01 Public hub

Publish a .kolm. Pull anyone else's.

A compiled .kolm artifact is one self-contained file. The hub gives every artifact a stable handle, a SHA-256 fingerprint, and a verified-on-download contract. Same file format the CLI builds locally - no rebuild, no rehosting, no proprietary container.

Publish your own

Handle K-score Size Base Updated

Handle format: owner/name for latest, owner/name@sha256:hex to pin a specific build. how K-score is computed

How the hub works

Three commands. Every artifact carries its own SHA. Pull is sha-pinned; mismatches fail closed with exit 5.

01 · publish

Push a compiled .kolm

kolm publish my-redactor.kolm \
  --name my-redactor \
  --task redaction

Returns a handle pinned to the artifact's SHA. Same SHA = idempotent update; different SHA under same name = 409 unless you bump or replace.

02 · pull

Fetch by handle, verify on disk

kolm pull alice/my-redactor
kolm pull alice/my-redactor@sha256:abc123

Downloads, hashes, and rejects if the local SHA doesn't match the handle pin. Exit 5 on mismatch — nothing lands in your filesystem.

03 · list

Search and inspect

kolm hub list --q redactor
kolm hub show alice/my-redactor

Public hub is read-only without an API key. Publishing requires an account; pulls are open.