0xray 4.0.20 → 4.0.22

package/vendor/@0xray/repertoire/data/stack-overlay.json

@@ -1,6 +1,6 @@
 {
   "description": "Stack-language overlay for 0xRay 4.0 memory routing. Additive to the 8-name factory seed. Not a plant diary and not the 0.1.8 brain.",
-  "last_updated": "2026-09-20T00:00:00.000Z",
+  "last_updated": "2026-09-23T00:00:00.000Z",
   "source": "stack-overlay-4.0",
   "schema_version": "1.1",
   "implementation_guidance": {
@@ -745,6 +745,159 @@
         "last_seen": "2026-09-21T00:00:00.000Z",
         "governance_forced_count": 0
       }
+    },
+    {
+      "name": "feat-rebase",
+      "definition": "When the mandated work turns into mantra, or the job has split across planes that no longer share one present, stop. Go up a level and answer the original message again from this seat. Do not continue the side thread and call that the job.",
+      "tags": [
+        "cadence",
+        "rebase",
+        "lead"
+      ],
+      "priority": "high",
+      "status": "proposed",
+      "first_seen": "2026-09-23",
+      "evaluation_criteria": "Reply answers the original message from this seat instead of continuing a side thread.",
+      "validation_experiment": "A seat keeps answering notifications after the human asked for the original job \u2014 treat as fail.",
+      "master_index_integration": "Project-local curated_signals after hydrateWritableSignals merges data/stack-overlay.json. Never write the factory tarball.",
+      "implementation_notes": "LEAD-CADENCE.md Feat rebase. Not a new skill.",
+      "example_inference_snippet": "Go up a level and answer the original message again from this seat.",
+      "observation_stats": {
+        "observation_count": 1,
+        "avg_confidence": 0.55,
+        "max_confidence": 0.55,
+        "last_seen": "2026-09-23T00:00:00.000Z",
+        "governance_forced_count": 0
+      }
+    },
+    {
+      "name": "operating-planes",
+      "definition": "Operating planes are code, OP-PROC, model, suit, mill, host, and test/ship. Test/ship is the critical OP-PROC plane: test then ship is the hero; ship without that proof is the catastrophe. Long-term memory is the project law list. Each wake copies stack laws onto that list, keeps observation stats, and refreshes a changed definition. Heat writes the matched names onto Station, the short-term card that survives compaction. As the model improves, reactive decisions move out of code into OP-PROC. That move is not fully proved. Once a version is live, the stamper strips every present-tense patch pin from shipped guides and shipped OP-PROC, or reconcile advances the next cut. The stamper does not edit Station, NOTES, dest, or node_modules. It does not publish. Do not freeze the live cut.",
+      "tags": [
+        "planes",
+        "op-proc",
+        "test-ship",
+        "version-manager"
+      ],
+      "priority": "high",
+      "status": "proposed",
+      "first_seen": "2026-09-23",
+      "evaluation_criteria": "Reply names test/ship as the hero or the catastrophe, and treats a live cut as the stamper stripping shipped guides and shipped OP-PROC.",
+      "validation_experiment": "A seat ships without the test, or wakes after compact without the test/ship plane — treat as fail.",
+      "master_index_integration": "Project-local curated_signals after hydrateWritableSignals merges data/stack-overlay.json. Never write the factory tarball.",
+      "implementation_notes": "LEAD-CADENCE.md Planes. Not a new skill. Patch stamps stay in package.json, CHANGELOG, and stamped JSON. The stamper strips shipped guides and shipped OP-PROC. It does not edit Station, NOTES, dest, or node_modules. It does not publish.",
+      "example_inference_snippet": "Test then ship is the hero. Ship without that proof is the catastrophe.",
+      "observation_stats": {
+        "observation_count": 1,
+        "avg_confidence": 0.55,
+        "max_confidence": 0.55,
+        "last_seen": "2026-09-23T00:00:00.000Z",
+        "governance_forced_count": 0
+      }
+    },
+    {
+      "name": "wake-cascade",
