@kontextmind/kxm 0.7.29 → 0.7.30

package/.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "kxm",
       "source": "./plugins/kxm",
       "description": "Durable workflows, peer agents, and kxm tui",
-      "version": "0.7.29",
+      "version": "0.7.30",
       "category": "development",
       "tags": ["kxm", "multi-agent", "workflows", "mcp"]
     }

package/docs/agent-skills.md

@@ -3,7 +3,7 @@
 This document describes the bundled KXM Agent Skills suite: focused skills
 that cover current KXM top-level command groups. The suite documents the
 existing CLI. It does **not** land unified YAML role/project/workflow
-authority, admit new writers, or replace trusted `.kxm/roster.json` policy.
+authority, admit new writers, or replace trusted `.kxm/roster.yaml` policy.
 
 ## Feature-to-Skill Matrix
 

package/docs/assignment-runner.md

@@ -16,7 +16,7 @@ policy.
 ## 1. Overview and role rotation
 
 Developer orchestration on this runner uses a role-based rotation backed by
-trusted policy in [`.kxm/roster.json`](../.kxm/roster.json). Roles, harnesses,
+trusted policy in [`.kxm/roster.yaml`](../.kxm/roster.yaml). Roles, harnesses,
 and models are admitted with strict permission and vendor boundaries:
 
