kairos-chain 3.30.0 → 3.32.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3ec94fadb095a49a89c0235010c80e37913aaf6781aa16d22a2e5855b1eb154d
-  data.tar.gz: 38c3b631326b87f07285f9a5f4ecdd64fc22d086b6b08de76d5b2aaf2d7d7040
+  metadata.gz: c01be861d1c6a82ee12606f25c5526268351cd4353aa21cf00a0dcb28fc5ed30
+  data.tar.gz: 4f2cfd5edc74107aa944ba16a953d30935dca34141806bf3b3b71efe9ed84b51
 SHA512:
-  metadata.gz: 7d3d7e9d5f52b58109a795ce4f67243551ad353d18d273d4062034e09bcafe8201559ceabcef16c5ad0d0fc0bca4b8b8629c27cb49e224091ae05ffd5aa364ac
-  data.tar.gz: a20e8e7a2cb18d8cbcbd76f39c7fa69a9bbd55d4447c16fa289ca8227fd2537325693748e711e46e57693c6572b41f15096dc358368f89911d95eaea3c714ca8
+  metadata.gz: a88518aa910493860251c66f0ecdc60ce2d39131626bf2b1e571a3d274560c5e2a876c3ccae6a165f73c1c706ca94022ee9f28369e88fea76e9010ad8f234e7d
+  data.tar.gz: 8fe7372a93fdbebe24b9bb6a57e9d2d464966840cfef2c35674319230a6ff05d66f27e6934484bf78b1c5a3fad55de7088639038126e95d1cece92ad1695b5ed

data/CHANGELOG.md

@@ -4,6 +4,73 @@ All notable changes to the `kairos-chain` gem will be documented in this file.
 
 This project follows [Semantic Versioning](https://semver.org/).
 
+## [3.32.0] - 2026-07-03
+
+### Added — multi-host SkillSet projection (Codex + OpenCode)
+
+`PluginProjector` gains a `HostProfile` abstraction so projection targets Codex
+CLI and OpenCode in addition to Claude Code. Claude behavior is unchanged
+(byte-compatible; `projection_manifest.json` keeps its legacy name).
+
+- Instruction mode: `AGENTS.md` with the mode body inlined for codex/opencode
+  (they do not resolve Claude's `@`-import); `CLAUDE.md` `@`-import for claude.
+- Codex: `.codex/skills`, `.codex/agents`, `.codex/hooks.json` (merge-preserving
+  user hooks via `_projected_by` tags; re-projection hook commands carry
+  `--host codex`). Codex reads `<repo>/.codex/hooks.json` natively — no TOML.
+- OpenCode: reuses `.claude/skills/` (Claude co-use assumption), converts agents
+  to `.opencode/agent/` frontmatter; hooks skipped (OpenCode hooks are JS plugins).
+- CLI `kairos-chain mode` and `kairos-plugin-project` gain
+  `--host claude|codex|opencode`; MCP tool `plugin_project` gains a `host` param.
+  Per-host manifest slots so hosts coexist.
+- Hardened via multi-LLM implementation review (codex/claude/cursor, all
+  APPROVE-WITH-CHANGES, 0 P0): hooks merge-preserve, agent-conversion Hash guard
+  and list-form `disallowedTools`, separator-boundary path containment, live-file
+  region status, malformed `.codex/hooks.json` normalization. 111 projector tests.
+
+### Added — codex mcp-server reviewer backend (opt-in)
+
+`CodexMcpAdapter` drives Codex via `codex mcp-server` (stdio JSON-RPC, one-shot,
+read-only sandbox) as an alternative to the `codex exec` CLI adapter. A codex
+reviewer opts in with `backend: mcp` (default stays CLI, backward compatible);
+the backend switch is wired through `llm_call`, `call_router`, and the
+multi_llm_review dispatcher. A/B against the CLI path showed parity (same
+verdict, comparable latency).
+
+## [3.31.0] - 2026-06-11
+
+### Changed — multi_llm_review roster: Fable 5 + Opus 4.6/4.8 (6 reviewers)
+
+Default reviewer roster updated for the Fable 5 / Opus 4.8 model generation:
+
+- Orchestrator/team slot: `claude-fable-5` (`claude_team_fable5`) replaces
+  Opus 4.7. Opus 4.8 added as a second subprocess CLI reviewer
+  (`claude_cli_opus4.8`) alongside Opus 4.6, which is retained for its
+  documented complementary bias (ambiguity-preserving, self-reference-friendly).
+  4.7 retired: its register is covered by 4.8 and Fable 5.
+- Convergence rules: `4/6 APPROVE` full roster, `3/5 APPROVE` after
+  orchestrator exclusion ("exclude" strategy only — "subprocess" keeps the
+  full roster; "delegate" re-adds the slot at collect, so 4/6 governs there).
+- `timeout_seconds` raised 300 → 600 (live 6-roster run measured 381s
+  wall-clock with `max_concurrent: 2`).
+- Validated by a 2-round self-referential review of the workflow L1 with the
+  new roster itself (R1 REVISE → fixes → R2 with 4.6/4.8/codex-5.4 APPROVE,
+  including a code-grounded Cursor correction of the exclusion semantics).
+
+### Changed — `multi_llm_review_workflow` L1 v3.5
+
+- All roster-dependent sections updated (pre-flight checklist, CLI tool
+  matrix, convergence rules, orchestrator self-identification, orchestration
+  template, LLM identifiers). Claude CLI 4.6/4.8 rows verified live 2026-06-10.
+- Effort escalation paragraph scoped to coding/design sub-agents and the
+  revision phase (reviewers stay at default per the 2026-04-29 policy).
+
+### Fixed — `knowledge_update` size guidance
+
+- Removed the "~2 KB MCP stdio limit" warning from the tool description and
+  nil-content diagnostic: two ~40 KB updates succeeded over stdio on
+  2026-06-10/11. The old figure generalized a single unreproduced
+  nil-content incident; the nil-content detection itself is retained.
+
 ## [3.30.0] - 2026-06-08
 
