@kontextmind/kxm 0.7.46 → 0.7.47

package/.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "kxm",
       "source": "./plugins/kxm",
       "description": "Durable workflows, peer agents, and kxm tui",
-      "version": "0.7.46",
+      "version": "0.7.47",
       "category": "development",
       "tags": ["kxm", "multi-agent", "workflows", "mcp"]
     }

package/docs/kb/qa-authentik-authentication.md

@@ -1,3 +1,20 @@
+---
+schema: "kxm.doc.v1"
+id: "KB-HUB-001"
+type: "kb"
+title: "Q&A: Authentik (OIDC) for user/role/agent authentication"
+project: "kxm"
+status: "draft"
+owner: "@operator"
+created: "2026-09-17"
+updated: "2026-09-18"
+authority: "instruction"
+confidence: "reviewed"
+summary: "Yes, but not by swapping the hub's checks for OIDC — the safest hook is a token broker that exchanges Authentik identity for the kxm tokens the hub already understands."
+tags: ["hub", "authentik", "oidc", "auth"]
+related: ["docs/operations.md", "docs/kb/qa-hub-on-a-public-host.md"]
+---
+
 # Q&A: Authentik (OIDC) for user/role/agent authentication
 
 > Researched by `claude --model fable` (planner, read-only) · 2026-09-17 · task_c0bb05339e15 · root review: pending

package/docs/kb/qa-extension-install-and-hub-bootstrap.md

@@ -1,3 +1,20 @@
+---
+schema: "kxm.doc.v1"
+id: "KB-HUB-002"
+type: "kb"
+title: "Q&A: Extension install → kxm CLI bootstrap + hub auto-connect"
+project: "kxm"
+status: "draft"
+owner: "@operator"
+created: "2026-09-17"
+updated: "2026-09-18"
+authority: "instruction"
+confidence: "reviewed"
+summary: "Extension load attempts a hub connection and can auto-start a local hub with generated keys, but it does not bootstrap a global kxm CLI and failure warnings are diagnostic rather than actionable."
+tags: ["hub", "extension", "bootstrap", "cli"]
+related: ["docs/operations.md", "docs/getting-started.md"]
+---
+
 # Q&A: Extension install → kxm CLI bootstrap + hub auto-connect
 
 > Researched by `codex gpt-5.6-sol` (reviewer-cli, read-only) · 2026-09-17 · task_634d24e1225d · root review: pending

package/docs/kb/qa-hub-on-a-public-host.md

@@ -1,3 +1,20 @@
+---
+schema: "kxm.doc.v1"
+id: "KB-HUB-003"
+type: "kb"
+title: "Q&A: Hub on a public host — multiple users and projects?"
+project: "kxm"
+status: "draft"
+owner: "@operator"
+created: "2026-09-17"
+updated: "2026-09-18"
+authority: "instruction"
+confidence: "reviewed"
+summary: "One hub is one process and one SQLite database behind a TLS proxy; it is not multi-tenant and must never be exposed directly to the public internet."
+tags: ["hub", "deployment", "security"]
+related: ["docs/operations.md", "docs/kb/qa-authentik-authentication.md", "docs/kb/qa-what-the-hub-stores.md"]
+---
+
 # Q&A: Hub on a public host — multiple users and projects?
 
 > Researched by `claude --model fable` (planner, read-only) · 2026-09-17 · task_40b9d5015537 · root review: pending

package/docs/kb/qa-sqlite-vs-duckdb.md

@@ -1,3 +1,20 @@
+---
+schema: "kxm.doc.v1"
+id: "KB-HUB-004"
+type: "kb"
+title: "Q&A: Storage engine — SQLite vs DuckDB"
+project: "kxm"
+status: "draft"
+owner: "@operator"
+created: "2026-09-17"
+updated: "2026-09-18"
+authority: "instruction"
+confidence: "reviewed"
+summary: "The hub already uses SQLite; there is no DuckDB in this repository, and DuckDB should not become the hub's primary store."
+tags: ["hub", "sqlite", "storage"]
+related: ["docs/operations.md", "docs/kb/qa-what-the-hub-stores.md"]
+---
+
 # Q&A: Storage engine — SQLite vs DuckDB
 
