0xray 3.5.4 → 4.0.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "3.5.4",
+  "version": "4.0.0",
   "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
   "readme": "README.md",
   "license": "MIT",
@@ -64,7 +64,7 @@
     "version:bump": "node scripts/node/version-manager.mjs",
     "version": "node scripts/node/version-manager.mjs",
     "prebuild": "rm -rf dist tsconfig.tsbuildinfo tsconfig.*.tsbuildinfo",
-    "build": "tsc && mkdir -p dist/public dist/scripts && cp -r public/* dist/public/ && cp scripts/hooks/pre-command dist/scripts/ && cp scripts/hooks/pre-command.mjs dist/scripts/ && cp README.md AGENTS.md SKILLS.md CHANGELOG.md LICENSE .gitignore.default dist/ && find src -name '*.mjs' ! -path '*/__tests__/*' | while read f; do tgt=\"dist/${f#src/}\"; mkdir -p \"$(dirname $tgt)\"; cp \"$f\" \"$tgt\"; done && for dir in skills integrations mcps; do find src/$dir -type f ! -name '*.ts' ! -path '*/.pytest_cache/*' | while read f; do tgt=\"dist/${f#src/}\"; mkdir -p \"$(dirname $tgt)\"; cp \"$f\" \"$tgt\"; done; done && mkdir -p dist/plugin && (find dist/plugin -name '*codex-injection*.js' -exec cp {} dist/plugin/xray-codex-injection.js \\; 2>/dev/null || true) && cp -r src/opencode/ .opencode/ && mkdir -p .xray && for f in codex.json features.json features.schema.json config.json; do cp xray/$f .xray/$f 2>/dev/null || true; done",
+    "build": "tsc && chmod +x dist/cli/index.js && mkdir -p dist/public dist/scripts && cp -r public/* dist/public/ && cp scripts/hooks/pre-command dist/scripts/ && cp scripts/hooks/pre-command.mjs dist/scripts/ && cp README.md AGENTS.md SKILLS.md CHANGELOG.md LICENSE .gitignore.default dist/ && find src -name '*.mjs' ! -path '*/__tests__/*' | while read f; do tgt=\"dist/${f#src/}\"; mkdir -p \"$(dirname $tgt)\"; cp \"$f\" \"$tgt\"; done && for dir in skills integrations mcps; do find src/$dir -type f ! -name '*.ts' ! -path '*/.pytest_cache/*' | while read f; do tgt=\"dist/${f#src/}\"; mkdir -p \"$(dirname $tgt)\"; cp \"$f\" \"$tgt\"; done; done && mkdir -p dist/plugin && (find dist/plugin -name '*codex-injection*.js' -exec cp {} dist/plugin/xray-codex-injection.js \\; 2>/dev/null || true) && cp -r src/opencode/ .opencode/ && mkdir -p .opencode/skills && cp -R src/skills/. .opencode/skills/ && mkdir -p .xray && for f in codex.json features.json features.schema.json config.json; do cp xray/$f .xray/$f 2>/dev/null || true; done",
     "build:all": "npm run build",
     "ci-install": "npm ci",
     "clean": "rm -rf dist tsconfig.tsbuildinfo tsconfig.*.tsbuildinfo",
@@ -129,11 +129,19 @@
     "verify:orchestrator-behavior": "npm run build && node scripts/mjs/verify-orchestrator-behavior.mjs",
     "verify:grok-delegation-gate": "npm run build && node scripts/mjs/verify-grok-delegation-gate.mjs && node scripts/mjs/verify-grok-synthesis-gate.mjs",
     "verify:grok-synthesis-gate": "npm run build && node scripts/mjs/verify-grok-synthesis-gate.mjs",
-    "verify:hermes-delegation-gate": "npm run build && node scripts/mjs/verify-hermes-delegation-gate.mjs",
+    "verify:hermes-delegation-gate": "npm run build && node scripts/mjs/verify-hermes-delegation-gate.mjs && node scripts/mjs/verify-hermes-session-start.mjs",
