0xray 4.0.12 → 4.0.13

package/.opencode/skills/xray-orchestrator/SKILL.md

@@ -1,141 +0,0 @@
----
-name: xray-orchestrator
-description: |
-  Main orchestration skill for xray agents.
-  Provides commands to coordinate agent work and invoke xray APIs
-  through the local HTTP API server.
-metadata:
-  openclaw:
-    primaryEnv: XRAY_API_KEY
-    emoji: 🤖
-  author: xray
-  tags:
-    - ai
-    - orchestration
-    - agent
-user-invocable: true
----
-
-# xray Orchestrator Commands
-
-## /xray
-
-Display xray status and available commands.
-
-**Usage:** `/xray`
-
-**Example:**
-```
-/xray
-```
-
-## /xray-status
-
-Get detailed status of xray integration including connection status.
-
-**Usage:** `/xray-status`
-
-**Example:**
-```
-/xray-status
-```
-
-## /xray-analyze
-
-Analyze code using xray code analysis capabilities.
-
-**Usage:** `/xray-analyze <file-path>`
-
-**Arguments:**
-- `file-path`: Path to file to analyze (required)
-
-**Example:**
-```
-/xray-analyze src/index.ts
-```
-
-## /xray-code
-
-Perform code review on a file.
-
-**Usage:** `/xray-code <file-path> [options]`
-
-**Arguments:**
-- `file-path`: Path to file to review (required)
-- `--fix`: Attempt to fix issues automatically (optional)
-
-**Example:**
-```
-/xray-code src/utils/helper.ts
-/xray-code src/utils/helper.ts --fix
-```
-
-## /xray-file
-
-Read file using xray file tools.
-
-**Usage:** `/xray-file <file-path> [line-start:line-end]`
-
-**Arguments:**
-- `file-path`: Path to file to read (required)
-- `line-start:line-end`: Line range to read (optional)
-
-**Example:**
-```
-/xray-file src/index.ts
-/xray-file src/index.ts 1:50
-```
-
-## /xray-exec
-
-Execute arbitrary xray command or script.
-
-**Usage:** `/xray-exec <command>`
-
-**Arguments:**
-- `command`: Command to execute (required)
-
-**Example:**
-```
-/xray-exec list files src/
-```
-
-## /xray-help
-
-Show this help message.
-
-**Usage:** `/xray-help [command]`
-
-**Arguments:**
-- `command`: Specific command to get help for (optional)
-
-**Example:**
-```
-/xray-help
-/xray-help xray-analyze
-```
-
-# Implementation Notes
-
-This skill acts as the main interface between OpenClaw channels and xray agents.
-It processes user commands and forwards them to the xray API server running on localhost:18431.
-
-## API Endpoints
-
-- `POST /api/agent/invoke` - Invoke xray agent
-- `GET /api/agent/status` - Get agent status
-- `GET /health` - Health check
-
-## Authentication
-
-The skill reads the `XRAY_API_KEY` environment variable for authentication.
-
-## Error Handling
-
-All errors are caught and formatted as user-friendly messages.
-Detailed error information is logged for debugging.
-
-# Dependencies
-
-- xray API server running on localhost:18431
-- XRAY_API_KEY environment variable

package/.opencode/skills/xray-orchestrator/index.ts

@@ -1,267 +0,0 @@
-/**
- * xray Orchestrator Skill
- *
- * OpenClaw skill that provides xray orchestration commands.
