@kontextmind/kxm 0.7.177 → 0.7.179

package/.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "kxm",
       "source": "./plugins/kxm",
       "description": "Durable workflows, peer agents, and kxm tui",
-      "version": "0.7.177",
+      "version": "0.7.179",
       "category": "development",
       "tags": ["kxm", "multi-agent", "workflows", "mcp"]
     }

package/CHANGELOG.md

@@ -6,6 +6,27 @@ All notable user-facing changes are documented here. The project follows [Semant
 
 ### Added
 
+- **KXM configuration now has one owner-validated terminal editor.**
+  `kxm config edit --scope project|user` and OMP/Pi `/kxm config` publish the
+  same `kxm.config.v1` surface. Accepted writes are saved and re-read; rejected
+  values leave file bytes unchanged; clear removes only the selected scope's
+  override. Non-TTY and dry-run calls render one plain frame without writing.
+  The editor excludes endpoints, key references, credentials, arrays, dynamic
+  maps, roster, routes, gates, roles, and workflow definitions. Pi/OMP package
+  discovery now loads the tracked extension bundle, so the private TUI
+  workspace is bundled rather than becoming an unresolved runtime dependency.
+- **OMP can opt into a focused KXM status band with live subscription limits.**
+  `kxm plugin install --omp --status-band` installs the shared extension and
+  selects an OMP custom layout with native active-subscription usage, metered
+  cost, context, model, mode, branch, pull request, and subagent signals. The KXM hook line
+  omits idle, zero-count, clean-ship, cost, and normal local-hub noise while
+  retaining degraded hub, active work, inbox, waiting, dirty/ahead, and update
+  signals. The work widget retains known metered cost and suppresses unknown
+  cost. The flag is explicit because it changes OMP user configuration; restart
+  OMP after applying it.
+- Plugin installation now treats an interrupted harness process with no exit
+  status as a failure for Pi, OMP, and Claude Code instead of reporting success.
+
 - **Hub project identity and its access key live in `.kxm/config.yaml`.**
   `hub.local` and `hub.cloud` hold the URL, the project id to present, and a
   key reference (`key.op` is an `op://` reference, `key.env` is an environment

package/docs/architecture/index.md

@@ -2,7 +2,8 @@
 
 Read from `plans/kxm-roadmap/state.json` and the pages linked below.
 
-Verified date: null. A review pass has not set `architecture.verified`.
+Verified date: 2026-10-11. The roadmap review checked every page listed here
+against the current checkout.
 
 | Page | What it covers |
 | --- | --- |

package/docs/architecture/inventory.md

@@ -1,15 +1,17 @@
 # Surfaces
 
-Read from `plugins/kxm/src/cli.ts`, `scripts/kxm-hub.mjs`, `plugins/kxm/src/hub.ts`,
-`plugins/kxm/src/runtime-supervisor.ts`, `plugins/kxm/src/runtime-paths.ts`,
-`plugins/kxm/src/mcp-server.ts`, `plugins/kxm/src/oneshot-producer.ts`,
-`plugins/kxm/src/studio-layout.ts`, `plugins/kxm/src/cli/types.ts`
-(`workspaceDirs`), `plugins/kxm/src/local-snapshot.ts`, and
-`scripts/kxm-worker.mjs`.
+Read from `plugins/kxm/src/cli.ts`, `plugins/kxm/src/config-editor.ts`,
+`plugins/kxm/src/extension.ts`, `scripts/kxm-hub.mjs`,
+`plugins/kxm/src/hub.ts`, `plugins/kxm/src/runtime-supervisor.ts`,
+`plugins/kxm/src/runtime-paths.ts`, `plugins/kxm/src/mcp-server.ts`,
+`plugins/kxm/src/oneshot-producer.ts`, `plugins/kxm/src/studio-layout.ts`,
+`plugins/kxm/src/cli/types.ts` (`workspaceDirs`),
+`plugins/kxm/src/local-snapshot.ts`, and `scripts/kxm-worker.mjs`.
 
 | Surface | Started by | Listener or path | Store it owns | Defining file |
 | --- | --- | --- | --- | --- |
 | `kxm` CLI | `node scripts/kxm.mjs` or the installed bin | no listener | none | `plugins/kxm/src/cli.ts` |
+| Configuration editor | `kxm config edit --scope project\|user`; OMP/Pi `/kxm config` uses project scope | `.kxm/config.yaml` or the user `config.yaml` | the selected config file; only bounded non-secret scalar fields | `plugins/kxm/src/config-editor.ts` |
 | Hub | `kxm hub start` via `scripts/kxm-hub.mjs` | `127.0.0.1:7331` | `.kxm/state/kxm.db` under the workspace state dir | `plugins/kxm/src/hub.ts` |
 | Hub credentials | written when the hub starts | `hub-env.json` under the user state root | that JSON file, not SQLite | `plugins/kxm/src/hub-env.ts` |
 | Hub cloud binding | `kxm hub bind <url> --cloud --token-env/--token-command` | no listener; writes the binding record and never stores the token | binding record; token stays in the named env or command | `plugins/kxm/src/cli/hub.ts` |

package/docs/contributing/decisions.md

@@ -2,7 +2,7 @@
 title: "Decisions"
 description: "Decisions of medium significance or higher made by automated KXM work in this repository. One entry per decision: the options evaluated with their weights, and why the selected option won. Recorded the turn the decision is taken."
 audience: "agents and maintainers"
-updated: "2026-10-02"
+updated: "2026-10-11"
 ---
 