+      "definition": "Chat is not the brain. Compaction drops the seat. Short-term memory is Station. Long-term memory is the project repertoire law list. NOTES is the deep cut: the pickup line cadences onto Station, and the body holds the cascade the card cannot. Capture a cascade by writing a named signal on the stack overlay and hydrating it onto dest. Observation counts are not capture. A reflection is not this capture. This wake, sorted: planes are code, OP-PROC, model, suit, mill, host, and test/ship; test then ship is the hero and ship without that proof is the catastrophe; each wake refreshes a changed stack definition and keeps observation stats, then heat writes matched names onto Station; the lead keeps control and a subagent gets the duty, the latest SHA, the Station card, the laws, and the suit built from the tree under review; when the work becomes mantra or the planes no longer share one present, answer the original message from this seat; once a version is live, the stamper strips every present-tense patch pin from shipped guides and shipped OP-PROC, or reconcile advances the next cut; the stamper does not edit Station, NOTES, dest, or node_modules; it does not publish; engine cadence is change, ship local, test, review the diff, monitor dest against Station, ship the PR; missing moral fusion is not an isotopic reject, vote confidence is a clamped weighted mean, thinDispatch strategy follows the adjusted level, and an empty inference cycle saves state.",
+      "tags": [
+        "cascade",
+        "memory",
+        "repertoire"
+      ],
+      "priority": "high",
+      "status": "proposed",
+      "first_seen": "2026-09-23",
+      "evaluation_criteria": "After compact the seat can state the cascade from the repertoire name and from NOTES, without the chat.",
+      "validation_experiment": "A seat wakes blank and rebuilds the planes from the thread summary — treat as fail.",
+      "master_index_integration": "Project-local curated_signals after hydrateWritableSignals merges data/stack-overlay.json. Never write the factory tarball.",
+      "implementation_notes": "NOTES body is the same cascade for the second Read. Not a reflection. Not a new skill.",
+      "example_inference_snippet": "Chat is not the brain. The cascade is the repertoire name wake-cascade.",
+      "observation_stats": {
+        "observation_count": 1,
+        "avg_confidence": 0.55,
+        "max_confidence": 0.55,
+        "last_seen": "2026-09-23T00:00:00.000Z",
+        "governance_forced_count": 0
+      }
+    },
+    {
+      "name": "heat-is-not-conviction",
+      "definition": "Heat touches last_seen on names the kernel diary already matches. Heat touches last_seen only when the diary contains that signal's name; two definition words are not a hit; a weak session score is not lifted to 0.55 and a sample below 0.55 is not recorded. Constructing the organ does not append workspace samples. It does not append a confidence sample, so a second heat does not raise observation_count and does not move avg_confidence. More hits do not raise conviction. Promotion still flips a proposed law to validated at two observations and confidence 0.55. Conviction moves on feedback, not on heat. Kernel diary text is logs/framework/activity.log, routing outcomes, pattern metrics, and .xray/inference/latest-workflow.json plus workflow-status.json. Heat matches that text onto existing names and does not mint a law. A missing session file or a stale inference-state timestamp is telemetry, not a law. Repertoire mergeStackOverlay refreshes a changed stack definition and keeps observation stats. It does not pass fleshGeneric. Subject overlay still fleshes only a generic field-observed stub.",
+      "tags": ["memory", "heat", "kernel"],
+      "priority": "high",
+      "status": "proposed",
+      "first_seen": "2026-09-23",
+      "evaluation_criteria": "A rising observation count at 0.55 is not treated as learning.",
+      "validation_experiment": "A seat reads observation mass as conviction — treat as fail.",
+      "master_index_integration": "Project-local curated_signals after hydrateWritableSignals merges data/stack-overlay.json. Never write the factory tarball.",
+      "implementation_notes": "heatKernelDiary calls touchLastSeen. recordPrimitiveObservations still appends samples for session and field ingest. promoteQualifiedSignals uses DEFAULT_PROMOTION_MIN_CONFIDENCE 0.55 and min observations 2. mergeStackOverlay in repertoire src/paths.ts refreshes stack law fields and keeps observation_stats. It does not pass fleshGeneric.",
+      "example_inference_snippet": "Heat touches last_seen and does not append a confidence sample. A changed stack definition refreshes and the observation count stays.",
+      "observation_stats": {
+        "observation_count": 1,
+        "avg_confidence": 0.55,
+        "max_confidence": 0.55,
+        "last_seen": "2026-09-23T00:00:00.000Z",
+        "governance_forced_count": 0
+      }
+    },
+    {
+      "name": "inference-cycle-invariant",
