0xray 3.4.9 → 3.4.10

package/AGENTS-consumer.md

@@ -4,7 +4,7 @@
 
 Quick reference for the 0xRay AI orchestration framework (shipped to your project on `npm install 0xray`).
 
-**v3.4.9** — 7 MCP servers · 45 skills · 68 codex terms · 4 platform bridges
+**v3.4.10** — 7 MCP servers · 45 skills · 68 codex terms · 4 platform bridges
 
 ## Postinstall (automatic)
 

package/AGENTS.md

@@ -1,6 +1,6 @@
 # xray Agents
 
-Quick reference for the xray AI orchestration framework (**v3.4.9**).
+Quick reference for the xray AI orchestration framework (**v3.4.10**).
 
 **42 agents** · **45 skills** · **7 consumer MCP servers** · **68 codex terms** · **3,226 tests**
 

package/README.md

@@ -1,6 +1,6 @@
 # xray — MCP-Centric AI Governance OS
 
-**v3.4.9** — 42 agents · 45 skills · 7 MCP servers · 68 codex terms · 3,226 tests
+**v3.4.10** — 42 agents · 45 skills · 7 MCP servers · 68 codex terms · 3,226 tests
 
 ## Your AI Power Suit
 

package/SKILLS.md

@@ -1,6 +1,6 @@
 # 0xray Skills
 
-**v3.4.9** — **45 skills** · invoked via `xray-skills` MCP · synced on postinstall
+**v3.4.10** — **45 skills** · invoked via `xray-skills` MCP · synced on postinstall
 
 xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) across the full software lifecycle. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`), agent `@mentions`, or platform skill directories after postinstall.
 

package/dist/AGENTS.md

@@ -1,6 +1,6 @@
 # xray Agents
 
-Quick reference for the xray AI orchestration framework (**v3.4.9**).
+Quick reference for the xray AI orchestration framework (**v3.4.10**).
 
 **42 agents** · **45 skills** · **7 consumer MCP servers** · **68 codex terms** · **3,226 tests**
 

package/dist/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Conventional Commits](https://www.conventionalcommits.org/).
 
+## [3.4.10] - 2026-06-19
+
+### 🐛 Bug Fixes
+- **Routing SSOT** — `selectAgentForTask` checks `routeSubagent(taskType)` before capability scoring or memory routing; `type: implement` → `backend-engineer` (not `code-reviewer`)
+- **Unified complexity** — `buildLeadDevPlan` uses `max(thin-dispatch, MCP overallComplexity)`; `dependencyCount: 8` at complexity 70 forces phased plan
+
+### ✅ Tests
+- `verify-orchestrator-behavior.mjs` ships in tarball — 5 behavior assertions (NaN, multi-task todos, implement routing, phased plan, honest deferral)
+- Unit coverage: `agent-capabilities-routing`, extended `autonomy-kernel` + `execution-planner-dependencies`
+
+---
+
 ## [3.4.9] - 2026-06-19
 
 ### ⚠️ Breaking Changes

package/dist/README.md

@@ -1,6 +1,6 @@
 # xray — MCP-Centric AI Governance OS
 
-**v3.4.9** — 42 agents · 45 skills · 7 MCP servers · 68 codex terms · 3,226 tests
+**v3.4.10** — 42 agents · 45 skills · 7 MCP servers · 68 codex terms · 3,226 tests
 
 ## Your AI Power Suit
 

package/dist/SKILLS.md

@@ -1,6 +1,6 @@
 # 0xray Skills
 
-**v3.4.9** — **45 skills** · invoked via `xray-skills` MCP · synced on postinstall
+**v3.4.10** — **45 skills** · invoked via `xray-skills` MCP · synced on postinstall
 
 xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) across the full software lifecycle. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`), agent `@mentions`, or platform skill directories after postinstall.
 

package/dist/mcps/orchestrator/config/agent-capabilities.d.ts

@@ -29,7 +29,7 @@ export declare class AgentCapabilitiesManager {
     /**
      * Select the best agent for a task based on complexity, capabilities, and memory routing.
      */
-    selectAgentForTask(requiredCapabilities: string[], complexity: number, operationDescription?: string): string | null;
+    selectAgentForTask(requiredCapabilities: string[], complexity: number, operationDescription?: string, taskType?: string): string | null;
     /**
      * Get all available agents for a given complexity level
      */