 # Decisions
@@ -172,3 +172,29 @@ Evidence: Evidence: merge-base 77beda4 predates the CLI restructure; merge-tree
 - Selected: stash-apply onto a fresh lane off `origin/main`, take upstream
   for claude-bridge, `dist`, and `package.json`, and merge the rest.
 Evidence: Evidence: `git diff HEAD origin/main` on the stale branch showed upstream's claude-bridge fix and curl downloader already landed; the lane port keeps both those and the npm/`--all` behavior.
+
+## 2026-10-11 — OMP subscription status integration (extension)
+
+- Context: KXM's extension already owns a hook status line while OMP can
+  render OAuth subscription quota through its native cached `usage`
+  segment. Adding quota to KXM's line would duplicate OMP data; changing
+  the OMP layout during every plugin install would unexpectedly overwrite
+  an operator's chosen status line.
+- Options:
+  - Run `omp usage` from the KXM extension — weight 0.1. Direct, but adds
+    process work to refreshes, duplicates OMP's cache and rendering, and
+    expands the credential-bearing boundary.
+  - Configure the native OMP segment on every install — weight 0.3.
+    Discoverable, but silently mutates unrelated user configuration.
+  - Add explicit `kxm plugin install --omp --status-band` opt-in and use
+    OMP's native `usage` segment — weight 0.9. No duplicate quota
+    implementation; configuration mutation is deliberate and verifiable.
+- Selected: explicit opt-in. The installer snapshots the three global
+  status-line entries, writes the focused layout, verifies effective
+  values in the current working directory, restores prior values, and
+  resets entries that were previously absent or `null`.
+- Solid recommendation: keep subscription quota in OMP's native `usage`
+  segment and KXM workflow state in the separate hook status line.
+- Interim recommendation: use the opt-in installer until OMP exposes a
+  first-class transactional status-preset API.
+Evidence: `plugins/kxm/src/cli/plugins.ts`, `plugins/kxm/src/session-work.ts`, and `test/core/cli.test.ts`.

package/docs/contributing/development.md

@@ -170,8 +170,10 @@ see the [plugin README](../../plugins/kxm/README.md).
 ### Pi package
 
 The root `package.json` carries the `pi-package` keyword and a `pi` block:
-`pi.extensions` lists `./plugins/kxm/src/extension.ts` and `pi.skills` lists
-`./plugins/kxm/skills`. Pi loads the TypeScript source itself.
+`pi.extensions` lists the tracked `./plugins/kxm/dist/extension.js` bundle and
+`pi.skills` lists `./plugins/kxm/skills`. Development can still load
+`plugins/kxm/src/extension.ts` explicitly; published installs use the bundle so
+private workspace packages are never unresolved runtime dependencies.
 
 ### Agent Skills
 

package/docs/contributing/test-matrix.md

@@ -135,6 +135,7 @@ The context suites in detail:
 |---|---|
 | `init`, `validate`, `export` and `watch` in isolated workspaces | `cli.test.ts`, `github-watch.test.ts` |
 | Every mutating command under `--dry-run` leaves the workspace, state root and hub untouched | `cli-experience.test.ts` ("every mutating command under --dry-run leaves the workspace, state root, and hub untouched") |
+| Owner-validated config editor: persisted writes, exact-byte refusals, scope inheritance, scalar-only publication, CLI frames, and OMP/Pi lifecycle | `config-editor.test.ts` |
 | Hub auto-start reuses a healthy or claimed hub, persists one admin key, and fails closed on bad claims | `hub-autostart.test.ts` |
 | Hub-local session brief from SQLite without message bodies; `hub bind` reports on, off or unknown | `session-work.test.ts`, `cli.test.ts` |
 | Session manifests, fail-closed rosters, worker and result envelopes, hub-owned envelope fields | `session.test.ts`, `cli.test.ts`, `envelope.test.ts`, `envelope-contract.test.ts` |

package/docs/contributing/tui-components.md

@@ -8,10 +8,10 @@ The kit is the workspace package
 [`packages/core/tui`](../../packages/core/tui) (`@kontextmind/tui`), also
 published on the product as `@kontextmind/kxm/tui`. It is one declarative
 surface model, one renderer, one input decoder, one contribution registry, and
-thin host adapters. Today `kxm dash` uses only its ANSI theme; the panel,
-registry and adapters are exported for integrators, and no shipped `kxm` command
-draws a panel yet. See [Packages and workspaces](packages.md) for the layout
-convention it follows.
+thin host adapters. `kxm config edit --scope project|user` and OMP/Pi
+`/kxm config` ship the first production panel on this kit. `kxm dash` uses its
+ANSI theme but keeps its existing hub and SSE loop. See
+[Packages and workspaces](packages.md) for the layout convention the kit follows.
 
