@kontextmind/kxm 0.7.144 → 0.7.146

package/.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "kxm",
       "source": "./plugins/kxm",
       "description": "Durable workflows, peer agents, and kxm tui",
-      "version": "0.7.144",
+      "version": "0.7.146",
       "category": "development",
       "tags": ["kxm", "multi-agent", "workflows", "mcp"]
     }

package/.kxm/README.md

@@ -26,8 +26,26 @@ a `default` workflow, `gates.yaml` and `template-provenance.yaml`.
 | `run/` | SSH control sockets from `kxm ssh` | Ignored |
 
 The role files under `.kxm/roles/` and the model files under `.kxm/models/`
-carry the developer policy. The assignment runner reads them at
-`refs/remotes/origin/main`.
+carry the developer policy. The assignment runner reads them at one commit
+(`HEAD`, which must be an ancestor of `refs/remotes/origin/main`). A rename
+does not rewrite a commit that still uses the old ids. An old id resolves
+only when that id is absent and the other side is present.
+
+Ids in this checkout follow one convention per kind:
+
+| Kind | Convention | This checkout |
+|---|---|---|
+| Role | The purpose: `planner`, `writer`, `reviewer-arch`, `reviewer-cli` | Unchanged |
+| Agent | The same id as its `role` | `planner`, `writer`, `reviewer-arch`, `reviewer-cli` |
+| Route | `<harness>-<model-slug>[-<provider>]`, with `.` written as `-` | `grok-grok-4-7`, `claude-fable`, `pi-qwen3-coder-plus-openrouter` |
+| Workflow | `default`, `land`, or `<role>-only` | `default`, `land`, `writer-only`, `reviewer-arch-only`, `reviewer-cli-only` |
+| Agent step | The agent's role id | `writer`, `reviewer-arch`, `reviewer-cli` |
+
+`coordinator`, `implementer`, `critic-arch`, and `critic-cli` are aliases of
+the agent ids. `implement`, `review-arch`, and `review-cli` are aliases of
+the step ids. Route aliases include `grok-native`, `fable-claude`, and
+`sol-codex`. Using an alias prints `kxm: deprecated <kind> id '<from>' resolves to '<to>'`.
+`opus-claude` does not resolve to another model.
 
 The [configuration reference](../docs/reference/config-reference.md#workspace-layout-tracked-ignored-and-state)
 describes every file, the ignore rules to add, and the state KXM keeps outside

package/.kxm/agents/{coordinator.yaml → planner.yaml}

@@ -1,6 +1,8 @@
 schema: kxm.agent.v1
 purpose: Coordinate the pinned workflow and emit schema-validated commands.
 role: planner
+aliases:
+  - coordinator
 tools:
   preset: coordinator
 defaultRepositoryAccess: read

package/.kxm/agents/{critic-arch.yaml → reviewer-arch.yaml}

@@ -1,6 +1,8 @@
 schema: kxm.agent.v1
 purpose: Architecture critic for the approved workflow change.
 role: reviewer-arch
+aliases:
+  - critic-arch
 tools:
   preset: read-only
 defaultRepositoryAccess: read

package/.kxm/agents/{critic-cli.yaml → reviewer-cli.yaml}

@@ -1,6 +1,8 @@
 schema: kxm.agent.v1
 purpose: CLI and verification critic for the approved workflow change.
 role: reviewer-cli
+aliases:
+  - critic-cli
 tools:
   preset: read-only
 defaultRepositoryAccess: read

package/.kxm/agents/{implementer.yaml → writer.yaml}

@@ -1,6 +1,8 @@
 schema: kxm.agent.v1
 purpose: Implement the approved change within the declared repository scope.
 role: writer
+aliases:
+  - implementer
 tools:
   preset: workspace-writer
 defaultRepositoryAccess: none

package/.kxm/roles/planner.yaml

@@ -3,7 +3,9 @@ id: planner
 purpose: planner
 permission: read-only
 description: Plans the change before implementation.
-# fable primary (proven planning).
+# claude-fable is primary. The Pi fallback is a different vendor.
 roster:
-  - route: fable-claude
+  - route: claude-fable
+    effort: medium
+  - route: pi-qwen3-8-flash-openrouter
     effort: medium

package/.kxm/roles/reviewer-arch.yaml

@@ -3,7 +3,9 @@ id: reviewer-arch
 purpose: reviewer-arch
 permission: read-only
 description: Independent architecture critic.
-# fable is the required arch critic.
+# claude-fable is the required arch critic. The Pi fallback is a different vendor.
 roster:
-  - route: fable-claude
+  - route: claude-fable
+    effort: medium
+  - route: pi-glm-5-3-flash-openrouter
     effort: medium