 > Answered by root from direct repo evidence · 2026-09-17 · task_279246b4dddb

package/docs/kb/qa-what-the-hub-stores.md

@@ -1,3 +1,20 @@
+---
+schema: "kxm.doc.v1"
+id: "KB-HUB-005"
+type: "kb"
+title: "Q&A: What is all stored on the hub?"
+project: "kxm"
+status: "draft"
+owner: "@operator"
+created: "2026-09-17"
+updated: "2026-09-18"
+authority: "instruction"
+confidence: "reviewed"
+summary: "The hub persists agent records, message bodies, workflow runs, journal/evidence, context items, runtime events, and raw tokens in user-state hub-env.json."
+tags: ["hub", "storage", "privacy"]
+related: ["docs/operations.md", "docs/kb/qa-sqlite-vs-duckdb.md"]
+---
+
 # Q&A: What is all stored on the hub?
 
 > Researched by `codex gpt-5.6-sol` (reviewer-cli, read-only) · 2026-09-17 · task_85bd0119c40a · root review: pending

package/docs/operations.md

@@ -18,7 +18,7 @@ kxm hub start
 ```
 
 These operator commands assume the packed release CLI installation from
-[Getting started](getting-started.md#install-the-operator-command). From a
+[Getting started](getting-started.md#1-install). From a
 source clone, use `npm run hub` instead.
 
 When `KXM_AUTH_TOKEN` is not set, `kxm hub start` loads the persisted hub
@@ -227,3 +227,11 @@ place from v0.4 databases.
 - **Rollback**: schema downgrades are not supported (a newer database refuses
   to open on an older runtime). Restore a database backup taken before the
   upgrade instead.
+
+## Hub Q&A / knowledge base
+
+- [What is all stored on the hub?](kb/qa-what-the-hub-stores.md)
+- [Storage engine — SQLite vs DuckDB](kb/qa-sqlite-vs-duckdb.md)
+- [Hub on a public host — multiple users and projects?](kb/qa-hub-on-a-public-host.md)
+- [Authentik (OIDC) for user/role/agent authentication](kb/qa-authentik-authentication.md)
+- [Extension install → kxm CLI bootstrap + hub auto-connect](kb/qa-extension-install-and-hub-bootstrap.md)

package/docs/troubleshooting.md

@@ -115,7 +115,7 @@ CLI matches source.
 `pi install git:github.com/kontextmind/kxm@main` installs the Pi extension
 and Agent Skill, not a global operator command. Install the versioned `.tgz`
 release asset through the authenticated `gh release download` flow in
-[Getting started](getting-started.md#install-the-operator-command), or run
+[Getting started](getting-started.md#1-install), or run
 `node scripts/kxm.mjs` from a clone after `npm ci`. `npx kxm` and a
 global `git+https` npm install are not supported installation paths.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kontextmind/kxm",
-  "version": "0.7.46",
+  "version": "0.7.47",
   "description": "KXM local-first multi-agent orchestration and operator dashboard",
   "type": "module",
   "author": "KontextMind",

package/plugins/kxm/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "kxm",
   "displayName": "KXM",
-  "version": "0.7.46",
+  "version": "0.7.47",
   "description": "Headless multi-agent orchestration, durable workflows, and a live operator dashboard for Pi and Claude Code",
   "author": {
     "name": "KontextMind",

package/plugins/kxm/dist/mcp-server.js

@@ -17121,7 +17121,7 @@ async function deliverInboxNotification(messageId, delivered, notify) {
 }
 
 // plugins/kxm/src/mcp-server.ts
-var VERSION = "0.7.46";
+var VERSION = "0.7.47";
 var inbox = /* @__PURE__ */ new Map();
 var notifiedInbox = /* @__PURE__ */ new Set();
 var meshClient;

package/plugins/kxm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-plugin",
-  "version": "0.7.46",
+  "version": "0.7.47",
   "private": true,
   "type": "module",
   "engines": {

package/plugins/kxm/src/mcp-server.ts

@@ -8,7 +8,7 @@ import { AGENT_COMMANDS_MAP, enforceToolPolicy, getMcpTools, reconcileInbox } fr
 import { deliverInboxNotification } from "./inbox.ts";
 import type { HubEvent, MessageRecord } from "./protocol.ts";
 
-const VERSION = "0.7.46";
+const VERSION = "0.7.47";
 const inbox = new Map<string, MessageRecord>();
 const notifiedInbox = new Set<string>();
 let meshClient: HubClient | undefined;