0xray 3.5.5 → 4.0.1

package/dist/plugin/xray-codex-injection.js

@@ -7,7 +7,7 @@ import { getOrCreateLogger } from "./plugin-logger.js";
 import { resolveStateDir, importSystemPromptGenerator, loadXrayComponents, getProcessorManager, getXrayStateManager, getFeaturesConfigLoader, getDetectTaskType, getSystemPromptGenerator, } from "./plugin-modules.js";
 import { getFrameworkIdentity, classifyTaskType, isWriteEditOperation, isPublishOperation, resolveAgentName, registerAllProcessors, registerAfterPostProcessors, logPreProcessorResults, logPostProcessorResults, logTestAutoCreationResult, spawnPromise, } from "./plugin-helpers.js";
 import { runEnforcerQualityGate } from "./plugin-quality-gate.js";
-import { evaluatePostToolSpawn, evaluatePreToolGate, isSubagentTool, loadDelegationGateFeatures, } from "../nucleus/delegation-gate.js";
+import { evaluatePostToolSpawn, evaluatePreToolGate, isSubagentTool, loadDelegationGateFeatures, writeSuitSessionBoot, } from "../nucleus/delegation-gate.js";
 import { readFileSync } from "fs";
 import { join } from "path";
 // Re-export all public API for test compatibility
@@ -23,6 +23,15 @@ let _lastTuneToolCallCount = 0;
 export default async function xrayCodexPlugin(input) {
     const { directory: inputDirectory } = input;
     const directory = inputDirectory || process.cwd();
+    try {
+        writeSuitSessionBoot(directory, "opencode", {
+            source: "0xray/opencode-plugin",
+            hookEvent: process.env.XRAY_HOOK_EVENT || "session_start",
+        });
+    }
+    catch {
+        /* session-boot is best-effort */
+    }
     return {
         "experimental.chat.system.transform": async (_input, output) => {
             try {
@@ -40,7 +49,9 @@ export default async function xrayCodexPlugin(input) {
                     });
                 }
                 if (output.system && Array.isArray(output.system)) {
-                    output.system = [leanPrompt];
+                    const cardPath = path.join(directory, ".xray", "state", "STATION.md");
+                    const card = fs.existsSync(cardPath) ? fs.readFileSync(cardPath, "utf8").trim() : "";
+                    output.system = card ? [leanPrompt, card] : [leanPrompt];
                 }
             }
             catch (error) {
@@ -84,7 +95,7 @@ export default async function xrayCodexPlugin(input) {
                 throw new Error(`ENFORCER BLOCKED: ${qualityGateResult.violations.join("; ")}`);
             }
             logger.log(`✅ Quality gate passed for ${tool}`);
-            const features = loadDelegationGateFeatures(directory);
+            const features = loadDelegationGateFeatures(directory, "opencode");
             let sessionId = process.env.GROK_SESSION_ID ?? null;
             try {
                 const boot = JSON.parse(readFileSync(join(directory, ".xray", "state", "session-boot.json"), "utf8"));

package/dist/postprocessor/triggers/GitHookTrigger.js

@@ -397,10 +397,16 @@ fi
       (async () => {
         try {
           // Use dynamic import that works in both dev and consumer
-          const basePath = process.env.XRAY_BASE_PATH || '.';
-          const distPath = process.env.XRAY_DIST_PATH || 'dist';
-          // First archive logs (compress and rotate) before cleanup
-          const { archiveLogFiles } = await import(basePath + '/' + distPath + '/postprocessor/triggers/GitHookTrigger.js');
+          const { pathToFileURL } = await import('url');
+          const { existsSync } = await import('fs');
+          const { join } = await import('path');
+          const candidates = [
+            join(process.cwd(), 'node_modules/0xray/dist/postprocessor/triggers/GitHookTrigger.js'),
+            join(process.cwd(), 'dist/postprocessor/triggers/GitHookTrigger.js'),
+          ];
+          const triggerPath = candidates.find((p) => existsSync(p));
+          if (!triggerPath) return;
+          const { archiveLogFiles } = await import(pathToFileURL(triggerPath).href);
           const archiveResult = await archiveLogFiles({
             archiveDirectory: 'logs/framework',
             maxFileSizeMB: 10,  // Archive if > 10MB
@@ -415,7 +421,7 @@ fi
           }
 