+      "definition": "An inference cycle that generates no proposals still writes inference-cycle-state.json. Without that write the one-day trigger never starts and the next call repeats. InferenceCycle.getInstance applies later options, including force and skipApply. Governance failure rejects the proposals. Proposal text is a keyword map over session problem strings. generateProposals also emits recurring-pattern titles.",
+      "tags": ["inference", "invariant"],
+      "priority": "high",
+      "status": "proposed",
+      "first_seen": "2026-09-23",
+      "evaluation_criteria": "Empty cycles persist state, and later getInstance options apply.",
+      "validation_experiment": "An empty cycle returns without a state file — treat as fail.",
+      "master_index_integration": "Project-local curated_signals after hydrateWritableSignals merges data/stack-overlay.json. Never write the factory tarball.",
+      "implementation_notes": "src/inference/inference-cycle.ts and inference-proposal-generator.ts. generateProposals maps session problem strings through a keyword map and also emits recurring-pattern titles. Not a new skill.",
+      "example_inference_snippet": "An empty inference cycle still saves state. Proposal text is a keyword map over session problem strings. generateProposals also emits recurring-pattern titles.",
+      "observation_stats": {
+        "observation_count": 1,
+        "avg_confidence": 0.55,
+        "max_confidence": 0.55,
+        "last_seen": "2026-09-23T00:00:00.000Z",
+        "governance_forced_count": 0
+      }
+    },
+    {
+      "name": "governance-vote-invariant",
+      "definition": "PHI 1.666 and TAU 0.865 are unused constants. The matrix cutoffs are the literals 0.92, 0.95, 0.82, 0.88, 0.75, and 0.80. Reason text does not claim TAU. mergeVotes averageConfidence is the weighted mean of confidence, sum of weight times confidence over sum of weight, clamped to 0..1. That number is resonance. isotopicRatio is compared only when it is a finite number. moralFusion is not defaulted to 0.5. A missing fusion number does not force reject. Critical moral tension does reject. Without moral fields the three-skill vote stands.",
+      "tags": ["governance", "invariant"],
+      "priority": "high",
+      "status": "proposed",
+      "first_seen": "2026-09-23",
+      "evaluation_criteria": "A vote with no moral fusion is not an isotopic reject, and average confidence stays in 0..1.",
+      "validation_experiment": "Reason text names TAU, or average confidence exceeds 1 — treat as fail.",
+      "master_index_integration": "Project-local curated_signals after hydrateWritableSignals merges data/stack-overlay.json. Never write the factory tarball.",
+      "implementation_notes": "src/governance/governance-core.ts and governance-service.ts. Not a new skill.",
+      "example_inference_snippet": "No moral fusion is not an isotopic reject. Average confidence is a clamped weighted mean.",
+      "observation_stats": {
+        "observation_count": 1,
+        "avg_confidence": 0.55,
+        "max_confidence": 0.55,
+        "last_seen": "2026-09-23T00:00:00.000Z",
+        "governance_forced_count": 0
+      }
+    },
+    {
+      "name": "thin-dispatch-invariant",
+      "definition": "scoreComplexity applies the thresholds it is given. After Repertoire adjusts the score, level, recommendedStrategy, and estimatedAgents follow the adjusted level. A high-confidence trap with an adjusted score of at least 26 forces architect. A provenance-failure tag with an adjusted score under 51 forces bug-triage-specialist. On a frontier host the spawn gate warns and allows a spawn with no plan. Guided and strict hosts deny. The lead-dev plan builder is on.",
+      "tags": ["engine", "invariant", "thin-dispatch"],
+      "priority": "high",
+      "status": "proposed",
+      "first_seen": "2026-09-23",
+      "evaluation_criteria": "Strategy follows the adjusted level, and the trap routes are architect at 26 and bug-triage under 51.",
+      "validation_experiment": "Strategy stays on the pre-adjust level after Repertoire moves the score — treat as fail.",
+      "master_index_integration": "Project-local curated_signals after hydrateWritableSignals merges data/stack-overlay.json. Never write the factory tarball.",
+      "implementation_notes": "src/nucleus/thin-dispatch.ts and RepertoireOrchestratorBridge.resolveThinDispatchAgent. Not a new skill.",
+      "example_inference_snippet": "After Repertoire adjusts the score, strategy follows the adjusted level. A trap at 26 forces architect.",
+      "observation_stats": {
+        "observation_count": 1,
+        "avg_confidence": 0.55,
+        "max_confidence": 0.55,
+        "last_seen": "2026-09-23T00:00:00.000Z",
+        "governance_forced_count": 0
+      }
     }
   ]
 }

