.state, "session-brief.json") });
+    if (!readCachedSessionBrief(runtime.dirs.state)) planned.push({ action: "write", target: join48(runtime.dirs.state, "session-brief.json") });
     print(runtime.io, runtime.json, { ...brief, dryRun: true, planned }, [
       options.status ? brief.statusLine : formatSessionBriefText(brief),
       ...planned.map((change) => `dry run: would ${change.action} ${change.target}`)
@@ -48187,11 +48363,11 @@ init_redact();
 init_telemetry();
 init_routing();
 init_prices();
-import { spawnSync as spawnSync10 } from "node:child_process";
+import { spawnSync as spawnSync11 } from "node:child_process";
 import { createHash as createHash17 } from "node:crypto";
-import { existsSync as existsSync42, mkdtempSync as mkdtempSync3, readFileSync as readFileSync40, rmSync as rmSync13 } from "node:fs";
+import { existsSync as existsSync44, mkdtempSync as mkdtempSync3, readFileSync as readFileSync40, rmSync as rmSync13 } from "node:fs";
 import { tmpdir as tmpdir2 } from "node:os";
-import { basename as basename11, extname as extname3, join as join52, resolve as resolve33 } from "node:path";
+import { basename as basename11, extname as extname3, join as join54, resolve as resolve33 } from "node:path";
 import { createInterface as createInterface3 } from "node:readline";
 
 // plugins/kxm/src/improve.ts
@@ -48199,8 +48375,8 @@ init_routing();
 init_protocol();
 init_relevance();
 import { createHash as createHash16 } from "node:crypto";
-import { existsSync as existsSync36, mkdirSync as mkdirSync29, writeFileSync as writeFileSync26 } from "node:fs";
-import { join as join47, relative as relative7, resolve as resolve29 } from "node:path";
+import { existsSync as existsSync38, mkdirSync as mkdirSync29, writeFileSync as writeFileSync26 } from "node:fs";
+import { join as join49, relative as relative7, resolve as resolve29 } from "node:path";
 var CANDIDATE_SCHEMA = "kxm.candidate.v1";
 var IMPROVEMENT_REPORT_SCHEMA = "kxm.improvement-report.v2";
 function classifyCandidateKind(stepId, agentRole) {
@@ -48456,7 +48632,7 @@ function groupRoutingRecords(records, options = {}) {
 }
 function buildImprovementReport(records, options = {}) {
   const projectRoot = options.projectRoot ? resolve29(options.projectRoot) : process.cwd();
-  const candidatesDir = options.candidatesDir ? resolve29(options.candidatesDir) : join47(projectRoot, ".kxm", "candidates");
+  const candidatesDir = options.candidatesDir ? resolve29(options.candidatesDir) : join49(projectRoot, ".kxm", "candidates");
   const promotionPolicy = options.promotionPolicy ?? "manual_pr";
   const groups = groupRoutingRecords(records, options);
   const candidates = [];
@@ -48470,7 +48646,7 @@ function buildImprovementReport(records, options = {}) {
       group.workflowId
     );
     const diffFileName = `${group.candidateId}.diff`;
-    const diffFilePath = join47(candidatesDir, diffFileName);
+    const diffFilePath = join49(candidatesDir, diffFileName);
     const relDiffPath = relative7(projectRoot, diffFilePath).replace(/\\/g, "/");
     const candidate = {
       schema: CANDIDATE_SCHEMA,
@@ -48492,11 +48668,11 @@ function buildImprovementReport(records, options = {}) {
       createdAt: nowIso()
     };
     if (!options.dryRun) {
-      if (!existsSync36(candidatesDir)) {
+      if (!existsSync38(candidatesDir)) {
         mkdirSync29(candidatesDir, { recursive: true });
       }
       writeFileSync26(diffFilePath, diff, "utf8");
-      const jsonFilePath = join47(candidatesDir, `${group.candidateId}.json`);
+      const jsonFilePath = join49(candidatesDir, `${group.candidateId}.json`);
       writeFileSync26(jsonFilePath, JSON.stringify(candidate, null, 2) + "\n", "utf8");