           // Then cleanup old files
-          const { cleanupLogFiles } = await import(basePath + '/' + distPath + '/postprocessor/triggers/GitHookTrigger.js');
+          const { cleanupLogFiles } = await import(pathToFileURL(triggerPath).href);
           const result = await cleanupLogFiles({
             maxAgeHours: 24,
             excludePatterns: [

package/opencode.json

@@ -16,6 +16,86 @@
     },
     "global-git": {
       "enabled": false
+    },
+    "xray-governance": {
+      "type": "local",
+      "command": [
+        "npx",
+        "-y",
+        "0xray",
+        "mcp",
+        "governance"
+      ],
+      "enabled": true,
+      "environment": {
+        "XRAY_FORCE_MCP_GOVERNANCE": "true"
+      }
+    },
+    "xray-skills": {
+      "type": "local",
+      "command": [
+        "npx",
+        "-y",
+        "0xray",
+        "mcp",
+        "skills"
+      ],
+      "enabled": true
+    },
+    "xray-orchestrator": {
+      "type": "local",
+      "command": [
+        "npx",
+        "-y",
+        "0xray",
+        "mcp",
+        "orchestrator"
+      ],
+      "enabled": true
+    },
+    "xray-enforcer": {
+      "type": "local",
+      "command": [
+        "npx",
+        "-y",
+        "0xray",
+        "mcp",
+        "enforcer"
+      ],
+      "enabled": true
+    },
+    "xray-researcher": {
+      "type": "local",
+      "command": [
+        "npx",
+        "-y",
+        "0xray",
+        "mcp",
+        "researcher"
+      ],
+      "enabled": true
+    },
+    "xray-code-review": {
+      "type": "local",
+      "command": [
+        "npx",
+        "-y",
+        "0xray",
+        "mcp",
+        "code-review"
+      ],
+      "enabled": true
+    },
+    "xray-architect-tools": {
+      "type": "local",
+      "command": [
+        "npx",
+        "-y",
+        "0xray",
+        "mcp",
+        "architect-tools"
+      ],
+      "enabled": true
     }
   },
   "agent": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "3.5.5",
+  "version": "4.0.1",
   "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
   "readme": "README.md",
   "license": "MIT",
@@ -64,7 +64,7 @@
     "version:bump": "node scripts/node/version-manager.mjs",
     "version": "node scripts/node/version-manager.mjs",
     "prebuild": "rm -rf dist tsconfig.tsbuildinfo tsconfig.*.tsbuildinfo",
-    "build": "tsc && chmod +x dist/cli/index.js && mkdir -p dist/public dist/scripts && cp -r public/* dist/public/ && cp scripts/hooks/pre-command dist/scripts/ && cp scripts/hooks/pre-command.mjs dist/scripts/ && cp README.md AGENTS.md SKILLS.md CHANGELOG.md LICENSE .gitignore.default dist/ && find src -name '*.mjs' ! -path '*/__tests__/*' | while read f; do tgt=\"dist/${f#src/}\"; mkdir -p \"$(dirname $tgt)\"; cp \"$f\" \"$tgt\"; done && for dir in skills integrations mcps; do find src/$dir -type f ! -name '*.ts' ! -path '*/.pytest_cache/*' | while read f; do tgt=\"dist/${f#src/}\"; mkdir -p \"$(dirname $tgt)\"; cp \"$f\" \"$tgt\"; done; done && mkdir -p dist/plugin && (find dist/plugin -name '*codex-injection*.js' -exec cp {} dist/plugin/xray-codex-injection.js \\; 2>/dev/null || true) && cp -r src/opencode/ .opencode/ && mkdir -p .xray && for f in codex.json features.json features.schema.json config.json; do cp xray/$f .xray/$f 2>/dev/null || true; done",
