0xray 3.5.5 → 4.0.0

package/README.md

@@ -1,22 +1,24 @@
-# xray — MCP-Centric AI Governance OS
+# xray — exo for coding agents
 
-**v3.5.5** — 42 agents · 45 skills · 7 MCP servers · 68 codex terms · 3,226 tests
+**v4.0.0** — a suit that survives the context window. Constitution always on. Temperament scales ceremony. Four host floors. Repertoire is the muscle for handoffs.
+
+Not a catalog of agents. The product is the **skeleton you wear**.
 
 ## Your AI Power Suit
 
 **Your AI Power ⚡️ Suit 🦾** — an exoskeleton that blocks AI slop from becoming real damage.
 
-- learns with **Repertoire** 🧠
-- has a **Solar Ban Hammer** ☀️🔨 (Dynamo governance)
-- can also **Confer** 🗣️ (3-agent internal deliberation)
-
-The core AI Governance OS stack is **complete and open source**. A commercial version is next — powers up the suit further.
+- **Bone** — three-subsystem OS: Inference · External Governance (Dynamo / Codex) · Autonomous Engine (thinDispatch)
+- **Always on** — Codex 11 / 29 / 69, destructive shell, no new MCP/skill/handler surface
+- **Temperament** — `frontier` | `guided` | `strict` | `auto` — how loud the engine is, not whether governance exists
+- **Wear** — Grok, OpenCode, Hermes, OpenClaw. One SSOT gate
+- **Muscle** — Repertoire: auto-enables when the module resolves; session-start writes a one-line resume so the next station is not born amnesiac
 
 ```bash
-npm install 0xray@latest
+npm install 0xray
 ```
 
-xray is the pure v2 three-subsystem AI orchestration framework — **MCP-centric**, governed by Dynamo, and autonomous via thinDispatch. Consumer `npm install 0xray` auto-wires all four platform bridges and seven MCP servers with zero manual config.
+Consumer `npm install 0xray` auto-wires four platform bridges and seven MCP servers. Repertoire **0.2** is the factory memory organ (vendored): seed primitives, in-process routing, extra host MCP `repertoire`. Not an eighth `xray-*` server. Opt out with `"enabled": false, "provider": "repertoire"`.
 
 ## Quick Start
 
@@ -46,6 +48,7 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 
 | Version | Highlights |
 |---------|------------|
+| **4.0.0** | Exo + temperament. Constitution always on; ceremony by host. Repertoire enable-when-resolves + session resume. Survive the context window — still in development, not on npm yet. [vision](docs-site/docs/architecture/v4-vision.md) · [now](docs-site/docs/architecture/v4-now.md) |
 | **3.4.1** | Unified `install-bridges.cjs` on postinstall — OpenCode, Grok, Hermes, OpenClaw in one pass. All 7 MCPs servers via `npx -y 0xray mcp <cmd>` (no `dist/` paths). Canonical `release.mjs` pipeline. |
 | **3.3.1** | Orchestrator confidence gate wired into execution planning. |
 | **3.3.0** | Pluggable **Memory Routing** (`features.json` → `memory_routing`). Repertoire is the default provider in the framework repo. |
@@ -165,7 +168,7 @@ Pluggable `memory_routing` block in `features.json` (validated by `features.sche
 
 **External hosts** (Hermes/Grok): add `repertoire-mcp` to `.mcp.json` — see Repertoire docs.
 
-Consumers without Repertoire: `"memory_routing": { "enabled": false, "provider": "null" }`.
+Opt out: `"memory_routing": { "enabled": false, "provider": "repertoire" }`.
 
 Docs: [memory routing](docs-site/docs/guides/memory-routing.md) · [Repertoire](docs-site/docs/guides/repertoire.md) · [features.json](docs-site/docs/guides/features-json.md) · [all features since 3.1](docs-site/docs/guides/features-since-3.1.md)
 

package/SKILLS.md

@@ -1,6 +1,6 @@
 # 0xray Skills
 
-**v3.5.5** — **45 skills** · invoked via `xray-skills` MCP · synced on postinstall
+**v4.0.0** — **45 skills** · invoked via `xray-skills` MCP · synced on postinstall
 
 xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) across the full software lifecycle. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`), agent `@mentions`, or platform skill directories after postinstall.
 

package/dist/AGENTS.md

@@ -1,15 +1,23 @@
 # xray Agents
 
-Quick reference for the xray AI orchestration framework (**v3.5.5**).
+Quick reference for the xray AI orchestration framework (**v4.0.0**).
 
-**42 agents** · **45 skills** · **7 consumer MCP servers** · **68 codex terms** · **3,226 tests**
+**v4.0.0** — a suit that survives the context window.
+
+**Exo, not catalog.** Three-subsystem OS (Inference · External Governance · Autonomous Engine) · constitution always on · temperament by host · 4 floors · Repertoire when it resolves.
+
+**Temperament:** ceremony (analyze-complexity before spawn, confer) is **guided** by default so free-model OpenCode/Hermes stay in check. Frontier hosts (Grok 4.6 class) with `suit_temperament.profile: auto` **warn** on spawn-without-plan; Codex 11/29/69 still **deny**. Missing `suit_temperament` stays guided. See `docs-site/docs/architecture/v3-from-v2.md`.
+
+## Hot-swap
+
+Before other work, Read `.xray/state/STATION.md`. Compaction and host change are the same cut. Continue the card. Do not restart the job. Grok does not inject the card (OpenCode does) — this Read is the Grok contract. Do not thicken the Grok exo.
 
