@kontextmind/kxm 0.7.38 → 0.7.40

package/.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "kxm",
       "source": "./plugins/kxm",
       "description": "Durable workflows, peer agents, and kxm tui",
-      "version": "0.7.38",
+      "version": "0.7.40",
       "category": "development",
       "tags": ["kxm", "multi-agent", "workflows", "mcp"]
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kontextmind/kxm",
-  "version": "0.7.38",
+  "version": "0.7.40",
   "description": "KXM local-first multi-agent orchestration and operator dashboard",
   "type": "module",
   "author": "KontextMind",

package/plugins/kxm/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "kxm",
   "displayName": "KXM",
-  "version": "0.7.38",
+  "version": "0.7.40",
   "description": "Headless multi-agent orchestration, durable workflows, and a live operator dashboard for Pi and Claude Code",
   "author": {
     "name": "KontextMind",

package/plugins/kxm/dist/mcp-server.js

@@ -17121,7 +17121,7 @@ async function deliverInboxNotification(messageId, delivered, notify) {
 }
 
 // plugins/kxm/src/mcp-server.ts
-var VERSION = "0.7.38";
+var VERSION = "0.7.40";
 var inbox = /* @__PURE__ */ new Map();
 var notifiedInbox = /* @__PURE__ */ new Set();
 var meshClient;

package/plugins/kxm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kxm-claude-plugin",
-  "version": "0.7.38",
+  "version": "0.7.40",
   "private": true,
   "type": "module",
   "engines": {

package/plugins/kxm/src/mcp-server.ts

@@ -8,7 +8,7 @@ import { AGENT_COMMANDS_MAP, enforceToolPolicy, getMcpTools, reconcileInbox } fr
 import { deliverInboxNotification } from "./inbox.ts";
 import type { HubEvent, MessageRecord } from "./protocol.ts";
 
-const VERSION = "0.7.38";
+const VERSION = "0.7.40";
 const inbox = new Map<string, MessageRecord>();
 const notifiedInbox = new Set<string>();
 let meshClient: HubClient | undefined;

package/scripts/roster-policy.mjs

@@ -97,9 +97,11 @@ export function validateRosterDocument(policy, readBlob) {
     text(model, 'origin model'); keys(origin, ['vendor', 'evidence'], 'origin');
     text(origin.vendor, 'origin vendor');
     if (PI_ALLOWED_PROVIDERS.includes(canonical(origin.vendor.toLowerCase()))) refuse('origin/vendor must name the model vendor, not billing provider');
-    keys(origin.evidence, ['source', 'sha256'], 'origin evidence'); digest(origin.evidence.sha256);
+    const evidenceKeys = origin.evidence.commit === undefined ? ['source', 'sha256'] : ['source', 'commit', 'sha256'];
+    keys(origin.evidence, evidenceKeys, 'origin evidence'); digest(origin.evidence.sha256);
     sourcePath(origin.evidence.source);
-    const bytes = readBlob(origin.evidence.source);
+    if (origin.evidence.commit !== undefined) objectId(origin.evidence.commit, 'origin evidence commit');
+    const bytes = readBlob(origin.evidence.source, origin.evidence.commit);
     if (bytes == null || sha256(bytes) !== origin.evidence.sha256) refuse('origin evidence hash mismatch');
   }
   for (const [id, route] of Object.entries(policy.routes)) {
@@ -160,17 +162,24 @@ export function validateRosterDocument(policy, readBlob) {
   }
   return policy;
 }
-function validate(bytes, commit) {
+function validate(bytes, commit, trusted) {
   let policy;
   try { policy = YAML.parse(bytes.toString('utf8')); } catch { refuse('invalid policy YAML'); }
   if (policy === undefined || policy === null || typeof policy !== 'object' || Array.isArray(policy)) refuse('invalid policy YAML');
-  return validateRosterDocument(policy, source => blobAt(commit, source).bytes);
+  const readBlob = (source, pinnedCommit) => {
+    if (pinnedCommit === undefined) return blobAt(commit, source).bytes;
+    // A pinned evidence commit decouples the digest from later edits to the
+    // evidence file; the pinned commit itself must be part of trusted history.
+    git('merge-base', '--is-ancestor', pinnedCommit, trusted);
+    return blobAt(pinnedCommit, source).bytes;
+  };
+  return validateRosterDocument(policy, readBlob);
 }
 export function loadTrustedRosterPolicy() {
   const snapshot = control();
   const { blob, bytes } = blobAt(snapshot.head, POLICY);
   if (!workingBytes(POLICY).equals(bytes)) refuse('working policy differs from committed bytes');
-  const policy = validate(bytes, snapshot.head);
+  const policy = validate(bytes, snapshot.head, snapshot.trusted);
   unchanged(snapshot);
   return frozen({ identity: { commit: snapshot.head, blob, sha256: sha256(bytes) }, policy });
 }
@@ -181,7 +190,7 @@ export function resolveBoundPolicy(identity) {
   git('merge-base', '--is-ancestor', identity.commit, snapshot.trusted);
   const { blob, bytes } = blobAt(identity.commit, POLICY);
   if (blob !== identity.blob || sha256(bytes) !== identity.sha256) refuse('bound identity mismatch');
-  const policy = validate(bytes, identity.commit);
+  const policy = validate(bytes, identity.commit, snapshot.trusted);
   unchanged(snapshot);
   return frozen({ identity: { ...identity }, policy });
 }