     }
     candidates.push(candidate);
@@ -48525,7 +48701,7 @@ function buildImprovementReport(records, options = {}) {
 }
 function writeImprovementReport(improvementsDir, report2, dryRun = false) {
   const stamp = report2.createdAt.replace(/[:.]/g, "-");
-  const path4 = join47(improvementsDir, `${stamp}.json`);
+  const path4 = join49(improvementsDir, `${stamp}.json`);
   if (!dryRun) {
     mkdirSync29(improvementsDir, { recursive: true });
     writeFileSync26(path4, `${JSON.stringify(report2, null, 2)}
@@ -48609,7 +48785,7 @@ init_project_config();
 init_runtime_store();
 init_routing();
 init_telemetry();
-import { existsSync as existsSync37 } from "node:fs";
+import { existsSync as existsSync39 } from "node:fs";
 import { resolve as resolve30 } from "node:path";
 var ENGINE_EVENTS_SQL = "SELECT run_id, sequence, event_type, payload FROM events WHERE event_type IN ('routing.attempt.recorded','step.entered','run.status_changed') ORDER BY run_id, sequence";
 var SIMULATED_HARNESS = "driver-simulated";
@@ -48632,7 +48808,7 @@ function readEngineRoutingRecords(path4) {
     undecided: 0,
     duplicatesDropped: 0
   };
-  if (!existsSync37(path4)) return { records: [], source };
+  if (!existsSync39(path4)) return { records: [], source };
   source.exists = true;
   let rows;
   let database;
@@ -48708,7 +48884,7 @@ function readEngineRoutingRecords(path4) {
   };
 }
 function readJsonlSource(kind, path4) {
-  const exists = existsSync37(path4);
+  const exists = existsSync39(path4);
   const records = exists ? readRoutingRecords(path4).map((entry) => entry.routing) : [];
   return { records, source: { kind, path: path4, exists, records: records.length, duplicatesDropped: 0 } };
 }
@@ -48753,8 +48929,8 @@ function loadRoutingSources(options) {
 // plugins/kxm/src/modes.ts
 var import_yaml17 = __toESM(require_dist(), 1);
 init_prices();
-import { existsSync as existsSync38, readFileSync as readFileSync37 } from "node:fs";
-import { join as join48 } from "node:path";
+import { existsSync as existsSync40, readFileSync as readFileSync37 } from "node:fs";
+import { join as join50 } from "node:path";
 var DEFAULT_MODES_CONFIG = Object.freeze({
   schema: "kxm.modes.v1",
   majorModes: {
@@ -48817,8 +48993,8 @@ function loadModesConfig(projectRoot) {
   if (!projectRoot) {
     return DEFAULT_MODES_CONFIG;
   }
-  const modesPath = join48(projectRoot, ".kxm", "modes.yaml");
-  if (!existsSync38(modesPath)) {
+  const modesPath = join50(projectRoot, ".kxm", "modes.yaml");
+  if (!existsSync40(modesPath)) {
     return DEFAULT_MODES_CONFIG;
   }
   try {
@@ -48908,9 +49084,9 @@ function calculatePromptFootprint(resolved, projectRoot = process.cwd(), catalog
     estimatedTokens: estimateTokens(baseSystemPromptChars)
   });
   for (const relPath of resolved.contextFiles) {
-    const fullPath = join48(projectRoot, relPath);
+    const fullPath = join50(projectRoot, relPath);
     let chars = 0;
-    if (existsSync38(fullPath)) {
+    if (existsSync40(fullPath)) {
       try {
         chars = readFileSync37(fullPath, "utf8").length;
       } catch {
@@ -49044,10 +49220,10 @@ ${divider}
 
 // plugins/kxm/src/ssh-remote.ts
 init_safety_integrity();
-import { spawnSync as spawnSync9 } from "node:child_process";
-import { existsSync as existsSync39, mkdirSync as mkdirSync30, readFileSync as readFileSync38, readdirSync as readdirSync13, rmSync as rmSync12, statSync as statSync5 } from "node:fs";
+import { spawnSync as spawnSync10 } from "node:child_process";
+import { existsSync as existsSync41, mkdirSync as mkdirSync30, readFileSync as readFileSync38, readdirSync as readdirSync13, rmSync as rmSync12, statSync as statSync5 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