package/vendor/@0xray/repertoire/dist/RepertoireService.js

@@ -39,7 +39,6 @@ export class RepertoireService {
         }
         if (shouldAutoSyncXray(options.syncXray)) {
             this.syncXrayMemory();
-            this.syncWorkspaceRepos();
             this.heatKernelDiary();
         }
     }
@@ -126,6 +125,10 @@ export class RepertoireService {
     }
     /**
      * Heat existing dest names from kernel diary text. No new names.
+     * Touches last_seen only when the diary contains that signal's id,
+     * or the id with hyphens read as spaces. Does not append a confidence sample.
+     * Two definition words are not a hit. Heat must not mint and must not
+     * change observation_count or avg_confidence.
      * Colon pattern ids like `architect:architect_skill` never become dest keys.
      */
     heatKernelDiary(collected) {
@@ -134,11 +137,9 @@ export class RepertoireService {
             return { heated: [], sources: diary.sources };
         }
         const hits = this.signalsManager.matchByText(diary.text, 2);
-        const matches = hits.map((hit) => ({
-            name: hit.signal.name,
-            confidence: 0.55,
-        }));
-        const heated = matches.length > 0 ? this.signalsManager.recordPrimitiveObservations(matches) : [];
+        const heated = hits.length > 0
+            ? this.signalsManager.touchLastSeen(hits.map((hit) => hit.signal.name))
+            : [];
         return { heated, sources: diary.sources };
     }
     reloadOpProc() {

package/vendor/@0xray/repertoire/dist/ingestion/xray-session-ingester.js

@@ -36,7 +36,7 @@ export class XraySessionIngester {
                 const entry = this.sessionToInferenceEntry(session);
                 const targetFile = join(this.targetDir, `${session.timestamp.split('T')[0]}.jsonl`);
                 appendFileSync(targetFile, JSON.stringify(entry) + '\n');
-                this.recordObservations(session, entry);
+                this.recordObservations(session);
                 if (this.stateManager && session.sessionId) {
                     this.stateManager.markProcessed([session.sessionId], 'session');
                 }
@@ -50,13 +50,13 @@ export class XraySessionIngester {
         const promoted = imported > 0 ? this.signalsManager.promoteQualifiedSignals() : [];
         return { imported, skipped, promoted };
     }
-    recordObservations(session, entry) {
-        const matches = this.extractMatches(session, entry);
+    recordObservations(session) {
+        const matches = this.extractMatches(session);
         if (matches.length === 0)
             return;
         this.signalsManager.recordPrimitiveObservations(matches);
     }
-    extractMatches(session, entry) {
+    extractMatches(session) {
         const matches = [];
         const seen = new Set();
         const add = (name, confidence) => {
@@ -70,20 +70,19 @@ export class XraySessionIngester {
         for (const pattern of session.patterns ?? []) {
             const raw = pattern.name || pattern.type || '';
             const slug = slugFieldPrimitiveName(raw);
-            const confidence = typeof pattern.confidence === 'number' ? pattern.confidence : DEFAULT_PROMOTION_MIN_CONFIDENCE;
-            if (slug)
-                add(slug, Math.max(confidence, DEFAULT_PROMOTION_MIN_CONFIDENCE));
+            if (!slug || typeof pattern.confidence !== 'number')
+                continue;
+            add(slug, pattern.confidence);
         }
         for (const name of session.matched_primitives ?? []) {
-            const confidence = session.match_confidence?.[name] ?? DEFAULT_PROMOTION_MIN_CONFIDENCE;
+            const confidence = session.match_confidence?.[name];
+            if (typeof confidence !== 'number')
+                continue;
             add(name, confidence);
         }
         if (this.repoPrimitive) {
             add(this.repoPrimitive, DEFAULT_PROMOTION_MIN_CONFIDENCE);
         }
-        for (const hit of this.signalsManager.matchByText(entry.inference, 2)) {
-            add(hit.signal.name, DEFAULT_PROMOTION_MIN_CONFIDENCE);
-        }
         return matches;
     }
     sessionToInferenceEntry(session) {