- *
- * @since 2026-03-14
- */
-
-const API_BASE = process.env.XRAY_API_URL || 'http://localhost:18431';
-const API_KEY = process.env.XRAY_API_KEY;
-
-interface ParsedArgs extends Record<string, unknown> {
-  _?: string[];
-}
-
-function parseArgs(input: string): { command: string; args: ParsedArgs } {
-  const parts = input.trim().split(/\s+/);
-  const command = parts[0] || '';
-  const args: ParsedArgs = {};
-
-  for (const part of parts.slice(1)) {
-    if (part.startsWith('--')) {
-      const key = part.slice(2);
-      args[key] = true;
-    } else if (part.includes(':')) {
-      const colonIdx = part.indexOf(':');
-      const key = part.slice(0, colonIdx);
-      const value = part.slice(colonIdx + 1);
-      if (key && value) args[key] = value;
-    } else if (!args._) {
-      args._ = [];
-      args._.push(part);
-    } else {
-      args._.push(part);
-    }
-  }
-
-  return { command, args };
-}
-
-async function callAPI(endpoint: string, data?: Record<string, unknown>): Promise<Record<string, unknown>> {
-  const headers: Record<string, string> = {
-    'Content-Type': 'application/json',
-  };
-
-  if (API_KEY) {
-    headers['Authorization'] = `Bearer ${API_KEY}`;
-  }
-
-  const response = await fetch(`${API_BASE}${endpoint}`, {
-    method: data ? 'POST' : 'GET',
-    headers,
-    body: data ? JSON.stringify(data) : null,
-  });
-
-  if (!response.ok) {
-    const error = await response.json().catch(() => ({ error: 'Unknown error' }));
-    throw new Error(error.error || `HTTP ${response.status}`);
-  }
-
-  return response.json();
-}
-
-export async function handleSkill(input: string): Promise<string> {
-  const { command, args } = parseArgs(input);
-
-  try {
-    switch (command.toLowerCase()) {
-      // xray primary
-      case 'xray':
-      case 'xray-status':
-        return await handleStatus();
-
-      case 'xray-analyze':
-        return await handleAnalyze(args);
-
-      case 'xray-code':
-        return await handleCodeReview(args);
-
-      case 'xray-file':
-        return await handleFileRead(args);
-
-      case 'xray-exec':
-        return await handleExec(args);
-
-      case 'xray-help':
-        return handleHelp(args._ as string | undefined);
-
-      default:
-        return formatHelp();
-    }
-  } catch (error) {
-    const message = error instanceof Error ? error.message : String(error);
-    return `❌ Error: ${message}`;
-  }
-}
-
-async function handleStatus(): Promise<string> {
-  const health = await callAPI('/health') as { status: string; version: string; uptime: number };
-
-  return `🤖 xray Status
-
-• Status: ${health.status}
-• Version: ${health.version}
-• Uptime: ${formatUptime(health.uptime)}
-
-Use /xray-help for available commands.`;
-}
-
-async function handleAnalyze(args: Record<string, unknown>): Promise<string> {
-  const filePath = (args._ as string[])?.[0];
-
-  if (!filePath) {
-    return '❌ Usage: /xray-analyze <file-path>';
-  }
-
-  const result = await callAPI('/api/agent/invoke', {
-    command: 'analyze',
-    args: { filePath },
-  }) as { success: boolean; result?: unknown; error?: string };
-
-  if (!result.success) {
-    return `❌ Analysis failed: ${result.error}`;
-  }
-
-  return `✅ Analysis complete for ${filePath}\n\n${JSON.stringify(result.result, null, 2)}`;
-}
-
-async function handleCodeReview(args: Record<string, unknown>): Promise<string> {
-  const filePath = (args._ as string[])?.[0];
-  const fix = args.fix === true;
-
-  if (!filePath) {
-    return '❌ Usage: /xray-code <file-path> [--fix]';
-  }
-
-  const result = await callAPI('/api/agent/invoke', {
-    command: 'code-review',
-    args: { filePath, fix },
-  }) as { success: boolean; result?: unknown; error?: string };
-
-  if (!result.success) {
-    return `❌ Code review failed: ${result.error}`;
-  }
-
-  return `✅ Code review complete for ${filePath}\n\n${JSON.stringify(result.result, null, 2)}`;
-}
-
-async function handleFileRead(args: Record<string, unknown>): Promise<string> {
-  const rest = args._ as string[] | undefined;
-  const filePath = rest?.[0];
-  const range = rest?.[1];
-
-  if (!filePath) {
-    return '❌ Usage: /xray-file <file-path> [line-start:line-end]';
-  }
-
-  let lineRange: { start?: number; end?: number } | undefined;
-  if (range?.includes(':')) {
-    const [rawStart, rawEnd] = range.split(':');
-    lineRange = {};
-    if (rawStart) lineRange.start = Number(rawStart);
-    if (rawEnd) lineRange.end = Number(rawEnd);
-  }
-
-  const result = await callAPI('/api/agent/invoke', {
-    command: 'read',
-    args: { filePath, ...lineRange },
-  }) as { success: boolean; result?: unknown; error?: string };
-
-  if (!result.success) {
-    return `❌ File read failed: ${result.error}`;
-  }
-
-  return `📄 ${filePath}\n\`\`\`\n${result.result}\n\`\`\``;
-}
-
-async function handleExec(args: Record<string, unknown>): Promise<string> {
-  const command = (args._ as string[])?.[0];
-
-  if (!command) {
-    return '❌ Usage: /xray-exec <command>';
-  }
-
-  const result = await callAPI('/api/agent/invoke', {
-    command: 'exec',
-    args: { command },
-  }) as { success: boolean; result?: unknown; error?: string };
-
-  if (!result.success) {
-    return `❌ Execution failed: ${result.error}`;
-  }
-
-  return `✅ Command executed\n\n${JSON.stringify(result.result, null, 2)}`;
-}
-
-function handleHelp(command?: string): string {
-  if (command) {
-    switch (command) {
-      case 'xray-analyze':
-        return `📖 /xray-analyze <file-path>
-
-Analyze code in a file.
