cmdr-mcp 0.4.0 → 0.6.0

package/docs/setup.md

@@ -6,7 +6,7 @@ Available from cmdr-mcp 0.4.0. Requires macOS/Linux and Node.js >=22.5 (24 recom
 npx -y --package=cmdr-mcp@latest cmdr setup --agent claude-code
 ```
 
-Choose `claude-code`, `codex` or `zcode`. Setup installs a persistent runtime, the `cmdr` skill, MCP and user hooks, then checks the seven tools in temporary state. Use the printed CLI path (normally `~/.cmdr/bin/cmdr`), open a new host session and complete any trust prompts. Existing hook opt-outs are preserved. Other MCP hosts use `cmdr config --agent <host-id>`.
+Choose `claude-code`, `codex`, `zcode` or `kimi-code`. Setup installs a persistent runtime, the `cmdr` skill, MCP and user hooks, then checks the nine tools in temporary state. Use the printed CLI path (normally `~/.cmdr/bin/cmdr`), open a new host session and complete any trust prompts. Kimi Code loads `config.toml` hooks only at startup, so restart the app instead. Existing hook opt-outs are preserved. Other MCP hosts use `cmdr config --agent <host-id>`.
 
 To install only the self-contained skill and its role/setup references:
 
@@ -23,6 +23,7 @@ Add `-g` for global scope or `--agent <supported-agent>` to select a host. This
 | Claude Code (`claude-code`, alias `claude`) | `~/.claude.json` | `~/.claude/settings.json` | `~/.claude/skills/cmdr` |
 | Codex | `$CODEX_HOME/config.toml`, default `~/.codex/config.toml` | `$CODEX_HOME/hooks.json` | `$CODEX_HOME/skills/cmdr` |
 | ZCode | `~/.zcode/cli/config.json`, `mcp.servers` | Same file, `hooks.events` | `~/.zcode/skills/cmdr` |
+| Kimi Code (`kimi-code`, alias `kimi`) | `$KIMI_CODE_HOME/mcp.json`, default `~/.kimi-code/mcp.json` | Same directory, `config.toml` `[[hooks]]` | `$KIMI_CODE_HOME/skills/cmdr` |
 
 | Option | Purpose |
 | --- | --- |
@@ -30,7 +31,7 @@ Add `-g` for global scope or `--agent <supported-agent>` to select a host. This
 | `--json` | Return paths, changes, warnings and backup location as JSON |
 | `--config-dir PATH` | Select a custom host **user** profile directory; launch the host with that same profile |
 
-`CLAUDE_CONFIG_DIR` is respected; its MCP file is `<CLAUDE_CONFIG_DIR>/.claude.json`. ZCode loads user hooks, not workspace hooks. `CMDR_HOME` selects runtime/state storage (default `~/.cmdr`): build directories live in `runtimes/`, stable profile-specific launchers in `bin/`. They survive npx cache removal and bind the host/state directory, never a fixed session ID. See [host integration](agent-integration.md) for identity and lifecycle contracts.
+`CLAUDE_CONFIG_DIR` is respected; its MCP file is `<CLAUDE_CONFIG_DIR>/.claude.json`. `KIMI_CODE_HOME` relocates the whole Kimi Code data directory, including `mcp.json`, `config.toml` and `skills/`; without it the default `~/.kimi-code` applies. ZCode loads user hooks, not workspace hooks. `CMDR_HOME` selects runtime/state storage (default `~/.cmdr`): build directories live in `runtimes/`, stable profile-specific launchers in `bin/`. They survive npx cache removal and bind the host/state directory, never a fixed session ID. See [host integration](agent-integration.md) for identity and lifecycle contracts.
 
 ## Upgrade and recovery
 
@@ -42,4 +43,4 @@ Existing copies/symlinks of this repository's skill are backed up and replaced w
 
 Backups live in `<CMDR_HOME>/setup-backups/<run>/`. `restore.json` maps each changed path to its backup (`null` marks a newly created entry). Failed writes are rolled back; concurrent edits are reported for manual recovery. After a crash, inspect that record before retrying. Remove a stale `setup.lock` only after confirming its recorded process has stopped.
