kairos-chain 3.51.0 → 3.52.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fea78afc847b26db63d7355188444750fdb3cbbf84494cc489e63402bea3b630
-  data.tar.gz: b638968a01320bf5196d7f2b383b5c6dfa118a9432dc6feadf4ef04cbd4ee6b8
+  metadata.gz: e6bc15d467e1fbef211be82d39ec89bfdc760d7bdd67286635967c95c2acd2ce
+  data.tar.gz: b761078e7adc2798988a2fb0154bbbf998b37eed14d9979e87e7656194f03b76
 SHA512:
-  metadata.gz: 0be2e69efbd5eda0c8c839c627389def7dd68db5cda29a904072e762677238459ef6a2fad8373d612715f1eeeb928579a7a318bc97ffdd5fb6c38eb54991c522
-  data.tar.gz: 74fd8b7ba83ef25552130dbd7b86047ce96fda674b1d151b247813597adef09c60ec192c524507ad054d3af3c63154b497de71d912891f84cad8637e79bd1bdf
+  metadata.gz: 604f315facca09bdb89e8abe403cf2873abe6a201cf9771181f04a813c323685da0749237e0f3f547379f9ce1dc7a8976b3e12f657c4718604ef694368f15f27
+  data.tar.gz: 67b55d37e2ba35259b1df7e42c96222cf637a9b295eac63b877b715f060310ff19841c2152de9fad1a92345a8f40738803b47a68b020e74ad9405c923a17de6b

data/CHANGELOG.md

@@ -4,6 +4,49 @@ All notable changes to the `kairos-chain` gem will be documented in this file.
 
 This project follows [Semantic Versioning](https://semver.org/).
 
+## [3.51.3] - 2026-07-23
+
+### Multi-LLM Review — knowledge template sync (v3.6.1)
+
+Completes the 3.51.2 roster update: `templates/knowledge/multi_llm_review_workflow/`
+is synced to v3.6.1 (gpt-5.6-sol roster). 3.51.2 updated the skillset config
+template only, so `kairos-chain upgrade` reported a knowledge conflict against
+instances already carrying the v3.6.1 L1 locally. No code change.
+
+## [3.51.2] - 2026-07-23
+
+### Multi-LLM Review — Codex roster update (gpt-5.6-sol)
+
+Template config only, no code change. In
+`templates/skillsets/multi_llm_review/config/multi_llm_review.yml`, the Codex
+reviewer `gpt-5.4` is retired and replaced by `gpt-5.6-sol`
+(`role_label: codex_gpt5.6-sol`). `gpt-5.5` stays as the calibrated anchor
+for cross-generation comparison. 5.6-sol's reviewer bias profile is not yet
+calibrated — record (a)/(b)/(c) breakdowns per round until a profile
+accumulates. Roster size (6) and convergence rules are unchanged. The
+matching L1 knowledge `multi_llm_review_workflow` was updated to v3.6.1
+(instance-local, chain-recorded).
+
+## [3.51.1] - 2026-07-23
+
+### CLI — `skillset upgrade` transparency log
+
+`kairos-chain skillset upgrade` (both check and `--apply`) now prints a
+structured report mirroring `kairos-chain upgrade --apply`, so a no-op run is
+visibly a completed check rather than a bare `All SkillSets are up to date.`
+one-liner. Every CHECKED SkillSet (an installed one with a gem-template
+counterpart) is listed with its status, followed by a summary:
+
+- `[UPGRADE]` / `[UPGRADED]` — version/files changed (changed files listed on
+  check), and, on `--apply`, `vFROM -> vTO (N files)`.
+- `[UNCHANGED]` — checked, no difference (the case that was previously invisible).
+- `[NEW-CORE]` — a core SkillSet not yet installed, installed on `--apply`.
+- `[OPTIONAL]` — a non-core new SkillSet, never auto-installed (explicit approval).
+- `## Summary` — counts of upgraded/installed, unchanged, and optional.
+
+Display-only: the upgrade decision (`upgrade_check` / `upgrade_apply`) is
+unchanged; `core_only: true` behavior for the plain CLI form is preserved.
+
 ## [3.51.0] - 2026-07-23
 
 ### Agent SkillSet — interruption resilience A-1 + A-2

data/bin/kairos-chain

@@ -141,18 +141,43 @@ when 'skillset'
     manual = upgrades.select { |u| u[:new_skillset] && !KairosMcp::SkillSetManager::CORE_SKILLSETS.include?(u[:name]) }
     applicable = upgrades - manual
 