package/vendor/@0xray/repertoire/dist/paths.js

@@ -70,6 +70,65 @@ export function resolveWritableConfigPath(configured, cwd, fallback) {
         return configured;
     return resolve(cwd, configured);
 }
+const STACK_LAW_FIELDS = [
+    'definition',
+    'tags',
+    'priority',
+    'evaluation_criteria',
+    'validation_experiment',
+    'example_inference_snippet',
+    'implementation_notes',
+];
+function assignStackLawField(existing, field, next) {
+    switch (field) {
+        case 'definition':
+            if (typeof next === 'string')
+                existing.definition = next;
+            break;
+        case 'tags':
+            if (Array.isArray(next))
+                existing.tags = [...next];
+            break;
+        case 'priority':
+            if (typeof next === 'string')
+                existing.priority = next;
+            break;
+        case 'evaluation_criteria':
+            if (typeof next === 'string')
+                existing.evaluation_criteria = next;
+            break;
+        case 'validation_experiment':
+            if (typeof next === 'string')
+                existing.validation_experiment = next;
+            break;
+        case 'example_inference_snippet':
+            if (typeof next === 'string')
+                existing.example_inference_snippet = next;
+            break;
+        case 'implementation_notes':
+            if (typeof next === 'string')
+                existing.implementation_notes = next;
+            break;
+        default: {
+            const unexpected = field;
+            throw new Error(`unknown stack law field ${String(unexpected)}`);
+        }
+    }
+}
+/** Copy changed stack law text onto an existing project name. Observation stats stay. */
+function refreshStackLaw(existing, signal) {
+    let dirty = false;
+    for (const field of STACK_LAW_FIELDS) {
+        const next = signal[field];
+        if (next == null)
+            continue;
+        if (JSON.stringify(existing[field]) === JSON.stringify(next))
+            continue;
+        assignStackLawField(existing, field, next);
+        dirty = true;
+    }
+    return dirty;
+}
 export function isGenericFieldObservedDefinition(definition) {
     return definition.includes('Field-observed domain primitive');
 }
@@ -104,6 +163,9 @@ function mergeOverlaySignals(destPath, overlayPath, options = {}) {
             changed += 1;
             continue;
         }
+        if (options.refreshLaws && refreshStackLaw(existing, signal)) {
+            changed += 1;
+        }
         if (options.fleshGeneric && isGenericFieldObservedDefinition(existing.definition)) {
             existing.definition = signal.definition;
             if (signal.tags)
@@ -127,12 +189,12 @@ function mergeOverlaySignals(destPath, overlayPath, options = {}) {
     return changed;
 }
 /**
- * Additive merge of `data/stack-overlay.json` into a project copy.
- * Existing names keep their stats. Missing overlay names are appended.
- * Refuses the factory tarball path.
+ * Merge `data/stack-overlay.json` into a project copy.
+ * Missing names are appended. A changed stack law field is refreshed.
+ * Observation stats on existing names stay. Refuses the factory tarball path.
  */
 export function mergeStackOverlay(destPath, overlayPath = DEFAULT_STACK_OVERLAY_PATH) {
-    return mergeOverlaySignals(destPath, overlayPath);
+    return mergeOverlaySignals(destPath, overlayPath, { refreshLaws: true });
 }
 /**
  * Additive merge of `data/subject-overlay.json` — product/repo flesh.

