@kontextmind/kxm 0.7.145 → 0.7.147

package/plugins/kxm/dist/server.js

@@ -14958,6 +14958,7 @@ var MODES = Object.freeze(["headless", "interactive", "either"]);
 var MODEL_KEYS = Object.freeze([
   "schema",
   "id",
+  "aliases",
   "harness",
   "model",
   "vendor",
@@ -14996,8 +14997,51 @@ var FALLBACK_REVERT = Object.freeze(["next_run", "never"]);
 var ROSTER_ENTRY_KEYS = Object.freeze(["route", "effort", "mode"]);
 var CRITIC_PURPOSES = Object.freeze(["reviewer-arch", "reviewer-cli"]);
 
-// plugins/kxm/src/template.ts
+// plugins/kxm/src/workforce-names.mjs
 var import_yaml2 = __toESM(require_dist(), 1);
+var ROLE_IDS = Object.freeze([
+  "writer",
+  "planner",
+  "reviewer-arch",
+  "reviewer-cli",
+  "experiment"
+]);
+var ROUTE_RENAMES = Object.freeze([
+  ["grok-native", "grok-grok-4-7"],
+  ["qwen-openrouter-pi", "pi-qwen3-coder-plus-openrouter"],
+  ["gemini-agy", "agy-gemini-3-8-flash-high"],
+  ["fable-claude", "claude-fable"],
+  ["sol-codex", "codex-gpt-5-6-sol"],
+  ["grok-default", "grok-grok-4-6"],
+  ["fable-default", "claude-fable"]
+]);
+var AGENT_RENAMES = Object.freeze([
+  ["coordinator", "planner"],
+  ["implementer", "writer"],
+  ["critic-arch", "reviewer-arch"],
+  ["critic-cli", "reviewer-cli"]
+]);
+var WORKFLOW_RENAMES = Object.freeze([
+  ["implement-only", "writer-only"],
+  ["review-arch-only", "reviewer-arch-only"],
+  ["review-cli-only", "reviewer-cli-only"]
+]);
+var STEP_RENAMES = Object.freeze([
+  ["implement", "writer"],
+  ["critic-arch", "reviewer-arch"],
+  ["review-arch", "reviewer-arch"],
+  ["critic-cli", "reviewer-cli"],
+  ["review-cli", "reviewer-cli"]
+]);
+var RENAMES = Object.freeze({
+  route: ROUTE_RENAMES,
+  agent: AGENT_RENAMES,
+  workflow: WORKFLOW_RENAMES,
+  step: STEP_RENAMES
+});
+
+// plugins/kxm/src/template.ts
+var import_yaml3 = __toESM(require_dist(), 1);
 
 // plugins/kxm/src/repo-root.ts
 import { existsSync } from "node:fs";
@@ -18253,7 +18297,7 @@ function explainContextItem(id, pool) {
 }
 
 // plugins/kxm/src/memory.ts
-var import_yaml3 = __toESM(require_dist(), 1);
+var import_yaml4 = __toESM(require_dist(), 1);
 import { existsSync as existsSync3, mkdirSync, readdirSync as readdirSync2, readFileSync as readFileSync2, writeFileSync } from "node:fs";
 import { extname as extname2, join as join3, resolve as resolve2 } from "node:path";
 var MEMORY_SCHEMA = "kxm.memory.v1";
@@ -18285,7 +18329,7 @@ function parseFrontmatter(content) {
 }
 function parseMemoryRecord(raw, filename = "memory.md") {
   const { frontmatter, body } = parseFrontmatter(raw);
-  const data = (0, import_yaml3.parse)(frontmatter);
+  const data = (0, import_yaml4.parse)(frontmatter);
   if (!data || typeof data !== "object" || Array.isArray(data)) {
     throw new Error(`invalid YAML frontmatter in ${filename}`);
   }
@@ -18622,7 +18666,7 @@ function boundedRefs(value, field) {
 }
 