-    if upgrades.empty?
-      puts "All SkillSets are up to date."
-    elsif apply
+    # Diagnostic transparency: report the full set of CHECKED SkillSets — not
+    # only the ones that changed — so a no-op run is visibly a completed check
+    # rather than a bare one-liner, mirroring `kairos-chain upgrade --apply`.
+    # This is display-only; the upgrade decision itself (upgrade_check /
+    # upgrade_apply) is unchanged. "Checked" = an installed SkillSet that has a
+    # gem-template counterpart (exactly what upgrade_check compares).
+    templates_dir = File.join(KairosMcp.gem_root, 'templates', 'skillsets')
+    checkable = manager.all_skillsets
+                       .select { |ss| File.directory?(File.join(templates_dir, ss.name)) }
+                       .sort_by(&:name)
+    existing_upgrade_names = applicable.reject { |u| u[:new_skillset] }.map { |u| u[:name] }
+    new_core = applicable.select { |u| u[:new_skillset] }
+
+    if apply
       results = manager.upgrade_apply(core_only: true)
+      upgraded_names = results.map { |r| r[:name] }
+      puts "# Applying SkillSet Upgrade"
+      puts ""
+      puts "## SkillSets"
       results.each do |r|
-        puts "Updated #{r[:name]}: v#{r[:from]} -> v#{r[:to]} (#{r[:files_updated]} files)"
+        puts "  [UPGRADED]  #{r[:name].ljust(22)} v#{r[:from]} -> v#{r[:to]} (#{r[:files_updated]} files)"
+      end
+      checkable.reject { |ss| upgraded_names.include?(ss.name) }.each do |ss|
+        puts "  [UNCHANGED] #{ss.name.ljust(22)} v#{ss.version}"
       end
-      puts "Done. #{results.size} SkillSet(s) upgraded."
+      manual.each do |u|
+        puts "  [OPTIONAL]  #{u[:name].ljust(22)} v#{u[:available_version]} (not installed)"
+      end
+      puts ""
+      puts "## Summary"
+      puts "  Upgraded/installed:        #{results.size}"
+      puts "  Unchanged:                 #{checkable.reject { |ss| upgraded_names.include?(ss.name) }.size}"
+      puts "  Optional (not installed):  #{manual.size}"
 
       if manual.any?
         puts ""
-        puts "Not installed (optional, requires explicit approval):"
+        puts "Optional SkillSets require explicit approval:"
         manual.each { |u| puts "  kairos-chain skillset install #{u[:name]}" }
       end
 
@@ -174,24 +199,39 @@ when 'skillset'
         end
       end
     else
-      if applicable.any?
-        puts "SkillSet upgrades available:"
-        puts ""
-        applicable.each do |u|
+      upgrade_by_name = applicable.reject { |u| u[:new_skillset] }.each_with_object({}) { |u, h| h[u[:name]] = u }
+      puts "# SkillSet Upgrade Check"
+      puts ""
+      puts "## SkillSets"
+      checkable.each do |ss|
+        if (u = upgrade_by_name[ss.name])
           label = u[:version_bump] ? "v#{u[:installed_version]} -> v#{u[:available_version]}" : "files changed"
-          puts "  #{u[:name]}: #{label}"
-          u[:changed_files].each { |f| puts "    Modified: #{f}" }
-          puts ""
+          puts "  [UPGRADE]   #{ss.name.ljust(22)} #{label}"
+          u[:changed_files].each { |f| puts "                #{f}" }
+        else
+          puts "  [UNCHANGED] #{ss.name.ljust(22)} v#{ss.version}"
         end
-        puts "Run 'kairos-chain skillset upgrade --apply' to apply updates."
       end
+      new_core.each do |u|
+        puts "  [NEW-CORE]  #{u[:name].ljust(22)} v#{u[:available_version]} (will install on --apply)"
+      end
+      manual.each do |u|
+        puts "  [OPTIONAL]  #{u[:name].ljust(22)} v#{u[:available_version]} (not installed)"
+      end
+      puts ""
+      puts "## Summary"
+      puts "  Available upgrades:        #{applicable.size}"
+      puts "  Unchanged:                 #{checkable.size - existing_upgrade_names.size}"
+      puts "  Optional (not installed):  #{manual.size}"
 