package/dist/mcps/orchestrator/config/agent-capabilities.js

@@ -7,6 +7,22 @@
 import { AGENT_REGISTRY } from "../../../agents/registry.js";
 import { initializeMemoryRouting } from '../../../memory-routing/index.js';
 import { getProvider, toMemoryCapabilityMap, fromMemoryCapabilityMap, } from './memory-routing-bridge.js';
+import { routeSubagent } from '../../../nucleus/autonomy-kernel.js';
+/** routeSubagent names → AGENT_REGISTRY keys */
+const ROUTE_AGENT_ALIASES = {
+    'code-review': 'code-reviewer',
+    'security-audit': 'security-auditor',
+    'bug-triage': 'bug-triage-specialist',
+    'architect-tools': 'architect',
+};
+function resolveRoutedAgent(routed, capabilities) {
+    const candidate = ROUTE_AGENT_ALIASES[routed] ?? routed;
+    if (capabilities.has(candidate))
+        return candidate;
+    if (capabilities.has(routed))
+        return routed;
+    return null;
+}
 const DEFAULT_AGENT_CAPABILITIES = Object.fromEntries(Object.entries(AGENT_REGISTRY).map(([name, entry]) => [
     name,
     {
@@ -61,7 +77,13 @@ export class AgentCapabilitiesManager {
     /**
      * Select the best agent for a task based on complexity, capabilities, and memory routing.
      */
-    selectAgentForTask(requiredCapabilities, complexity, operationDescription = '') {
+    selectAgentForTask(requiredCapabilities, complexity, operationDescription = '', taskType = '') {
+        if (taskType.trim()) {
+            const routed = routeSubagent(taskType);
+            const resolved = resolveRoutedAgent(routed, this.capabilities);
+            if (resolved)
+                return resolved;
+        }
         const provider = getProvider();
         if (provider.id !== 'null' && operationDescription) {
             const memoryCaps = toMemoryCapabilityMap(this.getAllCapabilities());

package/dist/mcps/orchestrator/execution/execution-planner.js

@@ -181,7 +181,7 @@ export class ExecutionPlanner {
             const operationDescription = task.metadata?.memoryHighConfidenceTrap
                 ? `${task.description} TYPE: ontological-trap`
                 : task.description;
-            const agent = this.capabilitiesManager.selectAgentForTask(requiredCaps, complexity, operationDescription) || 'orchestrator';
+            const agent = this.capabilitiesManager.selectAgentForTask(requiredCaps, complexity, operationDescription, task.type) || 'orchestrator';
             if (!agentAssignments.has(agent)) {
                 agentAssignments.set(agent, []);
             }
@@ -223,7 +223,7 @@ export class ExecutionPlanner {
                 task.type,
                 ...(task.metadata?.memorySignals ?? []),
             ];
-            const agent = this.capabilitiesManager.selectAgentForTask(requiredCaps, complexity, task.description) || 'orchestrator';
+            const agent = this.capabilitiesManager.selectAgentForTask(requiredCaps, complexity, task.description, task.type) || 'orchestrator';
             if (!assignments.has(agent)) {
                 assignments.set(agent, []);
             }

package/dist/mcps/orchestrator/handlers/complexity-handler.js

@@ -59,7 +59,7 @@ export class ComplexityHandler {
                 .filter((t) => t.description?.trim())
                 .map((t) => ({ description: t.description, type: t.type }));
             const leadDevPlan = isLeadDevModeActive() && (primaryDescription || planTaskInputs.length > 0)
-                ? buildLeadDevPlan(primaryDescription, taskTypes.length ? taskTypes : ['implement'], planTaskInputs)
+                ? buildLeadDevPlan(primaryDescription, taskTypes.length ? taskTypes : ['implement'], planTaskInputs, analysis.overallComplexity)
                 : null;
             if (leadDevPlan) {
                 try {

package/dist/nucleus/autonomy-kernel.d.ts

@@ -41,7 +41,7 @@ export interface LeadDevPlan {
 export declare function isLeadDevModeActive(): boolean;
 export declare function routeSubagent(taskType: string): SubagentRoute;
 export declare function shouldFlagFullTestSuite(command: string): boolean;
-export declare function buildLeadDevPlan(description: string, taskTypes?: string[], taskInputs?: LeadDevPlanTaskInput[]): LeadDevPlan | null;
+export declare function buildLeadDevPlan(description: string, taskTypes?: string[], taskInputs?: LeadDevPlanTaskInput[], mcpOverallComplexity?: number): LeadDevPlan | null;
 export declare function buildSessionBootContext(): Record<string, unknown>;
 /** Persist plan for PreToolUse spawn_subagent gate */
 export declare function persistLeadDevPlan(plan: LeadDevPlan, projectRoot?: string): string;

