0xray 3.5.5 → 4.0.1

package/README.md

@@ -1,22 +1,26 @@
-# xray — MCP-Centric AI Governance OS
+# xray — exo for coding agents
 
-**v3.5.5** — 42 agents · 45 skills · 7 MCP servers · 68 codex terms · 3,226 tests
+**v4.0.1** — a suit that survives the context window
+
+![0xRay v4 exo — CONSTITUTION ON](docs-site/static/img/exo-skeleton-v4.jpg)
+
+Not a catalog of agents. The product is the **skeleton you wear**.
 
 ## Your AI Power Suit
 
 **Your AI Power ⚡️ Suit 🦾** — an exoskeleton that blocks AI slop from becoming real damage.
 
-- learns with **Repertoire** 🧠
-- has a **Solar Ban Hammer** ☀️🔨 (Dynamo governance)
-- can also **Confer** 🗣️ (3-agent internal deliberation)
-
-The core AI Governance OS stack is **complete and open source**. A commercial version is next — powers up the suit further.
+- **Bone** — three-subsystem OS: Inference · External Governance (Dynamo / Codex) · Autonomous Engine (thinDispatch)
+- **Always on** — Codex 11 / 29 / 69, destructive shell, no new MCP/skill/handler surface
+- **Temperament** — `frontier` | `guided` | `strict` | `auto` — how loud the engine is, not whether governance exists
+- **Wear** — Grok, OpenCode, Hermes, OpenClaw. One SSOT gate
+- **Muscle** — Repertoire: auto-enables when the module resolves; session-start writes a one-line resume so the next station is not born amnesiac
 
 ```bash
-npm install 0xray@latest
+npm install 0xray
 ```
 
-xray is the pure v2 three-subsystem AI orchestration framework — **MCP-centric**, governed by Dynamo, and autonomous via thinDispatch. Consumer `npm install 0xray` auto-wires all four platform bridges and seven MCP servers with zero manual config.
+Consumer `npm install 0xray` auto-wires four platform bridges and seven MCP servers. Repertoire **0.2** is the factory memory organ (vendored): seed primitives, in-process routing, extra host MCP `repertoire`. Not an eighth `xray-*` server. Opt out with `"enabled": false, "provider": "repertoire"`.
 
 ## Quick Start
 
@@ -46,6 +50,7 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 
 | Version | Highlights |
 |---------|------------|
+| **4.0.0** | Exo + temperament. Constitution always on; ceremony by host. Repertoire organ on (vendored 0.2). Station card survives compact/host-swap. **On npm.** [vision](docs-site/docs/architecture/v4-vision.md) · [now](docs-site/docs/architecture/v4-now.md) |
 | **3.4.1** | Unified `install-bridges.cjs` on postinstall — OpenCode, Grok, Hermes, OpenClaw in one pass. All 7 MCPs servers via `npx -y 0xray mcp <cmd>` (no `dist/` paths). Canonical `release.mjs` pipeline. |
 | **3.3.1** | Orchestrator confidence gate wired into execution planning. |
 | **3.3.0** | Pluggable **Memory Routing** (`features.json` → `memory_routing`). Repertoire is the default provider in the framework repo. |
@@ -146,11 +151,11 @@ Pluggable `memory_routing` block in `features.json` (validated by `features.sche
 "memory_routing": {
   "enabled": true,
   "provider": "repertoire",
-  "module_path": "../repertoire/dist/provider/memory-routing-provider.js",
+  "module_path": "node_modules/@0xray/repertoire/dist/provider/memory-routing-provider.js",
   "config": {
-    "dataDir": "../repertoire/data",
-    "signalsPath": "../repertoire/data/curated_signals.json",
-    "logDir": "../repertoire/logs/groover-inference"
+    "signalsPath": "node_modules/@0xray/repertoire/data/curated_signals.json",
+    "statePath": ".xray/state/repertoire/inference-state.json",
+    "feedbackDir": ".xray/state/repertoire/feedback"
   }
 }
 ```
@@ -165,7 +170,7 @@ Pluggable `memory_routing` block in `features.json` (validated by `features.sche
 
 **External hosts** (Hermes/Grok): add `repertoire-mcp` to `.mcp.json` — see Repertoire docs.
 
-Consumers without Repertoire: `"memory_routing": { "enabled": false, "provider": "null" }`.
+Opt out: `"memory_routing": { "enabled": false, "provider": "repertoire" }`.
 
 Docs: [memory routing](docs-site/docs/guides/memory-routing.md) · [Repertoire](docs-site/docs/guides/repertoire.md) · [features.json](docs-site/docs/guides/features-json.md) · [all features since 3.1](docs-site/docs/guides/features-since-3.1.md)
 
@@ -180,7 +185,7 @@ Docs: [memory routing](docs-site/docs/guides/memory-routing.md) · [Repertoire](
 
 ## Governance & Codex
 
-- **68 terms** in `.xray/codex.json` — core, architecture, testing, performance, security, operations, governance
+- **69 terms** in `.xray/codex.json` — core, architecture, testing, performance, security, operations, governance (Codex 69: no new MCP/skill/handler surface)
 - CodexPolicyService — Governance-owned SSOT for codex loading
 - Pre-governance gate blocks non-compliant proposals
 - Active codex snapshot via `get_active_codex` MCP tool
@@ -188,27 +193,25 @@ Docs: [memory routing](docs-site/docs/guides/memory-routing.md) · [Repertoire](
 
 ## Testing
 
-| Suite | Status (v3.4.1) |
+| Suite | Status (v4.0.1) |
 |-------|-----------------|
-| Unit / Integration | 185 files, **3,226 passed** |
-| OpenCode E2E | 42/42 solo, 34/34 orchestrator |
-| Grok CLI E2E | 62/0 failures (v3.2.0 verified) |
-| OpenClaw E2E | 9/9 (v3.2.0 verified) |
-| Hermes E2E | 44/0/0 (v3.2.0 verified) |
-| Consumer smoke | `npm run release:gate` — pack → clean install → 7 MCPs + 4 bridges |
+| Four-floor consumer e2e | OpenCode 34/0 · Grok 63/0 · Hermes 39/0/2 · OpenClaw 96/0/1 (npm 4.0.0 pack) |
+| Consumer smoke | `npm run release:gate` — pack → clean install → 7 MCPs + 4 bridges + organ on |
 
