@kontextmind/kxm 0.7.63 → 0.7.65

package/.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "kxm",
       "source": "./plugins/kxm",
       "description": "Durable workflows, peer agents, and kxm tui",
-      "version": "0.7.63",
+      "version": "0.7.65",
       "category": "development",
       "tags": ["kxm", "multi-agent", "workflows", "mcp"]
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kontextmind/kxm",
-  "version": "0.7.63",
+  "version": "0.7.65",
   "description": "KXM local-first multi-agent orchestration and operator dashboard",
   "type": "module",
   "author": "KontextMind",

package/plugins/kxm/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "kxm",
   "displayName": "KXM",
-  "version": "0.7.63",
+  "version": "0.7.65",
   "description": "Headless multi-agent orchestration, durable workflows, and a live operator dashboard for Pi and Claude Code",
   "author": {
     "name": "KontextMind",

package/plugins/kxm/dist/cli.js

@@ -21233,6 +21233,42 @@ function parseCodexOneShotUsage(stdout, stderr) {
     }
   };
 }
+function parsePiOneShotUsage(stdout, _stderr) {
+  let finalMessage;
+  for (const line of stdout.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed.startsWith("{")) continue;
+    try {
+      const event = JSON.parse(trimmed);
+      if (event.type !== "message_end" && event.type !== "turn_end") continue;
+      const message = event.message;
+      if (!message || message.role !== "assistant") continue;
+      finalMessage = message;
+    } catch {
+    }
+  }
+  if (!finalMessage) {
+    return { text: "", isError: true, usage: {} };
+  }
+  const content = Array.isArray(finalMessage.content) ? finalMessage.content : [];
+  const text = content.map((part) => part && typeof part === "object" && part.type === "text" ? String(part.text ?? "") : "").filter((part) => part.length > 0).join("\n");
+  const effectiveModel = reportedModelId(finalMessage.model);
+  const rawUsage = finalMessage.usage;
+  const usage = rawUsage && typeof rawUsage === "object" ? {
+    tokensIn: typeof rawUsage.input === "number" ? rawUsage.input : null,
+    tokensOut: typeof rawUsage.output === "number" ? rawUsage.output : null,
+    cacheReadTokens: typeof rawUsage.cacheRead === "number" ? rawUsage.cacheRead : null,
+    cacheWriteTokens: typeof rawUsage.cacheWrite === "number" ? rawUsage.cacheWrite : null,
+    contextTokens: null,
+    costUsd: null
+  } : {};
+  const stopReason = typeof finalMessage.stopReason === "string" ? finalMessage.stopReason : void 0;
+  const terminalError = stopReason === "error" || stopReason === "aborted";
+  if (terminalError || text.length === 0) {
+    return { text, isError: true, ...effectiveModel !== void 0 ? { effectiveModel } : {}, usage };
+  }
+  return { text, ...effectiveModel !== void 0 ? { effectiveModel } : {}, usage };
+}
 function parseGenericOneShotUsage(stdout, _stderr) {
   const trimmed = stdout.trim();
   try {
@@ -21334,6 +21370,11 @@ function parseAgyOneShotUsage(stdout, _stderr) {
   };
 }
 var READ_ONLY_ONESHOT_ARGS = Object.freeze({
+  // pi: total containment for a one-shot witness — no tools (built-in, extension and
+  // custom), no ambient extension/hook discovery, no skills, no prompt templates, no
+  // AGENTS.md/CLAUDE.md context discovery, and an ephemeral session. `--no-tools` alone
+  // is not enough: extensions and hooks can still run with their own permissions.
+  pi: Object.freeze(["--no-tools", "--no-extensions", "--no-skills", "--no-prompt-templates", "--no-context-files", "--no-session"]),
   claude: Object.freeze(["--tools", "Read,Glob,Grep", "--restricted", "--safe-mode", "--permission-mode", "plan", "--permission-prompts", "none", "--strict-mcp-config", "--mcp-config", '{"mcpServers":{}}', "--disable-slash-commands", "--no-session-persistence"]),
   codex: Object.freeze(["--sandbox", "read-only", "--ignore-user-config", "-c", 'approval_policy="never"']),
   grok: Object.freeze(["--sandbox", "read-only", "--permission-mode", "plan", "--tools", "Read,Glob,Grep", "--no-subagents", "--disable-web-search"]),
@@ -21360,7 +21401,7 @@ var BUILTIN_HARNESSES = Object.freeze([
       argv: ["-p", "--mode", "json"],
       promptVia: "arg",
       outputFormat: "json",
-      usageParser: parseGenericOneShotUsage
+      usageParser: parsePiOneShotUsage
     }
   },
   {

package/plugins/kxm/dist/mcp-server.js

@@ -17121,7 +17121,7 @@ async function deliverInboxNotification(messageId, delivered, notify) {
 }
 
