@kontextmind/kxm 0.7.87 → 0.7.89

package/.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "kxm",
       "source": "./plugins/kxm",
       "description": "Durable workflows, peer agents, and kxm tui",
-      "version": "0.7.87",
+      "version": "0.7.89",
       "category": "development",
       "tags": ["kxm", "multi-agent", "workflows", "mcp"]
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kontextmind/kxm",
-  "version": "0.7.87",
+  "version": "0.7.89",
   "description": "KXM local-first multi-agent orchestration and operator dashboard",
   "type": "module",
   "author": "KontextMind",

package/plugins/kxm/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "kxm",
   "displayName": "KXM",
-  "version": "0.7.87",
+  "version": "0.7.89",
   "description": "Headless multi-agent orchestration, durable workflows, and a live operator dashboard for Pi and Claude Code",
   "author": {
     "name": "KontextMind",

package/plugins/kxm/dist/cli.js

@@ -20436,8 +20436,8 @@ var AGENT_COMMANDS = [
         summary: { type: "string", description: "Promotion summary" },
         authority: {
           type: "string",
-          enum: ["policy", "instruction", "evidence", "hypothesis"],
-          description: "Authority class"
+          enum: ["evidence", "hypothesis"],
+          description: "Authority class; an agent's proposal is peer origin, so evidence at most"
         },
         confidence: {
           type: "string",

package/plugins/kxm/dist/core.js

@@ -1567,8 +1567,8 @@ var AGENT_COMMANDS = [
         summary: { type: "string", description: "Promotion summary" },
         authority: {
           type: "string",
-          enum: ["policy", "instruction", "evidence", "hypothesis"],
-          description: "Authority class"
+          enum: ["evidence", "hypothesis"],
+          description: "Authority class; an agent's proposal is peer origin, so evidence at most"
         },
         confidence: {
           type: "string",

package/plugins/kxm/dist/extension.js

@@ -15670,8 +15670,8 @@ var AGENT_COMMANDS = [
         summary: { type: "string", description: "Promotion summary" },
         authority: {
           type: "string",
-          enum: ["policy", "instruction", "evidence", "hypothesis"],
-          description: "Authority class"
+          enum: ["evidence", "hypothesis"],
+          description: "Authority class; an agent's proposal is peer origin, so evidence at most"
         },
         confidence: {
           type: "string",

package/plugins/kxm/dist/mcp-server.js

@@ -16981,8 +16981,8 @@ var AGENT_COMMANDS = [
         summary: { type: "string", description: "Promotion summary" },
         authority: {
           type: "string",
-          enum: ["policy", "instruction", "evidence", "hypothesis"],
-          description: "Authority class"
+          enum: ["evidence", "hypothesis"],
+          description: "Authority class; an agent's proposal is peer origin, so evidence at most"
         },
         confidence: {
           type: "string",
@@ -17182,7 +17182,7 @@ async function deliverInboxNotification(messageId, delivered, notify) {
 }
 
 // plugins/kxm/src/mcp-server.ts
-var VERSION = "0.7.87";
+var VERSION = "0.7.89";
 var inbox = /* @__PURE__ */ new Map();
 var notifiedInbox = /* @__PURE__ */ new Set();
 var meshClient;

