0xray 4.0.41 → 4.0.42

package/dist/governance/local-confer.d.ts

@@ -1,10 +1,13 @@
-import type { GovernanceRole, GovernanceVote } from "./llm-governance-provider.js";
+import type { GovernanceMiss, GovernanceRole, GovernanceVote } from "./llm-governance-provider.js";
 export type LocalConferInput = {
     role: GovernanceRole;
     highConfidenceTrapPresent?: boolean | undefined;
     recommendedAgent?: string | null | undefined;
     llmConfigured?: boolean | undefined;
+    miss?: GovernanceMiss | undefined;
 };
 /** Receipt when nested LLM is absent or returned no vote. Never approve — analyze_proposal feeds mergeVotes. */
 export declare function localConferVote(input: LocalConferInput): GovernanceVote;
+/** Stop a model from planting a second DECISION or Verdict line inside the reasoning body. */
+export declare function sanitizeGovernanceReasoning(reasoning: string): string;
 export declare function formatGovernanceVoteText(vote: GovernanceVote, extra?: string): string;

package/dist/governance/local-confer.js

@@ -1,6 +1,13 @@
 /** Receipt when nested LLM is absent or returned no vote. Never approve — analyze_proposal feeds mergeVotes. */
 export function localConferVote(input) {
     const role = input.role;
+    if (input.miss && input.miss !== "not-configured") {
+        return {
+            decision: "abstain",
+            confidence: 0.5,
+            reasoning: `Local confer (${role}); nested LLM did not produce a vote (${input.miss}).`,
+        };
+    }
     if (input.llmConfigured) {
         return {
             decision: "abstain",
@@ -22,6 +29,20 @@ export function localConferVote(input) {
         reasoning: `Local confer (${role}); nested LLM not configured.`,
     };
 }
+function abstainedWithoutUsableVote(vote) {
+    if (vote.decision !== "abstain")
+        return false;
+    return /nested LLM not configured|did not produce a vote|returned no vote/i.test(vote.reasoning);
+}
+/** Stop a model from planting a second DECISION or Verdict line inside the reasoning body. */
+export function sanitizeGovernanceReasoning(reasoning) {
+    return reasoning
+        .split("\n")
+        .map((line) => /^\s*(?:[-*•]\s*)?(?:Verdict:|DECISION:)/i.test(line) ? `> ${line.trim()}` : line)
+        .join("\n");
+}
 export function formatGovernanceVoteText(vote, extra = "") {
-    return `DECISION: ${vote.decision}\nCONFIDENCE: ${vote.confidence.toFixed(2)}\nREASONING: ${vote.reasoning}${extra}`;
+    const reviewLine = abstainedWithoutUsableVote(vote) ? "\nVerdict: UNREVIEWED" : "";
+    const reasoning = sanitizeGovernanceReasoning(vote.reasoning);
+    return `DECISION: ${vote.decision}\nCONFIDENCE: ${vote.confidence.toFixed(2)}\nREASONING: ${reasoning}${reviewLine}${extra}`;
 }

