kmd

kmd — knowledge-markdown

CLI + MCP server for structured markdown knowledge vaults. Validate, index (SQLite FTS5), and serve content to AI agents — one npx away.

Same primitives as Open Knowledge Format (markdown + YAML frontmatter + directory tree), but opinionated where OKF is minimal:

| | OKF | kmd | |---|---|---| | Vocabulary | open — producer picks type values | controlled — vault.yaml defines kinds, scopes, statuses, tags; kmd validate enforces | | Structure | flat — organize however | three domains: projects/ · research/ · notes/ | | Validation | none — format spec only | deterministic, LLM-free; gates sync + pre-commit hook | | Cross-refs | bundle-relative /path.md | [[wikilinks]] (Obsidian-native, rename-safe, no-dangling guarantee) | | Agent surface | none — bring your own | two MCP tools (prime, search) + template resources | | Guardrails | none | declarative prompt reminders + tool gates from vault.yaml (kmd hook) | | Infrastructure | n/a | node:sqlite FTS5; zero external deps |

Install

npx @bartolli/kmd --help

Commands

kmd init [<dir>] [-y]        scaffold a fresh vault (starter vault.yaml + IDE schema, templates, domain dirs)
kmd validate [<path>]        deterministic vault checker (default: $WIKI_VAULT)
kmd sync                     vault → SQLite index (runs validate first)
kmd mcp [<vault-root>]       stdio MCP server
kmd config [<vault-root>]    print vault + index resolution; no vault → list known vaults
kmd db reset [<vault-root>]  delete the vault's index
kmd hook <prompt|pretool|posttool>
                             harness gate engine — see "Hook gates" below

The index is per-vault: ~/.kmd/db/{vault-key}/index.db, keyed by the resolved vault root — multiple vaults never share or clobber an index, and re-pointing a server at a different vault can't serve stale rows from the old one. kmd config prints the resolution (or lists every known vault), and agents get vault_root in every prime response — that's the base for resolving search's vault-relative paths.

Bootstrap a vault

kmd init my-vault    # or bare `kmd init` — asks [y/N] before using the current directory

One command scaffolds a working vault: a starter vault.yaml (canonical kinds, statuses, and methodologies; empty scopes — the first scope is yours to name), the 11 built-in templates, the projects/ / research/ / notes/ domain dirs, and vault.schema.json — a draft-07 JSON Schema emitted from the same module that validates at runtime, bound to vault.yaml by a yaml-language-server modeline on line 1, so any modern IDE validates the file and shows field docs with no extension setup. The starter is serialized from the runtime schema itself, never a text snapshot, and vault.yaml is written last — an interrupted scaffold is never a loadable vault. A non-empty target is refused with its entries listed; a target already holding a vault.yaml is refused as already a vault. The result passes kmd validate as-is: add your first scope under scopes: and go. In scripts, -y skips the current-directory prompt; piped stdin without -y is a usage error, never a hang.

MCP registration

{
  "mcpServers": {
    "wiki": {
      "command": "npx",
      "args": ["-y", "@bartolli/kmd", "mcp", "/absolute/path/to/vault"]
    }
  }
}

Two tools:

• prime(scope, task?) — orientation briefing: identity, primer, active ADRs, plan, vocabulary, hubs, task-relevant pages.
• search(query, scope?, kind?, limit?) — FTS5 ranked candidates {path, title, kind, summary, score}. Never page bodies.

Templates served as MCP resources at wiki://template/{domain}/{kind}.

Vault structure

vault/
├── vault.yaml               # controlled vocabulary
├── templates/               # frontmatter templates → MCP resources
├── projects/{scope}/        # specs, ADRs, plans, stories
├── research/{topic}/        # articles, sources
└── notes/                   # low-ceremony capture

vault.yaml is the controlled vocabulary and the served pedagogy for one vault. Loading is fail-loud: an invalid file stops the MCP server from starting and blocks kmd sync / kmd validate, and unknown keys are rejected loud — a typo'd field never silently does nothing. The schema lives in one module (packages/db/src/vault-config.ts) shared by sync, validate, the MCP server, and kmd init; kmd sync keeps vault.schema.json at the vault root matched to the running engine, and the modeline on vault.yaml line 1 gives any modern IDE live validation against it. A complete annotated example: vault.yaml.example.

