@kontextmind/kxm 0.7.122 → 0.7.124

package/plugins/kxm/dist/cli.js

@@ -18560,8 +18560,8 @@ function validateWorkflow(workflow, agents, models, repositories, gates, issues)
       const writable = Object.values(objectValue(step.repositories) ?? {}).filter((access) => access === "write").length;
       if (maxWriteRepositories > writable) issues.push(issue2("semantic", "write_repository_bound_invalid", file, `${stepId} maxWriteRepositories exceeds writable repository scope`));
     }
-    const join55 = objectValue(step.join);
-    const minimumPassed = join55 && typeof join55.minimumPassed === "number" ? join55.minimumPassed : void 0;
+    const join56 = objectValue(step.join);
+    const minimumPassed = join56 && typeof join56.minimumPassed === "number" ? join56.minimumPassed : void 0;
     if (minimumPassed !== void 0 && minimumPassed > maximum) issues.push(issue2("semantic", "join_impossible", file, `${stepId} minimumPassed exceeds assignment maximum`));
     const distinctBy = names(assignment?.distinctBy);
     if (distinctBy.length > 0) {
@@ -20863,7 +20863,7 @@ function compileStep(step, index, stepIndex, requirePlanHash, sink) {
   const maxAttempts = compileCountField(step.maxAttempts, 1, `${id}.maxAttempts`, id, sink);
   const timeoutMs = compileOptionalDuration(step.timeoutMs, `${id}.timeoutMs`, id, sink);
   const assignments = compileAssignments(step, id, agent, sink);
-  const join55 = compileJoin(step, id, sink);
+  const join56 = compileJoin(step, id, sink);
   const requiredEvidence = compileEvidence(step, id, sink);
   const transitions = compileTransitions(step, id, index, stepIndex, sink);
   const outcomes = Object.keys(transitions).sort(compareCodeUnits4);
@@ -20891,7 +20891,7 @@ function compileStep(step, index, stepIndex, requirePlanHash, sink) {
     transitions: orderedTransitions,
     requiresPlanHash: requirePlanHash.includes(id),
     assignments,
-    join: join55
+    join: join56
   };
   if (kind === "agent" || kind === "moa") {
     if (!agent) return void 0;
@@ -20941,15 +20941,15 @@ function compileAssignments(step, stepId, primaryAgentId, sink) {
   };
 }
 function compileJoin(step, stepId, sink) {
-  const join55 = objectValue2(step.join);
-  if (!join55) return { strategy: "all" };
-  const declared = stringValue2(join55.strategy);
+  const join56 = objectValue2(step.join);
+  if (!join56) return { strategy: "all" };
+  const declared = stringValue2(join56.strategy);
   const strategy = declared && JOIN_STRATEGIES.has(declared) ? declared : "all";
-  const minimumPassed = compileOptionalCount(join55.minimumPassed, `${stepId}.join.minimumPassed`, stepId, sink);
+  const minimumPassed = compileOptionalCount(join56.minimumPassed, `${stepId}.join.minimumPassed`, stepId, sink);
   const compiled = {
     strategy,
     ...minimumPassed !== void 0 ? { minimumPassed } : {},
-    ...typeof join55.cancelRemaining === "boolean" ? { cancelRemaining: join55.cancelRemaining } : {}
+    ...typeof join56.cancelRemaining === "boolean" ? { cancelRemaining: join56.cancelRemaining } : {}
   };
   return compiled;
 }
@@ -21375,13 +21375,16 @@ function objectValue3(value) {
 function kxmProjectAdmissionLimits(bundle) {
   const limits = objectValue3(bundle.project.value.limits);
   const maxConcurrentRuns = typeof limits?.maxConcurrentRuns === "number" && Number.isInteger(limits.maxConcurrentRuns) && limits.maxConcurrentRuns >= 1 ? limits.maxConcurrentRuns : 1;
+  const declared = limits?.agentStepTimeoutMs;
+  const agentStepTimeoutMs = typeof declared === "number" && Number.isInteger(declared) && declared >= KXM_MIN_AGENT_STEP_TIMEOUT_MS ? declared : KXM_DEFAULT_AGENT_STEP_TIMEOUT_MS;
   return {
     maxConcurrentRuns,
     ...typeof limits?.maxRunDurationMs === "number" ? { maxRunDurationMs: limits.maxRunDurationMs } : {},
-    ...typeof limits?.maxAgentTimeMs === "number" ? { maxAgentTimeMs: limits.maxAgentTimeMs } : {}
+    ...typeof limits?.maxAgentTimeMs === "number" ? { maxAgentTimeMs: limits.maxAgentTimeMs } : {},
+    agentStepTimeoutMs
   };
 }
-var RUNTIME_EPOCH_NS;
+var KXM_DEFAULT_AGENT_STEP_TIMEOUT_MS, KXM_MIN_AGENT_STEP_TIMEOUT_MS, RUNTIME_EPOCH_NS;
 var init_runtime_service = __esm({
   "plugins/kxm/src/runtime-service.ts"() {
     "use strict";
@@ -21391,6 +21394,8 @@ var init_runtime_service = __esm({
     init_engine_plan();
     init_runtime_owner();
     init_runtime_store();
+    KXM_DEFAULT_AGENT_STEP_TIMEOUT_MS = 36e5;
+    KXM_MIN_AGENT_STEP_TIMEOUT_MS = 6e4;
     RUNTIME_EPOCH_NS = process.hrtime.bigint();
   }
 });
@@ -21400,6 +21405,7 @@ var TEXT_LIMIT, ARGV_LIMIT, RECORD_LIMIT;
 var init_oneshot_evidence = __esm({
   "plugins/kxm/src/oneshot-evidence.ts"() {
     "use strict";
+    init_bindings();
     TEXT_LIMIT = 4 * 1024 * 1024;
     ARGV_LIMIT = 64 * 1024;
     RECORD_LIMIT = 16 * 1024 * 1024;
@@ -23195,6 +23201,15 @@ function resolveProducerRoute(projectRoot, step, agentId) {
   const model = selector.slice(slash + 1);
   return { provider, model, selector };
 }
+function unsupportedAgentStepTimeout(step, limitMs) {
+  if (step.kind !== "agent" && step.kind !== "moa") return void 0;
+  if (step.timeoutMs === void 0 || step.timeoutMs <= limitMs) return void 0;
+  return {
+    reason: "step_unsupported",
+    field: "timeoutMs",
+    detail: "step timeoutMs is wider than project limits.agentStepTimeoutMs"
+  };
+}
 function kxmLiveRunPrerequisites(bundle, workflowId, projectRoot) {
   const workflow = bundle.workflows.get(workflowId);
   if (!workflow) throw runtimeError("run_workflow_unknown", workflowId, `workflow ${workflowId} does not exist in this project`);
@@ -23213,7 +23228,8 @@ function kxmLiveRunPrerequisites(bundle, workflowId, projectRoot) {
     for (const transition2 of Object.values(step.transitions)) {
       if (transition2.to === "step") pending.push(transition2.target);
     }
-    const unsupported = step.kind === "gate" ? unsupportedGateStep(plan, step, envelope, { projectRoot }) ?? starterGatePrerequisite(step, envelope.gates, projectRoot) : unsupportedStep(plan, step, "oneshot");
+    const limitMs = envelope.projectLimits.agentStepTimeoutMs ?? KXM_DEFAULT_AGENT_STEP_TIMEOUT_MS;
+    const unsupported = step.kind === "gate" ? unsupportedGateStep(plan, step, envelope, { projectRoot }) ?? starterGatePrerequisite(step, envelope.gates, projectRoot) : unsupportedAgentStepTimeout(step, limitMs) ?? unsupportedStep(plan, step, "oneshot");
     if (unsupported) {
       prerequisites.push({ ...unsupported, stepId });
       continue;
@@ -23533,6 +23549,7 @@ var init_engine = __esm({
     init_context_packet();
     init_engine_compile();
     init_harness();
+    init_oneshot_evidence();
     init_engine_fold();
     init_engine_plan();
     init_dispatch_context();
@@ -23556,7 +23573,6 @@ var init_oneshot_producer = __esm({
   "plugins/kxm/src/oneshot-producer.ts"() {
     "use strict";
     init_oneshot_evidence();
-    init_bindings();
     init_oneshot_process();
     init_oneshot_process();
     init_harness();
@@ -26990,7 +27006,10 @@ function formatDriveStatusLine(runStatus, drive) {
 }
 function formatRunStatusLine(run, drive) {
   const reason = typeof drive?.receipt?.settlement?.reason === "string" ? drive.receipt.settlement.reason : "";
-  const statusLabel = run.status === "cancelled" ? formatCancelledStatus(reason) : run.status;
+  const handoff = drive?.receipt?.settlement?.handoff;
+  const attemptId = typeof handoff?.attemptId === "string" ? handoff.attemptId : "";
+  const handoffReason = typeof handoff?.reason === "string" ? handoff.reason : "";
+  const statusLabel = run.status === "cancelled" ? formatCancelledStatus(reason) : run.status === "cancelling" && attemptId.length > 0 && handoffReason.length > 0 ? `cancelling (attempt ${attemptId}, ${handoffReason})` : run.status;
   return `run ${run.runId}: ${statusLabel} (workflow ${run.workflowId}, updated ${run.updatedAt})`;
 }
 async function cmdKxmRunStatus(runtime, runId) {
@@ -36612,19 +36631,90 @@ async function cmdPluginInstall(runtime, options) {
   return ok ? 0 : 1;
 }
 
+// plugins/kxm/src/cli/docs.ts
+init_project_config();
+init_types();
+import { spawn as spawn4 } from "node:child_process";
+import { existsSync as existsSync29 } from "node:fs";
+import { join as join35 } from "node:path";
+var GENERATOR = "plans/kxm-roadmap/update-dashboard.mjs";
+var SERVER = "ops/docs-site/serve.py";
