0xray 3.0.3 → 3.0.4

package/.opencode/plugin/xray-codex-injection.js

@@ -0,0 +1,624 @@
+/**
+ * Consumer runtime compat (xray codex injection + XRAY_ env + .xray fallbacks).
+ */
+import * as fs from "fs";
+import * as path from "path";
+import { spawn } from "child_process";
+import { beforeToolHook, afterToolHook } from '../integrations/enforcement-gate.js';
+// ---------------------------------------------------------------------------
+// Dynamic module holders (loaded via candidate-based resolution)
+// ---------------------------------------------------------------------------
+let _resolveCodexPath = null;
+let _resolveStateDir = null;
+let _frameworkLogger = null;
+let _systemPromptGenerator = null;
+let _featuresConfigLoader = null;
+let _detectTaskType = null;
+// ---------------------------------------------------------------------------
+// Module loaders (candidate-based resolution for dev, dist, and consumer paths)
+// ---------------------------------------------------------------------------
+async function loadFrameworkLogger() {
+    if (_frameworkLogger)
+        return _frameworkLogger;
+    const candidates = [
+        "../core/framework-logger.js",
+        "../../node_modules/0xray/dist/core/framework-logger.js",
+    ];
+    for (const p of candidates) {
+        try {
+            const mod = await import(p);
+            _frameworkLogger = mod.frameworkLogger;
+            return _frameworkLogger;
+        }
+        catch (_) {
+            // try next candidate
+        }
+    }
+    _frameworkLogger = {
+        log: (_module, _event, _status, _data) => { },
+    };
+    return _frameworkLogger;
+}
+async function loadConfigPaths() {
+    if (_resolveCodexPath && _resolveStateDir)
+        return;
+    const candidates = [
+        "../core/config-paths.js",
+        "../../node_modules/0xray/dist/core/config-paths.js",
+    ];
+    for (const p of candidates) {
+        try {
+            const mod = await import(p);
+            _resolveCodexPath = mod.resolveCodexPath;
+            _resolveStateDir = mod.resolveStateDir;
+            return;
+        }
+        catch (_) {
+            // try next candidate
+        }
+    }
+    const logger = await loadFrameworkLogger();
+    logger.log("xray-codex-plugin", "config-paths-load-failed", "warning", { warning: "Failed to load config-paths module from any location" });
+}
+async function resolveCodexPath(root) {
+    await loadConfigPaths();
+    if (!_resolveCodexPath)
+        throw new Error("resolveCodexPath not available after loading");
+    return _resolveCodexPath(root);
+}
+async function resolveStateDir(root) {
+    await loadConfigPaths();
+    if (!_resolveStateDir)
+        throw new Error("resolveStateDir not available after loading");
+    return _resolveStateDir(root);
+}
+async function importSystemPromptGenerator() {
+    if (_systemPromptGenerator)
+        return;
+    const candidates = [
+        "../core/system-prompt-generator.js",
+        "../../node_modules/0xray/dist/core/system-prompt-generator.js",
+    ];
+    for (const p of candidates) {
+        try {
+            const module = await import(p);
+            _systemPromptGenerator = module.generateLeanSystemPrompt;
+            return;
+        }
+        catch (_) {
+            // try next candidate
+        }
+    }
+    const logger = await loadFrameworkLogger();
+    logger.log("xray-codex-plugin", "system-prompt-generator-load-failed", "warning", { warning: "Failed to load lean system prompt generator, using fallback" });
+}
+function validateModulePath(resolvedPath, allowedPrefix) {
+    const normalized = path.resolve(resolvedPath);
+    const allowed = path.resolve(allowedPrefix);
+    if (!normalized.startsWith(allowed)) {
+        throw new Error(`Module path validation failed: ${normalized} is outside allowed path ${allowed}`);
+    }
+}
+async function loadXrayComponents() {
+    if (_featuresConfigLoader)
+        return;
+    const logger = await getOrCreateLogger(process.cwd());
+    try {
+        const root = process.cwd();
+        const distPrefix = path.join(root, 'dist');
+        validateModulePath(`${root}/dist/core/features-config.js`, distPrefix);
+        const featuresModule = await import(`${root}/dist/core/features-config.js`);
+        _featuresConfigLoader = featuresModule.featuresConfigLoader;
+        _detectTaskType = featuresModule.detectTaskType;
+        logger.log(`✅ Loaded from cwd/dist/`);