 ## Package layout
 
@@ -99,6 +99,24 @@ The reducer is pure
 effects; the component layer runs them. That is the same contract that keeps
 `kxm dash` navigation testable, and it is why no key handling needs a terminal.
 
+## Shipped configuration editor
+
+The `kxm/config` contribution in
+[`config-editor.ts`](../../plugins/kxm/src/config-editor.ts) owns the supported
+`kxm.config.v1` fields. Both `kxm config edit` and `/kxm config` register that
+same contribution; the CLI uses the standalone adapter, while the OMP/Pi
+extension uses the generic Pi custom panel.
+
+Project scope shows built-in, user, then project values. User scope deliberately
+shows only built-in and user values, so a project override cannot make a
+successful user edit look unchanged. Clear deletes the selected scope's key;
+the registry then re-reads the inherited value from disk.
+
+The descriptor exposes only bounded scalar preferences. It does not expose hub
+URLs, key references, credentials, arrays, dynamic maps, roster, routes, gates,
+roles, or workflow definitions. Unknown section/field pairs and invalid values
+are rejected before the config writer runs.
+
 ## Adding a surface
 
 1. Write the descriptor table. Each row is one setting: id, key path, label,

package/docs/reference/cli-reference.md

@@ -13,7 +13,7 @@ Output shown under examples was captured from a source checkout, inside a throwa
 - [Task to command](#task-to-command)
 - Setup: [`init`](#kxm-init), [`config`](#kxm-config), [`completion`](#kxm-completion), [`trust`](#kxm-trust)
 - Hub and sessions: [`hub`](#kxm-hub-view), [`session`](#kxm-session), [`dash`](#kxm-dash), [`studio`](#kxm-studio)
-- Harnesses, models, and roles: [`harness`](#kxm-harness), [`auth`](#kxm-auth), [`update`](#kxm-update), [`models`](#kxm-models), [`routes`](#kxm-routes), [`role`](#kxm-role)
+- Harnesses, models, and roles: [`harness`](#kxm-harness), [`plugin`](#kxm-plugin), [`auth`](#kxm-auth), [`update`](#kxm-update), [`models`](#kxm-models), [`routes`](#kxm-routes), [`role`](#kxm-role)
 - Running work: [`lane`](#kxm-lane), [`land`](#kxm-land), [`assign`](#kxm-assign), [`run`](#kxm-run), [`runs`](#kxm-runs), [`docs`](#kxm-docs), [`runtime`](#kxm-runtime), [`agent`](#kxm-agent), [`workflow`](#kxm-workflow), [`gate`](#kxm-gate), [`peer`](#kxm-peer), [`task`](#kxm-task), [`goal`](#kxm-goal), [`suggest`](#kxm-suggest), [`explain`](#kxm-explain)
 - Context and learning: [`context`](#kxm-context), [`memory`](#kxm-memory), [`skills`](#kxm-skills), [`improve`](#kxm-improve), [`routing`](#kxm-routing), [`prices`](#kxm-prices)
 - Operations: [`backup`](#kxm-backup), [`restore`](#kxm-restore), [`tenant`](#kxm-tenant), [`ssh`](#kxm-ssh), [`help`](#kxm-help)
@@ -101,7 +101,7 @@ kxm -V
 `--dry-run` changes nothing: no file is written, deleted, or moved, no request that changes hub or Runtime state is sent, no process is started, and no remote command runs. A command that cannot say what it would do without doing some of it refuses the flag instead of acting.
 
 - Plan with `planned`: `backup`, `restore`, `config set`, `role add|remove|modify|resume`, `workflow add|remove|modify`, `goal create`, `task create|run|sync`, `memory note|sync`, `skills evaluate|promote|reject`, `context promote`, `context wiki-compile --out`, `auth token`, `session token`, `session brief`, and `ssh run|file|close`. Each prints its normal result plus `dryRun: true` and `planned`, a list of `{action, target}` entries whose `action` is `write`, `delete`, `move`, `request`, or `ssh`. Text mode prints `dry run: <summary>` and one indented `would <action> <target>` line per entry (`session brief` appends `dry run: would write <file>` lines to the brief instead).
-- Plan in their own shape (described in each section): `init`, `run`, `runs drive|cancel`, `docs build|serve`, `runtime start|stop|sync-retry`, `hub start|stop|bind|unbind`, `session start|stop`, `agent worker`, `dash`, `studio serve`, `models inventory-refresh`, `routes admit|disable`, `update`, `completion install`, `workflow start|signal|export|checkpoint|record|wait`, every `peer` subcommand, `gate degrade|signal`, `skills create`, and `improve report`. `gate github watch --dry-run` still polls GitHub but does not post the signal.
+- Plan in their own shape (described in each section): `init`, `run`, `runs drive|cancel`, `docs build|serve`, `runtime start|stop|sync-retry`, `hub start|stop|bind|unbind`, `session start|stop`, `agent worker`, `dash`, `studio serve`, `models inventory-refresh`, `routes admit|disable`, `update`, `completion install`, `workflow start|signal|export|checkpoint|record|wait`, every `peer` subcommand, `gate degrade|signal`, `skills create`, `improve report`, and `config edit`. `config edit --dry-run` prints one plain frame and writes nothing. `gate github watch --dry-run` still polls GitHub but does not post the signal.
 - Read-only commands run as usual, without leaving a trace: a local SQLite store is opened without creating `-wal` or `-shm` files, and `runs status|list|receipt` only attach to a running Runtime supervisor. With no supervisor running they exit 2 with `dry_run_unsupported` instead of starting one. `context wiki-compile --dry-run` still asks the hub to compile, which is a read.
 - Refused: `kxm models` (the interactive screen) and `kxm prices acknowledge` exit 2 with `dry_run_unsupported`. The CLI keeps one list of the commands that answer `--dry-run` and refuses every other command the same way before it runs, so a command added without dry-run support fails closed.
 