     "verify:delegation-gate": "npm run build && node scripts/mjs/verify-delegation-gate-core.mjs --host=grok && node scripts/mjs/verify-delegation-gate-core.mjs --host=hermes && node scripts/mjs/verify-delegation-gate-core.mjs --host=opencode && node scripts/mjs/verify-grok-delegation-gate.mjs && node scripts/mjs/verify-grok-synthesis-gate.mjs && node scripts/mjs/verify-hermes-delegation-gate.mjs",
-    "verify:synthesis": "npm run build && node scripts/mjs/verify-synthesis-core.mjs && node scripts/mjs/verify-synthesis-gate-core.mjs && node scripts/mjs/verify-synthesis-outcome-core.mjs && node scripts/mjs/verify-synthesis-p2-core.mjs && node scripts/mjs/verify-synthesis-e2e-core.mjs",
+    "verify:synthesis": "npm run build && node scripts/mjs/verify-synthesis-core.mjs && node scripts/mjs/verify-synthesis-gate-core.mjs && node scripts/mjs/verify-synthesis-outcome-core.mjs && node scripts/mjs/verify-synthesis-p2-core.mjs && node scripts/mjs/verify-synthesis-e2e-core.mjs && node scripts/mjs/verify-confer-core.mjs",
+    "verify:confer": "npm run build && node scripts/mjs/verify-confer-core.mjs",
+    "verify:user-aside": "npm run build && node scripts/mjs/verify-user-aside-core.mjs",
+    "verify:pipeline-facets": "npm run build && node scripts/mjs/verify-pipeline-facets.mjs",
     "verify:find-project-root": "node scripts/mjs/verify-find-project-root-core.mjs",
-    "verify:consumer-gitignore": "node scripts/mjs/verify-consumer-gitignore-core.mjs"
+    "verify:consumer-gitignore": "node scripts/mjs/verify-consumer-gitignore-core.mjs",
+    "verify:pre-commit-diff": "node scripts/mjs/verify-pre-commit-diff-core.mjs",
+    "verify:pre-push-diff": "node scripts/mjs/verify-pre-push-diff-core.mjs",
+    "verify:temperament-live": "node scripts/mjs/verify-temperament-live.mjs",
+    "verify:four-floor-compact": "node scripts/mjs/verify-four-floor-compact.mjs",
+    "verify:four-floor-compact:live": "XRAY_LIVE_SUCCESSOR=1 node scripts/mjs/verify-four-floor-compact.mjs"
   },
   "files": [
     "dist/",
@@ -149,6 +157,14 @@
     "scripts/mjs/verify-grok-delegation-gate.mjs",
     "scripts/mjs/verify-grok-synthesis-gate.mjs",
     "scripts/mjs/verify-hermes-delegation-gate.mjs",
+    "scripts/mjs/verify-hermes-session-start.mjs",
+    "scripts/mjs/verify-pre-push-diff-core.mjs",
+    "scripts/mjs/verify-confer-core.mjs",
+    "scripts/mjs/verify-user-aside-core.mjs",
+    "scripts/mjs/verify-pipeline-facets.mjs",
+    "scripts/mjs/verify-temperament-live.mjs",
+    "scripts/mjs/verify-four-floor-compact.mjs",
+    "scripts/mjs/run-repertoire-mcp.mjs",
     "scripts/mjs/verify-delegation-gate-core.mjs",
     "scripts/mjs/delegation-gate-fixture.mjs",
     "src/opencode/",
@@ -158,6 +174,7 @@
     "src/opencode/openclaw/",
     "src/opencode/workflows/",
     "src/integrations/grok/plugin/0xray/",
+    "src/integrations/openclaw/plugin/",
     "src/skills/",
     "src/mcps/",
     ".plugin/",
@@ -185,9 +202,11 @@
     ".xray/features.schema.json",
     ".xray/config.json",
     ".gitignore.default",
-    "LICENSE"
+    "LICENSE",
+    "vendor/@0xray/repertoire/"
   ],
   "dependencies": {
+    "@0xray/repertoire": "file:./vendor/@0xray/repertoire",
     "@modelcontextprotocol/sdk": "^1.0.4",
     "commander": "^11.1.0",
     "express": "^5.2.1",