 ## What is xray?
 
 xray provides intelligent multi-agent orchestration with automatic delegation and Codex compliance validation under the pure v2 three-subsystem model:
 
 - **Inference** — proposals, reflection, memory routing (optional)
-- **External Governance** — Dynamo Solar SSOT, 68-term Codex
+- **External Governance** — Dynamo Solar SSOT, 69-term Codex
 - **Autonomous Engine** — thinDispatch 7-flow, AsideContext, confidence gate
 
 Agents are declared in `src/opencode/agents/*.yml` — the YML SSOT. Skills live in `src/skills/*/SKILL.md` — see [SKILLS.md](SKILLS.md). Consumer projects receive slimmed copies via postinstall (`AGENTS-consumer.md` → `AGENTS.md`, skills synced to platform dirs).

package/dist/CHANGELOG.md

@@ -4,6 +4,71 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Conventional Commits](https://www.conventionalcommits.org/).
 
+## [4.0.0] - 2026-08-28
+
+First ship of the **temperament** line on the **v2 three-subsystem OS** (Inference · External Governance · Autonomous Engine). npm is still `3.5.5`; this line is **4.0.0** on `feat/v4-temperament` — **still in development, not published**.
+
+### ✨ Features
+- **Factory memory organ** — `@0xray/repertoire@0.2.0` vendored as a runtime dependency. Shipped `memory_routing` is **on** (8 factory primitives). Extra host MCP stays `repertoire`, not an 8th `xray-*` server. Compact ingest writes `.xray/state/repertoire/`. Explicit opt-out: `enabled: false` + `provider: "repertoire"`.
+- **Four-floor compact + memory** — station heat matches Repertoire on every host (not only Grok). Compact on Grok Pre/PostCompact, Hermes session-start, OpenCode plugin boot, OpenClaw PreToolUse keeps intent, Working signals, and `Repertoire: on`.
+- **Suit temperament** — `frontier` | `guided` | `strict` | `auto`. Constitution (Codex 11/29/69, destructive shell) always on. Ceremony (spawn-plan deny, confer, synthesis) scales by host.
+- **Grok 4.6 / Grok Build** — `auto` → frontier: spawn missing/stale/todo-mismatch **warns**; confer off unless opted in.
+- **OpenCode / Hermes** (including free models) — stay **guided**: full v2 engine ceremony.
+- **Upgrade safety** — consumers without `suit_temperament` stay **guided**; postinstall merge will not frontier existing Grok installs.
+- **Codex 69** — in `codex.json` (blocking). PreToolUse already denied new MCP/skill/handler files.
+- **OpenClaw host PreToolUse** — `evaluateOpenClawHostPreTool` SSOT + `~/.openclaw/hooks/xray-pre-tool.mjs` on `0xray openclaw install`. Platform still has no native abort API; this is the host adapter.
+- **Repertoire harness** — leftover `memory_routing` default-off auto-enables when sibling `@0xray/repertoire` or `node_modules/@0xray/repertoire` resolves (install **and** runtime provider load). Explicit `enabled: false` + `provider: repertoire` is opt-out. Consumers without the module stay off. Not an 8th 0xRay MCP.
+- **Repertoire working state** — station heat writes `.xray/state/repertoire-working.json` and a `Working:` line on the card. Compact may ingest non-Bedrock matches. Registry primitives are routing; the working file is session memory.
+- **Session resume** — Grok session-start writes `repertoireResume` (one line, signal count) into `session-boot.json` so the next station survives compaction.
+- **Hot-swap station card** — `.xray/state/STATION.md` is the projection of `session-boot.json` (intent, git, **live** plan, last host, Repertoire). PreCompact/PostCompact persist it. AGENTS.md tells the model to Read it (Grok does not inject). Host change sets `hotSwap`. Same-host compact **keeps** the last swap stamp. OpenClaw first PreToolUse heats the card. Intent strips `<user_query>` wrappers. Works without Repertoire.
+- **Framework dogfood wear** — `installAllBridges` on the 0xRay package still patches `<project>/.grok/hooks/0xray.json` and enable-when-resolves. Does not deploy consumer copies over the package.
+- **Repertoire MCP names** — unprefixed server tools; Grok TUI namespaces them as `repertoire__*`. Grok install resolves sibling *or* `node_modules/@0xray/repertoire`.
+- **Configurable archive marker** — `plan_archive_marker_hours` (default 24) in `features.json`
+- **grok_postprocessor_light** — PostToolUse write-tool marker + activity.log
+- **P2 session capture** — git post-commit → `captureSessionInference` when `inference_session_capture.min_commits` met
+- **Docs** — [4.0 vision](docs-site/docs/architecture/v4-vision.md), [v3 from v2](docs-site/docs/architecture/v3-from-v2.md), [temperament](docs-site/docs/guides/v3-temperament.md), [trim list](docs-site/docs/architecture/v3-museum.md).