package/vendor/@0xray/repertoire/dist/registry/CuratedSignalsManager.js

@@ -7,6 +7,21 @@ export const FEEDBACK_SUCCESS_CONFIDENCE_BOOST = 0.002;
 export const FEEDBACK_FAILURE_CONFIDENCE_PENALTY = 0.005;
 export const FEEDBACK_MIN_CONFIDENCE = DEFAULT_PROMOTION_MIN_CONFIDENCE;
 const FIELD_PRIMITIVE_NAME = /^[A-Za-z][A-Za-z0-9_-]{2,119}$/;
+/**
+ * The diary names a law only when it contains the signal id, or the id with
+ * hyphens read as spaces. A repo tail, leftover tokens, and two definition
+ * words are not the name.
+ */
+export function signalNameInText(text, name) {
+    const normalized = text.toLowerCase();
+    const id = name.toLowerCase();
+    if (!id)
+        return false;
+    if (normalized.includes(id))
+        return true;
+    const spaced = id.replace(/-/g, ' ');
+    return spaced !== id && normalized.includes(spaced);
+}
 const GROOVER_EXPERIMENT_NAMES = new Set([
     'criteria_selection_gap',
     'external_norm_smuggling_risk',
@@ -119,25 +134,17 @@ export class CuratedSignalsManager {
         return this.load().signals.filter((s) => s.priority === priority);
     }
     /**
-     * Score text against all signals using name, tags, definition, criteria, and snippet.
+     * Score text against signals. A hit requires the signal id, or the id with
+     * hyphens read as spaces. Two definition words are not a match.
      */
     matchByText(text, minScore = 2) {
         const normalized = text.toLowerCase();
         const matches = [];
         for (const signal of this.load().signals) {
-            const matchedOn = [];
-            let score = 0;
-            if (normalized.includes(signal.name.replace(/-/g, ' ')) || normalized.includes(signal.name)) {
-                score += 5;
-                matchedOn.push('name');
-            }
-            else if (signal.name.startsWith('repo-')) {
-                const tail = signal.name.slice(5);
-                if (tail.length >= 3 && new RegExp(`\\b${tail}\\b`, 'i').test(normalized)) {
-                    score += 5;
-                    matchedOn.push('name');
-                }
-            }
+            if (!signalNameInText(text, signal.name))
+                continue;
+            const matchedOn = ['name'];
+            let score = 5;
             for (const tag of signal.tags) {
                 if (normalized.includes(tag.toLowerCase())) {
                     score += 3;
@@ -191,6 +198,39 @@ export class CuratedSignalsManager {
         }
         return matches.sort((a, b) => b.score - a.score);
     }
+    /**
+     * Mark names the diary already matched. Does not append a confidence sample.
+     * Missing names are left absent. Heat must not mint a law.
+     */
+    touchLastSeen(names) {
+        const data = this.load();
+        const now = new Date().toISOString();
+        const updated = [];
+        const seen = new Set();
+        for (const name of names) {
+            if (!name || seen.has(name))
+                continue;
+            seen.add(name);
+            const signal = data.signals.find((entry) => entry.name === name);
+            if (!signal)
+                continue;
+            const previous = signal.observation_stats;
+            signal.observation_stats = previous
+                ? { ...previous, last_seen: now }
+                : {
+                    observation_count: 0,
+                    avg_confidence: 0,
+                    max_confidence: 0,
+                    last_seen: now,
+                    governance_forced_count: 0,
+                };
+            updated.push(signal.name);
+        }
+        if (updated.length > 0) {
+            this.save(data);
+        }
+        return updated;
+    }
     recordPrimitiveObservations(matches, options = {}) {
         const minConfidence = options.minConfidence ?? DEFAULT_PROMOTION_MIN_CONFIDENCE;
         const data = this.load();

package/xray/agents_template.md

@@ -1,22 +1,27 @@
 # 0xRay AI Agents
 
-Quick reference for the 0xRay AI orchestration framework (v16 MCPs-centric three-subsystem).
+Quick reference for the 0xRay AI orchestration framework (**4.0** — 7 consumer MCP servers).
 