 ```bash
 npm test
-npm run release:gate    # full release gate
+npm run release:gate    # full release gate (before upload)
+npm run release:npm     # gate + prepare + npm publish --access public
 ```
 
 ## Release
 
+Product **4.0.0** is on npm. Do **not** run `release:major` to ship a 4.x fix (that becomes 5.0.0). Do **not** put a `scripts.publish` lifecycle that re-runs the gate after the registry PUT.
+
 ```bash
-npm run release:patch   # canonical pipeline
-npm run release:minor
-npm run release:major
-npm run release:patch -- --dry-run
+npm run release:gate
+npm run release:npm     # after gate is green; uses npm publish --access public
+npm run release:patch   # version bump pipeline (not for a already-bumped 4.0.0)
 ```
 
 Pipeline: reconcile-version → release-gate (build + test + consumer smoke) → CHANGELOG/README/AGENTS artifacts → commit → tag → npm publish.

package/SKILLS.md

@@ -1,6 +1,6 @@
 # 0xray Skills
 
-**v3.5.5** — **45 skills** · invoked via `xray-skills` MCP · synced on postinstall
+**v4.0.1** — **45 skills** · invoked via `xray-skills` MCP · synced on postinstall
 
 xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) across the full software lifecycle. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`), agent `@mentions`, or platform skill directories after postinstall.
 
@@ -157,7 +157,7 @@ npx 0xray skill:install <source>
 |---------|------------------|
 | **Memory routing** (v3.3) | Researcher uses Repertoire signals; optional `@0xray/repertoire` MCP |
 | **AsideContext** (v3.2) | Orchestrator subcontexts during skill dispatch |
-| **7 MCP servers** (v3.4.1) | `xray-skills` is the primary skill invocation surface |
+| **7 MCP servers** (v4.0.1) | `xray-skills` is the primary skill invocation surface |
 
 Docs: [AGENTS.md](AGENTS.md) · [README.md](README.md) · [Docusaurus guides](docs-site/docs/guides/)
 

package/dist/AGENTS.md

@@ -1,15 +1,23 @@
 # xray Agents
 
-Quick reference for the xray AI orchestration framework (**v3.5.5**).
+Quick reference for the xray AI orchestration framework (**v4.0.1**).
 
-**42 agents** · **45 skills** · **7 consumer MCP servers** · **68 codex terms** · **3,226 tests**
+**v4.0.1** — a suit that survives the context window.
+
+**Exo, not catalog.** Three-subsystem OS (Inference · External Governance · Autonomous Engine) · constitution always on · temperament by host · 4 floors · Repertoire when it resolves.
+
+**Temperament:** ceremony (analyze-complexity before spawn, confer) is **guided** by default so free-model OpenCode/Hermes stay in check. Frontier hosts (Grok 4.6 class) with `suit_temperament.profile: auto` **warn** on spawn-without-plan; Codex 11/29/69 still **deny**. Missing `suit_temperament` stays guided. See `docs-site/docs/architecture/v3-from-v2.md`.
+
+## Hot-swap
+
+Before other work, Read `.xray/state/STATION.md`. Compaction and host change are the same cut. Continue the card. Do not restart the job. Grok does not inject the card (OpenCode does) — this Read is the Grok contract. Do not thicken the Grok exo.
 
 ## What is xray?
 
 xray provides intelligent multi-agent orchestration with automatic delegation and Codex compliance validation under the pure v2 three-subsystem model:
 
-- **Inference** — proposals, reflection, memory routing (optional)
-- **External Governance** — Dynamo Solar SSOT, 68-term Codex
+- **Inference** — proposals, reflection, memory routing (Repertoire organ on in 4.0)
+- **External Governance** — Dynamo Solar SSOT, 69-term Codex
 - **Autonomous Engine** — thinDispatch 7-flow, AsideContext, confidence gate
 
 Agents are declared in `src/opencode/agents/*.yml` — the YML SSOT. Skills live in `src/skills/*/SKILL.md` — see [SKILLS.md](SKILLS.md). Consumer projects receive slimmed copies via postinstall (`AGENTS-consumer.md` → `AGENTS.md`, skills synced to platform dirs).
@@ -30,12 +38,12 @@ Registered in `.mcp.json`, invoked via `npx -y 0xray mcp <cmd>`:
 
 Governance deliberation: **code-review**, **security-audit**, **researcher** within the 7-server set.
 
-## Postinstall (v3.4.1)
+## Postinstall (v4.0.1)
 
 `postinstall.cjs` → `installAllBridges()`:
 
 1. `AGENTS-consumer.md` → `AGENTS.md`
-2. `SKILLS.md` + 46 skills → platform skill directories
+2. `SKILLS.md` + 45 skills → platform skill directories
 3. `.gitignore.default` → `.gitignore` (if absent)
 4. `.xray/` config (`codex.json`, `features.json`, `config.json`)
 5. `.mcp.json` (7 servers)
@@ -50,11 +58,11 @@ Governance deliberation: **code-review**, **security-audit**, **researcher** wit
 "memory_routing": {
   "enabled": true,
   "provider": "repertoire",
-  "module_path": "../repertoire/dist/provider/memory-routing-provider.js",
+  "module_path": "node_modules/@0xray/repertoire/dist/provider/memory-routing-provider.js",
   "config": {
-    "dataDir": "../repertoire/data",
-    "signalsPath": "../repertoire/data/curated_signals.json",
-    "logDir": "../repertoire/logs/groover-inference"
+    "signalsPath": "node_modules/@0xray/repertoire/data/curated_signals.json",
+    "statePath": ".xray/state/repertoire/inference-state.json",
+    "feedbackDir": ".xray/state/repertoire/feedback"
   }
 }
 ```