+function requireProject(runtime, command) {
+  const root = discoverKxmProjectRoot(runtime.cwd);
+  if (!root) {
+    print(
+      runtime.io,
+      runtime.json,
+      { ok: false, command, error: "project_required" },
+      `kxm ${command} requires a KXM project (run kxm init first)`
+    );
+    return 1;
+  }
+  return root;
+}
+function requireFile(runtime, command, root, relative8, error) {
+  const file = join35(root, relative8);
+  if (existsSync29(file)) return file;
+  print(
+    runtime.io,
+    runtime.json,
+    { ok: false, command, error, path: relative8 },
+    `kxm ${command} requires ${relative8}`
+  );
+  return 1;
+}
+function printCommand(runtime, command, line) {
+  print(
+    runtime.io,
+    runtime.json,
+    { ok: true, command, dryRun: true, detail: line },
+    line
+  );
+  return 0;
+}
+function runInherited(command, args, cwd) {
+  return new Promise((resolveExit) => {
+    const child = spawn4(command, [...args], { cwd, stdio: "inherit" });
+    child.once("error", () => resolveExit(1));
+    child.once("exit", (code) => resolveExit(code ?? 1));
+  });
+}
+async function cmdDocsBuild(runtime) {
+  const command = "docs build";
+  const root = requireProject(runtime, command);
+  if (typeof root === "number") return root;
+  const file = requireFile(runtime, command, root, GENERATOR, "docs_generator_missing");
+  if (typeof file === "number") return file;
+  const line = `node ${GENERATOR}`;
+  if (runtime.dryRun) return printCommand(runtime, command, line);
+  return runInherited(process.execPath, [file], root);
+}
+async function cmdDocsServe(runtime, options = {}) {
+  const command = "docs serve";
+  const root = requireProject(runtime, command);
+  if (typeof root === "number") return root;
+  const file = requireFile(runtime, command, root, SERVER, "docs_server_missing");
+  if (typeof file === "number") return file;
+  const args = [file];
+  if (options.port !== void 0 && options.port !== "") args.push("--port", options.port);
+  const line = ["python3", SERVER, ...args.slice(1)].join(" ");
+  if (runtime.dryRun) return printCommand(runtime, command, line);
+  return runInherited("python3", args, root);
+}
+
 // plugins/kxm/src/cli/lanes.ts
 init_project_config();
 init_runtime_supervisor();
 init_types();
 import { spawnSync as spawnSync6 } from "node:child_process";
-import { chmodSync as chmodSync6, existsSync as existsSync29, mkdirSync as mkdirSync24, readFileSync as readFileSync29, writeFileSync as writeFileSync22 } from "node:fs";
-import { basename as basename8, dirname as dirname18, join as join35, resolve as resolve25 } from "node:path";
+import { chmodSync as chmodSync6, existsSync as existsSync30, mkdirSync as mkdirSync24, readFileSync as readFileSync29, writeFileSync as writeFileSync22 } from "node:fs";
+import { basename as basename8, dirname as dirname18, join as join36, resolve as resolve25 } from "node:path";
 var LANE_SCHEMA = "kxm.lanes.v1";
 var SHA_RE = /^[a-f0-9]{40,64}$/;
 var TIMESTAMP_RE = /^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\.[0-9]{1,9})?Z$/;
 var SETTLED_RUN = /* @__PURE__ */ new Set(["completed", "failed", "cancelled"]);
 function lanesFile(runtime) {
-  return join35(runtime.dirs.state, "lanes.json");
+  return join36(runtime.dirs.state, "lanes.json");
 }
 function gitEnv() {
   return Object.fromEntries(Object.entries(process.env).filter(([name]) => !name.toUpperCase().startsWith("GIT_")));
@@ -36672,7 +36762,7 @@ function isLaneFile(value) {
 }
 function loadLanes(runtime, command) {
   const file = lanesFile(runtime);
-  if (!existsSync29(file)) return { schema: LANE_SCHEMA, lanes: {} };
+  if (!existsSync30(file)) return { schema: LANE_SCHEMA, lanes: {} };
   try {
     const parsed = JSON.parse(readFileSync29(file, "utf8"));
     if (!isLaneFile(parsed)) return refuse(runtime, command, "lanes_unreadable", `lane record ${file} is malformed`);
@@ -36731,7 +36821,7 @@ function withLaneCwd(runtime, unit, command = "lane") {
   const loaded = loadLanes(runtime, command);
   if (typeof loaded === "number") return loaded;
   const lane = loaded.lanes[unit];
-  if (!lane || !existsSync29(lane.path)) {
+  if (!lane || !existsSync30(lane.path)) {
     return refuse(runtime, command, "lane_missing", `lane ${unit} is not recorded or its worktree is absent`, { unit });
   }
   return {
@@ -36802,7 +36892,7 @@ function aheadBehind(path4, baseSha) {
   return { behind: Number(match[1]), ahead: Number(match[2]) };
 }
 function laneView(unit, record) {
-  const exists = existsSync29(record.path);
+  const exists = existsSync30(record.path);
   const counts = exists ? aheadBehind(record.path, record.baseSha) : { ahead: null, behind: null };
   return {
     unit,
@@ -36893,7 +36983,7 @@ async function cmdLaneCreate(runtime, unit, options = {}) {
   const loaded = loadLanes(runtime, command);
   if (typeof loaded === "number") return loaded;
   const path4 = laneWorktreePath(root, unit);
-  if (loaded.lanes[unit] || existsSync29(path4) || branchExists(root, unit)) {
+  if (loaded.lanes[unit] || existsSync30(path4) || branchExists(root, unit)) {
     return refuse(runtime, command, "lane_exists", `lane ${unit} already exists`, { unit });
   }
   const baseSha = resolveBase(root, base);
@@ -36918,7 +37008,7 @@ async function cmdLaneCreate(runtime, unit, options = {}) {
     return refuse(runtime, command, "lane_git_failed", `git worktree add failed: ${added.stderr.trim().slice(0, 300)}`, { unit });
   }
   const recordedPath = discoverKxmProjectRoot(path4) ?? path4;
-  if (!existsSync29(join35(recordedPath, ".kxm", "project.yaml"))) {
+  if (!existsSync30(join36(recordedPath, ".kxm", "project.yaml"))) {
     git2(root, ["worktree", "remove", "--force", path4]);
     return refuse(runtime, command, "lane_not_project", `lane ${recordedPath} has no .kxm/project.yaml; the worktree was removed`, { unit, path: recordedPath });
   }
@@ -36982,7 +37072,7 @@ async function cmdLaneDrop(runtime, unit, options = {}) {
   if (!record) return refuse(runtime, command, "lane_missing", `lane ${unit} is not recorded`, { unit });
   const force = options.force === true;
   if (!force) {
-    if (existsSync29(record.path)) {
+    if (existsSync30(record.path)) {
       const dirty = porcelainCount(record.path);
       if (dirty === null) {
         return refuse(runtime, command, "lane_git_failed", `lane ${unit} worktree status could not be read`, { unit });
@@ -37001,7 +37091,7 @@ async function cmdLaneDrop(runtime, unit, options = {}) {
     ], `drop lane ${unit}; branch ${record.branch} is not deleted`);
     return 0;
   }
-  if (existsSync29(record.path)) {
+  if (existsSync30(record.path)) {
     const removed = git2(root, ["worktree", "remove", ...force ? ["--force"] : [], record.path]);
     if (removed.status !== 0) {
       return refuse(runtime, command, "lane_git_failed", `git worktree remove failed: ${removed.stderr.trim().slice(0, 300)}`, { unit });
@@ -37071,8 +37161,8 @@ async function cmdLaneRun(runtime, unit, options) {
 init_project_config();
 init_repo_root();
 init_types();
-import { spawn as spawn4 } from "node:child_process";
-import { join as join36 } from "node:path";
+import { spawn as spawn5 } from "node:child_process";
+import { join as join37 } from "node:path";
 function childEnv() {
   const env = {};
   for (const [name, value] of Object.entries(process.env)) {
@@ -37091,7 +37181,7 @@ function cmdLand(runtime, options = {}) {
   if (!root) {
     return Promise.resolve(refuse2(runtime, "project_required", "land requires a KXM project (run kxm init first)"));
   }
-  const script = join36(findKxmRepoRoot(import.meta.url), "scripts", "pr-land.mjs");
+  const script = join37(findKxmRepoRoot(import.meta.url), "scripts", "pr-land.mjs");
   const args = [script];
   if (options.pr) args.push("--pr", options.pr);
   if (options.stage) args.push("--stage", options.stage);
@@ -37099,7 +37189,7 @@ function cmdLand(runtime, options = {}) {
   if (runtime.json) args.push("--json");
   if (runtime.dryRun) args.push("--dry-run");
   return new Promise((resolveExit) => {
-    const child = spawn4(process.execPath, args, { cwd: root, env: childEnv(), windowsHide: true });
+    const child = spawn5(process.execPath, args, { cwd: root, env: childEnv(), windowsHide: true });
     child.stdout.on("data", (chunk) => runtime.io.stdout(chunk.toString("utf8")));