+        return;
+    }
+    catch (e) {
+        const message = e instanceof Error ? e.message : String(e);
+        logger.log(`❌ Failed to load from cwd/dist/: ${message}`);
+    }
+    const pluginPaths = ["0xray"];
+    for (const pluginPath of pluginPaths) {
+        try {
+            const nodeModulesPrefix = path.join(process.cwd(), 'node_modules');
+            validateModulePath(`${process.cwd()}/node_modules/${pluginPath}/dist/core/features-config.js`, nodeModulesPrefix);
+            const fm = await import(`${process.cwd()}/node_modules/${pluginPath}/dist/core/features-config.js`);
+            _featuresConfigLoader = fm.featuresConfigLoader;
+            _detectTaskType = fm.detectTaskType;
+            logger.log(`✅ Loaded from node_modules/${pluginPath}/dist/`);
+            return;
+        }
+        catch (e) {
+            const message = e instanceof Error ? e.message : String(e);
+            logger.log(`❌ Failed to load from node_modules/${pluginPath}/dist/: ${message}`);
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function spawnPromise(command, args, cwd) {
+    return new Promise((resolve, reject) => {
+        const child = spawn(command, args, {
+            cwd,
+            stdio: ["ignore", "inherit", "pipe"],
+        });
+        let stderr = "";
+        if (child.stderr) {
+            child.stderr.on("data", (data) => {
+                stderr += data.toString();
+            });
+        }
+        child.on("close", (code) => {
+            if (code === 0) {
+                resolve({ stdout: "", stderr });
+            }
+            else {
+                reject(new Error(`Process exited with code ${code}: ${stderr}`));
+            }
+        });
+        child.on("error", (error) => {
+            reject(error);
+        });
+    });
+}
+class PluginLogger {
+    logPath;
+    constructor(directory) {
+        const logsDir = path.join(directory, ".opencode", "logs");
+        if (!fs.existsSync(logsDir)) {
+            fs.mkdirSync(logsDir, { recursive: true });
+        }
+        const today = new Date().toISOString().split("T")[0];
+        this.logPath = path.join(logsDir, `xray-plugin-${today}.log`);
+    }
+    async logAsync(message) {
+        try {
+            const timestamp = new Date().toISOString();
+            const logEntry = `[${timestamp}] ${message}\n`;
+            await fs.promises.appendFile(this.logPath, logEntry, "utf-8");
+        }
+        catch {
+            // Silent fail - logging failure should not break plugin
+        }
+    }
+    log(message) {
+        void this.logAsync(message);
+    }
+    warn(message) {
+        this.log(`WARN: ${message}`);
+    }
+    error(message, error) {
+        const errorDetail = error instanceof Error ? `: ${error.message}` : "";
+        this.log(`ERROR: ${message}${errorDetail}`);
+    }
+}
+let loggerInstance = null;
+let loggerInitPromise = null;
+async function getOrCreateLogger(directory) {
+    if (loggerInstance) {
+        return loggerInstance;
+    }
+    if (loggerInitPromise) {
+        return loggerInitPromise;
+    }
+    loggerInitPromise = (async () => {
+        const logger = new PluginLogger(directory);
+        loggerInstance = logger;
+        return logger;
+    })();
+    return loggerInitPromise;
+}
+function getFrameworkVersion() {
+    try {
+        const packageJsonPath = path.join(process.cwd(), "package.json");
+        const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, "utf-8"));
+        return packageJson.version || "1.4.6";
+    }
+    catch {
+        return "1.4.6";
+    }
+}
+function getFrameworkIdentity() {
+    const version = getFrameworkVersion();
+    return `0xRay Framework v${version} - AI Orchestration
+
+🔧 Core: architect, code-reviewer, refactorer, testing-lead, strategist
+📚 Codex: 5 Essential Terms (99.6% Error Prevention Target)
+🎯 Goal: Progressive, production-ready development workflow
+
+📖 Documentation: config dir (codex, config, agents docs) — resolved via config-paths
+`;
+}
+let cachedCodexContexts = null;
+async function getCodexFileLocations(directory) {
+    const root = directory || process.cwd();
+    const resolved = await resolveCodexPath(root);
+    resolved.push(path.join(root, ".opencode", "codex.codex"), path.join(root, ".xray", "agents_template.md"), path.join(root, ".opencode", "xray", "agents_template.md"), path.join(root, "AGENTS.md"));
+    return resolved;
+}