package/dist/integrations/grok/grok-cli.js

@@ -17,7 +17,6 @@
 import { frameworkLogger } from '../../core/framework-logger.js';
 import fs from 'fs';
 import path from 'path';
-import { execSync } from 'child_process';
 import { createRequire } from 'module';
 import { fileURLToPath } from 'node:url';
 import { syncBuiltinSkills } from '../../cli/commands/skill-install.js';
@@ -27,27 +26,13 @@ const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const packageRoot = path.resolve(__dirname, '..', '..', '..');
 const requireCjs = createRequire(import.meta.url);
 const { resolveConsumerTargetDir, patchGrokHooks } = requireCjs(path.join(packageRoot, 'scripts/node/install-bridges.cjs'));
-const { XRAY_MCP_SERVERS, resolveRepertoireMcp, resolveGogglesMcp } = requireCjs(path.join(packageRoot, 'scripts/node/bridge-mcp-wiring.cjs'));
-function registerGrokMcpServers(targetDir) {
-    try {
-        execSync('which grok', { stdio: 'ignore' });
-    }
-    catch {
-        console.log('[Grok] grok CLI not on PATH — plugin .mcp.json still configured');
-        return;
-    }
-    for (const s of XRAY_MCP_SERVERS) {
-        try {
-            const envEntries = { ...s.env, XRAY_ROOT: targetDir };
-            const envFlags = Object.entries(envEntries)
-                .map(([k, v]) => `--env "${k}=${v}"`)
-                .join(' ');
-            execSync(`grok mcp add ${s.name} --command npx --args "-y" "0xray" "mcp" "${s.mcpCmd}" ${envFlags}`, { stdio: 'pipe' });
-        }
-        catch {
-            // already registered or grok config conflict — non-blocking
-        }
-    }
+const { resolveRepertoireMcp, resolveGogglesMcp } = requireCjs(path.join(packageRoot, 'scripts/node/bridge-mcp-wiring.cjs'));
+function registerGrokMcpServers(targetDir, env) {
+    const wiring = requireCjs(path.join(packageRoot, 'scripts/node/bridge-mcp-wiring.cjs'));
+    const tomlPath = wiring.writeProjectSuitMcp(targetDir);
+    const trustPath = wiring.trustGrokFolder(targetDir, env);
+    process.stdout.write(`Project Grok MCP written to ${tomlPath}\n`);
+    process.stdout.write(`Grok folder trust written to ${trustPath}\n`);
 }
 export async function installForGrokCLI(options = {}) {
     frameworkLogger.log('grok-integration', 'install-start', 'info', {
@@ -115,21 +100,9 @@ export async function installForGrokCLI(options = {}) {
         writeProjectRepertoireMcp(targetDir);
         writeProjectGogglesMcp(targetDir);
         mintAfterWear(targetDir);
-        const primary = dests[0];
-        try {
-            execSync(`grok plugins trust "${primary}"`, { stdio: 'ignore' });
-            console.log('\x1b[32m✓ Auto-trusted the 0xray plugin with Grok CLI\x1b[0m');
-        }
-        catch {
-            console.log('\nPlease run this command to fully trust the plugin:');
-            console.log(`  grok plugins trust "${primary}"`);
-        }
-        if (isolated) {
-            registerGrokMcpServers(targetDir);
-            console.log('\x1b[32m✓ Registered 7 xray MCP servers with Grok CLI (npx)\x1b[0m');
-        }
-        else {
-            console.log('\x1b[32m✓ Project-scoped Grok plugin worn (machine ~/.grok/plugins/0xray not written)\x1b[0m');
+        registerGrokMcpServers(targetDir, env);
+        if (!isolated) {
+            process.stdout.write('Project-scoped Grok plugin worn (machine ~/.grok/plugins/0xray not written)\n');
         }
         console.log('\n✅ 0xRay is now installed as a first-class Grok CLI plugin!');
         console.log('Restart Grok or run `grok` to load the new hooks and MCP servers.');

package/dist/integrations/grok/hooks/grok-hook-utils.js

@@ -19,7 +19,7 @@ import {
   updatePlanTodoStatusInPlace,
   loadDelegationGateFeatures,
 } from '../../hooks/delegation-gate-runtime.mjs';
-import { isConferPendingForSession } from '../../hooks/confer-hook-runtime.mjs';
+import { isConferPendingForSession, readConferReviewHint } from '../../hooks/confer-hook-runtime.mjs';
 import { getActiveUserAsideBoot } from '../../hooks/user-aside-hook-runtime.mjs';
 import {
   applyStationHeat,
@@ -308,6 +308,7 @@ export function buildSessionBootPayload(root, source = '0xray/grok-session-start
   const sessionId =
     extra.sessionId || process.env.GROK_SESSION_ID || process.env.GROK_SESSION || null;
   const conferPending = loadConferPending(root, sessionId);
+  const conferReview = readConferReviewHint(root);
   const userAsideBoot = getActiveUserAsideBoot(root, sessionId);
   const gateFeatures = loadDelegationGateFeatures(root, 'grok');
   const frontier = gateFeatures.ceremony === 'lite';
@@ -332,6 +333,12 @@ export function buildSessionBootPayload(root, source = '0xray/grok-session-start
     ...heat,
     ...(siblingRoots.length > 0 ? { siblingWorkspaceRoots: siblingRoots } : {}),
     ...(conferPending ? { conferPending: true, conferTrigger: 'analyze-complexity at synthesis checkpoint' } : {}),
+    ...(conferReview
+      ? {
+          conferReview,
+          conferReviewHint: 'UNREVIEWED — abstain without a governance LLM blocks the consult todo',
+        }
+      : {}),
     ...(userAsideBoot ?? {}),
     sessionId,
     ...extra,