package/dist/CHANGELOG.md

@@ -4,6 +4,87 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Conventional Commits](https://www.conventionalcommits.org/).
 
+## [4.0.1] - 2026-09-02
+
+Patch on the 4.0 temperament line. npm **4.0.0** stays latest until this tag publishes.
+
+### 🐛 Bug Fixes
+- CLI `-V` / `--version` no longer dumps a Commander stack after `exitOverride`
+- Hermes: post-processor logs `[nudge]`; e2e calls `session-start`
+- OpenClaw e2e reads `plugins.entries` (OpenClaw 2026.8.2)
+- Release gate: consumer smoke expects organ **on**; no `scripts.publish` after the registry PUT; reconcile allows tagged-but-unpublished
+
+### 📚 Documentation
+- Archive catalog / enterprise Docusaurus boiler; live site is exo wear
+- Version-manager stamps live Docusaurus kernel headers (no archived `docs-site/docs/README.md`)
+
+---
+
+## [4.0.0] - 2026-09-02
+
+First ship of the **temperament** line on the **v2 three-subsystem OS** (Inference · External Governance · Autonomous Engine). npm **4.0.0**. Tag `v4.0.0` on `0xRayAI/xray` `main` (`f80b42c`).
+
+### ✨ Features
+- **Factory memory organ** — `@0xray/repertoire@0.2.0` vendored as a runtime dependency. Shipped `memory_routing` is **on** (8 factory primitives). Extra host MCP stays `repertoire`, not an 8th `xray-*` server. Compact ingest writes `.xray/state/repertoire/`. Explicit opt-out: `enabled: false` + `provider: "repertoire"`.
+- **Four-floor compact + memory** — station heat matches Repertoire on every host (not only Grok). Compact on Grok Pre/PostCompact, Hermes session-start, OpenCode plugin boot, OpenClaw PreToolUse keeps intent, Working signals, and `Repertoire: on`.
+- **Suit temperament** — `frontier` | `guided` | `strict` | `auto`. Constitution (Codex 11/29/69, destructive shell) always on. Ceremony (spawn-plan deny, confer, synthesis) scales by host.
+- **Grok 4.6 / Grok Build** — `auto` → frontier: spawn missing/stale/todo-mismatch **warns**; confer off unless opted in.
+- **OpenCode / Hermes** (including free models) — stay **guided**: full v2 engine ceremony.
+- **Upgrade safety** — consumers without `suit_temperament` stay **guided**; postinstall merge will not frontier existing Grok installs.
+- **Codex 69** — in `codex.json` (blocking). PreToolUse already denied new MCP/skill/handler files.
+- **OpenClaw host PreToolUse** — `evaluateOpenClawHostPreTool` SSOT + `~/.openclaw/hooks/xray-pre-tool.mjs` on `0xray openclaw install`. Platform still has no native abort API; this is the host adapter.
+- **Repertoire harness** — leftover `memory_routing` default-off auto-enables when sibling `@0xray/repertoire` or `node_modules/@0xray/repertoire` resolves (install **and** runtime provider load). Explicit `enabled: false` + `provider: repertoire` is opt-out. Consumers without the module stay off. Not an 8th 0xRay MCP.
+- **Repertoire working state** — station heat writes `.xray/state/repertoire-working.json` and a `Working:` line on the card. Compact may ingest non-Bedrock matches. Registry primitives are routing; the working file is session memory.
+- **Session resume** — Grok session-start writes `repertoireResume` (one line, signal count) into `session-boot.json` so the next station survives compaction.
+- **Hot-swap station card** — `.xray/state/STATION.md` is the projection of `session-boot.json` (intent, git, **live** plan, last host, Repertoire). PreCompact/PostCompact persist it. AGENTS.md tells the model to Read it (Grok does not inject). Host change sets `hotSwap`. Same-host compact **keeps** the last swap stamp. OpenClaw first PreToolUse heats the card. Intent strips `<user_query>` wrappers. Works without Repertoire.
+- **Framework dogfood wear** — `installAllBridges` on the 0xRay package still patches `<project>/.grok/hooks/0xray.json` and enable-when-resolves. Does not deploy consumer copies over the package.
+- **Repertoire MCP names** — unprefixed server tools; Grok TUI namespaces them as `repertoire__*`. Grok install resolves sibling *or* `node_modules/@0xray/repertoire`.
+- **Configurable archive marker** — `plan_archive_marker_hours` (default 24) in `features.json`
+- **grok_postprocessor_light** — PostToolUse write-tool marker + activity.log
+- **P2 session capture** — git post-commit → `captureSessionInference` when `inference_session_capture.min_commits` met
+- **Docs** — [4.0 vision](docs-site/docs/architecture/v4-vision.md), [v3 from v2](docs-site/docs/architecture/v3-from-v2.md), [temperament](docs-site/docs/guides/v3-temperament.md), [trim list](docs-site/docs/architecture/v3-museum.md).
+
+### 🔄 Changes