+function readFileContent(filePath) {
+    try {
+        return fs.readFileSync(filePath, "utf-8");
+    }
+    catch (error) {
+        const logger = new PluginLogger(process.cwd());
+        logger.error(`Failed to read file ${filePath}`, error);
+        return null;
+    }
+}
+function extractCodexMetadata(content) {
+    if (content.trim().startsWith("{")) {
+        try {
+            const parsed = JSON.parse(content);
+            const version = parsed.version || "1.6.0";
+            const terms = parsed.terms || {};
+            const termCount = Object.keys(terms).length;
+            return { version, termCount };
+        }
+        catch {
+            // Not valid JSON, try markdown format
+        }
+    }
+    const versionMatch = content.match(/\*\*Version\*\*:\s*(\d+\.\d+\.\d+)/);
+    const version = versionMatch?.[1] ?? "1.6.0";
+    const termMatches = content.match(/####\s*\d+\.\s/g);
+    const termCount = termMatches ? termMatches.length : 0;
+    return { version, termCount };
+}
+function createCodexContextEntry(filePath, content) {
+    const metadata = extractCodexMetadata(content);
+    return {
+        id: `xray-codex-${path.basename(filePath)}`,
+        source: filePath,
+        content,
+        priority: "critical",
+        metadata: {
+            version: metadata.version,
+            termCount: metadata.termCount,
+            loadedAt: new Date().toISOString(),
+        },
+    };
+}
+async function loadCodexContext(directory) {
+    if (cachedCodexContexts) {
+        return cachedCodexContexts;
+    }
+    const codexContexts = [];
+    const locations = await getCodexFileLocations(directory);
+    for (const fileLocation of locations) {
+        const fullPath = path.isAbsolute(fileLocation) ? fileLocation : path.join(directory, fileLocation);
+        const content = readFileContent(fullPath);
+        if (content && content.trim().length > 0) {
+            const entry = createCodexContextEntry(fullPath, content);
+            if (entry.metadata.termCount > 0) {
+                codexContexts.push(entry);
+            }
+        }
+    }
+    cachedCodexContexts = codexContexts;
+    if (codexContexts.length === 0) {
+        void getOrCreateLogger(directory).then((l) => l.error(`No valid codex files found. Checked: ${locations.join(", ")}`));
+    }
+    return codexContexts;
+}
+function formatCodexContext(contexts) {
+    if (contexts.length === 0) {
+        return "";
+    }
+    const parts = [];
+    for (const context of contexts) {
+        parts.push(`# 0xRay Codex Context v${context.metadata.version}`, `Source: ${context.source}`, `Terms Loaded: ${context.metadata.termCount}`, `Loaded At: ${context.metadata.loadedAt}`, "", context.content, "", "---", "");
+    }
+    return parts.join("\n");
+}
+// ---------------------------------------------------------------------------
+// Analytics and task classification
+// ---------------------------------------------------------------------------
+const INFERENCE_TUNE_INTERVAL = 100;
+let _openCodeToolCallCount = 0;
+let _lastTuneToolCallCount = 0;
+const TOOL_AGENT_MAP = {
+    write: { agent: "code-reviewer", skill: "write" },
+    edit: { agent: "code-reviewer", skill: "edit" },
+    multiedit: { agent: "code-reviewer", skill: "multiedit" },
+    bash: { agent: "testing-lead", skill: "execution" },
+    search: { agent: "researcher", skill: "search" },
+    read: { agent: "researcher", skill: "read" },
+    glob: { agent: "researcher", skill: "glob" },
+    grep: { agent: "researcher", skill: "search" },
+    ls: { agent: "researcher", skill: "list" },
+};
+function classifyTaskType(tool, args) {
+    const cmd = String(args?.command ?? "").toLowerCase().trim();
+    if (tool === "bash" && cmd) {
+        if (/(npm|yarn|pnpm)\s+test|jest|vitest|mocha|pytest/.test(cmd))
+            return "testing";
+        if (/(npm|yarn|pnpm)\s+run|npx|cargo|go run|make\s/.test(cmd))
+            return "build";
+        if (/audit|security|snyk|owasp|bandit/.test(cmd))
+            return "security";
+        if (/eslint|prettier|black|ruff|lint|format/.test(cmd))
+            return "lint";
+        if (/git\s/.test(cmd))
+            return "git";
+        if (/(npm|yarn|pnpm)\s+install|pip install|cargo add/.test(cmd))
+            return "install";
+        if (/grep|rg |find |ls |cat |head |tail /.test(cmd))
+            return "search";
+    }
+    if (tool === "write")
+        return "write";