package/dist/integrations/hooks/confer-hook-runtime.mjs

@@ -3,7 +3,7 @@
  * Lazy-load confer SSOT for Grok session-boot hints.
  */
 import { createRequire } from 'node:module';
-import { existsSync } from 'node:fs';
+import { existsSync, readdirSync, readFileSync } from 'node:fs';
 import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
@@ -46,4 +46,26 @@ export function isConferPendingForSession(projectRoot, sessionId = null) {
   const mod = loadConfer();
   if (!mod?.isConferPending) return false;
   return mod.isConferPending(projectRoot, sessionId);
+}
+
+/** 'UNREVIEWED' when a consult receipt recorded abstain-without-model. */
+export function readConferReviewHint(projectRoot) {
+  const stateDir = join(projectRoot, '.xray', 'state');
+  if (!existsSync(stateDir)) return null;
+  let names;
+  try {
+    names = readdirSync(stateDir);
+  } catch {
+    return null;
+  }
+  for (const name of names) {
+    if (!name.startsWith('synthesis-consult-') || !name.endsWith('.json')) continue;
+    try {
+      const receipt = JSON.parse(readFileSync(join(stateDir, name), 'utf8'));
+      if (receipt && receipt.verdict === 'UNREVIEWED') return 'UNREVIEWED';
+    } catch {
+      /* unreadable receipt is not a hint */
+    }
+  }
+  return null;
 }

package/dist/integrations/hooks/goggles-planes.json

@@ -38,7 +38,10 @@
     "plates": ["suit-wear"]
   },
   "governance": {
-    "files": ["src/governance/governance-service.ts"],
+    "files": [
+      "src/governance/governance-service.ts",
+      "src/governance/llm-governance-provider.ts"
+    ],
     "skills": ".agents/skills/governance/SKILL.md"
   },
   "memory-recall": {

package/dist/integrations/openclaw/plugin/xray-pre-tool/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xray-pre-tool",
-  "version": "4.0.41",
+  "version": "4.0.42",
   "private": true,
   "type": "module",
   "description": "0xRay constitution + temperament PreToolUse for OpenClaw",

package/dist/mcps/architect-tools.server.d.ts

@@ -5,6 +5,12 @@
  * Provides contextual analysis capabilities via MCP protocol
  */
 import { XrayKnowledgeSkillBase } from "./shared/knowledge-skill-base.js";
+import { type GovernanceVote } from "../governance/llm-governance-provider.js";
+import { type ArchitectureAssessment } from "../architect/architect-tools.js";
+export type ConferModelVerdict = "PASS" | "CONDITIONAL" | "FAIL" | "UNREVIEWED";
+/** A confer verdict counts only when a model vote exists. Metrics alone are UNREVIEWED. */
+export declare function conferVerdictFromModelVote(vote: Pick<GovernanceVote, "decision"> | null): ConferModelVerdict;
+export declare function formatArchitectureAssessmentConferText(conferPrompt: string, assessment: ArchitectureAssessment, verdict?: ConferModelVerdict): string;
 export declare function renderArchitectureAssessment(args: Record<string, unknown> | undefined): Promise<{
     content: Array<{
         type: "text";