package/.kxm/roles/reviewer-cli.yaml

@@ -3,7 +3,9 @@ id: reviewer-cli
 purpose: reviewer-cli
 permission: read-only
 description: Independent CLI and docs critic.
-# sol is the required cli critic.
+# codex-gpt-5-6-sol is the required cli critic. The Pi fallback is a different vendor.
 roster:
-  - route: sol-codex
+  - route: codex-gpt-5-6-sol
+    effort: low
+  - route: pi-qwen3-8-flash-openrouter
     effort: low

package/.kxm/roles/writer.yaml

@@ -5,8 +5,11 @@ permission: edit
 description: Primary implementation agent.
 # Rotation priority = order. Effort default: medium for implementation.
 roster:
-  - route: grok-native
+  - route: grok-grok-4-7
     effort: medium
-  - route: qwen-openrouter-pi
+  - route: pi-qwen3-coder-plus-openrouter
+    effort: medium
+  - route: agy-gemini-3-8-flash-high
+    effort: medium
+  - route: agy-gemini-3-8-flash-medium
     effort: medium
-  - route: gemini-agy

package/.kxm/workflows/default.yaml

@@ -1,37 +1,45 @@
 schema: kxm.workflow.v1
 description: Canonical 4-stage KXM delivery workflow
-coordinator: coordinator
+coordinator: planner
 limits:
   maxTransitions: 8
 steps:
-  - id: implement
+  - id: writer
+    aliases:
+      - implement
     kind: agent
-    agent: implementer
+    agent: writer
     repositories:
       control: write
     maxAttempts: 3
     on:
-      passed: review-arch
+      passed: reviewer-arch
       failed:
         target: $terminal
         terminalStatus: failed
-  - id: review-arch
+  - id: reviewer-arch
+    aliases:
+      - review-arch
+      - critic-arch
     kind: agent
-    agent: critic-arch
+    agent: reviewer-arch
     maxAttempts: 2
     on:
-      passed: review-cli
+      passed: reviewer-cli
       failed:
-        target: implement
+        target: writer
         maxTransitions: 2
-  - id: review-cli
+  - id: reviewer-cli
+    aliases:
+      - review-cli
+      - critic-cli
     kind: agent
-    agent: critic-cli
+    agent: reviewer-cli
     maxAttempts: 2
     on:
       passed: verify
       failed:
-        target: implement
+        target: writer
         maxTransitions: 2
   - id: verify
     kind: gate
@@ -45,5 +53,5 @@ steps:
         target: $terminal
         terminalStatus: completed
       implementation-failure:
-        target: implement
+        target: writer
         maxTransitions: 2

package/.kxm/workflows/land.yaml

@@ -3,7 +3,7 @@
 # `kxm run land --dry-run --json`.
 schema: kxm.workflow.v1
 description: Land the current branch through verify, docs, rebase, merge, release, and milestone gates.
-coordinator: coordinator
+coordinator: planner
 limits:
   maxTransitions: 24
 steps:

package/.kxm/workflows/{review-arch-only.yaml → reviewer-arch-only.yaml}

@@ -1,12 +1,16 @@
 schema: kxm.workflow.v1
 description: One read-only architecture critic step.
-coordinator: coordinator
+aliases:
+  - review-arch-only
+coordinator: planner
 limits:
   maxTransitions: 2
 steps:
-  - id: critic-arch
+  - id: reviewer-arch
+    aliases:
+      - critic-arch
     kind: agent
-    agent: critic-arch
+    agent: reviewer-arch
     repositories:
       control: read
     maxAttempts: 1

package/.kxm/workflows/{review-cli-only.yaml → reviewer-cli-only.yaml}

@@ -1,12 +1,16 @@
 schema: kxm.workflow.v1
 description: One read-only CLI critic step.
-coordinator: coordinator
+aliases:
+  - review-cli-only
+coordinator: planner
 limits:
   maxTransitions: 2
 steps:
-  - id: critic-cli
+  - id: reviewer-cli
+    aliases:
+      - critic-cli
     kind: agent
-    agent: critic-cli
+    agent: reviewer-cli
     repositories:
       control: read
     maxAttempts: 1

package/.kxm/workflows/{implement-only.yaml → writer-only.yaml}

@@ -1,12 +1,16 @@
 schema: kxm.workflow.v1
-description: One implementer step with a drive receipt.
-coordinator: coordinator
+description: One writer step with a drive receipt.
+aliases:
+  - implement-only
+coordinator: planner
 limits:
   maxTransitions: 2
 steps:
-  - id: implement
+  - id: writer
+    aliases:
+      - implement
     kind: agent
-    agent: implementer
+    agent: writer
     repositories:
       control: write
     maxAttempts: 1