     child.stderr.on("data", (chunk) => runtime.io.stderr(chunk.toString("utf8")));
     child.once("error", () => resolveExit(1));
@@ -37111,8 +37201,8 @@ function cmdLand(runtime, options = {}) {
 init_project_config();
 init_types();
 import { spawnSync as spawnSync7 } from "node:child_process";
-import { existsSync as existsSync30 } from "node:fs";
-import { join as join37 } from "node:path";
+import { existsSync as existsSync31 } from "node:fs";
+import { join as join38 } from "node:path";
 var kxmAssignCliSeams = {};
 var RUNNER_REL = "scripts/assignment-run.mjs";
 function refuse3(runtime, command, error, text) {
@@ -37184,7 +37274,7 @@ async function cmdAssign(runtime, subcommand, args) {
   const command = `assign ${subcommand}`;
   const root = discoverKxmProjectRoot(runtime.cwd);
   if (!root) return refuse3(runtime, command, "project_required", `${command} requires a KXM project (run kxm init first)`);
-  if (!existsSync30(join37(root, "scripts", "assignment-run.mjs"))) {
+  if (!existsSync31(join38(root, "scripts", "assignment-run.mjs"))) {
     return refuse3(runtime, command, "assign_runner_missing", `${command} requires scripts/assignment-run.mjs in the project root`);
   }
   const argv = ["node", RUNNER_REL, ...runnerArgv(subcommand, args)];
@@ -37195,7 +37285,7 @@ async function cmdAssign(runtime, subcommand, args) {
 `);
     return 0;
   }
-  const spawn5 = kxmAssignCliSeams.spawn ?? ((commandName, commandArgs, options) => {
+  const spawn6 = kxmAssignCliSeams.spawn ?? ((commandName, commandArgs, options) => {
     const result2 = spawnSync7(commandName, commandArgs, {
       cwd: options.cwd,
       stdio: options.stdio,
@@ -37204,7 +37294,7 @@ async function cmdAssign(runtime, subcommand, args) {
     });
     return { status: result2.status, ...result2.error ? { error: result2.error } : {} };
   });
-  const result = spawn5("node", argv.slice(1), { cwd: root, stdio: "inherit", env: runtime.env });
+  const result = spawn6("node", argv.slice(1), { cwd: root, stdio: "inherit", env: runtime.env });
   if (result.status === null) {
     const detail = result.error?.message ?? "the assignment runner could not be started";
     return refuse3(runtime, command, "assign_spawn_failed", detail);
@@ -37215,8 +37305,8 @@ async function cmdAssign(runtime, subcommand, args) {
 // plugins/kxm/src/cli/hub.ts
 init_redact();
 import { randomUUID as randomUUID13 } from "node:crypto";
-import { existsSync as existsSync36, mkdirSync as mkdirSync28, readFileSync as readFileSync35, readdirSync as readdirSync12, rmSync as rmSync11, writeFileSync as writeFileSync25 } from "node:fs";
-import { join as join47, resolve as resolve28 } from "node:path";
+import { existsSync as existsSync37, mkdirSync as mkdirSync28, readFileSync as readFileSync35, readdirSync as readdirSync12, rmSync as rmSync11, writeFileSync as writeFileSync25 } from "node:fs";
+import { join as join48, resolve as resolve28 } from "node:path";
 init_hub_env();
 init_envelope();
 
@@ -42914,7 +43004,7 @@ import * as path2 from "node:path";
 
 // node_modules/@earendil-works/pi-tui/dist/native-module-path.js
 import { createRequire as createRequire2 } from "node:module";
-import { dirname as dirname19, join as join38 } from "node:path";
+import { dirname as dirname19, join as join39 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var moduleRequire = createRequire2(import.meta.url);
 var TUI_PACKAGE_NAME = "@earendil-works/pi-tui";
@@ -42923,10 +43013,10 @@ function getNativeModuleCandidates(nativePath, options = {}) {
   const candidates = [];
   try {
     const packageEntry = (options.resolvePackage ?? moduleRequire.resolve)(TUI_PACKAGE_NAME);
-    candidates.push(join38(dirname19(packageEntry), "..", nativePath));
+    candidates.push(join39(dirname19(packageEntry), "..", nativePath));
   } catch {
   }
-  candidates.push(join38(moduleDir, "..", nativePath), join38(moduleDir, nativePath), join38(dirname19(options.execPath ?? process.execPath), nativePath));
+  candidates.push(join39(moduleDir, "..", nativePath), join39(moduleDir, nativePath), join39(dirname19(options.execPath ?? process.execPath), nativePath));
   return Array.from(new Set(candidates));
 }
 
@@ -45657,7 +45747,7 @@ var MAX_RENDER_WRITE_CHARS = 1024 * 1024;
 
 // plugins/kxm/src/tui.ts
 import { mkdirSync as mkdirSync25 } from "node:fs";
-import { join as join42, resolve as resolve27, dirname as dirname20 } from "node:path";
+import { join as join43, resolve as resolve27, dirname as dirname20 } from "node:path";
 import { spawnSync as spawnSync8 } from "node:child_process";
 
 // packages/core/tui/src/types/surface.ts
@@ -45801,9 +45891,9 @@ var SHARED_EFFECT_KINDS = Object.freeze([
 // plugins/kxm/src/local-snapshot.ts
 init_sqlite();
 init_telemetry();
-import { existsSync as existsSync31, readdirSync as readdirSync11, readFileSync as readFileSync30 } from "node:fs";
+import { existsSync as existsSync32, readdirSync as readdirSync11, readFileSync as readFileSync30 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
-import { isAbsolute as isAbsolute9, join as join41, resolve as resolve26 } from "node:path";
+import { isAbsolute as isAbsolute9, join as join42, resolve as resolve26 } from "node:path";
 var DEFAULT_BUSY_TIMEOUT_MS = 5e3;
 var RUNTIME_PROJECT_KEY = /^[A-Za-z0-9_-][A-Za-z0-9._-]*$/;
 function processExists2(pid) {
@@ -45928,36 +46018,36 @@ function readOpenMessageMetadata(database, where = OPEN_MESSAGE_WHERE, params =
   return messages;
 }
 function resolveKxmSnapshotPaths(cwd, env = process.env) {
-  const stateDir = env.KXM_STATE_DIR?.trim() || join41(cwd, ".kxm", "state");
+  const stateDir = env.KXM_STATE_DIR?.trim() || join42(cwd, ".kxm", "state");
   const configured = env.KXM_DATA_PATH?.trim();
-  const dataPath = configured ? resolve26(cwd, configured) : join41(stateDir, "kxm.db");
+  const dataPath = configured ? resolve26(cwd, configured) : join42(stateDir, "kxm.db");
   return { dataPath, stateDir };
 }
 function resolveKxmStateRoot(stateDir, options) {
-  if (options?.kxmStateRoot && existsSync31(options.kxmStateRoot)) {
+  if (options?.kxmStateRoot && existsSync32(options.kxmStateRoot)) {
     return resolve26(options.kxmStateRoot);
   }
-  if (existsSync31(join41(stateDir, "runtime", "registry.db")) || existsSync31(join41(stateDir, "runtime", "projects"))) {
+  if (existsSync32(join42(stateDir, "runtime", "registry.db")) || existsSync32(join42(stateDir, "runtime", "projects"))) {
     return stateDir;
   }
   const env = options?.env ?? process.env;
   const explicit = env.KXM_STATE_HOME?.trim() || env.KXM_USER_STATE_DIR?.trim() || env.KXM_STATE_ROOT?.trim();
-  if (explicit && isAbsolute9(explicit) && existsSync31(resolve26(explicit))) {
+  if (explicit && isAbsolute9(explicit) && existsSync32(resolve26(explicit))) {
     return resolve26(explicit);
   }
   let base;
   if (process.platform === "win32") {
     const localAppData = env.LOCALAPPDATA?.trim();
-    base = localAppData && isAbsolute9(localAppData) ? localAppData : join41(homedir6(), "AppData", "Local");
+    base = localAppData && isAbsolute9(localAppData) ? localAppData : join42(homedir6(), "AppData", "Local");
     base = resolve26(base, "KXM");
   } else if (process.platform === "darwin") {
     base = resolve26(homedir6(), "Library", "Application Support", "KXM");
   } else {
     const xdgState = env.XDG_STATE_HOME?.trim();
-    base = xdgState && isAbsolute9(xdgState) ? xdgState : join41(homedir6(), ".local", "state");
+    base = xdgState && isAbsolute9(xdgState) ? xdgState : join42(homedir6(), ".local", "state");
     base = resolve26(base, "kxm");
   }
-  if (existsSync31(base)) return base;
+  if (existsSync32(base)) return base;
   return void 0;
 }
 function readRuntimeRuns(eventDb, projectId) {
@@ -45990,7 +46080,7 @@ function loadLocalMeshSnapshot(dataPath, stateDir, options) {
   let legacyRuns = [];
   let legacyRunTotal = 0;
   let plans = [];
-  if (existsSync31(dataPath)) {
+  if (existsSync32(dataPath)) {
     hasLegacy = true;
     const database = openReadOnlyDatabase(dataPath);
     try {
@@ -46021,11 +46111,11 @@ function loadLocalMeshSnapshot(dataPath, stateDir, options) {
   let kxmRunTotal = 0;
   const kxmStateRoot = scope && !scope.runtimeProjectId ? void 0 : resolveKxmStateRoot(stateDir, options);
   if (kxmStateRoot) {
-    const runtimeDir = join41(kxmStateRoot, "runtime");
-    const registryDbPath = join41(runtimeDir, "registry.db");