 | Role | Admitted route | Vendor | Permission | Purpose |
@@ -36,7 +36,7 @@ and models are admitted with strict permission and vendor boundaries:
   exceed the admitted ceiling (e.g. attempting to give edit permissions to a
   read-only reviewer).
 - **Trusted roster policy:** Dispatch (`assign` / `run`) and accept load
-  `.kxm/roster.json` through the trusted control Git loader
+  `.kxm/roster.yaml` through the trusted control Git loader
   (`loadTrustedRosterPolicy`). Loader errors, missing/empty policy, and
   malformed policy fail closed with `route_invalid`. There is no raw working-tree
   JSON fallback and no null-policy acceptance. Tests may inject an explicit
@@ -96,7 +96,7 @@ node scripts/assignment-run.mjs run --manifest /absolute/path/to/manifest.json
 ```
 
 - Manifest validation asserts worktree cleanliness and validates the route
-  against `.kxm/roster.json`.
+  against `.kxm/roster.yaml`.
 - Headless execution dispatches to the native harness (or OpenRouter via Pi for
   admitted relief).
 - Successful runs write `completion.json`, candidate snapshot metadata, and
@@ -219,7 +219,7 @@ The runner fails closed with bounded error codes defined in `RUNNER_CODES`:
 
 | Code | Trigger condition | Remedy |
 |---|---|---|
-| `route_invalid` | Harness/model not admitted in lineup for the requested role, permission exceeds route ceiling, or trusted roster policy cannot be loaded/validated. | Use a trusted clean control checkout; do not dispatch from a dirty implementation branch. Check `.kxm/roster.json` lineup and permissions for the role. |
+| `route_invalid` | Harness/model not admitted in lineup for the requested role, permission exceeds route ceiling, or trusted roster policy cannot be loaded/validated. | Use a trusted clean control checkout; do not dispatch from a dirty implementation branch. Check `.kxm/roster.yaml` lineup and permissions for the role. |
 | `critic_invalid` | Missing required critic role, duplicate roles, wrong model, or vendor collision between writer and critics. | Ensure independent critics (Fable + Sol) from distinct providers. |
 | `critic_block` | An unresolved `BLOCK` verdict exists for the target tree. | Rework the changes, address findings, and pass review with a `rework_of` link. |
 | `commit_tree_mismatch` | Git commit tree does not equal the witnessed tree. | Commit the exact candidate tree verified by the witness before running accept. |

package/docs/getting-started.md

@@ -77,7 +77,7 @@ too). kxm resolves each role's first guide candidate whose harness is
 authenticated and writes only current vNext project resources —
 `.kxm/agents/<role>.yaml` (`kxm.agent.v1`) and `.kxm/workflows/<slug>.yaml`
 (`kxm.workflow.v1`). It never writes retired legacy authority (`.kxm/config`,
-`.kxm/roster.json`). Roles whose candidates have no authenticated harness are
+retired `.kxm/roster.json`) or the trusted `.kxm/roster.yaml` policy. Roles whose candidates have no authenticated harness are
 reported as skipped, not silently downgraded. Guide candidates are dated
 research — verify them before dispatch. Declining is safe: set
 `KXM_SKIP_GUIDE_SETUP_PROMPT=1` to suppress the offer.

package/docs/workflow-guide.md

@@ -74,7 +74,7 @@ pull request (five CI jobs: 2 Linux validate, classify, docs, plugin)
 
 **Runner loop invariants:**
 
-- **Roles and rotation:** The runner strictly maps assignments to authenticated roster roles (`AGENTS.md` and `.kxm/roster.json`):
+- **Roles and rotation:** The runner strictly maps assignments to authenticated roster roles (`AGENTS.md` and `.kxm/roster.yaml`):
   - **Implement / write code (`writer`):** **Grok** (`grok --model grok-4.6`, headless). Currently admitted native writer on this runner. Failover follows attempts-and-relief: after an empty or failed attempt, immediately fail over to the next eligible authenticated writer in the roster (**Qwen** `openrouter/qwen/qwen3-coder-plus` via Pi).
   - **Plan (`planner`):** **Claude Fable** (`claude --model fable`), read-only architecture and permissions planning.
   - **Review architecture (`reviewer-arch`):** **Claude Fable** (`claude --model fable`), designated architecture and permissions critic.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kontextmind/kxm",
-  "version": "0.7.29",
+  "version": "0.7.30",
   "description": "KXM local-first multi-agent orchestration and operator dashboard",
   "type": "module",
   "author": "KontextMind",

package/plugins/kxm/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "kxm",
   "displayName": "KXM",
-  "version": "0.7.29",
+  "version": "0.7.30",
   "description": "Headless multi-agent orchestration, durable workflows, and a live operator dashboard for Pi and Claude Code",
   "author": {
     "name": "KontextMind",

package/plugins/kxm/dist/mcp-server.js

@@ -17121,7 +17121,7 @@ async function deliverInboxNotification(messageId, delivered, notify) {
 }
 
 // plugins/kxm/src/mcp-server.ts
-var VERSION = "0.7.29";
+var VERSION = "0.7.30";
 var inbox = /* @__PURE__ */ new Map();
 var notifiedInbox = /* @__PURE__ */ new Set();
 var meshClient;

package/plugins/kxm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kxm-claude-plugin",
-  "version": "0.7.29",
+  "version": "0.7.30",
   "private": true,
   "type": "module",
   "engines": {

package/plugins/kxm/skills/kxm/SKILL.md

@@ -8,7 +8,7 @@ description: Select the right suite skill; state universal safety rules and port
 This skill routes to the appropriate specialized skill for each KXM command category. Use this skill to determine which specific skill handles the command you need.
 
 These bundled skills document the current CLI. They do not switch runtime YAML
-authority, admit writers, or replace `.kxm/roster.json` trusted policy.
+authority, admit writers, or replace `.kxm/roster.yaml` trusted policy.
 
 ## Command Routing Guide
 

package/plugins/kxm/src/init-guide-setup.ts

@@ -10,7 +10,8 @@
  * This module writes only current vNext project resources:
  *   - `.kxm/agents/<role-slug>.yaml`   (kxm.agent.v1)
  *   - `.kxm/workflows/<slug>.yaml`     (kxm.workflow.v1)
- * It never writes retired legacy authority (`.kxm/config`, `.kxm/roster.json`)
+ * It never writes retired legacy authority (`.kxm/config`, retired
+ * `.kxm/roster.json`) or the trusted `.kxm/roster.yaml` policy
  * and does not use the kxm.role.v1 subsystem.
  */
 

package/plugins/kxm/src/mcp-server.ts

@@ -8,7 +8,7 @@ import { AGENT_COMMANDS_MAP, enforceToolPolicy, getMcpTools, reconcileInbox } fr
 import { deliverInboxNotification } from "./inbox.ts";
 import type { HubEvent, MessageRecord } from "./protocol.ts";
 
-const VERSION = "0.7.29";
+const VERSION = "0.7.30";
 const inbox = new Map<string, MessageRecord>();
 const notifiedInbox = new Set<string>();
 let meshClient: HubClient | undefined;

package/schemas/policy-draft/README.md

@@ -5,7 +5,7 @@ operator settings, live registry identities, or admission.
 
 - Live project models remain `kxm.model.v1` under `schemas/vnext/`.
 - Live CLI roles remain `kxm.role.v1`.
-- Runner admission remains `.kxm/roster.json` via the trusted control Git loader.
+- Runner admission remains `.kxm/roster.yaml` via the trusted control Git loader.
 - This directory is not discovered as a vNext project resource.
 
 Pure validation lives in `plugins/kxm/src/policy-draft.mjs`

package/scripts/roster-policy.mjs

@@ -1,13 +1,15 @@
 /** Unwired developer policy foundation. No dispatch or acceptance authority. */
 import { execFileSync } from 'node:child_process';
 import { createHash } from 'node:crypto';
-import { lstatSync, readFileSync, realpathSync } from 'node:fs';
+import { existsSync, lstatSync, readFileSync, realpathSync } from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import YAML from 'yaml';
 import { NATIVE_PI_BRAKE_PROVIDERS, PI_ALLOWED_PROVIDERS, PI_ANTIGRAVITY_MODEL_ID, PI_NATIVE_VENDOR_PROVIDERS, ROUTES } from './harness-run.mjs';
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const POLICY = '.kxm/roster.json';
+const POLICY = '.kxm/roster.yaml';
+const RETIRED_POLICY = '.kxm/roster.json';
 const TRUSTED = 'refs/remotes/origin/main';
 const ROLES = ['writer', 'planner', 'reviewer-arch', 'reviewer-cli', 'experiment'];
 const ALIASES = Object.freeze({ 'x-ai': 'xai', moonshotai: 'moonshot', 'google-ai': 'google', qwen: 'alibaba' });
@@ -54,6 +56,7 @@ function frozen(value) {
   return value;
 }
 function control() {
+  if (existsSync(path.join(ROOT, RETIRED_POLICY))) refuse(`retired ${RETIRED_POLICY} present; use ${POLICY}`);
   if (realpathSync(gitText('rev-parse', '--show-toplevel')) !== realpathSync(ROOT)) refuse('module is outside its control repository');
   const head = gitText('rev-parse', '--verify', 'HEAD^{commit}');
   const trusted = gitText('rev-parse', '--verify', `${TRUSTED}^{commit}`);
@@ -159,7 +162,8 @@ export function validateRosterDocument(policy, readBlob) {
 }
 function validate(bytes, commit) {
   let policy;
-  try { policy = JSON.parse(bytes.toString('utf8')); } catch { refuse('invalid policy JSON'); }
+  try { policy = YAML.parse(bytes.toString('utf8')); } catch { refuse('invalid policy YAML'); }
+  if (policy === undefined || policy === null || typeof policy !== 'object' || Array.isArray(policy)) refuse('invalid policy YAML');
   return validateRosterDocument(policy, source => blobAt(commit, source).bytes);
 }
 export function loadTrustedRosterPolicy() {