 // plugins/kxm/src/mcp-server.ts
-var VERSION = "0.7.63";
+var VERSION = "0.7.65";
 var inbox = /* @__PURE__ */ new Map();
 var notifiedInbox = /* @__PURE__ */ new Set();
 var meshClient;

package/plugins/kxm/dist/runtime-supervisor.js

@@ -15431,6 +15431,42 @@ function parseCodexOneShotUsage(stdout, stderr) {
     }
   };
 }
+function parsePiOneShotUsage(stdout, _stderr) {
+  let finalMessage;
+  for (const line of stdout.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed.startsWith("{")) continue;
+    try {
+      const event = JSON.parse(trimmed);
+      if (event.type !== "message_end" && event.type !== "turn_end") continue;
+      const message = event.message;
+      if (!message || message.role !== "assistant") continue;
+      finalMessage = message;
+    } catch {
+    }
+  }
+  if (!finalMessage) {
+    return { text: "", isError: true, usage: {} };
+  }
+  const content = Array.isArray(finalMessage.content) ? finalMessage.content : [];
+  const text = content.map((part) => part && typeof part === "object" && part.type === "text" ? String(part.text ?? "") : "").filter((part) => part.length > 0).join("\n");
+  const effectiveModel = reportedModelId(finalMessage.model);
+  const rawUsage = finalMessage.usage;
+  const usage = rawUsage && typeof rawUsage === "object" ? {
+    tokensIn: typeof rawUsage.input === "number" ? rawUsage.input : null,
+    tokensOut: typeof rawUsage.output === "number" ? rawUsage.output : null,
+    cacheReadTokens: typeof rawUsage.cacheRead === "number" ? rawUsage.cacheRead : null,
+    cacheWriteTokens: typeof rawUsage.cacheWrite === "number" ? rawUsage.cacheWrite : null,
+    contextTokens: null,
+    costUsd: null
+  } : {};
+  const stopReason = typeof finalMessage.stopReason === "string" ? finalMessage.stopReason : void 0;
+  const terminalError = stopReason === "error" || stopReason === "aborted";
+  if (terminalError || text.length === 0) {
+    return { text, isError: true, ...effectiveModel !== void 0 ? { effectiveModel } : {}, usage };
+  }
+  return { text, ...effectiveModel !== void 0 ? { effectiveModel } : {}, usage };
+}
 function parseGenericOneShotUsage(stdout, _stderr) {
   const trimmed = stdout.trim();
   try {
@@ -15532,6 +15568,11 @@ function parseAgyOneShotUsage(stdout, _stderr) {
   };
 }
 var READ_ONLY_ONESHOT_ARGS = Object.freeze({
+  // pi: total containment for a one-shot witness — no tools (built-in, extension and
+  // custom), no ambient extension/hook discovery, no skills, no prompt templates, no
+  // AGENTS.md/CLAUDE.md context discovery, and an ephemeral session. `--no-tools` alone
+  // is not enough: extensions and hooks can still run with their own permissions.
+  pi: Object.freeze(["--no-tools", "--no-extensions", "--no-skills", "--no-prompt-templates", "--no-context-files", "--no-session"]),
   claude: Object.freeze(["--tools", "Read,Glob,Grep", "--restricted", "--safe-mode", "--permission-mode", "plan", "--permission-prompts", "none", "--strict-mcp-config", "--mcp-config", '{"mcpServers":{}}', "--disable-slash-commands", "--no-session-persistence"]),
   codex: Object.freeze(["--sandbox", "read-only", "--ignore-user-config", "-c", 'approval_policy="never"']),
   grok: Object.freeze(["--sandbox", "read-only", "--permission-mode", "plan", "--tools", "Read,Glob,Grep", "--no-subagents", "--disable-web-search"]),
@@ -15558,7 +15599,7 @@ var BUILTIN_HARNESSES = Object.freeze([
       argv: ["-p", "--mode", "json"],
       promptVia: "arg",
       outputFormat: "json",
-      usageParser: parseGenericOneShotUsage
+      usageParser: parsePiOneShotUsage
     }
   },
   {
@@ -16102,8 +16143,9 @@ function probeHarnessAssignment(options) {
       };
     }
     const authArgs = ["auth", "check"];
-    if (options.model) {
-      authArgs.push("--model", options.model);
+    const qualifiedModel = options.model ? options.provider && options.model.startsWith(`${options.provider}/`) ? options.model : options.provider ? `${options.provider}/${options.model}` : options.model : void 0;
+    if (qualifiedModel) {
+      authArgs.push("--model", qualifiedModel);
     } else if (options.provider) {
       authArgs.push("--provider", options.provider);
     }
@@ -26474,6 +26516,9 @@ function createKxmOneShotProducer(options = {}) {
   }
   function resolveModelForRequest(request, harness) {
     if (request.model) {
+      if (request.provider) {
+        return { provider: request.provider.toLowerCase(), model: request.model, thinking: request.thinking };
+      }
       const parsed2 = parseModelString(request.model, harness);
       return {
         provider: request.provider?.toLowerCase() ?? parsed2.provider,
@@ -26484,6 +26529,9 @@ function createKxmOneShotProducer(options = {}) {
     if (options.resolveModel) {
       const resolved = options.resolveModel(request.agentId, request.runId);
       if (resolved && resolved.model) {
+        if (resolved.provider) {
+          return { provider: resolved.provider.toLowerCase(), model: resolved.model, thinking: resolved.thinking };
+        }
         const parsed2 = parseModelString(resolved.model, harness);
         return {
           provider: resolved.provider?.toLowerCase() ?? parsed2.provider,
@@ -26593,6 +26641,14 @@ function createKxmOneShotProducer(options = {}) {
         "stream-json",
         "-p"
       ];
+    } else if (harness === "pi") {
+      const qualified = resolved.provider && resolved.model.startsWith(`${resolved.provider}/`) ? resolved.model : resolved.provider ? `${resolved.provider}/${resolved.model}` : resolved.model;
+      args = [
+        "--model",
+        qualified,
+        ...permissionArgs,
+        ...oneShot.argv
+      ];
     } else {
       throw new Error(`oneshot_harness_unsupported: ${harness} permission_profile_unaudited`);
     }