-    const projectsDir = join41(runtimeDir, "projects");
+    const runtimeDir = join42(kxmStateRoot, "runtime");
+    const registryDbPath = join42(runtimeDir, "registry.db");
+    const projectsDir = join42(runtimeDir, "projects");
     const projectKeys = /* @__PURE__ */ new Set();
-    if (existsSync31(registryDbPath)) {
+    if (existsSync32(registryDbPath)) {
       hasKxm = true;
       try {
         const regDb = openReadOnlyDatabase(registryDbPath);
@@ -46041,7 +46131,7 @@ function loadLocalMeshSnapshot(dataPath, stateDir, options) {
       } catch {
       }
     }
-    if (!scope && existsSync31(projectsDir)) {
+    if (!scope && existsSync32(projectsDir)) {
       try {
         for (const entry of readdirSync11(projectsDir, { withFileTypes: true })) {
           if (entry.isDirectory()) {
@@ -46053,8 +46143,8 @@ function loadLocalMeshSnapshot(dataPath, stateDir, options) {
     }
     for (const key of projectKeys) {
       if (scope && !RUNTIME_PROJECT_KEY.test(key)) continue;
-      const eventDbPath = join41(projectsDir, key, "run-events.db");
-      if (existsSync31(eventDbPath)) {
+      const eventDbPath = join42(projectsDir, key, "run-events.db");
+      if (existsSync32(eventDbPath)) {
         hasKxm = true;
         try {
           const eventDb = openReadOnlyDatabase(eventDbPath);
@@ -46072,10 +46162,10 @@ function loadLocalMeshSnapshot(dataPath, stateDir, options) {
     }
   }
   const pids = [];
-  if (existsSync31(stateDir)) {
+  if (existsSync32(stateDir)) {
     for (const file of readdirSync11(stateDir).filter((name) => name.endsWith(".pid"))) {
       try {
-        const record = JSON.parse(readFileSync30(join41(stateDir, file), "utf8"));
+        const record = JSON.parse(readFileSync30(join42(stateDir, file), "utf8"));
         pids.push({
           file,
           ...record.role ? { role: record.role } : {},
@@ -46114,8 +46204,8 @@ function loadLocalMeshSnapshot(dataPath, stateDir, options) {
   } else {
     source = "legacy";
   }
-  const telemetryFile = join41(stateDir, "telemetry.jsonl");
-  const spend = existsSync31(telemetryFile) ? readRoutingRecords(telemetryFile) : [];
+  const telemetryFile = join42(stateDir, "telemetry.jsonl");
+  const spend = existsSync32(telemetryFile) ? readRoutingRecords(telemetryFile) : [];
   return {
     source,
     agents: agents.sort((a, b2) => Number(b2.online) - Number(a.online) || a.name.localeCompare(b2.name)),
@@ -46249,7 +46339,7 @@ function spawnDegradeWorktree(repoRoot, runId, options) {
   const cleanRunId = runId.replace(/^run_/, "");
   const desc = options?.description ? slugifyBranchPart(options.description, 30) : "degrade";
   const branchName = `kxm/run-${cleanRunId}-${desc}`;
-  const relativeWtPath = join42(".kxm", "worktrees", `run-${cleanRunId}-${desc}`);
+  const relativeWtPath = join43(".kxm", "worktrees", `run-${cleanRunId}-${desc}`);
   const absoluteWtPath = resolve27(repoRoot, relativeWtPath);
   const jumpCommand = `cd "${absoluteWtPath}"`;
   try {
@@ -47018,8 +47108,8 @@ async function runMeshTui(input) {
 // plugins/kxm/src/session-work.ts
 import { spawnSync as spawnSync9 } from "node:child_process";
 import { randomUUID as randomUUID12 } from "node:crypto";
-import { existsSync as existsSync32, mkdirSync as mkdirSync26, readFileSync as readFileSync31, renameSync as renameSync8, writeFileSync as writeFileSync23 } from "node:fs";
-import { join as join43 } from "node:path";
+import { existsSync as existsSync33, mkdirSync as mkdirSync26, readFileSync as readFileSync31, renameSync as renameSync8, writeFileSync as writeFileSync23 } from "node:fs";
+import { join as join44 } from "node:path";
 init_hub_binding();
 init_telemetry();
 var MAX_SESSION_BRIEF_TASKS = 5;
@@ -47178,9 +47268,9 @@ function buildSessionBrief(snapshot, current, hub, ship, updateLatest, cost, ses
   };
 }
 function readCachedSessionBrief(stateDir) {
-  const file = join43(stateDir, "session-brief.json");
+  const file = join44(stateDir, "session-brief.json");
   try {
-    if (!existsSync32(file)) return void 0;
+    if (!existsSync33(file)) return void 0;
     const raw = readFileSync31(file, "utf8");
     const parsed = JSON.parse(raw);
     if (parsed && parsed.schema === "kxm.session-brief.v1" && typeof parsed.generatedAt === "string") {
@@ -47197,7 +47287,7 @@ function readCachedSessionBrief(stateDir) {
 function writeCachedSessionBrief(stateDir, brief) {
   try {
     mkdirSync26(stateDir, { recursive: true, mode: 448 });
-    const file = join43(stateDir, "session-brief.json");
+    const file = join44(stateDir, "session-brief.json");
     const tmp = `${file}.tmp.${randomUUID12().slice(0, 8)}`;
     writeFileSync23(tmp, JSON.stringify(brief, null, 2), { encoding: "utf8", mode: 384 });
     renameSync8(tmp, file);
@@ -47206,8 +47296,8 @@ function writeCachedSessionBrief(stateDir, brief) {
 }
 function estimateSessionCost(stateDir) {
   try {
-    const telemetryFile = join43(stateDir, "telemetry.jsonl");
-    if (!existsSync32(telemetryFile)) return void 0;
+    const telemetryFile = join44(stateDir, "telemetry.jsonl");
+    if (!existsSync33(telemetryFile)) return void 0;
     const records = readRoutingRecords(telemetryFile);
     if (records.length === 0) return void 0;
     let totalCost = 0;
@@ -47379,11 +47469,11 @@ init_hub_binding();
 
 // plugins/kxm/src/kxm-install-kind.ts
 init_bindings();
-import { existsSync as existsSync33, readFileSync as readFileSync32 } from "node:fs";
-import { dirname as dirname21, join as join44 } from "node:path";
+import { existsSync as existsSync34, readFileSync as readFileSync32 } from "node:fs";
+import { dirname as dirname21, join as join45 } from "node:path";
 function packageIsKxm(root) {
   try {
-    const pkg = JSON.parse(readFileSync32(join44(root, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync32(join45(root, "package.json"), "utf8"));
     return pkg.name === "@kontextmind/kxm";
   } catch {
     return false;
@@ -47432,12 +47522,12 @@ function report(kind, root) {
   return { kind, root, instruction: installKindInstruction(kind, root) };
 }
 function classifyInstallRoot(probe) {
-  const piGitRoot = join44(probe.homeDir, ".pi", "agent", "git");
+  const piGitRoot = join45(probe.homeDir, ".pi", "agent", "git");
   if (isUnder(probe.repoRoot, piGitRoot, probe.platform)) return report("pi-git", probe.repoRoot);
-  const claudeHome = probe.env.CLAUDE_CONFIG_DIR?.trim() || join44(probe.homeDir, ".claude");
-  const pluginsRoot = join44(claudeHome, "plugins");
+  const claudeHome = probe.env.CLAUDE_CONFIG_DIR?.trim() || join45(probe.homeDir, ".claude");
+  const pluginsRoot = join45(claudeHome, "plugins");
   if (isUnder(probe.moduleDir, pluginsRoot, probe.platform)) return report("claude-marketplace", probe.moduleDir);
-  const hasGit = existsSync33(join44(probe.repoRoot, ".git"));
+  const hasGit = existsSync34(join45(probe.repoRoot, ".git"));
   if (hasGit && packageIsKxm(probe.repoRoot)) return report("source", probe.repoRoot);
   if (isNpmPackageLayout(probe.repoRoot, probe.platform) && packageIsKxm(probe.repoRoot) && !hasGit) {
     return report("npm-package", probe.repoRoot);
@@ -47461,12 +47551,12 @@ init_bindings();
 
 // plugins/kxm/src/kxm-update-config.ts
 var import_yaml16 = __toESM(require_dist(), 1);
-import { existsSync as existsSync34, readFileSync as readFileSync33 } from "node:fs";
-import { join as join45 } from "node:path";
+import { existsSync as existsSync35, readFileSync as readFileSync33 } from "node:fs";
+import { join as join46 } from "node:path";
 init_bindings();
 function loadKxmUpdateConfig(env = process.env) {
-  const path4 = join45(kxmUserStateRoot({ env }), "update.yaml");
-  if (!existsSync34(path4)) return { schema: KXM_UPDATE_SCHEMA, auto: false, source: "github" };
+  const path4 = join46(kxmUserStateRoot({ env }), "update.yaml");
+  if (!existsSync35(path4)) return { schema: KXM_UPDATE_SCHEMA, auto: false, source: "github" };
   let parsed;
   try {
     parsed = (0, import_yaml16.parse)(readFileSync33(path4, "utf8"));
@@ -47497,8 +47587,8 @@ function loadKxmUpdateConfig(env = process.env) {
 // plugins/kxm/src/session.ts
 init_protocol();
 init_envelope();
-import { existsSync as existsSync35, mkdirSync as mkdirSync27, readFileSync as readFileSync34, writeFileSync as writeFileSync24 } from "node:fs";
-import { join as join46 } from "node:path";