+
+### 🔄 Changes
+- Product version **4.0.0** throughout (`package.json`, `features.json`, plugin, banners). 3.x entries below are historical (npm `3.0.0`–`3.5.5`).
+- `evaluatePreToolGate` is constitution-first (Grok, Hermes, OpenCode). Grok PreToolUse no longer re-runs 11/29/69/surface/destructive after the SSOT.
+- Codex 69 denies **new** surface only (existing MCP/skill files may be rewired). `paths[]` / `target_notebook` / `prompt` content are in the SSOT collector.
+- **strict** locks `no_new_surface` on (cannot opt out).
+- Dual-host session-boot: Hermes / OpenCode / OpenClaw write `host` + `suit_profile`. A Hermes host ignores leftover Grok boot (and vice versa). Kernel/`generic` uses last boot.
+- Frontier `auto_consult` follows confer opt-in (`confer.enabled` / `confer_on_synthesis`).
+- Session-boot refreshes leftover host/workspace from another machine.
+- Post-commit log maintenance prefers consumer `node_modules/0xray/dist` and ESM `pathToFileURL`.
+
+### 🐛 Fixes
+- OpenClaw plugin ships in the npm tarball; install resolves `dist` then `src`.
+- Bare `node scripts/node/release.mjs` no longer defaults to patch (that path applied npm `3.5.5` → `3.5.6` over the 4.0 plant). Bump type is required. CJS/MJS loadability syntax-checks version/release/reflection/prepare/setup/CI-report scripts instead of executing them.
+- Postinstall wears OpenClaw PreToolUse (stdin hook + plugin link), not only `0xray openclaw install`.
+- Ephemeral e2e consumers no longer overwrite machine Hermes/OpenClaw `xray-consumer-root.txt`.
+- Hermes postinstall copies hook runtimes; plugin enable prefers `xray-hermes`.
+- OpenClaw install writes `opencode-cli` backend when `opencode` is on PATH (CLI pickle, not Zen HTTP).
+- `0xray grok install` always runs `patchGrokHooks` (command strings, PreCompact/PostCompact) even when the plugin already exists. Stale `args[]` / smoke / blaze paths no longer leave compact cold. Patched JSON is also copied to `<project>/.grok/hooks/0xray.json` — the path Grok TUI actually loads.
+- `buildLeadDevPlan` / `buildSynthesisCheckpointPlan` resolve temperament from `projectRoot`, not `process.cwd()` session-boot. A Grok frontier checkout no longer empties guided confer todos in tmp asides and release-gate verify scripts.
+- Stop committing machine-local `.grok/` (absolute hook paths). Template stays `src/integrations/grok/plugin/0xray`.
+- Grok hook `command` strings quote `XRAY_AI_PATH` and the script path so installs with spaces still start PreToolUse (Grok fail-opens on crash).
+- OpenClaw `maybeHeatHostStation` skips only when both sides have a concrete matching session id. An install card with no session no longer swallows first PreToolUse.
+- `postinstall.cjs` always calls `installAllBridges` (framework dogfood wear is no longer gated out of the production caller).
+- `loadFeatures` forwards `grok_postprocessor_light`; PostToolUse can run the advertised write-tool marker path.
+- `0xray grok install` writes `[mcp_servers.repertoire]` to `<project>/.grok/config.toml` and resolves the sibling from the consumer root.
+- OpenClaw 2026.8.2 handshake uses client id `gateway-client` (not `openclaw-tui`). Control-UI id requires device identity; TUI id is rejected on loopback.
+- OpenClaw e2e falls back to `openclaw agent` when token-only WS lacks `operator.write`. Grok e2e asserts `evaluatePreToolGate` SSOT instead of inlined gate names.
+
+### ✅ Tests
+- `suit-temperament.test.ts`; leftover-plan warn; confer frontier opt-in; install-bridges guided pin; Codex 69 rewrite vs create; strict lock; `paths[]`; dual-host boot.
+- `spawn-plan-stale` after archival in `verify-delegation-gate-core` (6/6); OpenCode host in `release-gate`.
+- OpenClaw PreToolUse unit coverage; live temperament probe across Grok, Hermes, OpenCode, OpenClaw.
+- Wear-layout: plugin/hook resolve, ephemeral marker skip, opencode-cli backend write.
+- `grok-hooks-json`: stale `args[]` smoke hooks gain compact events; station compact keeps `hotSwap`.
+- `autonomy-kernel`: plan consults follow `projectRoot` profile; confer/synthesis verify scripts pass tmp, not cwd Grok boot.
+- Repertoire enable-when-resolves + session-start `repertoireResume` unit coverage.
+- Quoted Grok hook commands; postinstall dogfood wear; OpenClaw install-then-first-tool heat; `grok_postprocessor_light` loadFeatures; project Repertoire `config.toml`.
+- Four-floor compact survival attests Codex 11 / 69 / destructive shell plus temperament after the cut. `XRAY_LIVE_SUCCESSOR=1` asks each host CLI to quote the station card.
+
+---
+
 ## [3.5.5] - 2026-06-20
 