-
-Example: /xray-analyze src/index.ts`;
-
-      case 'xray-code':
-        return `📖 /xray-code <file-path> [--fix]
-
-Perform code review on a file.
-Use --fix to attempt automatic fixes.
-
-Example: /xray-code src/utils/helper.ts
-Example: /xray-code src/utils/helper.ts --fix`;
-
-      case 'xray-file':
-        return `📖 /xray-file <file-path> [line-start:line-end]
-
-Read a file.
-Optionally specify line range.
-
-Example: /xray-file src/index.ts
-Example: /xray-file src/index.ts 1:50`;
-
-      case 'xray-exec':
-        return `📖 /xray-exec <command>
-
-Execute an arbitrary command.
-
-Example: /xray-exec list files src/`;
-
-      default:
-        return `Unknown command: ${command}`;
-    }
-  }
-
-  return formatHelp();
-}
-
-function formatHelp(): string {
-  return `🤖 xray Orchestrator
-
-Available Commands:
-• /xray - Show status
-• /xray-analyze <file> - Analyze code
-• /xray-code <file> [--fix] - Code review
-• /xray-file <file> [lines] - Read file
-• /xray-exec <command> - Execute command
-• /xray-help [command] - Show help
-
-Use /xray-help <command> for detailed usage.`;
-}
-
-function formatUptime(ms: number): string {
-  const seconds = Math.floor(ms / 1000);
-  const minutes = Math.floor(seconds / 60);
-  const hours = Math.floor(minutes / 60);
-  const days = Math.floor(hours / 24);
-
-  if (days > 0) return `${days}d ${hours % 24}h`;
-  if (hours > 0) return `${hours}h ${minutes % 60}m`;
-  if (minutes > 0) return `${minutes}m`;
-  return `${seconds}s`;
-}
-
-// Export for OpenClaw
-export default { handleSkill };

package/dist/.gitignore.default

@@ -1,67 +0,0 @@
-# 0xray — Default .gitignore
-# Generated by 0xray postinstall. Edit as needed.
-
-# Dependencies
-node_modules/
-
-# Build artifacts
-dist/
-build/
-*.tsbuildinfo
-
-# Environment & secrets
-.env
-.env.*
-.env.local
-*.local
-**/auth.json
-.hermes/
-credentials.json
-*.pem
-*.key
-
-# 0xray suit artifacts (postinstall / bridge install)
-.grok/
-.mcp.json
-opencode.json
-AGENTS.md
-SKILLS.md
-
-# Runtime state (xray inference workflows, session state)
-.xray/
-.strray/
-strray/
-xray/inference/
-
-# Generated xray config files
-.opencode/agents/*.yml
-.opencode/agents/
-.opencode/commands/
-.opencode/workflows/
-.opencode/codex.codex
-.opencode/enforcer-config.json
-.opencode/skills/
-.opencode/scripts/
-.opencode/logs/
-.opencode/validation/
-.opencode/triage/
-
-# Logs
-logs/
-logs/framework/
-*.log
-
-# OS files
-.DS_Store
-Thumbs.db
-
-# IDE
-.idea/
-.vscode/
-*.swp
-*.swo
-*~
-
-# Temp
-*.tmp
-*.tgz

package/dist/AGENTS.md

@@ -1,225 +0,0 @@
-# xray Agents
-
-Quick reference for the xray AI orchestration framework (**4.0**).