+import { existsSync as existsSync36, mkdirSync as mkdirSync27, readFileSync as readFileSync34, writeFileSync as writeFileSync24 } from "node:fs";
+import { join as join47 } from "node:path";
 var SESSION_SCHEMA = "kxm.session.v1";
 var SessionConfigError = class extends Error {
   code = "session_config_invalid";
@@ -47508,12 +47598,12 @@ var SessionConfigError = class extends Error {
   }
 };
 function workflowAssetDirs(assetsDir, workflowId) {
-  const root = join46(assetsDir, "workflows", workflowId);
-  return [root, join46(root, "inputs"), join46(root, "outputs"), join46(root, "generated")];
+  const root = join47(assetsDir, "workflows", workflowId);
+  return [root, join47(root, "inputs"), join47(root, "outputs"), join47(root, "generated")];
 }
 function sessionAssetDirs(assetsDir, sessionId) {
-  const root = join46(assetsDir, "sessions", sessionId);
-  return [root, join46(root, "inputs"), join46(root, "outputs")];
+  const root = join47(assetsDir, "sessions", sessionId);
+  return [root, join47(root, "inputs"), join47(root, "outputs")];
 }
 function rosterNames(configDir) {
   return [...loadRosterMap(configDir).values()].map((row) => String(row.name));
@@ -47563,7 +47653,7 @@ function workerFromRosterRow(name, row, project) {
 function loadRosterMap(configDir) {
   const byName = /* @__PURE__ */ new Map();
   for (const [file, key] of [["agents.json", "agents"], ["gates.json", "gates"]]) {
-    const path4 = join46(configDir, file);
+    const path4 = join47(configDir, file);
     for (const row of loadRoster(path4, key)) {
       const name = String(row.name).trim();
       const lowered = name.toLowerCase();
@@ -47577,7 +47667,7 @@ function loadRosterMap(configDir) {
   return byName;
 }
 function loadRoster(path4, key) {
-  if (!existsSync35(path4)) return [];
+  if (!existsSync36(path4)) return [];
   let parsed;
   try {
     parsed = JSON.parse(readFileSync34(path4, "utf8"));
@@ -47605,7 +47695,7 @@ function loadRoster(path4, key) {
   });
 }
 function createSession(input) {
-  const assetDir = input.mode === "workflow" && input.workflowId ? join46("assets", "workflows", input.workflowId) : join46("assets", "sessions", input.id);
+  const assetDir = input.mode === "workflow" && input.workflowId ? join47("assets", "workflows", input.workflowId) : join47("assets", "sessions", input.id);
   return {
     schema: SESSION_SCHEMA,
     id: input.id,
@@ -47618,8 +47708,8 @@ function createSession(input) {
   };
 }
 function writeSession(assetsDir, session, dryRun = false) {
-  const dir = join46(assetsDir, "sessions", session.id);
-  const path4 = join46(dir, "session.json");
+  const dir = join47(assetsDir, "sessions", session.id);
+  const path4 = join47(dir, "session.json");
   if (!dryRun) {
     mkdirSync27(dir, { recursive: true });
     writeFileSync24(path4, `${JSON.stringify(session, null, 2)}
@@ -47675,9 +47765,9 @@ function moduleInstallRoot() {
   }
 }
 function warnIgnoredProjectUpdateYaml(runtime) {
-  const projectFile = join47(runtime.dirs.workspace, "update.yaml");
-  if (!existsSync36(projectFile)) return;
-  const userFile = join47(kxmUserStateRoot({ env: runtime.env }), "update.yaml");
+  const projectFile = join48(runtime.dirs.workspace, "update.yaml");
+  if (!existsSync37(projectFile)) return;
+  const userFile = join48(kxmUserStateRoot({ env: runtime.env }), "update.yaml");
   runtime.io.stderr(`kxm: ignoring .kxm/update.yaml in ${runtime.dirs.workdir}; update settings are read only from ${userFile}
 `);
 }
@@ -47725,7 +47815,7 @@ async function cmdDash(runtime, options = {}) {
     return 2;
   }
   const screen = requested;
-  const dataPath = resolve28(runtime.dirs.workdir, runtime.env.KXM_DATA_PATH?.trim() || join47(runtime.dirs.state, "kxm.db"));
+  const dataPath = resolve28(runtime.dirs.workdir, runtime.env.KXM_DATA_PATH?.trim() || join48(runtime.dirs.state, "kxm.db"));
   if (runtime.dryRun) {
     print(runtime.io, runtime.json, {
       ok: true,
@@ -47771,7 +47861,7 @@ async function cmdHub(runtime) {
         config = loadKxmUpdateConfig(runtime.env);
       } catch (error) {
         if (error instanceof KxmUpdateConfigError) {
-          const yamlPath = join47(kxmUserStateRoot({ env: runtime.env }), "update.yaml");
+          const yamlPath = join48(kxmUserStateRoot({ env: runtime.env }), "update.yaml");
           runtime.io.stderr(`kxm: ${error.message}; update check skipped; fix or remove ${yamlPath}
 `);
         } else {
@@ -47958,7 +48048,7 @@ async function cmdWorker(runtime, options) {
   return await (runtime.io.spawnWorker ?? ((launchEnv) => spawnScript("kxm-worker.mjs", launchEnv)))(extraEnv);
 }
 async function cmdStop(runtime, waitMsFlag) {
-  const pids = existsSync36(runtime.dirs.state) ? readdirSync12(runtime.dirs.state).filter((name) => name.endsWith(".pid")) : [];
+  const pids = existsSync37(runtime.dirs.state) ? readdirSync12(runtime.dirs.state).filter((name) => name.endsWith(".pid")) : [];
   if (runtime.dryRun) {
     print(runtime.io, runtime.json, { ok: true, command: "stop", dryRun: true, pidFiles: pids }, "would signal pid files");
     return 0;
@@ -47973,7 +48063,7 @@ async function cmdStop(runtime, waitMsFlag) {
   const orphans = [];
   for (const file of pids) {
     try {
-      const record = JSON.parse(readFileSync35(join47(runtime.dirs.state, file), "utf8"));
+      const record = JSON.parse(readFileSync35(join48(runtime.dirs.state, file), "utf8"));
       const expectedControl = file === "hub.pid" ? "hub.stop" : file.startsWith("worker-") ? `${file.slice(0, -4)}.stop` : void 0;
       const expectedRole = file === "hub.pid" ? "hub" : file.startsWith("worker-") ? "worker" : void 0;
       if (record.version !== 1 || !Number.isInteger(record.pid) || record.pid <= 0 || !record.startedAt || !expectedControl || record.controlFile !== expectedControl || record.role !== expectedRole) {
@@ -47993,7 +48083,7 @@ async function cmdStop(runtime, waitMsFlag) {
         ignored.push(file);
         continue;
       }
-      writeFileSync25(join47(runtime.dirs.state, record.controlFile), `${JSON.stringify({ startedAt: record.startedAt, ...record.generation ? { generation: record.generation } : {}, requestedAt: (/* @__PURE__ */ new Date()).toISOString() })}
+      writeFileSync25(join48(runtime.dirs.state, record.controlFile), `${JSON.stringify({ startedAt: record.startedAt, ...record.generation ? { generation: record.generation } : {}, requestedAt: (/* @__PURE__ */ new Date()).toISOString() })}
 `, { encoding: "utf8", mode: 384 });
       requested.push(file);
       records.set(file, { pid: record.pid, startedAt: record.startedAt, ...record.generation ? { generation: record.generation } : {} });
@@ -48011,7 +48101,7 @@ async function cmdStop(runtime, waitMsFlag) {
   while (Date.now() <= deadline && stopped.size < requested.length) {
     for (const [file, record] of records) {
       try {
-        const current = JSON.parse(readFileSync35(join47(runtime.dirs.state, file), "utf8"));
+        const current = JSON.parse(readFileSync35(join48(runtime.dirs.state, file), "utf8"));
         if (current.pid !== record.pid || current.startedAt !== record.startedAt || current.generation !== record.generation || !processExists(record.pid)) stopped.add(file);
       } catch {
         stopped.add(file);
@@ -48024,7 +48114,7 @@ async function cmdStop(runtime, waitMsFlag) {
   for (const file of orphans) {
     while (Date.now() <= deadlineOrphans) {
       try {
-        const current = JSON.parse(readFileSync35(join47(runtime.dirs.state, file), "utf8"));
+        const current = JSON.parse(readFileSync35(join48(runtime.dirs.state, file), "utf8"));
         if (!Number.isInteger(current.serverPid) || !processExists(current.serverPid)) break;
       } catch {
         break;
@@ -48032,14 +48122,14 @@ async function cmdStop(runtime, waitMsFlag) {
       await (runtime.io.sleep ?? ((ms) => new Promise((resolveSleep) => setTimeout(resolveSleep, ms))))(100);
     }
     try {
-      const current = JSON.parse(readFileSync35(join47(runtime.dirs.state, file), "utf8"));
+      const current = JSON.parse(readFileSync35(join48(runtime.dirs.state, file), "utf8"));
       if (Number.isInteger(current.serverPid) && processExists(current.serverPid)) {
         try {
           process.kill(current.serverPid, "SIGKILL");
         } catch {
         }
       }
-      rmSync11(join47(runtime.dirs.state, file), { force: true });