package/dist/mcps/architect-tools.server.js

@@ -8,7 +8,24 @@ import { CallToolRequestSchema } from "@modelcontextprotocol/sdk/types.js";
 import { XrayKnowledgeSkillBase } from "./shared/knowledge-skill-base.js";
 import * as fs from "fs";
 import { frameworkLogger } from "../core/framework-logger.js";
-import { contextAnalysis as architectContextAnalysis, codebaseStructure as architectCodebaseStructure, dependencyAnalysis as architectDependencyAnalysis, architectureAssessment as architectArchitectureAssessment, formatConferArchitectureText, } from "../architect/architect-tools.js";
+import { contextAnalysis as architectContextAnalysis, codebaseStructure as architectCodebaseStructure, dependencyAnalysis as architectDependencyAnalysis, architectureAssessment as architectArchitectureAssessment, } from "../architect/architect-tools.js";
+/** A confer verdict counts only when a model vote exists. Metrics alone are UNREVIEWED. */
+export function conferVerdictFromModelVote(vote) {
+    if (!vote)
+        return "UNREVIEWED";
+    if (vote.decision === "reject")
+        return "FAIL";
+    if (vote.decision === "approve")
+        return "PASS";
+    return "CONDITIONAL";
+}
+export function formatArchitectureAssessmentConferText(conferPrompt, assessment, verdict = "UNREVIEWED") {
+    const assessmentJson = JSON.stringify(assessment, null, 2);
+    const trimmed = conferPrompt.trim();
+    if (!trimmed)
+        return assessmentJson;
+    return `${trimmed}\n\n## Architecture assessment\n${assessmentJson}\n\nVerdict: ${verdict}\nTop risks: review assessment metrics above\nHardening: address high-complexity or coupling findings before resuming`;
+}
 export async function renderArchitectureAssessment(args) {
     const projectRoot = typeof args?.projectRoot === "string" ? args.projectRoot : "";
     const assessmentType = args?.assessmentType === "quick" || args?.assessmentType === "comprehensive"
@@ -21,7 +38,7 @@ export async function renderArchitectureAssessment(args) {
         content: [
             {
                 type: "text",
-                text: formatConferArchitectureText(conferPrompt, result),
+                text: formatArchitectureAssessmentConferText(conferPrompt, result, "UNREVIEWED"),
             },
         ],
     };

package/dist/mcps/config/server-config-registry.js

@@ -10,6 +10,8 @@ import { frameworkLogger } from '../../core/framework-logger.js';
 import { fileURLToPath } from 'url';
 import { dirname, join } from 'path';
 import fs from 'fs';
+/** Must outlast the 120s governance model call so a real approve can return. */
+const GOVERNANCE_MODEL_TIMEOUT_MS = 150_000;
 /**
  * Registry for managing MCP server configurations
  */
@@ -85,14 +87,14 @@ export class ServerConfigRegistry {
             serverName: 'code-review',
             command: 'node',
             args: [`${basePath}/knowledge-skills/code-review.server.js`],
-            timeout: 30000,
+            timeout: GOVERNANCE_MODEL_TIMEOUT_MS,
         });
         // Security Audit Server
         this.register({
             serverName: 'security-audit',
             command: 'node',
             args: [`${basePath}/knowledge-skills/security-audit.server.js`],
-            timeout: 45000,
+            timeout: GOVERNANCE_MODEL_TIMEOUT_MS,
         });
         // Performance Optimization Server
         this.register({
@@ -113,7 +115,7 @@ export class ServerConfigRegistry {
             serverName: 'researcher',
             command: 'node',
             args: [`${basePath}/researcher.server.js`],
-            timeout: 60000,
+            timeout: GOVERNANCE_MODEL_TIMEOUT_MS,
         });
         // Governance Service (meta-MCP that orchestrates the three skill servers + required external Dynamo)
         this.register({
@@ -176,7 +178,7 @@ export class ServerConfigRegistry {
             serverName: 'architect',
             command: 'node',
             args: [`${basePath}/architect-tools.server.js`],
-            timeout: 45000,
+            timeout: GOVERNANCE_MODEL_TIMEOUT_MS,
         });
         // Bug Triage Specialist Server
         this.register({
@@ -198,14 +200,14 @@ export class ServerConfigRegistry {
             serverName: 'code-reviewer',
             command: 'node',
             args: [`${basePath}/knowledge-skills/code-review.server.js`],
-            timeout: 30000,
+            timeout: GOVERNANCE_MODEL_TIMEOUT_MS,
         });
         // Security Auditor (alias for security-audit)
         this.register({
             serverName: 'security-auditor',
             command: 'node',
             args: [`${basePath}/knowledge-skills/security-audit.server.js`],
-            timeout: 45000,
+            timeout: GOVERNANCE_MODEL_TIMEOUT_MS,
         });
         // Refactorer Server
         this.register({

package/dist/mcps/governance.server.d.ts

@@ -24,6 +24,7 @@ declare class GovernanceServer extends XrayKnowledgeSkillBase {
     private armRequiredDynamo;
     private handleGovernProposals;
     private handleGovernReflection;
+    private handleRecordConferReceipt;
     private handleGetActiveCodex;
     private parseCodexTermsFromReflection;
     private initializeGovernance;