 // plugins/kxm/src/skills.ts
-var import_yaml4 = __toESM(require_dist(), 1);
+var import_yaml5 = __toESM(require_dist(), 1);
 import { createHash as createHash4 } from "node:crypto";
 import { existsSync as existsSync4, mkdirSync as mkdirSync2, readdirSync as readdirSync3, readFileSync as readFileSync3, renameSync, rmSync, statSync, writeFileSync as writeFileSync2 } from "node:fs";
 import { dirname as dirname4, join as join4 } from "node:path";
@@ -18666,7 +18710,7 @@ function parseSkillFrontmatter(content) {
     return { frontmatter: null, body: content };
   }
   try {
-    const parsed = (0, import_yaml4.parse)(rawFm);
+    const parsed = (0, import_yaml5.parse)(rawFm);
     if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
       return { frontmatter: parsed, body: rawBody };
     }

package/plugins/kxm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-plugin",
-  "version": "0.7.145",
+  "version": "0.7.147",
   "private": true,
   "type": "module",
   "engines": {

package/plugins/kxm/skills/kxm-browser-auth/SKILL.md

@@ -1,38 +1,37 @@
 ---
 name: kxm-browser-auth
-description: Retrieve application credentials and manage authenticated browser profiles safely via pass-cli without secret exposure.
+description: Retrieve application credentials and manage authenticated browser profiles without secret exposure. Steel uses the svc-steel credential from 1Password via op read.
 ---
 
 # KXM Browser Credentials & Authenticated Profiles
 
-Use this skill to retrieve target application credentials and manage browser session state securely using `pass-cli` as the sole authoritative store.
+Use this skill to retrieve target application credentials and manage browser session state. The Steel `svc-steel` credential comes from 1Password and is read with `op read`. It is never written to disk.
 
 ## Purpose & Scope
 
-- Enforce `pass-cli` as the single source of truth for credentials and API keys.
+- Read the Steel credential at runtime from 1Password.
 - Prevent secrets from leaking into git repositories, logs, prompts, or model-visible tool outputs.
 - Support safe storage and retrieval of session storage state and authenticated profiles.
 
 ## Credential Retrieval Guidelines
 
-### 1. Authoritative Tool: pass-cli
+### 1. Steel credential: 1Password
 
-Always retrieve credentials and API keys directly from `pass-cli`:
+`STEEL_API_KEY` is deprecated. Steel and Caddy do not enforce it. Authenticate as `svc-steel`. Precedence is `STEEL_AUTH_HEADER`, then `STEEL_AUTH_BASIC`, then `STEEL_AUTH_USER` and `STEEL_AUTH_TOKEN`. Those override `STEEL_API_KEY`. `STEEL_API_URL` defaults to `https://steel.kontextmind.com`. `kxm` 0.7.135 or newer is required.
 
 ```bash
-# Retrieve target login password into an environment variable or piping mechanism
-pass-cli item view --vault-name "<vault>" --item-title "<title>" --field password
-
-# Retrieve the Authentik app password for Steel. The proxy accepts Authorization: Basic.
-# STEEL_AUTH_USER is the Authentik username (for example svc-steel).
-pass-cli item view --vault-name "<vault>" --item-title "<steel-item>" --field password
+# Vault kontextmind, item "Steel (svc-steel)", field basic_auth.
+# Do not redirect this into a file.
+export STEEL_AUTH_BASIC="$(op read 'op://kontextmind/Steel (svc-steel)/basic_auth')"
 ```
 
+`STEEL_AUTH_USER` is `svc-steel` when you use the user and token pair. Send the value as `Authorization` on `/v1/devtools`. Never put it in the URL.
+
 ### 2. Secret Redaction Invariants
 
 - **Never** write plain passwords, session tokens, or API keys into markdown docs, commit messages, or prompts.
 - **Never** pass plain credentials as unredacted command line arguments in shared logs.
-- Use environment variable injection (`pass-cli run`) or direct in-memory pipes.
+- Keep the `op read` result in the environment of the process that calls Steel.
 