-
-**4.0** — a suit that survives the context window.
-
-**Exo, not catalog.** Three-subsystem OS (Inference · External Governance · Autonomous Engine) · constitution always on · temperament by host · 4 floors · Repertoire when it resolves.
-
-**Temperament:** ceremony (analyze-complexity before spawn, confer) is **guided** by default so free-model OpenCode/Hermes stay in check. Frontier hosts (Grok 4.6 class) with `suit_temperament.profile: auto` **warn** on spawn-without-plan; Codex 11/29/69 still **deny**. Missing `suit_temperament` stays guided. See `docs-site/docs/architecture/v3-from-v2.md`.
-
-## Hot-swap
-
-Before other work, Read `.xray/state/STATION.md`. Compaction and host change are the same cut. Continue the card. Do not restart the job. Grok does not inject the card (OpenCode does) — this Read is the Grok contract. Do not thicken the Grok exo.
-
-## What is xray?
-
-xray provides intelligent multi-agent orchestration with automatic delegation and Codex compliance validation under the pure v2 three-subsystem model:
-
-- **Inference** — proposals, reflection, memory routing (Repertoire organ on in 4.0)
-- **External Governance** — Dynamo Solar SSOT, 69-term Codex
-- **Autonomous Engine** — thinDispatch 7-flow, AsideContext, confidence gate
-
-Agents are declared in `src/opencode/agents/*.yml` — the YML SSOT. Skills live in `src/skills/*/SKILL.md` — see [SKILLS.md](SKILLS.md) for the exo catalog. Consumer default plant is **mill + inspect**, not a 45-skill sync (`AGENTS-consumer.md` → `AGENTS.md`). Factory hangar shops coexist via shop plant. See [llms.txt](llms.txt).
-
-## Consumer MCP surface (7 servers)
-
-Registered in `.mcp.json`, invoked via `npx -y 0xray mcp <cmd>`:
-
-| Server | Role |
-|--------|------|
-| `xray-governance` | Proposal governance, codex snapshot, quality gates |
-| `xray-skills` | 45 knowledge skills + `invoke-skill` |
-| `xray-orchestrator` | thinDispatch, AsideContext, confidence gate |
-| `xray-enforcer` | Codex compliance, rule validation |
-| `xray-researcher` | Codebase exploration, memory-routing enrichment |
-| `xray-code-review` | Proposal quality, code review deliberation |
-| `xray-architect-tools` | System design, architecture decisions |
-
-Governance deliberation: **code-review**, **security-audit**, **researcher** within the 7-server set.
-
-## Postinstall
-
-`postinstall.cjs` → `installAllBridges()`:
-
-1. `AGENTS-consumer.md` → `AGENTS.md` (does **not** write consumer-root `SKILLS.md`)
-2. Fasten mill plant (`mill` + `inspect`). Not a 45-skill costume dump unless `foundry.json` `"costume": true`
-3. `.gitignore.default` → `.gitignore` (if absent)
-4. `.xray/` config (`codex.json`, `features.json`, `config.json`) then overlay their plant
-5. `.mcp.json` (7 servers)
-6. Four bridges: OpenCode, Grok, Hermes, OpenClaw. Grok last-mile dest is project `.grok/plugins/0xray` (shared HOME does not last-wins clobber machine `~/.grok/plugins/0xray`)
-7. Optional git hooks
-
-**Shop plant:** `shop-extract`, `shop-witness`, `shop-pin` (groover-hangar) are first-class with mill plant. Extra shops: `foundry.json` `shopPlant`. Not `"costume": true`. `npx @0xray/foundry inspect --skip-live` is the receipt.