package/dist/nucleus/autonomy-kernel.js

@@ -73,13 +73,16 @@ function buildImplementationTodos(description, taskTypes, taskInputs, idPrefix)
         status: 'pending',
     }));
 }
-export function buildLeadDevPlan(description, taskTypes = ['implement'], taskInputs = []) {
+export function buildLeadDevPlan(description, taskTypes = ['implement'], taskInputs = [], mcpOverallComplexity) {
     if (!isLeadDevModeActive())
         return null;
     const cfg = orchestrationConfig();
     const threshold = cfg.phased_plan_threshold ?? 25;
     const score = scoreComplexity(description, { taskTypes });
-    const complexity = score.score;
+    const mcpScore = mcpOverallComplexity !== undefined && Number.isFinite(mcpOverallComplexity)
+        ? Math.round(mcpOverallComplexity)
+        : 0;
+    const complexity = Math.max(score.score, mcpScore);
     const requiresPhasedPlan = complexity > threshold || taskInputs.length > 1;
     const mandatoryConsults = cfg.auto_consult_major_work !== false && requiresPhasedPlan
         ? [...MANDATORY_MAJOR_CONSULTS]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "3.4.9",
+  "version": "3.4.10",
   "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
   "readme": "README.md",
   "license": "MIT",
@@ -125,7 +125,8 @@
     "pre-publish-guard": "node scripts/node/pre-publish-guard.js",
     "safe-publish": "npm run prepare-consumer && npm run build",
     "publish": "npm run release:gate && npm run safe-publish && npm publish --access public",
-    "release:patch": "node scripts/node/release.mjs patch"
+    "release:patch": "node scripts/node/release.mjs patch",
+    "verify:orchestrator-behavior": "npm run build && node scripts/mjs/verify-orchestrator-behavior.mjs"
   },
   "files": [
     "dist/",
@@ -137,6 +138,7 @@
     "scripts/mjs/test-mcp-functionality.mjs",
     "scripts/mjs/validate-mcp-connectivity.cjs",
     "scripts/mjs/validate-postinstall-config.mjs",
+    "scripts/mjs/verify-orchestrator-behavior.mjs",
     "src/opencode/",
     "src/opencode/codex.codex",
     "src/opencode/commands/",

package/scripts/mjs/verify-orchestrator-behavior.mjs

@@ -0,0 +1,122 @@
+#!/usr/bin/env node
+/**
+ * Consumer behavior verify — orchestrator honesty (ships in 0xray tarball).
+ * Run: node node_modules/0xray/scripts/mjs/verify-orchestrator-behavior.mjs
+ */
+import { dirname, join } from 'path';
+import { fileURLToPath, pathToFileURL } from 'url';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const packageRoot = join(__dirname, '../..');
+const dist = (rel) => pathToFileURL(join(packageRoot, 'dist', rel)).href;
+
+let failed = 0;
+
+function pass(name) {
+  console.log(`✅ ${name}`);
+}
+
+function fail(name, detail = '') {
+  failed++;
+  console.error(`❌ ${name}${detail ? ` — ${detail}` : ''}`);
+}
+
+const { dependencyCount, getExecutionPlanner } = await import(
+  dist('mcps/orchestrator/execution/execution-planner.js')
+);
+const { buildLeadDevPlan } = await import(dist('nucleus/autonomy-kernel.js'));
+const { TaskHandler } = await import(
+  dist('mcps/orchestrator/handlers/task-handler.js')
+);
+
+const planner = getExecutionPlanner();
+
+// 1. numeric deps ≠ NaN
+const analysis = await planner.analyzeTaskComplexity([
+  {
+    id: 't1',
+    description: 'Jelly migration',
+    type: 'implement',
+    dependencies: 8,
+  },
+]);
+if (Number.isFinite(analysis.overallComplexity) && analysis.overallComplexity > 0) {
+  pass('numeric dependencyCount produces finite MCP complexity');
+} else {
+  fail('NaN guard', `overallComplexity=${analysis.overallComplexity}`);
+}
+
+// 2. multi-task → ≥3 todos
+const multiPlan = buildLeadDevPlan(
+  'G0 J1 J2',
+  ['implement'],
+  [
+    { description: 'Publish 0xray', type: 'release' },
+    { description: 'Jelly swap', type: 'migration' },
+    { description: 'Wire tests', type: 'test' },
+  ],
+  70,
+);
+const todoCount =
+  multiPlan?.phases.reduce((n, p) => n + p.todos.length, 0) ?? 0;
+if (multiPlan?.requiresPhasedPlan && todoCount >= 3) {
+  pass(`multi-task phased plan (${todoCount} todos)`);
+} else {
+  fail('multi-task plan', `requiresPhasedPlan=${multiPlan?.requiresPhasedPlan} todos=${todoCount}`);
+}
+
+// 3. implement → backend-engineer
+const implAnalysis = await planner.analyzeTaskComplexity([
+  { id: 'impl-1', description: 'swap deps', type: 'implement' },
+]);
+const implAgent = implAnalysis.agentAssignments[0]?.agent;
+if (implAgent === 'backend-engineer') {
+  pass('implement routes to backend-engineer');
+} else {
+  fail('implement routing', `got ${implAgent}`);
+}
+
+// 4. MCP complexity drives phased plan (single task, high MCP score)
+const singleHigh = buildLeadDevPlan(
+  'single complex migration',
+  ['implement'],
+  [{ description: 'single complex migration', type: 'implement' }],
+  70,
+);
+if (singleHigh?.requiresPhasedPlan && (singleHigh.phases.length ?? 0) > 1) {
+  pass('MCP overallComplexity 70 forces phased plan');
+} else {
+  fail('MCP phased plan', `requiresPhasedPlan=${singleHigh?.requiresPhasedPlan}`);
+}
+
+// 5. orchestrate-task defers implement (not fake-complete)
+const handler = new TaskHandler();
+const orch = await handler.handleOrchestrateTask(
+  {
+    description: 'implement feature',
+    sessionId: 'verify-behavior',
+    tasks: [
+      {
+        id: 'be-1',
+        description: 'implementation work',
+        type: 'implement',
+        estimatedComplexity: 40,
+      },
+    ],
+  },
+  { taskHistory: [], activeTasks: new Map() },
+);
+const text = orch.content[0]?.text ?? '';
+if (text.includes('Deferred') && text.includes('❌ FAILED')) {
+  pass('orchestrate-task defers implement (success: false)');
+} else {
+  fail('defer honesty', text.slice(0, 200));
+}
+
+console.log(
+  '\n' +
+    (failed === 0
+      ? '🎉 Orchestrator behavior verify passed (5/5).'
+      : `⚠️  ${failed} behavior check(s) failed.`),
+);
+process.exit(failed === 0 ? 0 : 1);