 ### 3. Profile & Storage State Management
 

package/plugins/kxm/skills/kxm-browser-diagnostics/SKILL.md

@@ -15,16 +15,17 @@ Use this skill to investigate and resolve connectivity failures, CDP attachment
 - **Diagnosis**:
   - KontextMind Steel is behind Authentik forward auth. Unauthenticated requests redirect to `id.kxmd.dev`. Authentik accepts an app password only as `Authorization: Basic`. A Bearer token is refused.
   - Check that `STEEL_AUTH_BASIC` is set, or that both `STEEL_AUTH_USER` and `STEEL_AUTH_TOKEN` are set (`test -n "$STEEL_AUTH_TOKEN" && echo set`); never print the value.
-  - A legacy `STEEL_API_KEY` still uses `x-steel-api-key` and `?apiKey=` through the temporary proxy shim. Prefer the Authentik variables so the credential stays out of URLs.
-- **Remedy**: Re-export the Authentik app password into the session environment. Do not log it.
+  - `STEEL_API_KEY` is deprecated. Steel and Caddy do not enforce it. Do not put a credential in the URL. Direct LAN, tailnet, and host-forward connections are blocked.
+  - `websocketUrl` `ws://steel-browser/` means the client is older than `kxm` 0.7.135. The server returns `wss://steel.kontextmind.com/`.
+- **Remedy**: Re-read the `svc-steel` field `basic_auth` with `op read 'op://kontextmind/Steel (svc-steel)/basic_auth'` into `STEEL_AUTH_BASIC`. Do not log it or write it to disk. Precedence is `STEEL_AUTH_HEADER`, then `STEEL_AUTH_BASIC`, then `STEEL_AUTH_USER` and `STEEL_AUTH_TOKEN`.
 
 ### 2. CDP WebSocket Attachment Failure
 
 - **Symptom**: `WebSocket connection to wss://... failed: 404/500`.
 - **Diagnosis**:
   - Check if the target session ID has already been released or timed out.
-  - Verify ingress WebSocket headers: ensure `nginx.ingress.kubernetes.io/websocket-services` is enabled.
-- **Remedy**: Query `GET /v1/sessions/<id>`. If status is `released`, launch a fresh session.
+  - The CDP path is `/v1/devtools` on `wss://steel.kontextmind.com/` with an `Authorization` header. Caddy must pass the WebSocket upgrade. A credential in the URL is not accepted.
+- **Remedy**: Query `GET /v1/sessions/<id>` with the same `Authorization` header. If status is `released`, launch a fresh session.
 
 ### 3. Session Timeout & Expiration
 

package/plugins/kxm/skills/kxm-browser-explore/SKILL.md

@@ -21,11 +21,12 @@ Use this skill for exploratory navigation, DOM inspection, scraping, and interac
 Ensure an active Steel session exists and obtain its CDP endpoint:
 
 ```bash
-# CDP URL only. The Authentik credential is an Authorization header, not a query parameter.
-CDP_URL="wss://<steel-host>/v1/devtools?sessionId=<sessionId>"
+# CDP path only. The session websocketUrl is wss://steel.kontextmind.com/.
+# The Authentik credential is an Authorization header, not a query parameter.
+CDP_URL="wss://steel.kontextmind.com/v1/devtools?sessionId=<sessionId>"
 ```
 
-Build that URL with `formatCDPConnect()` so the `Authorization: Basic` header is available for the handshake. `STEEL_AUTH_BASIC`, or `STEEL_AUTH_USER` and `STEEL_AUTH_TOKEN`, supplies it. A Bearer token is not accepted.
+Build that URL with `formatCDPConnect()` so the `Authorization` header is available for the handshake. Precedence is `STEEL_AUTH_HEADER`, then `STEEL_AUTH_BASIC`, then `STEEL_AUTH_USER` and `STEEL_AUTH_TOKEN`. Those override `STEEL_API_KEY`, which Steel and Caddy do not enforce. A Bearer token is not accepted. `kxm` 0.7.135 or newer is required. Read `basic_auth` with `op read` and do not write it to disk.
 
 ### 2. Connect a client that can send the header
 

package/plugins/kxm/skills/kxm-browser-session/SKILL.md

@@ -5,7 +5,7 @@ description: Start, attach to, inspect, and release self-hosted Steel browser se
 
 # KXM Browser Session Management
 
-Use this skill to create, inspect, attach automation tools to, and release isolated browser sessions running on your self-hosted Steel deployment. Set `STEEL_API_URL` (and optionally `STEEL_UI_URL`) to your deployment; KXM does not provide one.
+Use this skill to create, inspect, attach automation tools to, and release isolated browser sessions on the Steel server. `STEEL_API_URL` defaults to `https://steel.kontextmind.com`. `steel.theneuro.me` is an alias of that server. `kxm` 0.7.135 or newer is required.
 
