0xray 3.4.5 → 3.4.6

package/AGENTS-consumer.md

@@ -2,7 +2,7 @@
 
 Quick reference for the 0xRay AI orchestration framework (shipped to your project on `npm install 0xray`).
 
-**v3.4.5** — 7 MCP servers · 45 skills · 68 codex terms · 4 platform bridges
+**v3.4.6** — 7 MCP servers · 45 skills · 68 codex terms · 4 platform bridges
 
 ## Postinstall (automatic)
 

package/AGENTS.md

@@ -1,6 +1,6 @@
 # xray Agents
 
-Quick reference for the xray AI orchestration framework (**v3.4.5**).
+Quick reference for the xray AI orchestration framework (**v3.4.6**).
 
 **42 agents** · **45 skills** · **7 consumer MCP servers** · **68 codex terms** · **3,226 tests**
 

package/README.md

@@ -1,6 +1,6 @@
 # xray — MCP-Centric AI Governance OS
 
-**v3.4.5** — 42 agents · 45 skills · 7 MCP servers · 68 codex terms · 3,226 tests
+**v3.4.6** — 42 agents · 45 skills · 7 MCP servers · 68 codex terms · 3,226 tests
 
 xray is the pure v2 three-subsystem AI orchestration framework — **MCP-centric**, governed by Dynamo, and autonomous via thinDispatch. Consumer `npm install 0xray` auto-wires all four platform bridges and seven MCP servers with zero manual config.
 

package/SKILLS.md

@@ -1,6 +1,6 @@
 # 0xray Skills
 
-**v3.4.5** — **45 skills** · invoked via `xray-skills` MCP · synced on postinstall
+**v3.4.6** — **45 skills** · invoked via `xray-skills` MCP · synced on postinstall
 
 xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) across the full software lifecycle. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`), agent `@mentions`, or platform skill directories after postinstall.
 

package/dist/AGENTS.md

@@ -1,6 +1,6 @@
 # xray Agents
 
-Quick reference for the xray AI orchestration framework (**v3.4.5**).
+Quick reference for the xray AI orchestration framework (**v3.4.6**).
 
 **42 agents** · **45 skills** · **7 consumer MCP servers** · **68 codex terms** · **3,226 tests**
 

package/dist/CHANGELOG.md

@@ -4,6 +4,13 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Conventional Commits](https://www.conventionalcommits.org/).
 
+## [3.4.6] - 2026-06-18
+
+### 🐛 Bug Fixes
+- **Postinstall config merge** — `deployXrayConfig` deep-merges existing consumer `features.json`, `codex.json`, and `config.json` instead of overwriting on mtime; consumer opt-ins (e.g. `memory_routing`) are preserved and `features.version` bumps to the installed package
+
+---
+
 ## [3.4.5] - 2026-06-18
 
 ### ✨ Features

package/dist/README.md

@@ -1,6 +1,6 @@
 # xray — MCP-Centric AI Governance OS
 
-**v3.4.5** — 42 agents · 45 skills · 7 MCP servers · 68 codex terms · 3,226 tests
+**v3.4.6** — 42 agents · 45 skills · 7 MCP servers · 68 codex terms · 3,226 tests
 
 xray is the pure v2 three-subsystem AI orchestration framework — **MCP-centric**, governed by Dynamo, and autonomous via thinDispatch. Consumer `npm install 0xray` auto-wires all four platform bridges and seven MCP servers with zero manual config.
 

package/dist/SKILLS.md

@@ -1,6 +1,6 @@
 # 0xray Skills
 
-**v3.4.5** — **45 skills** · invoked via `xray-skills` MCP · synced on postinstall
+**v3.4.6** — **45 skills** · invoked via `xray-skills` MCP · synced on postinstall
 
 xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) across the full software lifecycle. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`), agent `@mentions`, or platform skill directories after postinstall.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "3.4.5",
+  "version": "3.4.6",
   "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
   "readme": "README.md",
   "license": "MIT",

package/scripts/node/install-bridges.cjs

@@ -403,6 +403,64 @@ function installOpenclawBridge(targetDir, packageRoot, log) {
 
 const XRAY_CONFIG_FILES = ["codex.json", "features.json", "features.schema.json", "config.json"];
 
+/** Consumer JSON configs merge on upgrade — consumer values win; shipped fills new keys. */
+const MERGE_CONFIG_FILES = new Set(["features.json", "config.json", "codex.json"]);
+
+function readPackageVersion(packageRoot) {
+  try {
+    const pkg = JSON.parse(fs.readFileSync(path.join(packageRoot, "package.json"), "utf8"));
+    return pkg.version || null;
+  } catch {
+    return null;
+  }
+}
+
+function writeJsonFile(filePath, data) {
+  fs.writeFileSync(filePath, `${JSON.stringify(data, null, 2)}\n`);
+}
+
+function deployXrayConfigFile(file, src, dst, packageRoot) {
+  if (!fs.existsSync(dst)) {
+    fs.copyFileSync(src, dst);
+    return true;
+  }
+
+  if (file === "features.schema.json") {
+    if (fs.statSync(src).mtime > fs.statSync(dst).mtime) {
+      fs.copyFileSync(src, dst);
+      return true;
+    }
+    return false;
+  }
+
+  if (MERGE_CONFIG_FILES.has(file)) {
+    try {
+      const shipped = JSON.parse(fs.readFileSync(src, "utf8"));
+      const consumer = JSON.parse(fs.readFileSync(dst, "utf8"));
+      const merged = deepMerge(shipped, consumer);
+      if (file === "features.json") {
+        const pkgVersion = readPackageVersion(packageRoot);
+        if (pkgVersion) merged.version = pkgVersion;
+        else if (shipped.version) merged.version = shipped.version;
+      }
+      writeJsonFile(dst, merged);
+      return true;
+    } catch {
+      if (fs.statSync(src).mtime > fs.statSync(dst).mtime) {
+        fs.copyFileSync(src, dst);
+        return true;
+      }
+      return false;
+    }
+  }
+
+  if (fs.statSync(src).mtime > fs.statSync(dst).mtime) {
+    fs.copyFileSync(src, dst);
+    return true;
+  }
+  return false;
+}
+
 function resolveXrayConfigSource(packageRoot, file) {
   // Shipped SSOT: xray/ template wins over dev .xray/ runtime copy (P0.2)
   const xrayDir = path.join(packageRoot, "xray", file);
@@ -423,9 +481,7 @@ function deployXrayConfig(targetDir, packageRoot, log) {
     const src = resolveXrayConfigSource(packageRoot, file);
     const dst = path.join(xrayTargetDir, file);
     if (!src) continue;
-    const shouldCopy = !fs.existsSync(dst) || fs.statSync(src).mtime > fs.statSync(dst).mtime;
-    if (shouldCopy) {
-      fs.copyFileSync(src, dst);
+    if (deployXrayConfigFile(file, src, dst, packageRoot)) {
       copied++;
     }
   }
@@ -479,6 +535,8 @@ module.exports = {
   syncBuiltinSkills,
   isConsumerInstall,
   deployXrayConfig,
+  deployXrayConfigFile,
   resolveXrayConfigSource,
   XRAY_CONFIG_FILES,
+  MERGE_CONFIG_FILES,
 };