 ### ✨ Features
@@ -47,17 +112,6 @@ The format is based on [Conventional Commits](https://www.conventionalcommits.or
 
 ---
 
-## [Unreleased]
-
-### Planned (iterate before next release)
-- **Configurable archive marker** — `plan_archive_marker_hours` controls `spawn-plan-stale` persistence after archival
-- **Verifier coverage** — `spawn-plan-stale` in `verify-delegation-gate-core` (5/5); wired into `release-gate`
-- **Post-commit log maintenance** — consumer path fix (`node_modules/0xray/dist`)
-- **grok_postprocessor_light** — opt-in marker + activity.log on Grok write tools (full PP subset deferred)
-- **P2 session capture** — git post-commit → `captureSessionInference` when threshold met
-
----
-
 ## [3.5.3] - 2026-06-19
 
 ### 🔄 Changes

package/dist/README.md

@@ -1,22 +1,24 @@
-# xray — MCP-Centric AI Governance OS
+# xray — exo for coding agents
 
-**v3.5.5** — 42 agents · 45 skills · 7 MCP servers · 68 codex terms · 3,226 tests
+**v4.0.0** — a suit that survives the context window. Constitution always on. Temperament scales ceremony. Four host floors. Repertoire is the muscle for handoffs.
+
+Not a catalog of agents. The product is the **skeleton you wear**.
 
 ## Your AI Power Suit
 
 **Your AI Power ⚡️ Suit 🦾** — an exoskeleton that blocks AI slop from becoming real damage.
 
-- learns with **Repertoire** 🧠
-- has a **Solar Ban Hammer** ☀️🔨 (Dynamo governance)
-- can also **Confer** 🗣️ (3-agent internal deliberation)
-
-The core AI Governance OS stack is **complete and open source**. A commercial version is next — powers up the suit further.
+- **Bone** — three-subsystem OS: Inference · External Governance (Dynamo / Codex) · Autonomous Engine (thinDispatch)
+- **Always on** — Codex 11 / 29 / 69, destructive shell, no new MCP/skill/handler surface
+- **Temperament** — `frontier` | `guided` | `strict` | `auto` — how loud the engine is, not whether governance exists
+- **Wear** — Grok, OpenCode, Hermes, OpenClaw. One SSOT gate
+- **Muscle** — Repertoire: auto-enables when the module resolves; session-start writes a one-line resume so the next station is not born amnesiac
 
 ```bash
-npm install 0xray@latest
+npm install 0xray
 ```
 
-xray is the pure v2 three-subsystem AI orchestration framework — **MCP-centric**, governed by Dynamo, and autonomous via thinDispatch. Consumer `npm install 0xray` auto-wires all four platform bridges and seven MCP servers with zero manual config.
+Consumer `npm install 0xray` auto-wires four platform bridges and seven MCP servers. Repertoire **0.2** is the factory memory organ (vendored): seed primitives, in-process routing, extra host MCP `repertoire`. Not an eighth `xray-*` server. Opt out with `"enabled": false, "provider": "repertoire"`.
 
 ## Quick Start
 
@@ -46,6 +48,7 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 
 | Version | Highlights |
 |---------|------------|
+| **4.0.0** | Exo + temperament. Constitution always on; ceremony by host. Repertoire enable-when-resolves + session resume. Survive the context window — still in development, not on npm yet. [vision](docs-site/docs/architecture/v4-vision.md) · [now](docs-site/docs/architecture/v4-now.md) |
 | **3.4.1** | Unified `install-bridges.cjs` on postinstall — OpenCode, Grok, Hermes, OpenClaw in one pass. All 7 MCPs servers via `npx -y 0xray mcp <cmd>` (no `dist/` paths). Canonical `release.mjs` pipeline. |
 | **3.3.1** | Orchestrator confidence gate wired into execution planning. |
 | **3.3.0** | Pluggable **Memory Routing** (`features.json` → `memory_routing`). Repertoire is the default provider in the framework repo. |
@@ -165,7 +168,7 @@ Pluggable `memory_routing` block in `features.json` (validated by `features.sche
 
 **External hosts** (Hermes/Grok): add `repertoire-mcp` to `.mcp.json` — see Repertoire docs.
 
-Consumers without Repertoire: `"memory_routing": { "enabled": false, "provider": "null" }`.
+Opt out: `"memory_routing": { "enabled": false, "provider": "repertoire" }`.
 