+- Product version **4.0.0** throughout (`package.json`, `features.json`, plugin, banners). 3.x entries below are historical (npm `3.0.0`–`3.5.5`).
+- `evaluatePreToolGate` is constitution-first (Grok, Hermes, OpenCode). Grok PreToolUse no longer re-runs 11/29/69/surface/destructive after the SSOT.
+- Codex 69 denies **new** surface only (existing MCP/skill files may be rewired). `paths[]` / `target_notebook` / `prompt` content are in the SSOT collector.
+- **strict** locks `no_new_surface` on (cannot opt out).
+- Dual-host session-boot: Hermes / OpenCode / OpenClaw write `host` + `suit_profile`. A Hermes host ignores leftover Grok boot (and vice versa). Kernel/`generic` uses last boot.
+- Frontier `auto_consult` follows confer opt-in (`confer.enabled` / `confer_on_synthesis`).
+- Session-boot refreshes leftover host/workspace from another machine.
+- Post-commit log maintenance prefers consumer `node_modules/0xray/dist` and ESM `pathToFileURL`.
+
+### 🐛 Fixes
+- OpenClaw plugin ships in the npm tarball; install resolves `dist` then `src`.
+- Bare `node scripts/node/release.mjs` no longer defaults to patch (that path applied npm `3.5.5` → `3.5.6` over the 4.0 plant). Bump type is required. CJS/MJS loadability syntax-checks version/release/reflection/prepare/setup/CI-report scripts instead of executing them.
+- Postinstall wears OpenClaw PreToolUse (stdin hook + plugin link), not only `0xray openclaw install`.
+- Ephemeral e2e consumers no longer overwrite machine Hermes/OpenClaw `xray-consumer-root.txt`.
+- Hermes postinstall copies hook runtimes; plugin enable prefers `xray-hermes`.
+- OpenClaw install writes `opencode-cli` backend when `opencode` is on PATH (CLI pickle, not Zen HTTP).
+- `0xray grok install` always runs `patchGrokHooks` (command strings, PreCompact/PostCompact) even when the plugin already exists. Stale `args[]` / smoke / blaze paths no longer leave compact cold. Patched JSON is also copied to `<project>/.grok/hooks/0xray.json` — the path Grok TUI actually loads.
+- `buildLeadDevPlan` / `buildSynthesisCheckpointPlan` resolve temperament from `projectRoot`, not `process.cwd()` session-boot. A Grok frontier checkout no longer empties guided confer todos in tmp asides and release-gate verify scripts.
+- Stop committing machine-local `.grok/` (absolute hook paths). Template stays `src/integrations/grok/plugin/0xray`.
+- Grok hook `command` strings quote `XRAY_AI_PATH` and the script path so installs with spaces still start PreToolUse (Grok fail-opens on crash).
+- OpenClaw `maybeHeatHostStation` skips only when both sides have a concrete matching session id. An install card with no session no longer swallows first PreToolUse.
+- `postinstall.cjs` always calls `installAllBridges` (framework dogfood wear is no longer gated out of the production caller).
+- `loadFeatures` forwards `grok_postprocessor_light`; PostToolUse can run the advertised write-tool marker path.
+- `0xray grok install` writes `[mcp_servers.repertoire]` to `<project>/.grok/config.toml` and resolves the sibling from the consumer root.
+- OpenClaw 2026.8.2 handshake uses client id `gateway-client` (not `openclaw-tui`). Control-UI id requires device identity; TUI id is rejected on loopback.
+- OpenClaw e2e falls back to `openclaw agent` when token-only WS lacks `operator.write`. Grok e2e asserts `evaluatePreToolGate` SSOT instead of inlined gate names.
+
+### ✅ Tests
+- `suit-temperament.test.ts`; leftover-plan warn; confer frontier opt-in; install-bridges guided pin; Codex 69 rewrite vs create; strict lock; `paths[]`; dual-host boot.
+- `spawn-plan-stale` after archival in `verify-delegation-gate-core` (6/6); OpenCode host in `release-gate`.
+- OpenClaw PreToolUse unit coverage; live temperament probe across Grok, Hermes, OpenCode, OpenClaw.
+- Wear-layout: plugin/hook resolve, ephemeral marker skip, opencode-cli backend write.
+- `grok-hooks-json`: stale `args[]` smoke hooks gain compact events; station compact keeps `hotSwap`.
+- `autonomy-kernel`: plan consults follow `projectRoot` profile; confer/synthesis verify scripts pass tmp, not cwd Grok boot.
+- Repertoire enable-when-resolves + session-start `repertoireResume` unit coverage.
+- Quoted Grok hook commands; postinstall dogfood wear; OpenClaw install-then-first-tool heat; `grok_postprocessor_light` loadFeatures; project Repertoire `config.toml`.
+- Four-floor compact survival attests Codex 11 / 69 / destructive shell plus temperament after the cut. `XRAY_LIVE_SUCCESSOR=1` asks each host CLI to quote the station card.
+
+---
+
 ## [3.5.5] - 2026-06-20
 
