0xray 3.4.2 → 3.4.3

package/.xray/features.json

@@ -1,5 +1,6 @@
 {
   "$schema": "./features.schema.json",
+  "version": "3.4.3",
   "description": "0xRay Framework - Unified Feature Configuration",
   "token_optimization": {
     "enabled": true,
@@ -134,13 +135,18 @@
     "min_success_rate": 0.7
   },
   "memory_routing": {
-    "enabled": true,
-    "provider": "repertoire",
-    "module_path": "../repertoire/dist/provider/memory-routing-provider.js",
-    "config": {
-      "dataDir": "../repertoire/data",
-      "signalsPath": "../repertoire/data/curated_signals.json",
-      "logDir": "../repertoire/logs/groover-inference"
+    "enabled": false,
+    "provider": "null",
+    "module_path": "",
+    "config": {}
+  },
+  "inference_governance": {
+    "enabled": false,
+    "request_timeout_ms": 10000,
+    "min_confidence_threshold": 0.5,
+    "proposal_defaults": {
+      "source": "agent",
+      "onChain": false
     }
   }
 }

package/README.md

@@ -96,7 +96,7 @@ All registered via `npx -y 0xray mcp <cmd>` — no brittle `dist/` paths:
 |--------|---------|------|
 | `xray-governance` | `mcp governance` | Proposal governance, codex snapshot, quality gates |
 | `xray-skills` | `mcp skills` | 45 knowledge skills + skill invocation |
-| `xray-orchestrator` | `mcp orchestrator` | thinDispatch 7-flow, task delegation |
+| `xray-orchestrator` | `mcp orchestrator` | Complexity analysis, lead-dev plan, task delegation |
 | `xray-enforcer` | `mcp enforcer` | Codex compliance, rule validation |
 | `xray-researcher` | `mcp researcher` | Codebase exploration, implementation lookup |
 | `xray-code-review` | `mcp code-review` | Proposal quality, best practices |
@@ -144,7 +144,7 @@ Pluggable `memory_routing` block in `features.json` (validated by `features.sche
 | Integration | What it does |
 |-------------|--------------|
 | **ExecutionPlanner** (v3.3.1) | `getTaskConfidence()` → complexity boost, trap hints, signal-aware `selectAgent()` |
-| **thinDispatch** | `resolveThinDispatch()` adjusts score; architect override on high-confidence traps |
+| **thinDispatch** | Nucleus `scoreAndRoute()` (`0xray/nucleus`); memory provider `resolveThinDispatch()` when routing enabled |
 | **Researcher** | `researcher-confidence.ts` appends `MEMORY_ROUTING:` block to governance output |
 | **AsideContext** (v3.2) | `buildInheritedContext` → `inheritedContext.memoryRouting` on orchestrator `spawnAside` |
 | **Feedback** | Per-task `ingestFeedback()` closes the learning loop |

package/dist/CHANGELOG.md

@@ -4,6 +4,22 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Conventional Commits](https://www.conventionalcommits.org/).
 
+## [3.4.3] - 2026-06-18
+
+### ✨ Features
+- Shipped `xray/features.json` template: `inference_governance` + `memory_routing` **disabled by default** (opt-in via `@0xray/repertoire`)
+- `govern_proposals` `require_external` defaults align with `inference_governance.enabled`
+- Postinstall prefers `xray/` template over dev `.xray/` runtime copy
+
+### 🐛 Bug Fixes
+- `prepublishOnly` keeps `.d.ts` in dist (strips source maps only)
+- CI: `main` branch, blocking codex-check, consumer smoke on PR
+
+### 📚 Documentation
+- README: thinDispatch documented in nucleus (`0xray/nucleus`), not orchestrator MCP tools
+
+---
+
 ## [3.4.2] - 2026-06-18
 