 Docs: [memory routing](docs-site/docs/guides/memory-routing.md) · [Repertoire](docs-site/docs/guides/repertoire.md) · [features.json](docs-site/docs/guides/features-json.md) · [all features since 3.1](docs-site/docs/guides/features-since-3.1.md)
 

package/dist/SKILLS.md

@@ -1,6 +1,6 @@
 # 0xray Skills
 
-**v3.5.5** — **45 skills** · invoked via `xray-skills` MCP · synced on postinstall
+**v4.0.0** — **45 skills** · invoked via `xray-skills` MCP · synced on postinstall
 
 xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) across the full software lifecycle. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`), agent `@mentions`, or platform skill directories after postinstall.
 

package/dist/cli/commands/hermes-install.js

@@ -64,6 +64,9 @@ async function installForHermes(options = {}) {
             frameworkLogger.log('hermes-integration', 'skills-synced', 'info', { count: skillsCopied });
         }
         wiring.copyHermesFindProjectRootHelper(packageRoot, targetPluginDir);
+        if (wiring.copyHermesHookRuntimes(packageRoot)) {
+            frameworkLogger.log('hermes-integration', 'hooks-copied', 'info', {});
+        }
         const wired = wiring.wireHermesBridge(targetDir);
         console.log(`\x1b[32m✓ Wired Hermes mcp_servers (${wired.count} servers)\x1b[0m`);
         console.log(`\x1b[32m✓ Consumer root → ${targetDir}\x1b[0m`);

package/dist/cli/commands/openclaw-install.js

@@ -5,6 +5,7 @@ import { createRequire } from 'module';
 import { frameworkLogger } from '../../core/framework-logger.js';
 import { syncBuiltinSkills } from './skill-install.js';
 import { OpenClawConfigLoader } from '../../integrations/openclaw/config.js';
+import { writeSuitSessionBoot } from '../../nucleus/suit-temperament.js';
 const __dirname = path.dirname(new URL(import.meta.url).pathname);
 const require = createRequire(import.meta.url);
 const wiring = require(path.join(__dirname, '..', '..', '..', 'scripts', 'node', 'bridge-mcp-wiring.cjs'));
@@ -47,6 +48,19 @@ async function installForOpenClaw(options = {}) {
         const wired = wiring.wireOpenClawBridge(targetDir);
         console.log(`\x1b[32m✓ Wired OpenClaw MCP servers (${wired.count} via ${wired.method}) → ${wired.path}\x1b[0m`);
         console.log(`\x1b[32m✓ Consumer root → ${targetDir}\x1b[0m`);
+        try {
+            writeSuitSessionBoot(targetDir, 'openclaw', { source: '0xray/openclaw-install' });
+        }
+        catch {
+            /* session-boot is best-effort */
+        }
+        const packageRoot = path.resolve(__dirname, '..', '..', '..');
+        const hookInstalled = wiring.installOpenClawHostWear(packageRoot);
+        const cliBackend = wiring.maybeWriteOpenClawCliBackend();
+        frameworkLogger.log('openclaw-integration', 'cli-backend', 'info', { written: cliBackend });
+        if (hookInstalled) {
+            console.log(`\x1b[32m✓ OpenClaw PreToolUse hook → ${hookInstalled}\x1b[0m`);
+        }
         console.log('\n✅ 0xRay OpenClaw integration configured!');
         console.log('Run `openclaw mcp list` to verify MCP servers.');
         console.log('Edit `.xray/config/openclaw.json` for gateway URL, auth token, and device ID.');

package/dist/core/features-config.d.ts

@@ -7,6 +7,7 @@
  * @since 2026-01-25
  */
 import type { MemoryRoutingConfig } from "../memory-routing/types.js";
+import type { SuitHost, SuitProfile, SuitTemperamentConfig } from "../nucleus/suit-temperament.js";
 export type { MemoryRoutingConfig };
 export interface TokenOptimizationConfig {
     enabled: boolean;
@@ -63,7 +64,7 @@ export interface MultiAgentOrchestrationConfig {
     auto_consult_major_work?: boolean;
     /** Codex 69 — block new MCP/skill/handler files via PreToolUse (default true) */
     no_new_surface?: boolean;
-    /** 3.5.0 — PreToolUse gate after delegate-deferred (default true when lead_dev_mode) */
+    /** PreToolUse gate after delegate-deferred (default true when lead_dev_mode) */
     auto_chain_delegations?: boolean;
     /** Hours before unstarted lead-dev plan is archived (default 8) */
     plan_stale_hours?: number;
@@ -81,13 +82,15 @@ export interface MultiAgentOrchestrationConfig {
         on_synthesis?: boolean;
     };
 }
+/** 0xRay 4.0 — nucleus SSOT. See docs-site/docs/guides/v3-temperament.md */
+export type { SuitHost, SuitProfile, SuitTemperamentConfig };
 /** Reflection triggers merged from legacy auto_reflection when synthesis is configured */
 export interface SynthesisReflectionConfig {
     mode?: AutoReflectionConfig['mode'];
     triggers?: AutoReflectionConfig['triggers'];
     thresholds?: AutoReflectionConfig['thresholds'];
 }
-/** 3.6.0 — periodic reflect & realign checkpoint (Synthesis PR1) */
+/** Periodic reflect & realign checkpoint (Synthesis) */
 export interface SynthesisConfig {
     enabled: boolean;
     every_n_gates: number;
@@ -399,10 +402,20 @@ export interface FeaturesConfig {
     auto_reflection?: AutoReflectionConfig;
     inference?: InferenceConfig;
     memory_routing?: MemoryRoutingConfig;
+    /** P2.2 — lightweight Grok write-tool postprocessor marker */
+    grok_postprocessor_light?: boolean;
+    /** P2 — git post-commit session inference capture */
+    inference_session_capture?: {
+        enabled?: boolean;
+        min_commits?: number;
+        lookback_commits?: number;
+    };
     synthesis: SynthesisConfig;
     kernel?: KernelConfig;
     processors?: ProcessorsConfig;
     enforcement?: EnforcementConfig;
+    /** v3 temperament — missing key means guided (existing consumers unchanged) */
+    suit_temperament?: SuitTemperamentConfig;
 }
 export type TaskType = "file_read" | "grep_search" | "simple_edit" | "bulk_refactor" | "architecture_review" | "security_audit" | "git_operations" | "documentation" | "code_generation" | "debugging" | "unknown";
 /**