package/scripts/hooks/install-hooks.cjs

@@ -30,19 +30,34 @@ if (!fs.existsSync(gitHooksDir)) {
 }
 
 const isConsumer = packageRoot.includes("node_modules");
+
+function firstExistingRelative(root, rels) {
+  return rels.find((rel) => fs.existsSync(path.join(root, rel))) || rels[0];
+}
+
 const runHookRelativePath = isConsumer
-  ? "node_modules/0xray/scripts/hooks/run-hook.js"
+  ? firstExistingRelative(targetDir, [
+      "node_modules/0xray/scripts/hooks/run-hook.js",
+      "node_modules/0xray/dist/scripts/hooks/run-hook.js",
+    ])
   : "scripts/hooks/run-hook.js";
 const loadReflectionRelativePath = isConsumer
-  ? "node_modules/0xray/scripts/node/load-reflection-config.mjs"
+  ? firstExistingRelative(targetDir, [
+      "node_modules/0xray/scripts/node/load-reflection-config.mjs",
+      "node_modules/0xray/dist/scripts/node/load-reflection-config.mjs",
+    ])
   : "scripts/node/load-reflection-config.mjs";
 const autoReflectionRelativePath = isConsumer
-  ? "node_modules/0xray/scripts/node/auto-reflection-generator.mjs"
+  ? firstExistingRelative(targetDir, [
+      "node_modules/0xray/scripts/node/auto-reflection-generator.mjs",
+      "node_modules/0xray/dist/scripts/node/auto-reflection-generator.mjs",
+    ])
   : "scripts/node/auto-reflection-generator.mjs";
 
 function hookRunnerExists(projectRoot) {
   return (
     fs.existsSync(path.join(projectRoot, "node_modules/0xray/scripts/hooks/run-hook.js")) ||
+    fs.existsSync(path.join(projectRoot, "node_modules/0xray/dist/scripts/hooks/run-hook.js")) ||
     fs.existsSync(path.join(projectRoot, "scripts/hooks/run-hook.js"))
   );
 }
@@ -108,9 +123,9 @@ BRANCH=$(git rev-parse --abbrev-ref HEAD)
 ) &
 
 MODE="minimal"
-COMMIT_THRESHOLD=25
+COMMIT_THRESHOLD=50
 DAYS_THRESHOLD=14
-AUTO_GENERATE=true
+AUTO_GENERATE=false
 PROMPT_USER=true
 
 if command -v node >/dev/null 2>&1; then
@@ -119,7 +134,7 @@ if command -v node >/dev/null 2>&1; then
     export PROJECT_ROOT="$PROJECT_ROOT"
     REFLECTION_JSON=$(node "$LOAD_SCRIPT" --json 2>/dev/null || echo '{}')
     MODE=$(node -e 'const c=JSON.parse(process.argv[1]);process.stdout.write(String(c.mode||"minimal"))' "$REFLECTION_JSON")
-    COMMIT_THRESHOLD=$(node -e 'const c=JSON.parse(process.argv[1]);process.stdout.write(String(c.commitThreshold??25))' "$REFLECTION_JSON")
+    COMMIT_THRESHOLD=$(node -e 'const c=JSON.parse(process.argv[1]);process.stdout.write(String(c.commitThreshold??50))' "$REFLECTION_JSON")
     DAYS_THRESHOLD=$(node -e 'const c=JSON.parse(process.argv[1]);process.stdout.write(String(c.daysThreshold??14))' "$REFLECTION_JSON")
     AUTO_GENERATE=$(node -e 'const c=JSON.parse(process.argv[1]);process.stdout.write(c.autoGenerate===false?"false":"true")' "$REFLECTION_JSON")
     PROMPT_USER=$(node -e 'const c=JSON.parse(process.argv[1]);process.stdout.write(c.promptUser===false?"false":"true")' "$REFLECTION_JSON")

package/scripts/hooks/run-hook.js

@@ -20,8 +20,9 @@
  */
 
 import { existsSync, readFileSync, writeFileSync, mkdirSync, appendFileSync } from "fs";
-import { join, dirname } from "path";
+import { join, dirname, resolve } from "path";
 import { execSync, exec, execFileSync } from "child_process";
+import { fileURLToPath, pathToFileURL } from "url";
 