 ### ✨ Features
@@ -47,17 +128,6 @@ The format is based on [Conventional Commits](https://www.conventionalcommits.or
 
 ---
 
-## [Unreleased]
-
-### Planned (iterate before next release)
-- **Configurable archive marker** — `plan_archive_marker_hours` controls `spawn-plan-stale` persistence after archival
-- **Verifier coverage** — `spawn-plan-stale` in `verify-delegation-gate-core` (5/5); wired into `release-gate`
-- **Post-commit log maintenance** — consumer path fix (`node_modules/0xray/dist`)
-- **grok_postprocessor_light** — opt-in marker + activity.log on Grok write tools (full PP subset deferred)
-- **P2 session capture** — git post-commit → `captureSessionInference` when threshold met
-
----
-
 ## [3.5.3] - 2026-06-19
 
 ### 🔄 Changes

package/dist/README.md

@@ -1,22 +1,26 @@
-# xray — MCP-Centric AI Governance OS
+# xray — exo for coding agents
 
-**v3.5.5** — 42 agents · 45 skills · 7 MCP servers · 68 codex terms · 3,226 tests
+**v4.0.1** — a suit that survives the context window
+
+![0xRay v4 exo — CONSTITUTION ON](docs-site/static/img/exo-skeleton-v4.jpg)
+
+Not a catalog of agents. The product is the **skeleton you wear**.
 
