0xray 4.0.11 → 4.0.12

package/scripts/node/install-bridges.cjs

@@ -6,9 +6,15 @@
 
 const fs = require("fs");
 const path = require("path");
-const os = require("os");
 const { execSync } = require("child_process");
-const { wantsCostume, isIsolatedHome, machineHome } = require("../foundry/mint-suit.cjs");
+const {
+  wantsCostume,
+  isIsolatedHome,
+  machineHome,
+  processHome,
+  resolveGrokPluginDests,
+  wouldClobberMachineGrok,
+} = require("../foundry/mint-suit.cjs");
 const { wearVendoredRepertoire } = require("./wear-vendored-repertoire.cjs");
 const {
   wireHermesBridge,
@@ -351,7 +357,7 @@ function findGrokPluginSource(packageRoot) {
   return candidates.find((p) => fs.existsSync(p));
 }
 
-function registerGrokMcpServers(targetDir, log) {
+function registerGrokMcpServers(targetDir, log, pluginDirs) {
   try {
     execSync("which grok", { stdio: "ignore" });
   } catch {
@@ -375,10 +381,11 @@ function registerGrokMcpServers(targetDir, log) {
     }
   }
 
-  for (const pluginDir of [
-    path.join(targetDir, ".grok", "plugins", "0xray"),
-    path.join(os.homedir(), ".grok", "plugins", "0xray"),
-  ]) {
+  const dirs =
+    Array.isArray(pluginDirs) && pluginDirs.length > 0
+      ? pluginDirs
+      : [path.join(targetDir, ".grok", "plugins", "0xray")];
+  for (const pluginDir of dirs) {
     if (!fs.existsSync(pluginDir)) continue;
     try {
       execSync(`grok plugins trust "${pluginDir}"`, { stdio: "ignore" });
@@ -390,30 +397,35 @@ function registerGrokMcpServers(targetDir, log) {
   }
 }
 
-function installGrokBridge(targetDir, packageRoot, log) {
+function installGrokBridge(targetDir, packageRoot, log, opts) {
   const sourceDir = findGrokPluginSource(packageRoot);
   if (!sourceDir) {
     log("grok-bridge", "skipped", "warn", { reason: "grok plugin source missing" });
     return;
   }
 
-  const machine = machineHome();
+  const env = (opts && opts.env) || process.env;
+  const machine = (opts && opts.machineHome) || machineHome();
   const ephemeral = isEphemeralInstallRoot(targetDir);
-  const isolated = isIsolatedHome();
-  const targets = [path.join(targetDir, ".grok", "plugins", "0xray")];
-  if (!ephemeral && !isolated) {
-    targets.push(path.join(machine, ".grok", "plugins", "0xray"));
+  const isolated = isIsolatedHome(env, machine);
+  const targets = resolveGrokPluginDests(targetDir, env, machine);
+
+  if (ephemeral) {
+    log("grok-bridge", "skip machine ~/.grok plugin — ephemeral consumer", "info");
+  } else if (isolated) {
+    log("grok-bridge", "skip machine ~/.grok plugin — isolated HOME", "info");
   } else {
-    log(
-      "grok-bridge",
-      isolated
-        ? "skip machine ~/.grok plugin — isolated HOME"
-        : "skip machine ~/.grok plugin — ephemeral consumer",
-      "info",
-    );
+    log("grok-bridge", "skip machine ~/.grok plugin — project-scoped wear", "info");
   }
 
   for (const dest of targets) {
+    if (wouldClobberMachineGrok(dest, env, machine)) {
+      log("grok-bridge", "refuse-machine-grok-clobber", "error", {
+        dest,
+        machinePlugin: path.join(machine, ".grok", "plugins", "0xray"),
+      });
+      continue;
+    }
     if (copyPluginDir(sourceDir, dest)) {
       const rel = dest.startsWith(machine) ? dest.replace(machine, "~") : path.relative(targetDir, dest);
       log("grok-bridge", "plugin copied", "info", { path: rel || dest });
@@ -424,13 +436,14 @@ function installGrokBridge(targetDir, packageRoot, log) {
     }
   }
 