 Playwright testing and verification use Obscura by default (`resolveBrowserCdpEndpoint()`, or `npm run e2e`). Use this skill's Steel session for human takeover, MFA, and the live session viewer. Attach Playwright to that session only when `KXM_BROWSER=steel`.
 
@@ -18,9 +18,9 @@ Playwright testing and verification use Obscura by default (`resolveBrowserCdpEn
 
 ## Prerequisites
 
-1. Your own Steel deployment, with `STEEL_API_URL` set to its base URL (for example `https://steel.example.com`) and `STEEL_UI_URL` set if the viewer lives elsewhere (default `$STEEL_API_URL/ui`).
-2. Authentik app-password auth in the environment. The KontextMind Steel hosts are behind Authentik forward auth, which accepts `Authorization: Basic` and refuses a Bearer token. Export `STEEL_AUTH_USER` and `STEEL_AUTH_TOKEN` (or the pre-encoded `STEEL_AUTH_BASIC`) from your password manager, for example `export STEEL_AUTH_TOKEN="$(pass-cli item view --vault-name '<vault>' --item-title '<item>' --field password)"`. Never paste the token into a prompt. `STEEL_API_KEY` is a deprecated shim (`x-steel-api-key` and `?apiKey=`); do not put credentials in URLs.
-3. Network access to remote CDP endpoints on port 443 / 9223.
+1. `kxm` 0.7.135 or newer. The server is `https://steel.kontextmind.com`. Caddy and Authentik forward auth are the only path. Direct LAN, tailnet, and host-forward access is blocked. Sessions return `websocketUrl` `wss://steel.kontextmind.com/` (previously `ws://steel-browser/`).
+2. The `svc-steel` Authentik credential in the environment. Allowed groups are `steel-users`, `kxmd-users`, `kxmd-admins`, and `kxmd-owners`. Read it at runtime and do not write it to disk: `export STEEL_AUTH_BASIC="$(op read 'op://kontextmind/Steel (svc-steel)/basic_auth')"`. Precedence is `STEEL_AUTH_HEADER`, then `STEEL_AUTH_BASIC`, then `STEEL_AUTH_USER` and `STEEL_AUTH_TOKEN`. Those override `STEEL_API_KEY`. `STEEL_API_KEY` is deprecated. Steel and Caddy do not enforce it. A Bearer token is refused. Never put the credential in a URL.
+3. HTTPS to `steel.kontextmind.com` for the CDP path `/v1/devtools`. Send `Authorization` on the handshake.
 
 ## Session Lifecycle States
 
@@ -48,7 +48,7 @@ Playwright testing and verification use Obscura by default (`resolveBrowserCdpEn
 - **Inputs**: Task ID, target URL, session timeout (default 300s, max 1800s), optional proxy or viewport dimensions.
 - **Outputs**:
   - `sessionId`: Unique session UUID.
-  - `cdpUrl`: Remote CDP WebSocket URL (`wss://<steel-host>/v1/devtools?sessionId=<id>`). Send `Authorization: Basic` on the handshake. The URL has no credential when Authentik auth is configured.
+  - `cdpUrl`: `wss://steel.kontextmind.com/v1/devtools?sessionId=<id>`. Send `Authorization` on the handshake. The URL has no credential. The session `websocketUrl` is `wss://steel.kontextmind.com/`.
   - `sessionViewerUrl`: Interactive web session viewer URL (`$STEEL_UI_URL?sessionId=<id>`).
   - `status`: `live` | `idle` | `released`.
 

package/plugins/kxm/skills/kxm-browser-verify/SKILL.md

@@ -77,7 +77,7 @@ Local pages require the launcher flag `--allow-private-network` (the launcher al
 