+    if (tool === "edit" || tool === "multiedit")
+        return "edit";
+    if (tool === "read")
+        return "read";
+    if (tool === "search" || tool === "grep" || tool === "glob")
+        return "search";
+    return "unknown";
+}
+// ---------------------------------------------------------------------------
+// Shared helpers extracted from duplicated plugin logic
+// ---------------------------------------------------------------------------
+function isWriteEditOperation(tool) {
+    return tool === "write" || tool === "edit" || tool === "multiedit";
+}
+function resolveAgentName(input) {
+    const globalAgent = globalThis.currentAgent;
+    if (globalAgent?.agentType)
+        return globalAgent.agentType;
+    if (globalAgent?.type)
+        return globalAgent.type;
+    if (input?.agentType)
+        return input.agentType;
+    return "architect";
+}
+// ---------------------------------------------------------------------------
+// Feature detection helpers
+// Main plugin function
+// ---------------------------------------------------------------------------
+export default async function xrayCodexPlugin(input) {
+    const { directory: inputDirectory } = input;
+    const directory = inputDirectory || process.cwd();
+    return {
+        "experimental.chat.system.transform": async (_input, output) => {
+            try {
+                await importSystemPromptGenerator();
+                let leanPrompt = getFrameworkIdentity();
+                if (_systemPromptGenerator) {
+                    leanPrompt = await _systemPromptGenerator({
+                        showWelcomeBanner: true,
+                        showCodexContext: false,
+                        enableTokenOptimization: true,
+                        maxTokenBudget: 8192,
+                        showCriticalTermsOnly: true,
+                        showEssentialLinks: true,
+                    });
+                }
+                if (output.system && Array.isArray(output.system)) {
+                    output.system = [leanPrompt];
+                }
+            }
+            catch (error) {
+                const logger = await getOrCreateLogger(directory);
+                logger.error("System prompt injection failed:", error);
+                const fallback = getFrameworkIdentity();
+                if (output.system && Array.isArray(output.system)) {
+                    output.system = [fallback];
+                }
+            }
+        },
+        "tool.execute.before": async (input, output) => {
+            const logger = await getOrCreateLogger(directory);
+            logger.log(`🚀 TOOL EXECUTE BEFORE HOOK FIRED: ${input.tool}`);
+            logger.log(`📥 Full input: ${JSON.stringify(input)}`);
+            await loadXrayComponents();
+            if (_featuresConfigLoader && _detectTaskType) {
+                try {
+                    const config = _featuresConfigLoader.loadConfig();
+                    if (config.model_routing?.enabled) {
+                        const taskType = _detectTaskType(input.tool);
+                        const routing = taskType !== "unknown"
+                            ? config.model_routing.task_routing?.[taskType]
+                            : undefined;
+                        if (routing?.model) {
+                            output.model = routing.model;
+                            logger.log(`Model routed: ${input.tool} → ${taskType} → ${routing.model}`);
+                        }
+                    }
+                }
+                catch (e) {
+                    logger.error("Model routing error", e);
+                }
+            }
+            const { tool, args } = input;
+            const gateResult = await beforeToolHook(tool, args);
+            if (gateResult.blocked) {
+                const msgs = gateResult.violations.map(v => `[${v.severity}] ${v.message}`).join("; ");
+                logger.error(`🚫 Enforcement gate blocked: ${msgs}`);
+                throw new Error(`ENFORCER BLOCKED: ${msgs}`);
+            }
+            if (gateResult.violations.length > 0) {
+                logger.warn(`⚠️ Enforcement gate: ${gateResult.violations.length} warning(s), resonance=${gateResult.resonance.toFixed(2)}`);
+            }
+            logger.log(`✅ Enforcement gate passed for ${tool}`);
+            if (isWriteEditOperation(tool)) {
+                logger.log(`🔧 Processors delegated to enforcement gate for ${tool}`);
