@kontextmind/kxm 0.7.93 → 0.7.94

package/.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "kxm",
       "source": "./plugins/kxm",
       "description": "Durable workflows, peer agents, and kxm tui",
-      "version": "0.7.93",
+      "version": "0.7.94",
       "category": "development",
       "tags": ["kxm", "multi-agent", "workflows", "mcp"]
     }

package/README.md

@@ -154,7 +154,7 @@ $coordinatorTools = @(
   "kxm_workflow_get", "kxm_workflow_checkpoint", "kxm_workflow_wait",
   "kxm_workflow_record", "kxm_improvement_report"
 ) -join ","
-kxm agent worker --name coordinator --project product --model xai/grok-4.6 `
+kxm agent worker --name coordinator --project product --model openrouter/qwen/qwen3-coder-plus `
   --fallback-models antigravity/gemini-3.1-pro --tools $coordinatorTools `
   --session-isolation workflow --fresh-start
 ```

package/docs/configuration.md

@@ -277,11 +277,13 @@ $coordinatorTools = @(
   "kxm_workflow_record", "kxm_improvement_report"
 ) -join ","
 kxm agent worker --name coordinator --project product `
-  --model antigravity/claude-sonnet-4-6 `
-  --fallback-models xai/grok-4.6 --tools $coordinatorTools `
+  --model antigravity/gemini-3.8-flash-high `
+  --fallback-models openrouter/qwen/qwen3-coder-plus --tools $coordinatorTools `
   --session-isolation workflow --fresh-start
 ```
 
+The worker is Pi-only, so the primary model and every fallback pass the same native-vendor brake as assignment before Pi starts: a model whose vendor has its own harness (Anthropic, OpenAI, xAI, Moonshot, Google, DeepSeek) is refused with `pi_native_impersonation_blocked` whether it is named directly (`xai/…`), through that vendor's own Pi provider (`openai-codex/…`, `kimi-coding/…`, `claude-bridge/…`), or behind an aggregator (`openrouter/x-ai/…`). The one Google exception is the decided `antigravity/gemini-*` route. Which routes are *admitted* is still Tracking's call; the brake only refuses.
+
 With workflow isolation enabled, the hub stamps every internal workflow prompt, callback resume, timeout notification, and authorized peer-evidence request with a canonical `workflowRunId`. Before acknowledging a queued message, the Pi extension compares that hub-owned binding with the active worker scope. A mismatch is left `queued`; the extension atomically requests a route change and shuts down cleanly. Only after the child closes does the supervisor start one replacement Pi RPC child with `--session-dir .kxm/state/pi-sessions/<workerKey>/default` or `.../runs/<runId>`. This gives the stable default work and each `{agent, workflowRunId}` an independent Pi JSONL history without concurrent writers. Correlation IDs alone never select a workflow session. Binding manifests and requests are identity-, supervisor-generation-, child-incarnation-, timestamp-, and schema-checked, and malformed manifests are quarantined before a safe default binding is created.
 
 Explicit extension code runs with the worker's repository, network, and model credentials, and skills supply privileged instructions. These are trusted service-administrator settings: never derive them from a webhook or workflow payload. Absolute and parent-relative paths outside `KXM_WORKDIR` are intentionally supported for reviewed provider extensions. Review and protect every configured resource like an executable dependency. A fast `--continue` failure writes a collision-safe `.kxm/state/worker-recovery-<project>-<agent>-<identity>.json` envelope and retries once without `--continue`; the reader can consume an exact-name legacy envelope during migration.

package/docs/operations.md

@@ -91,20 +91,20 @@ Use `kxm hub view --json` instead when a machine-readable result is required.
 
 ## Real multi-Pi release smoke
 
-The opt-in release smoke requires two distinct models that already pass `pi auth check`. It creates a temporary workspace, launches two real Pi RPC workers, and verifies discovery, request/reply, fanout, durable identity plus a post-restart exchange, journal persistence, checkpoint completion, and cleanup.
+The opt-in release smoke requires two distinct models that already pass `pi auth check`. Both run as long-lived Pi workers, so both must pass the native-vendor brake: a model whose vendor has its own harness (for example `xai/…` or `anthropic/…`) is refused before Pi starts. It creates a temporary workspace, launches two real Pi RPC workers, and verifies discovery, request/reply, fanout, durable identity plus a post-restart exchange, journal persistence, checkpoint completion, and cleanup.
 