package/CHANGELOG.md

@@ -13,8 +13,9 @@ All notable user-facing changes are documented here. The project follows [Semant
   effective value is written on the one-shot evidence. A `cancelling` run whose
   executing attempt's child already exited settles `executing_unrecorded`.
   Admission is released when a drive closes with a handoff, so a later drive
-  is admitted, and `runs status` names the attempt. `implement-only`,
-  `review-arch-only`, and `review-cli-only` are one-step workflows, driven with
+  is admitted, and `runs status` names the attempt. `writer-only`,
+  `reviewer-arch-only`, and `reviewer-cli-only` are one-step workflows
+  (`implement-only`, `review-arch-only`, and `review-cli-only` still resolve), driven with
   `kxm lane run <unit> --workflow <id> --brief <file>`. See
   [kxm lane](docs/reference/cli-reference.md#kxm-lane),
   [runs status](docs/reference/cli-reference.md#kxm-runs-status),
@@ -141,6 +142,22 @@ All notable user-facing changes are documented here. The project follows [Semant
 
 ### Changed
 
+- **Workforce ids use one convention, and old ids still resolve.**
+  Role ids stay `planner`, `writer`, `reviewer-arch`, and `reviewer-cli`.
+  Agent ids and agent-step ids use those same names. Route ids are
+  `<harness>-<model-slug>[-<provider>]`. `kxm init` writes `planner.yaml`
+  and `writer.yaml`; `coordinator` and `implementer` remain aliases.
+  `opus-claude` is removed because `opus` is not an admitted selector.
+  `qwen-token-plan/*` and `zai-coding-cn/*` left `.kxm/routes.yaml` because
+  those harnesses are not allowlisted.   `node scripts/workforce-lint.mjs`
+  fails `npm run check` and `npm run validate:pr` when a route, a roster
+  entry, or an id breaks the convention, and when a roster entry omits
+  `effort` or names one outside `off`, `minimal`, `low`, `medium`, `high`,
+  `xhigh`, and `max`. An admitted selector with no route is a warning.
+  The Claude helper accepts `fable` only. #343's architecture critic ran on
+  `opus` because the justfile recipe review-arch hardcoded that model while
+  `reviewer-arch` listed only `fable-claude`. That recipe is gone; a request
+  for `opus` fails closed.
 - **Dispatch reads role and model files, and agents bind a role.**
   `scripts/roster-policy.mjs` builds the developer policy from
   `.kxm/models/*.yaml` and `.kxm/roles/*.yaml` at `refs/remotes/origin/main`.
@@ -148,9 +165,9 @@ All notable user-facing changes are documented here. The project follows [Semant
   and that role's roster. A step `model` does not override that route.
   `kxm routes` prints `policy` (`admitted`, `disabled`) and `membership`
   from the role files. `.kxm/routes.yaml` keeps admitted and disabled
-  selectors. `reviewer-arch` resolves to `fable-claude`. `opus-claude` is
-  admitted and named by no roster, so it is absent from `routes` and the
-  lineups. `gemini-agy` is in the writer lineup. An agent `tools.preset`
+  selectors. `reviewer-arch` resolves to `claude-fable` (alias `fable-claude`).
+  `agy-gemini-3-8-flash-high` (alias `gemini-agy`) is in the writer lineup.
+  An agent `tools.preset`
   may only narrow its role preset; that rule is recorded and enforced in P3.
 
 - **Role and model files are live `kxm.role.v2` and `kxm.model.v2`.**

package/docs/contributing/harness-routing-internals.md

@@ -5,6 +5,12 @@ This page records how the KXM repository applies [harness routing](../reference/
 > [!IMPORTANT]
 > The files are the authority, not this page: `.kxm/routes.yaml`, `.kxm/roles/*.yaml`, `.kxm/models/*.yaml`, and `.kxm/prices.yaml`. Product routing decisions are recorded under Tracking → Decided in `plans/implementation-plan.md`.
 
+## Current ids (2026-09-27)
+
+The command transcripts below are the 2026-09-23 capture. The files now use one id shape per kind. A route id is `<harness>-<model-slug>[-<provider>]`, with `.` written as `-`. An agent id equals its role. A workflow id is `default`, `land`, or `<role>-only`. An agent step id equals that role.
+
+This checkout's routes are `grok-grok-4-7`, `pi-qwen3-coder-plus-openrouter`, `agy-gemini-3-8-flash-high`, `agy-gemini-3-8-flash-medium`, `claude-fable`, `codex-gpt-5-6-sol`, `pi-qwen3-8-flash-openrouter`, and `pi-glm-5-3-flash-openrouter`. Agents are `planner`, `writer`, `reviewer-arch`, and `reviewer-cli`. `opus-claude` was removed because `opus` is not an admitted selector. `qwen-token-plan/*` and `zai-coding-cn/*` left the admitted list because those harnesses are not allowlisted; their `prices.yaml` rows stay. Old ids resolve as aliases. Every roster entry names an effort. `reviewer-arch` dispatches `claude-fable`. #343's architecture critic ran on opus because the justfile recipe review-arch hardcoded that model; the role file on that commit listed only `fable-claude`. The helper now refuses `opus`.
+
 ## This checkout's routes and roster
 
