0xray 4.0.26 → 4.0.28

package/scripts/node/mcp-launch.cjs

@@ -0,0 +1,70 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * Start an MCP server with an allowlisted environment.
+ *
+ *   node mcp-launch.cjs --keep PATH,HOME,XRAY_ROOT[,NAME...] -- <cmd> [args...]
+ *
+ * argv carries names only. The host merges the config `env` block onto this
+ * process, so values come from the live environment. The child receives
+ * process.env filtered to those names. stdio is inherited. Signals and the
+ * exit code are forwarded.
+ */
+const { spawn } = require("child_process");
+
+function fail(message) {
+  process.stderr.write(`mcp-launch: ${message}\n`);
+  process.exit(1);
+}
+
+function parseArgs(argv) {
+  const keepIdx = argv.indexOf("--keep");
+  const dash = argv.indexOf("--");
+  if (keepIdx < 0 || dash < 0 || dash !== keepIdx + 2 || dash >= argv.length - 1) {
+    fail("usage: node mcp-launch.cjs --keep NAME[,NAME...] -- <cmd> [args...]");
+  }
+  const keep = argv[keepIdx + 1]
+    .split(",")
+    .map((name) => name.trim())
+    .filter(Boolean);
+  if (keep.length === 0) fail("--keep needs at least one name");
+  for (const name of keep) {
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name)) fail(`refusing keep name ${name}`);
+  }
+  return { keep, command: argv[dash + 1], args: argv.slice(dash + 2) };
+}
+
+function childEnv(keep) {
+  const env = {};
+  for (const name of keep) {
+    if (process.env[name] != null) env[name] = process.env[name];
+  }
+  return env;
+}
+
+function main() {
+  const { keep, command, args } = parseArgs(process.argv.slice(2));
+  const child = spawn(command, args, { env: childEnv(keep), stdio: "inherit" });
+  const forward = (signal) => {
+    if (!child.pid) return;
+    try {
+      child.kill(signal);
+    } catch {
+      /* child already exited */
+    }
+  };
+  for (const signal of ["SIGINT", "SIGTERM", "SIGHUP"]) {
+    process.on(signal, () => forward(signal));
+  }
+  child.on("error", (err) => fail(err.message));
+  child.on("exit", (code, signal) => {
+    if (signal) {
+      process.removeAllListeners(signal);
+      process.kill(process.pid, signal);
+      return;
+    }
+    process.exit(code == null ? 1 : code);
+  });
+}
+
+main();

package/scripts/node/postinstall.cjs

@@ -25,6 +25,8 @@ function structuredLog(component, action, status, details) {
 }
 
 const XRAY_MANAGED_AGENTS_MARKER = "<!-- 0xray-managed -->";
+const XRAY_MANAGED_AGENTS_BEGIN = "<!-- 0xray-managed:begin -->";
+const XRAY_MANAGED_AGENTS_END = "<!-- 0xray-managed:end -->";
 
 function fillConsumerPlaceholders(content, consumer) {
   const name = consumer.name || "this project";
@@ -36,24 +38,51 @@ function fillConsumerPlaceholders(content, consumer) {
     .join(versionParen);
 }
 