-
-## Memory routing + Repertoire (v3.3+)
-
-`xray/features.json` → `memory_routing` (schema: `features.schema.json`):
-
-```json
-"memory_routing": {
-  "enabled": true,
-  "provider": "repertoire",
-  "module_path": "node_modules/@0xray/repertoire/dist/provider/memory-routing-provider.js",
-  "config": {
-    "signalsPath": "node_modules/@0xray/repertoire/data/curated_signals.json",
-    "statePath": ".xray/state/repertoire/inference-state.json",
-    "feedbackDir": ".xray/state/repertoire/feedback"
-  }
-}
-```
-
-| Integration | Surface |
-|-------------|---------|
-| ExecutionPlanner | `enrichTasks`, `getTaskConfidence`, `selectAgent` |
-| thinDispatch | `resolveThinDispatch` |
-| Researcher | `researcher-confidence.ts`, `MEMORY_ROUTING:` block |
-| AsideContext | `buildInheritedContext` → `inheritedContext.memoryRouting` |
-| Feedback | Per-task `ingestFeedback` |
-
-**External MCP:** `npx @0xray/repertoire mcp` — `repertoire__get_task_confidence`, etc.
-
-## AsideContext (v3.2+)
-
-`src/mcps/orchestrator/aside-context.ts` — bounded subcontexts for orchestration:
-
-- `spawnAside` / `closeAside` on `orchestrate-task`, `analyze-complexity`, `govern-and-apply`
-- Observation extractors: governance, orchestration, complexity
-- Repertoire context flows via `ExecutionPlan.memoryContext`
-
-## User asides (parallel work tracks)
-
-**Not** AsideContext — user-declared parallel tracks (worktree-like):
-
-- SSOT: `.xray/state/asides/{id}.json` + `_active.json`; todos use `{asideId}.a.*` (namespaced)
-- Intake: `analyze-complexity` with `userAsideId` (+ optional `worktree`, `branch`)
-- Activate / resume main: `orchestrate-task` with `userAsideId` or `clearActiveAside: true`
-- Spawn gate routes to active aside plan; session-boot exposes `activeAside`
-- Config: `features.json` → `multi_agent_orchestration.user_asides.enabled`
-
-## Confidence gate (v3.3.1)
-
-`ExecutionPlanner.calculateTaskComplexity()` + `getTaskConfidence()` — complexity boost and ontological-trap routing.
-
-## Nucleus exports (v3.4.0)
-
-`0xray/nucleus` and `0xray/nucleus/*` — `handleGovernRequest`, plugin-registry, thinDispatch.
-
-## Changes since 3.1
-
-| Version | Change |
-|---------|--------|
-| **3.4.1** | `install-bridges.cjs`, 7 MCPs `npx`, release pipeline + docs sync |
-| **3.4.0** | Nucleus exports, governance closure, verify gate |
-| **3.3.1** | Confidence gate, repertoire researcher wiring |
-| **3.3.0** | Memory routing + Repertoire provider |
-| **3.2.0** | AsideContext wired, SelfProposalEngine, pre-tool-use hook |
-| **3.1.1** | 0xRay rename, marketplace, AGENTS/SKILLS consumer seeding |
-
-**Removed:** `hermes bridge`, `.opencode/xray/` fallback, `advanced-features/` on consumer boot.
-
-## Default operating mode: autonomy-command
-
-When the suit is worn, **autonomy-command** is ON by default (codex 67–68). Lead dev: phased todos, subagent dispatch, per-suite test triage, loop until green. Ships to consumers via `AGENTS-consumer.md`.
-
-Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Skill: `src/skills/autonomy-command/SKILL.md`
-
-## Core tenets
-
-- YML agents + SKILL.md are the SSOT
-- Zero manual registration
-- Governance precedes action (Dynamo)
-- MCP surfaces are the primary skill interface
-- frameworkLogger only (never `console.*`)
-
-## File organization
-
-| File Type | Save To |
-|-----------|---------|
-| Reflections | `docs/reflections/` |
-| Logs | `logs/` |
-| Scripts | `scripts/` or `scripts/bash/` |
-| Tests | `src/__tests__/` |
-| Source | `src/` |
-| Config | `.xray/` or `config/` |
-
-**Root essentials only:** `README.md`, `CHANGELOG.md`, `package.json`, `AGENTS.md`, `SKILLS.md`, `llms.txt`, `tsconfig.json`.