+            }
+        },
+        "tool.execute.after": async (input, _output) => {
+            const logger = await getOrCreateLogger(directory);
+            await loadXrayComponents();
+            const { tool, args, result } = input;
+            try {
+                const { routingOutcomeTracker } = await import("../delegation/analytics/outcome-tracker.js");
+                const mapping = TOOL_AGENT_MAP[tool];
+                const taskType = classifyTaskType(tool, args);
+                const rawDesc = args?.content
+                    ? String(args.content).slice(0, 150)
+                    : args?.filePath
+                        ? String(args.filePath)
+                        : args?.command
+                            ? String(args.command).slice(0, 150)
+                            : tool;
+                const description = `[${taskType}] ${rawDesc}`;
+                const outcomeFields = {
+                    taskId: `opencode-${_openCodeToolCallCount}`,
+                    taskDescription: description,
+                    routedAgent: mapping?.agent ?? "direct",
+                    routedSkill: mapping?.skill ?? tool,
+                    confidence: mapping ? 0.8 : 0.5,
+                    success: result?.error == null,
+                    routingMethod: mapping ? "keyword" : "default",
+                };
+                if (taskType !== "unknown")
+                    outcomeFields.taskType = taskType;
+                routingOutcomeTracker.recordOutcome(outcomeFields);
+            }
+            catch {
+                // Outcome tracker not available — skip silently
+            }
+            logger.log(`📥 After hook input: ${JSON.stringify({ tool, hasArgs: !!args, args, hasResult: !!result }).slice(0, 200)}`);
+            // Run enforcement after-hook for code-producing tools
+            if (tool && (tool.includes('write') || tool.includes('edit') || tool.includes('create') || tool.includes('modify'))) {
+                try {
+                    const afterResult = await afterToolHook(tool, args, result, null);
+                    if (afterResult.processorResults.length > 0) {
+                        logger.log(`📊 Post-tool processors: ${afterResult.processorResults.filter(r => r.success).length}/${afterResult.processorResults.length} passed`);
+                    }
+                    if (afterResult.governanceTriggered) {
+                        logger.log(`🏛️ Governance cycle triggered from ${tool} output`);
+                    }
+                }
+                catch (e) {
+                    logger.log(`⚠️ Post-tool enforcement hook skipped: ${e instanceof Error ? e.message : String(e)}`);
+                }
+            }
+            _openCodeToolCallCount++;
+            if (_openCodeToolCallCount - _lastTuneToolCallCount >= INFERENCE_TUNE_INTERVAL) {
+                _lastTuneToolCallCount = _openCodeToolCallCount;
+                try {
+                    const { inferenceTuner } = await import("../services/inference-tuner.js");
+                    inferenceTuner
+                        .runTuningCycle()
+                        .then(() => {
+                        logger.log(`🔄 Inference tuning cycle completed (call #${_openCodeToolCallCount})`);
+                    })
+                        .catch((err) => {
+                        logger.log(`⚠️ Inference tuning cycle skipped: ${err instanceof Error ? err.message : String(err)}`);
+                    });
+                }
+                catch {
+                    // Tuner not available in this environment — skip silently
+                }
+                // DISABLED: Auto governance proposal voting causes runaway token consumption
+                // See bug fix: inference cycle auto-trigger disabled to prevent recursive
+                // opencode process spawning via invokeViaOpencode() → architect → task subagents
+                //
+                // try {
+                //   const { InferenceCycle } = await import(
+                //     "../inference/inference-cycle.js"
+                //   );
+                //   const cycle = new InferenceCycle(directory);
+                //   cycle.maybeRunCycle()...
+                // } catch {}
+            }
+        },
+        "chat.message": async (input, output) => {
+            const logger = await getOrCreateLogger(directory);
+            if (!output.parts) {