+      if applicable.any?
+        puts ""
+        puts "Run 'kairos-chain skillset upgrade --apply' to apply updates."
+      end
       if manual.any?
-        puts "" if applicable.any?
-        puts "Optional SkillSets available (not auto-installed; require explicit approval):"
-        manual.each { |u| puts "  #{u[:name]} v#{u[:available_version]} — #{u[:description]}" }
         puts ""
-        puts "Install with: kairos-chain skillset install <name>"
+        puts "Optional SkillSets (require explicit approval):"
+        manual.each { |u| puts "  kairos-chain skillset install #{u[:name]}  # #{u[:description]}" }
       end
     end
 

data/lib/kairos_mcp/version.rb

@@ -1,4 +1,4 @@
 module KairosMcp
-  VERSION = "3.51.0"
+  VERSION = "3.52.1"
   CHANGELOG_URL = "https://github.com/masaomi/KairosChain_2026/blob/main/CHANGELOG.md"
 end

data/templates/knowledge/multi_llm_review_workflow/multi_llm_review_workflow.md

@@ -1,7 +1,7 @@
 ---
 name: multi_llm_review_workflow
 description: "Multi-LLM review methodology and execution — workflow pattern, CLI tooling, consensus analysis, Persona Assembly. Applicable to design, implementation, documentation, or any artifact."
-version: "3.6"
+version: "3.6.1"
 tags:
   - workflow
   - review
@@ -345,7 +345,7 @@ starting** and verify each against `config/multi_llm_review.yml`:
 - [ ] Your model (orchestrator): ___
 - [ ] Agent Team Personas model: = orchestrator model (NOT a different model)
 - [ ] Subprocess CLI models: Opus 4.6 AND Opus 4.8 (both, not either/or)
-- [ ] Codex models: gpt-5.5 (default) AND gpt-5.4 (both, not either/or)
+- [ ] Codex models: gpt-5.6-sol (default) AND gpt-5.5 (both, not either/or)
 - [ ] Cursor model: default (composer-2.5, no --model flag)
 - [ ] Total reviewer count: 6 (or 5 after orchestrator exclusion from subprocess)
 - [ ] Convergence rule: 4/6 APPROVE (full) or 3/5 APPROVE (after exclusion)
@@ -356,7 +356,7 @@ starting** and verify each against `config/multi_llm_review.yml`:
 | Mistake | Correct behavior | Why it happens |
 |---------|-----------------|----------------|
 | Exclude orchestrator model from Agent Team Personas | Agent Team uses orchestrator model — they provide persona diversity, not epistemic diversity | LLM misreads "do not assign yourself as a reviewer" as applying to Agent Team; it applies only to subprocess CLI |
-| Run only Codex GPT-5.4, skip 5.5 | Run both — they catch different things (5.5 found §5 schema contradiction in Phase 2 Case A that no other reviewer caught) | Cost-saving heuristic; roster has both for a reason |
+| Run only Codex GPT-5.6-sol, skip 5.5 | Run both — cross-generation entries catch different things (5.5 found §5 schema contradiction in Phase 2 Case A that no other reviewer caught) | Cost-saving heuristic; roster has both for a reason |
 | Use a smaller/cheaper model as Agent Team substitute | Use the orchestrator's own model with different personas | Confusing "model diversity" with "persona diversity" — Agent Team is the latter |
 | Run 3 reviewers instead of 6 (or 5 after exclusion) | Use the full roster from config | Ad-hoc "3 is enough" reasoning; config specifies 6 for empirical reasons |
 
@@ -580,7 +580,7 @@ which claude 2>/dev/null && echo "claude: available" || echo "claude: NOT FOUND"
 