 ### ✨ Features

package/dist/README.md

@@ -96,7 +96,7 @@ All registered via `npx -y 0xray mcp <cmd>` — no brittle `dist/` paths:
 |--------|---------|------|
 | `xray-governance` | `mcp governance` | Proposal governance, codex snapshot, quality gates |
 | `xray-skills` | `mcp skills` | 45 knowledge skills + skill invocation |
-| `xray-orchestrator` | `mcp orchestrator` | thinDispatch 7-flow, task delegation |
+| `xray-orchestrator` | `mcp orchestrator` | Complexity analysis, lead-dev plan, task delegation |
 | `xray-enforcer` | `mcp enforcer` | Codex compliance, rule validation |
 | `xray-researcher` | `mcp researcher` | Codebase exploration, implementation lookup |
 | `xray-code-review` | `mcp code-review` | Proposal quality, best practices |
@@ -144,7 +144,7 @@ Pluggable `memory_routing` block in `features.json` (validated by `features.sche
 | Integration | What it does |
 |-------------|--------------|
 | **ExecutionPlanner** (v3.3.1) | `getTaskConfidence()` → complexity boost, trap hints, signal-aware `selectAgent()` |
-| **thinDispatch** | `resolveThinDispatch()` adjusts score; architect override on high-confidence traps |
+| **thinDispatch** | Nucleus `scoreAndRoute()` (`0xray/nucleus`); memory provider `resolveThinDispatch()` when routing enabled |
 | **Researcher** | `researcher-confidence.ts` appends `MEMORY_ROUTING:` block to governance output |
 | **AsideContext** (v3.2) | `buildInheritedContext` → `inheritedContext.memoryRouting` on orchestrator `spawnAside` |
 | **Feedback** | Per-task `ingestFeedback()` closes the learning loop |

package/dist/agents/architect.d.ts

@@ -0,0 +1,2 @@
+import type { AgentConfig } from "./types.js";
+export declare const architect: AgentConfig;

package/dist/agents/backend-engineer.d.ts

@@ -0,0 +1,8 @@
+import type { AgentConfig } from "./types.js";
+/**
+ * Backend Engineer Agent
+ *
+ * Specialist in API design, server architecture, microservice patterns,
+ * authentication, and backend performance optimization.
+ */
+export declare const backendEngineer: AgentConfig;

package/dist/agents/bug-triage-specialist.d.ts

@@ -0,0 +1,2 @@
+import type { AgentConfig } from "./types.js";
+export declare const bugTriageSpecialist: AgentConfig;

package/dist/agents/code-analyzer.d.ts

@@ -0,0 +1,7 @@
+import { AgentConfig } from "./types.js";
+/**
+ * Code Analyzer Agent
+ *
+ * Universal analysis specialist for code, systems, and technical artifacts.
+ */
+export declare const codeAnalyzer: AgentConfig;

package/dist/agents/code-reviewer.d.ts

@@ -0,0 +1,2 @@
+import type { AgentConfig } from "./types.js";
+export declare const codeReviewer: AgentConfig;

package/dist/agents/content-creator.d.ts

@@ -0,0 +1,9 @@
+import { AgentConfig } from "./types.js";
+/**
+ * Content Creator Agent
+ *
+ * Content specialist focused on SEO-optimized copywriting for both
+ * human readers and AI search engines. Expert in brand voice adaptation
+ * and conversion-focused content.
+ */
+export declare const contentCreator: AgentConfig;

package/dist/agents/database-engineer.d.ts

@@ -0,0 +1,8 @@
+import type { AgentConfig } from "./types.js";
+/**
+ * Database Engineer Agent
+ *
+ * Specialist in database architecture, schema design, query optimization,
+ * migrations, and data modeling for SQL and NoSQL databases.
+ */
+export declare const databaseEngineer: AgentConfig;

package/dist/agents/devops-engineer.d.ts

@@ -0,0 +1,8 @@
+import type { AgentConfig } from "./types.js";
+/**
+ * DevOps Engineer Agent
+ *
+ * Specialist in CI/CD pipelines, infrastructure as code, container orchestration,
+ * cloud deployment, and operational reliability.
+ */
+export declare const devopsEngineer: AgentConfig;