 ### Added — `dream_digest`: derived narrative view over L2/L1 fragments (dream SkillSet v0.3.0)

data/bin/kairos-chain

@@ -376,6 +376,11 @@ when 'mode'
                              KAIROS_PROJECT_ROOT env, then cwd if it contains a
                              recognizable project marker (CLAUDE.md, .git/,
                              .claude/, or prior projection manifest).
+        --host HOST          Target host: claude (default) | codex | opencode.
+                             claude writes CLAUDE.md with an @-import pointer;
+                             codex/opencode write AGENTS.md with the mode body
+                             inlined (they do not resolve @-import). Each host
+                             uses a separate manifest slot, so hosts can coexist.
 
       Notes:
         - data_dir and consumer project root are decoupled (design v0.2,
@@ -410,6 +415,19 @@ when 'mode'
     ARGV.delete_at(idx)
   end
 
+  # 2026-07-02: target host for projection (claude | codex | opencode). Default claude.
+  # codex/opencode write AGENTS.md with the mode body inlined (they do not resolve @-import).
+  mode_host = 'claude'
+  if (idx = ARGV.index('--host'))
+    mode_host = ARGV[idx + 1]
+    if mode_host.nil? || mode_host.start_with?('--')
+      warn "ERROR: --host requires a value (claude, codex, or opencode)."
+      exit 1
+    end
+    ARGV.delete_at(idx + 1)
+    ARGV.delete_at(idx)
+  end
+
   require 'kairos_mcp/skills_config'
   require 'kairos_mcp/plugin_projector'
 
@@ -426,11 +444,15 @@ when 'mode'
 
   projector_mode = KairosMcp.projection_mode
   begin
-    projector = KairosMcp::PluginProjector.new(project_root, mode: projector_mode, data_dir: KairosMcp.data_dir)
+    projector = KairosMcp::PluginProjector.new(project_root, mode: projector_mode, data_dir: KairosMcp.data_dir, host: mode_host)
   rescue KairosMcp::PluginProjector::CoincidenceRefused => e
     warn "ERROR: #{e.message}"
     warn "  Use --project-root <path> to designate a directory distinct from the data directory."
     exit 1
+  rescue ArgumentError => e
+    warn "ERROR: #{e.message}"
+    warn "  Valid --host values: claude, codex, opencode."
+    exit 1
   end
 
   case mode_action
@@ -464,27 +486,31 @@ when 'mode'
       exit 1
     end
 
+    ctx_file = projector.host.context_file
     puts "Instruction mode projected:"
     puts "  mode             : #{instructions_mode}#{version ? " v#{version}" : ''}"
+    puts "  host             : #{projector.host.key} (delivery: #{projector.host.instruction_mode_delivery})"
     puts "  body source      : #{body_path}"
     puts "  project root     : #{project_root} (source: #{KairosMcp.consumer_project_root_source})"
     puts "  data dir         : #{KairosMcp.data_dir}"
     puts "  artifact         : #{result[:artifact_path]}"
     puts "  size             : #{result[:size_bytes]} bytes"
-    puts "  CLAUDE.md region : #{result[:region_written] ? 'updated' : 'not updated (host file outside project root or unsafe)'}"
+    puts "  #{ctx_file} region : #{result[:region_written] ? 'updated' : 'not updated (host file outside project root or unsafe)'}"
     puts ""
-    puts "Restart Claude Code to apply (CLAUDE.md @-imports resolve at session start)."
+    puts "Restart the host to apply (#{ctx_file} is read at session start)."
     exit 0
 