 
-For diagnostics, run `<printed-cli> doctor --deep`. Move a damaged runtime directory aside and rerun setup from an intact package. Native plugins require their own cache refresh. For [automatic standby](long-running-collaboration.md#automatic-standby), Claude/ZCode arm `listener.arm.command` with the indicated native host tool; Codex uses daemon-managed proxy/queue delivery. GUI trust, actual hook execution and automatic wake must be verified in the host; setup's isolated MCP check does not establish those capabilities.
+For diagnostics, run `<printed-cli> doctor --deep`. Move a damaged runtime directory aside and rerun setup from an intact package. Native plugins require their own cache refresh. For [automatic standby](long-running-collaboration.md#automatic-standby), Claude/ZCode/Kimi Code arm `listener.arm.command` with the indicated native host tool; Codex uses daemon-managed proxy/queue delivery. GUI trust, actual hook execution and automatic wake must be verified in the host; setup's isolated MCP check does not establish those capabilities.

package/docs/troubleshooting.md

@@ -16,7 +16,7 @@ cmdr doctor --plugin-root /absolute/path/to/host/cache/cmdr --deep
 
 The checker lives outside the bundles. If the selected plugin's CLI bundle is missing, its `bin/cmdr doctor` can still report the damage with Node installed. Alternatively use an intact global CLI to inspect that cache. If Node is missing, the shell wrapper reports the Node requirement; install Node >=22.5 and retry. A missing checker requires reinstalling the complete package.
 
-`doctor` exits nonzero for fatal installation failures. `--deep` additionally initializes MCP, verifies exactly seven tools, and calls `list` to check the daemon. It uses a temporary `CMDR_HOME`, an eight-second probe timeout and child cleanup. It does not join a squad or operate on the user's normal queues. Static checks do not start the normal daemon; reporting “daemon not running” is not itself an installation error.
+`doctor` exits nonzero for fatal installation failures. `--deep` additionally initializes MCP, verifies exactly nine tools, and calls `list` to check the daemon. It uses a temporary `CMDR_HOME`, an eight-second probe timeout and child cleanup. It does not join a squad or operate on the user's normal queues. Static checks do not start the normal daemon; reporting “daemon not running” is not itself an installation error.
 
 The states are distinct:
 
@@ -37,7 +37,7 @@ ZCode has four supported plugin hooks; SessionEnd is replaced by EOF detection.
 
 ## ZCode cache has no `dist/`
 
-If `bin/cmdr-mcp` exists but `dist/mcp.mjs` is missing, the launcher exits before MCP initializes, so none of the seven tools can register. A working global `cmdr` uses a separate installation and does not repair this cache. Missing `dist/integrity.json` also prevents verification of otherwise present manifests; this alone does not prove those manifests were modified. Hooks fail open and record a rate-limited `bootstrap-runtime` diagnostic when possible, so a quiet hook does not establish a healthy installation.
+If `bin/cmdr-mcp` exists but `dist/mcp.mjs` is missing, the launcher exits before MCP initializes, so none of the nine tools can register. A working global `cmdr` uses a separate installation and does not repair this cache. Missing `dist/integrity.json` also prevents verification of otherwise present manifests; this alone does not prove those manifests were modified. Hooks fail open and record a rate-limited `bootstrap-runtime` diagnostic when possible, so a quiet hook does not establish a healthy installation.
 
 Check the registered marketplace source first. An unbuilt Git checkout contains manifests and launchers but no generated runtime. The missing files alone cannot distinguish an unbuilt source from an incomplete cache copy.
 
@@ -90,5 +90,5 @@ See [long-running collaboration](long-running-collaboration.md) for adapter requ
 ## Automatic wake diagnostics
 
 - Codex: `standby status --session SID` shows the selected `transport`. Auto mode tries proxy then queue. Missing socket alone no longer establishes that wake is unavailable. Queue compatibility needs Node >=22.12, an available CLI with queue --thread/--message, and readable state_5/rollout lifecycle records in the daemon's CODEX_HOME. Inspect the concrete proxy/queue error before choosing an explicit executable or transport.
-- Claude/ZCode: `wake_mode=claude|zcode` with starting means the native watcher still needs arming. Use the absolute `listener.arm.command` with Monitor or background Bash as specified; shell detachment cannot supply a native completion notification. WATCHER_ACTIVE means inspect/reuse the existing native task. Re-arm after daemon/App restart or native task expiry.