package/dist/agents/frontend-engineer.d.ts

@@ -0,0 +1,8 @@
+import type { AgentConfig } from "./types.js";
+/**
+ * Frontend Engineer Agent
+ *
+ * Specialist in React, Vue, Angular, responsive design, accessibility,
+ * performance optimization, and modern UI/UX implementation.
+ */
+export declare const frontendEngineer: AgentConfig;

package/dist/agents/frontend-ui-ux-engineer.d.ts

@@ -0,0 +1,8 @@
+import type { AgentConfig } from "./types.js";
+/**
+ * Frontend UI/UX Engineer Agent
+ *
+ * Specialist in UI/UX design, user experience, visual design,
+ * accessibility, and frontend implementation.
+ */
+export declare const frontendUiUxEngineer: AgentConfig;

package/dist/agents/growth-strategist.d.ts

@@ -0,0 +1,8 @@
+import { AgentConfig } from "./types.js";
+/**
+ * Growth Strategist Agent
+ *
+ * Strategic marketing specialist for product positioning, campaign strategy,
+ * market analysis, and integrated marketing communications.
+ */
+export declare const growthStrategist: AgentConfig;

package/dist/agents/index.d.ts

@@ -0,0 +1,25 @@
+import type { AgentConfig } from "./types.js";
+import { architect } from "./architect.js";
+import { bugTriageSpecialist } from "./bug-triage-specialist.js";
+import { codeReviewer } from "./code-reviewer.js";
+import { securityAuditor } from "./security-auditor.js";
+import { refactorer } from "./refactorer.js";
+import { testingLead } from "./testing-lead.js";
+import { logMonitor } from "./log-monitor.js";
+import { researcher } from "./researcher.js";
+import { codeAnalyzer } from "./code-analyzer.js";
+import { backendEngineer } from "./backend-engineer.js";
+import { contentCreator } from "./content-creator.js";
+import { databaseEngineer } from "./database-engineer.js";
+import { devopsEngineer } from "./devops-engineer.js";
+import { frontendEngineer } from "./frontend-engineer.js";
+import { frontendUiUxEngineer } from "./frontend-ui-ux-engineer.js";
+import { growthStrategist } from "./growth-strategist.js";
+import { mobileDeveloper } from "./mobile-developer.js";
+import { performanceEngineer } from "./performance-engineer.js";
+import { seoConsultant } from "./seo-consultant.js";
+import { strategist } from "./strategist.js";
+import { techWriter } from "./tech-writer.js";
+import { multimodalLooker } from "./multimodal-looker.js";
+export declare const builtinAgents: Record<string, AgentConfig>;
+export { architect, bugTriageSpecialist, codeReviewer, securityAuditor, refactorer, testingLead, logMonitor, researcher, codeAnalyzer, backendEngineer, contentCreator, databaseEngineer, devopsEngineer, frontendEngineer, frontendUiUxEngineer, growthStrategist, mobileDeveloper, performanceEngineer, seoConsultant, strategist, techWriter, multimodalLooker, };

package/dist/agents/known-names.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Known Names — Single combined vocabulary for agent names, skill names,
+ * system service names, and opencode built-in types. All consumers import
+ * from here instead of defining their own hardcoded lists.
+ *
+ * Imports:
+ *   - registry.ts (AGENT_REGISTRY, AGENT_KEYS) — canonical agent definitions
+ *   - mcps/index.ts (MCP_SERVERS) — canonical MCP server manifest
+ */
+import { AGENT_KEYS, type AgentKey } from "./registry.js";
+import { MCP_SERVERS } from "../mcps/index.js";
+export { AGENT_KEYS, type AgentKey };
+export type { AgentKey as AgentName };
+/** All agent names as a mutable array */
+export declare function getAgentNames(): string[];
+export declare const SYSTEM_SERVICE_NAMES: readonly ["enforcer", "orchestrator", "analyzer"];
+export declare const OPENCODE_BUILTIN_TYPES: readonly ["explore", "general"];
+export declare const ALL_KNOWN_NAMES: readonly [...string[], "enforcer", "orchestrator", "analyzer", "explore", "general"];
+export type KnownName = typeof ALL_KNOWN_NAMES[number];
+export declare const BOOT_AGENTS: readonly ["enforcer", "architect", "bug-triage-specialist", "code-reviewer", "security-auditor", "refactorer", "testing-lead"];
+export declare function isValidType(name: string): boolean;
+export declare const AGENT_TO_SKILL_MAP: Record<string, string>;
+/** Resolve agent name to skill name via alias map, fallback to identity */
+export declare function resolveSkill(agentOrSkill: string): string;
+export { MCP_SERVERS };
+export declare function getSkillNames(): string[];