 `node scripts/kxm.mjs role get writer`:
@@ -64,11 +70,11 @@ On the capture machine, `kxm harness list` showed `claude` detected but logged o
 The issue-127 runner (`kxm assign`, see the [assignment runner](assignment-runner.md)) reads `.kxm/roles/*.yaml` and `.kxm/models/*.yaml` at `refs/remotes/origin/main`. See [Developer assignment policy](../reference/config-reference.md#developer-assignment-policy). Routes there name the harness, the model and the vendor explicitly:
 
 ```yaml
-  grok-native:
+  grok-grok-4-7:
     harness: grok
-    model: grok-4.6
+    model: grok-4.7
     vendor: xai
-  qwen-openrouter-pi:
+  pi-qwen3-coder-plus-openrouter:
     harness: pi
     model: openrouter/qwen/qwen3-coder-plus
     vendor: alibaba
@@ -107,19 +113,19 @@ These extend the generic examples on the reference page with this checkout's adm
 | | Native `grok` | Pi + OpenRouter |
 |---|---|---|
 | Selector | `xai/grok-4.6`: admitted, and first in the writer roster | `openrouter/x-ai/grok-4.6`: not admitted |
-| Developer roster | `grok-native`, the writer route with `edit` | Refused: `native vendor cannot use Pi` |
+| Developer roster | `grok-grok-4-7`, the writer route with `edit` | Refused: `native vendor cannot use Pi` |
 | Readiness | `grok` shows auth `yes` | `pi auth check --provider openrouter` returned `not_ready` |
 | Billing | grok.com subscription (OAuth) | $2.00 input, $6.00 output, $0.50 cached input |
 | Context | 500K (Pi's `xai` row; `grok models` does not print one) | 500,000 |
 
-Pi's own `xai` provider reported `ready` (OAuth) on the capture machine. When the grok quota runs out, the next writer in the lineup is `qwen-openrouter-pi`, a different vendor.
+Pi's own `xai` provider reported `ready` (OAuth) on the capture machine. When the grok quota runs out, the next writer in the lineup is `pi-qwen3-coder-plus-openrouter`, a different vendor.
 
 ### GPT-5.6 Sol
 
 | | Native `codex` | Pi + OpenRouter |
 |---|---|---|
 | Selector | `openai/gpt-5.6-sol`: admitted, the CLI critic | `openrouter/openai/gpt-5.6-sol`: not admitted |
-| Developer roster | `sol-codex`: `reviewer-cli`, `read-only` | Refused |
+| Developer roster | `codex-gpt-5-6-sol`: `reviewer-cli`, `read-only` | Refused |
 | Billing | ChatGPT subscription | $2.00 input, $10.00 output, $0.20 cached input |
 | Context | Pi's `openai-codex` row, the same ChatGPT backend, lists 272K | 1,050,000 |
 
@@ -130,7 +136,7 @@ In the inventory, `openai/gpt-5.6-sol` has sources `openrouter+nous` and carries
 | | Native `claude` | Pi + OpenRouter |
 |---|---|---|
 | Selector | `anthropic/fable`: admitted, planner and architecture critic | `openrouter/anthropic/claude-fable-5.1`: not admitted |
-| Developer roster | `fable-claude`: `planner` and `reviewer-arch`, `read-only` | Refused |
+| Developer roster | `claude-fable`: `planner` and `reviewer-arch`, `read-only` | Refused |
 | Readiness | Detected `yes`, auth `no`, dispatch `no (not_authenticated)` | `not_ready` |
 | Billing | claude.ai subscription | $10.00 input, $50.00 output, $0.25 cached input |
 | Context | 1M (Pi's `anthropic` row) | 1,000,000 |
@@ -159,10 +165,10 @@ The code differs from that decision: `.kxm/routes.yaml` admits `google/gemini-3.
 
 | Model | Vendor-plan route | OpenRouter route | Notes |
 |---|---|---|---|
-| Qwen3.8 Flash | `qwen-token-plan/qwen3.8-flash`: admitted, in the writer roster; `ready` (`api_key`) | `openrouter/qwen/qwen3.8-flash`: admitted; $0.15 input, $0.47 output | `prices.yaml` gives both routes the same rates. Prefer the plan when it is authenticated. |
-| Qwen3 Coder Plus | none | `openrouter/qwen/qwen3-coder-plus`: $0.65 input, $3.25 output | The only admitted Pi writer: exact model, `edit` permission. |
-| GLM 5.3 and 5.3 Flash | `zai-coding-cn/glm-5.3` and `…/glm-5.3-flash`: admitted as failover critics and writer | `openrouter/z-ai/glm-5.3-flash`: admitted; $0.09 input, $0.30 output | Z.ai has no native harness. |
-| DeepSeek V4.1 Flash | `qwen-token-plan/deepseek-v4.1-flash`: admitted | `deepseek/deepseek-v4.1-flash` in the OpenRouter feed: $0.15 input, $0.60 output | Bills a DeepSeek model through Alibaba's plan, and passes the product brake because it names no vendor segment. An open admission question, not a precedent. |
+| Qwen3.8 Flash | `qwen-token-plan/qwen3.8-flash`: removed from the admitted list on 2026-09-27; `qwen-token-plan` is not allowlisted | `openrouter/qwen/qwen3.8-flash`: admitted, route `pi-qwen3-8-flash-openrouter`, read-only fallback for planner and reviewer-cli | `prices.yaml` keeps both rows. |
+| Qwen3 Coder Plus | none | `openrouter/qwen/qwen3-coder-plus`: route `pi-qwen3-coder-plus-openrouter` | The only admitted Pi writer: exact model, `edit` permission. |