 | Tool | Command | Prompt Input | Output Collection | Model |
 |------|---------|-------------|-------------------|-------|
-| **Codex** | `codex exec -m <model>` | stdin pipe: `cat prompt.md \| codex exec -` | `-o /path/output.md` | GPT-5.5 + GPT-5.4 (both roster entries, `-m` per entry) |
+| **Codex** | `codex exec -m <model>` | stdin pipe: `cat prompt.md \| codex exec -` | `-o /path/output.md` | GPT-5.6-sol + GPT-5.5 (both roster entries, `-m` per entry) |
 | **Cursor Agent** | `agent -p` | File reference (stdin NOT supported) | stdout redirect: `> output.md` | Composer-2.5 (default) |
 | **Claude Code** | Agent tool (internal) | Direct prompt string | Write to workspace file | Fable 5 (session) |
 | **Claude CLI (4.6)** | `claude -p --model claude-opus-4-6 --bare` | stdin pipe: `cat prompt.md \| claude -p --model claude-opus-4-6 --bare` | stdout redirect: `> output.md` | Opus 4.6 |
@@ -597,7 +597,7 @@ Based on cross-evaluation experiment (7 models × 4 tasks + Nomic, 518 CLI calls
 | **Reviewer: Claude CLI** | Opus 4.6 / Opus 4.8 | (default; config `effort: medium`) | Evaluator quality is effort-independent (low≈high: 8.35 vs 8.16) — per 2026-04-29 policy reviewers stay at default |
 | **Coding sub-agent** | Opus 4.7 | `--effort medium` | Cost-effective default; use `high` for complex tasks |
 | **Design sub-agent** | Opus 4.7 | `--effort medium` | Cost-effective default; use `high` for complex tasks |
-| **Codex** | GPT-5.5 (default) | (no flag) | Fixed effort |
+| **Codex** | GPT-5.6-sol / GPT-5.5 | (no flag) | Fixed effort |
 | **Cursor Agent** | Composer-2.5 | (no flag) | Fixed effort |
 
 Note (2026-06-10): the effort experiment data is from the Opus 4.6/4.7
@@ -898,11 +898,11 @@ Step 1: Generate review prompt
 Step 2: Detect environment and models
   - Run: which codex && which agent && which claude
   - Detect default models
-  - Report: "Auto mode: Codex (gpt-5.5, gpt-5.4), Agent (composer-2.5), Claude Team (claude-fable-5), Claude CLI (opus-4.6, opus-4.8)"
+  - Report: "Auto mode: Codex (gpt-5.6-sol, gpt-5.5), Agent (composer-2.5), Claude Team (claude-fable-5), Claude CLI (opus-4.6, opus-4.8)"
 