package/dist/agents/librarian-agents-updater.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Librarian AGENTS.md Auto-Update Service
+ *
+ * Analyzes the project codebase and updates AGENTS.md to reflect
+ * the current project state (frameworks, APIs, components, etc.)
+ */
+export declare class LibrarianAgentsUpdater {
+    /**
+     * Main entry point to update AGENTS.md based on project analysis
+     * Now MERGES with existing content instead of overwriting
+     */
+    updateAgentsMd(projectRoot?: string): Promise<void>;
+    /**
+     * Generate only the auto-generated sections with markers
+     */
+    private generateAutoGeneratedContent;
+    /**
+     * Merge auto-generated content with existing AGENTS.md
+     * Preserves all manual sections outside the markers
+     */
+    private mergeAgentsMd;
+    private analyzeProject;
+    private detectProjectInfo;
+    private detectFrameworks;
+    private detectLanguages;
+    private detectAPIs;
+    private detectComponents;
+    private generateAgentsMd;
+}
+export declare const librarianAgentsUpdater: LibrarianAgentsUpdater;

package/dist/agents/log-monitor.d.ts

@@ -0,0 +1,2 @@
+import type { AgentConfig } from "./types.js";
+export declare const logMonitor: AgentConfig;

package/dist/agents/mobile-developer.d.ts

@@ -0,0 +1,9 @@
+import type { AgentConfig } from "./types.js";
+/**
+ * Mobile Developer Agent
+ *
+ * Specialist in iOS (Swift/SwiftUI), Android (Kotlin/Jetpack Compose),
+ * cross-platform (React Native, Flutter), mobile UX, app store optimization,
+ * and mobile performance.
+ */
+export declare const mobileDeveloper: AgentConfig;

package/dist/agents/multimodal-looker.d.ts

@@ -0,0 +1,9 @@
+import { AgentConfig } from "./types.js";
+/**
+ * Multimodal Looker Agent
+ *
+ * Media file analysis and interpretation specialist for images, diagrams, PDFs,
+ * and other visual content. Provides technical analysis and insights from
+ * multimodal sources.
+ */
+export declare const multimodalLooker: AgentConfig;

package/dist/agents/performance-engineer.d.ts

@@ -0,0 +1,8 @@
+import type { AgentConfig } from "./types.js";
+/**
+ * Performance Engineer Agent
+ *
+ * Specialist in application performance optimization, profiling, benchmarking,
+ * resource optimization, and performance testing.
+ */
+export declare const performanceEngineer: AgentConfig;

package/dist/agents/refactorer.d.ts

@@ -0,0 +1,2 @@
+import type { AgentConfig } from "./types.js";
+export declare const refactorer: AgentConfig;

package/dist/agents/registry.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Agent Registry
+ *
+ * ARCHITECTURE NOTE (2026-04-17):
+ * After discovering that orchestration/enforcement happen at plugin level
+ * (not via agents), we differentiate between:
+ * - AGENTS: True coordinators that need spawning (architect, strategist)
+ * - SKILLS: MCP-based capabilities invoked via skill tools (most others)
+ *
+ * The agent-delegator handles orchestration based on complexity analysis.
+ * Enforcement happens via preValidate processor and MCP servers.
+ * Agents are mainly prompts with skills - they don't route or orchestrate.
+ */
+export interface AgentRegistryEntry {
+    name: string;
+    description: string;
+    capabilities: string[];
+    capacity: number;
+    specialties: string[];
+    mode: "primary" | "subagent";
+    maxComplexity: number;
+    concurrentTasks: number;
+    status: "active" | "inactive";
+    performance: number;
+    expertise: string;
+}
+export declare const AGENT_REGISTRY: Record<string, AgentRegistryEntry>;
+export declare function getActiveAgents(): string[];
+export declare function getAgentEntry(name: string): AgentRegistryEntry | undefined;
+export declare function isAllowedAgent(name: string): boolean;
+export declare function getAgentCapabilities(name: string): string[];
+export declare function validateRegistryConsistency(): {
+    valid: boolean;
+    errors: string[];
+};
+export declare const AGENT_KEYS: readonly string[];
+export type AgentKey = keyof typeof AGENT_REGISTRY;