package/plugins/kxm/dist/runtime.js

@@ -15428,6 +15428,42 @@ function parseCodexOneShotUsage(stdout, stderr) {
     }
   };
 }
+function parsePiOneShotUsage(stdout, _stderr) {
+  let finalMessage;
+  for (const line of stdout.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed.startsWith("{")) continue;
+    try {
+      const event = JSON.parse(trimmed);
+      if (event.type !== "message_end" && event.type !== "turn_end") continue;
+      const message = event.message;
+      if (!message || message.role !== "assistant") continue;
+      finalMessage = message;
+    } catch {
+    }
+  }
+  if (!finalMessage) {
+    return { text: "", isError: true, usage: {} };
+  }
+  const content = Array.isArray(finalMessage.content) ? finalMessage.content : [];
+  const text = content.map((part) => part && typeof part === "object" && part.type === "text" ? String(part.text ?? "") : "").filter((part) => part.length > 0).join("\n");
+  const effectiveModel = reportedModelId(finalMessage.model);
+  const rawUsage = finalMessage.usage;
+  const usage = rawUsage && typeof rawUsage === "object" ? {
+    tokensIn: typeof rawUsage.input === "number" ? rawUsage.input : null,
+    tokensOut: typeof rawUsage.output === "number" ? rawUsage.output : null,
+    cacheReadTokens: typeof rawUsage.cacheRead === "number" ? rawUsage.cacheRead : null,
+    cacheWriteTokens: typeof rawUsage.cacheWrite === "number" ? rawUsage.cacheWrite : null,
+    contextTokens: null,
+    costUsd: null
+  } : {};
+  const stopReason = typeof finalMessage.stopReason === "string" ? finalMessage.stopReason : void 0;
+  const terminalError = stopReason === "error" || stopReason === "aborted";
+  if (terminalError || text.length === 0) {
+    return { text, isError: true, ...effectiveModel !== void 0 ? { effectiveModel } : {}, usage };
+  }
+  return { text, ...effectiveModel !== void 0 ? { effectiveModel } : {}, usage };
+}
 function parseGenericOneShotUsage(stdout, _stderr) {
   const trimmed = stdout.trim();
   try {
@@ -15529,6 +15565,11 @@ function parseAgyOneShotUsage(stdout, _stderr) {
   };
 }
 var READ_ONLY_ONESHOT_ARGS = Object.freeze({
+  // pi: total containment for a one-shot witness — no tools (built-in, extension and
+  // custom), no ambient extension/hook discovery, no skills, no prompt templates, no
+  // AGENTS.md/CLAUDE.md context discovery, and an ephemeral session. `--no-tools` alone
+  // is not enough: extensions and hooks can still run with their own permissions.
+  pi: Object.freeze(["--no-tools", "--no-extensions", "--no-skills", "--no-prompt-templates", "--no-context-files", "--no-session"]),
   claude: Object.freeze(["--tools", "Read,Glob,Grep", "--restricted", "--safe-mode", "--permission-mode", "plan", "--permission-prompts", "none", "--strict-mcp-config", "--mcp-config", '{"mcpServers":{}}', "--disable-slash-commands", "--no-session-persistence"]),