@@ -339,6 +339,34 @@ Stop harness extensions from starting a hub (Not run):
 kxm config set hub.autoStart off --scope user
 ```
 
+### `kxm config edit`
+
+```text
+kxm config edit --scope project|user
+```
+
+Opens the terminal editor for one fixed list of scalar `kxm.config.v1` preferences. The same editor is `/kxm config` inside the OMP/Pi TUI, and that command mounts only when the session mode is `tui`.
+
+| Option | Argument | Default | Description |
+|---|---|---|---|
+| `--scope` | `project` or `user` | none | Which file a write or clear changes. Required |
+
+- `--scope project` writes `.kxm/config.yaml` and shows built-in, then user, then project. `--scope user` writes `$KXM_USER_CONFIG_DIR/config.yaml` (default `~/.config/kxm/config.yaml`) and shows built-in, then user. The project file does not mask the user view.
+- A write checks the section and field together, then checks the value. A refusal leaves that file's bytes unchanged. Clear deletes only that scope's key.
+- The editor accepts workflow and harness ids that contain `@`. Whitespace and control characters are refused.
+- A stored scalar whose runtime type does not match the field is shown with `stored type does not match this field`. The text `true` is not a boolean.
+- It does not edit hub URLs, key references, credentials, arrays, dynamic maps, roster, routes, gates, roles, or workflow YAML. `kxm config get`, `set`, and `list` are unchanged and still accept keys this editor does not.
+- No TTY, and `--dry-run`, each print one plain frame and write nothing. `--json`, or a scope other than `project` or `user`, exits 2 and writes nothing.
+
+```bash
+kxm config edit --scope project --dry-run
+```
+
+```text
+KXM configuration
+...
+```
+
 ## `kxm completion`
 
 ```text
@@ -671,13 +699,14 @@ Prints recent tasks (workflow runs) and plans (journal entries) from the local h
 - Side effects: on first use it mints a 24-hour operator session token and writes it to `<KXM_USER_CONFIG_DIR>/session.token` (mode 0600), and it caches the brief in `.kxm/state/session-brief.json`. Under `--dry-run` it still probes the hub and prints the brief, but it mints no token, writes neither file, and appends a `dry run: would write <file>` line for each (JSON: `dryRun` and `planned`); with no saved token the output carries no token. `--token --dry-run` plans only the token file.
 - The default text output ends with the session token, and `--token` prints only the token. Treat the output as a credential.
 - JSON (`kxm.session-brief.v1`) keys: `generatedAt`, `staleSeconds`, `source`, `hub` (`state`, `evidence`, `online`, `url`, `scope`), `stats`, `tasks`, `plans`, `statusLine`, `widgetLines`, `sessionToken`.
+- The status line omits cost because harness-native bands already own that signal. The work widget includes known metered cost and suppresses unknown cost.
 
 ```bash
 kxm session brief
 ```
 
 ```text
-kxm hub:on · idle · dirty
+kxm · dirty
 
 No recent tasks or plans.
 
@@ -689,7 +718,7 @@ kxm session brief --status
 ```
 
 ```text
-kxm hub:on · idle
+kxm
 ```
 
 ```bash
@@ -697,7 +726,7 @@ kxm session brief --json
 ```
 
 ```text
-{"schema":"kxm.session-brief.v1","generatedAt":"2026-09-23T13:49:55.253Z","staleSeconds":5,"source":"legacy","hub":{"state":"off","evidence":"probed","online":false,"url":"http://127.0.0.1:59998","scope":"loopback"},"stats":{"activeTasks":0,"waitingTasks":0,"planCount":0,"inbox":0,"runTotal":0},"tasks":[],"plans":[],"statusLine":"kxm hub:off · idle",...,"sessionToken":"<token>"}
+{"schema":"kxm.session-brief.v1","generatedAt":"2026-09-23T13:49:55.253Z","staleSeconds":5,"source":"legacy","hub":{"state":"off","evidence":"probed","online":false,"url":"http://127.0.0.1:59998","scope":"loopback"},"stats":{"activeTasks":0,"waitingTasks":0,"planCount":0,"inbox":0,"runTotal":0},"tasks":[],"plans":[],"statusLine":"kxm · hub:off",...,"sessionToken":"<token>"}
 ```
 