package/dist/agents/researcher.d.ts

@@ -0,0 +1,2 @@
+import { AgentConfig } from "./types.js";
+export declare const researcher: AgentConfig;

package/dist/agents/security-auditor.d.ts

@@ -0,0 +1,2 @@
+import type { AgentConfig } from "./types.js";
+export declare const securityAuditor: AgentConfig;

package/dist/agents/seo-consultant.d.ts

@@ -0,0 +1,8 @@
+import { AgentConfig } from "./types.js";
+/**
+ * SEO Consultant Agent
+ *
+ * Technical SEO optimization specialist for code, content, and technical infrastructure.
+ * Focuses on technical SEO, schema markup, robots.txt, Core Web Vitals, and AI search optimization.
+ */
+export declare const seoConsultant: AgentConfig;

package/dist/agents/strategist.d.ts

@@ -0,0 +1,7 @@
+import { AgentConfig } from "./types.js";
+/**
+ * Strategist Agent
+ *
+ * Strategic guidance and complex problem-solving specialist.
+ */
+export declare const strategist: AgentConfig;

package/dist/agents/tech-writer.d.ts

@@ -0,0 +1,8 @@
+import type { AgentConfig } from "./types.js";
+/**
+ * Tech Writer Agent
+ *
+ * Specialist in technical documentation, API docs, README files,
+ * architectural decision records, and developer experience.
+ */
+export declare const techWriter: AgentConfig;

package/dist/agents/testing-lead.d.ts

@@ -0,0 +1,2 @@
+import type { AgentConfig } from "./types.js";
+export declare const testingLead: AgentConfig;

package/dist/agents/types.d.ts

@@ -0,0 +1,45 @@
+export interface ToolConfig {
+    include?: string[];
+    exclude?: string[];
+    [key: string]: unknown;
+}
+export interface PermissionConfig {
+    edit?: "ask" | "allow" | "deny";
+    bash?: "ask" | "allow" | "deny" | {
+        [command: string]: "ask" | "allow" | "deny";
+    };
+    webfetch?: "ask" | "allow" | "deny";
+    [key: string]: unknown;
+}
+export interface TaskDefinition {
+    id: string;
+    type: string;
+    description: string;
+    complexity: number;
+    priority: "high" | "medium" | "low";
+    createdAt: Date;
+    assignedAgent?: string;
+    status: "pending" | "running" | "completed" | "failed";
+    result?: unknown;
+    error?: string;
+    dependencies?: string[];
+    subagentType?: string;
+}
+export interface AgentConfig {
+    name: string;
+    model?: string;
+    description: string;
+    mode: "primary" | "subagent" | "all";
+    system: string;
+    temperature?: number;
+    top_p?: number;
+    tools?: ToolConfig;
+    permission?: PermissionConfig;
+    prompt?: string;
+    prompt_append?: string;
+    disable?: boolean;
+    color?: string;
+    capabilities: string[];
+    maxComplexity: number;
+    enabled: boolean;
+}