+      rmSync11(join48(runtime.dirs.state, file), { force: true });
     } catch {
     }
     stopped.add(file);
@@ -48050,11 +48140,11 @@ async function cmdStop(runtime, waitMsFlag) {
 }
 async function cmdSessionStatus(runtime) {
   const stateDir = runtime.dirs.state;
-  const names3 = existsSync36(stateDir) ? readdirSync12(stateDir) : [];
+  const names3 = existsSync37(stateDir) ? readdirSync12(stateDir) : [];
   const claims = [];
   for (const file of names3.filter((name) => name.endsWith(".pid"))) {
     try {
-      const record = JSON.parse(readFileSync35(join47(stateDir, file), "utf8"));
+      const record = JSON.parse(readFileSync35(join48(stateDir, file), "utf8"));
       claims.push({
         file,
         role: record.role,
@@ -48069,7 +48159,7 @@ async function cmdSessionStatus(runtime) {
   const recoveries = [];
   for (const file of names3.filter((name) => name.startsWith("worker-recovery-") && name.endsWith(".json"))) {
     try {
-      const envelope = JSON.parse(readFileSync35(join47(stateDir, file), "utf8"));
+      const envelope = JSON.parse(readFileSync35(join48(stateDir, file), "utf8"));
       recoveries.push({
         file,
         reason: envelope.reason,
@@ -48095,7 +48185,7 @@ async function cmdSessionStatus(runtime) {
 async function cmdAuthToken(runtime, options = {}) {
   const tokenFile = sessionTokenPath(runtime.env.KXM_USER_CONFIG_DIR);
   if (options.clear && runtime.dryRun) {
-    const present = existsSync36(tokenFile);
+    const present = existsSync37(tokenFile);
     printPlan(runtime, { command: "auth token", cleared: present }, present ? [{ action: "delete", target: tokenFile }] : [], present ? "clear the session token from disk" : "no session token file to clear");
     return 0;
   }
@@ -48184,7 +48274,7 @@ async function cmdSessionBrief(runtime, options = {}) {
     print(runtime.io, runtime.json, { ok: true, command: "session brief", sessionToken }, sessionToken);
     return 0;
   }
-  const dataPath = resolve28(runtime.dirs.workdir, runtime.env.KXM_DATA_PATH?.trim() || join47(runtime.dirs.state, "kxm.db"));
+  const dataPath = resolve28(runtime.dirs.workdir, runtime.env.KXM_DATA_PATH?.trim() || join48(runtime.dirs.state, "kxm.db"));
   const env = {
     ...runtime.env,
     KXM_STATE_DIR: runtime.dirs.state,
@@ -48210,7 +48300,7 @@ async function cmdSessionBrief(runtime, options = {}) {
     writeCache: !runtime.dryRun
   });
   if (runtime.dryRun) {
-    if (!readCachedSessionBrief(runtime.dirs.state)) planned.push({ action: "write", target: join47(runtime.dirs.state, "session-brief.json") });
+    if (!readCachedSessionBrief(runtime.dirs.state)) planned.push({ action: "write", target: join48(runtime.dirs.state, "session-brief.json") });
     print(runtime.io, runtime.json, { ...brief, dryRun: true, planned }, [
       options.status ? brief.statusLine : formatSessionBriefText(brief),
       ...planned.map((change) => `dry run: would ${change.action} ${change.target}`)
@@ -48294,9 +48384,9 @@ init_routing();
 init_prices();
 import { spawnSync as spawnSync11 } from "node:child_process";
 import { createHash as createHash17 } from "node:crypto";
-import { existsSync as existsSync43, mkdtempSync as mkdtempSync3, readFileSync as readFileSync40, rmSync as rmSync13 } from "node:fs";
+import { existsSync as existsSync44, mkdtempSync as mkdtempSync3, readFileSync as readFileSync40, rmSync as rmSync13 } from "node:fs";
 import { tmpdir as tmpdir2 } from "node:os";
-import { basename as basename11, extname as extname3, join as join53, resolve as resolve33 } from "node:path";
+import { basename as basename11, extname as extname3, join as join54, resolve as resolve33 } from "node:path";
 import { createInterface as createInterface3 } from "node:readline";
 
 // plugins/kxm/src/improve.ts
@@ -48304,8 +48394,8 @@ init_routing();
 init_protocol();
 init_relevance();
 import { createHash as createHash16 } from "node:crypto";
-import { existsSync as existsSync37, mkdirSync as mkdirSync29, writeFileSync as writeFileSync26 } from "node:fs";
-import { join as join48, relative as relative7, resolve as resolve29 } from "node:path";
+import { existsSync as existsSync38, mkdirSync as mkdirSync29, writeFileSync as writeFileSync26 } from "node:fs";
+import { join as join49, relative as relative7, resolve as resolve29 } from "node:path";
 var CANDIDATE_SCHEMA = "kxm.candidate.v1";
 var IMPROVEMENT_REPORT_SCHEMA = "kxm.improvement-report.v2";
 function classifyCandidateKind(stepId, agentRole) {
@@ -48561,7 +48651,7 @@ function groupRoutingRecords(records, options = {}) {
 }
 function buildImprovementReport(records, options = {}) {
   const projectRoot = options.projectRoot ? resolve29(options.projectRoot) : process.cwd();
-  const candidatesDir = options.candidatesDir ? resolve29(options.candidatesDir) : join48(projectRoot, ".kxm", "candidates");
+  const candidatesDir = options.candidatesDir ? resolve29(options.candidatesDir) : join49(projectRoot, ".kxm", "candidates");
   const promotionPolicy = options.promotionPolicy ?? "manual_pr";
   const groups = groupRoutingRecords(records, options);
   const candidates = [];
@@ -48575,7 +48665,7 @@ function buildImprovementReport(records, options = {}) {
       group.workflowId
     );
     const diffFileName = `${group.candidateId}.diff`;
-    const diffFilePath = join48(candidatesDir, diffFileName);
+    const diffFilePath = join49(candidatesDir, diffFileName);
     const relDiffPath = relative7(projectRoot, diffFilePath).replace(/\\/g, "/");
     const candidate = {
       schema: CANDIDATE_SCHEMA,
@@ -48597,11 +48687,11 @@ function buildImprovementReport(records, options = {}) {
       createdAt: nowIso()
     };
     if (!options.dryRun) {
-      if (!existsSync37(candidatesDir)) {
+      if (!existsSync38(candidatesDir)) {
         mkdirSync29(candidatesDir, { recursive: true });
       }
       writeFileSync26(diffFilePath, diff, "utf8");
-      const jsonFilePath = join48(candidatesDir, `${group.candidateId}.json`);
+      const jsonFilePath = join49(candidatesDir, `${group.candidateId}.json`);
       writeFileSync26(jsonFilePath, JSON.stringify(candidate, null, 2) + "\n", "utf8");
     }
     candidates.push(candidate);
@@ -48630,7 +48720,7 @@ function buildImprovementReport(records, options = {}) {
 }
 function writeImprovementReport(improvementsDir, report2, dryRun = false) {
   const stamp = report2.createdAt.replace(/[:.]/g, "-");
-  const path4 = join48(improvementsDir, `${stamp}.json`);
+  const path4 = join49(improvementsDir, `${stamp}.json`);
   if (!dryRun) {
     mkdirSync29(improvementsDir, { recursive: true });
     writeFileSync26(path4, `${JSON.stringify(report2, null, 2)}
@@ -48714,7 +48804,7 @@ init_project_config();
 init_runtime_store();
 init_routing();
 init_telemetry();
-import { existsSync as existsSync38 } from "node:fs";
+import { existsSync as existsSync39 } from "node:fs";
 import { resolve as resolve30 } from "node:path";
 var ENGINE_EVENTS_SQL = "SELECT run_id, sequence, event_type, payload FROM events WHERE event_type IN ('routing.attempt.recorded','step.entered','run.status_changed') ORDER BY run_id, sequence";
 var SIMULATED_HARNESS = "driver-simulated";
@@ -48737,7 +48827,7 @@ function readEngineRoutingRecords(path4) {
     undecided: 0,
     duplicatesDropped: 0
   };
-  if (!existsSync38(path4)) return { records: [], source };
+  if (!existsSync39(path4)) return { records: [], source };
   source.exists = true;
   let rows;
   let database;
@@ -48813,7 +48903,7 @@ function readEngineRoutingRecords(path4) {
   };
 }
 function readJsonlSource(kind, path4) {
-  const exists = existsSync38(path4);
+  const exists = existsSync39(path4);
   const records = exists ? readRoutingRecords(path4).map((entry) => entry.routing) : [];
   return { records, source: { kind, path: path4, exists, records: records.length, duplicatesDropped: 0 } };
 }
@@ -48858,8 +48948,8 @@ function loadRoutingSources(options) {
 // plugins/kxm/src/modes.ts
 var import_yaml17 = __toESM(require_dist(), 1);
 init_prices();
-import { existsSync as existsSync39, readFileSync as readFileSync37 } from "node:fs";
-import { join as join49 } from "node:path";
+import { existsSync as existsSync40, readFileSync as readFileSync37 } from "node:fs";
+import { join as join50 } from "node:path";
 var DEFAULT_MODES_CONFIG = Object.freeze({
   schema: "kxm.modes.v1",