package/dist/mcps/governance.server.js

@@ -20,6 +20,7 @@ import { featuresConfigLoader } from "../core/features-config.js";
 import * as fs from "fs";
 import { fileURLToPath } from "url";
 import { randomUUID } from "crypto";
+import { applyConferConsultResult } from "../nucleus/confer.js";
 import { getGovernanceService } from "../governance/governance-service.js";
 import { getCodexPolicyService } from "../governance/codex-policy.service.js";
 import { initializeGovernanceIntegration } from "../integrations/governance/index.js";
@@ -95,6 +96,23 @@ class GovernanceServer extends XrayKnowledgeSkillBase {
                     required: [],
                 },
             },
+            {
+                name: "record_confer_receipt",
+                description: "Record a confer verdict written by the wearing TUI. " +
+                    "The TUI already called the seat's MCP server. This tool stores the receipt. " +
+                    "Only Verdict: PASS completes the consult todo.",
+                inputSchema: {
+                    type: "object",
+                    properties: {
+                        todoId: { type: "string", description: "Consult todo id, such as s.1" },
+                        subagent: { type: "string", description: "researcher, architect-tools, or code-review" },
+                        sessionId: { type: "string", description: "Plan session id" },
+                        outputText: { type: "string", description: "Host verdict text, including a Verdict line" },
+                        projectRoot: { type: "string", description: "Checkout root. Defaults to XRAY_ROOT or the process cwd." },
+                    },
+                    required: ["todoId", "subagent", "sessionId", "outputText"],
+                },
+            },
             {
                 name: "get_active_codex",
                 description: "Get the currently active Codex (SSOT) — returns metadata about the loaded codex terms, " +
@@ -117,6 +135,7 @@ class GovernanceServer extends XrayKnowledgeSkillBase {
             "govern_proposals": async (args) => this.handleGovernProposals(this.validateGovernProposalsArgs(args)),
             "govern_reflection": async (args) => this.handleGovernReflection(this.validateGovernReflectionArgs(args)),
             "get_active_codex": async (args) => this.handleGetActiveCodex(args),
+            "record_confer_receipt": async (args) => this.handleRecordConferReceipt(args),
         };
         this.setupToolHandlers();
     }
@@ -163,6 +182,8 @@ class GovernanceServer extends XrayKnowledgeSkillBase {
                         return await this.handleGovernReflection(this.validateGovernReflectionArgs(args));
                     case "get_active_codex":
                         return await this.handleGetActiveCodex(args);
+                    case "record_confer_receipt":
+                        return await this.handleRecordConferReceipt(args);
                     default:
                         throw new Error(`Unknown tool: ${name}`);
                 }
@@ -272,6 +293,31 @@ class GovernanceServer extends XrayKnowledgeSkillBase {
             options: { require_external: true },
         });
     }
+    async handleRecordConferReceipt(args) {
+        if (!args || typeof args !== "object") {
+            throw new Error("record_confer_receipt requires an object argument");
+        }
+        const obj = args;
+        const todoId = typeof obj.todoId === "string" ? obj.todoId.trim() : "";
+        const subagent = typeof obj.subagent === "string" ? obj.subagent.trim() : "";
+        const sessionId = typeof obj.sessionId === "string" ? obj.sessionId.trim() : "";
+        const outputText = typeof obj.outputText === "string" ? obj.outputText : "";
+        if (!todoId || !subagent || !sessionId || !outputText.trim()) {
+            throw new Error("record_confer_receipt requires todoId, subagent, sessionId, and outputText");
+        }
+        const projectRoot = typeof obj.projectRoot === "string" && obj.projectRoot.trim()
+            ? obj.projectRoot
+            : process.env.XRAY_ROOT || process.cwd();
+        const result = applyConferConsultResult(todoId, subagent, sessionId, outputText, projectRoot);
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: JSON.stringify(result),
+                },
+            ],
+        };
+    }
     async handleGetActiveCodex(args) {
         const includeRaw = args?.includeRaw === true;
         const snapshot = await getCodexPolicyService().getCurrentCodex(includeRaw);