+                return;
+            }
+            const textContent = input.parts?.find(p => p.type === "text")?.text ?? "";
+            if (!textContent) {
+                return;
+            }
+            const agentMentionRegex = /@(\w+)(?:\s+(.+?))?(?=$|\n\n|\r\r)/g;
+            let match;
+            let hasAgentMention = false;
+            let transformedText = textContent;
+            const knownAgents = {
+                "architect": "architect",
+                "strategist": "strategist",
+                "testing-lead": "testing-lead",
+                "bug-triage-specialist": "bug-triage-specialist",
+                "code-reviewer": "code-reviewer",
+                "security-auditor": "security-auditor",
+                "refactorer": "refactorer",
+                "researcher": "researcher",
+                "code-analyzer": "code-analyzer",
+                "frontend-engineer": "frontend-engineer",
+                "frontend-ui-ux-engineer": "frontend-ui-ux-engineer",
+                "backend-engineer": "backend-engineer",
+                "database-engineer": "database-engineer",
+                "devops-engineer": "devops-engineer",
+                "performance-engineer": "performance-engineer",
+                "mobile-developer": "mobile-developer",
+                "content-creator": "content-creator",
+                "growth-strategist": "growth-strategist",
+                "seo-consultant": "seo-consultant",
+                "tech-writer": "tech-writer",
+                "multimodal-looker": "multimodal-looker",
+                "log-monitor": "log-monitor",
+            };
+            while ((match = agentMentionRegex.exec(textContent)) !== null) {
+                const agentName = match[1].toLowerCase().replace(/-/g, "");
+                const taskPart = match[2]?.trim() ?? "";
+                if (knownAgents[agentName]) {
+                    hasAgentMention = true;
+                    const canonicalAgent = knownAgents[agentName];
+                    logger.log(`🎯 Agent mention detected: @${canonicalAgent}`);
+                    const prefix = `\n[DELEGATE TO AGENT: ${canonicalAgent}]\n`;
+                    transformedText = prefix + (taskPart || textContent.replace(`@${match[1]}`, "").trim());
+                    break;
+                }
+            }
+            if (hasAgentMention) {
+                const textPart = output.parts.find(p => p.type === "text");
+                if (textPart) {
+                    textPart.text = transformedText;
+                    logger.log(`✅ Transformed prompt for agent routing`);
+                }
+            }
+        },
+        config: async (_config) => {
+            const lockFile = path.join(directory, ".opencode", "logs", ".xray-init.lock");
+            const now = Date.now();
+            try {
+                if (fs.existsSync(lockFile)) {
+                    const stat = fs.statSync(lockFile);
+                    if (now - stat.mtimeMs < 15000) {
+                        return;
+                    }
+                }
+                fs.writeFileSync(lockFile, String(now));
+            }
+            catch {
+                // lock check failed — proceed anyway
+            }
+            const logger = await getOrCreateLogger(directory);
+            logger.log("🔧 Plugin config hook triggered - initializing 0xRay integration");
+            let initScriptPath = path.join(directory, ".opencode", "init.sh");
+            const pkgInitPath = path.join(directory, "node_modules", "0xray", ".opencode", "init.sh");
+            if (!fs.existsSync(initScriptPath) && fs.existsSync(pkgInitPath)) {
+                initScriptPath = pkgInitPath;
+            }
+            if (fs.existsSync(initScriptPath)) {
+                try {
+                    const { stderr } = await spawnPromise("bash", [initScriptPath], directory);
+                    if (stderr) {
+                        logger.error(`Framework init error: ${stderr}`);
+                    }
+                    else {
+                        logger.log("✅ 0xRay Framework initialized successfully");
+                    }
+                }
+                catch (error) {
+                    logger.error("Framework initialization failed", error);
+                }
+            }
+            logger.log("✅ Plugin config hook completed");
+        },
+    };
+}
+//# sourceMappingURL=xray-codex-injection.js.map