 PowerShell:
 
 ```powershell
 $env:KXM_SMOKE = "1"
-$env:KXM_SMOKE_MODELS = "xai/grok-4.6,anthropic/claude-sonnet-4-5"
+$env:KXM_SMOKE_MODELS = "openrouter/qwen/qwen3-coder-plus,openrouter/z-ai/glm-5.3-flash"
 node scripts/smoke-multi-pi.mjs
 ```
 
 POSIX shell:
 
 ```bash
-KXM_SMOKE=1 KXM_SMOKE_MODELS='xai/grok-4.6,anthropic/claude-sonnet-4-5' node scripts/smoke-multi-pi.mjs
+KXM_SMOKE=1 KXM_SMOKE_MODELS='openrouter/qwen/qwen3-coder-plus,openrouter/z-ai/glm-5.3-flash' node scripts/smoke-multi-pi.mjs
 ```
 
 For GitHub Actions, smoke runs on the ARC scale set `kontextmind-doks`. Set

package/docs/provenance-gates.md

@@ -138,10 +138,14 @@ before starting the workflow:
 ```powershell
 $env:KXM_AUTH_TOKEN = "replace-with-the-project-token"
 kxm agent worker --name coordinator --project provenance-demo --session-isolation workflow
-kxm agent worker --name reviewer-claude --project provenance-demo --model anthropic/claude-opus-4-6 --session-isolation workflow
-kxm agent worker --name reviewer-grok --project provenance-demo --model xai/grok-4.6 --session-isolation workflow
+kxm agent worker --name reviewer-claude --project provenance-demo --model openrouter/qwen/qwen3-coder-plus --session-isolation workflow
+kxm agent worker --name reviewer-grok --project provenance-demo --model openrouter/z-ai/glm-5.3-flash --session-isolation workflow
 ```
 