 // ── Parse arguments ──────────────────────────────────────────
 
@@ -203,82 +204,152 @@ function runTypeScriptCheck(files) {
   }
 }
 
-// ── Codex validation ─────────────────────────────────────────
+// ── Codex validation (diff-hunk scoped) ──────────────────────
+
+/** Parse + lines from a unified diff (staged or commit-range). */
+export function parseAddedLinesFromDiff(diff) {
+  const addedLines = [];
+  for (const line of diff.split("\n")) {
+    if (
+      line.startsWith("+++") ||
+      line.startsWith("---") ||
+      line.startsWith("@@") ||
+      line.startsWith("diff ") ||
+      line.startsWith("index ")
+    ) {
+      continue;
+    }
+    if (line.startsWith("+")) {
+      addedLines.push(line.slice(1));
+    }
+  }
+  return addedLines;
+}
 
-async function runCodexValidation(files) {
-  /**
-   * Run lightweight codex validation on files.
-   * Uses dynamic import of framework modules when available.
-   */
-  log("Running Codex validation...");
+/**
+ * Collect added lines per file from git diff.
+ * scope `staged` → --cached (pre-commit); scope `range` → COMMIT_RANGE (pre-push).
+ */
+export function getAddedLinesByFile(
+  files,
+  { scope = "staged", range = null, root = projectRoot } = {},
+) {
+  const addedByFile = new Map();
+
+  for (const file of files) {
+    if (!/\.(ts|tsx|js|jsx|mjs)$/.test(file)) continue;
+    try {
+      const gitArgs =
+        scope === "range" && range
+          ? ["diff", range, "-U0", "--", file]
+          : ["diff", "--cached", "-U0", "--", file];
+      const diff = execFileSync("git", gitArgs, {
+        cwd: root,
+        encoding: "utf-8",
+        stdio: ["pipe", "pipe", "pipe"],
+      });
+      const addedLines = parseAddedLinesFromDiff(diff);
+      if (addedLines.length > 0) {
+        addedByFile.set(file, addedLines);
+      }
+    } catch {
+      // Deletions-only or unreadable diff — skip codex for this file
+    }
+  }
 
-  const tsFiles = files.filter((f) => /\.(ts|tsx)$/.test(f));
-  const jsFiles = files.filter((f) => /\.(js|jsx|mjs)$/.test(f));
+  return addedByFile;
+}
 
-  if (tsFiles.length === 0 && jsFiles.length === 0) {
-    return { passed: true, warnings: [], errors: [] };
-  }
+/** Pre-commit: staged diff hunks only. */
+export function getStagedAddedLinesByFile(files, root = projectRoot) {
+  return getAddedLinesByFile(files, { scope: "staged", root });
+}
+
+/** Pre-push: added lines in commit range (e.g. remote..local). */
+export function getRangeAddedLinesByFile(files, range, root = projectRoot) {
+  return getAddedLinesByFile(files, { scope: "range", range, root });
+}
 
-  // Quick static checks without framework dependency
+export function scanAddedLinesForCodex(file, addedLines) {
   const errors = [];
   const warnings = [];
+  const content = addedLines.join("\n");
+  const lines = addedLines;
 
-  for (const file of [...tsFiles, ...jsFiles]) {
-    const filePath = join(projectRoot, file);
-    if (!existsSync(filePath)) continue;
+  const consoleLogLines = lines.reduce((acc, line, i) => {
+    if (/\bconsole\.(log|warn|error)\b/.test(line) && !line.includes("NOSONAR")) {
+      acc.push(i + 1);
+    }
+    return acc;
+  }, []);
+  if (consoleLogLines.length > 0) {
+    errors.push(
+      `${file}: console.log/warn/error in staged diff at hunk line(s) ${consoleLogLines.slice(0, 3).join(", ")}`,
+    );
+  }
 