+    "build": "tsc && chmod +x dist/cli/index.js && mkdir -p dist/public dist/scripts && cp -r public/* dist/public/ && cp scripts/hooks/pre-command dist/scripts/ && cp scripts/hooks/pre-command.mjs dist/scripts/ && cp README.md AGENTS.md SKILLS.md CHANGELOG.md LICENSE .gitignore.default dist/ && find src -name '*.mjs' ! -path '*/__tests__/*' | while read f; do tgt=\"dist/${f#src/}\"; mkdir -p \"$(dirname $tgt)\"; cp \"$f\" \"$tgt\"; done && for dir in skills integrations mcps; do find src/$dir -type f ! -name '*.ts' ! -path '*/.pytest_cache/*' | while read f; do tgt=\"dist/${f#src/}\"; mkdir -p \"$(dirname $tgt)\"; cp \"$f\" \"$tgt\"; done; done && mkdir -p dist/plugin && (find dist/plugin -name '*codex-injection*.js' -exec cp {} dist/plugin/xray-codex-injection.js \\; 2>/dev/null || true) && cp -r src/opencode/ .opencode/ && mkdir -p .opencode/skills && cp -R src/skills/. .opencode/skills/ && mkdir -p .xray && for f in codex.json features.json features.schema.json config.json; do cp xray/$f .xray/$f 2>/dev/null || true; done",
     "build:all": "npm run build",
     "ci-install": "npm ci",
     "clean": "rm -rf dist tsconfig.tsbuildinfo tsconfig.*.tsbuildinfo",
@@ -124,7 +124,7 @@
     "release:docs-check": "node scripts/node/validate-release-docs.mjs",
     "pre-publish-guard": "node scripts/node/pre-publish-guard.js",
     "safe-publish": "npm run prepare-consumer && npm run build",
-    "publish": "npm run release:gate && npm run safe-publish && npm publish --access public",
+    "release:npm": "npm run release:gate && npm run safe-publish && npm publish --access public",
     "release:patch": "node scripts/node/release.mjs patch",
     "verify:orchestrator-behavior": "npm run build && node scripts/mjs/verify-orchestrator-behavior.mjs",
     "verify:grok-delegation-gate": "npm run build && node scripts/mjs/verify-grok-delegation-gate.mjs && node scripts/mjs/verify-grok-synthesis-gate.mjs",
@@ -138,7 +138,10 @@
     "verify:find-project-root": "node scripts/mjs/verify-find-project-root-core.mjs",
     "verify:consumer-gitignore": "node scripts/mjs/verify-consumer-gitignore-core.mjs",
     "verify:pre-commit-diff": "node scripts/mjs/verify-pre-commit-diff-core.mjs",
-    "verify:pre-push-diff": "node scripts/mjs/verify-pre-push-diff-core.mjs"
+    "verify:pre-push-diff": "node scripts/mjs/verify-pre-push-diff-core.mjs",
+    "verify:temperament-live": "node scripts/mjs/verify-temperament-live.mjs",
+    "verify:four-floor-compact": "node scripts/mjs/verify-four-floor-compact.mjs",
+    "verify:four-floor-compact:live": "XRAY_LIVE_SUCCESSOR=1 node scripts/mjs/verify-four-floor-compact.mjs"
   },
   "files": [
     "dist/",
@@ -158,6 +161,10 @@
     "scripts/mjs/verify-pre-push-diff-core.mjs",
     "scripts/mjs/verify-confer-core.mjs",
     "scripts/mjs/verify-user-aside-core.mjs",
+    "scripts/mjs/verify-pipeline-facets.mjs",
+    "scripts/mjs/verify-temperament-live.mjs",
+    "scripts/mjs/verify-four-floor-compact.mjs",
+    "scripts/mjs/run-repertoire-mcp.mjs",
     "scripts/mjs/verify-delegation-gate-core.mjs",
     "scripts/mjs/delegation-gate-fixture.mjs",
     "src/opencode/",
@@ -167,6 +174,7 @@
     "src/opencode/openclaw/",
     "src/opencode/workflows/",
     "src/integrations/grok/plugin/0xray/",
+    "src/integrations/openclaw/plugin/",
     "src/skills/",
     "src/mcps/",
     ".plugin/",
@@ -194,9 +202,11 @@
     ".xray/features.schema.json",
     ".xray/config.json",
     ".gitignore.default",
-    "LICENSE"
+    "LICENSE",
+    "vendor/@0xray/repertoire/"
   ],
   "dependencies": {
+    "@0xray/repertoire": "file:./vendor/@0xray/repertoire",
     "@modelcontextprotocol/sdk": "^1.0.4",
     "commander": "^11.1.0",
     "express": "^5.2.1",