 Step 3: Execute N reviews in parallel (default 6 reviewers)
   - Bash(background): cat prompt.md | codex exec -m gpt-5.5 -C workspace -o log/review_codex_gpt5.5.md -
-  - Bash(background): cat prompt.md | codex exec -m gpt-5.4 -C workspace -o log/review_codex_gpt5.4.md -
+  - Bash(background): cat prompt.md | codex exec -m gpt-5.6-sol -C workspace -o log/review_codex_gpt5.6-sol.md -
   - Bash(background): agent -p --trust "Read prompt and review..." > log/review_cursor.md
   - Agent(background): Claude Team (orchestrator model, Fable 5) → write to log/review_claude_team_fable5.md
   - Bash(background): cat prompt.md | claude -p --model claude-opus-4-6 --bare > log/review_claude_opus4.6.md 2>log/review_claude_opus4.6.stderr.log
@@ -944,10 +944,10 @@ log/{artifact}_review{N}_consensus_{date}.md       # Consensus analysis
 ```
 
 LLM identifiers: `claude_team_fable5`, `claude_cli_opus4.6`, `claude_cli_opus4.8`,
-`codex_gpt5.5`, `codex_gpt5.4`, `cursor_composer2.5`, `cursor_gpt5.4`,
+`codex_gpt5.6-sol`, `codex_gpt5.5`, `cursor_composer2.5`, `cursor_gpt5.4`,
 `cursor_premium`
 (legacy, pre-2026-06-10: `claude_opus4.6`, `claude_team_opus4.6`, `claude_team_opus4.7`,
-`claude_cli_opus4.7`, `cursor_composer2`)
+`claude_cli_opus4.7`, `cursor_composer2`; retired 2026-07-23: `codex_gpt5.4`)
 
 ## Internal Agent Team Review
 
@@ -997,6 +997,13 @@ Compression ratio: parallel agent raw → Assembly ≈ 2:1
   epistemic diversity — the personas that authored R1 findings all approved
   their own fixes in R2, while subprocess reviewers caught the seams.
   Design record: `docs/drafts/multi_llm_review_unknowns_pass_v0.3.1_FROZEN.md`
+- Roster update (v3.6.1, 2026-07-23): Codex gpt-5.6-sol replaces gpt-5.4
+  (retired — its "everyday coding" register is covered by the frontier
+  entries). gpt-5.5 retained as the calibrated anchor for cross-generation
+  comparison. 5.6-sol's reviewer bias profile is uncalibrated — record
+  (a)/(b)/(c) breakdowns per round until a profile accumulates in
+  `multi_llm_reviewer_evaluation`; watch for agentic-coding drift into
+  implementation detail during design-phase reviews ((c) inflation)
 
 **Key insight**: Design reviews and implementation reviews find
-**categorically different bugs**. Both phases are necessary.
+**categorically different bugs**. Both phases are necessary.

data/templates/skillsets/chain_distillation/lib/chain_distillation/carrier_wiring.rb

@@ -0,0 +1,187 @@
+# frozen_string_literal: true
+
+require 'json'
+require_relative 'distiller'
+
+module KairosMcp
+  module SkillSets
+    module ChainDistillation
+      # Slice-2 carrier wiring: the slice-1 carrier seam becomes live
+      # here — design v0.4 §1 names the attestation carrier as the
+      # presence-visibility channel this slice adds under CD-8.
+      #
+      # The carrier is the shipped synoptis attestation structure consumed
+      # as-is: a ProofEnvelope with the INJECTED, content-independent
+      # proof_id = certificate_identity (CD-6), stored through the shipped
+      # registry. No behavioral change to the carrier is authored here —
+      # the parent design's depends_on re-open condition is not triggered.
+      # The envelope is written at issuance and is source-local; outward
+      # reachability is a separate property that begins at deposit
+      # approval (CD-8, exposure marker in the Depositor; the remote query
+      # surface itself is BL-S2-7).
+      module CarrierWiring
+        module_function
+
+        # Injectable registry seam (design-constraint tests). Production
+        # resolves the shipped synoptis file registry under the data dir.
+        @registry = nil
+
+        class << self
+          attr_writer :registry
+        end
+
+        # Explicitly setting the seam to false simulates "no carrier
+        # reachable" in tests; nil falls through to the shipped default.
+        def registry
+          return nil if @registry == false
+          @registry || default_registry
+        end
+
+        # Wire Distiller.@carrier to the synoptis registry. Idempotent;
+        # returns false (leaving the seam untouched) when synoptis is not
+        # installed — DISTILLATION then proceeds carrier-less exactly as
+        # in slice 1 (in-instance certification is not degraded), but
+        # DEPOSIT under slice 2 requires the carrier and declines without
+        # it (CD-8: neither form is optional — enforced at the deposit
+        # admission, see Depositor).
+        def wire!(registry: nil)
+          # Availability is checked WITHOUT construction; the registry
+          # itself (whose construction may create its data directory) is
+          # resolved lazily INSIDE the lambda — i.e. at issuance step 8,
+          # after every verdict — so wiring at tool load causes no
+          # persistent effect before judgment (impl review R6 (b)).
+          return false unless registry || carrier_available?
+          injected = registry
+          Distiller.carrier = lambda do |proof_id:, attester_id:, subject_ref:, claim:|
+            reg = injected || self.registry
+            unless defined?(::Synoptis::ProofEnvelope)
+              require_relative '../../../synoptis/lib/synoptis/proof_envelope'
+            end
+            envelope = ::Synoptis::ProofEnvelope.new(
+              proof_id: proof_id,
+              attester_id: attester_id.to_s,
+              subject_ref: subject_ref.to_s,
+              claim: JSON.generate(claim),
+              ttl: nil,
+              timestamp: Time.now.utc.iso8601
+            )
+            reg.store_proof(envelope)