+| GLM 5.3 and 5.3 Flash | `zai-coding-cn/glm-5.3` and `…/glm-5.3-flash`: removed from the admitted list on 2026-09-27; `zai-coding-cn` is not allowlisted | `openrouter/z-ai/glm-5.3-flash`: admitted, route `pi-glm-5-3-flash-openrouter`, read-only fallback for reviewer-arch | Z.ai has no native harness. |
+| DeepSeek V4.1 Flash | `qwen-token-plan/deepseek-v4.1-flash`: removed from the admitted list on 2026-09-27 | `deepseek/deepseek-v4.1-flash` in the OpenRouter feed | Bills a DeepSeek model through Alibaba's plan. `deepseek` is a native-vendor Pi brake, so this is not a route. |
 
 The developer runner is stricter. Its only Pi writer is `openrouter/qwen/qwen3-coder-plus`, and it does not allowlist `qwen-token-plan` or `zai-coding-cn`. Today OpenRouter is the right answer here for Qwen3 Coder Plus, Qwen3.8 Flash and GLM 5.3 Flash.
 

package/docs/reference/cli-reference.md

@@ -188,7 +188,7 @@ The starter `defaultHarness: pi` and `npm test` gate are generic settings, not r
 - Global options: `--json` and `--dry-run` only; `--workspace` exits 2 with `workspace_option_unsupported`.
 - `--project-id` must match `prj_` followed by 6 to 128 letters, digits, `_`, or `-`. `--repository` is repeatable; each value must be `<id>=<absolute path>`, and a repeated ID fails with `repository_binding_argument_duplicate`.
 - Needs a Git repository. Does not need a hub or the Runtime.
-- Writes `.kxm/project.yaml`, `.kxm/agents/coordinator.yaml`, `.kxm/agents/implementer.yaml`, `.kxm/gates.yaml`, `.kxm/repo/repo.yaml`, `.kxm/workflows/default.yaml`, and `.kxm/template-provenance.yaml`, using a `.kxm-init-transaction` directory at the Git root while a create or repair is in flight. Repository bindings are written under the user state root, never into Git. `--dry-run` writes nothing.
+- Writes `.kxm/project.yaml`, `.kxm/agents/planner.yaml`, `.kxm/agents/writer.yaml`, `.kxm/gates.yaml`, `.kxm/repo/repo.yaml`, `.kxm/workflows/default.yaml`, and `.kxm/template-provenance.yaml`, using a `.kxm-init-transaction` directory at the Git root while a create or repair is in flight. `planner.yaml` keeps the alias `coordinator`, and `writer.yaml` keeps the alias `implementer`. Repository bindings are written under the user state root, never into Git. `--dry-run` writes nothing.
 - On an interactive terminal without `--json` or `--dry-run`, a successful create or join offers to install shell completion (suppress with `KXM_SKIP_COMPLETION_PROMPT=1`) and to write workflow-guide agents (suppress with `KXM_SKIP_GUIDE_SETUP_PROMPT=1`). Guided setup keeps a role only when one of its guide candidates is on a fixed map of reviewed harness/model pairs and that harness is authenticated; it writes the agent and workflow files, appends those selectors to `.kxm/routes.yaml`, and skips every other candidate. Google candidates are not on the map and are always skipped, because the Runtime's Pi one-shot cannot reach Google's `antigravity` Pi provider yet (see [Harness routing](harness-routing.md#google-through-the-antigravity-pi-provider)).
 - JSON keys: `action` (`planned`, `created`, `joined`, `repaired`, `resumed`, or `validated`), `mode`, `inspectedFrom`, `projectRoot`, `changesRequired`, `legacyInputs`, `issues`, `configRevision`, `files`, `plannedOnly`, and, when relevant, `guidance`, `localBindingFile`, `bindingsChanged`, `repairPlan`, `resumePending`, `transactionKind`.
 - Exit 0 for every completed action and every dry-run plan. Exit 1 when the result is planning-only (legacy state, blocked repair, partial state without provenance) or for `initialization_failed` (with `issues`) and `initialization_io_failed`. A planning-only text result prints the reason and then one `<file>: <code>: <message>` line per validation issue, for example `.kxm/workflows/first.yaml: gate_outcome_impossible: ...`.
@@ -200,7 +200,7 @@ kxm init --dry-run --json
 ```
 
 ```text
-{"schema":"kxm.cli-result.v1","ok":true,"command":"init","action":"planned","mode":"create","inspectedFrom":"/work/proj","projectRoot":"/work/proj","changesRequired":true,"legacyInputs":[],"issues":[],"files":[".kxm/agents/coordinator.yaml",".kxm/agents/implementer.yaml",".kxm/gates.yaml",".kxm/project.yaml",".kxm/repo/repo.yaml",".kxm/template-provenance.yaml",".kxm/workflows/default.yaml"],"plannedOnly":true}
+{"schema":"kxm.cli-result.v1","ok":true,"command":"init","action":"planned","mode":"create","inspectedFrom":"/work/proj","projectRoot":"/work/proj","changesRequired":true,"legacyInputs":[],"issues":[],"files":[".kxm/agents/planner.yaml",".kxm/agents/writer.yaml",".kxm/gates.yaml",".kxm/models/claude-fable.yaml",".kxm/models/grok-grok-4-6.yaml",".kxm/project.yaml",".kxm/repo/repo.yaml",".kxm/roles/planner.yaml",".kxm/roles/writer.yaml",".kxm/routes.yaml",".kxm/template-provenance.yaml",".kxm/workflows/default.yaml"],"plannedOnly":true}
 ```
 