 ## Steel, only for takeover
 
-When the case is human takeover, MFA, or the live session viewer, set `KXM_BROWSER=steel` and a session id. `connectBrowserOverCdp()` passes `formatCDPConnect()` headers into `chromium.connectOverCDP`. Closing the Playwright browser disconnects the client and does not release the Steel session.
+When the case is human takeover, MFA, or the live session viewer, set `KXM_BROWSER=steel` and a session id. That path needs `kxm` 0.7.135 or newer. `connectBrowserOverCdp()` passes `formatCDPConnect()` headers into `chromium.connectOverCDP` for `/v1/devtools` on `wss://steel.kontextmind.com/`. The `Authorization` header is the `svc-steel` credential (`STEEL_AUTH_HEADER`, then `STEEL_AUTH_BASIC`, then `STEEL_AUTH_USER` and `STEEL_AUTH_TOKEN`). `STEEL_API_KEY` is deprecated and is not enforced. Closing the Playwright browser disconnects the client and does not release the Steel session.
 
 ```typescript
 import { chromium } from "playwright";

package/plugins/kxm/skills/kxm-project-setup/SKILL.md

@@ -22,7 +22,7 @@ to run in their own terminal or in Claude Code.
    `ready`, `repair`, or `legacy`, and `issues` lists anything to fix first.
 2. `kxm init --name "<display name>"` prints
    `initialized KXM project at <root>`. It writes `.kxm/project.yaml`,
-   `.kxm/agents/coordinator.yaml`, `.kxm/agents/implementer.yaml`,
+   `.kxm/agents/planner.yaml`, `.kxm/agents/writer.yaml`,
    `.kxm/gates.yaml`, `.kxm/repo/repo.yaml`, `.kxm/template-provenance.yaml`,
    and `.kxm/workflows/default.yaml`. Outside Git it fails with
    `git_root_required`. In an existing project, plain `kxm init` validates,
@@ -44,7 +44,7 @@ After the user's commit:
 1. `kxm workflow add first --template spec-and-plan` prints
    `Added workflow 'first' to local (<root>/.kxm/workflows/first.yaml)`. Add
    `--dry-run` first to see the path without writing. The template has two
-   steps, `plan` then `review-arch`, both run by the `coordinator` agent with
+   steps, `plan` then `reviewer-arch`, both run by the `planner` agent with
    `repositories: control: read`. It writes nothing and runs no test command,
    and a failed review goes back to `plan` at most twice.
 2. `kxm init` validates it and prints `validated KXM project at <root>`.
@@ -71,7 +71,7 @@ After the user's commit:
 4. `kxm runs status <runId>` prints `created`.
 5. `kxm runs drive <runId> --simulated --wait --timeout-ms 60000` prints a
    `kxm.drive-receipt.v1` whose settlement is terminal `completed`, and exits 0.
-   The run moves from `plan` to `review-arch` to `completed`. Always pass
+   The run moves from `plan` to `reviewer-arch` to `completed`. Always pass
    `--simulated`; without it, drive calls live harnesses.
 6. `kxm runs status <runId>` prints `completed … (receipt verified)`.
 7. `kxm runs receipt <runId>` and `kxm runs list`. Cancel a stuck run with

package/plugins/kxm/src/browser.ts

@@ -5,11 +5,12 @@
  * (`resolveBrowserCdpEndpoint()`). Steel remains the client for human
  * takeover, MFA, and the live session viewer (`KXM_BROWSER=steel`).
  * Manages remote Steel sessions, CDP endpoints, human takeover handoffs,
- * pass-cli credential references, and automated cleanup without leaking secrets.
+ * and automated cleanup without leaking secrets.
  *
- * Hosts behind Authentik forward auth (the KontextMind Steel proxies) accept
- * an app password only as `Authorization: Basic`. A Bearer token is refused.
- * `STEEL_API_KEY` remains a legacy shim: `x-steel-api-key` and `?apiKey=`.
+ * steel.kontextmind.com is reached only through Caddy and Authentik forward
+ * auth. Clients send `Authorization: Basic` for the svc-steel credential.
+ * A Bearer token is refused. `STEEL_API_KEY` is deprecated and is not
+ * enforced by Steel or Caddy. Do not put a credential in the URL.
  */
 
 import { execSync } from "node:child_process";
@@ -188,9 +189,9 @@ export class SteelAuthRedirectError extends Error {