-import { join as join49, resolve as resolve31 } from "node:path";
+import { join as join51, resolve as resolve31 } from "node:path";
 var MAX_SSH_OUTPUT_BYTES = 50 * 1024;
 var MAX_SSH_OUTPUT_LINES = 2e3;
 var DEFAULT_SOCKET_DIR = ".kxm/run/ssh-sockets";
@@ -49073,8 +49249,8 @@ function truncateSshOutput(raw) {
   return { text, truncated };
 }
 function parseSshConfig(configPath) {
-  const targetPath = configPath ?? join49(homedir8(), ".ssh", "config");
-  if (!existsSync39(targetPath)) {
+  const targetPath = configPath ?? join51(homedir8(), ".ssh", "config");
+  if (!existsSync41(targetPath)) {
     return [];
   }
   try {
@@ -49120,7 +49296,7 @@ function parseSshConfig(configPath) {
     return [];
   }
 }
-function resolveSshHostG(host, execFn = spawnSync9) {
+function resolveSshHostG(host, execFn = spawnSync10) {
   try {
     const result = execFn("ssh", ["-G", host], { encoding: "utf-8" });
     if (result.status !== 0 || !result.stdout) {
@@ -49156,14 +49332,14 @@ function resolveSshHostG(host, execFn = spawnSync9) {
 }
 function ensureSocketDir(socketDir = DEFAULT_SOCKET_DIR) {
   const resolved = resolve31(socketDir);
-  if (!existsSync39(resolved)) {
+  if (!existsSync41(resolved)) {
     mkdirSync30(resolved, { recursive: true, mode: 448 });
   }
   return resolved;
 }
 function buildSshArgs(options) {
   const socketDir = ensureSocketDir(options.socketDir ?? DEFAULT_SOCKET_DIR);
-  const controlPath = join49(socketDir, "%C");
+  const controlPath = join51(socketDir, "%C");
   const persist = options.controlPersist ?? DEFAULT_CONTROL_PERSIST;
   const args = [
     "-o",
@@ -49186,9 +49362,9 @@ function buildSshArgs(options) {
   args.push(options.host);
   return args;
 }
-function checkControlSocket(host, socketDir = DEFAULT_SOCKET_DIR, execFn = spawnSync9) {
+function checkControlSocket(host, socketDir = DEFAULT_SOCKET_DIR, execFn = spawnSync10) {
   const resolvedDir = ensureSocketDir(socketDir);
-  const controlPath = join49(resolvedDir, "%C");
+  const controlPath = join51(resolvedDir, "%C");
   try {
     const result = execFn("ssh", ["-O", "check", "-o", `ControlPath=${controlPath}`, host], {
       encoding: "utf-8"
@@ -49198,9 +49374,9 @@ function checkControlSocket(host, socketDir = DEFAULT_SOCKET_DIR, execFn = spawn
     return false;
   }
 }
-function closeControlSocket(host, socketDir = DEFAULT_SOCKET_DIR, execFn = spawnSync9) {
+function closeControlSocket(host, socketDir = DEFAULT_SOCKET_DIR, execFn = spawnSync10) {
   const resolvedDir = ensureSocketDir(socketDir);
-  const controlPath = join49(resolvedDir, "%C");
+  const controlPath = join51(resolvedDir, "%C");
   try {
     const result = execFn("ssh", ["-O", "stop", "-o", `ControlPath=${controlPath}`, host], {
       encoding: "utf-8"
@@ -49212,7 +49388,7 @@ function closeControlSocket(host, socketDir = DEFAULT_SOCKET_DIR, execFn = spawn
 }
 function executeSshRun(params) {
   const startTime = Date.now();
-  const execSyncFn = params.execFn ?? spawnSync9;
+  const execSyncFn = params.execFn ?? spawnSync10;
   if (params.action === "info") {
     if (params.host) {
       const hostInfo = resolveSshHostG(params.host, execSyncFn);
@@ -49648,9 +49824,9 @@ complete -c kxm -n "__fish_seen_subcommand_from goal" -a "create list get"
 }
 
 // plugins/kxm/src/completion-install.ts
-import { existsSync as existsSync40, mkdirSync as mkdirSync31, readFileSync as readFileSync39, writeFileSync as writeFileSync27 } from "node:fs";
+import { existsSync as existsSync42, mkdirSync as mkdirSync31, readFileSync as readFileSync39, writeFileSync as writeFileSync27 } from "node:fs";
 import { homedir as homedir9 } from "node:os";