-  if (!ephemeral && !isolated) {
-    const grokGlobalSkills = path.join(machine, ".grok", "skills");
+  if (isolated && !ephemeral) {
+    const home = processHome(env);
+    const grokGlobalSkills = path.join(home, ".grok", "skills");
     const globalCopied = syncCostumeSkills(grokGlobalSkills, packageRoot, targetDir);
     if (globalCopied > 0) {
-      log("grok-bridge", `global skills synced (${globalCopied})`, "info", { path: "~/.grok/skills/" });
+      log("grok-bridge", `global skills synced (${globalCopied})`, "info", { path: grokGlobalSkills });
     }
-    registerGrokMcpServers(targetDir, log);
+    registerGrokMcpServers(targetDir, log, targets);
   }
 }
 
@@ -767,6 +780,8 @@ function installAllBridges(opts) {
 
 module.exports = {
   installAllBridges,
+  installGrokBridge,
+  resolveGrokPluginDests,
   resolveConsumerTargetDir,
   isInstallPrefixTarget,
   syncBuiltinSkills,

package/src/integrations/openclaw/plugin/xray-pre-tool/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xray-pre-tool",
-  "version": "4.0.11",
+  "version": "4.0.12",
   "private": true,
   "type": "module",
   "description": "0xRay constitution + temperament PreToolUse for OpenClaw",

package/xray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "4.0.11",
+  "version": "4.0.12",
   "description": "0xRay Framework - Unified Feature Configuration",
   "suit_temperament": {
     "profile": "auto",

package/.opencode/agents/api-design.yml

@@ -1,31 +0,0 @@
-name: api-design
-skill: api-design
-description: "RESTful API design and validation specialist"
-version: "1.0.0"
-mode: subagent
-
-# CODEX COMPLIANCE
-# - Term 12: No Code Without Tests - all API endpoints require test coverage
-# - Term 17: Type Safety Required - use TypeScript interfaces for all data contracts
-
-# Core Capabilities
-capabilities:
-  - rest_api_design
-  - graphql_api_design
-  - api_validation
-  - openapi_spec_generation
-  - api_documentation
-
-# State Management
-state_management:
-  enabled: true
-  namespaces:
-    - api_specs
-    - endpoint_contracts
-    - validation_rules
-
-# Quality Requirements
-quality:
-  test_coverage: required
-  type_safety: strict
-  documentation: required

package/.opencode/agents/architect.yml

@@ -1,15 +0,0 @@
-name: architect
-skill: architect-tools
-description: "System design and technical architecture tools specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - system_design
-  - architecture_analysis
-  - technical_documentation
-  - pattern_selection
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/architecture-patterns.yml

@@ -1,14 +0,0 @@
-name: architecture-patterns
-skill: architecture-patterns
-description: "Software architecture patterns and best practices specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - pattern_analysis
-  - architecture_review
-  - design_evaluation
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/auto-format.yml

@@ -1,14 +0,0 @@
-name: auto-format
-skill: auto-format
-description: "Automated code formatting and style consistency specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - code_formatting
-  - style_enforcement
-  - lint_integration
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/backend-engineer.yml

@@ -1,12 +0,0 @@
-name: backend-engineer
-skill: backend-engineer
-description: "backend engineer specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/boot-orchestrator.yml

@@ -1,14 +0,0 @@
-name: boot-orchestrator
-skill: boot-orchestrator
-description: "Framework initialization and boot orchestration specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - framework_boot
-  - processor_initialization
-  - system_startup
-
-quality:
-  test_coverage: required
-  type_safety: strict

package/.opencode/agents/bug-triage-specialist.yml

@@ -1,15 +0,0 @@
-name: bug-triage-specialist
-skill: bug-triage
-description: "Bug triage, debugging analysis, and issue prioritization specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - bug_analysis
-  - debugging
-  - issue_prioritization
-  - root_cause_analysis
-
-quality:
-  test_coverage: required
-  type_safety: strict

package/.opencode/agents/code-analyzer.yml

@@ -1,12 +0,0 @@
-name: code-analyzer
-skill: code-analyzer
-description: "code analyzer specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/code-reviewer.yml

@@ -1,14 +0,0 @@
-name: code-reviewer
-skill: code-review
-description: "Comprehensive code quality assessment and improvement suggestions specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - code_review
-  - quality_assessment
-  - improvement_suggestions
-
-quality:
-  test_coverage: required
-  type_safety: strict

package/.opencode/agents/content-creator.yml

@@ -1,12 +0,0 @@
-name: content-creator
-skill: content-creator
-description: "content creator specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/database-engineer.yml

@@ -1,12 +0,0 @@
-name: database-engineer
-skill: database-engineer
-description: "database engineer specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/devops-engineer.yml