 Create the project:
@@ -419,7 +419,7 @@ kxm trust diff
 
 ```text
 permission diff: sha256:80457232cbfc… -> sha256:7428fde55ca4…
-EXPANSION  .kxm/agents/coordinator.yaml /repositories/control repository-access changed (expansion)
+EXPANSION  .kxm/agents/planner.yaml /repositories/control repository-access changed (expansion)
 1 expansion(s) require explicit reviewed trust action
 ```
 
@@ -452,7 +452,7 @@ kxm trust check
 
 ```text
 permission diff: sha256:80457232cbfc… -> sha256:7428fde55ca4…
-EXPANSION  .kxm/agents/coordinator.yaml /repositories/control repository-access changed (expansion)
+EXPANSION  .kxm/agents/planner.yaml /repositories/control repository-access changed (expansion)
 1 expansion(s) require explicit reviewed trust action
 trust check failed: review every expansion above before merging
 ```
@@ -462,7 +462,7 @@ kxm trust check --json
 ```
 
 ```text
-{"schema":"kxm.cli-result.v1","ok":false,"command":"trust check",...,"requiresReview":true,"expansions":1,"narrowings":0,"neutralChanges":0,"changes":[{"resource":".kxm/agents/coordinator.yaml","path":"/repositories/control","field":"repository-access","direction":"expansion",...}]}
+{"schema":"kxm.cli-result.v1","ok":false,"command":"trust check",...,"requiresReview":true,"expansions":1,"narrowings":0,"neutralChanges":0,"changes":[{"resource":".kxm/agents/planner.yaml","path":"/repositories/control","field":"repository-access","direction":"expansion",...}]}
 ```
 
 <a id="hub-commands"></a>
@@ -1069,7 +1069,7 @@ Lists admitted and disabled routes.
 
 No command-specific options.
 
-- Reads only. JSON keys: `policy` (`schema`, `updatedAt`, `admitted`, `disabled`) and `membership` (strings `<role> <route-id>` from `.kxm/roles/*.yaml`). `policy` has no `roles` field. A model file named by no roster, such as `opus-claude`, is absent from `membership`.
+- Reads only. JSON keys: `policy` (`schema`, `updatedAt`, `admitted`, `disabled`) and `membership` (strings `<role> <route-id>` from `.kxm/roles/*.yaml`). `policy` has no `roles` field. A model file named by no roster is absent from `membership`, and this repository's workforce lint fails on that file.
 