 ## Your AI Power Suit
 
 **Your AI Power ⚡️ Suit 🦾** — an exoskeleton that blocks AI slop from becoming real damage.
 
-- learns with **Repertoire** 🧠
-- has a **Solar Ban Hammer** ☀️🔨 (Dynamo governance)
-- can also **Confer** 🗣️ (3-agent internal deliberation)
-
-The core AI Governance OS stack is **complete and open source**. A commercial version is next — powers up the suit further.
+- **Bone** — three-subsystem OS: Inference · External Governance (Dynamo / Codex) · Autonomous Engine (thinDispatch)
+- **Always on** — Codex 11 / 29 / 69, destructive shell, no new MCP/skill/handler surface
+- **Temperament** — `frontier` | `guided` | `strict` | `auto` — how loud the engine is, not whether governance exists
+- **Wear** — Grok, OpenCode, Hermes, OpenClaw. One SSOT gate
+- **Muscle** — Repertoire: auto-enables when the module resolves; session-start writes a one-line resume so the next station is not born amnesiac
 
 ```bash
-npm install 0xray@latest
+npm install 0xray
 ```
 
-xray is the pure v2 three-subsystem AI orchestration framework — **MCP-centric**, governed by Dynamo, and autonomous via thinDispatch. Consumer `npm install 0xray` auto-wires all four platform bridges and seven MCP servers with zero manual config.
+Consumer `npm install 0xray` auto-wires four platform bridges and seven MCP servers. Repertoire **0.2** is the factory memory organ (vendored): seed primitives, in-process routing, extra host MCP `repertoire`. Not an eighth `xray-*` server. Opt out with `"enabled": false, "provider": "repertoire"`.
 
 ## Quick Start
 
@@ -46,6 +50,7 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 
 | Version | Highlights |
 |---------|------------|
+| **4.0.0** | Exo + temperament. Constitution always on; ceremony by host. Repertoire organ on (vendored 0.2). Station card survives compact/host-swap. **On npm.** [vision](docs-site/docs/architecture/v4-vision.md) · [now](docs-site/docs/architecture/v4-now.md) |
 | **3.4.1** | Unified `install-bridges.cjs` on postinstall — OpenCode, Grok, Hermes, OpenClaw in one pass. All 7 MCPs servers via `npx -y 0xray mcp <cmd>` (no `dist/` paths). Canonical `release.mjs` pipeline. |
 | **3.3.1** | Orchestrator confidence gate wired into execution planning. |
 | **3.3.0** | Pluggable **Memory Routing** (`features.json` → `memory_routing`). Repertoire is the default provider in the framework repo. |
@@ -146,11 +151,11 @@ Pluggable `memory_routing` block in `features.json` (validated by `features.sche
 "memory_routing": {
   "enabled": true,
   "provider": "repertoire",
-  "module_path": "../repertoire/dist/provider/memory-routing-provider.js",
+  "module_path": "node_modules/@0xray/repertoire/dist/provider/memory-routing-provider.js",
   "config": {
-    "dataDir": "../repertoire/data",
-    "signalsPath": "../repertoire/data/curated_signals.json",
-    "logDir": "../repertoire/logs/groover-inference"
+    "signalsPath": "node_modules/@0xray/repertoire/data/curated_signals.json",
+    "statePath": ".xray/state/repertoire/inference-state.json",
+    "feedbackDir": ".xray/state/repertoire/feedback"
   }
 }
 ```
@@ -165,7 +170,7 @@ Pluggable `memory_routing` block in `features.json` (validated by `features.sche
 
 **External hosts** (Hermes/Grok): add `repertoire-mcp` to `.mcp.json` — see Repertoire docs.
 
-Consumers without Repertoire: `"memory_routing": { "enabled": false, "provider": "null" }`.
+Opt out: `"memory_routing": { "enabled": false, "provider": "repertoire" }`.
 
 Docs: [memory routing](docs-site/docs/guides/memory-routing.md) · [Repertoire](docs-site/docs/guides/repertoire.md) · [features.json](docs-site/docs/guides/features-json.md) · [all features since 3.1](docs-site/docs/guides/features-since-3.1.md)
 
@@ -180,7 +185,7 @@ Docs: [memory routing](docs-site/docs/guides/memory-routing.md) · [Repertoire](
 
 ## Governance & Codex
 
-- **68 terms** in `.xray/codex.json` — core, architecture, testing, performance, security, operations, governance
+- **69 terms** in `.xray/codex.json` — core, architecture, testing, performance, security, operations, governance (Codex 69: no new MCP/skill/handler surface)
 - CodexPolicyService — Governance-owned SSOT for codex loading
 - Pre-governance gate blocks non-compliant proposals
 - Active codex snapshot via `get_active_codex` MCP tool
@@ -188,27 +193,25 @@ Docs: [memory routing](docs-site/docs/guides/memory-routing.md) · [Repertoire](
 
 ## Testing
 
-| Suite | Status (v3.4.1) |
+| Suite | Status (v4.0.1) |
 |-------|-----------------|
-| Unit / Integration | 185 files, **3,226 passed** |
-| OpenCode E2E | 42/42 solo, 34/34 orchestrator |
-| Grok CLI E2E | 62/0 failures (v3.2.0 verified) |
-| OpenClaw E2E | 9/9 (v3.2.0 verified) |
-| Hermes E2E | 44/0/0 (v3.2.0 verified) |
-| Consumer smoke | `npm run release:gate` — pack → clean install → 7 MCPs + 4 bridges |
+| Four-floor consumer e2e | OpenCode 34/0 · Grok 63/0 · Hermes 39/0/2 · OpenClaw 96/0/1 (npm 4.0.0 pack) |
+| Consumer smoke | `npm run release:gate` — pack → clean install → 7 MCPs + 4 bridges + organ on |
 