   codex: Object.freeze(["--sandbox", "read-only", "--ignore-user-config", "-c", 'approval_policy="never"']),
   grok: Object.freeze(["--sandbox", "read-only", "--permission-mode", "plan", "--tools", "Read,Glob,Grep", "--no-subagents", "--disable-web-search"]),
@@ -15555,7 +15596,7 @@ var BUILTIN_HARNESSES = Object.freeze([
       argv: ["-p", "--mode", "json"],
       promptVia: "arg",
       outputFormat: "json",
-      usageParser: parseGenericOneShotUsage
+      usageParser: parsePiOneShotUsage
     }
   },
   {
@@ -16125,8 +16166,9 @@ function probeHarnessAssignment(options) {
       };
     }
     const authArgs = ["auth", "check"];
-    if (options.model) {
-      authArgs.push("--model", options.model);
+    const qualifiedModel = options.model ? options.provider && options.model.startsWith(`${options.provider}/`) ? options.model : options.provider ? `${options.provider}/${options.model}` : options.model : void 0;
+    if (qualifiedModel) {
+      authArgs.push("--model", qualifiedModel);
     } else if (options.provider) {
       authArgs.push("--provider", options.provider);
     }
@@ -26986,6 +27028,9 @@ function createKxmOneShotProducer(options = {}) {
   }
   function resolveModelForRequest(request, harness) {
     if (request.model) {
+      if (request.provider) {
+        return { provider: request.provider.toLowerCase(), model: request.model, thinking: request.thinking };
+      }
       const parsed2 = parseModelString(request.model, harness);
       return {
         provider: request.provider?.toLowerCase() ?? parsed2.provider,
@@ -26996,6 +27041,9 @@ function createKxmOneShotProducer(options = {}) {
     if (options.resolveModel) {
       const resolved = options.resolveModel(request.agentId, request.runId);
       if (resolved && resolved.model) {
+        if (resolved.provider) {
+          return { provider: resolved.provider.toLowerCase(), model: resolved.model, thinking: resolved.thinking };
+        }
         const parsed2 = parseModelString(resolved.model, harness);
         return {
           provider: resolved.provider?.toLowerCase() ?? parsed2.provider,
@@ -27105,6 +27153,14 @@ function createKxmOneShotProducer(options = {}) {
         "stream-json",
         "-p"
       ];
+    } else if (harness === "pi") {
+      const qualified = resolved.provider && resolved.model.startsWith(`${resolved.provider}/`) ? resolved.model : resolved.provider ? `${resolved.provider}/${resolved.model}` : resolved.model;
+      args = [
+        "--model",
+        qualified,
+        ...permissionArgs,
+        ...oneShot.argv
+      ];
     } else {
       throw new Error(`oneshot_harness_unsupported: ${harness} permission_profile_unaudited`);
     }
@@ -30370,6 +30426,7 @@ export {
   parseGenericOneShotUsage,
   parseGrokOneShotUsage,
   parseKimiOneShotUsage,
+  parsePiOneShotUsage,
   parseSshConfig,
   persistKxmRunState,
   planHarnessUpdate,