+function renderManagedAgents(packageRoot, targetDir) {
+  let content = fs.readFileSync(path.join(packageRoot, "AGENTS-consumer.md"), "utf8");
+  const consumer = readPackageIdentity(path.join(targetDir, "package.json"));
+  content = fillConsumerPlaceholders(content, consumer).trim();
+  if (!content.includes(XRAY_MANAGED_AGENTS_MARKER)) {
+    content = `${content}\n\n${XRAY_MANAGED_AGENTS_MARKER}`;
+  }
+  return `${XRAY_MANAGED_AGENTS_BEGIN}\n${content}\n${XRAY_MANAGED_AGENTS_END}\n`;
+}
+
+function managedRegion(text) {
+  const beginAt = text.indexOf(XRAY_MANAGED_AGENTS_BEGIN);
+  const endAt = text.indexOf(XRAY_MANAGED_AGENTS_END);
+  if (beginAt === -1 || endAt === -1 || endAt < beginAt) return null;
+  return {
+    before: text.slice(0, beginAt),
+    after: text.slice(endAt + XRAY_MANAGED_AGENTS_END.length),
+  };
+}
+
+function outsideRegionEdited(parts) {
+  return parts.before.trim() !== "" || parts.after.trim() !== "";
+}
+
 function deployManagedAgents(packageRoot, targetDir, log) {
   const agentsConsumer = path.join(packageRoot, "AGENTS-consumer.md");
   const agentsDest = path.join(targetDir, "AGENTS.md");
   if (!fs.existsSync(agentsConsumer)) return;
-  const shouldDeployAgents =
-    !fs.existsSync(agentsDest) ||
-    fs.readFileSync(agentsDest, "utf8").includes(XRAY_MANAGED_AGENTS_MARKER);
-  if (shouldDeployAgents) {
-    let content = fs.readFileSync(agentsConsumer, "utf8");
-    const consumer = readPackageIdentity(path.join(targetDir, "package.json"));
-    content = fillConsumerPlaceholders(content, consumer);
-    if (!content.includes(XRAY_MANAGED_AGENTS_MARKER)) {
-      content = `${content.trimEnd()}\n\n${XRAY_MANAGED_AGENTS_MARKER}\n`;
-    }
-    fs.writeFileSync(agentsDest, content);
-  } else {
-    log("postinstall", "Skipped AGENTS.md (consumer-customized)", "info");
+  const next = renderManagedAgents(packageRoot, targetDir);
+  if (!fs.existsSync(agentsDest)) {
+    fs.writeFileSync(agentsDest, next);
+    return;
+  }
+  const current = fs.readFileSync(agentsDest, "utf8");
+  const parts = managedRegion(current);
+  if (!parts || outsideRegionEdited(parts)) {
+    fs.writeFileSync(path.join(targetDir, "AGENTS.md.0xray-new"), next);
+    log("postinstall", "AGENTS.md left in place; wrote AGENTS.md.0xray-new", "info");
+    return;
   }
+  const beginAt = next.indexOf(XRAY_MANAGED_AGENTS_BEGIN);
+  const endAt = next.indexOf(XRAY_MANAGED_AGENTS_END);
+  const interior = next.slice(beginAt, endAt + XRAY_MANAGED_AGENTS_END.length);
+  const updated = `${parts.before}${interior}${parts.after}`;
+  if (updated !== current) fs.writeFileSync(agentsDest, updated);
 }
 
 function deployConsumerGitignore(packageRoot, targetDir, log) {

package/src/integrations/openclaw/plugin/xray-pre-tool/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xray-pre-tool",
-  "version": "4.0.26",
+  "version": "4.0.28",
   "private": true,
   "type": "module",
   "description": "0xRay constitution + temperament PreToolUse for OpenClaw",

package/src/skills/orchestrator/SKILL.md

@@ -62,7 +62,7 @@ Config: `features.json` → `multi_agent_orchestration.lead_dev_mode`
 
 ## Lead cadence (syncopation)
 
-The seven rules are the engine. The cadence is the time signature. Disk SSOT: `grok-bot/ops/LEAD-CADENCE.md`.
+The seven rules are the engine. The cadence is the time signature. Disk SSOT: `grok-bot/OP-PROC.md` (team specifics live in `house/`).
 
 Jargon is not the job. Review and cadence ask whether the change works. Do not spend the loop reciting dest names, mill liturgy, or host mantras.
 