 }
 
 const LEGACY_STEEL_AUTH_WARNING =
-  "kxm: STEEL_API_KEY is deprecated for Steel. Authentik forward auth accepts app passwords only as Authorization: Basic. " +
-  "Set STEEL_AUTH_BASIC, or STEEL_AUTH_USER and STEEL_AUTH_TOKEN. " +
-  "The legacy x-steel-api-key header and apiKey query parameter remain for the temporary proxy shim.\n";
+  "kxm: STEEL_API_KEY is deprecated for Steel. Steel and Caddy do not enforce it. " +
+  "Set STEEL_AUTH_HEADER, or STEEL_AUTH_BASIC, or STEEL_AUTH_USER and STEEL_AUTH_TOKEN. " +
+  "Those override STEEL_API_KEY. Send Authorization on the request, not in the URL.\n";
 
 let legacySteelAuthWarned = false;
 
@@ -310,6 +311,7 @@ export function resolvePassCliApiKey(
     }
   }
   try {
+    // Deprecated lookup. The hosted server does not enforce STEEL_API_KEY.
     const output = execFn(
       'pass-cli item view --vault-name "AI Provider Keys" --item-title "Steel Browser (KontextMind DOKS)" --output json',
     );
@@ -325,8 +327,9 @@ export function resolvePassCliApiKey(
 }
 
 /**
- * Resolve Steel configuration from environment or pass-cli.
+ * Resolve Steel configuration from the environment.
  * Does not write secrets to disk or logs.
+ * Authentik Basic auth overrides `STEEL_API_KEY`. Steel and Caddy do not enforce that key.
  *
  * Authentik Basic auth (`STEEL_AUTH_HEADER`, `STEEL_AUTH_BASIC`, or
  * `STEEL_AUTH_USER` + `STEEL_AUTH_TOKEN`) wins over `STEEL_API_KEY`.
@@ -610,7 +613,7 @@ export class SteelClient {
   }
 
   /**
-   * Launch a new Steel browser session on DOKS.
+   * Launch a new Steel browser session.
    */
   async createSession(options?: CreateSessionOptions): Promise<SteelSession> {
     const timeoutMs = options?.timeoutMs ?? this.config.timeoutMs ?? 300000;

package/plugins/kxm/src/cli/project.ts

@@ -11,6 +11,7 @@ import { runVisionGate } from "../vision-gate.ts";
 import {
   KxmConfigError,
   discoverKxmProjectRoot,
+  lookupKxmResource,
   type KxmInitializationPlan,
 } from "../project-config.ts";
 import { initializeKxmProject } from "../init.ts";
@@ -439,7 +440,7 @@ export function resolveKxmRunTarget(
   }
   const bundle = loadKxmProject(projectRoot, {});
   const workflowId = workflow ?? String(bundle.project.value.defaultWorkflow ?? "default");
-  if (!bundle.workflows.has(workflowId)) {
+  if (!lookupKxmResource(bundle.workflows.values(), workflowId, "workflow")) {
     print(runtime.io, runtime.json, { ok: false, command: "run", error: "run_workflow_unknown", workflow: workflowId, ...envelope }, `workflow ${workflowId} does not exist in this project`);
     return 1;
   }

package/plugins/kxm/src/cli/roles.ts

@@ -15,6 +15,7 @@ import {
   type KxmRoleDefinition,
 } from "../role.ts";
 import { discoverKxmProjectRoot, kxmRoleWriteIssues } from "../project-config.ts";
+import { findYamlBasename } from "../workforce-names.mjs";
 import { ensureKxmSupervisor, kxmRuntimeRequest } from "../runtime-supervisor.ts";
 import { projectRuntimeOwnsRun } from "../runtime-store.ts";
 import { resumeWorkflowFromRuling, type WorkflowRun } from "../workflow.ts";
@@ -185,8 +186,7 @@ export async function cmdRoleAdd(
   // after its roster is parsed, for both local and global scope.
   const projectRoot = discoverKxmProjectRoot(runtime.cwd) ?? runtime.cwd;
   const refuseMissingRoute = (routeId: string): boolean => {
-    const modelFile = join(projectRoot, ".kxm", "models", `${routeId}.yaml`);
-    if (existsSync(modelFile)) return false;
+    if (findYamlBasename(join(projectRoot, ".kxm", "models"), routeId, "route")) return false;
     runtime.io.stderr(`kxm: route '${routeId}' is not a file under .kxm/models/\n`);
     return true;
   };
@@ -398,8 +398,7 @@ export async function cmdRoleModify(
   if (options.addRoute) {
     const routeId = options.addRoute;
     const projectRoot = discoverKxmProjectRoot(runtime.cwd) ?? runtime.cwd;
-    const modelFile = join(projectRoot, ".kxm", "models", `${routeId}.yaml`);