package/dist/analytics/consent-manager.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Consent Manager for 0xRay Central Analytics
+ *
+ * Manages user consent for analytics data submission with granular
+ * control over what categories can be shared.
+ *
+ * @since 2026-03-06
+ */
+export interface ConsentConfiguration {
+    analyticsEnabled: boolean;
+    consentDate: Date;
+    consentVersion: string;
+    lastOptOut: Date | undefined;
+    categories: {
+        reflections: boolean;
+        logs: boolean;
+        metrics: boolean;
+        patterns: boolean;
+    };
+    projectId: string;
+}
+export interface ConsentCategory {
+    name: string;
+    description: string;
+    enabled: boolean;
+}
+export declare class ConsentManager {
+    private configPath;
+    private config;
+    private submissionQueue;
+    constructor(configPath?: string | undefined);
+    /**
+     * Initialize consent manager - load existing config or create default
+     */
+    initialize(): Promise<ConsentConfiguration>;
+    /**
+     * Enable analytics (opt-in)
+     */
+    enableConsent(categories?: string[]): Promise<void>;
+    /**
+     * Disable analytics (opt-out)
+     */
+    disableConsent(): Promise<void>;
+    /**
+     * Check if submission is allowed for a category
+     */
+    canSubmit(category: string): boolean;
+    /**
+     * Get current consent status
+     */
+    getStatus(): Promise<ConsentConfiguration>;
+    /**
+     * Enable specific category
+     */
+    enableCategory(category: string): Promise<void>;
+    /**
+     * Disable specific category
+     */
+    disableCategory(category: string): Promise<void>;
+    /**
+     * Get all categories with their status
+     */
+    getCategories(): ConsentCategory[];
+    /**
+     * Generate anonymous project ID
+     */
+    private generateProjectId;
+    /**
+     * Create default disabled configuration
+     */
+    private createDefaultConfig;
+    /**
+     * Load configuration from file
+     */
+    private loadConfig;
+    /**
+     * Save configuration to file
+     */
+    private saveConfig;
+    /**
+     * Clear submission queue
+     */
+    private clearSubmissionQueue;
+    /**
+     * Add item to submission queue
+     */
+    queueSubmission(data: unknown): Promise<void>;
+    /**
+     * Save submission queue to file
+     */
+    private saveSubmissionQueue;
+}

package/dist/analytics/emerging-pattern-detector.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Emerging Pattern Detector for P9 - ADAPTIVE_PATTERN_LEARNING
+ *
+ * Discovers new routing patterns from recent task requests,
+ * identifies emergent behaviors, and suggests new pattern candidates.
+ *
+ * @since 2026-03-05
+ */
+import type { EmergentPattern } from "../core/kernel-patterns.js";
+import type { RoutingOutcome } from "../delegation/config/types.js";
+export interface ClusterResult {
+    clusterId: string;
+    patterns: string[];
+    frequency: number;
+    keywords: string[];
+    suggestedAgents: string[];
+    suggestedSkills: string[];
+    confidence: number;
+}
+export interface PatternDiscoveryResult {
+    emergentPatterns: EmergentPattern[];
+    clusters: ClusterResult[];
+    recommendations: string[];
+}
+export declare class EmergingPatternDetector {
+    private readonly minFrequencyThreshold;
+    private readonly minConfidenceThreshold;
+    private readonly clusterSimilarityThreshold;
+    private readonly maxClusters;
+    private readonly stopWords;
+    /**
+     * Extract meaningful keywords from task description
+     */
+    private extractKeywords;
+    /**
+     * Calculate Jaccard similarity between two keyword sets
+     */
+    private calculateSimilarity;
+    /**
+     * Cluster similar task descriptions
+     */
+    private clusterTasks;
+    /**
+     * Detect emergent patterns from recent routing outcomes
+     */
+    detectEmergingPatterns(outcomes: RoutingOutcome[]): PatternDiscoveryResult;
+    /**
+     * Check if a specific pattern is emerging
+     */
+    isPatternEmerging(pattern: string, recentOutcomes: RoutingOutcome[], historicalBaseline: number): {
+        emerging: boolean;
+        trend: 'increasing' | 'decreasing' | 'stable';
+        confidence: number;
+    };
+    /**
+     * Get suggested keyword mappings from emergent patterns
+     */
+    suggestKeywordMappings(emergentPatterns: EmergentPattern[]): Array<{
+        keywords: string[];
+        suggestedAgent: string;
+        suggestedSkill: string;
+        confidence: number;
+        reason: string;
+    }>;
+}
+export declare const emergingPatternDetector: EmergingPatternDetector;