-    try {
-      const content = readFileSync(filePath, "utf-8");
-      const lines = content.split("\n");
+  const todoLines = lines.reduce((acc, line, i) => {
+    if (/\/\/\s*(TODO|FIXME|HACK|XXX)\b/i.test(line)) {
+      acc.push(i + 1);
+    }
+    return acc;
+  }, []);
+  if (todoLines.length > 0) {
+    warnings.push(`${file}: ${todoLines.length} TODO/FIXME in staged diff`);
+  }
 
-      // Check for console.log (codex violation)
-      const consoleLogLines = lines.reduce((acc, line, i) => {
-        if (/\bconsole\.(log|warn|error)\b/.test(line) && !line.includes("NOSONAR")) {
-          acc.push(i + 1);
-        }
-        return acc;
-      }, []);
-      if (consoleLogLines.length > 0) {
-        errors.push(`${file}: console.log/warn/error found at lines ${consoleLogLines.slice(0, 3).join(", ")}`);
-      }
+  const tsIgnoreLines = lines.reduce((acc, line, i) => {
+    if (/@ts-ignore|@ts-nocheck|@ts-expect-error/.test(line)) {
+      acc.push(i + 1);
+    }
+    return acc;
+  }, []);
+  if (tsIgnoreLines.length > 0) {
+    warnings.push(`${file}: ${tsIgnoreLines.length} @ts-ignore/@ts-nocheck in staged diff`);
+  }
 
-      // Check for TODO/FIXME
-      const todoLines = lines.reduce((acc, line, i) => {
-        if (/\/\/\s*(TODO|FIXME|HACK|XXX)\b/i.test(line)) {
-          acc.push(i + 1);
-        }
-        return acc;
-      }, []);
-      if (todoLines.length > 0) {
-        warnings.push(`${file}: ${todoLines.length} TODO/FIXME comment(s) found`);
+  if (/\bany\b/.test(content)) {
+    const anyLines = lines.reduce((acc, line, i) => {
+      if (/\bany\b/.test(line) && !line.includes("//") && !line.includes("*")) {
+        acc.push(i + 1);
       }
+      return acc;
+    }, []);
+    if (anyLines.length > 0) {
+      warnings.push(`${file}: ${anyLines.length} use(s) of 'any' in staged diff`);
+    }
+  }
 
-      // Check for @ts-ignore
-      const tsIgnoreLines = lines.reduce((acc, line, i) => {
-        if (/@ts-ignore|@ts-nocheck|@ts-expect-error/.test(line)) {
-          acc.push(i + 1);
-        }
-        return acc;
-      }, []);
-      if (tsIgnoreLines.length > 0) {
-        warnings.push(`${file}: ${tsIgnoreLines.length} @ts-ignore/@ts-nocheck found`);
-      }
+  return { errors, warnings };
+}
 
-      // Check for any type
-      if (/\bany\b/.test(content)) {
-        const anyLines = lines.reduce((acc, line, i) => {
-          if (/\bany\b/.test(line) && !line.includes("//") && !line.includes("*")) {
-            acc.push(i + 1);
-          }
-          return acc;
-        }, []);
-        if (anyLines.length > 3) {
-          warnings.push(`${file}: ${anyLines.length} uses of 'any' type`);
-        }
-      }
-    } catch {
-      // Skip unreadable files
-    }
+async function runCodexValidation(files, options = {}) {
+  /**
+   * Run lightweight codex validation on diff hunks only (staged or commit range).
+   */
+  const scope = options.scope || "staged";
+  const range = options.range || null;
+  const scopeLabel = scope === "range" && range ? `range ${range}` : "staged";
+  log(`Running Codex validation (diff-hunk scope: ${scopeLabel})...`);
+
+  const codexFiles = files.filter((f) => /\.(ts|tsx|js|jsx|mjs)$/.test(f));
+  if (codexFiles.length === 0) {
+    return { passed: true, warnings: [], errors: [] };
+  }
+
+  const addedByFile =
+    scope === "range" && range
+      ? getRangeAddedLinesByFile(codexFiles, range)
+      : getStagedAddedLinesByFile(codexFiles);
+  const errors = [];
+  const warnings = [];
+
+  for (const file of codexFiles) {
+    const addedLines = addedByFile.get(file);
+    if (!addedLines || addedLines.length === 0) continue;
+    const scan = scanAddedLinesForCodex(file, addedLines);
+    errors.push(...scan.errors);
+    warnings.push(...scan.warnings);
   }
 