package/dist/mcps/knowledge-skills/code-review.server.js

@@ -9,6 +9,7 @@ import * as fs from "fs";
 import * as path from "path";
 import { isGovernanceLlmConfigured, tryLLMGovernance, } from "../../governance/llm-governance-provider.js";
 import { formatGovernanceVoteText, localConferVote } from "../../governance/local-confer.js";
+import { buildHostConferEvidence } from "../../nucleus/confer-host.js";
 class XrayCodeReviewServer extends XrayKnowledgeSkillBase {
     constructor() {
         super("code-review", "3.1.0");
@@ -316,6 +317,12 @@ class XrayCodeReviewServer extends XrayKnowledgeSkillBase {
      */
     async analyzeProposal(args) {
         const { proposalTitle = "", proposalDescription = "", evidence = [], proposalType = "" } = args;
+        if (proposalType === "synthesis-confer") {
+            const packet = [proposalTitle, proposalDescription, ...(evidence || [])].filter(Boolean).join("\n\n");
+            return {
+                content: [{ type: "text", text: buildHostConferEvidence("code-review", packet) }],
+            };
+        }
         const vote = (await tryLLMGovernance("code-review", proposalTitle, proposalDescription, evidence, proposalType)) ??
             localConferVote({
                 role: "code-review",

package/dist/mcps/knowledge-skills/security-audit.server.js

@@ -7,7 +7,7 @@
 import * as fs from "fs";
 import * as path from "path";
 import { XrayKnowledgeSkillBase } from "../shared/knowledge-skill-base.js";
-import { isGovernanceLlmConfigured, tryLLMGovernance, } from "../../governance/llm-governance-provider.js";
+import { attemptLLMGovernance } from "../../governance/llm-governance-provider.js";
 import { formatGovernanceVoteText, localConferVote } from "../../governance/local-confer.js";
 class XraySecurityAuditServer extends XrayKnowledgeSkillBase {
     constructor() {
@@ -661,10 +661,12 @@ class XraySecurityAuditServer extends XrayKnowledgeSkillBase {
      */
     async analyzeProposal(args) {
         const { proposalTitle = "", proposalDescription = "", evidence = [], proposalType = "" } = args;
-        const vote = (await tryLLMGovernance("security-audit", proposalTitle, proposalDescription, evidence, proposalType)) ??
+        const attempt = await attemptLLMGovernance("security-audit", proposalTitle, proposalDescription, evidence, proposalType);
+        const vote = attempt.vote ??
             localConferVote({
                 role: "security-audit",
-                llmConfigured: isGovernanceLlmConfigured(),
+                llmConfigured: attempt.miss !== "not-configured",
+                ...(attempt.miss ? { miss: attempt.miss } : {}),
             });
         return {
             content: [

package/dist/mcps/mcp-client.js

@@ -319,7 +319,7 @@ export class MCPClient extends EventEmitter {
         };
         this.emit('tool.before', beforeEvent);
         const serverName = this.config.serverName;
-        const isGovernanceServer = ['code-review', 'security-audit', 'researcher', 'governance'].includes(serverName);
+        const isGovernanceServer = ['code-review', 'security-audit', 'researcher', 'architect', 'governance'].includes(serverName);
         const isGovernanceTool = toolName === 'analyze_proposal';
         const preferReal = this.isPureMcpMode || isGovernanceServer || isGovernanceTool;
         try {

package/dist/mcps/orchestrator/handlers/complexity-handler.js

@@ -5,7 +5,7 @@
  */
 import { frameworkLogger } from '../../../core/framework-logger.js';
 import { buildLeadDevPlan, buildSynthesisCheckpointPlan, isLeadDevModeActive, persistLeadDevPlan, } from '../../../nucleus/autonomy-kernel.js';
-import { formatConferQuorumReport, isConferEnabled, runConferQuorum, } from '../../../nucleus/confer.js';
+import { conferFixtureAllowed, formatConferQuorumReport, isConferEnabled, runConferQuorum, } from '../../../nucleus/confer.js';
 import { bindPlanToSession } from '../../../nucleus/lead-dev-plan-persistence.js';
 import { clearPendingDelegations } from '../../../nucleus/pending-delegations.js';
 import { isAutoProvisionWorktreeEnabled, provisionGitWorktree, } from '../../../nucleus/aside-worktree.js';
@@ -177,7 +177,7 @@ export class ComplexityHandler {
                 args.sessionId) {
                 const conferOpts = {
                     dueReason: args.synthesisDueReason ?? null,
-                    fixture: args.conferFixture === true,
+                    fixture: conferFixtureAllowed() && args.conferFixture === true,
                 };
                 if (args.collocatedText)
                     conferOpts.collocatedText = args.collocatedText;