package/plugins/kxm/dist/server.js

@@ -17303,8 +17303,8 @@ var AGENT_COMMANDS = [
         summary: { type: "string", description: "Promotion summary" },
         authority: {
           type: "string",
-          enum: ["policy", "instruction", "evidence", "hypothesis"],
-          description: "Authority class"
+          enum: ["evidence", "hypothesis"],
+          description: "Authority class; an agent's proposal is peer origin, so evidence at most"
         },
         confidence: {
           type: "string",
@@ -18082,6 +18082,9 @@ var NativeStateProvider = class {
     if (change?.schema !== "kxm.state-change-proposal.v1") {
       throw new ProtocolError(400, "invalid state change proposal schema", "invalid_state_proposal");
     }
+    if (change.origin !== "peer" && change.origin !== "human") {
+      throw new ProtocolError(400, "state change proposal origin must be peer or human", "invalid_state_proposal");
+    }
     const project = requireNonEmpty(change.project, "proposal project");
     const key = requireNonEmpty(change.key, "proposal key");
     const evidenceRefs = boundedRefs(change.evidenceRefs, "proposal evidenceRefs");
@@ -18091,7 +18094,7 @@ var NativeStateProvider = class {
       project,
       summary: change.summary,
       provenance: {
-        sourceType: change.proposedBy.startsWith("agent_") ? "peer" : "human",
+        sourceType: change.origin,
         sourceRef: `proposed-by:${change.proposedBy}`
       },
       authority: change.authority,
@@ -20481,12 +20484,12 @@ function createMeshHub(options = {}) {
       if (agent.project !== project) {
         throw new ProtocolError(403, "context requests are limited to the agent's project", "context_isolation_violation");
       }
-      return { project, caller: agent.id };
+      return { project, caller: agent.id, credential: "agent" };
     }
     requireAdminAuth(request);
     const callerHeader = request.headers["x-kxm-caller-id"];
     const caller = typeof callerHeader === "string" && callerHeader.trim() ? callerHeader.trim() : "kxm-admin";
-    return { project, caller };
+    return { project, caller, credential: "admin" };
   }
   function requireAdminAuth(request) {
     if (!authToken2 && isLoopback(host2)) return;
@@ -21593,7 +21596,17 @@ data: ${JSON.stringify({ type: "ops", project, topic: "agents", at: nowIso() })}
       const contextStateProposeMatch = url.pathname.match(/^\/v1\/context\/state\/propose$/);
       if (method === "POST" && contextStateProposeMatch) {
         const body = await readJson(request);
-        const { project: callerProject, caller: callerId } = contextCallerProject(request, body.project);
+        const { project: callerProject, caller: callerId, credential } = contextCallerProject(request, body.project);
+        if (credential === "admin") requireConfiguredAdminAuth(request, "human-origin state proposals");
+        if (body.proposedBy !== void 0 && body.proposedBy !== callerId) {
+          logger({ event: "security_alert", alert: "state_proposer_mismatch", project: callerProject, callerId, credential });
+          throw new ProtocolError(
+            403,
+            "proposedBy must name the authenticated caller",
+            "state_proposer_mismatch"
+          );
+        }
+        const origin = credential === "agent" ? "peer" : "human";
         const proposalId = await stateProvider.propose({
           schema: "kxm.state-change-proposal.v1",
           project: callerProject,
@@ -21602,11 +21615,12 @@ data: ${JSON.stringify({ type: "ops", project, topic: "agents", at: nowIso() })}
           authority: parseContextAuthority(body.authority),
           confidence: parseContextConfidence(body.confidence),
           evidenceRefs: boundedStringList(body.evidenceRefs, "evidenceRefs", 32),
-          proposedBy: typeof body.proposedBy === "string" && body.proposedBy.trim() ? body.proposedBy.trim() : callerId
+          proposedBy: callerId,
+          origin
         });
         counters.contextRequests += 1;
         publishOps(callerProject, "workflows");
-        logger({ event: "context_state_proposed", project: callerProject, proposalId, proposedBy: callerId });
+        logger({ event: "context_state_proposed", project: callerProject, proposalId, proposedBy: callerId, origin });
         json(response, 201, { proposalId });
         return;
       }

package/plugins/kxm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-plugin",
-  "version": "0.7.87",
+  "version": "0.7.89",
   "private": true,
   "type": "module",
   "engines": {

package/plugins/kxm/src/commands.ts

@@ -823,8 +823,8 @@ export const AGENT_COMMANDS: readonly AgentCommand[] = [
         summary: { type: "string", description: "Promotion summary" },
         authority: {
           type: "string",
-          enum: ["policy", "instruction", "evidence", "hypothesis"],
-          description: "Authority class",
+          enum: ["evidence", "hypothesis"],
+          description: "Authority class; an agent's proposal is peer origin, so evidence at most",
         },
         confidence: {
           type: "string",

package/plugins/kxm/src/context/providers.ts

@@ -44,6 +44,10 @@ export interface StateChangeProposal {
   confidence: ContextItem["confidence"];
   evidenceRefs: string[];
   proposedBy: string;
+  /** Origin of the credential the hub verified for the proposer: an agent
+   * key is `peer` (evidence at most), the administrative token `human`.
+   * Never inferred from `proposedBy`, which is a label, not a credential. */
+  origin: "peer" | "human";
   supersedes?: string[];
 }
 

package/plugins/kxm/src/hub.ts

@@ -601,9 +601,12 @@ export function createMeshHub(options: MeshHubOptions = {}): MeshHub {
 