+The reviewer ids are names, not routes. Workers are Pi, and Pi may not run a model whose
+vendor has its own harness, so these two independent reviewers use admitted Pi routes from
+different vendors rather than Claude and Grok.
+
 In an operator terminal, supply the workflow-start secret and create a run:
 
 ```powershell

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kontextmind/kxm",
-  "version": "0.7.93",
+  "version": "0.7.94",
   "description": "KXM local-first multi-agent orchestration and operator dashboard",
   "type": "module",
   "author": "KontextMind",

package/plugins/kxm/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "kxm",
   "displayName": "KXM",
-  "version": "0.7.93",
+  "version": "0.7.94",
   "description": "Headless multi-agent orchestration, durable workflows, and a live operator dashboard for Pi and Claude Code",
   "author": {
     "name": "KontextMind",

package/plugins/kxm/dist/cli.js

@@ -21409,6 +21409,23 @@ var PI_NATIVE_BRAKE_PROVIDERS = Object.freeze([
   "google",
   "deepseek"
 ]);
+var PI_VENDOR_OWNED_PROVIDERS = Object.freeze({
+  "openai-codex": "openai",
+  moonshotai: "moonshot",
+  "moonshotai-cn": "moonshot",
+  "kimi-coding": "moonshot",
+  "google-vertex": "google",
+  // Claude subscription via the Agent SDK: experiment-only, never a product route.
+  "claude-bridge": "anthropic",
+  // The decided Google route, for Gemini ids only (see PI_ANTIGRAVITY_MODEL_ID).
+  antigravity: "google"
+});
+var PI_VENDOR_SEGMENT_ALIASES = Object.freeze({
+  "x-ai": "xai",
+  moonshotai: "moonshot",
+  "google-ai": "google"
+});
+var PI_ANTIGRAVITY_MODEL_ID = /^gemini-[a-z0-9.-]+$/;
 function reportedModelId(value) {
   return typeof value === "string" && /^[a-z0-9][a-z0-9._:/-]{0,199}$/i.test(value) ? value : void 0;
 }
@@ -22151,19 +22168,25 @@ function validateHarnessModelPair(harnessId, modelSpec) {
     return { valid: true };
   }
   if (harnessId === "pi") {
-    if (provider && PI_NATIVE_BRAKE_PROVIDERS.includes(provider)) {
-      return {
-        valid: false,
-        issue: "pi_native_impersonation_blocked",
-        message: `pi must not impersonate native provider ${provider}; use the native harness`
-      };
-    }
-    if (!provider && model && PI_NATIVE_BRAKE_PROVIDERS.some((p) => model.toLowerCase().startsWith(`${p}/`))) {
-      return {
-        valid: false,
-        issue: "pi_native_impersonation_blocked",
-        message: `pi must not impersonate native model ${model}; use the native harness`
-      };
+    if (!provider && model?.includes("/")) {
+      const idx = model.indexOf("/");
+      provider = model.slice(0, idx).toLowerCase();
+      model = model.slice(idx + 1);
+    }
+    if (!provider) return { valid: true };
+    const blocked = (message) => ({ valid: false, issue: "pi_native_impersonation_blocked", message });
+    if (PI_NATIVE_BRAKE_PROVIDERS.includes(provider)) {
+      return blocked(`pi must not impersonate native provider ${provider}; use the native harness`);
+    }
+    if (provider === "antigravity" && model && PI_ANTIGRAVITY_MODEL_ID.test(model)) return { valid: true };
+    const owned = Object.hasOwn(PI_VENDOR_OWNED_PROVIDERS, provider) ? PI_VENDOR_OWNED_PROVIDERS[provider] : void 0;
+    if (owned) {
+      return blocked(`pi provider ${provider} bills native vendor ${owned} for ${model ?? "this model"}; use the native harness`);
+    }
+    const segment = model?.includes("/") ? model.slice(0, model.indexOf("/")).toLowerCase() : void 0;
+    const vendor = segment && Object.hasOwn(PI_VENDOR_SEGMENT_ALIASES, segment) ? PI_VENDOR_SEGMENT_ALIASES[segment] : segment;
+    if (vendor && PI_NATIVE_BRAKE_PROVIDERS.includes(vendor)) {
+      return blocked(`pi must not bill native vendor ${vendor} through ${provider}; use the native harness`);
     }
     return { valid: true };
   }
@@ -26678,8 +26701,8 @@ function generateRoutingReport(records, options = {}) {
     if (a.reworkRate !== b2.reworkRate) {