 ```bash
 kxm routes list
@@ -1083,18 +1083,17 @@ admitted openai/gpt-5.6-sol
 admitted openrouter/qwen/qwen3-coder-plus
 admitted openrouter/qwen/qwen3.8-flash
 admitted openrouter/z-ai/glm-5.3-flash
-admitted qwen-token-plan/deepseek-v4.1-flash
-admitted qwen-token-plan/qwen3.8-flash
-admitted qwen-token-plan/qwen3.8-max
 admitted xai/grok-4.7
-admitted zai-coding-cn/glm-5.3
-admitted zai-coding-cn/glm-5.3-flash
-planner fable-claude
-reviewer-arch fable-claude
-reviewer-cli sol-codex
-writer grok-native
-writer qwen-openrouter-pi
-writer gemini-agy
+planner claude-fable
+planner pi-qwen3-8-flash-openrouter
+reviewer-arch claude-fable
+reviewer-arch pi-glm-5-3-flash-openrouter
+reviewer-cli codex-gpt-5-6-sol
+reviewer-cli pi-qwen3-8-flash-openrouter
+writer grok-grok-4-7
+writer pi-qwen3-coder-plus-openrouter
+writer agy-gemini-3-8-flash-high
+writer agy-gemini-3-8-flash-medium
 ```
 
 ```bash
@@ -1102,7 +1101,7 @@ kxm routes list --json
 ```
 
 ```text
-{"schema":"kxm.cli-result.v1","ok":true,"command":"routes list","policy":{"schema":"kxm.routes.v2","updatedAt":"2026-09-24T00:00:00.000Z","admitted":["anthropic/fable","google/gemini-3.8-flash-high","google/gemini-3.8-flash-medium","openai/gpt-5.6-sol","openrouter/qwen/qwen3-coder-plus","openrouter/qwen/qwen3.8-flash","openrouter/z-ai/glm-5.3-flash","qwen-token-plan/deepseek-v4.1-flash","qwen-token-plan/qwen3.8-flash","qwen-token-plan/qwen3.8-max","xai/grok-4.7","zai-coding-cn/glm-5.3","zai-coding-cn/glm-5.3-flash"],"disabled":[]},"membership":["planner fable-claude","reviewer-arch fable-claude","reviewer-cli sol-codex","writer grok-native","writer qwen-openrouter-pi","writer gemini-agy"]}
+{"schema":"kxm.cli-result.v1","ok":true,"command":"routes list","policy":{"schema":"kxm.routes.v2","updatedAt":"2026-09-27T00:00:00.000Z","admitted":["anthropic/fable","google/gemini-3.8-flash-high","google/gemini-3.8-flash-medium","openai/gpt-5.6-sol","openrouter/qwen/qwen3-coder-plus","openrouter/qwen/qwen3.8-flash","openrouter/z-ai/glm-5.3-flash","xai/grok-4.7"],"disabled":[]},"membership":["planner claude-fable","planner pi-qwen3-8-flash-openrouter","reviewer-arch claude-fable","reviewer-arch pi-glm-5-3-flash-openrouter","reviewer-cli codex-gpt-5-6-sol","reviewer-cli pi-qwen3-8-flash-openrouter","writer grok-grok-4-7","writer pi-qwen3-coder-plus-openrouter","writer agy-gemini-3-8-flash-high","writer agy-gemini-3-8-flash-medium"]}
 ```
 
 ### `kxm routes count`
@@ -1247,10 +1246,10 @@ kxm role add demo-role --description "Demo role" --dry-run --json
 {"schema":"kxm.cli-result.v1","ok":true,"command":"role add","roleId":"demo-role","id":"demo-role","filePath":"/work/proj/.kxm/roles/demo-role.yaml","scope":"local","dryRun":true,"planned":[{"action":"write","target":"/work/proj/.kxm/roles/demo-role.yaml"}]}
 ```
 