package/plugins/kxm/dist/server.js

@@ -11136,6 +11136,42 @@ function parseCodexOneShotUsage(stdout, stderr) {
     }
   };
 }
+function parsePiOneShotUsage(stdout, _stderr) {
+  let finalMessage;
+  for (const line of stdout.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed.startsWith("{")) continue;
+    try {
+      const event = JSON.parse(trimmed);
+      if (event.type !== "message_end" && event.type !== "turn_end") continue;
+      const message = event.message;
+      if (!message || message.role !== "assistant") continue;
+      finalMessage = message;
+    } catch {
+    }
+  }
+  if (!finalMessage) {
+    return { text: "", isError: true, usage: {} };
+  }
+  const content = Array.isArray(finalMessage.content) ? finalMessage.content : [];
+  const text2 = content.map((part) => part && typeof part === "object" && part.type === "text" ? String(part.text ?? "") : "").filter((part) => part.length > 0).join("\n");
+  const effectiveModel = reportedModelId(finalMessage.model);
+  const rawUsage = finalMessage.usage;
+  const usage = rawUsage && typeof rawUsage === "object" ? {
+    tokensIn: typeof rawUsage.input === "number" ? rawUsage.input : null,
+    tokensOut: typeof rawUsage.output === "number" ? rawUsage.output : null,
+    cacheReadTokens: typeof rawUsage.cacheRead === "number" ? rawUsage.cacheRead : null,
+    cacheWriteTokens: typeof rawUsage.cacheWrite === "number" ? rawUsage.cacheWrite : null,
+    contextTokens: null,
+    costUsd: null
+  } : {};
+  const stopReason = typeof finalMessage.stopReason === "string" ? finalMessage.stopReason : void 0;
+  const terminalError = stopReason === "error" || stopReason === "aborted";
+  if (terminalError || text2.length === 0) {
+    return { text: text2, isError: true, ...effectiveModel !== void 0 ? { effectiveModel } : {}, usage };
+  }
+  return { text: text2, ...effectiveModel !== void 0 ? { effectiveModel } : {}, usage };
+}
 function parseGenericOneShotUsage(stdout, _stderr) {
   const trimmed = stdout.trim();
   try {
@@ -11237,6 +11273,11 @@ function parseAgyOneShotUsage(stdout, _stderr) {
   };
 }
 var READ_ONLY_ONESHOT_ARGS = Object.freeze({
+  // pi: total containment for a one-shot witness — no tools (built-in, extension and
+  // custom), no ambient extension/hook discovery, no skills, no prompt templates, no
+  // AGENTS.md/CLAUDE.md context discovery, and an ephemeral session. `--no-tools` alone
+  // is not enough: extensions and hooks can still run with their own permissions.
+  pi: Object.freeze(["--no-tools", "--no-extensions", "--no-skills", "--no-prompt-templates", "--no-context-files", "--no-session"]),
   claude: Object.freeze(["--tools", "Read,Glob,Grep", "--restricted", "--safe-mode", "--permission-mode", "plan", "--permission-prompts", "none", "--strict-mcp-config", "--mcp-config", '{"mcpServers":{}}', "--disable-slash-commands", "--no-session-persistence"]),
   codex: Object.freeze(["--sandbox", "read-only", "--ignore-user-config", "-c", 'approval_policy="never"']),
   grok: Object.freeze(["--sandbox", "read-only", "--permission-mode", "plan", "--tools", "Read,Glob,Grep", "--no-subagents", "--disable-web-search"]),
@@ -11263,7 +11304,7 @@ var BUILTIN_HARNESSES = Object.freeze([
       argv: ["-p", "--mode", "json"],
       promptVia: "arg",
       outputFormat: "json",
-      usageParser: parseGenericOneShotUsage
+      usageParser: parsePiOneShotUsage
     }
   },
   {

package/plugins/kxm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-plugin",
-  "version": "0.7.63",
+  "version": "0.7.65",
   "private": true,
   "type": "module",
   "engines": {

package/plugins/kxm/src/harness.ts

@@ -297,6 +297,67 @@ export function parseCodexOneShotUsage(stdout: string, stderr: string): OneShotP
   };
 }
 