| Field | Type | Required | Enforced by | |---|---|---|---| | scopes | map of scope name → entry | yes | schema; prime(scope) resolves against it | | scopes..status | string | yes | schema (free string; keep within statuses by convention) | | scopes..repo | string | no | kmd hook — resolves the active scope from the session's working directory | | scopes.*.methodology | string | no | schema — must appear in methodologies | | kinds | (string \| {name, signal, where})[] | yes | kmd validate: page kind must be listed; object form adds a kind-selector row | | statuses | string[] | yes | kmd validate: page status must be listed | | methodologies | string[] | yes | kmd validate (pages) + schema (scope entries) | | tags.canonical | string[] | yes | membership check currently deferred; prime surfaces top_tags | | tags.aliases | map alias → canonical | yes | kmd validate warns when a page uses an alias | | authoring_rules | multiline string | no | replaces wiki://authoring § Authoring rules (escape hatch) | | authoring_rules_extra | multiline string | no | appended after the served § Authoring rules | | sync_protocol | multiline string | no | replaces wiki://authoring § Resync protocol (escape hatch) | | sync_protocol_extra | multiline string | no | appended after the served § Resync protocol | | triggers | map scope → trigger list | no | full-replace of the built-in + plugin trigger base for that scope (escape hatch) | | triggers_extra | map scope → trigger list | no | appended per scope; the reserved _all key applies to every session |

Kinds with built-in authoring pedagogy (kind-selector rows): project, spec, adr, plan, story, ops, topic, article, src, note, artifact, prompt. A custom kind gets its row via the object form: {name, signal, where} — signal is when to pick the kind, where is the path pattern.

scopes:
  my-app:
    methodology: sdd        # optional — any value from `methodologies`
    status: active
  research-notes:
    status: active

kinds: [spec, adr, plan, story, ops, article, src, note]
statuses: [draft, active, superseded, archived]
methodologies: [sdd, tdd, hybrid]

tags:
  canonical: [auth, api, sync]
  aliases:
    authentication: auth    # normalize on write; warn on validate

Served pedagogy

The MCP resource wiki://authoring is how agents learn to write in your vault: it opens with the vault root (so every path it teaches is immediately actionable), then a kind-selector table, the controlled vocabulary, authoring rules (structure, frontmatter discipline, content quality bar, linking), and the resync protocol. It ships with strong defaults and is assembled fresh from vault.yaml on every read — edit the config, and the next agent session works under the new rules. No rebuild, no restart.

Add vault-specific rules — keep every default

The _extra fields append to the served sections. You keep the full built-in rulebook, and future default improvements keep flowing to your vault:

authoring_rules_extra: |
  - **Diagrams live in `assets/`** as `.excalidraw.md` — embed with `![[...]]`, don't inline SVG.
  - **Meeting notes are one file per meeting**: `notes/mtg-{date}-{topic}.md`.

sync_protocol_extra: |
  Session-closing primer resyncs run /retro first: convert every finding
  into wiki artifacts, then author the primer from the corrected state.

Served result: § Authoring rules is the complete default set with your two rules at the end; § Resync protocol gains the retro gate after the default edit-validate-sync loop.

Teach the agent a custom kind

A kinds entry in object form adds a row to the served kind selector — signal is when to pick this kind, where is the path pattern to follow:

kinds:
  - spec
  - adr
  - note
  - name: experiment
    signal: Hypothesis, setup, and outcome of a training run
    where: "`projects/{scope}/lab/exp-{slug}.md`"

Served kind selector:

| Signal | Kind | Where |
|---|---|---|
| How a system works (state of world, not decision) | **spec** | `projects/{scope}/spec/spec-{slug}.md` |
| Decision between alternatives, commits direction | **adr** | `projects/{scope}/adr/adr-{slug}.md` |
| Low-ceremony capture, sort later | **note** | `notes/{slug}.md` |
| Hypothesis, setup, and outcome of a training run | **experiment** | `projects/{scope}/lab/exp-{slug}.md` |

…and kmd validate accepts kind: experiment on pages. Plain-string entries use the built-in pedagogy; the object form also lets you reword a built-in kind's row.