       return a.reworkRate - b2.reworkRate;
     }
-    const aCostUnknown = a.costPerAcceptedUsd === null && a.unknownCostAttempts > 0 && a.meteredCostUsd === 0;
-    const bCostUnknown = b2.costPerAcceptedUsd === null && b2.unknownCostAttempts > 0 && b2.meteredCostUsd === 0;
+    const aCostUnknown = a.unknownCostAttempts > 0;
+    const bCostUnknown = b2.unknownCostAttempts > 0;
     if (aCostUnknown && !bCostUnknown) return 1;
     if (!aCostUnknown && bCostUnknown) return -1;
     if (a.costPerAcceptedUsd !== null && b2.costPerAcceptedUsd !== null) {

package/plugins/kxm/dist/core.js

@@ -710,8 +710,8 @@ function generateRoutingReport(records, options = {}) {
     if (a.reworkRate !== b.reworkRate) {
       return a.reworkRate - b.reworkRate;
     }
-    const aCostUnknown = a.costPerAcceptedUsd === null && a.unknownCostAttempts > 0 && a.meteredCostUsd === 0;
-    const bCostUnknown = b.costPerAcceptedUsd === null && b.unknownCostAttempts > 0 && b.meteredCostUsd === 0;
+    const aCostUnknown = a.unknownCostAttempts > 0;
+    const bCostUnknown = b.unknownCostAttempts > 0;
     if (aCostUnknown && !bCostUnknown) return 1;
     if (!aCostUnknown && bCostUnknown) return -1;
     if (a.costPerAcceptedUsd !== null && b.costPerAcceptedUsd !== null) {

package/plugins/kxm/dist/mcp-server.js

@@ -17285,7 +17285,7 @@ function sessionTokenFixHint(policy) {
 }
 
 // plugins/kxm/src/mcp-server.ts
-var VERSION = "0.7.93";
+var VERSION = "0.7.94";
 var CONFIGURE_PLUGIN = "/plugin configure kxm@kxm";
 var inbox = /* @__PURE__ */ new Map();
 var notifiedInbox = /* @__PURE__ */ new Set();

package/plugins/kxm/dist/runtime-supervisor.js

@@ -15328,6 +15328,23 @@ var PI_NATIVE_BRAKE_PROVIDERS = Object.freeze([
   "google",
   "deepseek"
 ]);
+var PI_VENDOR_OWNED_PROVIDERS = Object.freeze({
+  "openai-codex": "openai",
+  moonshotai: "moonshot",
+  "moonshotai-cn": "moonshot",
+  "kimi-coding": "moonshot",
+  "google-vertex": "google",
+  // Claude subscription via the Agent SDK: experiment-only, never a product route.
+  "claude-bridge": "anthropic",
+  // The decided Google route, for Gemini ids only (see PI_ANTIGRAVITY_MODEL_ID).
+  antigravity: "google"
+});
+var PI_VENDOR_SEGMENT_ALIASES = Object.freeze({
+  "x-ai": "xai",
+  moonshotai: "moonshot",
+  "google-ai": "google"
+});
+var PI_ANTIGRAVITY_MODEL_ID = /^gemini-[a-z0-9.-]+$/;
 function reportedModelId(value) {
   return typeof value === "string" && /^[a-z0-9][a-z0-9._:/-]{0,199}$/i.test(value) ? value : void 0;
 }
@@ -16049,19 +16066,25 @@ function validateHarnessModelPair(harnessId, modelSpec) {
     return { valid: true };
   }
   if (harnessId === "pi") {
-    if (provider && PI_NATIVE_BRAKE_PROVIDERS.includes(provider)) {
-      return {
-        valid: false,
-        issue: "pi_native_impersonation_blocked",
-        message: `pi must not impersonate native provider ${provider}; use the native harness`
-      };
-    }
-    if (!provider && model && PI_NATIVE_BRAKE_PROVIDERS.some((p) => model.toLowerCase().startsWith(`${p}/`))) {
-      return {
-        valid: false,
-        issue: "pi_native_impersonation_blocked",
-        message: `pi must not impersonate native model ${model}; use the native harness`
-      };
+    if (!provider && model?.includes("/")) {
+      const idx = model.indexOf("/");
+      provider = model.slice(0, idx).toLowerCase();
+      model = model.slice(idx + 1);
+    }
+    if (!provider) return { valid: true };
+    const blocked = (message) => ({ valid: false, issue: "pi_native_impersonation_blocked", message });
+    if (PI_NATIVE_BRAKE_PROVIDERS.includes(provider)) {
+      return blocked(`pi must not impersonate native provider ${provider}; use the native harness`);
+    }
+    if (provider === "antigravity" && model && PI_ANTIGRAVITY_MODEL_ID.test(model)) return { valid: true };
+    const owned = Object.hasOwn(PI_VENDOR_OWNED_PROVIDERS, provider) ? PI_VENDOR_OWNED_PROVIDERS[provider] : void 0;
+    if (owned) {