 ```bash
 npm test
-npm run release:gate    # full release gate
+npm run release:gate    # full release gate (before upload)
+npm run release:npm     # gate + prepare + npm publish --access public
 ```
 
 ## Release
 
+Product **4.0.0** is on npm. Do **not** run `release:major` to ship a 4.x fix (that becomes 5.0.0). Do **not** put a `scripts.publish` lifecycle that re-runs the gate after the registry PUT.
+
 ```bash
-npm run release:patch   # canonical pipeline
-npm run release:minor
-npm run release:major
-npm run release:patch -- --dry-run
+npm run release:gate
+npm run release:npm     # after gate is green; uses npm publish --access public
+npm run release:patch   # version bump pipeline (not for a already-bumped 4.0.0)
 ```
 
 Pipeline: reconcile-version → release-gate (build + test + consumer smoke) → CHANGELOG/README/AGENTS artifacts → commit → tag → npm publish.

package/dist/SKILLS.md

@@ -1,6 +1,6 @@
 # 0xray Skills
 
-**v3.5.5** — **45 skills** · invoked via `xray-skills` MCP · synced on postinstall
+**v4.0.1** — **45 skills** · invoked via `xray-skills` MCP · synced on postinstall
 
 xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) across the full software lifecycle. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`), agent `@mentions`, or platform skill directories after postinstall.
 
@@ -157,7 +157,7 @@ npx 0xray skill:install <source>
 |---------|------------------|
 | **Memory routing** (v3.3) | Researcher uses Repertoire signals; optional `@0xray/repertoire` MCP |
 | **AsideContext** (v3.2) | Orchestrator subcontexts during skill dispatch |
-| **7 MCP servers** (v3.4.1) | `xray-skills` is the primary skill invocation surface |
+| **7 MCP servers** (v4.0.1) | `xray-skills` is the primary skill invocation surface |
 
 Docs: [AGENTS.md](AGENTS.md) · [README.md](README.md) · [Docusaurus guides](docs-site/docs/guides/)
 

package/dist/cli/commands/hermes-install.js

@@ -64,6 +64,9 @@ async function installForHermes(options = {}) {
             frameworkLogger.log('hermes-integration', 'skills-synced', 'info', { count: skillsCopied });
         }
         wiring.copyHermesFindProjectRootHelper(packageRoot, targetPluginDir);
+        if (wiring.copyHermesHookRuntimes(packageRoot)) {
+            frameworkLogger.log('hermes-integration', 'hooks-copied', 'info', {});
+        }
         const wired = wiring.wireHermesBridge(targetDir);
         console.log(`\x1b[32m✓ Wired Hermes mcp_servers (${wired.count} servers)\x1b[0m`);
         console.log(`\x1b[32m✓ Consumer root → ${targetDir}\x1b[0m`);

package/dist/cli/commands/openclaw-install.js

@@ -5,6 +5,7 @@ import { createRequire } from 'module';
 import { frameworkLogger } from '../../core/framework-logger.js';
 import { syncBuiltinSkills } from './skill-install.js';
 import { OpenClawConfigLoader } from '../../integrations/openclaw/config.js';
+import { writeSuitSessionBoot } from '../../nucleus/suit-temperament.js';
 const __dirname = path.dirname(new URL(import.meta.url).pathname);
 const require = createRequire(import.meta.url);
 const wiring = require(path.join(__dirname, '..', '..', '..', 'scripts', 'node', 'bridge-mcp-wiring.cjs'));
@@ -47,6 +48,19 @@ async function installForOpenClaw(options = {}) {
         const wired = wiring.wireOpenClawBridge(targetDir);
         console.log(`\x1b[32m✓ Wired OpenClaw MCP servers (${wired.count} via ${wired.method}) → ${wired.path}\x1b[0m`);
         console.log(`\x1b[32m✓ Consumer root → ${targetDir}\x1b[0m`);
+        try {
+            writeSuitSessionBoot(targetDir, 'openclaw', { source: '0xray/openclaw-install' });
+        }
+        catch {
+            /* session-boot is best-effort */
+        }
+        const packageRoot = path.resolve(__dirname, '..', '..', '..');
+        const hookInstalled = wiring.installOpenClawHostWear(packageRoot);
+        const cliBackend = wiring.maybeWriteOpenClawCliBackend();
+        frameworkLogger.log('openclaw-integration', 'cli-backend', 'info', { written: cliBackend });
+        if (hookInstalled) {
+            console.log(`\x1b[32m✓ OpenClaw PreToolUse hook → ${hookInstalled}\x1b[0m`);
+        }
         console.log('\n✅ 0xRay OpenClaw integration configured!');
         console.log('Run `openclaw mcp list` to verify MCP servers.');
