0xray 4.0.40 → 4.0.42

package/docs-site/docs/plates/suit-wear.md

@@ -34,4 +34,6 @@ Wear copies hooks, features.json, and the consumer gitignore into the project, a
 
 A worn project is a consumer. Its writes go to its own `.xray/logs` and `.xray/inference`, not into `docs/` and not into `.opencode/logs`.
 
-stamped · 0xray 4.0.40
+A fresh wear fastens mill and inspect. Grok's Goggles launcher stays on that install: the checkout script when the package name is `0xray`, and `node_modules/0xray` for every other project.
+
+stamped · 0xray 4.0.42

package/docs-site/docs/plates/suit.md

@@ -38,3 +38,5 @@ Give your agent a suit. The rules stay on, you add powers, and it runs in the to
 ```
 
 Same rules in the repo. You are not locked into one app.
+
+stamped · 0xray 4.0.42

package/docs-site/docs/plates/trail-state.md

@@ -32,4 +32,4 @@ The suit writes its trail under .xray.
 
 Session boot, the lens match line, and the station card are state. The agent reads them. Do not commit `.xray/state`.
 
-stamped · 0xray 4.0.40
+stamped · 0xray 4.0.42

package/docs-site/docs/plates/work-fresh.md

@@ -32,4 +32,4 @@ Refresh writes one Fresh line from git and the published package.
 
 refreshFreshness in src/nucleus/work-freshness.mjs fetches origin, reads npm view 0xray version, and returns that one line. A compact hook does not call it. The plate that belongs here is station-card.
 
-stamped · 0xray 4.0.40
+stamped · 0xray 4.0.42

package/docs-site/docs/plates/write-home.md

@@ -35,4 +35,4 @@ The path table is `src/integrations/hooks/write-home.cjs`. Writers use it. Reade
 
 Still on the old path until each caller is rewired: the activity logger, the framework logger, the pipeline hook, the Grok hook, the Hermes bridge, station capture, `saveSessionInference`, reporting, pulse, monitor, and `features.json` `log_path`.
 
-stamped · 0xray 4.0.40
+stamped · 0xray 4.0.42

package/llms.txt

@@ -4,6 +4,8 @@
 
 **4.0** — mill+inspect plant, 7 MCPs, Codex 69. Constitution always on.
 
+Confer votes. Burst runs the swarm.
+
 Default consumer wear is **mill plant** (`mill` + `inspect`), not a 45-skill / 42-agent costume dump. `foundry.json` `"costume": true` is the opt-in dump. Do not use costume to land hangar shops. Fasten is **foundry-plant/0**: builtin plant is mill+inspect only. `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill package declares. Organs (looker, vibe, mixer) live in the mill — adding an organ is a mill publish, not an xray catalog PR. CLI shims `foundry blip|sound` still exist on foundry 0.1.11+; fasten is the new cut. Inspect reports the last bed or blip receipt the mill exported. Nested mill `@0xray/foundry` 0.1.12. Not costume.
 
 ## Wear (what a stranger gets)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "4.0.40",
+  "version": "4.0.42",
   "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
   "readme": "README.md",
   "license": "MIT",
@@ -73,7 +73,7 @@
     "test": "vitest run",
     "test:batch": "npm test",
     "test:unit": "npm test -- src/__tests__/unit/config-loader.test.ts src/__tests__/unit/state-manager.test.ts src/__tests__/unit/state-manager-persistence.test.ts src/__tests__/unit/context-loader.test.ts src/__tests__/unit/pattern-analyzer.test.ts src/__tests__/unit/complexity-calibrator.test.ts",
-    "test:core-framework": "npm test -- src/__tests__/unit/v2-deletion-protection.test.ts",
+    "test:core-framework": "npm test -- src/__tests__/unit/v2-deletion-protection.test.ts src/__tests__/unit/confer.test.ts src/__tests__/unit/local-confer.test.ts src/__tests__/unit/synthesis-consult-receipt.test.ts src/__tests__/unit/governance-nollm-merge.test.ts",
     "test:security": "npm test -- src/__tests__/unit/security/security-hardener.test.ts src/__tests__/unit/security/security-headers.test.ts src/__tests__/unit/security/security-auditor.test.ts",
     "test:performance": "npm test -- src/__tests__/unit/monitoring.test.ts src/__tests__/unit/benchmark.test.ts src/__tests__/unit/analytics.test.ts",
     "test:session-management": "npm test -- src/__tests__/unit/session-state-manager.test.ts src/__tests__/unit/session-security-validator.test.ts src/__tests__/unit/session-coordination-validator.test.ts src/__tests__/unit/session-migration-validator.test.ts src/__tests__/unit/session-migration-logic.test.ts",

package/scripts/mjs/verify-confer-core.mjs

@@ -1,8 +1,10 @@
 #!/usr/bin/env node
 /**
- * Confer quorum fixture — 3-agent synthesis consult completes via fixture mode.