@@ -1,12 +0,0 @@
-name: devops-engineer
-skill: devops-engineer
-description: "devops engineer specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/framework-compliance-audit.yml

@@ -1,14 +0,0 @@
-name: framework-compliance-audit
-skill: framework-compliance-audit
-description: "Framework compliance auditing and validation specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - compliance_audit
-  - validation
-  - standards_enforcement
-
-quality:
-  test_coverage: required
-  type_safety: strict

package/.opencode/agents/frontend-engineer.yml

@@ -1,12 +0,0 @@
-name: frontend-engineer
-skill: frontend-engineer
-description: "frontend engineer specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/frontend-ui-ux-engineer.yml

@@ -1,12 +0,0 @@
-name: frontend-ui-ux-engineer
-skill: frontend-ui-ux-engineer
-description: "frontend ui ux engineer specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/git-workflow.yml

@@ -1,15 +0,0 @@
-name: git-workflow
-skill: git-workflow
-description: "Git workflow management and collaboration specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - git_operations
-  - branch_management
-  - merge_conflicts
-  - workflow_automation
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/growth-strategist.yml

@@ -1,12 +0,0 @@
-name: growth-strategist
-skill: growth-strategist
-description: "growth strategist specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/hermes-agent.yml

@@ -1,12 +0,0 @@
-name: hermes-agent
-skill: hermes-agent
-description: "hermes agent specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/inference-improve.yml

@@ -1,12 +0,0 @@
-name: inference-improve
-skill: inference-improve
-description: "inference improve specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/lint.yml

@@ -1,14 +0,0 @@
-name: lint
-skill: lint
-description: "Code linting and static analysis specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - linting
-  - static_analysis
-  - code_quality
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/log-monitor.yml

@@ -1,12 +0,0 @@
-name: log-monitor
-skill: log-monitor
-description: "log monitor specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/mobile-developer.yml

@@ -1,12 +0,0 @@
-name: mobile-developer
-skill: mobile-developer
-description: "mobile developer specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/model-health-check.yml

@@ -1,12 +0,0 @@
-name: model-health-check
-skill: model-health-check
-description: "model health check specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/multimodal-looker.yml

@@ -1,12 +0,0 @@
-name: multimodal-looker
-skill: multimodal-looker
-description: "multimodal looker specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/performance-analysis.yml

@@ -1,12 +0,0 @@
-name: performance-analysis
-skill: performance-analysis
-description: "performance analysis specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/performance-engineer.yml

@@ -1,12 +0,0 @@
-name: performance-engineer
-skill: performance-engineer
-description: "performance engineer specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/performance-optimization.yml

@@ -1,12 +0,0 @@
-name: performance-optimization
-skill: performance-optimization
-description: "performance optimization specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/processor-pipeline.yml

@@ -1,14 +0,0 @@
-name: processor-pipeline
-skill: processor-pipeline
-description: "Data processing pipeline management specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - pipeline_management
-  - data_processing
-  - workflow_orchestration
-
-quality:
-  test_coverage: required
-  type_safety: strict

package/.opencode/agents/project-analysis.yml

@@ -1,12 +0,0 @@
-name: project-analysis
-skill: project-analysis
-description: "project analysis specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/refactorer.yml

@@ -1,12 +0,0 @@
-name: refactorer
-skill: refactoring-strategies
-description: "refactoring strategies specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/researcher.yml

@@ -1,12 +0,0 @@
-name: researcher
-skill: researcher
-description: "researcher specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/security-auditor.yml

@@ -1,12 +0,0 @@
-name: security-auditor
-skill: security-audit
-description: "security audit specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/security-scan.yml

@@ -1,12 +0,0 @@
-name: security-scan
-skill: security-scan
-description: "security scan specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/seo-consultant.yml

@@ -1,12 +0,0 @@
-name: seo-consultant
-skill: seo-consultant
-description: "seo consultant specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/session-management.yml

@@ -1,12 +0,0 @@
-name: session-management
-skill: session-management
-description: "session management specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict

package/.opencode/agents/state-manager.yml

@@ -1,12 +0,0 @@
-name: state-manager
-skill: state-manager
-description: "state manager specialist"
-version: "1.0.0"
-mode: subagent
-
-capabilities:
-  - domain_specialization
-
-quality:
-  test_coverage: recommended
-  type_safety: strict