package/dist/infrastructure/schemas/cloud-schemas.d.ts

@@ -50,8 +50,8 @@ export declare const AWSLoadBalancerConfigSchema: z.ZodObject<{
             name: z.ZodString;
             priority: z.ZodNumber;
             action: z.ZodEnum<{
-                allow: "allow";
                 deny: "deny";
+                allow: "allow";
                 count: "count";
             }>;
             conditions: z.ZodArray<z.ZodObject<{

package/dist/integrations/grok/grok-cli.d.ts

@@ -19,7 +19,10 @@ export interface GrokInstallOptions {
     dryRun?: boolean;
 }
 export declare function installForGrokCLI(options?: GrokInstallOptions): Promise<void>;
+/** Grok TUI reads <project>/.grok/config.toml, not the package copy. */
+export declare function writeProjectRepertoireMcp(projectRoot: string): string | null;
 declare const _default: {
     installForGrokCLI: typeof installForGrokCLI;
+    writeProjectRepertoireMcp: typeof writeProjectRepertoireMcp;
 };
 export default _default;

package/dist/integrations/grok/grok-cli.js

@@ -24,8 +24,8 @@ import { syncBuiltinSkills } from '../../cli/commands/skill-install.js';
 const __dirname = path.dirname(new URL(import.meta.url).pathname);
 const packageRoot = path.resolve(__dirname, '..', '..', '..');
 const requireCjs = createRequire(import.meta.url);
-const { resolveConsumerTargetDir } = requireCjs(path.join(packageRoot, 'scripts/node/install-bridges.cjs'));
-const { XRAY_MCP_SERVERS } = requireCjs(path.join(packageRoot, 'scripts/node/bridge-mcp-wiring.cjs'));
+const { resolveConsumerTargetDir, patchGrokHooks } = requireCjs(path.join(packageRoot, 'scripts/node/install-bridges.cjs'));
+const { XRAY_MCP_SERVERS, resolveRepertoireMcp } = requireCjs(path.join(packageRoot, 'scripts/node/bridge-mcp-wiring.cjs'));
 function registerGrokMcpServers(targetDir) {
     try {
         execSync('which grok', { stdio: 'ignore' });
@@ -90,6 +90,17 @@ export async function installForGrokCLI(options = {}) {
         if (globalCopied > 0) {
             console.log(`\x1b[32m✓ Synced ${globalCopied} builtin skills to ~/.grok/skills/\x1b[0m`);
         }
+        pinGrokPluginToInstalledDist(targetPluginDir, packageRoot, targetDir);
+        wearGrokHookCommands(targetPluginDir, packageRoot, targetDir);
+        const projectPluginDir = path.join(targetDir, '.grok', 'plugins', '0xray');
+        if (projectPluginDir !== targetPluginDir) {
+            if (!fs.existsSync(projectPluginDir) || options.force) {
+                fs.cpSync(sourceDir, projectPluginDir, { recursive: true, force: true });
+            }
+            pinGrokPluginToInstalledDist(projectPluginDir, packageRoot, targetDir);
+            wearGrokHookCommands(projectPluginDir, packageRoot, targetDir);
+        }
+        writeProjectRepertoireMcp(targetDir);
         // Attempt auto-trust (best effort)
         try {
             execSync(`grok plugins trust "${targetPluginDir}"`, { stdio: 'ignore' });
@@ -106,11 +117,88 @@ export async function installForGrokCLI(options = {}) {
         console.log('Restart Grok or run `grok` to load the new hooks and MCP servers.');
     }
     catch (err) {
-        frameworkLogger.log('grok-integration', 'install-error', 'error', { error: err.message });
-        console.error('Failed to install Grok plugin:', err.message);
+        const message = err instanceof Error ? err.message : String(err);
+        frameworkLogger.log('grok-integration', 'install-error', 'error', { error: message });
+        console.error('Failed to install Grok plugin:', message);
     }
     frameworkLogger.log('grok-integration', 'install-complete', 'info', {});
 }
+function wearGrokHookCommands(pluginDir, xrayRoot, targetDir) {
+    patchGrokHooks(pluginDir, xrayRoot, targetDir, (label, action, status, details) => {
+        const level = status === 'success' ||
+            status === 'error' ||
+            status === 'info' ||
+            status === 'debug' ||
+            status === 'warning'
+            ? status
+            : 'info';
+        frameworkLogger.log(label, action, level, details ?? {});
+    }, 'grok-install');
+}
+function pinGrokPluginToInstalledDist(pluginDir, xrayRoot, targetDir) {
+    const hookJs = path.join(xrayRoot, 'dist/integrations/grok/hooks/pre-tool-use.js');
+    const cliJs = path.join(xrayRoot, 'dist/cli/index.js');
+    if (!fs.existsSync(hookJs))
+        return;
+    const hooksPath = path.join(pluginDir, 'hooks', 'hooks.json');
+    if (fs.existsSync(hooksPath)) {
+        const text = fs.readFileSync(hooksPath, 'utf8');