The template comes with it: drop templates/experiment.md in the vault and it's served at wiki://template/experiment, listed in wiki://templates with the kind's signal as its description — same fresh-from-disk serving as the built-ins. A declared custom kind without its template file is a kmd validate warning, so the gap never goes unnoticed.

Custom-kind pages get a soft universal floor instead of the built-ins' strict one: missing title, summary, or updated warns but never blocks. Those three are the fields the index serves — title/summary feed search, updated feeds prime ordering — so the nudge keeps pages retrievable while everything beyond the floor stays the kind's own business.

Bring your own methodology

The methodologies list is the single authority for page frontmatter and scope entries — no hard-coded set:

scopes:
  care-ops:
    methodology: pdca-raci   # legal because the list declares it
    status: active

methodologies: [sdd, tdd, hybrid, pdca-raci]

A scope methodology missing from the list fails the whole file at load — fail-loud, before any index write.

Replace wholesale (escape hatch)

authoring_rules / sync_protocol (without _extra) replace the served section entirely. Every default rule not restated is gone — reach for this only when your vault genuinely runs a different rulebook. Custom statuses behave similarly on the serving side: only the canonical draft → active → superseded → archived set is presented as a one-directional lifecycle; any other list is served as a plain enumeration, and the ordering pedagogy is yours to supply via authoring_rules_extra.

Hook gates

A rule written in prose loses the agent's attention a hundred thousand tokens in. A trigger fires at the exact moment the rule matters — as a reminder injected into context, or as a gate that stops the tool call. Triggers are declared in vault.yaml; kmd hook evaluates them when the agent harness fires an event.

This inverts where pedagogy lives. Instructions files (CLAUDE.md, AGENTS.md), memory files, and playbooks pay their token cost on every request and compete with the task for attention — yet most of their rules are conditional: they bind only at specific moments (a release, a vault write, a force push). Hooks move those rules out of the standing context into an event layer — zero tokens while silent, the full rule at the moment it binds, deterministically. Keep the static layers for what is genuinely unconditional (identity, architecture, conventions in every file you touch); compile the rest into triggers and delete the prose. The auto validate + sync loop is the pattern at its endpoint: a protocol that used to be instructions is now machinery, and the model never spends attention on it.

Three events:

• kmd hook prompt — runs when the user submits a prompt. Matching triggers each inject one context line (a protocol pointer, a skill reminder). Each trigger fires once per session — a rule you've seen is a rule you've seen.
• kmd hook pretool — runs before the agent executes a tool. A matching gate can inject context, warn, or deny the call with a reason the agent reads. Deny-class gates fire every time; only reminders spend the once-per-session budget.
• kmd hook posttool — runs after the agent writes a file. When the file is inside the vault, kmd validate runs on the spot: findings come back into the session for the agent to fix, and the index doesn't sync until they are. A clean write syncs silently. The edit-validate-sync loop stops being something the agent has to remember. Writes outside the vault exit without touching anything.

triggers_extra:
  _all:                        # reserved: every session, whatever the scope
    - id: skill-notes
      on: prompt
      enforce: inject
      keywords: [scratchpad, jot]
      text: "Skill: /notes captures scratch thoughts into the vault."
  my-app:
    - id: retro-before-tag
      on: pretool
      enforce: block
      tool: Bash
      args_match: "\\bgit tag\\b"
      when:                    # precondition — the gate fires only when it is UNMET
        name: newer-than
        fresh: ["notes/my-app-retro-*.md"]
        than: ["projects/my-app/ops/release-*.md"]
      reason: "Retro gate: run the retro before tagging."

Matching. Prompt triggers match keywords on word boundaries with stemming — releasing and released match the keyword release, prerelease does not — with intent regexes as the escape hatch for phrasings stemming can't reach. Pretool matchers AND-compose: tool equals the tool name, args_match is a regex over the tool's input, files is a glob list checked against the file paths the tool touches (relative to the session's working directory; * crosses directories, stays within a segment).

State-aware gates. when names a precondition checked against your vault at the moment of the call. One predicate ships today: newer-than — the newest page matching fresh must carry a frontmatter updated at or after the newest page matching than. In the example above: tagging a release is denied unless a retro note postdates the last release note. While no release note exists, the gate passes — it arms itself the day you write the first one.