 Before the first token exists:
@@ -707,7 +736,7 @@ kxm session brief --status --dry-run
 ```
 
 ```text
-kxm hub:on · idle · dirty
+kxm · dirty
 dry run: would write ~/.config/kxm/session.token
 dry run: would write /work/proj/.kxm/state/session-brief.json
 ```
@@ -924,6 +953,34 @@ kxm harness list --json
 {"schema":"kxm.cli-result.v1","ok":true,"command":"harness list","defaultHarness":"pi","harnesses":[{"id":"pi","label":"Pi","default":true,"mode":"headless","detected":false,"authenticated":false,"dispatch":{"status":"no","supported":false,"reason":"not_detected"},"canUpdate":{"self":true,"extensions":true,"models":true},"issues":[]},...]}
 ```
 
+## `kxm plugin`
+
+### `kxm plugin install`
+
+```text
+kxm plugin install [--all | --pi | --omp | --claude] [--status-band]
+```
+
+Installs the KXM extension into every discovered supported harness, or only the explicitly selected harnesses. `--status-band` is an explicit OMP-only opt-in: after installing the extension, it switches OMP to a focused custom status layout with model, mode, branch, pull request, subagent, active-subscription usage, metered cost, and context signals. It uses OMP's native background usage fetch and does not call `omp usage`. To support safe rollback, KXM parses OMP's global config file and retains only the three existing `statusLine` entries for the duration of the command; it does not use credential values.
+
+| Option | Argument | Default | Description |
+|---|---|---|---|
+| `--all` | none | on when no harness flag is present | Install into every discovered supported harness |
+| `--pi` | none | off | Install into Pi |
+| `--omp` | none | off | Install into OMP |
+| `--claude` | none | off | Install into Claude Code |
+| `--status-band` | none | off | Replace OMP's status layout with the focused subscription layout |
+
+- Mutates the selected harness installations. `--status-band` asks OMP for its global config directory, snapshots the three global status-line entries from `config.yml` or `config.yaml`, writes through `omp config set`, and verifies the effective values in the current working directory. On failure it restores prior values and resets entries that were previously absent or `null`. Restart OMP afterward.
+- `--dry-run` reports the install and status-band intent without invoking a harness command.
+- `--status-band` fails when OMP is not selected or detected. A failed or locally shadowed OMP configuration is reported as a failed OMP result rather than a successful install; verification covers the directory where the command runs, not every other project's OMP overrides.
+
+```bash
+kxm plugin install --omp --status-band
+```
+
+Not run in this reference: installs a plugin and changes OMP user configuration.
+
 ## `kxm auth`
 
 ### `kxm auth token`

package/docs/reference/config-reference.md

@@ -1315,6 +1315,14 @@ every reader found in `plugins/kxm/src`, `scripts/`, and `packages/`; the
 | `telemetry.anonymize` | Boolean | `true` | Not read by any code path yet |
 | `telemetry.userTelemetryDir` | Path | none | Not read by any code path yet |
 
+The terminal editor exposes a fixed non-secret scalar subset of this table:
+theme and token budget; default workflow and harness; dashboard settings;
+default tracker; hub auto-start; improvement policy and thresholds; shadow
+execution and circuit-breaker scalars; and federated/anonymized telemetry
+flags. It deliberately excludes arrays, dynamic maps, paths, sync-provider
+details, hub endpoints and key references, credentials, and trusted roster,
+route, gate, role, or workflow-definition files.
+
 Under `auto_threshold`, `minRuns`, `minPassRate` and `minCostSavings` are the
 distinct runs, the accepted share, and the mean recorded cost per attempt a
 candidate needs before `kxm improve` reports it ready for review. A group with
@@ -1376,9 +1384,15 @@ Commands:
 - `kxm config list` prints `user`, `defaults`, `dash`, `sync`, and
   `loadedFrom`; `--json` prints every section. An empty `loadedFrom` means no
   file was found.
-
-There is no `kxm config unset`. Delete the key from the file to fall back to
-the next layer; setting `null` stores `null`.
+- `kxm config edit --scope project|user` opens the owner-validated terminal
+  editor. Project scope shows Base → User → Project; user scope shows Base →
+  User so a project override cannot mask the edit. Clear deletes that scope's
+  leaf and re-reads the inherited value. Non-TTY and `--dry-run` calls print one
+  plain frame without writing. Invalid scope and `--json` are refused.
+
+There is no standalone `kxm config unset` command. The editor's clear action
+deletes its supported key from the selected scope; for other keys, delete the
+key from the file. Setting `null` stores `null` and does not mean inherit.
 
 ### Configuration layers
 

package/docs/reference/tools.md

@@ -323,11 +323,11 @@ Proposes a change to one authoritative state key. Despite its name, it only prop
 
 Returns `{ "proposalId" }`. Blocked by the `read-only` preset; under an attempt token it needs an explicit grant.
 