-import { basename as basename10, delimiter, dirname as dirname24, isAbsolute as isAbsolute10, join as join50, resolve as resolve32 } from "node:path";
+import { basename as basename10, delimiter, dirname as dirname24, isAbsolute as isAbsolute10, join as join52, resolve as resolve32 } from "node:path";
 var COMPLETION_MARKER = "# kxm completion";
 var PATH_MARKER = "# kxm path";
 function detectShell(env = process.env, platform = process.platform) {
@@ -49672,25 +49848,25 @@ function completionScriptPath(shell, options = {}) {
   const env = options.env ?? process.env;
   const explicit = options.configDir ?? env.KXM_USER_CONFIG_DIR?.trim();
   const base = explicit && explicit.length > 0 ? resolve32(explicit) : resolve32(effectiveHome(options), ".config", "kxm");
-  return join50(base, "completions", `kxm.${shell}`);
+  return join52(base, "completions", `kxm.${shell}`);
 }
 function bashRcCandidate(options) {
   const home = effectiveHome(options);
-  const candidates = [join50(home, ".bashrc"), join50(home, ".bash_profile")];
-  const existing = candidates.find((candidate) => existsSync40(candidate));
+  const candidates = [join52(home, ".bashrc"), join52(home, ".bash_profile")];
+  const existing = candidates.find((candidate) => existsSync42(candidate));
   return existing ?? candidates[0];
 }
 function zshRcCandidate(options) {
   const env = options.env ?? process.env;
   const home = effectiveHome(options);
-  if (env.ZDOTDIR?.trim()) return join50(resolve32(env.ZDOTDIR.trim()), ".zshrc");
-  return join50(home, ".zshrc");
+  if (env.ZDOTDIR?.trim()) return join52(resolve32(env.ZDOTDIR.trim()), ".zshrc");
+  return join52(home, ".zshrc");
 }
 function fishCompletionTarget(shell, options) {
   const env = options.env ?? process.env;
   const home = effectiveHome(options);
-  if (env.XDG_CONFIG_HOME?.trim()) return join50(resolve32(env.XDG_CONFIG_HOME.trim()), "fish", "completions", "kxm.fish");
-  return join50(home, ".config", "fish", "completions", "kxm.fish");
+  if (env.XDG_CONFIG_HOME?.trim()) return join52(resolve32(env.XDG_CONFIG_HOME.trim()), "fish", "completions", "kxm.fish");
+  return join52(home, ".config", "fish", "completions", "kxm.fish");
 }
 function completionRcTarget(shell, options = {}) {
   if (shell === "fish") {
@@ -49722,13 +49898,13 @@ function installShellCompletion(shellInput, options = {}) {
   const scriptPath = completionScriptPath(shell, options);
   const { rcFile } = completionRcTarget(shell, options);
   const script = generateShellCompletion(shell);
-  const existingScript = existsSync40(scriptPath);
+  const existingScript = existsSync42(scriptPath);
   const existingScriptMatches = existingScript && readFileSync39(scriptPath, "utf8") === script;
   let rcModified = false;
   let alreadyInstalled = false;
   if (shell === "fish") {
     const fishTarget = fishCompletionTarget(shell, options);
-    const fishInstalled = existsSync40(fishTarget) && readFileSync39(fishTarget, "utf8") === script;
+    const fishInstalled = existsSync42(fishTarget) && readFileSync39(fishTarget, "utf8") === script;
     alreadyInstalled = fishInstalled;
     if (!options.dryRun && (!fishInstalled || options.overwrite)) {
       mkdirSync31(resolve32(fishTarget, ".."), { recursive: true });
@@ -49745,7 +49921,7 @@ function installShellCompletion(shellInput, options = {}) {
   }
   if (rcFile) {
     const line = sourceLine(shell, scriptPath);
-    const rcContent = existsSync40(rcFile) ? readFileSync39(rcFile, "utf8") : "";
+    const rcContent = existsSync42(rcFile) ? readFileSync39(rcFile, "utf8") : "";
     alreadyInstalled = rcContent.includes(line) || rcContent.includes(`${COMPLETION_MARKER}`);
   }