+- Claude/ZCode/Kimi: `wake_mode=claude|zcode|kimi` with starting means the native watcher still needs arming. Use the absolute `listener.arm.command` with Monitor or background Bash as specified; shell detachment cannot supply a native completion notification. WATCHER_ACTIVE means inspect/reuse the existing native task. Re-arm after daemon/App restart or native task expiry.
 - `uncertain` is not automatic retry permission. Reconcile host history and cmdr work, then choose standby resume --resolve accepted or retry. CLI acceptance never substitutes for a working report from the member.

package/marketplace.json

@@ -4,9 +4,9 @@
     {
       "name": "cmdr",
       "source": "./plugins/cmdr",
-      "version": "0.4.0",
+      "version": "0.6.0",
       "description": "Local multi-agent squads with durable messages, roles and lifecycle reminders."
     }
   ],
-  "description": "Local multi-agent squads for Claude Code, Codex, ZCode and other MCP hosts."
+  "description": "Local multi-agent squads for Claude Code, Codex, ZCode, Kimi Code and other MCP hosts."
 }

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "cmdr-mcp",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "type": "module",
-  "description": "Local multi-agent squads for Claude Code, Codex, ZCode and any MCP host",
+  "description": "Local multi-agent squads for Claude Code, Codex, ZCode, Kimi Code and any MCP host",
   "engines": {
     "node": ">=22.5.0"
   },
@@ -19,10 +19,18 @@
     "verify:package": "node scripts/verify-package.mjs"
   },
   "devDependencies": {
+    "@hono/node-server": "^2.1.1",
     "@modelcontextprotocol/sdk": "^1.29.0",
+    "@types/jsdom": "^21.1.7",
     "@types/node": "^24.0.0",
+    "@types/react": "^19.3.0",
+    "@types/react-dom": "^19.3.0",
     "esbuild": "^0.25.0",
+    "hono": "^4.13.7",
+    "jsdom": "^26.1.0",
     "prettier": "^3.9.6",
+    "react": "^19.3.0",
+    "react-dom": "^19.3.0",
     "smol-toml": "^1.8.0",
     "typescript": "^5.9.0",
     "vitest": "^3.2.0",

package/plugins/cmdr/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "cmdr",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "description": "Local multi-agent squads with durable messages, roles and lifecycle reminders.",
   "author": {
     "name": "njugray"

package/plugins/cmdr/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "cmdr",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "description": "Local multi-agent squads with durable messages, roles and lifecycle reminders.",
   "author": {
     "name": "njugray"

package/plugins/cmdr/.kimi-plugin/plugin.json

@@ -0,0 +1,65 @@
+{
+  "name": "cmdr",
+  "version": "0.6.0",
+  "description": "Local multi-agent squads with durable messages, roles and lifecycle reminders.",
+  "author": {
+    "name": "njugray"
+  },
+  "license": "MIT",
+  "repository": "https://github.com/njugray/cmdr",
+  "skills": [
+    "./skills/",
+    "./kimi-identity/"
+  ],
+  "commands": "./commands/",
+  "sessionStart": {
+    "skill": "cmdr-identity"
+  },
+  "mcpServers": {
+    "cmdr": {
+      "command": "./bin/cmdr-mcp",
+      "env": {
+        "CMDR_AGENT": "kimi",
+        "CMDR_TOOL_TIMEOUT_SEC": "600"
+      },
+      "toolTimeoutMs": 600000
+    }
+  },
+  "hooks": [
+    {
+      "event": "SessionStart",
+      "command": "./bin/cmdr-hook SessionStart",
+      "timeout": 5
+    },
+    {
+      "event": "UserPromptSubmit",
+      "command": "./bin/cmdr-hook UserPromptSubmit",
+      "timeout": 5
+    },
+    {
+      "event": "PreToolUse",
+      "matcher": "(?:^|[_:])cmdr(?:__|:)(list|join|report|leave|ask|send|read|task|artifact)$",
+      "command": "./bin/cmdr-hook PreToolUse",
+      "timeout": 5
+    },
+    {
+      "event": "Stop",
+      "command": "./bin/cmdr-hook Stop",
+      "timeout": 5
+    },
+    {
+      "event": "SessionEnd",
+      "command": "./bin/cmdr-hook SessionEnd",
+      "timeout": 1
+    }
+  ],
+  "interface": {
+    "displayName": "cmdr",
+    "category": "Developer Tools",
+    "shortDescription": "Coordinate local coding-agent sessions.",
+    "longDescription": "Connect local coding-agent sessions in squads with persistent messages, explicit roles, and lifecycle reminders.",
+    "developerName": "njugray",
+    "defaultPrompt": "Create or join a cmdr squad.",
+    "capabilities": []
+  }
+}

package/plugins/cmdr/.zcode-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "cmdr",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "description": "Local multi-agent squads with durable messages, roles and lifecycle reminders.",
   "author": {
     "name": "njugray"

package/plugins/cmdr/README.md

@@ -1,6 +1,6 @@
 # cmdr plugin
 
-Connect local Claude Code, Codex, ZCode and other MCP-capable sessions as a squad. Requires macOS/Linux and Node.js ≥22.5 (24 recommended); npm distribution packages include all runtime dependencies. A source checkout requires `npm ci && npm run build` at the repository root before installation; generated `dist` files are not tracked by Git.