-## Pi extension commands
+## Pi and OMP extension commands
 
-The Pi extension connects the session to the hub at start, registers the 19 tools, and adds two slash commands. It also keeps a `kxm` status line and `kxm-work` and `kxm-progress` widgets, refreshed after every turn.
+The shared Pi-compatible extension connects the session to the hub at start, registers the 19 tools, and adds two slash commands. It also keeps a concise `kxm` status line and `kxm-work` and `kxm-progress` widgets, refreshed after every turn.
 
-In Pi:
+In Pi or OMP:
 
 ```text
 /kxm
@@ -344,7 +344,9 @@ In Pi:
 | `/kxm memory` | Shows the project memory brief by running `kxm memory brief` (or `$KXM_BIN`) |
 | `/kxm help` | Lists the subcommands. Any unknown subcommand shows the same help |
 
-The task picker, `Continue KXM work?`, lists recent tasks and plans and puts the chosen prompt in the editor. It also appears when a Pi TUI session starts, begins a new session or forks, unless `KXM_SESSION_BRIEF=off`.
+The task picker, `Continue KXM work?`, lists recent tasks and plans and puts the chosen prompt in the editor. It also appears when a Pi or OMP TUI session starts, begins a new session or forks, unless `KXM_SESSION_BRIEF=off`.
+
+OMP can also show the active OAuth subscription's quota windows in its native status band. Install the extension and opt into KXM's focused layout with `kxm plugin install --omp --status-band`, then restart OMP. The layout keeps model, mode, branch, pull request, subagent, subscription usage, metered cost, and context signals; it does not add OMP's inline `status` segment because OMP already renders the KXM hook status on its own line. If `statusLine.showHookStatus` is disabled, the native usage and cost segments remain but the separate KXM line stays hidden.
 
 Inbound requests arrive as a displayed message that starts a model turn: `steer` at the next decision boundary, `followUp` (and `nextTurn`, which an unattended worker cannot wait on) after the current work. The final response is returned as the reply. If the model provider fails, the request stays `delivered` so a supervised worker can recover it. The extension also registers model providers; see [Harness routing](harness-routing.md) and [Nous providers](../guides/nous-providers.md).
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kontextmind/kxm",
-  "version": "0.7.177",
+  "version": "0.7.179",
   "description": "KXM local-first multi-agent orchestration and operator dashboard",
   "type": "module",
   "author": "KontextMind",
@@ -70,7 +70,7 @@
   },
   "pi": {
     "extensions": [
-      "./plugins/kxm/src/extension.ts"
+      "./plugins/kxm/dist/extension.js"
     ],
     "skills": [
       "./plugins/kxm/skills"

package/plugins/kxm/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "kxm",
   "displayName": "KXM",
-  "version": "0.7.177",
+  "version": "0.7.179",
   "description": "Headless multi-agent orchestration, durable workflows, and a live operator dashboard for Pi and Claude Code",
   "author": {
     "name": "KontextMind",

package/plugins/kxm/dist/claude-hook.js

@@ -886,12 +886,12 @@ import { spawnSync } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync5, renameSync as renameSync2, writeFileSync as writeFileSync3 } from "node:fs";
 import { join as join4 } from "node:path";
-function hubPrefix(hub) {
+function hubStatusPart(hub) {
   const suffix = hub?.scope === "remote" ? "/remote" : "";
-  if (hub?.state === "on" || hub?.state === void 0 && hub?.online === true) return `kxm hub:on${suffix}`;
-  if (hub?.state === "off" || hub?.state === void 0 && hub?.online === false) return `kxm hub:off${suffix}`;
-  if (hub?.state === "unknown") return `kxm hub:unknown${suffix}`;
-  return "kxm";
+  if (hub?.state === "off" || hub?.state === void 0 && hub?.online === false) return `hub:off${suffix}`;
+  if (hub?.state === "unknown") return `hub:unknown${suffix}`;
+  if (hub?.scope === "remote") return "hub:remote";
+  return void 0;
 }
 function truncate(value, width) {
   const text = value.replace(/\s+/g, " ").trim();
@@ -969,17 +969,17 @@ function readGitShip(cwd) {
 }
 function formatCostLine(input) {
   if (!input) return void 0;
-  if (input.sessionCostUsd === void 0 && input.runCostUsd === void 0) return "unknown";
+  if (input.sessionCostUsd === void 0 && input.runCostUsd === void 0) return void 0;