   majorModes: {
@@ -48922,8 +49012,8 @@ function loadModesConfig(projectRoot) {
   if (!projectRoot) {
     return DEFAULT_MODES_CONFIG;
   }
-  const modesPath = join49(projectRoot, ".kxm", "modes.yaml");
-  if (!existsSync39(modesPath)) {
+  const modesPath = join50(projectRoot, ".kxm", "modes.yaml");
+  if (!existsSync40(modesPath)) {
     return DEFAULT_MODES_CONFIG;
   }
   try {
@@ -49013,9 +49103,9 @@ function calculatePromptFootprint(resolved, projectRoot = process.cwd(), catalog
     estimatedTokens: estimateTokens(baseSystemPromptChars)
   });
   for (const relPath of resolved.contextFiles) {
-    const fullPath = join49(projectRoot, relPath);
+    const fullPath = join50(projectRoot, relPath);
     let chars = 0;
-    if (existsSync39(fullPath)) {
+    if (existsSync40(fullPath)) {
       try {
         chars = readFileSync37(fullPath, "utf8").length;
       } catch {
@@ -49150,9 +49240,9 @@ ${divider}
 // plugins/kxm/src/ssh-remote.ts
 init_safety_integrity();
 import { spawnSync as spawnSync10 } from "node:child_process";
-import { existsSync as existsSync40, mkdirSync as mkdirSync30, readFileSync as readFileSync38, readdirSync as readdirSync13, rmSync as rmSync12, statSync as statSync5 } from "node:fs";
+import { existsSync as existsSync41, mkdirSync as mkdirSync30, readFileSync as readFileSync38, readdirSync as readdirSync13, rmSync as rmSync12, statSync as statSync5 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
-import { join as join50, resolve as resolve31 } from "node:path";
+import { join as join51, resolve as resolve31 } from "node:path";
 var MAX_SSH_OUTPUT_BYTES = 50 * 1024;
 var MAX_SSH_OUTPUT_LINES = 2e3;
 var DEFAULT_SOCKET_DIR = ".kxm/run/ssh-sockets";
@@ -49178,8 +49268,8 @@ function truncateSshOutput(raw) {
   return { text, truncated };
 }
 function parseSshConfig(configPath) {
-  const targetPath = configPath ?? join50(homedir8(), ".ssh", "config");
-  if (!existsSync40(targetPath)) {
+  const targetPath = configPath ?? join51(homedir8(), ".ssh", "config");
+  if (!existsSync41(targetPath)) {
     return [];
   }
   try {
@@ -49261,14 +49351,14 @@ function resolveSshHostG(host, execFn = spawnSync10) {
 }
 function ensureSocketDir(socketDir = DEFAULT_SOCKET_DIR) {
   const resolved = resolve31(socketDir);
-  if (!existsSync40(resolved)) {
+  if (!existsSync41(resolved)) {
     mkdirSync30(resolved, { recursive: true, mode: 448 });
   }
   return resolved;
 }
 function buildSshArgs(options) {
   const socketDir = ensureSocketDir(options.socketDir ?? DEFAULT_SOCKET_DIR);
-  const controlPath = join50(socketDir, "%C");
+  const controlPath = join51(socketDir, "%C");
   const persist = options.controlPersist ?? DEFAULT_CONTROL_PERSIST;
   const args = [
     "-o",
@@ -49293,7 +49383,7 @@ function buildSshArgs(options) {
 }
 function checkControlSocket(host, socketDir = DEFAULT_SOCKET_DIR, execFn = spawnSync10) {
   const resolvedDir = ensureSocketDir(socketDir);
-  const controlPath = join50(resolvedDir, "%C");
+  const controlPath = join51(resolvedDir, "%C");
   try {
     const result = execFn("ssh", ["-O", "check", "-o", `ControlPath=${controlPath}`, host], {
       encoding: "utf-8"
@@ -49305,7 +49395,7 @@ function checkControlSocket(host, socketDir = DEFAULT_SOCKET_DIR, execFn = spawn
 }
 function closeControlSocket(host, socketDir = DEFAULT_SOCKET_DIR, execFn = spawnSync10) {
   const resolvedDir = ensureSocketDir(socketDir);
-  const controlPath = join50(resolvedDir, "%C");
+  const controlPath = join51(resolvedDir, "%C");
   try {
     const result = execFn("ssh", ["-O", "stop", "-o", `ControlPath=${controlPath}`, host], {
       encoding: "utf-8"
@@ -49753,9 +49843,9 @@ complete -c kxm -n "__fish_seen_subcommand_from goal" -a "create list get"
 }
 
 // plugins/kxm/src/completion-install.ts
-import { existsSync as existsSync41, mkdirSync as mkdirSync31, readFileSync as readFileSync39, writeFileSync as writeFileSync27 } from "node:fs";
+import { existsSync as existsSync42, mkdirSync as mkdirSync31, readFileSync as readFileSync39, writeFileSync as writeFileSync27 } from "node:fs";
 import { homedir as homedir9 } from "node:os";
-import { basename as basename10, delimiter, dirname as dirname24, isAbsolute as isAbsolute10, join as join51, resolve as resolve32 } from "node:path";
+import { basename as basename10, delimiter, dirname as dirname24, isAbsolute as isAbsolute10, join as join52, resolve as resolve32 } from "node:path";
 var COMPLETION_MARKER = "# kxm completion";
 var PATH_MARKER = "# kxm path";
 function detectShell(env = process.env, platform = process.platform) {
@@ -49777,25 +49867,25 @@ function completionScriptPath(shell, options = {}) {
   const env = options.env ?? process.env;
   const explicit = options.configDir ?? env.KXM_USER_CONFIG_DIR?.trim();
   const base = explicit && explicit.length > 0 ? resolve32(explicit) : resolve32(effectiveHome(options), ".config", "kxm");
-  return join51(base, "completions", `kxm.${shell}`);
+  return join52(base, "completions", `kxm.${shell}`);
 }
 function bashRcCandidate(options) {
   const home = effectiveHome(options);
-  const candidates = [join51(home, ".bashrc"), join51(home, ".bash_profile")];
-  const existing = candidates.find((candidate) => existsSync41(candidate));
+  const candidates = [join52(home, ".bashrc"), join52(home, ".bash_profile")];
+  const existing = candidates.find((candidate) => existsSync42(candidate));
   return existing ?? candidates[0];
 }
 function zshRcCandidate(options) {
   const env = options.env ?? process.env;
   const home = effectiveHome(options);
-  if (env.ZDOTDIR?.trim()) return join51(resolve32(env.ZDOTDIR.trim()), ".zshrc");
-  return join51(home, ".zshrc");
+  if (env.ZDOTDIR?.trim()) return join52(resolve32(env.ZDOTDIR.trim()), ".zshrc");
+  return join52(home, ".zshrc");
 }
 function fishCompletionTarget(shell, options) {
   const env = options.env ?? process.env;
   const home = effectiveHome(options);
-  if (env.XDG_CONFIG_HOME?.trim()) return join51(resolve32(env.XDG_CONFIG_HOME.trim()), "fish", "completions", "kxm.fish");
-  return join51(home, ".config", "fish", "completions", "kxm.fish");
+  if (env.XDG_CONFIG_HOME?.trim()) return join52(resolve32(env.XDG_CONFIG_HOME.trim()), "fish", "completions", "kxm.fish");
+  return join52(home, ".config", "fish", "completions", "kxm.fish");
 }
 function completionRcTarget(shell, options = {}) {
   if (shell === "fish") {
@@ -49827,13 +49917,13 @@ function installShellCompletion(shellInput, options = {}) {
   const scriptPath = completionScriptPath(shell, options);
   const { rcFile } = completionRcTarget(shell, options);
   const script = generateShellCompletion(shell);
-  const existingScript = existsSync41(scriptPath);
+  const existingScript = existsSync42(scriptPath);
   const existingScriptMatches = existingScript && readFileSync39(scriptPath, "utf8") === script;
   let rcModified = false;
   let alreadyInstalled = false;
   if (shell === "fish") {
     const fishTarget = fishCompletionTarget(shell, options);
-    const fishInstalled = existsSync41(fishTarget) && readFileSync39(fishTarget, "utf8") === script;
+    const fishInstalled = existsSync42(fishTarget) && readFileSync39(fishTarget, "utf8") === script;
     alreadyInstalled = fishInstalled;
     if (!options.dryRun && (!fishInstalled || options.overwrite)) {
       mkdirSync31(resolve32(fishTarget, ".."), { recursive: true });
@@ -49850,7 +49940,7 @@ function installShellCompletion(shellInput, options = {}) {
   }
   if (rcFile) {
     const line = sourceLine(shell, scriptPath);
-    const rcContent = existsSync41(rcFile) ? readFileSync39(rcFile, "utf8") : "";
+    const rcContent = existsSync42(rcFile) ? readFileSync39(rcFile, "utf8") : "";
     alreadyInstalled = rcContent.includes(line) || rcContent.includes(`${COMPLETION_MARKER}`);
   }
   if (!options.dryRun) {
@@ -49866,7 +49956,7 @@ ${marker}
 ${line}
 `;
       mkdirSync31(resolve32(rcFile, ".."), { recursive: true });
-      writeFileSync27(rcFile, (existsSync41(rcFile) ? readFileSync39(rcFile, "utf8") : "") + stanza, { encoding: "utf8" });
+      writeFileSync27(rcFile, (existsSync42(rcFile) ? readFileSync39(rcFile, "utf8") : "") + stanza, { encoding: "utf8" });
       rcModified = true;
     }
   }
@@ -49883,13 +49973,13 @@ function kxmBinDir(env = process.env) {
   const argv1 = env.KXM_ENTRY ?? process.argv[1];
   if (argv1 && isAbsolute10(argv1)) {