+      return blocked(`pi provider ${provider} bills native vendor ${owned} for ${model ?? "this model"}; use the native harness`);
+    }
+    const segment = model?.includes("/") ? model.slice(0, model.indexOf("/")).toLowerCase() : void 0;
+    const vendor = segment && Object.hasOwn(PI_VENDOR_SEGMENT_ALIASES, segment) ? PI_VENDOR_SEGMENT_ALIASES[segment] : segment;
+    if (vendor && PI_NATIVE_BRAKE_PROVIDERS.includes(vendor)) {
+      return blocked(`pi must not bill native vendor ${vendor} through ${provider}; use the native harness`);
     }
     return { valid: true };
   }

package/plugins/kxm/dist/runtime.js

@@ -15325,6 +15325,23 @@ var PI_NATIVE_BRAKE_PROVIDERS = Object.freeze([
   "google",
   "deepseek"
 ]);
+var PI_VENDOR_OWNED_PROVIDERS = Object.freeze({
+  "openai-codex": "openai",
+  moonshotai: "moonshot",
+  "moonshotai-cn": "moonshot",
+  "kimi-coding": "moonshot",
+  "google-vertex": "google",
+  // Claude subscription via the Agent SDK: experiment-only, never a product route.
+  "claude-bridge": "anthropic",
+  // The decided Google route, for Gemini ids only (see PI_ANTIGRAVITY_MODEL_ID).
+  antigravity: "google"
+});
+var PI_VENDOR_SEGMENT_ALIASES = Object.freeze({
+  "x-ai": "xai",
+  moonshotai: "moonshot",
+  "google-ai": "google"
+});
+var PI_ANTIGRAVITY_MODEL_ID = /^gemini-[a-z0-9.-]+$/;
 function reportedModelId(value) {
   return typeof value === "string" && /^[a-z0-9][a-z0-9._:/-]{0,199}$/i.test(value) ? value : void 0;
 }
@@ -16072,19 +16089,25 @@ function validateHarnessModelPair(harnessId, modelSpec) {
     return { valid: true };
   }
   if (harnessId === "pi") {
-    if (provider && PI_NATIVE_BRAKE_PROVIDERS.includes(provider)) {
-      return {
-        valid: false,
-        issue: "pi_native_impersonation_blocked",
-        message: `pi must not impersonate native provider ${provider}; use the native harness`
-      };
-    }
-    if (!provider && model && PI_NATIVE_BRAKE_PROVIDERS.some((p) => model.toLowerCase().startsWith(`${p}/`))) {
-      return {
-        valid: false,
-        issue: "pi_native_impersonation_blocked",
-        message: `pi must not impersonate native model ${model}; use the native harness`
-      };
+    if (!provider && model?.includes("/")) {
+      const idx = model.indexOf("/");
+      provider = model.slice(0, idx).toLowerCase();
+      model = model.slice(idx + 1);
+    }
+    if (!provider) return { valid: true };
+    const blocked = (message) => ({ valid: false, issue: "pi_native_impersonation_blocked", message });
+    if (PI_NATIVE_BRAKE_PROVIDERS.includes(provider)) {
+      return blocked(`pi must not impersonate native provider ${provider}; use the native harness`);
+    }
+    if (provider === "antigravity" && model && PI_ANTIGRAVITY_MODEL_ID.test(model)) return { valid: true };
+    const owned = Object.hasOwn(PI_VENDOR_OWNED_PROVIDERS, provider) ? PI_VENDOR_OWNED_PROVIDERS[provider] : void 0;
+    if (owned) {
+      return blocked(`pi provider ${provider} bills native vendor ${owned} for ${model ?? "this model"}; use the native harness`);
+    }
+    const segment = model?.includes("/") ? model.slice(0, model.indexOf("/")).toLowerCase() : void 0;
+    const vendor = segment && Object.hasOwn(PI_VENDOR_SEGMENT_ALIASES, segment) ? PI_VENDOR_SEGMENT_ALIASES[segment] : segment;
+    if (vendor && PI_NATIVE_BRAKE_PROVIDERS.includes(vendor)) {
+      return blocked(`pi must not bill native vendor ${vendor} through ${provider}; use the native harness`);
     }
     return { valid: true };
   }

package/plugins/kxm/dist/server.js

@@ -14996,6 +14996,22 @@ var PI_NATIVE_BRAKE_PROVIDERS = Object.freeze([
   "google",
   "deepseek"
 ]);
+var PI_VENDOR_OWNED_PROVIDERS = Object.freeze({
+  "openai-codex": "openai",
+  moonshotai: "moonshot",
+  "moonshotai-cn": "moonshot",
+  "kimi-coding": "moonshot",
+  "google-vertex": "google",
+  // Claude subscription via the Agent SDK: experiment-only, never a product route.
+  "claude-bridge": "anthropic",