package/scripts/hooks/install-hooks.cjs

@@ -30,19 +30,34 @@ if (!fs.existsSync(gitHooksDir)) {
 }
 
 const isConsumer = packageRoot.includes("node_modules");
+
+function firstExistingRelative(root, rels) {
+  return rels.find((rel) => fs.existsSync(path.join(root, rel))) || rels[0];
+}
+
 const runHookRelativePath = isConsumer
-  ? "node_modules/0xray/scripts/hooks/run-hook.js"
+  ? firstExistingRelative(targetDir, [
+      "node_modules/0xray/scripts/hooks/run-hook.js",
+      "node_modules/0xray/dist/scripts/hooks/run-hook.js",
+    ])
   : "scripts/hooks/run-hook.js";
 const loadReflectionRelativePath = isConsumer
-  ? "node_modules/0xray/scripts/node/load-reflection-config.mjs"
+  ? firstExistingRelative(targetDir, [
+      "node_modules/0xray/scripts/node/load-reflection-config.mjs",
+      "node_modules/0xray/dist/scripts/node/load-reflection-config.mjs",
+    ])
   : "scripts/node/load-reflection-config.mjs";
 const autoReflectionRelativePath = isConsumer
-  ? "node_modules/0xray/scripts/node/auto-reflection-generator.mjs"
+  ? firstExistingRelative(targetDir, [
+      "node_modules/0xray/scripts/node/auto-reflection-generator.mjs",
+      "node_modules/0xray/dist/scripts/node/auto-reflection-generator.mjs",
+    ])
   : "scripts/node/auto-reflection-generator.mjs";
 
 function hookRunnerExists(projectRoot) {
   return (
     fs.existsSync(path.join(projectRoot, "node_modules/0xray/scripts/hooks/run-hook.js")) ||
+    fs.existsSync(path.join(projectRoot, "node_modules/0xray/dist/scripts/hooks/run-hook.js")) ||
     fs.existsSync(path.join(projectRoot, "scripts/hooks/run-hook.js"))
   );
 }

package/scripts/hooks/run-hook.js

@@ -22,7 +22,7 @@
 import { existsSync, readFileSync, writeFileSync, mkdirSync, appendFileSync } from "fs";
 import { join, dirname, resolve } from "path";
 import { execSync, exec, execFileSync } from "child_process";
-import { fileURLToPath } from "url";
+import { fileURLToPath, pathToFileURL } from "url";
 