Wiring (Claude Code). Installing the wiki-sdd plugin registers both hooks automatically — manual wiring is for setups without the plugin. For those, install the binary on PATH first — hooks spawn on every event, and a global install keeps that spawn fast:

npm i -g @bartolli/kmd

{
  "hooks": {
    "UserPromptSubmit": [
      { "hooks": [{ "type": "command",
        "command": "kmd hook prompt /absolute/path/to/vault --scope my-app" }] }
    ],
    "PreToolUse": [
      { "hooks": [{ "type": "command",
        "command": "kmd hook pretool /absolute/path/to/vault --scope my-app --harness claude" }] }
    ],
    "PostToolUse": [
      { "matcher": "Write|Edit",
        "hooks": [{ "type": "command",
        "command": "kmd hook posttool /absolute/path/to/vault --harness claude" }] }
    ]
  }
}

--harness claude emits Claude Code's decision JSON for tool events — deny with reason, context injection, never a silent auto-approve. Without the flag the output is a neutral JSON contract for other integrations. Kiro IDE users wire the prompt event with --harness kiro-ide: the prompt arrives via Kiro's $USER_PROMPT (Kiro writes nothing to stdin), and because Kiro passes no session id, reminders dedup per 30-minute window per workspace instead of per session. Plugins that ship skills can compile their activation triggers into a file and pass --triggers <file> — those fire even when no scope is active.

Declare repo: on your scopes and you can drop --scope entirely — the engine resolves the scope from the session's working directory (longest declared path wins, ~ expands):

scopes:
  my-app:
    status: active
    repo: ~/Projects/my-app

Failure mode: open, and loud. A missing or invalid vault.yaml, an unreadable trigger file, or a broken predicate never blocks your prompt or denies unrelated tool calls — the engine emits one stderr diagnostic and stands down until the config is fixed.

Node warnings in agent context. kmd filters its own node:sqlite ExperimentalWarning off stderr. Other Node tooling running inside the agent loop may still print ExperimentalWarning lines into hook and MCP stderr — noise the model reads. Suppress globally with export NODE_OPTIONS="--disable-warning=ExperimentalWarning", or scope it to the agent process only via your harness's env settings (Claude Code: settings.json → "env"), leaving your shell sessions untouched.

Pages

Every page has YAML frontmatter validated against vault.yaml. Use the templates in templates/ (or wiki://template/{domain}/{kind} via MCP) — don't hand-roll.

# projects/my-app/adr/adr-sqlite-index.md
---
title: "SQLite for the index"
kind: adr
status: active
tags: [storage]
created: "2025-03-15"
updated: 2025-06-01
---

# research/retrieval/snowflake-cortex.md
---
title: "Snowflake Cortex architecture"
kind: article
status: draft
tags: [retrieval]
created: "2025-04-20"
updated: 2025-04-20
---

# notes/caching-thought.md
---
title: "Quick thought on caching"
tags: [perf]
created: "2025-06-28"
updated: 2025-06-28
---

kind selects the template shape. status tracks lifecycle. Notes skip kind — location implies it. All values must appear in vault.yaml or validate fails.

Claude Code plugin

The repo doubles as a Claude Code plugin marketplace (kmd) shipping wiki-sdd — the wiki-native spec-driven development loop: skills for scope bootstrap, intent grilling, PRD synthesis, triage, issue slicing, TDD, and retro, plus the gate hooks (kmd hook on prompt and tool events), a frontmatter guard, and this MCP server preconfigured via npx @bartolli/kmd.

claude plugin marketplace add bartolli/kmd
claude plugin install wiki-sdd@kmd

Codex plugin

The repo also provides a Codex marketplace (kmd) shipping wiki-sdd.

codex plugin marketplace add bartolli/kmd
codex plugin add wiki-sdd@kmd

Start a new Codex thread after installation so the plugin's skills and MCP tools are loaded.

Development

Requires Node.js 22+ (node:sqlite FTS5) and pnpm 11+.

pnpm install
pnpm -r run typecheck && pnpm -r run test && pnpm lint

License

MIT