   if (!options.dryRun) {
@@ -49761,7 +49937,7 @@ ${marker}
 ${line}
 `;
       mkdirSync31(resolve32(rcFile, ".."), { recursive: true });
-      writeFileSync27(rcFile, (existsSync40(rcFile) ? readFileSync39(rcFile, "utf8") : "") + stanza, { encoding: "utf8" });
+      writeFileSync27(rcFile, (existsSync42(rcFile) ? readFileSync39(rcFile, "utf8") : "") + stanza, { encoding: "utf8" });
       rcModified = true;
     }
   }
@@ -49778,13 +49954,13 @@ function kxmBinDir(env = process.env) {
   const argv1 = env.KXM_ENTRY ?? process.argv[1];
   if (argv1 && isAbsolute10(argv1)) {
     const dir = dirname24(argv1);
-    if (existsSync40(join50(dir, process.platform === "win32" ? "kxm.cmd" : "kxm"))) return dir;
+    if (existsSync42(join52(dir, process.platform === "win32" ? "kxm.cmd" : "kxm"))) return dir;
   }
   const pathEnv = env.PATH ?? "";
   for (const part of pathEnv.split(delimiter)) {
     if (!part) continue;
     const candidate = resolve32(part, process.platform === "win32" ? "kxm.cmd" : "kxm");
-    if (existsSync40(candidate)) return resolve32(part);
+    if (existsSync42(candidate)) return resolve32(part);
   }
   return void 0;
 }
@@ -49802,7 +49978,7 @@ function installPathEntry(shellInput, options = {}) {
   }
   const { rcFile } = completionRcTarget(shell, options);
   const line = pathLine(binDir);
-  const rcContent = existsSync40(rcFile ?? "") ? readFileSync39(rcFile, "utf8") : "";
+  const rcContent = existsSync42(rcFile ?? "") ? readFileSync39(rcFile, "utf8") : "";
   const alreadyInstalled = rcContent.includes(binDir) || (options.env?.PATH ?? process.env.PATH ?? "").split(delimiter).includes(binDir);
   if (!options.dryRun && rcFile && !alreadyInstalled) {
     mkdirSync31(dirname24(rcFile), { recursive: true });
@@ -49817,8 +49993,8 @@ ${line}
 // plugins/kxm/src/init-guide-setup.ts
 var import_yaml18 = __toESM(require_dist(), 1);
 init_routes();
-import { existsSync as existsSync41, mkdirSync as mkdirSync32, writeFileSync as writeFileSync28 } from "node:fs";
-import { dirname as dirname25, join as join51 } from "node:path";
+import { existsSync as existsSync43, mkdirSync as mkdirSync32, writeFileSync as writeFileSync28 } from "node:fs";
+import { dirname as dirname25, join as join53 } from "node:path";
 var ADMITTED_GUIDE_BINDINGS = Object.freeze({
   "anthropic/claude-fable-5.1": { harness: "claude", provider: "anthropic", model: "fable" },
   "anthropic/fable": { harness: "claude", provider: "anthropic", model: "fable" },
@@ -50209,13 +50385,13 @@ function renderGuideSetupFiles(projectRoot, plan) {
     const stage = roleStages.get(role);
     if (!stage) continue;
     files.push({
-      path: join51(projectRoot, ".kxm", "agents", `${role}.yaml`),
+      path: join53(projectRoot, ".kxm", "agents", `${role}.yaml`),
       content: (0, import_yaml18.stringify)(agentDocument(role, stage, binding))
     });
   }
   for (const workflow of plan.workflows) {
     files.push({
-      path: join51(projectRoot, ".kxm", "workflows", `${workflow.slug}.yaml`),
+      path: join53(projectRoot, ".kxm", "workflows", `${workflow.slug}.yaml`),
       content: (0, import_yaml18.stringify)(workflowDocument(workflow))
     });
   }
@@ -50232,7 +50408,7 @@ function mergeGuideRouteAdmission(projectRoot, plan) {
   }
   if (added.length === 0) return added;
   policy.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
-  const path4 = join51(projectRoot, ".kxm", "routes.yaml");
+  const path4 = join53(projectRoot, ".kxm", "routes.yaml");
   mkdirSync32(dirname25(path4), { recursive: true });
   writeFileSync28(path4, (0, import_yaml18.stringify)(policy), "utf8");
   return added;
@@ -50241,7 +50417,7 @@ function writeGuideSetupFiles(files) {