-Add a reviewer whose primary route is `fable-claude`, with `grok-native` second (Not run):
+Add a reviewer whose primary route is `claude-fable`, with `grok-grok-4-7` second (Not run):
 
 ```bash
-kxm role add reviewer --description "Independent reviewer" --route fable-claude --route grok-native --skills kxm
+kxm role add reviewer --description "Independent reviewer" --route claude-fable --route grok-grok-4-7 --skills kxm
 ```
 
 ```bash
@@ -1307,7 +1306,7 @@ kxm role get writer --json
 ```
 
 ```text
-{"schema":"kxm.cli-result.v1","ok":true,"command":"role get","roleId":"writer","scope":"local","filePath":"/work/kxm/.kxm/roles/writer.yaml","role":{"schema":"kxm.role.v2","id":"writer","purpose":"writer","permission":"edit","description":"Primary implementation agent.","skills":[],"roster":[{"route":"grok-native","effort":"medium"},{"route":"qwen-openrouter-pi","effort":"medium"},{"route":"gemini-agy"}]}}
+{"schema":"kxm.cli-result.v1","ok":true,"command":"role get","roleId":"writer","scope":"local","filePath":"/work/kxm/.kxm/roles/writer.yaml","role":{"schema":"kxm.role.v2","id":"writer","purpose":"writer","permission":"edit","description":"Primary implementation agent.","skills":[],"roster":[{"route":"grok-grok-4-7","effort":"medium"},{"route":"pi-qwen3-coder-plus-openrouter","effort":"medium"},{"route":"agy-gemini-3-8-flash-high"},{"route":"agy-gemini-3-8-flash-medium"}]}}
 ```
 
 Captured from this checkout with `node scripts/kxm.mjs role get writer --json`. The path is shortened to `/work/kxm`.
@@ -1317,13 +1316,13 @@ kxm role modify writer --add-skill kxm --dry-run --json
 ```
 
 ```text
-{"schema":"kxm.cli-result.v1","ok":true,"command":"role modify","roleId":"writer","id":"writer","role":{"schema":"kxm.role.v2","id":"writer","purpose":"writer","permission":"edit","description":"Primary implementation agent.","skills":["kxm"],"roster":[{"route":"grok-native","effort":"medium"},{"route":"qwen-openrouter-pi","effort":"medium"},{"route":"gemini-agy"}]},"filePath":"/work/kxm/.kxm/roles/writer.yaml","scope":"local","dryRun":true,"planned":[{"action":"write","target":"/work/kxm/.kxm/roles/writer.yaml"}]}
+{"schema":"kxm.cli-result.v1","ok":true,"command":"role modify","roleId":"writer","id":"writer","role":{"schema":"kxm.role.v2","id":"writer","purpose":"writer","permission":"edit","description":"Primary implementation agent.","skills":["kxm"],"roster":[{"route":"grok-grok-4-7","effort":"medium"},{"route":"pi-qwen3-coder-plus-openrouter","effort":"medium"},{"route":"agy-gemini-3-8-flash-high"},{"route":"agy-gemini-3-8-flash-medium"}]},"filePath":"/work/kxm/.kxm/roles/writer.yaml","scope":"local","dryRun":true,"planned":[{"action":"write","target":"/work/kxm/.kxm/roles/writer.yaml"}]}
 ```
 
 Add an existing route to a role's roster (Not run):
 
 ```bash
-kxm role modify reviewer --add-route fable-claude --add-skill kxm-peer
+kxm role modify reviewer --add-route claude-fable --add-skill kxm-peer
 ```
 
 ### `kxm role resume`
@@ -1411,7 +1410,7 @@ Refusals (exit 1): `lane_missing`, `lane_dirty`, `lane_run_open`, `lane_git_fail
 
 Creates the lane when the record is absent (same rules as `create`), refuses `lane_run_open` when the last run is not settled, then runs the same path as `kxm run --lane <unit> --brief <file>` and `kxm runs drive <runId> --lane <unit>`. `--wait` and `--timeout-ms` are passed through. The run id is stored on the record. Prints the run envelope and the drive result. That open-run check may start the Runtime supervisor; `--dry-run` only attaches to a supervisor that is already running. `kxm lane status` never starts the supervisor.
 
-`--brief` is required. `--workflow` defaults to the lane project's `defaultWorkflow`. `--base` applies only when the lane is created. A live agent step uses the step `timeoutMs` when it is set, otherwise the project `limits.agentStepTimeoutMs` (default 3,600,000). This repository's `implement-only`, `review-arch-only`, and `review-cli-only` workflows are the lane forms of the retired transport recipes.
+`--brief` is required. `--workflow` defaults to the lane project's `defaultWorkflow`. `--base` applies only when the lane is created. A live agent step uses the step `timeoutMs` when it is set, otherwise the project `limits.agentStepTimeoutMs` (default 3,600,000). This repository's `writer-only`, `reviewer-arch-only`, and `reviewer-cli-only` workflows are the lane forms of the retired transport recipes. `implement-only`, `review-arch-only`, and `review-cli-only` still resolve.
 
 Refusals (exit 1): `brief_unreadable`, `lane_unit_invalid`, `lane_exists`, `lane_base_unresolved`, `lane_run_open`, `lane_git_failed`, `lane_not_project`, `lanes_unreadable`.