   const passed = errors.length === 0;
@@ -301,8 +372,9 @@ async function runLogMaintenance() {
 
   try {
     const distDirs = [
-      join(projectRoot, "dist"),
+      join(projectRoot, "node_modules", "0xray", "dist"),
       join(projectRoot, "node_modules", "xray", "dist"),
+      join(projectRoot, "dist"),
     ];
 
     for (const distDir of distDirs) {
@@ -310,7 +382,9 @@ async function runLogMaintenance() {
       if (!existsSync(triggerPath)) continue;
 
       try {
-        const { archiveLogFiles, cleanupLogFiles } = await import(triggerPath);
+        const { archiveLogFiles, cleanupLogFiles } = await import(
+          pathToFileURL(triggerPath).href
+        );
 
         // Archive logs
         try {
@@ -375,7 +449,7 @@ async function runLogMaintenance() {
 
 // ── Comprehensive validation (pre-push) ──────────────────────
 
-async function runFullValidation(files) {
+async function runFullValidation(files, commitRange = null) {
   /**
    * Full validation suite for pre-push.
    * Includes TypeScript check, codex validation, and test hints.
@@ -385,8 +459,11 @@ async function runFullValidation(files) {
   // TypeScript check
   const tsResult = runTypeScriptCheck(files);
 
-  // Codex validation
-  const codexResult = await runCodexValidation(files);
+  // Codex validation — commit range diff (not --cached)
+  const codexResult = await runCodexValidation(files, {
+    scope: commitRange ? "range" : "staged",
+    range: commitRange,
+  });
 
   // Check for test files
   const sourceFiles = files.filter((f) =>
@@ -466,6 +543,67 @@ async function handlePreCommit() {
   process.exit(0);
 }
 
+function loadFeaturesJson() {
+  const featuresPath = join(projectRoot, ".xray", "features.json");
+  if (!existsSync(featuresPath)) return {};
+  try {
+    return JSON.parse(readFileSync(featuresPath, "utf-8"));
+  } catch {
+    return {};
+  }
+}
+
+function resolveXrayDistModule(relPath) {
+  const candidates = [
+    join(projectRoot, "node_modules", "0xray", "dist", relPath),
+    join(projectRoot, "node_modules", "xray", "dist", relPath),
+    join(projectRoot, "dist", relPath),
+  ];
+  return candidates.find((p) => existsSync(p)) || null;
+}
+
+async function runSessionInferenceCapture() {
+  const features = loadFeaturesJson();
+  const cfg = features.inference_session_capture ?? {};
+  if (cfg.enabled !== true) {
+    log("Session inference capture disabled");
+    return;
+  }
+
+  const modulePath = resolveXrayDistModule("inference/session-capture.js");
+  if (!modulePath) {
+    log("Session capture module missing (node_modules/0xray/dist or dist)");
+    return;
+  }
+
+  const minCommits = typeof cfg.min_commits === "number" && cfg.min_commits > 0
+    ? cfg.min_commits
+    : 3;
+  const lookback = typeof cfg.lookback_commits === "number" && cfg.lookback_commits > 0
+    ? cfg.lookback_commits
+    : 20;
+
+  try {
+    const mod = await import(pathToFileURL(modulePath).href);
+    const inference = mod.captureSessionInference(`HEAD~${lookback}`, "HEAD");
+    if (!inference) {
+      log("Session capture: no commits in span");
+      return;
+    }
+    if ((inference.metrics?.commits ?? 0) < minCommits) {
+      log(
+        `Session capture: ${inference.metrics?.commits ?? 0} commits < min ${minCommits}`,
+      );
+      return;
+    }
+    const outDir = join(projectRoot, "docs", "inference");
+    const saved = mod.saveSessionInference(inference, outDir);
+    log(`Session capture saved ${saved}`);
+  } catch (err) {
+    logError(`Session capture failed: ${err.message}`);
+  }
+}
+
 async function handlePostCommit() {
   const commitSha = process.env.COMMIT_SHA || "unknown";
   const branch = process.env.BRANCH || "unknown";
@@ -474,6 +612,7 @@ async function handlePostCommit() {
 