   const written = [];
   const existed = [];
   for (const file of files) {
-    if (existsSync41(file.path)) {
+    if (existsSync43(file.path)) {
       existed.push(file.path);
       continue;
     }
@@ -50274,7 +50450,7 @@ init_types();
 init_repo_root();
 function cliSpawn(runtime, command, args, extra) {
   if (runtime.io.spawnSync) return runtime.io.spawnSync(command, args);
-  const result = spawnSync10(command, [...args], {
+  const result = spawnSync11(command, [...args], {
     encoding: "utf8",
     windowsHide: true,
     shell: process.platform === "win32",
@@ -50312,7 +50488,7 @@ function applyKxmPackageUpdate(runtime, notice) {
       detail: `release v${notice.latest} has no sha256 digest for ${name}; refusing to install`
     };
   }
-  const releaseDir = mkdtempSync3(join52(tmpdir2(), "kxm-pkg-update-"));
+  const releaseDir = mkdtempSync3(join54(tmpdir2(), "kxm-pkg-update-"));
   try {
     const planned = planKxmPackageUpdate(notice.source, notice.latest, releaseDir, notice.asset);
     if (runtime.dryRun) {
@@ -50321,7 +50497,7 @@ function applyKxmPackageUpdate(runtime, notice) {
     for (const step of planned) {
       if (step.kind === "verify") {
         if (!verifyReleaseAssetDigest(step.path, step.sha256)) {
-          const actual = existsSync42(step.path) ? createHash17("sha256").update(readFileSync40(step.path)).digest("hex") : "missing";
+          const actual = existsSync44(step.path) ? createHash17("sha256").update(readFileSync40(step.path)).digest("hex") : "missing";
           return {
             ok: false,
             error: "release_digest_mismatch",
@@ -50599,7 +50775,7 @@ async function cmdValidate(runtime, fileFlag) {
   }
   const selectedFile = explicitFile || configuredFile;
   const file = selectedFile ? resolve33(runtime.cwd, selectedFile) : void 0;
-  if (file && !existsSync42(file)) {
+  if (file && !existsSync44(file)) {
     printWorker(runtime, worker, { ok: false, command: "validate", error: "file_not_found", file }, `workflow file not found: ${file}`);
     return 1;
   }
@@ -50699,7 +50875,7 @@ async function cmdImprove(runtime, options = {}) {
     print(runtime.io, runtime.json, { ok: false, command: "improve", error: "config_invalid", detail: message }, `config_invalid: ${message}`);
     return 1;
   }
-  const candidatesDir = options.outDir ? resolve33(runtime.cwd, options.outDir) : join52(root, ".kxm", "candidates");
+  const candidatesDir = options.outDir ? resolve33(runtime.cwd, options.outDir) : join54(root, ".kxm", "candidates");
   const report2 = buildImprovementReport(loaded.records, {
     candidatesDir,
     projectRoot: root,
@@ -50708,7 +50884,7 @@ async function cmdImprove(runtime, options = {}) {
     autoThreshold: config.improvement.autoThreshold,
     halfLifeDays: config.improvement.telemetryHalfLifeDays
   });
-  const reportDir = join52(runtime.dirs.assets, "improvements");
+  const reportDir = join54(runtime.dirs.assets, "improvements");
   const reportPath = writeImprovementReport(reportDir, report2, runtime.dryRun);
   const text = [
     "Sources:",
@@ -50852,7 +51028,7 @@ async function maybeOfferCompletionInstall(runtime) {
   if (!pathNeeded) {
     const scriptPath = completionScriptPath(shell, { env: runtime.env, configDir: runtime.env.KXM_USER_CONFIG_DIR });
     const { rcFile } = completionRcTarget(shell, { env: runtime.env });
-    if (rcFile && existsSync42(rcFile)) {
+    if (rcFile && existsSync44(rcFile)) {
       try {
         if (readFileSync40(rcFile, "utf8").includes(scriptPath)) return;
       } catch {
@@ -51017,7 +51193,7 @@ async function cmdRoutingReport(runtime, options) {
   let catalog;
   if (includeEquivalentListCost) {