   when 'status'
     s = projector.instruction_mode_status
+    ctx_file = projector.host.context_file
     puts "Project root        : #{project_root} (source: #{KairosMcp.consumer_project_root_source})"
     puts "Data dir            : #{KairosMcp.data_dir}"
+    puts "Host                : #{projector.host.key}"
     if s[:active]
       puts "Instruction mode projection: ACTIVE"
       puts "  mode      : #{s[:mode_name]}#{s[:mode_version] ? " v#{s[:mode_version]}" : ''}"
       puts "  artifact  : #{s[:artifact_path]} (#{s[:artifact_size]} bytes)"
-      puts "  region    : #{s[:region_present] ? 'present in CLAUDE.md' : 'absent'}"
+      puts "  region    : #{s[:region_present] ? "present in #{ctx_file}" : "absent from #{ctx_file}"}"
       puts "  projected : #{s[:projected_at]}"
     else
       puts "Instruction mode projection: not active for this project."
@@ -493,11 +519,12 @@ when 'mode'
 
   when 'remove'
     result = projector.remove_projected_instruction_mode!
-    puts "Instruction mode projection removed:"
+    ctx_file = projector.host.context_file
+    puts "Instruction mode projection removed (host: #{projector.host.key}):"
     puts "  artifact  : #{result[:artifact_removed] ? 'deleted' : 'not present'}"
-    puts "  CLAUDE.md : #{result[:region_removed] ? 'region removed' : 'region not present'}"
+    puts "  #{ctx_file} : #{result[:region_removed] ? 'region removed' : 'region not present'}"
     puts ""
-    puts "Restart Claude Code to apply (CLAUDE.md @-imports resolve at session start)."
+    puts "Restart the host to apply (#{ctx_file} is read at session start)."
     exit 0
 
   else

data/bin/kairos-plugin-project

@@ -17,7 +17,27 @@ require_relative '../lib/kairos_mcp/skillset_manager'
 
 project_root = KairosMcp.project_root
 mode = KairosMcp.projection_mode
-projector = KairosMcp::PluginProjector.new(project_root, mode: mode)
+
+# 2026-07-02: target host for projection (claude | codex | opencode). Default claude.
+# Used both for manual invocation and by projected re-projection hooks (--host <host>).
+host = 'claude'
+if (idx = ARGV.index('--host'))
+  host = ARGV[idx + 1]
+  if host.nil? || host.start_with?('--')
+    warn "ERROR: --host requires a value (claude, codex, or opencode)."
+    exit 1
+  end
+  ARGV.delete_at(idx + 1)
+  ARGV.delete_at(idx)
+end
+
+begin
+  projector = KairosMcp::PluginProjector.new(project_root, mode: mode, host: host)
+rescue ArgumentError => e
+  warn "ERROR: #{e.message}"
+  warn "  Valid --host values: claude, codex, opencode."
+  exit 1
+end
 
 if ARGV.include?('--status')
   require 'json'