package/README.md

@@ -1,6 +1,6 @@
 # 0xRay — Self-Healing AI Governance OS
 
-**v3.0.3** — 41 agents · 44 skills · 15 MCPs servers · 20 codex terms · 160 test files
+**v3.0.4** — 41 agents · 44 skills · 15 MCPs servers · 20 codex terms · 160 test files
 
 [![Docs](https://img.shields.io/badge/docs-0xRayAI.github.io/xray-10b981?style=flat-square)](https://0xrayai.github.io/xray/)
 
@@ -14,25 +14,24 @@ Think of it as an **AI supervisor for your AI coders**: catch hallucinations, pr
 
 ## Quick Start
 
+Pick your AI coding tool and run **one command**:
+
 ```bash
-npm install 0xray
+# OpenCode (most common)
+npx -y 0xray opencode install
 
-# Verify installation
-npx 0xray status
+# Grok CLI
+npx -y 0xray grok install
 
-# Install for your AI coding platform
-npx 0xray opencode install      # OpenCode (most common)
-npx 0xray grok install          # Grok CLI
-npx 0xray hermes install        # Hermes Agent
-npx 0xray openclaw install      # OpenClaw
+# Hermes Agent
+npx -y 0xray hermes install
 
-# Install starter skills (recommended)
-npx 0xray skill:install
-
-# See all available commands
-npx 0xray --help
+# OpenClaw
+npx -y 0xray openclaw install
 ```
 
+That's it — 0xRay installs as a native plugin with agents, governance, and MCP servers for your platform. Run `npx 0xray --help` to see all commands.
+
 **Requirements:** Node.js 18+, npm 9+, macOS or Linux.
 
 ---

package/dist/CHANGELOG.md

@@ -4,6 +4,22 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Conventional Commits](https://www.conventionalcommits.org/).
 
+## [3.0.4] - 2026-06-13
+
+### 🔄 Changes
+
+- Version bump
+
+---
+
+## [3.0.4] - 2026-06-13
+
+### 🔄 Changes
+
+- Version bump
+
+---
+
 ## [3.0.3] - 2026-06-13
 
 ### 🔄 Changes

package/dist/README.md

@@ -1,6 +1,6 @@
 # 0xRay — Self-Healing AI Governance OS
 
-**v3.0.3** — 41 agents · 44 skills · 15 MCPs servers · 20 codex terms · 160 test files
+**v3.0.4** — 41 agents · 44 skills · 15 MCPs servers · 20 codex terms · 160 test files
 
 [![Docs](https://img.shields.io/badge/docs-0xRayAI.github.io/xray-10b981?style=flat-square)](https://0xrayai.github.io/xray/)
 
@@ -14,25 +14,24 @@ Think of it as an **AI supervisor for your AI coders**: catch hallucinations, pr
 
 ## Quick Start
 
+Pick your AI coding tool and run **one command**:
+
 ```bash
-npm install 0xray
+# OpenCode (most common)
+npx -y 0xray opencode install
 
-# Verify installation
-npx 0xray status
+# Grok CLI
+npx -y 0xray grok install
 
-# Install for your AI coding platform
-npx 0xray opencode install      # OpenCode (most common)
-npx 0xray grok install          # Grok CLI
-npx 0xray hermes install        # Hermes Agent
-npx 0xray openclaw install      # OpenClaw
+# Hermes Agent
+npx -y 0xray hermes install
 
-# Install starter skills (recommended)
-npx 0xray skill:install
-
-# See all available commands
-npx 0xray --help
+# OpenClaw
+npx -y 0xray openclaw install
 ```
 
+That's it — 0xRay installs as a native plugin with agents, governance, and MCP servers for your platform. Run `npx 0xray --help` to see all commands.
+
 **Requirements:** Node.js 18+, npm 9+, macOS or Linux.
 