 // ── Parse arguments ──────────────────────────────────────────
 
@@ -372,9 +372,9 @@ async function runLogMaintenance() {
 
   try {
     const distDirs = [
-      join(projectRoot, "dist"),
       join(projectRoot, "node_modules", "0xray", "dist"),
       join(projectRoot, "node_modules", "xray", "dist"),
+      join(projectRoot, "dist"),
     ];
 
     for (const distDir of distDirs) {
@@ -382,7 +382,9 @@ async function runLogMaintenance() {
       if (!existsSync(triggerPath)) continue;
 
       try {
-        const { archiveLogFiles, cleanupLogFiles } = await import(triggerPath);
+        const { archiveLogFiles, cleanupLogFiles } = await import(
+          pathToFileURL(triggerPath).href
+        );
 
         // Archive logs
         try {
@@ -541,6 +543,67 @@ async function handlePreCommit() {
   process.exit(0);
 }
 
+function loadFeaturesJson() {
+  const featuresPath = join(projectRoot, ".xray", "features.json");
+  if (!existsSync(featuresPath)) return {};
+  try {
+    return JSON.parse(readFileSync(featuresPath, "utf-8"));
+  } catch {
+    return {};
+  }
+}
+
+function resolveXrayDistModule(relPath) {
+  const candidates = [
+    join(projectRoot, "node_modules", "0xray", "dist", relPath),
+    join(projectRoot, "node_modules", "xray", "dist", relPath),
+    join(projectRoot, "dist", relPath),
+  ];
+  return candidates.find((p) => existsSync(p)) || null;
+}
+
+async function runSessionInferenceCapture() {
+  const features = loadFeaturesJson();
+  const cfg = features.inference_session_capture ?? {};
+  if (cfg.enabled !== true) {
+    log("Session inference capture disabled");
+    return;
+  }
+
+  const modulePath = resolveXrayDistModule("inference/session-capture.js");
+  if (!modulePath) {
+    log("Session capture module missing (node_modules/0xray/dist or dist)");
+    return;
+  }
+
+  const minCommits = typeof cfg.min_commits === "number" && cfg.min_commits > 0
+    ? cfg.min_commits
+    : 3;
+  const lookback = typeof cfg.lookback_commits === "number" && cfg.lookback_commits > 0
+    ? cfg.lookback_commits
+    : 20;
+
+  try {
+    const mod = await import(pathToFileURL(modulePath).href);
+    const inference = mod.captureSessionInference(`HEAD~${lookback}`, "HEAD");
+    if (!inference) {
+      log("Session capture: no commits in span");
+      return;
+    }
+    if ((inference.metrics?.commits ?? 0) < minCommits) {
+      log(
+        `Session capture: ${inference.metrics?.commits ?? 0} commits < min ${minCommits}`,
+      );
+      return;
+    }
+    const outDir = join(projectRoot, "docs", "inference");
+    const saved = mod.saveSessionInference(inference, outDir);
+    log(`Session capture saved ${saved}`);
+  } catch (err) {
+    logError(`Session capture failed: ${err.message}`);
+  }
+}
+
 async function handlePostCommit() {
   const commitSha = process.env.COMMIT_SHA || "unknown";
   const branch = process.env.BRANCH || "unknown";
@@ -549,6 +612,7 @@ async function handlePostCommit() {
 
   // Run log maintenance
   await runLogMaintenance();
+  await runSessionInferenceCapture();
 
   // Record metrics
   recordMetrics(0, 0);