-    if (!existsSync(modelFile)) {
+    if (!findYamlBasename(join(projectRoot, ".kxm", "models"), routeId, "route")) {
       runtime.io.stderr(`kxm: route '${routeId}' is not a file under .kxm/models/\n`);
       return 1;
     }

package/plugins/kxm/src/engine.ts

@@ -3,6 +3,7 @@ import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 import { parse } from "yaml";
 import { listRoleBindings, loadRoutePolicy } from "./routes.ts";
+import { findYamlBasename } from "./workforce-names.mjs";
 import { applyAuthoringWitness, captureWorktreeWitness } from "./worktree-witness.ts";
 import {
   buildFormalContextPacket,
@@ -101,7 +102,7 @@ import {
   type KxmRunRecord,
   type KxmRunStatus,
 } from "./runtime-store.ts";
-import { KxmConfigError, kxmCanonicalJson, type JsonValue, type KxmProjectBundle } from "./project-config.ts";
+import { KxmConfigError, kxmCanonicalJson, lookupKxmResource, type JsonValue, type KxmProjectBundle } from "./project-config.ts";
 import { evaluateArtifactsGate } from "./engine-artifacts.ts";
 import { createCommandObserver } from "./engine-command.ts";
 import {
@@ -277,7 +278,7 @@ export function pinKxmCompiledPlan(
     if (String(bundle.project.value.id) !== run.projectId) {
       throw runtimeError("run_owner_mismatch", runId, "bundle project does not match the run");
     }
-    const workflow = bundle.workflows.get(run.workflowId);
+    const workflow = lookupKxmResource(bundle.workflows.values(), run.workflowId, "workflow");
     if (!workflow) throw runtimeError("run_workflow_unknown", run.workflowId, `workflow ${run.workflowId} does not exist in this project`);
     const revisions = kxmPolicyRevisions(bundle, options);
     if (
@@ -1397,7 +1398,8 @@ function resolveProducerRoute(
       },
     };
   }
-  const agent = readYamlFile(join(projectRoot, ".kxm", "agents", `${agentId}.yaml`));
+  const agentFile = findYamlBasename(join(projectRoot, ".kxm", "agents"), agentId, "agent") ?? agentId;
+  const agent = readYamlFile(join(projectRoot, ".kxm", "agents", `${agentFile}.yaml`));
   const role = typeof agent?.role === "string" ? agent.role : "";
   if (!role) {
     return {
@@ -1424,7 +1426,8 @@ function resolveProducerRoute(
     if (!entry || typeof entry !== "object" || Array.isArray(entry)) continue;
     const record = entry as { route?: unknown; effort?: unknown };
     if (typeof record.route !== "string" || record.route.length === 0) continue;
-    const modelPath = join(projectRoot, ".kxm", "models", `${record.route}.yaml`);
+    const routeFile = findYamlBasename(join(projectRoot, ".kxm", "models"), record.route, "route") ?? record.route;
+    const modelPath = join(projectRoot, ".kxm", "models", `${routeFile}.yaml`);
     const doc = readModelDocument(modelPath);
     if (!doc) {
       return {
@@ -1487,7 +1490,7 @@ function resolveProducerRoute(
       model: selector.slice(slash + 1),
       selector,
       harness,
-      routeId: record.route,
+      routeId: routeFile,
       role,
       permissions,
       ...(typeof record.effort === "string" ? { effort: record.effort } : {}),
@@ -2871,7 +2874,7 @@ export function kxmLiveRunPrerequisites(
   workflowId: string,
   projectRoot: string,
 ): KxmRunHandoff[] {
-  const workflow = bundle.workflows.get(workflowId);
+  const workflow = lookupKxmResource(bundle.workflows.values(), workflowId, "workflow");
   if (!workflow) throw runtimeError("run_workflow_unknown", workflowId, `workflow ${workflowId} does not exist in this project`);
   const plan = compileKxmWorkflow({ id: workflowId, value: workflow.value, logicalPath: workflow.logicalPath });
   const envelope = { plan, projectLimits: kxmProjectAdmissionLimits(bundle), gates: pinnedGatesForCompiledPlan(plan, bundle, projectRoot) };

package/plugins/kxm/src/mcp-server.ts

@@ -11,7 +11,7 @@ import { deliverInboxNotification } from "./inbox.ts";
 import type { HubEvent, MessageRecord } from "./protocol.ts";