 ---

package/dist/core/boot-orchestrator.js

@@ -719,7 +719,7 @@ export class BootOrchestrator {
             const xrayConfig = {
                 version: "3.0.3",
                 codex_enabled: true,
-                codex_version: "v3.0.2",
+                codex_version: "v3.0.3",
                 codex_terms: [
                     1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20,
                     21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "3.0.3",
+  "version": "3.0.4",
   "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
   "license": "MIT",
   "repository": {
@@ -73,7 +73,7 @@
     "postinstall": "node scripts/node/postinstall.cjs",
     "prepare": "npm run build",
     "prebuild": "rm -rf dist tsconfig.tsbuildinfo tsconfig.*.tsbuildinfo",
-    "build": "tsc && tsc -p tsconfig.full.json 2>/dev/null || true && mkdir -p dist/public dist/scripts && cp -r public/* dist/public/ && cp scripts/hooks/pre-command dist/scripts/ && cp scripts/hooks/pre-command.mjs dist/scripts/ && cp README.md AGENTS.md CHANGELOG.md LICENSE dist/ && find src -name '*.mjs' ! -path '*/__tests__/*' | while read f; do tgt=\"dist/${f#src/}\"; mkdir -p \"$(dirname $tgt)\"; cp \"$f\" \"$tgt\"; done && find dist -name '*.d.ts' -path '*/__tests__/*' -delete; find dist -name '*.js' -path '*/__tests__/*' -delete; for dir in skills integrations mcps; do find src/$dir -type f ! -name '*.ts' ! -path '*/.pytest_cache/*' | while read f; do tgt=\"dist/${f#src/}\"; mkdir -p \"$(dirname $tgt)\"; cp \"$f\" \"$tgt\"; done; done && mkdir -p dist/plugin && (find dist/plugin -name '*codex-injection*.js' -exec cp {} dist/plugin/xray-codex-injection.js \\; 2>/dev/null || true) && cp -r src/opencode/ .opencode/ && echo 'build artifacts in .opencode/xray/ removed — runtime reads from xray/ directly'",
+    "build": "tsc && tsc -p tsconfig.full.json 2>/dev/null || true && mkdir -p dist/public dist/scripts && cp -r public/* dist/public/ && cp scripts/hooks/pre-command dist/scripts/ && cp scripts/hooks/pre-command.mjs dist/scripts/ && cp README.md AGENTS.md CHANGELOG.md LICENSE dist/ && find src -name '*.mjs' ! -path '*/__tests__/*' | while read f; do tgt=\"dist/${f#src/}\"; mkdir -p \"$(dirname $tgt)\"; cp \"$f\" \"$tgt\"; done && find dist -name '*.d.ts' -path '*/__tests__/*' -delete; find dist -name '*.js' -path '*/__tests__/*' -delete; for dir in skills integrations mcps; do find src/$dir -type f ! -name '*.ts' ! -path '*/.pytest_cache/*' | while read f; do tgt=\"dist/${f#src/}\"; mkdir -p \"$(dirname $tgt)\"; cp \"$f\" \"$tgt\"; done; done && mkdir -p dist/plugin && (find dist/plugin -name '*codex-injection*.js' -exec cp {} dist/plugin/xray-codex-injection.js \\; 2>/dev/null || true) && cp -r src/opencode/ .opencode/ && mkdir -p .opencode/plugin && cp dist/plugin/xray-codex-injection.js .opencode/plugin/ && echo 'build artifacts in .opencode/xray/ removed — runtime reads from xray/ directly'",
     "build:all": "npm run build",
     "ci-install": "npm ci",
     "clean": "rm -rf dist tsconfig.tsbuildinfo tsconfig.*.tsbuildinfo",
@@ -163,6 +163,7 @@
     ".opencode/workflows/",
     ".opencode/codex.codex",
     ".opencode/enforcer-config.json",
+    ".opencode/plugin/",
     "opencode.json",
     "README.md",
     "AGENTS.md",

package/scripts/node/universal-version-manager.js

@@ -147,7 +147,7 @@ function detectCodexInfo() {
       return { version: cver.startsWith("v") ? cver : `v${cver}`, termsCount: termCount, lastUpdated: new Date().toISOString().split("T")[0] };
     } catch {}
   }
-  return { version: "v3.0.2", termsCount: 68, lastUpdated: new Date().toISOString().split("T")[0] };
+  return { version: "v3.0.3", termsCount: 68, lastUpdated: new Date().toISOString().split("T")[0] };
 }
 
 const detectedCodex = detectCodexInfo();
@@ -155,7 +155,7 @@ const detectedCodex = detectCodexInfo();
 const OFFICIAL_VERSIONS = {
   // Framework version
   framework: {
-    version: "3.0.3",
+    version: "3.0.4",
       displayName: "xray: Self-Healing AI Governance OS",
       lastUpdated: "2026-06-13",
     // Counts (auto-calculated, but can be overridden)