+Connect local Claude Code, Codex, ZCode, Kimi Code and other MCP-capable sessions as a squad. Requires macOS/Linux and Node.js ≥22.5 (24 recommended); npm distribution packages include all runtime dependencies. A source checkout requires `npm ci && npm run build` at the repository root before installation; generated `dist` files are not tracked by Git.
 
 For installation through `cmdr setup` or `npx skills`, see [standalone setup](https://github.com/njugray/cmdr/blob/main/docs/setup.md). Use one installation method per host to avoid duplicate tools and hooks.
 
@@ -8,12 +8,14 @@ In each session enter `/cmdr my-project`. Joining defaults to executor, even for
 
 Tools: `join`, `list`, `send`, `report`, `ask`, `read`, `leave`. Executors report ready with capabilities/cwd, then read tasks, report results and ask when blocked. Commanders dispatch verifiable tasks and answer questions with `reply_to`. Acknowledge each command with working + reply_to before executing it. Use read(recover=true) to find unfinished commands after interruptions. Offline never means stopped. Use join(standby="auto") and check listener health; with a healthy listener, end the idle turn. Manual fallback is limited to two recommended waits.
 
-Install a built checkout or the unpacked/installed npm package root as a marketplace in Claude Code/Codex, or use ZCode Settings → Plugins → Create → Add plugin marketplace. Codex needs hooks enabled and five hook approvals; start a new session after installation. For ZCode, use the published `njugray/cmdr#marketplace` source to install without a local build or global npm package. ZCode uses its native manifest and four supported hooks; MCP EOF handles offline state. Generic hosts can configure the absolute `bin/cmdr-mcp` executable and `CMDR_AGENT=<host>` with optional `CMDR_SESSION_ID=<unique native session>`.
+Install a built checkout or the unpacked/installed npm package root as a marketplace in Claude Code/Codex, or use ZCode Settings → Plugins → Create → Add plugin marketplace. Codex needs hooks enabled and five hook approvals; start a new session after installation. For ZCode, use the published `njugray/cmdr#marketplace` source to install without a local build or global npm package. ZCode uses its native manifest and four supported hooks; MCP EOF handles offline state. Kimi Code installs through `cmdr setup --agent kimi-code` or the native `.kimi-plugin` manifest via the host plugin manager; it uses five hooks and a per-call `_cmdr_session` stamp because Kimi pools one MCP process per workspace — the `cmdr-identity` skill renders the session id (`${KIMI_SESSION_ID}`) for the model. Generic hosts can configure the absolute `bin/cmdr-mcp` executable and `CMDR_AGENT=<host>` with optional `CMDR_SESSION_ID=<unique native session>`.
 
-`bin/cmdr config --agent zcode` prints native ZCode configuration; `bin/cmdr config --agent my-agent` prints generic MCP configuration. `bin/cmdr doctor` checks installation health. `bin/cmdr daemon restart` reloads same-version code changes. State lives in `~/.cmdr/` (override `CMDR_HOME`), shared by all sessions.
+`bin/cmdr config --agent zcode` prints native ZCode configuration; `bin/cmdr config --agent kimi` prints native Kimi Code configuration; `bin/cmdr config --agent my-agent` prints generic MCP configuration. `bin/cmdr doctor` checks installation health. `bin/cmdr daemon restart` reloads same-version code changes. State lives in `~/.cmdr/` (override `CMDR_HOME`), shared by all sessions.