data/lib/kairos_mcp/drift_detection/correspondence_checker.rb

@@ -0,0 +1,136 @@
+# frozen_string_literal: true
+
+require 'digest'
+require 'json'
+require_relative '../kairos_chain/chain'
+
+module KairosMcp
+  module DriftDetection
+    # CorrespondenceChecker — INV-A detection floor (Cycle 1, toward by-construction).
+    #
+    # Checks whether a live L0/L1 artifact still corresponds to its *current
+    # recorded provenance*: the content digest stored for that artifact at the
+    # head of the constitutive record (the hash chain). This is detection only —
+    # it surfaces divergence; it does not prevent edits or gate writes. Those are
+    # later cycles (single-source enforcement, record-as-gate).
+    #
+    # Provenance is rooted in the hash chain, not in the SQLite knowledge_meta
+    # cache: INV-A names the chain head as the non-editable anchor. The chain is
+    # therefore the single source consulted here; the meta table (when present)
+    # is a derived view and is intentionally not used for the comparison.
+    #
+    # The digest is computed over the *raw file content* (frontmatter included),
+    # matching exactly how it was recorded on create/update (a verbatim write,
+    # no normalization). Comparing the parsed/stripped body would never match.
+    class CorrespondenceChecker
+      # Result of a single correspondence check.
+      #
+      # status:
+      #   :match            live artifact corresponds to recorded provenance
+      #   :mismatch         live content diverged from recorded provenance (silent edit)
+      #   :missing_record   live artifact relied upon, but no recorded provenance exists
+      #   :missing_artifact recorded/expected artifact is absent at the reliance point
+      #   :error            the check itself could not complete (not a correspondence claim)
+      Result = Struct.new(
+        :status, :name, :active_digest, :recorded_digest, :message,
+        keyword_init: true
+      ) do
+        def corresponds?
+          status == :match
+        end
+
+        # A surfaced non-correspondence per INV-A (divergence, not an internal error).
+        def divergence?
+          %i[mismatch missing_record missing_artifact].include?(status)
+        end
+      end
+
+      class << self
+        # Check an L1 knowledge artifact against its recorded provenance.
+        #
+        # @param name [String] knowledge id (knowledge_id on the chain record)
+        # @param md_file_path [String, nil] path to the live .md file relied upon
+        # @param storage_backend [Storage::Backend, nil] backend for chain access
+        # @return [Result]
+        def check_l1(name:, md_file_path:, storage_backend: nil)
+          unless md_file_path && File.file?(md_file_path)
+            # Relied upon but absent — a missing artifact is itself a
+            # non-correspondence under INV-A (the expected set is recorded).
+            return Result.new(
+              status: :missing_artifact, name: name,
+              active_digest: nil, recorded_digest: nil,
+              message: "L1 '#{name}': artifact missing at the point of reliance"
+            )
+          end
+
+          active = Digest::SHA256.hexdigest(File.read(md_file_path))
+          recorded = recorded_digest_for(name, storage_backend)
+
+          if recorded.nil?
+            return Result.new(
+              status: :missing_record, name: name,
+              active_digest: active, recorded_digest: nil,
+              message: "L1 '#{name}': live artifact has no recorded provenance on the chain"
+            )
+          end
+
+          if active == recorded
+            Result.new(
+              status: :match, name: name,
+              active_digest: active, recorded_digest: recorded, message: nil
+            )
+          else
+            Result.new(
+              status: :mismatch, name: name,
+              active_digest: active, recorded_digest: recorded,
+              message: "L1 '#{name}': live content diverged from recorded provenance " \
+                       "(active #{short(active)} ≠ recorded #{short(recorded)})"
+            )
+          end
+        rescue StandardError => e
+          Result.new(
+            status: :error, name: name,
+            active_digest: nil, recorded_digest: nil,
+            message: "L1 '#{name}': correspondence check could not complete: #{e.message}"
+          )
+        end
+
+        private
+
+        # The current recorded content digest for a knowledge_id: the next_hash of
+        # the most recent knowledge_update record, scanning the chain from head
+        # backward. Returns nil when the most recent relevant record removed the
+        # artifact (next_hash nil — delete/archive) or when none exists.
+        def recorded_digest_for(name, storage_backend)
+          chain = KairosChain::Chain.new(storage_backend: storage_backend)
+          chain.chain.reverse_each do |block|
+            Array(block.data).each do |entry|
+              record = parse_entry(entry)
+              next unless record.is_a?(Hash)
+              next unless record['type'] == 'knowledge_update'
+              next unless record['knowledge_id'] == name
+
+              # First match from the head is the current provenance (may be nil
+              # if the artifact was removed — caller treats nil as no record).
+              return record['next_hash']
+            end
+          end
+          nil
+        end
+
+        def parse_entry(entry)
+          return entry if entry.is_a?(Hash)
+          return JSON.parse(entry) if entry.is_a?(String)
+
+          nil
+        rescue JSON::ParserError
+          nil
+        end
+
+        def short(digest)
+          digest ? digest[0, 12] : '-'
+        end
+      end
+    end
+  end
+end

data/lib/kairos_mcp/knowledge_provider.rb

@@ -23,6 +23,11 @@ module KairosMcp
   # - Blockchain: Uses the configured storage backend
   #
   class KnowledgeProvider
+    # Main knowledge directory (constitutively-recorded L1). Exposed so callers
+    # can distinguish main-dir knowledge from read-only external SkillSet
+    # knowledge, e.g. to scope INV-A correspondence checks to recorded artifacts.
+    attr_reader :knowledge_dir
+
     ARCHIVED_DIR = '.archived'
     ARCHIVE_META_FILE = '.archive_meta.yml'
     # Backup directories created by upgrade flow (`.bak.<timestamp>`).