 ## Available MCP Servers
 
+All seven use `npx -y 0xray mcp <cmd>`:
+
 | Server | Role |
 |--------|------|
 | `xray-governance` | Proposal governance, codex snapshot, quality gates |
-| `xray-skills` | Skill invocation, agent-specific knowledge servers |
+| `xray-skills` | Skill invocation, 45 knowledge skills |
+| `xray-orchestrator` | thinDispatch routing, AsideContext, confidence gate |
 | `xray-enforcer` | Codex compliance enforcement, rule validation |
-| `xray-orchestrator` | Multi-agent workflow coordination, task delegation |
+| `xray-researcher` | Codebase exploration, memory-routing enrichment |
+| `xray-code-review` | Proposal quality, code review deliberation |
+| `xray-architect-tools` | System design, architecture decisions |
 
 ## CLI Commands
 
 | Command | Description |
 |---------|-------------|
 | `xray setup` | Full framework setup (hooks, Hermes, symlinks) |
-| `xray validate` | Validate codex compliance |
+| `xray validate` | Wear check (pack paths, Cursor hooks, mill) — not leftover init.sh |
 | `xray codex check` | Check codex rules |
 | `xray health` | Framework health check |
 | `xray hooks` | Manage lifecycle hooks |
@@ -25,7 +30,7 @@ Quick reference for the 0xRay AI orchestration framework (v16 MCPs-centric three
 
 xray operates under the three-subsystem model: Inference + External Governance (Dynamo Solar SSOT) + Autonomous Engine (thinDispatch 7-flow in MCP orchestrator). All actions are validated against the Universal Development Codex before execution.
 
-**Codex**: The codex lives in `.xray/codex.json` and enforces 60 terms across all agent interactions.
+**Codex**: `.xray/codex.json` — **69 terms** across all agent interactions.
 
 ## thinDispatch Routing
 

package/xray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "4.0.20",
+  "version": "4.0.22",
   "description": "0xRay Framework - Unified Feature Configuration",
   "suit_temperament": {
     "profile": "auto",

package/dist/mcps/shared/prompt-security-validator.d.ts

@@ -1,44 +0,0 @@
-/**
- * 0xRay Framework - AI Prompt Security Validator
- *
- * Specialized security validation for AI agent prompts and responses
- * Prevents prompt injection, system prompt override, and malicious inputs
- */
-export interface PromptSecurityConfig {
-    enabled: boolean;
-    maxPromptLength: number;
-    allowedPatterns: RegExp[];
-    blockedPatterns: RegExp[];
-    sanitizeLevel: "basic" | "strict" | "paranoid";
-}
-export interface SecurityValidationResult {
-    isSafe: boolean;
-    violations: string[];
-    sanitizedPrompt?: string | undefined;
-    riskLevel: "low" | "medium" | "high" | "critical";
-}
-export declare class PromptSecurityValidator {
-    private config;
-    constructor(config?: Partial<PromptSecurityConfig>);
-    /**
-     * Validate AI prompt for security issues
-     */
-    validatePrompt(prompt: string): SecurityValidationResult;
-    /**
-     * Check for system prompt override attempts
-     */
-    private containsSystemPromptOverride;
-    /**
-     * Check for prompt injection attempts
-     */
-    private containsInjectionAttempts;
-    /**
-     * Sanitize prompt by removing dangerous patterns
-     */
-    private sanitizePrompt;
-    /**
-     * Validate agent response for safety
-     */
-    validateResponse(response: string): SecurityValidationResult;
-}
-export declare const promptSecurityValidator: PromptSecurityValidator;