-
-## Available agents (42 YML surfaces)
-
-Invoke via `@agent-name` in OpenCode:
-
-| Agent | Purpose |
-|-------|---------|
-| `@enforcer` | Codex compliance & error prevention |
-| `@orchestrator` | Multi-step task coordination |
-| `@architect` | System design & technical decisions |
-| `@security-auditor` | Vulnerability detection |
-| `@code-reviewer` | Quality assessment |
-| `@refactorer` | Technical debt elimination |
-| `@testing-lead` | Testing strategy |
-| `@bug-triage-specialist` | Error investigation |
-| `@researcher` | Codebase exploration |
-| `@frontend-engineer` | React, Vue, Angular, responsive design |
-| `@backend-engineer` | REST/GraphQL APIs, microservices |
-| `@database-engineer` | Schema design, query optimization |
-| `@devops-engineer` | CI/CD, infrastructure, containers |
-| `@mobile-developer` | iOS, Android, React Native, Flutter |
-| `@storyteller` | Narrative reflections, technical stories |
-| `@strategist` | Architecture decisions, risk analysis |
-| `@performance-engineer` | Profiling, benchmarking |
-| `@frontend-ui-ux-engineer` | Visual design, accessibility |
-| `@multimodal-looker` | Media / screenshot analysis |
-| `@log-monitor` | Log diagnostics |
-| `@code-analyzer` | Code metrics, pattern detection |
-| `@content-creator` | SEO copy, technical content |
-| `@growth-strategist` | Marketing strategy |
-| `@seo-consultant` | Technical SEO |
-| `@tech-writer` | API docs, READMEs, changelogs |
-| `@hermes-agent` | Hermes bridge operations |
-| `@boot-orchestrator` | Framework boot orchestration |
-| `@processor-pipeline` | Data processing pipelines |
-| `@state-manager` | Session / state persistence |
-| `@session-management` | Session lifecycle |
-| `@inference-improve` | Autonomous inference improvement |
-| `@model-health-check` | Model health diagnostics |
-| `@framework-compliance-audit` | Framework compliance |
-| `@lint` | Code linting |
-| `@auto-format` | Automated formatting |
-| `@git-workflow` | Git workflow management |
-| `@api-design` | REST/GraphQL API design |
-| `@architecture-patterns` | Architecture patterns |
-| `@performance-analysis` | Performance analysis |
-| `@performance-optimization` | Performance optimization |
-| `@project-analysis` | Project health metrics |
-| `@security-scan` | Security vulnerability scanning |
-| `@testing-best-practices` | Testing QA |
-| `@ui-ux-design` | UI/UX design |
-
-Full skill mapping: [SKILLS.md](SKILLS.md).
-
-## thinDispatch routing
-
-- Simple (≤15): Single agent
-- Moderate (≤25): Single agent with tools
-- Complex (≤50): Multi-agent coordination
-- Enterprise (>50): Orchestrator-led team
-
-## Documentation
-
-| Topic | Path |
-|-------|------|
-| Agent map (`llms.txt`) | `llms.txt` |
-| Foundry / mill plant | `docs-site/docs/architecture/v4-foundry.md` |
-| Features since 3.1 | `docs-site/docs/guides/features-since-3.1.md` |
-| features.json | `docs-site/docs/guides/features-json.md` |
-| Platform integrations | `docs-site/docs/guides/integrations.md` |
-| Memory routing | `docs-site/docs/guides/memory-routing.md` |
-| Repertoire | `docs-site/docs/guides/repertoire.md` |
-| AsideContext | `docs-site/docs/guides/aside-context.md` |
-| Consumer migration | `docs-site/docs/guides/consumer-migration.md` |
-| Docusaurus site | https://0xrayai.github.io/xray/ |
-
-## Release artifacts
-
-`npm run release:patch` updates: `package.json`, `CHANGELOG.md`, `README.md`, `AGENTS.md`, `AGENTS-consumer.md`, `SKILLS.md`, `llms.txt`, Docusaurus guides.