 
-Codex wakes through proxy or queue; Claude Monitor and ZCode background Bash run the built-in standby watcher. Join/list supplies native arming instructions, and a live lease controls health. Unknown hosts remain manual; no remote transport is provided. Read marks delivery; report(working/done/failed/cancelled, reply_to) tracks work separately. cmdr standby manages listeners, and tail --after/--for supports non-consuming event replay. See [long-running collaboration](https://github.com/njugray/cmdr/blob/main/docs/long-running-collaboration.md).
+Codex wakes through proxy or queue; Claude Monitor and ZCode/Kimi Code background Bash run the built-in standby watcher. Join/list supplies native arming instructions, and a live lease controls health. Unknown hosts remain manual; no remote transport is provided. Read marks delivery; report(working/done/failed/cancelled, reply_to) tracks work separately. cmdr standby manages listeners, and tail --after/--for supports non-consuming event replay. See [long-running collaboration](https://github.com/njugray/cmdr/blob/main/docs/long-running-collaboration.md).
 
 [Installation and usage](https://github.com/njugray/cmdr#readme) · [Host integration](https://github.com/njugray/cmdr/blob/main/docs/agent-integration.md) · [Verification scope](https://github.com/njugray/cmdr/blob/main/docs/implementation.md)
 
-The npm package is `cmdr-mcp`. Use `cmdr doctor --plugin-root <actual cache directory> --deep` to verify a cached installation. Static integrity checks run without the target CLI bundle; deep probes use temporary state. `cmdr session` provides all seven member operations with explicit host/native identity when MCP tools are unavailable. See [troubleshooting](https://github.com/njugray/cmdr/blob/main/docs/troubleshooting.md) for cancellation, identity and hook diagnostics.
+The npm package is `cmdr-mcp`. Use `cmdr doctor --plugin-root <actual cache directory> --deep` to verify a cached installation. Static integrity checks run without the target CLI bundle; deep probes use temporary state. `cmdr session` provides all nine member operations with explicit host/native identity when MCP tools are unavailable. See [troubleshooting](https://github.com/njugray/cmdr/blob/main/docs/troubleshooting.md) for cancellation, identity and hook diagnostics.
+
+The dashboard also accepts user notes for the selected squad’s commander through the existing inbox. Sending a note does not directly change tasks; see [dashboard operations](../../docs/dashboard.md).

package/plugins/cmdr/THIRD_PARTY_NOTICES.txt

@@ -1,3 +1,29 @@
+@hono/node-server 2.1.1 (MIT)
+MIT License
+
+Copyright (c) 2022 - present, Yusuke Wada and Hono contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+========================================================================
+
 @modelcontextprotocol/sdk 1.30.0 (MIT)
 MIT License
 
@@ -135,6 +161,32 @@ SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 The complete list of contributors can be found at:
 - https://github.com/garycourt/uri-js/graphs/contributors
 
+========================================================================
+
+hono 4.13.7 (MIT)
+MIT License
+
+Copyright (c) 2021 - present, Yusuke Wada and Hono contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
 ========================================================================
 
 json-schema-traverse 1.0.0 (MIT)
@@ -161,6 +213,84 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
 
+========================================================================
+
+react 19.3.0 (MIT)
+MIT License
+
+Copyright (c) Meta Platforms, Inc. and affiliates.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+========================================================================
+
+react-dom 19.3.0 (MIT)
+MIT License
+
+Copyright (c) Meta Platforms, Inc. and affiliates.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+========================================================================
+
+scheduler 0.28.0 (MIT)
+MIT License
+
+Copyright (c) Meta Platforms, Inc. and affiliates.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