     try {
-      const pricesPath = options.prices ? resolve33(runtime.cwd, options.prices) : join52(runtime.dirs.workspace, "prices.yaml");
+      const pricesPath = options.prices ? resolve33(runtime.cwd, options.prices) : join54(runtime.dirs.workspace, "prices.yaml");
       catalog = loadPriceCatalog(pricesPath);
     } catch {
     }
@@ -51131,6 +51307,13 @@ var DRY_RUN_COMMANDS = /* @__PURE__ */ new Set([
   "lane drop",
   "lane run",
   "land",
+  "assign run",
+  "assign witness",
+  "assign plan-current",
+  "assign attribute",
+  "assign observe-cost",
+  "assign accept",
+  "assign change-report",
   "plugin install",
   "plugin",
   "runs status",
@@ -51231,7 +51414,9 @@ var DRY_RUN_COMMANDS = /* @__PURE__ */ new Set([
   "task run",
   "task sync",
   "studio layout",
-  "studio serve"
+  "studio serve",
+  "docs build",
+  "docs serve"
 ]);
 var DryRunRefused = class extends Error {
   code;
@@ -51439,6 +51624,47 @@ function createProgram(ctx, result) {
       ...options.bodyFile !== void 0 ? { bodyFile: options.bodyFile } : {}
     });
   });
+  const assignCmd = addGlobalOptions(program2.command("assign").description("Run this repository's developer assignment runner"));
+  assignCmd.helpCommand("help", "Show assign help");
+  addGlobalOptions(assignCmd.command("run").description("Dispatch a bound assignment manifest")).requiredOption("--manifest <path>", "Absolute path to the assignment manifest").action(async function assignRunAction(options) {
+    result.code = await cmdAssign(runtimeFrom(ctx, this), "run", { manifest: options.manifest });
+  });
+  addGlobalOptions(assignCmd.command("witness").description("Run the fixed verification witness for an existing assignment")).requiredOption("--record-dir <path>", "Absolute path to the assignment record directory").action(async function assignWitnessAction(options) {
+    result.code = await cmdAssign(runtimeFrom(ctx, this), "witness", { recordDir: options.recordDir });
+  });
+  addGlobalOptions(assignCmd.command("plan-current").description("Stamp or advance the current-plan pointer")).requiredOption("--task-dir <path>", "Absolute path to the task directory").requiredOption("--plan <path>", "Absolute path to the plan file").requiredOption("--sha256 <hex>", "SHA-256 of the plan file").requiredOption("--base-commit <sha>", "Base commit the pointer records").requiredOption("--expected-generation <n>", "Generation the pointer must currently have").action(async function assignPlanCurrentAction(options) {
+    result.code = await cmdAssign(runtimeFrom(ctx, this), "plan-current", {
+      taskDir: options.taskDir,
+      plan: options.plan,
+      sha256: options.sha256,
+      baseCommit: options.baseCommit,
+      expectedGeneration: options.expectedGeneration
+    });
+  });
+  addGlobalOptions(assignCmd.command("attribute").description("Attach a private attribution note")).requiredOption("--task-dir <path>", "Absolute path to the task directory").requiredOption("--record-dir <path>", "Absolute path to the assignment record directory").requiredOption("--class <class>", "orchestration, model, environment, or unclassified").requiredOption("--explanation-file <path>", "Absolute path to the note file").action(async function assignAttributeAction(options) {
+    result.code = await cmdAssign(runtimeFrom(ctx, this), "attribute", {
+      taskDir: options.taskDir,
+      recordDir: options.recordDir,
+      classification: options.class,
+      explanationFile: options.explanationFile
+    });
+  });
+  addGlobalOptions(assignCmd.command("observe-cost").description("Import one historical cost observation as cost-only")).requiredOption("--task-dir <path>", "Absolute path to the task directory").requiredOption("--input <path>", "Absolute path to the observation file").action(async function assignObserveCostAction(options) {