+        fs.writeFileSync(hooksPath, text.split('${XRAY_AI_PATH:-node_modules/0xray}').join(xrayRoot));
+    }
+    const mcpPath = path.join(pluginDir, '.mcp.json');
+    if (fs.existsSync(mcpPath) && fs.existsSync(cliJs)) {
+        const mcp = JSON.parse(fs.readFileSync(mcpPath, 'utf8'));
+        for (const server of Object.values(mcp.mcpServers ?? {})) {
+            if (server.command === 'npx' && Array.isArray(server.args) && server.args.includes('mcp')) {
+                const mcpIdx = server.args.indexOf('mcp');
+                const mcpCmd = server.args[mcpIdx + 1] ?? 'governance';
+                server.command = 'node';
+                server.args = [cliJs, 'mcp', mcpCmd];
+            }
+        }
+        const repertoireMcp = resolveRepertoireMcp(targetDir);
+        if (mcp.mcpServers) {
+            if (repertoireMcp) {
+                mcp.mcpServers.repertoire = {
+                    command: 'node',
+                    args: [repertoireMcp],
+                };
+            }
+            else {
+                delete mcp.mcpServers.repertoire;
+            }
+        }
+        fs.writeFileSync(mcpPath, `${JSON.stringify(mcp, null, 2)}\n`);
+    }
+}
+/** Grok TUI reads <project>/.grok/config.toml, not the package copy. */
+export function writeProjectRepertoireMcp(projectRoot) {
+    const repertoireMcp = resolveRepertoireMcp(projectRoot);
+    if (!repertoireMcp)
+        return null;
+    const grokDir = path.join(projectRoot, '.grok');
+    fs.mkdirSync(grokDir, { recursive: true });
+    const tomlPath = path.join(grokDir, 'config.toml');
+    const block = `[mcp_servers.repertoire]
+command = "node"
+args = [${JSON.stringify(repertoireMcp)}]
+enabled = true
+`;
+    let existing = '';
+    if (fs.existsSync(tomlPath)) {
+        existing = fs.readFileSync(tomlPath, 'utf8');
+    }
+    if (/\[mcp_servers\.repertoire\]/.test(existing)) {
+        existing = existing.replace(/\[mcp_servers\.repertoire\][\s\S]*?(?=\n\[|$)/, block.trim());
+        fs.writeFileSync(tomlPath, existing.endsWith('\n') ? existing : `${existing}\n`);
+    }
+    else {
+        const prefix = existing.trim() ? `${existing.trim()}\n\n` : '';
+        fs.writeFileSync(tomlPath, `${prefix}${block}`);
+    }
+    return tomlPath;
+}
 export default {
     installForGrokCLI,
+    writeProjectRepertoireMcp,
 };

package/dist/integrations/grok/hooks/grok-hook-utils.js

@@ -17,9 +17,16 @@ import {
   getActivePendingDelegations,
   validateSpawnMatchesTodo,
   updatePlanTodoStatusInPlace,
+  loadDelegationGateFeatures,
 } from '../../hooks/delegation-gate-runtime.mjs';
 import { isConferPendingForSession } from '../../hooks/confer-hook-runtime.mjs';
 import { getActiveUserAsideBoot } from '../../hooks/user-aside-hook-runtime.mjs';
+import {
+  applyStationHeat,
+  buildRepertoireResume as stationRepertoireResume,
+  readExistingBoot,
+  writeStationMarkdown,
+} from '../../hooks/station-hook-runtime.mjs';
 
 export {
   checkPendingDelegationGate,
@@ -131,9 +138,20 @@ export function resolveSiblingWorkspaceRoots(root = workspaceRoot()) {
   }
 }
 
+export function buildRepertoireResume(root = workspaceRoot()) {
+  return stationRepertoireResume(root);
+}
+
 export function loadFeatures(root = workspaceRoot()) {
   const featuresPath = resolveFeaturesPath(root);
-  if (!featuresPath) return { lead_dev_mode: true, no_new_surface: true, per_suite_triage: true };
+  if (!featuresPath) {
+    return {
+      lead_dev_mode: true,
+      no_new_surface: true,
+      per_suite_triage: true,
+      grok_postprocessor_light: false,
+    };
+  }
   try {
     const data = JSON.parse(fs.readFileSync(featuresPath, 'utf8'));
     const orch = data.multi_agent_orchestration ?? {};
@@ -142,6 +160,7 @@ export function loadFeatures(root = workspaceRoot()) {
       no_new_surface: orch.no_new_surface !== false,
       per_suite_test_triage: orch.per_suite_test_triage !== false,
       auto_chain_delegations: orch.auto_chain_delegations !== false,
+      grok_postprocessor_light: data.grok_postprocessor_light === true,
       sibling_repos: resolveSiblingWorkspaceRoots(root),
     };
   } catch {
@@ -150,6 +169,7 @@ export function loadFeatures(root = workspaceRoot()) {
       no_new_surface: true,
       per_suite_triage: true,
       auto_chain_delegations: true,
+      grok_postprocessor_light: false,
       sibling_repos: [],
     };
   }
@@ -188,9 +208,11 @@ export function extractToolContext(event) {
   return { toolName, toolInput, paths, content, cmd: String(toolInput.command || '') };
 }
 