+ * Confer quorum fixture.
+ * PASS completes. FAIL and no-LLM UNREVIEWED leave the todo open and the checkpoint due.
+ * Temp projects opt into synthesis so a due checkpoint can be observed. The repo default stays off.
  */
-import { mkdtempSync, mkdirSync, rmSync, writeFileSync } from 'node:fs';
+import { mkdtempSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -10,10 +12,14 @@ import { fileURLToPath } from 'node:url';
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const packageRoot = join(__dirname, '../..');
 
+// Fixture PASS is refused unless this process is a test. The live orchestrate-task
+// flag and XRAY_CONFER_FIXTURE stay unreachable when NODE_ENV is not test.
+process.env.NODE_ENV = 'test';
+
 const { buildSynthesisCheckpointPlan } = await import(
   join(packageRoot, 'dist/nucleus/autonomy-kernel.js')
 );
-const { savePersistedLeadDevPlan, areSynthesisConsultTodosComplete } = await import(
+const { savePersistedLeadDevPlan, areSynthesisConsultTodosComplete, loadPersistedLeadDevPlan } = await import(
   join(packageRoot, 'dist/nucleus/lead-dev-plan-persistence.js')
 );
 const { recordExecutionSlice, isSynthesisCheckpointDue } = await import(
@@ -22,46 +28,103 @@ const { recordExecutionSlice, isSynthesisCheckpointDue } = await import(
 const { runConferQuorum, loadConferCheckpoint, CONFER_AGENTS } = await import(
   join(packageRoot, 'dist/nucleus/confer.js')
 );
+const { loadSynthesisConsultReceipt } = await import(
+  join(packageRoot, 'dist/nucleus/synthesis-consult-receipt.js')
+);
+const { readConferReviewHint } = await import(
+  join(packageRoot, 'src/integrations/hooks/confer-hook-runtime.mjs')
+);
+const { buildSessionBootPayload } = await import(
+  join(packageRoot, 'src/integrations/grok/hooks/grok-hook-utils.js')
+);
 
-const sessionId = 'verify-confer-core';
 let failed = 0;
+let checks = 0;
 function pass(n) {
+  checks++;
   console.log(`✅ ${n}`);
 }
 function fail(n, d = '') {
   failed++;
+  checks++;
   console.error(`❌ ${n}${d ? ` — ${d}` : ''}`);
 }
 
-const tmp = mkdtempSync(join(tmpdir(), 'xray-confer-verify-'));
-mkdirSync(join(tmp, '.xray', 'state'), { recursive: true });
-writeFileSync(
-  join(tmp, '.xray', 'features.json'),
-  JSON.stringify({
-    multi_agent_orchestration: { lead_dev_mode: true, confer_on_synthesis: true },
-    synthesis: { enabled: true, every_n_gates: 1, every_n_turns: 0, every_n_todos_completed: 0 },
-  }),
-);
+function assertRepoSynthesisStaysOff() {
+  const source = readFileSync(join(packageRoot, 'src/nucleus/synthesis.ts'), 'utf8');
+  const defaults = source.match(/function defaultSynthesisConfig\(\)[\s\S]*?return \{([\s\S]*?)\n  \};/);
+  if (defaults && /enabled:\s*false/.test(defaults[1])) pass('repo defaultSynthesisConfig stays enabled: false');
+  else fail('repo defaultSynthesisConfig stays enabled: false');
 
-try {
-  recordExecutionSlice('gate', { projectRoot: tmp, sessionId });
-  if (!isSynthesisCheckpointDue(tmp, sessionId)) fail('step 1: synthesis due');
-  else pass('step 1: synthesis checkpoint due');
+  for (const rel of ['xray/features.json', '.xray/features.json']) {
+    const data = JSON.parse(readFileSync(join(packageRoot, rel), 'utf8'));
+    if (data.synthesis?.enabled === false) pass(`${rel} synthesis.enabled stays false`);
+    else fail(`${rel} synthesis.enabled stays false`, JSON.stringify(data.synthesis));
+  }
+}
 
+function makeProject() {
+  const tmp = mkdtempSync(join(tmpdir(), 'xray-confer-verify-'));
+  mkdirSync(join(tmp, '.xray', 'state'), { recursive: true });
+  writeFileSync(
+    join(tmp, '.xray', 'features.json'),
+    JSON.stringify({
+      multi_agent_orchestration: { lead_dev_mode: true, confer_on_synthesis: true },