+/**
+ * Parse pi's `--mode json` output: one NDJSON event object per line. The reply text is
+ * the text parts of the final assistant message (`message_end`/`turn_end` carry it
+ * complete, after the deltas); usage and the effective model ride the same message.
+ * Anything unparseable falls back to the raw stream so a shape change is visible in the
+ * recorded text rather than silently empty.
+ */
+export function parsePiOneShotUsage(stdout: string, _stderr: string): OneShotParsedOutput {
+  // Select the FINAL assistant message first, then extract every field from that one
+  // message atomically. Carrying text, usage or model forward from an earlier message
+  // let a truncated or empty final turn inherit a previous turn's PASS text and usage.
+  let finalMessage: Record<string, unknown> | undefined;
+  for (const line of stdout.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed.startsWith("{")) continue;
+    try {
+      const event = JSON.parse(trimmed) as Record<string, unknown>;
+      if (event.type !== "message_end" && event.type !== "turn_end") continue;
+      const message = event.message as Record<string, unknown> | undefined;
+      if (!message || message.role !== "assistant") continue;
+      finalMessage = message;
+    } catch {
+      // skip malformed lines; the stream is append-only and a partial line means truncation
+    }
+  }
+  if (!finalMessage) {
+    // No assistant message at all: fail closed with empty text. Returning the raw stream
+    // would hand back thinking deltas or diagnostics as if they were the answer.
+    return { text: "", isError: true, usage: {} };
+  }
+  const content = Array.isArray(finalMessage.content) ? finalMessage.content : [];
+  const text = content
+    .map((part) => (part && typeof part === "object" && (part as Record<string, unknown>).type === "text"
+      ? String((part as Record<string, unknown>).text ?? "")
+      : ""))
+    .filter((part) => part.length > 0)
+    .join("\n");
+  // pi can exit zero on a failed turn; the stop reason is the fact that matters.
+  // Metadata comes from the selected final message even on a failed turn: usage and
+  // model are facts about what ran, not claims about the outcome, and dropping them
+  // turned a real 7/3-token failure into null/null with model "unknown".
+  const effectiveModel = reportedModelId(finalMessage.model);
+  const rawUsage = finalMessage.usage as Record<string, unknown> | undefined;
+  const usage: OneShotUsage = rawUsage && typeof rawUsage === "object"
+    ? {
+      tokensIn: typeof rawUsage.input === "number" ? rawUsage.input : null,
+      tokensOut: typeof rawUsage.output === "number" ? rawUsage.output : null,
+      cacheReadTokens: typeof rawUsage.cacheRead === "number" ? rawUsage.cacheRead : null,
+      cacheWriteTokens: typeof rawUsage.cacheWrite === "number" ? rawUsage.cacheWrite : null,
+      contextTokens: null,
+      costUsd: null,
+    }
+    : {};
+  const stopReason = typeof finalMessage.stopReason === "string" ? finalMessage.stopReason : undefined;
+  const terminalError = stopReason === "error" || stopReason === "aborted";
+  if (terminalError || text.length === 0) {
+    return { text, isError: true, ...(effectiveModel !== undefined ? { effectiveModel } : {}), usage };
+  }
+  return { text, ...(effectiveModel !== undefined ? { effectiveModel } : {}), usage };
+}
+
 export function parseGenericOneShotUsage(stdout: string, _stderr: string): OneShotParsedOutput {
   const trimmed = stdout.trim();
   try {
@@ -419,6 +480,11 @@ export function parseAgyOneShotUsage(stdout: string, _stderr: string): OneShotPa
 
 /** Built-in harnesses. Unknown ids fail closed. Model lists live in `.kxm/models/*.yaml`, not here. */
 const READ_ONLY_ONESHOT_ARGS = Object.freeze({
+  // pi: total containment for a one-shot witness — no tools (built-in, extension and
+  // custom), no ambient extension/hook discovery, no skills, no prompt templates, no
+  // AGENTS.md/CLAUDE.md context discovery, and an ephemeral session. `--no-tools` alone
+  // is not enough: extensions and hooks can still run with their own permissions.
+  pi: Object.freeze(["--no-tools", "--no-extensions", "--no-skills", "--no-prompt-templates", "--no-context-files", "--no-session"]),
   claude: Object.freeze(["--tools", "Read,Glob,Grep", "--restricted", "--safe-mode", "--permission-mode", "plan", "--permission-prompts", "none", "--strict-mcp-config", "--mcp-config", '{"mcpServers":{}}', "--disable-slash-commands", "--no-session-persistence"]),
   codex: Object.freeze(["--sandbox", "read-only", "--ignore-user-config", "-c", 'approval_policy="never"']),
   grok: Object.freeze(["--sandbox", "read-only", "--permission-mode", "plan", "--tools", "Read,Glob,Grep", "--no-subagents", "--disable-web-search"]),
@@ -447,7 +513,7 @@ export const BUILTIN_HARNESSES: readonly HarnessCatalogEntry[] = Object.freeze([
       argv: ["-p", "--mode", "json"],
       promptVia: "arg",
       outputFormat: "json",
-      usageParser: parseGenericOneShotUsage,
+      usageParser: parsePiOneShotUsage,
     },
   },
   {
@@ -1118,8 +1184,17 @@ export function probeHarnessAssignment(options: HarnessAssignmentProbeOptions):
     }
 