 import { sessionTokenFixHint } from "./session-token-hint.ts";
 
-const VERSION = "0.7.145";
+const VERSION = "0.7.147";
 const CONFIGURE_PLUGIN = "/plugin configure kxm@kxm";
 const inbox = new Map<string, MessageRecord>();
 const notifiedInbox = new Set<string>();

package/plugins/kxm/src/modes.ts

@@ -123,7 +123,7 @@ export const DEFAULT_MODES_CONFIG: ModesConfig = Object.freeze({
     browser: {
       description: "Remote Steel browser sessions and visual testing",
       tools: ["steel_session", "steel_scrape", "steel_screenshot"],
-      promptSnippet: "Use Steel on DOKS for browser automation; invoke takeover on MFA.",
+      promptSnippet: "Playwright tests use Obscura. Steel is remote browsing and takeover through Caddy and Authentik; send Authorization, never a credential in the URL.",
     },
   },
 });

package/plugins/kxm/src/policy-draft.mjs

@@ -20,7 +20,7 @@ const TOKEN = /[\s\x00-\x1f]/u;
 const EFFORTS = Object.freeze(["off", "minimal", "low", "medium", "high", "xhigh", "max"]);
 const MODES = Object.freeze(["headless", "interactive", "either"]);
 const MODEL_KEYS = Object.freeze([
-  "schema", "id", "harness", "model", "vendor", "status", "permissions", "origin",
+  "schema", "id", "aliases", "harness", "model", "vendor", "status", "permissions", "origin",
   "thinking", "tags", "capabilities", "priority", "fallbacks", "limits",
 ]);
 const ROLE_KEYS = Object.freeze([
@@ -226,6 +226,9 @@ function validateModelShape(document, id, label, issues) {
   if (document.id !== undefined && document.id !== id) {
     issues.push(issue("schema", "identity_mismatch", label, `declared id ${String(document.id)} does not match ${id}`));
   }
+  if (document.aliases !== undefined && !identifierList(document.aliases)) {
+    issues.push(issue("schema", "schema_pattern", label, "aliases must be unique identifiers"));
+  }
   if (document.harness !== undefined && !identifier(document.harness)) {
     issues.push(issue("schema", "schema_pattern", label, "harness must be an identifier"));
   }
@@ -511,9 +514,12 @@ function validateRoleSemantics(role, id, label, models, options, issues) {
     const admitted = role.roster
       .map((entry) => models.get(entry.route))
       .filter((model) => model && admittedRoute(model));
-    if (admitted.length !== 1) {
-      issues.push(issue("semantic", "critic_route_count", label, "required critic purpose files must list exactly one admitted route"));
-    } else if (admitted[0].permissions.length !== 1 || admitted[0].permissions[0] !== "read-only" || role.permission !== "read-only") {
+    // The first roster entry is the required critic. Later entries are
+    // fallbacks so one provider outage does not stop the role. Every entry
+    // stays read-only; vendor independence uses the first entry only.
+    if (admitted.length < 1) {
+      issues.push(issue("semantic", "critic_route_count", label, "required critic purpose files must list at least one admitted route"));
+    } else if (role.permission !== "read-only" || admitted.some((model) => model.permissions.length !== 1 || model.permissions[0] !== "read-only")) {
       issues.push(issue("semantic", "permission_escalation", label, "critic purpose files must be read-only"));
     }
   }
@@ -549,7 +555,7 @@ function validateCriticVendors(roles, models, options, issues) {
     const admitted = (role.roster ?? [])
       .map((entry) => models.get(entry.route))
       .filter((model) => model && admittedRoute(model));
-    if (admitted.length === 1) critics.push({ purpose, vendor: canonicalVendor(admitted[0].vendor, aliases) });
+    if (admitted.length >= 1) critics.push({ purpose, vendor: canonicalVendor(admitted[0].vendor, aliases) });
   }
   if (critics.length === 2 && critics[0].vendor === critics[1].vendor) {
     issues.push(issue("semantic", "critic_vendor_collision", "roles/reviewer-arch", "required critics must have independent vendors"));