-export function checkCodexPatterns(content) {
+export function checkCodexPatterns(content, options = {}) {
   if (!content) return null;
-  for (const { message, pattern } of CODEX_BLOCK_PATTERNS) {
+  const only = Array.isArray(options.terms) ? options.terms : null;
+  for (const { message, pattern, terms } of CODEX_BLOCK_PATTERNS) {
+    if (only && !terms.some((n) => only.includes(n))) continue;
     if (pattern.test(content)) return message;
     pattern.lastIndex = 0;
   }
@@ -259,16 +281,27 @@ export function buildSessionBootPayload(root, source = '0xray/grok-session-start
     extra.sessionId || process.env.GROK_SESSION_ID || process.env.GROK_SESSION || null;
   const conferPending = loadConferPending(root, sessionId);
   const userAsideBoot = getActiveUserAsideBoot(root, sessionId);
+  const gateFeatures = loadDelegationGateFeatures(root, 'grok');
+  const frontier = gateFeatures.ceremony === 'lite';
+  const existing = readExistingBoot(root);
+  const heat = applyStationHeat(root, extra.host || 'grok', extra, existing);
   return {
     hook: source,
     lead_dev_mode: features.lead_dev_mode,
     no_new_surface: features.no_new_surface,
+    host: extra.host || 'grok',
+    suit_profile: gateFeatures.suit_profile ?? 'guided',
+    ceremony: gateFeatures.ceremony ?? 'full',
+    spawn_plan_mode: gateFeatures.spawn_plan_mode ?? 'deny',
     codexBlockingTermCount: blockingTerms.length,
     codexTerms: [59, 67, 68, 69],
     rules: features.lead_dev_mode ? LEAD_DEV_RULES : [],
-    mcpIntake: 'xray-orchestrator → analyze-complexity (required before spawn_subagent)',
-    enforcement: 'PreToolUse hook — codex patterns + surface area + spawn gate',
+    mcpIntake: frontier
+      ? 'xray-orchestrator analyze-complexity optional on frontier (spawn warns, does not deny)'
+      : 'xray-orchestrator → analyze-complexity (required before spawn_subagent)',
+    enforcement: 'PreToolUse hook — Codex constitution always on; ceremony scales by suit_temperament',
     workspaceRoot: root,
+    ...heat,
     ...(siblingRoots.length > 0 ? { siblingWorkspaceRoots: siblingRoots } : {}),
     ...(conferPending ? { conferPending: true, conferTrigger: 'analyze-complexity at synthesis checkpoint' } : {}),
     ...(userAsideBoot ?? {}),
@@ -276,6 +309,7 @@ export function buildSessionBootPayload(root, source = '0xray/grok-session-start
     timestamp: new Date().toISOString(),
     source,
     ...extra,
+    ...heat,
   };
 }
 
@@ -284,19 +318,31 @@ export function writeSessionBoot(root, payload) {
     const stateDir = path.join(root, '.xray', 'state');
     fs.mkdirSync(stateDir, { recursive: true });
     fs.writeFileSync(sessionBootPath(root), JSON.stringify(payload, null, 2));
+    writeStationMarkdown(root, payload);
     return sessionBootPath(root);
   } catch {
     return null;
   }
 }
 
-/** Boot on SessionStart, UserPromptSubmit, or first PreToolUse if missing. */
+export function sessionBootNeedsRefresh(existing, root) {
+  if (!existing || typeof existing !== 'object') return true;
+  if (existing.lead_dev_mode === undefined) return true;
+  if (existing.host !== 'grok') return true;
+  if (!existing.suit_profile) return true;
+  if (existing.workspaceRoot && existing.workspaceRoot !== root) return true;
+  if (!existing.repertoireResume) return true;
+  if (!existing.stationLine) return true;
+  return false;
+}
+
+/** Boot on SessionStart, UserPromptSubmit, or first PreToolUse if missing/stale. */
 export function ensureSessionBoot(root = workspaceRoot(), source = '0xray/grok-boot') {
   const bootPath = sessionBootPath(root);
   if (fs.existsSync(bootPath)) {
     try {
       const existing = JSON.parse(fs.readFileSync(bootPath, 'utf8'));
-      if (existing.lead_dev_mode !== undefined) return bootPath;
+      if (!sessionBootNeedsRefresh(existing, root)) return bootPath;
     } catch {
       /* rewrite corrupt boot */
     }