package/dist/mcps/researcher.server.js

@@ -10,10 +10,11 @@
 import * as fs from "fs";
 import * as path from "path";
 import { frameworkLogger } from "../core/framework-logger.js";
-import { isGovernanceLlmConfigured, tryLLMGovernance, } from "../governance/llm-governance-provider.js";
+import { attemptLLMGovernance, } from "../governance/llm-governance-provider.js";
 import { formatGovernanceVoteText, localConferVote } from "../governance/local-confer.js";
 import { initializeMemoryRouting } from "../memory-routing/index.js";
 import { buildMemoryRoutingEvidence, formatMemoryRoutingBlock, resolveResearcherMemoryContext, } from "./researcher-confidence.js";
+import { buildHostConferEvidence } from "../nucleus/confer-host.js";
 import { XrayKnowledgeSkillBase } from "./shared/knowledge-skill-base.js";
 class XrayLibrarianServer extends XrayKnowledgeSkillBase {
     constructor() {
@@ -382,6 +383,12 @@ class XrayLibrarianServer extends XrayKnowledgeSkillBase {
      */
     async analyzeProposal(args) {
         const { proposalTitle = "", proposalDescription = "", evidence = [], proposalType = "" } = args || {};
+        if (proposalType === "synthesis-confer") {
+            const packet = [proposalTitle, proposalDescription, ...(evidence || [])].filter(Boolean).join("\n\n");
+            return {
+                content: [{ type: "text", text: buildHostConferEvidence("researcher", packet) }],
+            };
+        }
         const memoryContext = await resolveResearcherMemoryContext({
             proposalTitle,
             proposalDescription,
@@ -391,12 +398,14 @@ class XrayLibrarianServer extends XrayKnowledgeSkillBase {
         if (memoryContext) {
             enrichedEvidence.push(...buildMemoryRoutingEvidence(memoryContext));
         }
-        const vote = (await tryLLMGovernance("researcher", proposalTitle || "", proposalDescription || "", enrichedEvidence, proposalType || "")) ??
+        const attempt = await attemptLLMGovernance("researcher", proposalTitle || "", proposalDescription || "", enrichedEvidence, proposalType || "");
+        const vote = attempt.vote ??
             localConferVote({
                 role: "researcher",
-                llmConfigured: isGovernanceLlmConfigured(),
+                llmConfigured: attempt.miss !== "not-configured",
                 highConfidenceTrapPresent: memoryContext?.confidence.highConfidenceTrapPresent,
                 recommendedAgent: memoryContext?.recommendedAgent,
+                ...(attempt.miss ? { miss: attempt.miss } : {}),
             });
         const memoryRoutingBlock = memoryContext
             ? `\n${formatMemoryRoutingBlock(memoryContext)}`

package/dist/nucleus/autonomy-kernel.d.ts

@@ -38,6 +38,8 @@ export interface LeadDevPlan {
         fullSuiteGate: boolean;
         hint: string;
     };
+    /** New id each synthesis plan. Receipts from an older id cannot complete s.1–s.3. */
+    consultCycleId?: string;
 }
 export declare function isLeadDevModeActive(): boolean;
 export declare function routeSubagent(taskType: string): SubagentRoute;