package/scripts/mjs/run-repertoire-mcp.mjs

@@ -0,0 +1,39 @@
+#!/usr/bin/env node
+/**
+ * CWD-proof Repertoire MCP launcher for the 0xray framework checkout.
+ * Grok/OpenCode spawn this in-repo path so they never have to resolve `../repertoire`.
+ */
+import { spawn } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const xrayRoot = join(dirname(fileURLToPath(import.meta.url)), '../..');
+const candidates = [
+  join(xrayRoot, 'node_modules', '@0xray', 'repertoire', 'dist', 'mcp', 'server.js'),
+  join(xrayRoot, 'vendor', '@0xray', 'repertoire', 'dist', 'mcp', 'server.js'),
+  join(xrayRoot, '..', 'repertoire', 'dist', 'mcp', 'server.js'),
+];
+const server = candidates.find((p) => existsSync(p));
+if (!server) {
+  process.stderr.write(
+    'repertoire MCP missing — build ../repertoire or install @0xray/repertoire\n',
+  );
+  process.exit(1);
+}
+
+const child = spawn(process.execPath, [server], {
+  stdio: 'inherit',
+  env: process.env,
+});
+child.on('error', (err) => {
+  process.stderr.write(`repertoire MCP spawn failed: ${err.message}\n`);
+  process.exit(1);
+});
+child.on('exit', (code, signal) => {
+  if (signal) {
+    process.kill(process.pid, signal);
+    return;
+  }
+  process.exit(code ?? 1);
+});

package/scripts/mjs/verify-confer-core.mjs

@@ -48,7 +48,7 @@ try {
   if (!isSynthesisCheckpointDue(tmp, sessionId)) fail('step 1: synthesis due');
   else pass('step 1: synthesis checkpoint due');
 
-  const plan = buildSynthesisCheckpointPlan('gate threshold (1/1)');
+  const plan = buildSynthesisCheckpointPlan('gate threshold (1/1)', tmp);
   if (!plan) fail('step 2: synthesis plan');
   else {
     savePersistedLeadDevPlan(

package/scripts/mjs/verify-delegation-gate-core.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 /**
- * Shared 4/4 delegation gate fixture against nucleus SSOT (any host adapter).
+ * Shared 6/6 delegation gate fixture against nucleus SSOT (any host adapter).
  * Usage: node scripts/mjs/verify-delegation-gate-core.mjs [--host=grok|hermes|opencode]
  */
 import { mkdtempSync, mkdirSync, rmSync, writeFileSync } from 'node:fs';
@@ -22,6 +22,9 @@ const host = hostArg?.split('=')[1] || 'generic';
 const { evaluatePreToolGate, loadDelegationGateFeatures } = await import(
   join(packageRoot, 'dist/integrations/hooks/delegation-gate-runtime.mjs')
 );
+const { archiveStaleLeadDevPlan } = await import(
+  join(packageRoot, 'dist/nucleus/lead-dev-plan-persistence.js')
+);
 
 const WRITE_TOOL =
   host === 'hermes' ? 'write_file' : host === 'opencode' ? 'write' : 'search_replace';
@@ -130,6 +133,30 @@ try {
   } else {
     fail('spawn plan stale', JSON.stringify(denyStale));
   }
+
+  const archived = archiveStaleLeadDevPlan(staleTmp);
+  const denyAfterArchive = evaluatePreToolGate(
+    SPAWN_TOOL,
+    { prompt: 'plan todo 1.1 consult', subagent_type: 'researcher' },
+    {
+      projectRoot: staleTmp,
+      sessionId: FIXTURE_SESSION_ID,
+      features: loadDelegationGateFeatures(staleTmp),
+      host,
+    },
+  );
+  if (
+    archived.archived &&
+    !denyAfterArchive.allow &&
+    denyAfterArchive.gate === 'spawn-plan-stale'
+  ) {
+    pass('denies spawn after stale plan archival (marker)');
+  } else {
+    fail(
+      'spawn plan stale after archive',
+      JSON.stringify({ archived, denyAfterArchive }),
+    );
+  }
   rmSync(staleTmp, { recursive: true, force: true });
 } finally {
   rmSync(tmp, { recursive: true, force: true });
@@ -139,7 +166,7 @@ const label = host === 'generic' ? 'core' : host;
 console.log(
   '\n' +
     (failed === 0
-      ? `🎉 Delegation gate verify passed (5/5) [${label}].`
+      ? `🎉 Delegation gate verify passed (6/6) [${label}].`
       : `⚠️  ${failed} gate check(s) failed [${label}].`),
 );
 process.exit(failed === 0 ? 0 : 1);