package/src/mcps/orchestrator/config/agent-capabilities.ts

@@ -13,6 +13,25 @@ import {
   toMemoryCapabilityMap,
   fromMemoryCapabilityMap,
 } from './memory-routing-bridge.js';
+import { routeSubagent } from '../../../nucleus/autonomy-kernel.js';
+
+/** routeSubagent names → AGENT_REGISTRY keys */
+const ROUTE_AGENT_ALIASES: Record<string, string> = {
+  'code-review': 'code-reviewer',
+  'security-audit': 'security-auditor',
+  'bug-triage': 'bug-triage-specialist',
+  'architect-tools': 'architect',
+};
+
+function resolveRoutedAgent(
+  routed: string,
+  capabilities: Map<string, AgentCapability>,
+): string | null {
+  const candidate = ROUTE_AGENT_ALIASES[routed] ?? routed;
+  if (capabilities.has(candidate)) return candidate;
+  if (capabilities.has(routed)) return routed;
+  return null;
+}
 
 const DEFAULT_AGENT_CAPABILITIES: Record<string, AgentCapability> = Object.fromEntries(
   Object.entries(AGENT_REGISTRY).map(([name, entry]) => [
@@ -81,7 +100,14 @@ export class AgentCapabilitiesManager {
     requiredCapabilities: string[],
     complexity: number,
     operationDescription = '',
+    taskType = '',
   ): string | null {
+    if (taskType.trim()) {
+      const routed = routeSubagent(taskType);
+      const resolved = resolveRoutedAgent(routed, this.capabilities);
+      if (resolved) return resolved;
+    }
+
     const provider = getProvider();
 
     if (provider.id !== 'null' && operationDescription) {

package/src/mcps/orchestrator/execution/execution-planner.ts

@@ -243,6 +243,7 @@ export class ExecutionPlanner {
         requiredCaps,
         complexity,
         operationDescription,
+        task.type,
       ) || 'orchestrator';
 
       if (!agentAssignments.has(agent)) {
@@ -298,6 +299,7 @@ export class ExecutionPlanner {
         requiredCaps,
         complexity,
         task.description,
+        task.type,
       ) || 'orchestrator';
 
       if (!assignments.has(agent)) {

package/src/mcps/orchestrator/handlers/complexity-handler.ts

@@ -96,6 +96,7 @@ export class ComplexityHandler {
               primaryDescription,
               taskTypes.length ? taskTypes : ['implement'],
               planTaskInputs,
+              analysis.overallComplexity,
             )
           : null;