+      synthesis: { enabled: true, every_n_gates: 1, every_n_turns: 0, every_n_todos_completed: 0 },
+    }),
+  );
+  return tmp;
+}
+
+function seedDuePlan(tmp, sessionId) {
+  recordExecutionSlice('gate', { projectRoot: tmp, sessionId });
+  const due = isSynthesisCheckpointDue(tmp, sessionId);
   const plan = buildSynthesisCheckpointPlan('gate threshold (1/1)', tmp);
-  if (!plan) fail('step 2: synthesis plan');
-  else {
+  if (plan) {
     savePersistedLeadDevPlan(
       { ...plan, persistedAt: new Date().toISOString(), sessionId },
       tmp,
     );
-    pass('step 2: synthesis plan persisted');
   }
+  return { due, plan };
+}
+
+function blocksCheckpoint(label, tmp, sessionId, result, verdict) {
+  const receipt = loadSynthesisConsultReceipt('s.1', tmp);
+  if (result.status === 'partial' && result.agents[0]?.verdict === verdict && result.agents[0]?.todoCompleted === false) {
+    pass(`${label}: quorum stopped on ${verdict}`);
+  } else {
+    fail(`${label}: quorum stopped on ${verdict}`, JSON.stringify(result));
+  }
+  if (receipt?.verdict === verdict) pass(`${label}: receipt verdict ${verdict}`);
+  else fail(`${label}: receipt verdict ${verdict}`, JSON.stringify(receipt));
+  if (!areSynthesisConsultTodosComplete(loadPersistedLeadDevPlan(tmp))) {
+    pass(`${label}: consult todo stays open`);
+  } else {
+    fail(`${label}: consult todo stays open`);
+  }
+  if (isSynthesisCheckpointDue(tmp, sessionId)) pass(`${label}: synthesis checkpoint stays due`);
+  else fail(`${label}: synthesis checkpoint stays due`);
+  const state = loadConferCheckpoint(tmp);
+  if (state?.status === 'failed') pass(`${label}: confer checkpoint not cleared`);
+  else fail(`${label}: confer checkpoint not cleared`, JSON.stringify(state));
+}
+
+assertRepoSynthesisStaysOff();
+
+const passRoot = makeProject();
+const passSession = 'verify-confer-core-pass';
+try {
+  const seeded = seedDuePlan(passRoot, passSession);
+  if (!seeded.due) fail('step 1: synthesis due');
+  else pass('step 1: synthesis checkpoint due');
+  if (!seeded.plan) fail('step 2: synthesis plan');
+  else pass('step 2: synthesis plan persisted');
 
   if (CONFER_AGENTS.length !== 3) fail('step 3: confer agent count', String(CONFER_AGENTS.length));
   else pass('step 3: three confer agents defined');
 
-  const result = await runConferQuorum(tmp, sessionId, {
+  const result = await runConferQuorum(passRoot, passSession, {
     collocatedText: 'verify confer fixture context',
     dueReason: 'gate threshold',
     fixture: true,
@@ -73,31 +136,92 @@ try {
     fail('step 4: confer quorum', JSON.stringify(result));
   }
 
-  const state = loadConferCheckpoint(tmp);
+  const state = loadConferCheckpoint(passRoot);
   if (state?.status === 'completed' && state.completedAgents.length === 3) {
     pass('step 5: confer checkpoint state completed');
   } else {
     fail('step 5: confer state', JSON.stringify(state));
   }
 
-  if (areSynthesisConsultTodosComplete(
-    (await import(join(packageRoot, 'dist/nucleus/lead-dev-plan-persistence.js'))).loadPersistedLeadDevPlan(tmp),
-  )) {
+  if (areSynthesisConsultTodosComplete(loadPersistedLeadDevPlan(passRoot))) {
     pass('step 6: synthesis consult todos complete after confer');
   } else {
     fail('step 6: consult todos incomplete');
   }
 
-  if (!isSynthesisCheckpointDue(tmp, sessionId)) pass('step 7: synthesis checkpoint cleared');
+  if (!isSynthesisCheckpointDue(passRoot, passSession)) pass('step 7: synthesis checkpoint cleared');
   else fail('step 7: checkpoint still due');
 } finally {
-  rmSync(tmp, { recursive: true, force: true });