package/dist/nucleus/autonomy-kernel.js

@@ -2,11 +2,11 @@
  * Lead-dev plan builder — internal implementation for orchestrator + hooks.
  * Config: features.json → multi_agent_orchestration (lead_dev_mode), NOT a separate surface.
  */
+import { randomUUID } from 'node:crypto';
 import * as fs from 'fs';
 import * as path from 'path';
 import { featuresConfigLoader } from '../core/features-config.js';
 import { scoreComplexity } from './thin-dispatch.js';
-import { conferDefaultForProfile, resolveRuntimeSuitProfile } from './suit-temperament.js';
 export const LEAD_DEV_RULES = [
     'Phased plan + detailed todos; assign best subagent; monitor output; iterate fully',
     'Lead dev takes helm — loop test fix until complete; no permission pings',
@@ -33,6 +33,19 @@ const TASK_TYPE_ROUTES = {
     security: 'security-audit',
     governance: 'enforcer',
 };
+function conferExplicitlyEnabled(projectRoot) {
+    const featuresPath = path.join(projectRoot, '.xray', 'features.json');
+    if (!fs.existsSync(featuresPath))
+        return false;
+    try {
+        const data = JSON.parse(fs.readFileSync(featuresPath, 'utf8'));
+        const orch = data.multi_agent_orchestration ?? {};
+        return orch.confer?.enabled === true || orch.confer_on_synthesis === true;
+    }
+    catch {
+        return false;
+    }
+}
 function orchestrationConfig() {
     try {
         return featuresConfigLoader.loadConfig().multi_agent_orchestration;
@@ -80,12 +93,7 @@ export function buildSynthesisCheckpointPlan(dueReason, projectRoot = process.cw
     if (!isLeadDevModeActive())
         return null;
     const cfg = orchestrationConfig();
-    const profile = resolveRuntimeSuitProfile(projectRoot);
-    const autoConsult = profile === 'frontier'
-        ? cfg.confer?.enabled === true || cfg.confer_on_synthesis === true
-        : profile === 'strict'
-            ? true
-            : cfg.auto_consult_major_work !== false;
+    const autoConsult = conferExplicitlyEnabled(projectRoot);
     const mandatoryConsults = autoConsult ? [...MANDATORY_MAJOR_CONSULTS] : [];
     if (mandatoryConsults.length === 0)
         return null;
@@ -118,13 +126,13 @@ export function buildSynthesisCheckpointPlan(dueReason, projectRoot = process.cw
             fullSuiteGate: false,
             hint: 'Synthesis checkpoint — consult mandatory agents before resuming gated work',
         },
+        consultCycleId: randomUUID(),
     };
 }
 export function buildLeadDevPlan(description, taskTypes = ['implement'], taskInputs = [], mcpOverallComplexity, projectRoot = process.cwd()) {
     if (!isLeadDevModeActive())
         return null;
     const cfg = orchestrationConfig();
-    const profile = resolveRuntimeSuitProfile(projectRoot);
     const threshold = cfg.phased_plan_threshold ?? 25;
     const score = scoreComplexity(description, { taskTypes });
     const mcpScore = mcpOverallComplexity !== undefined && Number.isFinite(mcpOverallComplexity)
@@ -132,11 +140,7 @@ export function buildLeadDevPlan(description, taskTypes = ['implement'], taskInp
         : 0;
     const complexity = Math.max(score.score, mcpScore);
     const requiresPhasedPlan = complexity > threshold || taskInputs.length > 1;
-    const autoConsult = profile === 'frontier'
-        ? cfg.confer?.enabled === true || cfg.confer_on_synthesis === true
-        : profile === 'strict' || conferDefaultForProfile(profile)
-            ? cfg.auto_consult_major_work !== false
-            : false;
+    const autoConsult = conferExplicitlyEnabled(projectRoot);
     const mandatoryConsults = autoConsult && requiresPhasedPlan ? [...MANDATORY_MAJOR_CONSULTS] : [];
     const phases = requiresPhasedPlan
         ? [

package/dist/nucleus/confer-host.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Confer host port. The wearing TUI already spawned the MCP servers.
+ * This port writes the ask or returns the host's answer. It does not spawn a server.
+ */
+export interface ConferHostSeat {
+    todoId: string;
+    subagent: string;
+    server: string;
+    tool: string;
+    args: Record<string, unknown>;
+    sessionId: string;
+    prompt: string;
+    dueReason: string | null;
+}
+export type ConferHostCall = {
+    status: 'pending';
+    askPath: string;
+} | {
+    status: 'answered';
+    text: string;
+};
+export interface ConferHostPort {
+    call(seat: ConferHostSeat, projectRoot: string): Promise<ConferHostCall>;
+}
+export declare function conferAskPath(todoId: string, projectRoot: string): string;
+/** Evidence for the host model. The schema line is not a vote. */
+export declare function buildHostConferEvidence(role: string, evidence: string): string;
+export declare class SessionConferHost implements ConferHostPort {
+    call(seat: ConferHostSeat, projectRoot: string): Promise<ConferHostCall>;
+}
+export declare class InProcessConferHost implements ConferHostPort {
+    private readonly answers;
+    constructor(answers: Record<string, string>);
+    call(seat: ConferHostSeat): Promise<ConferHostCall>;
+}