     const dir = dirname24(argv1);
-    if (existsSync41(join51(dir, process.platform === "win32" ? "kxm.cmd" : "kxm"))) return dir;
+    if (existsSync42(join52(dir, process.platform === "win32" ? "kxm.cmd" : "kxm"))) return dir;
   }
   const pathEnv = env.PATH ?? "";
   for (const part of pathEnv.split(delimiter)) {
     if (!part) continue;
     const candidate = resolve32(part, process.platform === "win32" ? "kxm.cmd" : "kxm");
-    if (existsSync41(candidate)) return resolve32(part);
+    if (existsSync42(candidate)) return resolve32(part);
   }
   return void 0;
 }
@@ -49907,7 +49997,7 @@ function installPathEntry(shellInput, options = {}) {
   }
   const { rcFile } = completionRcTarget(shell, options);
   const line = pathLine(binDir);
-  const rcContent = existsSync41(rcFile ?? "") ? readFileSync39(rcFile, "utf8") : "";
+  const rcContent = existsSync42(rcFile ?? "") ? readFileSync39(rcFile, "utf8") : "";
   const alreadyInstalled = rcContent.includes(binDir) || (options.env?.PATH ?? process.env.PATH ?? "").split(delimiter).includes(binDir);
   if (!options.dryRun && rcFile && !alreadyInstalled) {
     mkdirSync31(dirname24(rcFile), { recursive: true });
@@ -49922,8 +50012,8 @@ ${line}
 // plugins/kxm/src/init-guide-setup.ts
 var import_yaml18 = __toESM(require_dist(), 1);
 init_routes();
-import { existsSync as existsSync42, mkdirSync as mkdirSync32, writeFileSync as writeFileSync28 } from "node:fs";
-import { dirname as dirname25, join as join52 } from "node:path";
+import { existsSync as existsSync43, mkdirSync as mkdirSync32, writeFileSync as writeFileSync28 } from "node:fs";
+import { dirname as dirname25, join as join53 } from "node:path";
 var ADMITTED_GUIDE_BINDINGS = Object.freeze({
   "anthropic/claude-fable-5.1": { harness: "claude", provider: "anthropic", model: "fable" },
   "anthropic/fable": { harness: "claude", provider: "anthropic", model: "fable" },
@@ -50314,13 +50404,13 @@ function renderGuideSetupFiles(projectRoot, plan) {
     const stage = roleStages.get(role);
     if (!stage) continue;
     files.push({
-      path: join52(projectRoot, ".kxm", "agents", `${role}.yaml`),
+      path: join53(projectRoot, ".kxm", "agents", `${role}.yaml`),
       content: (0, import_yaml18.stringify)(agentDocument(role, stage, binding))
     });
   }
   for (const workflow of plan.workflows) {
     files.push({
-      path: join52(projectRoot, ".kxm", "workflows", `${workflow.slug}.yaml`),
+      path: join53(projectRoot, ".kxm", "workflows", `${workflow.slug}.yaml`),
       content: (0, import_yaml18.stringify)(workflowDocument(workflow))
     });
   }
@@ -50337,7 +50427,7 @@ function mergeGuideRouteAdmission(projectRoot, plan) {
   }
   if (added.length === 0) return added;
   policy.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
-  const path4 = join52(projectRoot, ".kxm", "routes.yaml");
+  const path4 = join53(projectRoot, ".kxm", "routes.yaml");
   mkdirSync32(dirname25(path4), { recursive: true });
   writeFileSync28(path4, (0, import_yaml18.stringify)(policy), "utf8");
   return added;
@@ -50346,7 +50436,7 @@ function writeGuideSetupFiles(files) {
   const written = [];
   const existed = [];
   for (const file of files) {
-    if (existsSync42(file.path)) {
+    if (existsSync43(file.path)) {
       existed.push(file.path);
       continue;
     }
@@ -50417,7 +50507,7 @@ function applyKxmPackageUpdate(runtime, notice) {
       detail: `release v${notice.latest} has no sha256 digest for ${name}; refusing to install`
     };
   }
-  const releaseDir = mkdtempSync3(join53(tmpdir2(), "kxm-pkg-update-"));
+  const releaseDir = mkdtempSync3(join54(tmpdir2(), "kxm-pkg-update-"));
   try {
     const planned = planKxmPackageUpdate(notice.source, notice.latest, releaseDir, notice.asset);
     if (runtime.dryRun) {
@@ -50426,7 +50516,7 @@ function applyKxmPackageUpdate(runtime, notice) {
     for (const step of planned) {
       if (step.kind === "verify") {
         if (!verifyReleaseAssetDigest(step.path, step.sha256)) {
-          const actual = existsSync43(step.path) ? createHash17("sha256").update(readFileSync40(step.path)).digest("hex") : "missing";
+          const actual = existsSync44(step.path) ? createHash17("sha256").update(readFileSync40(step.path)).digest("hex") : "missing";
           return {
             ok: false,
             error: "release_digest_mismatch",
@@ -50704,7 +50794,7 @@ async function cmdValidate(runtime, fileFlag) {
   }
   const selectedFile = explicitFile || configuredFile;
   const file = selectedFile ? resolve33(runtime.cwd, selectedFile) : void 0;
-  if (file && !existsSync43(file)) {
+  if (file && !existsSync44(file)) {
     printWorker(runtime, worker, { ok: false, command: "validate", error: "file_not_found", file }, `workflow file not found: ${file}`);
     return 1;
   }
@@ -50804,7 +50894,7 @@ async function cmdImprove(runtime, options = {}) {
     print(runtime.io, runtime.json, { ok: false, command: "improve", error: "config_invalid", detail: message }, `config_invalid: ${message}`);
     return 1;
   }
-  const candidatesDir = options.outDir ? resolve33(runtime.cwd, options.outDir) : join53(root, ".kxm", "candidates");
+  const candidatesDir = options.outDir ? resolve33(runtime.cwd, options.outDir) : join54(root, ".kxm", "candidates");
   const report2 = buildImprovementReport(loaded.records, {
     candidatesDir,
     projectRoot: root,
@@ -50813,7 +50903,7 @@ async function cmdImprove(runtime, options = {}) {
     autoThreshold: config.improvement.autoThreshold,
     halfLifeDays: config.improvement.telemetryHalfLifeDays
   });
-  const reportDir = join53(runtime.dirs.assets, "improvements");
+  const reportDir = join54(runtime.dirs.assets, "improvements");
   const reportPath = writeImprovementReport(reportDir, report2, runtime.dryRun);
   const text = [
     "Sources:",
@@ -50957,7 +51047,7 @@ async function maybeOfferCompletionInstall(runtime) {
   if (!pathNeeded) {
     const scriptPath = completionScriptPath(shell, { env: runtime.env, configDir: runtime.env.KXM_USER_CONFIG_DIR });
     const { rcFile } = completionRcTarget(shell, { env: runtime.env });
-    if (rcFile && existsSync43(rcFile)) {
+    if (rcFile && existsSync44(rcFile)) {
       try {
         if (readFileSync40(rcFile, "utf8").includes(scriptPath)) return;
       } catch {
@@ -51122,7 +51212,7 @@ async function cmdRoutingReport(runtime, options) {
   let catalog;
   if (includeEquivalentListCost) {
     try {
-      const pricesPath = options.prices ? resolve33(runtime.cwd, options.prices) : join53(runtime.dirs.workspace, "prices.yaml");
+      const pricesPath = options.prices ? resolve33(runtime.cwd, options.prices) : join54(runtime.dirs.workspace, "prices.yaml");
       catalog = loadPriceCatalog(pricesPath);
     } catch {
     }
@@ -51343,7 +51433,9 @@ var DRY_RUN_COMMANDS = /* @__PURE__ */ new Set([
   "task run",
   "task sync",
   "studio layout",
-  "studio serve"
+  "studio serve",
+  "docs build",
+  "docs serve"
 ]);
 var DryRunRefused = class extends Error {
   code;
@@ -51623,6 +51715,14 @@ function createProgram(ctx, result) {
   addGlobalOptions(runCmd.command("list").description("List recent runs for the current project")).action(async function runListAction() {
     result.code = await cmdKxmRunList(runtimeFrom(ctx, this));
   });
+  const docsCmd = addGlobalOptions(program2.command("docs").description("Build and serve the tailnet docs site"));
+  docsCmd.helpCommand("help", "Show docs help");
+  addGlobalOptions(docsCmd.command("build").description("Regenerate the docs site from the roadmap state")).action(async function docsBuildAction() {
+    result.code = await cmdDocsBuild(runtimeFrom(ctx, this));
+  });
+  addGlobalOptions(docsCmd.command("serve").description("Serve the built docs site on this machine's tailnet address")).option("--port <port>", "Port passed through to the docs server").action(async function docsServeAction(options) {
+    result.code = await cmdDocsServe(runtimeFrom(ctx, this), options);
+  });
   const tenantCmd = addGlobalOptions(program2.command("tenant").description("Composed tenant reads for machine clients (portal)"));
   tenantCmd.helpCommand("help", "Show tenant help");
   addGlobalOptions(tenantCmd.command("status").description("Read hub metadata and authoritative Runtime run state as one labeled view")).action(async function tenantStatusAction() {