+  rmSync(passRoot, { recursive: true, force: true });
+}
+
+const failRoot = makeProject();
+const failSession = 'verify-confer-core-fail';
+try {
+  seedDuePlan(failRoot, failSession);
+  const result = await runConferQuorum(failRoot, failSession, {
+    fixture: true,
+    fixtureVerdict: 'FAIL',
+  });
+  blocksCheckpoint('FAIL', failRoot, failSession, result, 'FAIL');
+} finally {
+  rmSync(failRoot, { recursive: true, force: true });
+}
+
+const unreviewedRoot = makeProject();
+const unreviewedSession = 'verify-confer-core-unreviewed';
+try {
+  seedDuePlan(unreviewedRoot, unreviewedSession);
+  const result = await runConferQuorum(unreviewedRoot, unreviewedSession, {
+    fixture: true,
+    fixtureNoLlm: true,
+  });
+  blocksCheckpoint('no-LLM', unreviewedRoot, unreviewedSession, result, 'UNREVIEWED');
+  if (readConferReviewHint(unreviewedRoot) === 'UNREVIEWED') {
+    pass('no-LLM: confer review hint is UNREVIEWED');
+  } else {
+    fail('no-LLM: confer review hint is UNREVIEWED');
+  }
+  const boot = buildSessionBootPayload(unreviewedRoot, 'verify/session-start');
+  if (boot.conferReview === 'UNREVIEWED' && String(boot.conferReviewHint).includes('UNREVIEWED')) {
+    pass('no-LLM: session-boot hint records UNREVIEWED');
+  } else {
+    fail('no-LLM: session-boot hint records UNREVIEWED', JSON.stringify({
+      conferReview: boot.conferReview,
+      conferReviewHint: boot.conferReviewHint,
+    }));
+  }
+} finally {
+  rmSync(unreviewedRoot, { recursive: true, force: true });
+}
+
+const conditionalRoot = makeProject();
+const conditionalSession = 'verify-confer-core-conditional';
+try {
+  seedDuePlan(conditionalRoot, conditionalSession);
+  const result = await runConferQuorum(conditionalRoot, conditionalSession, {
+    fixture: true,
+    fixtureVerdict: 'CONDITIONAL',
+  });
+  const verdicts = result.agents.map((agent) => agent.verdict);
+  if (result.status === 'partial' && verdicts[0] === 'CONDITIONAL' && result.agents[0]?.todoCompleted === false) {
+    pass('CONDITIONAL: explicit conditional does not complete');
+  } else {
+    fail('CONDITIONAL: explicit conditional does not complete', JSON.stringify(result));
+  }
+  if (isSynthesisCheckpointDue(conditionalRoot, conditionalSession)) {
+    pass('CONDITIONAL: checkpoint stays due');
+  } else {
+    fail('CONDITIONAL: checkpoint stays due');
+  }
+} finally {
+  rmSync(conditionalRoot, { recursive: true, force: true });
 }
 
 console.log(
   '\n' +
     (failed === 0
-      ? '🎉 Confer verify passed (7/7).'
+      ? `🎉 Confer verify passed (${checks}/${checks}).`
       : `⚠️  ${failed} confer check(s) failed.`),
 );
-process.exit(failed === 0 ? 0 : 1);
+process.exit(failed === 0 ? 0 : 1);

package/scripts/mjs/verify-user-aside-core.mjs

@@ -75,16 +75,15 @@ try {
     35,
     tmp,
   );
-  if (aside?.plan.phases[0]?.todos[0]?.id !== 'suit-nft.a.1.1') {
-    fail('step 3: build aside plan', aside?.plan.phases[0]?.todos[0]?.id);
+  const todo = aside?.plan.phases.flatMap((phase) => phase.todos)[0];
+  if (todo?.id !== 'suit-nft.a.2.1') {
+    fail('step 3: build aside plan', todo?.id);
   } else pass('step 3: namespaced aside todos');
 
   saveUserAside(aside, tmp);
   setActiveAsideId('suit-nft', tmp, 'verify-session');
   if (getActiveAsideId(tmp, 'verify-session') !== 'suit-nft') fail('step 4: active pointer');
   else pass('step 4: active aside pointer with session');
-
-  const todo = aside.plan.phases[0].todos[0];
   const resolved = resolveSpawnPlan({ planTodoId: todo.id }, tmp, 'verify-session');
   if (resolved.source !== 'aside') fail('step 5: resolve spawn plan', JSON.stringify(resolved));
   else pass('step 5: spawn plan resolves to aside');