   // Run log maintenance
   await runLogMaintenance();
+  await runSessionInferenceCapture();
 
   // Record metrics
   recordMetrics(0, 0);
@@ -487,15 +626,20 @@ async function handlePrePush() {
     .split("\n")
     .map((f) => f.trim())
     .filter(Boolean);
+  const commitRange = (process.env.COMMIT_RANGE || "").trim() || null;
 
   if (changedFiles.length === 0) {
     log("No changed files to validate");
     process.exit(0);
   }
 
-  log(`Validating ${changedFiles.length} changed file(s) for push...`);
+  log(
+    `Validating ${changedFiles.length} changed file(s) for push` +
+      (commitRange ? ` (range ${commitRange})` : "") +
+      "...",
+  );
 
-  const result = await runFullValidation(changedFiles);
+  const result = await runFullValidation(changedFiles, commitRange);
 
   if (!result.passed) {
     console.error("\n❌ Pre-push validation failed:\n");
@@ -586,22 +730,27 @@ const handlers = {
   "pre-command": handlePreCommand,
 };
 
-const handler = handlers[hookType];
-if (!handler) {
-  console.error(`Unknown hook type: ${hookType}`);
-  console.error(`Valid types: ${Object.keys(handlers).join(", ")}`);
-  process.exit(1);
-}
+const isDirectRun =
+  process.argv[1] &&
+  resolve(process.argv[1]) === resolve(fileURLToPath(import.meta.url));
 
-// Run with timing
-const startTime = Date.now();
-handler()
-  .then(() => {
-    const duration = Date.now() - startTime;
-    log(`Hook completed in ${duration}ms`);
-  })
-  .catch((err) => {
-    logError(`Hook crashed: ${err.message}`);
-    console.error(`0xRay hook error: ${err.message}`);
+if (isDirectRun) {
+  const handler = handlers[hookType];
+  if (!handler) {
+    console.error(`Unknown hook type: ${hookType}`);
+    console.error(`Valid types: ${Object.keys(handlers).join(", ")}`);
     process.exit(1);
-  });
+  }
+
+  const startTime = Date.now();
+  handler()
+    .then(() => {
+      const duration = Date.now() - startTime;
+      log(`Hook completed in ${duration}ms`);
+    })
+    .catch((err) => {
+      logError(`Hook crashed: ${err.message}`);
+      console.error(`0xRay hook error: ${err.message}`);
+      process.exit(1);
+    });
+}

package/scripts/mjs/run-repertoire-mcp.mjs

@@ -0,0 +1,39 @@
+#!/usr/bin/env node
+/**
+ * CWD-proof Repertoire MCP launcher for the 0xray framework checkout.
+ * Grok/OpenCode spawn this in-repo path so they never have to resolve `../repertoire`.
+ */
+import { spawn } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const xrayRoot = join(dirname(fileURLToPath(import.meta.url)), '../..');
+const candidates = [
+  join(xrayRoot, 'node_modules', '@0xray', 'repertoire', 'dist', 'mcp', 'server.js'),
+  join(xrayRoot, 'vendor', '@0xray', 'repertoire', 'dist', 'mcp', 'server.js'),
+  join(xrayRoot, '..', 'repertoire', 'dist', 'mcp', 'server.js'),
+];
+const server = candidates.find((p) => existsSync(p));
+if (!server) {
+  process.stderr.write(
+    'repertoire MCP missing — build ../repertoire or install @0xray/repertoire\n',
+  );
+  process.exit(1);
+}
+
+const child = spawn(process.execPath, [server], {
+  stdio: 'inherit',
+  env: process.env,
+});
+child.on('error', (err) => {
+  process.stderr.write(`repertoire MCP spawn failed: ${err.message}\n`);
+  process.exit(1);
+});
+child.on('exit', (code, signal) => {
+  if (signal) {
+    process.kill(process.pid, signal);
+    return;
+  }
+  process.exit(code ?? 1);
+});