         console.log('Edit `.xray/config/openclaw.json` for gateway URL, auth token, and device ID.');

package/dist/cli/index.js

@@ -984,4 +984,13 @@ For more information, visit: https://github.com/0xRayAI/xray
 `);
 // Parse command line arguments
 program.exitOverride();
-program.parse();
+try {
+    program.parse();
+}
+catch (err) {
+    const code = err && typeof err === 'object' && 'code' in err ? String(err.code) : '';
+    if (code === 'commander.helpDisplayed' || code === 'commander.help' || code === 'commander.version') {
+        process.exit(0);
+    }
+    throw err;
+}

package/dist/core/features-config.d.ts

@@ -7,6 +7,7 @@
  * @since 2026-01-25
  */
 import type { MemoryRoutingConfig } from "../memory-routing/types.js";
+import type { SuitHost, SuitProfile, SuitTemperamentConfig } from "../nucleus/suit-temperament.js";
 export type { MemoryRoutingConfig };
 export interface TokenOptimizationConfig {
     enabled: boolean;
@@ -63,7 +64,7 @@ export interface MultiAgentOrchestrationConfig {
     auto_consult_major_work?: boolean;
     /** Codex 69 — block new MCP/skill/handler files via PreToolUse (default true) */
     no_new_surface?: boolean;
-    /** 3.5.0 — PreToolUse gate after delegate-deferred (default true when lead_dev_mode) */
+    /** PreToolUse gate after delegate-deferred (default true when lead_dev_mode) */
     auto_chain_delegations?: boolean;
     /** Hours before unstarted lead-dev plan is archived (default 8) */
     plan_stale_hours?: number;
@@ -81,13 +82,15 @@ export interface MultiAgentOrchestrationConfig {
         on_synthesis?: boolean;
     };
 }
+/** 0xRay 4.0 — nucleus SSOT. See docs-site/docs/guides/v3-temperament.md */
+export type { SuitHost, SuitProfile, SuitTemperamentConfig };
 /** Reflection triggers merged from legacy auto_reflection when synthesis is configured */
 export interface SynthesisReflectionConfig {
     mode?: AutoReflectionConfig['mode'];
     triggers?: AutoReflectionConfig['triggers'];
     thresholds?: AutoReflectionConfig['thresholds'];
 }
-/** 3.6.0 — periodic reflect & realign checkpoint (Synthesis PR1) */
+/** Periodic reflect & realign checkpoint (Synthesis) */
 export interface SynthesisConfig {
     enabled: boolean;
     every_n_gates: number;
@@ -399,10 +402,20 @@ export interface FeaturesConfig {
     auto_reflection?: AutoReflectionConfig;
     inference?: InferenceConfig;
     memory_routing?: MemoryRoutingConfig;
+    /** P2.2 — lightweight Grok write-tool postprocessor marker */
+    grok_postprocessor_light?: boolean;
+    /** P2 — git post-commit session inference capture */
+    inference_session_capture?: {
+        enabled?: boolean;
+        min_commits?: number;
+        lookback_commits?: number;
+    };
     synthesis: SynthesisConfig;
     kernel?: KernelConfig;
     processors?: ProcessorsConfig;
     enforcement?: EnforcementConfig;
+    /** v3 temperament — missing key means guided (existing consumers unchanged) */
+    suit_temperament?: SuitTemperamentConfig;
 }
 export type TaskType = "file_read" | "grep_search" | "simple_edit" | "bulk_refactor" | "architecture_review" | "security_audit" | "git_operations" | "documentation" | "code_generation" | "debugging" | "unknown";
 /**

package/dist/infrastructure/schemas/cloud-schemas.d.ts

@@ -50,8 +50,8 @@ export declare const AWSLoadBalancerConfigSchema: z.ZodObject<{
             name: z.ZodString;
             priority: z.ZodNumber;
             action: z.ZodEnum<{
-                allow: "allow";
                 deny: "deny";
+                allow: "allow";
                 count: "count";
             }>;
             conditions: z.ZodArray<z.ZodObject<{

package/dist/integrations/grok/grok-cli.d.ts

@@ -19,7 +19,10 @@ export interface GrokInstallOptions {
     dryRun?: boolean;
 }
 export declare function installForGrokCLI(options?: GrokInstallOptions): Promise<void>;
+/** Grok TUI reads <project>/.grok/config.toml, not the package copy. */
+export declare function writeProjectRepertoireMcp(projectRoot: string): string | null;
 declare const _default: {
     installForGrokCLI: typeof installForGrokCLI;
+    writeProjectRepertoireMcp: typeof writeProjectRepertoireMcp;
 };
 export default _default;