+  // The decided Google route, for Gemini ids only (see PI_ANTIGRAVITY_MODEL_ID).
+  antigravity: "google"
+});
+var PI_VENDOR_SEGMENT_ALIASES = Object.freeze({
+  "x-ai": "xai",
+  moonshotai: "moonshot",
+  "google-ai": "google"
+});
 function reportedModelId(value) {
   return typeof value === "string" && /^[a-z0-9][a-z0-9._:/-]{0,199}$/i.test(value) ? value : void 0;
 }

package/plugins/kxm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-plugin",
-  "version": "0.7.93",
+  "version": "0.7.94",
   "private": true,
   "type": "module",
   "engines": {

package/plugins/kxm/src/harness.ts

@@ -126,7 +126,7 @@ export const PI_ALLOWED_PROVIDERS: readonly string[] = Object.freeze([
   "nous-proxy",
 ]);
 
-/** Native providers Pi must not impersonate directly unless allowlisted aggregator prefix is used. */
+/** Vendors with a native harness rule. Pi must not run their models under any provider id. */
 export const PI_NATIVE_BRAKE_PROVIDERS: readonly string[] = Object.freeze([
   "anthropic",
   "openai",
@@ -136,6 +136,28 @@ export const PI_NATIVE_BRAKE_PROVIDERS: readonly string[] = Object.freeze([
   "deepseek",
 ]);
 
+/** Pi provider ids that are a braked vendor's own API or subscription under another name. */
+const PI_VENDOR_OWNED_PROVIDERS: Readonly<Record<string, string>> = Object.freeze({
+  "openai-codex": "openai",
+  moonshotai: "moonshot",
+  "moonshotai-cn": "moonshot",
+  "kimi-coding": "moonshot",
+  "google-vertex": "google",
+  // Claude subscription via the Agent SDK: experiment-only, never a product route.
+  "claude-bridge": "anthropic",
+  // The decided Google route, for Gemini ids only (see PI_ANTIGRAVITY_MODEL_ID).
+  antigravity: "google",
+});
+
+/** Aggregator spellings of braked vendors in `provider/vendor/model` ids (roster policy aliases). */
+const PI_VENDOR_SEGMENT_ALIASES: Readonly<Record<string, string>> = Object.freeze({
+  "x-ai": "xai",
+  moonshotai: "moonshot",
+  "google-ai": "google",
+});
+
+const PI_ANTIGRAVITY_MODEL_ID = /^gemini-[a-z0-9.-]+$/;
+
 export interface HarnessModelSpec {
   provider?: string | undefined;
   model?: string | undefined;
@@ -1067,19 +1089,25 @@ export function validateHarnessModelPair(
   }
 
   if (harnessId === "pi") {
-    if (provider && PI_NATIVE_BRAKE_PROVIDERS.includes(provider)) {
-      return {
-        valid: false,
-        issue: "pi_native_impersonation_blocked",
-        message: `pi must not impersonate native provider ${provider}; use the native harness`,
-      };
+    if (!provider && model?.includes("/")) {
+      const idx = model.indexOf("/");
+      provider = model.slice(0, idx).toLowerCase();
+      model = model.slice(idx + 1);
     }
-    if (!provider && model && PI_NATIVE_BRAKE_PROVIDERS.some((p) => model!.toLowerCase().startsWith(`${p}/`))) {
-      return {
-        valid: false,
-        issue: "pi_native_impersonation_blocked",
-        message: `pi must not impersonate native model ${model}; use the native harness`,
-      };
+    if (!provider) return { valid: true };
+    const blocked = (message: string): HarnessModelValidation => ({ valid: false, issue: "pi_native_impersonation_blocked", message });
+    if (PI_NATIVE_BRAKE_PROVIDERS.includes(provider)) {
+      return blocked(`pi must not impersonate native provider ${provider}; use the native harness`);
+    }
+    if (provider === "antigravity" && model && PI_ANTIGRAVITY_MODEL_ID.test(model)) return { valid: true };
+    const owned = Object.hasOwn(PI_VENDOR_OWNED_PROVIDERS, provider) ? PI_VENDOR_OWNED_PROVIDERS[provider] : undefined;
+    if (owned) {
+      return blocked(`pi provider ${provider} bills native vendor ${owned} for ${model ?? "this model"}; use the native harness`);
+    }
+    const segment = model?.includes("/") ? model.slice(0, model.indexOf("/")).toLowerCase() : undefined;
+    const vendor = segment && Object.hasOwn(PI_VENDOR_SEGMENT_ALIASES, segment) ? PI_VENDOR_SEGMENT_ALIASES[segment] : segment;
+    if (vendor && PI_NATIVE_BRAKE_PROVIDERS.includes(vendor)) {