     const authArgs = ["auth", "check"];
-    if (options.model) {
-      authArgs.push("--model", options.model);
+    // `pi auth check --model` requires a provider-qualified id: a bare model answers
+    // status "invalid", which reads as not_authenticated and hides the real state. When
+    // the caller holds provider and bare model separately (the engine's request shape),
+    // qualify the id; a model that already carries its namespace goes through as-is.
+    const qualifiedModel = options.model
+      ? (options.provider && options.model.startsWith(`${options.provider}/`)
+        ? options.model
+        : options.provider ? `${options.provider}/${options.model}` : options.model)
+      : undefined;
+    if (qualifiedModel) {
+      authArgs.push("--model", qualifiedModel);
     } else if (options.provider) {
       authArgs.push("--provider", options.provider);
     }

package/plugins/kxm/src/mcp-server.ts

@@ -8,7 +8,7 @@ import { AGENT_COMMANDS_MAP, enforceToolPolicy, getMcpTools, reconcileInbox } fr
 import { deliverInboxNotification } from "./inbox.ts";
 import type { HubEvent, MessageRecord } from "./protocol.ts";
 
-const VERSION = "0.7.63";
+const VERSION = "0.7.65";
 const inbox = new Map<string, MessageRecord>();
 const notifiedInbox = new Set<string>();
 let meshClient: HubClient | undefined;

package/plugins/kxm/src/oneshot-producer.ts

@@ -100,6 +100,13 @@ export function createKxmOneShotProducer(options: KxmOneShotProducerOptions = {}
     harness: string,
   ): { provider: string; model: string; thinking?: string | undefined } {
     if (request.model) {
+      // A separate provider field means the model id is bare and may itself be
+      // namespaced (openrouter + qwen/qwen3-coder-plus); reparsing it as a
+      // provider/model selector strips the namespace — the same defect #262 fixed
+      // in the pi producer. Only parse when the provider must come from the string.
+      if (request.provider) {
+        return { provider: request.provider.toLowerCase(), model: request.model, thinking: request.thinking };
+      }
       const parsed = parseModelString(request.model, harness);
       return {
         provider: request.provider?.toLowerCase() ?? parsed.provider,
@@ -110,6 +117,9 @@ export function createKxmOneShotProducer(options: KxmOneShotProducerOptions = {}
     if (options.resolveModel) {
       const resolved = options.resolveModel(request.agentId, request.runId);
       if (resolved && resolved.model) {
+        if (resolved.provider) {
+          return { provider: resolved.provider.toLowerCase(), model: resolved.model, thinking: resolved.thinking };
+        }
         const parsed = parseModelString(resolved.model, harness);
         return {
           provider: resolved.provider?.toLowerCase() ?? parsed.provider,
@@ -213,6 +223,20 @@ export function createKxmOneShotProducer(options: KxmOneShotProducerOptions = {}
           "stream-json",
           "-p",
         ];
+      } else if (harness === "pi") {
+        // pi's model flag takes the provider-qualified id — exactly the auth probe's
+        // rule (#265): prefix with the provider unless the model already starts with it.
+        // A bare "contains a slash" test is wrong for provider-local namespaces
+        // (openrouter + qwen/qwen3-coder-plus must spawn as the full three-part id).
+        const qualified = resolved.provider && resolved.model.startsWith(`${resolved.provider}/`)
+          ? resolved.model
+          : resolved.provider ? `${resolved.provider}/${resolved.model}` : resolved.model;
+        args = [
+          "--model",
+          qualified,
+          ...permissionArgs,
+          ...oneShot.argv,
+        ];
       } else {
         throw new Error(`oneshot_harness_unsupported: ${harness} permission_profile_unaudited`);
       }