   const sess = input.sessionCostUsd !== void 0 ? `$${input.sessionCostUsd.toFixed(2)} sess` : void 0;
   const run = input.runCostUsd !== void 0 ? `$${input.runCostUsd.toFixed(2)} run` : void 0;
   const route = input.harness && input.model ? `${input.harness}/${input.model}` : input.model ?? void 0;
   const parts = [sess, run, route].filter(Boolean);
-  return parts.length > 0 ? parts.join(" \xB7 ") : "unknown";
+  return parts.length > 0 ? parts.join(" \xB7 ") : void 0;
 }
-function renderStatusLine(statsOrBrief, current, hub, ship, updateLatest, cost) {
+function renderStatusLine(statsOrBrief, current, hub, ship, updateLatest) {
   if ("schema" in statsOrBrief && statsOrBrief.schema === "kxm.session-brief.v1") {
     const brief = statsOrBrief;
-    if (!current && !hub && !ship && !updateLatest && !cost) {
+    if (!current && !hub && !ship && !updateLatest) {
       return brief.statusLine;
     }
     return formatSessionStatusLine(
@@ -987,46 +987,39 @@ function renderStatusLine(statsOrBrief, current, hub, ship, updateLatest, cost)
       current,
       hub ?? brief.hub,
       ship,
-      updateLatest,
-      cost ?? brief.cost
+      updateLatest
     );
   }
-  return formatSessionStatusLine(statsOrBrief, current, hub, ship, updateLatest, cost);
-}
-function formatSessionStatusLine(stats, current, hub, ship, updateLatest, cost) {
-  const head = hubPrefix(hub);
-  if (!current && stats.activeTasks === 0 && stats.planCount === 0 && stats.inbox === 0) {
-    const idle = hub?.online === void 0 && hub?.state === void 0 ? "kxm idle" : `${head} \xB7 idle`;
-    const withShip = ship?.dirty ? `${idle} \xB7 dirty` : ship && ship.ahead > 0 ? `${idle} \xB7 ${ship.ahead} local` : idle;
-    const withCost = cost ? `${withShip} \xB7 ${cost}` : withShip;
-    const finalLine = updateLatest ? `${withCost} \xB7 upd ${updateLatest}` : withCost;
-    return finalLine.length <= 80 ? finalLine : `${finalLine.slice(0, 79)}\u2026`;
-  }
-  const parts = [];
-  if (current?.kind === "task") parts.push(`${head} ${current.detail}`);
-  else if (current?.kind === "plan") parts.push(`${head} plan ${truncate(current.detail, 36)}`);
-  else parts.push(head);
-  parts.push(`${stats.activeTasks} task${stats.activeTasks === 1 ? "" : "s"}`);
+  return formatSessionStatusLine(statsOrBrief, current, hub, ship, updateLatest);
+}
+function formatSessionStatusLine(stats, current, hub, ship, updateLatest) {
+  const parts = ["kxm"];
+  const hubPart = hubStatusPart(hub);
+  if (hubPart) parts.push(hubPart);
+  if (current?.kind === "task") parts.push(current.detail);
+  else if (current?.kind === "plan") parts.push(`plan ${truncate(current.detail, 36)}`);
+  if (stats.activeTasks > 0) parts.push(`${stats.activeTasks} task${stats.activeTasks === 1 ? "" : "s"}`);
   if (stats.waitingTasks > 0) parts.push(`${stats.waitingTasks} waiting`);
-  parts.push(`${stats.planCount} plan${stats.planCount === 1 ? "" : "s"}`);
+  if (stats.planCount > 0) parts.push(`${stats.planCount} plan${stats.planCount === 1 ? "" : "s"}`);
   if (stats.inbox > 0) parts.push(`inbox ${stats.inbox}`);
   if (ship?.dirty) parts.push("dirty");
   else if (ship && ship.ahead > 0) parts.push(`${ship.ahead} local`);
-  if (cost) parts.push(cost);
   if (updateLatest) parts.push(`upd ${updateLatest}`);
-  const line = parts.join(" \xB7 ");
-  return line.length <= 80 ? line : `${line.slice(0, 79)}\u2026`;
+  return truncate(parts.join(" \xB7 "), 80);
 }
 function formatSessionWidget(stats, current, hub, ship, updateLatest, cost) {
-  const hubMark = hub?.state === "on" || hub?.online === true ? "hub:on  " : hub?.state === "off" || hub?.online === false ? "hub:off  " : hub?.state === "unknown" ? "hub:unknown  " : "";
-  const lines = [
-    `KXM  ${hubMark}${stats.activeTasks} tasks  ${stats.waitingTasks} waiting  ${stats.planCount} plans  inbox ${stats.inbox}`
-  ];
+  const suffix = hub?.scope === "remote" ? "/remote" : "";
+  const hubMark = hub?.state === "on" || hub?.state === void 0 && hub?.online === true ? `hub:on${suffix}` : hub?.state === "off" || hub?.state === void 0 && hub?.online === false ? `hub:off${suffix}` : hub?.state === "unknown" ? `hub:unknown${suffix}` : void 0;
+  const summary = ["KXM", hubMark];
+  if (stats.activeTasks > 0) summary.push(`${stats.activeTasks} task${stats.activeTasks === 1 ? "" : "s"}`);
+  if (stats.waitingTasks > 0) summary.push(`${stats.waitingTasks} waiting`);