 ========================================================================
 
 smol-toml 1.8.0 (BSD-3-Clause)

package/plugins/cmdr/bin/cmdr-check.mjs

@@ -20,6 +20,9 @@ const required = [
   'dist/mcp.mjs',
   'dist/hook.mjs',
   'dist/daemon.mjs',
+  'dist/dashboard/index.html',
+  'dist/dashboard/app.js',
+  'dist/dashboard/app.css',
   'bin/cmdr',
   'bin/cmdr-node',
   'bin/cmdr-mcp',
@@ -31,12 +34,14 @@ const required = [
   '.claude-plugin/plugin.json',
   '.codex-plugin/plugin.json',
   '.zcode-plugin/plugin.json',
+  '.kimi-plugin/plugin.json',
 ];
 for (const path of new Set([...required, ...Object.keys(manifest?.files || {})])) {
   if (
     !required.includes(path) &&
     !path.startsWith('skills/') &&
     !path.startsWith('commands/') &&
+    !path.startsWith('kimi-identity/') &&
     path !== 'THIRD_PARTY_NOTICES.txt'
   ) {
     errors.push(`Unexpected manifest path: ${path}`);
@@ -59,7 +64,7 @@ for (const path of new Set([...required, ...Object.keys(manifest?.files || {})])
   if (!files[path]) errors.push(`Missing, modified or linked asset: ${path}`);
 }
 const versions = {};
-for (const host of ['claude', 'codex', 'zcode']) {
+for (const host of ['claude', 'codex', 'zcode', 'kimi']) {
   try {
     versions[host] = read(`.${host}-plugin/plugin.json`).version;
     if (versions[host] !== manifest?.version) errors.push(`${host} version differs from build`);

package/plugins/cmdr/bin/cmdr-node

@@ -51,7 +51,14 @@ if [ ! -f "$CMDR_BIN_DIR/../dist/$CMDR_ENTRY.mjs" ]; then
   exit 1
 fi
 if [ "$CMDR_ENTRY" = hook ]; then
-  "$CMDR_NODE" --experimental-sqlite --disable-warning=ExperimentalWarning "$CMDR_BIN_DIR/../dist/hook.mjs" "$@" 2>/dev/null || cmdr_failure runtime
+  # Node never uses exit code 2 itself, so only a hook block (the native Kimi
+  # Code format) surfaces stderr; every other failure stays fail-open.
+  { CMDR_HOOK_ERR=$("$CMDR_NODE" --experimental-sqlite --disable-warning=ExperimentalWarning "$CMDR_BIN_DIR/../dist/hook.mjs" "$@" 2>&1 1>&3 3>&-); CMDR_HOOK_STATUS=$?; } 3>&1
+  if [ "$CMDR_HOOK_STATUS" -eq 2 ]; then
+    printf '%s' "$CMDR_HOOK_ERR" >&2
+    exit 2
+  fi
+  [ "$CMDR_HOOK_STATUS" -ne 0 ] && cmdr_failure runtime
   exit 0
 fi
 exec "$CMDR_NODE" --experimental-sqlite --disable-warning=ExperimentalWarning "$CMDR_BIN_DIR/../dist/$CMDR_ENTRY.mjs" "$@"

package/plugins/cmdr/commands/cmdr.md

@@ -3,5 +3,7 @@ description: Create or join a persistent local agent channel.
 argument-hint: <name>
 ---
 Call join(squad_name="$ARGUMENTS", standby="auto") for atomic find-or-create. If no name was provided, ask for one; do not invent it. Joining defaults to executor, including a channel without a commander. Add role="commander" if the user explicitly requested command; use takeover=true only for requested handover.
-Follow protocol_hint and the role skill. Executors report ready with cwd and capabilities. Give a brief translated user_reply preserving the join line. For Claude/ZCode, arm listener.arm.command with the indicated native host tool, following the role skill; re-arm on task termination or restart. Check listener health and end the idle turn when can_auto_respond=true. Use at most two recommended waits only when native wake is unavailable; explain the actual limitation.
+Follow protocol_hint and the role skill. Executors report ready with cwd and capabilities. Give a brief translated user_reply preserving the join line. For Claude/ZCode/Kimi, arm listener.arm.command with the indicated native host tool, following the role skill; re-arm on task termination or restart. Check listener health and end the idle turn when can_auto_respond=true. Use at most two recommended waits only when native wake is unavailable; explain the actual limitation.
 If tools are unavailable, follow the cmdr skill's setup reference (or using-cmdr diagnostics for legacy installs) and member CLI fallback. Use the real host session ID, never an invented identity or raw socket workaround.
+
+For dashboard work, use task/artifact and the commander role reference for ask(target="user"). Open the built-in page with the current installation’s `cmdr dashboard`; do not generate a replacement dashboard HTML file.