+    result.code = await cmdAssign(runtimeFrom(ctx, this), "observe-cost", { taskDir: options.taskDir, input: options.input });
+  });
+  addGlobalOptions(assignCmd.command("accept").description("Bind an exact witnessed commit and two critic PASS records")).requiredOption("--task-dir <path>", "Absolute path to the task directory").requiredOption("--commit <sha>", "Commit to accept").requiredOption("--record-dir <path>", "Absolute path to the writer record directory").requiredOption("--critic <path>", "Absolute path to a critic record directory; pass twice", (value, previous) => previous.concat(value), []).option("--observed-pr <id>", "Observed pull request id").option("--observed-ci <id>", "Observed CI run id").action(async function assignAcceptAction(options) {
+    result.code = await cmdAssign(runtimeFrom(ctx, this), "accept", {
+      taskDir: options.taskDir,
+      commit: options.commit,
+      recordDir: options.recordDir,
+      critics: options.critic,
+      ...options.observedPr !== void 0 ? { observedPr: options.observedPr } : {},
+      ...options.observedCi !== void 0 ? { observedCi: options.observedCi } : {}
+    });
+  });
+  addGlobalOptions(assignCmd.command("change-report").description("Report attempts, rework, costs, and retained verification history")).requiredOption("--task-dir <path>", "Absolute path to the task directory").action(async function assignChangeReportAction(options) {
+    result.code = await cmdAssign(runtimeFrom(ctx, this), "change-report", { taskDir: options.taskDir });
+  });
   addGlobalOptions(program2.command("run").description("Create a KXM run without executing steps; follow its prerequisites, then kxm runs drive <runId> --wait").argument("[workflow]", "Workflow id to run").argument("[prompt...]", "Run prompt (events keep its hash; the full text is kept in a local 0600 sidecar file)").option("--brief <file>", "Read the run prompt from a file instead of the positional prompt").option("--lane <unit>", "Discover the project from this lane's worktree").action(async function runAction(workflow2, promptParts, options) {
     result.code = await cmdKxmRunCli(runtimeFrom(ctx, this), workflow2, promptParts, options);
   }));
@@ -51470,6 +51696,14 @@ function createProgram(ctx, result) {
   addGlobalOptions(runCmd.command("list").description("List recent runs for the current project")).action(async function runListAction() {
     result.code = await cmdKxmRunList(runtimeFrom(ctx, this));
   });
+  const docsCmd = addGlobalOptions(program2.command("docs").description("Build and serve the tailnet docs site"));
+  docsCmd.helpCommand("help", "Show docs help");
+  addGlobalOptions(docsCmd.command("build").description("Regenerate the docs site from the roadmap state")).action(async function docsBuildAction() {
+    result.code = await cmdDocsBuild(runtimeFrom(ctx, this));
+  });
+  addGlobalOptions(docsCmd.command("serve").description("Serve the built docs site on this machine's tailnet address")).option("--port <port>", "Port passed through to the docs server").action(async function docsServeAction(options) {
+    result.code = await cmdDocsServe(runtimeFrom(ctx, this), options);
+  });
   const tenantCmd = addGlobalOptions(program2.command("tenant").description("Composed tenant reads for machine clients (portal)"));
   tenantCmd.helpCommand("help", "Show tenant help");
   addGlobalOptions(tenantCmd.command("status").description("Read hub metadata and authoritative Runtime run state as one labeled view")).action(async function tenantStatusAction() {