+      return blocked(`pi must not bill native vendor ${vendor} through ${provider}; use the native harness`);
     }
     return { valid: true };
   }

package/plugins/kxm/src/mcp-server.ts

@@ -11,7 +11,7 @@ import { deliverInboxNotification } from "./inbox.ts";
 import type { HubEvent, MessageRecord } from "./protocol.ts";
 import { sessionTokenFixHint } from "./session-token-hint.ts";
 
-const VERSION = "0.7.93";
+const VERSION = "0.7.94";
 const CONFIGURE_PLUGIN = "/plugin configure kxm@kxm";
 const inbox = new Map<string, MessageRecord>();
 const notifiedInbox = new Set<string>();

package/plugins/kxm/src/routing.ts

@@ -817,9 +817,10 @@ export function generateRoutingReport(
       return a.reworkRate - b.reworkRate;
     }
 
-    // 2. Cost: unknown is never ranked cheapest
-    const aCostUnknown = a.costPerAcceptedUsd === null && a.unknownCostAttempts > 0 && a.meteredCostUsd === 0;
-    const bCostUnknown = b.costPerAcceptedUsd === null && b.unknownCostAttempts > 0 && b.meteredCostUsd === 0;
+    // 2. Cost: unknown is never ranked cheapest. Any unknown-cost attempt makes the
+    // route's cost a lower bound (unmetered or metered attempts beside it do not price it).
+    const aCostUnknown = a.unknownCostAttempts > 0;
+    const bCostUnknown = b.unknownCostAttempts > 0;
     if (aCostUnknown && !bCostUnknown) return 1;
     if (!aCostUnknown && bCostUnknown) return -1;
 

package/scripts/harness-run.mjs

@@ -78,6 +78,9 @@ export const PI_ALLOWED_PROVIDERS = Object.freeze(["openrouter", "nous-portal",
 /** Native-vendor Pi providers own one braked vendor. Aggregators are not listed here. */
 export const PI_NATIVE_VENDOR_PROVIDERS = Object.freeze({ antigravity: "google" });
 
+/** Aggregator spellings of braked vendors in `provider/vendor/model` ids (roster policy aliases). */
+const PI_VENDOR_SEGMENT_ALIASES = Object.freeze({ "x-ai": "xai", moonshotai: "moonshot", "google-ai": "google" });
+
 /** Gemini kebab ids for antigravity two-segment models (`antigravity/gemini-...`). */
 export const PI_ANTIGRAVITY_MODEL_ID = /^gemini-[a-z0-9.-]+$/;
 
@@ -1551,6 +1554,11 @@ export function preflightRequest(request) {
     if (request.role === "writer" && (request.model !== PI_ADMITTED_WRITER || request.permission !== "edit")) {
       throw failClosed("pi writer refuses unsupported route; allows only authenticated openrouter/qwen/qwen3-coder-plus with edit permission; other models need reviewed route admission");
     }
+    const segment = piProviderOf(piModelId(request.model));
+    const vendor = segment && Object.hasOwn(PI_VENDOR_SEGMENT_ALIASES, segment) ? PI_VENDOR_SEGMENT_ALIASES[segment] : segment;
+    if (vendor && NATIVE_PI_BRAKE_PROVIDERS.includes(vendor)) {
+      throw failClosed(`pi brake: ${vendor} has a native harness; refusing to bill it through ${provider}`);
+    }
   }
   if (harness === "claude") {
     if (request.hooks === true) {

package/scripts/kxm-worker.mjs

@@ -4,6 +4,7 @@ import { createHash, randomUUID } from "node:crypto";
 import { closeSync, createWriteStream, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { delimiter, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { StringDecoder } from "node:string_decoder";
+import { validateHarnessModelPair } from "../plugins/kxm/dist/runtime.js";
 
 const name = process.env.KXM_AGENT_NAME?.trim();
 const project = process.env.KXM_PROJECT?.trim();
@@ -36,6 +37,12 @@ const modelCandidates = [...new Set([
   ...(primaryModel ? [validateModelSelector(primaryModel, "KXM_WORKER_MODEL")] : []),
   ...fallbackModels,
 ])];
+// The worker is Pi-only, so every candidate — fallbacks included — passes the native-vendor
+// brake before Pi can bill a vendor whose own harness must run it.
+for (const selector of modelCandidates) {
+  const brake = validateHarnessModelPair("pi", selector);
+  if (!brake.valid) throw new Error(`${brake.issue}: ${brake.message}`);
+}
 let modelIndex = 0;
 
 function resolveToolAllowlist() {