   /** Context callers authenticate either as a registered agent (project-
    * scoped to their own project) or with the administrative token (single
-   * explicit project scope per request). Returns the validated project and
-   * a stable caller identity for provenance. */
-  function contextCallerProject(request: IncomingMessage, requested: unknown): { project: string; caller: string } {
+   * explicit project scope per request). Returns the validated project, a
+   * stable caller identity for provenance, and which credential proved it. */
+  function contextCallerProject(
+    request: IncomingMessage,
+    requested: unknown,
+  ): { project: string; caller: string; credential: "agent" | "admin" } {
     const project = requireString(requested, "project", { max: 200 });
     const agentHeader = request.headers["x-kxm-agent-id"];
     if (typeof agentHeader === "string" && agentHeader.trim()) {
@@ -612,14 +615,14 @@ export function createMeshHub(options: MeshHubOptions = {}): MeshHub {
       if (agent.project !== project) {
         throw new ProtocolError(403, "context requests are limited to the agent's project", "context_isolation_violation");
       }
-      return { project, caller: agent.id };
+      return { project, caller: agent.id, credential: "agent" };
     }
     requireAdminAuth(request);
     const callerHeader = request.headers["x-kxm-caller-id"];
     const caller = typeof callerHeader === "string" && callerHeader.trim()
       ? callerHeader.trim()
       : "kxm-admin";
-    return { project, caller };
+    return { project, caller, credential: "admin" };
   }
 
   function requireAdminAuth(request: IncomingMessage): void {
@@ -1829,7 +1832,21 @@ export function createMeshHub(options: MeshHubOptions = {}): MeshHub {
       const contextStateProposeMatch = url.pathname.match(/^\/v1\/context\/state\/propose$/);
       if (method === "POST" && contextStateProposeMatch) {
         const body = await readJson(request);
-        const { project: callerProject, caller: callerId } = contextCallerProject(request, body.project);
+        const { project: callerProject, caller: callerId, credential } = contextCallerProject(request, body.project);
+        // Origin follows the credential, never a name: an agent key proposes as
+        // a peer, capped at evidence by the grant floor. Human origin can claim
+        // policy, so it takes the configured administrative token with no
+        // loopback bypass, as promotion does.
+        if (credential === "admin") requireConfiguredAdminAuth(request, "human-origin state proposals");
+        if (body.proposedBy !== undefined && body.proposedBy !== callerId) {
+          logger({ event: "security_alert", alert: "state_proposer_mismatch", project: callerProject, callerId, credential });
+          throw new ProtocolError(
+            403,
+            "proposedBy must name the authenticated caller",
+            "state_proposer_mismatch",
+          );
+        }
+        const origin = credential === "agent" ? "peer" : "human";
         const proposalId = await stateProvider.propose({
           schema: "kxm.state-change-proposal.v1",
           project: callerProject,
@@ -1838,11 +1855,12 @@ export function createMeshHub(options: MeshHubOptions = {}): MeshHub {
           authority: parseContextAuthority(body.authority),
           confidence: parseContextConfidence(body.confidence),
           evidenceRefs: boundedStringList(body.evidenceRefs, "evidenceRefs", 32),
-          proposedBy: (typeof body.proposedBy === "string" && body.proposedBy.trim()) ? body.proposedBy.trim() : callerId,
+          proposedBy: callerId,
+          origin,
         });
         counters.contextRequests += 1;
         publishOps(callerProject, "workflows");
-        logger({ event: "context_state_proposed", project: callerProject, proposalId, proposedBy: callerId });
+        logger({ event: "context_state_proposed", project: callerProject, proposalId, proposedBy: callerId, origin });
         json(response, 201, { proposalId });
         return;
       }

package/plugins/kxm/src/mcp-server.ts

@@ -8,7 +8,7 @@ import { AGENT_COMMANDS_MAP, enforceToolPolicy, getMcpTools, reconcileInbox } fr
 import { deliverInboxNotification } from "./inbox.ts";
 import type { HubEvent, MessageRecord } from "./protocol.ts";
 
-const VERSION = "0.7.87";
+const VERSION = "0.7.89";
 const inbox = new Map<string, MessageRecord>();
 const notifiedInbox = new Set<string>();
 let meshClient: HubClient | undefined;

package/plugins/kxm/src/state.ts

@@ -184,6 +184,9 @@ export class NativeStateProvider implements StateProvider {
     if (change?.schema !== "kxm.state-change-proposal.v1") {
       throw new ProtocolError(400, "invalid state change proposal schema", "invalid_state_proposal");
     }
+    if (change.origin !== "peer" && change.origin !== "human") {
+      throw new ProtocolError(400, "state change proposal origin must be peer or human", "invalid_state_proposal");
+    }
     const project = requireNonEmpty(change.project, "proposal project");
     const key = requireNonEmpty(change.key, "proposal key");
     const evidenceRefs = boundedRefs(change.evidenceRefs, "proposal evidenceRefs");
@@ -193,7 +196,7 @@ export class NativeStateProvider implements StateProvider {
       project,
       summary: change.summary,
       provenance: {
-        sourceType: change.proposedBy.startsWith("agent_") ? "peer" : "human",
+        sourceType: change.origin,
         sourceRef: `proposed-by:${change.proposedBy}`,
       },
       authority: change.authority,