@kontextmind/kxm 0.7.43 → 0.7.44

package/.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "kxm",
       "source": "./plugins/kxm",
       "description": "Durable workflows, peer agents, and kxm tui",
-      "version": "0.7.43",
+      "version": "0.7.44",
       "category": "development",
       "tags": ["kxm", "multi-agent", "workflows", "mcp"]
     }

package/CHANGELOG.md

@@ -38,6 +38,10 @@ All notable user-facing changes are documented here. The project follows [Semant
   happens to share the product's version is left alone, and a workspace package
   with no lock entry fails loudly instead of releasing half-bumped.
 
+- **`kxm hub start` no longer generates and persists an admin token when it is
+  about to refuse** because another hub already owns the claim. A refused start
+  used to leave behind credentials the running hub never issued.
+
 ## 0.7.0 - 2026-09-11
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kontextmind/kxm",
-  "version": "0.7.43",
+  "version": "0.7.44",
   "description": "KXM local-first multi-agent orchestration and operator dashboard",
   "type": "module",
   "author": "KontextMind",

package/plugins/kxm/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "kxm",
   "displayName": "KXM",
-  "version": "0.7.43",
+  "version": "0.7.44",
   "description": "Headless multi-agent orchestration, durable workflows, and a live operator dashboard for Pi and Claude Code",
   "author": {
     "name": "KontextMind",

package/plugins/kxm/dist/mcp-server.js

@@ -17121,7 +17121,7 @@ async function deliverInboxNotification(messageId, delivered, notify) {
 }
 
 // plugins/kxm/src/mcp-server.ts
-var VERSION = "0.7.43";
+var VERSION = "0.7.44";
 var inbox = /* @__PURE__ */ new Map();
 var notifiedInbox = /* @__PURE__ */ new Set();
 var meshClient;

package/plugins/kxm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-plugin",
-  "version": "0.7.43",
+  "version": "0.7.44",
   "private": true,
   "type": "module",
   "engines": {

package/plugins/kxm/src/mcp-server.ts

@@ -8,7 +8,7 @@ import { AGENT_COMMANDS_MAP, enforceToolPolicy, getMcpTools, reconcileInbox } fr
 import { deliverInboxNotification } from "./inbox.ts";
 import type { HubEvent, MessageRecord } from "./protocol.ts";
 
-const VERSION = "0.7.43";
+const VERSION = "0.7.44";
 const inbox = new Map<string, MessageRecord>();
 const notifiedInbox = new Set<string>();
 let meshClient: HubClient | undefined;

package/scripts/kxm-hub.mjs

@@ -39,6 +39,29 @@ function processExists(pid) {
   }
 }
 
+/**
+ * Live hub claim, if any. Read-only: returns the pid of a well-formed
+ * `hub.pid` claim whose wrapper is still alive, otherwise null.
+ *
+ * Claims that are missing, malformed, dead, or stale return null so the
+ * atomic `claimPidFile()` below keeps sole authority over those cases — it is
+ * the real single-instance guard and fails closed on them. This exists only so
+ * a start that is certainly going to be refused can refuse *before* it
+ * persists credentials.
+ */
+function liveHubClaimPid() {
+  let existing;
+  try {
+    existing = JSON.parse(readFileSync(pidPath, "utf8"));
+  } catch {
+    return null;
+  }
+  if (existing?.version === 1 && existing.role === "hub" && Number.isInteger(existing.pid) && processExists(existing.pid)) {
+    return existing.pid;
+  }
+  return null;
+}
+
 function parseHubEnvFile() {
   const file = join(resolveUserStateRoot(), "hub-env.json");
   let raw;
@@ -122,6 +145,19 @@ function resolveCredentials() {
   return { authToken, authTokenSource, projectTokens, projectTokensSource, file };
 }
 
+// Pre-flight: refuse a start that a live hub already owns before
+// resolveCredentials() can generate and persist an admin token that the
+// running hub never issued. `kxm hub start` used to mint the credential at
+// module load and only then report "already managed by PID <n>", leaving a
+// hub-env.json whose token no process trusts.
+try {
+  const livePid = liveHubClaimPid();
+  if (livePid) {
+    process.stderr.write(`kxm hub: KXM hub is already managed by PID ${livePid}. Run kxm hub stop before starting another hub.\n`);
+    process.exit(1);
+  }
+} catch { /* the atomic claim below still guards startup */ }
+
 let credentials;
 try {
   credentials = resolveCredentials();