+  if (stats.planCount > 0) summary.push(`${stats.planCount} plan${stats.planCount === 1 ? "" : "s"}`);
+  if (stats.inbox > 0) summary.push(`inbox ${stats.inbox}`);
+  const lines = [summary.filter(Boolean).join(" \xB7 ")];
   if (current) lines.push(`now  ${current.kind}  ${truncate(current.detail, 56)}`);
-  else if (stats.latestPlan) lines.push(`plan ${truncate(stats.latestPlan, 60)}`);
-  else lines.push("now  no selected work");
-  lines.push(formatShipLine(ship));
-  if (cost) lines.push(`cost  ${cost}`);
+  else if (stats.latestPlan) lines.push(`plan  ${truncate(stats.latestPlan, 60)}`);
+  if (ship?.dirty || ship && ship.ahead > 0) lines.push(formatShipLine(ship));
+  if (cost && cost !== "unknown") lines.push(`cost  ${cost}`);
   if (updateLatest) lines.push(`update  ${updateLatest} available \xB7 kxm update --kxm`);
   return lines;
 }
@@ -1046,7 +1039,7 @@ function buildSessionBrief(snapshot, current, hub, ship, updateLatest, cost, ses
   const tasks = uniqueLabels(recentTasks(snapshot.runs).map(taskItem));
   const plans = uniqueLabels(snapshot.plans.slice(0, MAX_SESSION_BRIEF_PLANS).map(planItem));
   const resolvedHub = hub ?? { state: "off", evidence: "unconfigured", online: false };
-  const statusLine = formatSessionStatusLine(stats, current, resolvedHub, ship, updateLatest, cost);
+  const statusLine = formatSessionStatusLine(stats, current, resolvedHub, ship, updateLatest);
   const widgetLines = formatSessionWidget(stats, current, resolvedHub, ship, updateLatest, cost);
   return {
     schema: SESSION_BRIEF_SCHEMA,
@@ -1110,7 +1103,7 @@ function estimateSessionCost(stateDir) {
       latestModel = r.effectiveModel ?? r.requestedModel ?? latestModel;
       latestHarness = r.harness ?? latestHarness;
     }
-    if (!hasMetered) return "unknown";
+    if (!hasMetered) return void 0;
     const route = latestHarness && latestModel ? `${latestHarness}/${latestModel}` : latestModel;
     return `$${totalCost.toFixed(2)} sess${route ? ` \xB7 ${route}` : ""}`;
   } catch {
@@ -1147,8 +1140,7 @@ function loadSessionBrief(cwd, env = process.env, current, hub, options = {}) {
           current,
           effectiveHub,
           options.ship,
-          options.updateLatest,
-          effectiveCost
+          options.updateLatest
         );
         const widgetLines = formatSessionWidget(
           cached.stats,
@@ -1213,8 +1205,7 @@ async function loadSessionBriefAsync(cwd, env = process.env, current, hub, optio
           current,
           effectiveHub,
           options.ship,
-          void 0,
-          effectiveCost
+          void 0
         );
         const widgetLines = formatSessionWidget(
           cached.stats,
@@ -1275,7 +1266,7 @@ function sessionBriefPickerEnabled(input) {
 function parseKxmSlashArgs(args) {
   const raw = String(args ?? "").trim().toLowerCase();
   if (raw === "" || raw === "brief") return "brief";
-  if (raw === "status" || raw === "hub" || raw === "memory" || raw === "progress" || raw === "workflow" || raw === "help") return raw;
+  if (raw === "status" || raw === "hub" || raw === "memory" || raw === "progress" || raw === "workflow" || raw === "config" || raw === "help") return raw;
   return "help";
 }
 function kxmSlashCompletions(prefix) {
@@ -1295,7 +1286,7 @@ var init_session_work = __esm({
     MAX_SESSION_BRIEF_PLANS = 5;
     SESSION_BRIEF_SCHEMA = "kxm.session-brief.v1";
     DEFAULT_SESSION_BRIEF_STALE_SECONDS = 5;
-    KXM_SLASH_SUBCOMMANDS = ["status", "hub", "memory", "progress", "workflow", "help"];
+    KXM_SLASH_SUBCOMMANDS = ["status", "hub", "memory", "progress", "workflow", "config", "help"];
   }
 });
 
@@ -9182,6 +9173,7 @@ function loadKxmConfig(repoRoot = process.cwd(), options = {}) {
   const userConfigFile = join6(userDir, "config.yaml");
   const repoDir = repoConfigDirectory(repoRoot);
   const repoConfigFile = join6(repoDir, "config.yaml");
+  const includeProject = options.layers !== "user";
   let userRaw = {};
   let userLoadedPath;
   if (existsSync7(userConfigFile)) {
@@ -9195,7 +9187,7 @@ function loadKxmConfig(repoRoot = process.cwd(), options = {}) {
   }
   let repoRaw = {};
   let repoLoadedPath;
-  if (existsSync7(repoConfigFile)) {
+  if (includeProject && existsSync7(repoConfigFile)) {
     try {
       const text = readFileSync7(repoConfigFile, "utf8");
       repoRaw = (0, import_yaml2.parse)(text) ?? {};