+          end
+          true
+        end
+
+        # CD-8 at the deposit boundary, ADMISSION half: the mirror form
+        # must be reachable for a certificate to distribute. STRICTLY
+        # read-only — admission writes nothing and creates nothing
+        # (verdict precedes every effect, CD-9; impl review R4: even the
+        # default registry's directory creation must not happen before
+        # the verdict, so availability is checked WITHOUT instantiation).
+        def require_carrier!
+          return true if carrier_available?
+          raise Distiller::Declined, JSON.generate(
+            distiller: 'chain_distillation', verdict: 'decline',
+            rule: 'cd-8/carrier-unavailable',
+            remedy: 'the attestation carrier is required for distribution; install/enable synoptis before depositing'
+          )
+        end
+
+        # Availability without side effects: an injected seam answers
+        # directly; the default answers iff the synoptis code loads —
+        # no registry object (and no data directory) is created here.
+        def carrier_available?
+          return false if @registry == false
+          return true if @registry
+          require_relative '../../../synoptis/lib/synoptis/proof_envelope'
+          require_relative '../../../synoptis/lib/synoptis/registry/file_registry'
+          true
+        rescue LoadError
+          false
+        end
+
+        # CD-8 at the deposit boundary, POST-VERDICT half: runs only after
+        # the certificate verified and the crossing was approved. Backfills
+        # the envelope for certificates issued before the wiring was live;
+        # an existing envelope whose carried claim is not THIS certificate
+        # declines loudly rather than silently shadowing it (a planted
+        # pre-seeded proof must not become the exposed carrier answer).
+        def ensure_envelope!(certificate, identity, attester_id: 'chain_distillation')
+          require_carrier!
+          # Post-verdict: instantiating the default registry (which may
+          # create its data directory) is an approved effect here.
+          reg = registry
+          claim_json = JSON.generate(certificate)
+          existing = reg.find_proof(identity)
+          if existing
+            # Semantic comparison in canonical form: byte order of JSON
+            # keys must not fabricate a mismatch (impl review R3 — a
+            # foreign serializer reordering keys would otherwise decline
+            # a legitimate certificate forever). Canonical form is
+            # injective on content, so a false MATCH stays impossible.
+            same = begin
+              Canon.canonical(JSON.parse(existing.claim)) == Canon.canonical(certificate)
+            rescue StandardError
+              false
+            end
+            return true if same
+            raise Distiller::Declined, JSON.generate(
+              distiller: 'chain_distillation', verdict: 'decline',
+              rule: 'cd-8/carrier-envelope-mismatch',
+              remedy: 'a carrier envelope exists for this identity but does not carry this certificate; inspect the carrier before depositing'
+            )
+          end
+          unless defined?(::Synoptis::ProofEnvelope)
+            require_relative '../../../synoptis/lib/synoptis/proof_envelope'
+          end
+          digest = certificate.dig('claim_core', 'derivation', 'distillate_commitment')
+          envelope = ::Synoptis::ProofEnvelope.new(
+            proof_id: identity,
+            attester_id: attester_id,
+            subject_ref: "distillate:#{digest}",
+            claim: claim_json,
+            ttl: nil,
+            timestamp: Time.now.utc.iso8601
+          )
+          reg.store_proof(envelope)
+          true
+        end
+
+        # CD-6/CD-11: the chain is the authoritative revocation channel;
+        # the carrier MIRRORS it, never the reverse. Mirroring is
+        # fail-visible best-effort — a failed mirror is disclosed lag
+        # (BL-S2-2/3), never a rollback of the chain record.
+        def mirror_revocation(identity, reason)
+          reg = registry
+          return { 'status' => 'unavailable', 'note' => 'carrier registry not reachable; mirror pending' } unless reg
+          begin
+            require_relative '../../../synoptis/lib/synoptis/revocation_manager'
+            envelope = reg.find_proof(identity)
+            return { 'status' => 'no_envelope', 'note' => 'no carrier envelope for this identity' } unless envelope
+            manager = ::Synoptis::RevocationManager.new(registry: reg)
+            result = manager.revoke(proof_id: identity, reason: reason,
+                                    revoker_id: envelope.attester_id)
+            JSON.parse(JSON.generate(result))
+          rescue StandardError => e
+            { 'status' => 'mirror_error', 'error' => e.class.name, 'message' => e.message }
+          end
+        end
+
+        def default_registry
+          require_relative '../../../synoptis/lib/synoptis/proof_envelope'
+          require_relative '../../../synoptis/lib/synoptis/registry/file_registry'
+          dir = File.join(data_root, 'synoptis_data')
+          ::Synoptis::Registry::FileRegistry.new(data_dir: dir)
+        rescue LoadError
+          nil
+        end
+
+        def data_root
+          if defined?(KairosMcp) && KairosMcp.respond_to?(:data_dir)
+            KairosMcp.data_dir
+          else
+            ENV['KAIROS_DATA_DIR'] || File.join(Dir.pwd, '.kairos')
+          end
+        end
+      end
+    end
+  end
+end