@@ -76,8 +76,8 @@ Jargon is not the job. Review and cadence ask whether the change works. Do not s
 - **Peer boot:** four-line dispatch. They Read Station + this cadence and install without a command novel. Not a twin critic.
 - **Live tick, not pacer:** `/loop` runs work now. Keep workstreams moving. Do not idle-wait 12 minutes. **Clean ticks every cycle** — unsubscribe then resubscribe so the prompt matches metal. Name-dedupe does not rewrite. A stale prompt (waiting URL after live, Hold after strip) is dirty: rewrite, do not act. **If the card and WAVEBOARD are idle, unsubscribe and do not resubscribe.**
 - **Board clock:** PR events + resume the same critic. Not two idle pacers. Merge after PASS+CI (gate A). Publish only after mill-gate D + `foundry gate`.
-- **Dispatch:** ticket + PR URLs + “Wear, then review.” The critic Reads `SEATS.md` Reviewer. Do not paste a command novel. When a law is spoken twice, encode it this wake.
-- **Cascade:** Chat is not the brain. A cascade that must survive compaction is a named repertoire signal on the stack overlay, hydrated onto the project law list. NOTES holds the same cascade for the second Read. Station stays the ticket. A reflection is not this capture. Capture priority: a law is an invariant you would otherwise re-read the source to relearn. One law per subsystem bone. Heat touches last_seen and does not append a confidence sample, so more hits do not raise conviction. Heat touches last_seen when the diary contains that signal's name or a local clause of four definition content words; two definition words are not a hit; the same words scattered through a long diary are not a hit; a weak session score is not lifted to 0.55 and a sample below 0.55 is not recorded. Constructing the organ does not append workspace samples. Hero names: `heat-is-not-conviction`, `inference-cycle-invariant`, `governance-vote-invariant`, `thin-dispatch-invariant`. Repertoire mergeStackOverlay refreshes a changed stack definition and keeps observation stats. A floor observation count does not change a route. Feedback moves conviction by a tenth, and a failure can leave 0.55. learned-conviction.json beside dest restores that average when a wake flattens it to 0.55. It does not store the observation count.
+- **Dispatch:** ticket + PR URLs + “Wear, then review.” The critic Reads `grok-bot/OP-PROC.md` (team specifics live in `house/`). Do not paste a command novel. When a law is spoken twice, encode it this wake.
+- **Cascade:** Chat is not the brain. A cascade that must survive compaction is a named repertoire signal on the stack overlay, hydrated onto the project law list. NOTES holds the same cascade for the second Read. Station stays the ticket. A reflection is not this capture. Memory scoring rules: [docs/memory-scoring.md](https://github.com/0xRayAI/xray/blob/main/docs/memory-scoring.md).
 - **Cold brief:** a new critic or any new subagent that does not already have this thread gets the latest commit SHA on the branch under review (fetch it; do not reuse an earlier SHA from a previous pass) and the Station card (`.xray/state/STATION.md`: intent, plan, git). If the card is missing, give branch + HEAD + what just changed. If the branch moves after you brief them, send the new SHA before they verdict.
 - **Control:** The lead keeps control. Do not assume the subagent has the context. Give the duty, the latest SHA, the Station card, and the laws that apply. The subagent wears the applicable 0xRay suit before it works: the tree under review, built and installed. An older published package is not that suit. The lead checks the result.
 
@@ -96,7 +96,7 @@ This suite is the engine that builds the engine. When a seat sees OP-PROC, write
 
 Operating planes: code, OP-PROC, model, suit, mill, host, and test/ship. Test/ship is the critical OP-PROC plane. Test then ship is the hero. Ship without that proof is the catastrophe. Long-term memory is the project law list. Each wake refreshes a changed stack definition and keeps observation stats. Heat writes the matched names onto Station, the short-term card that survives compaction. Reactive decisions move out of TypeScript into OP-PROC as the model improves. That move is why the mill and the suit exist. It is not fully proved. Once a version is live, the stamper strips every present-tense patch pin from shipped guides and shipped OP-PROC, or reconcile advances the next cut. The stamper does not edit Station, NOTES, dest, or node_modules. It does not publish. Do not freeze the live cut.
 - **Close:** loop until Station is done. Compact: Station survives the cut. Overlay dest names are OP-PROC — reload `repertoire-working.json` `opProcNames`, not Station.
-- **Board:** critic Strict comments; forge implements; lead stays main thread.
+- **Board:** critic Strict comments; the implementer implements; lead stays main thread.
 - **Codex 69:** rewire this skill and existing ops. Do not add a new `SKILL.md` to hold the cadence.
-- **Ship matrix:** `LEAD-CADENCE.md` Decision matrix — A PR+CI · B pack · C `release:docs-check` (`reconcile --check`; no patch stamps on guides) · D `foundry release --i-mean-it`. Green CI is not ship. Spend / credentials stay Ask-first. Patch number lives in `package.json` + CHANGELOG.
+- **Ship matrix:** `grok-bot/OP-PROC.md` Decision matrix (team specifics live in `house/`) — A PR+CI · B pack · C `release:docs-check` (`reconcile --check`; no patch stamps on guides) · D `foundry release --i-mean-it`. Green CI is not ship. Spend / credentials stay Ask-first. Patch number lives in `package.json` + CHANGELOG.
 - **Metamorphosis:** LLM → OP-PROC is in-context worn seats (same critic, same dummy, resume only). Not more bots.

package/src/skills/storyteller/SKILL.md

@@ -96,7 +96,7 @@ codex_terms: [5, 7, 32]  # Related Codex term numbers
 ```markdown
 ## What Next?
 
-- Related Codex terms: [codex.json](../../../../.xray/codex.json)
+- Related Codex terms: [codex.json](../../../.xray/codex.json)
 - Next story to write: [suggestion]
 ```
 

package/xray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "4.0.26",
+  "version": "4.0.28",
   "description": "0xRay Framework - Unified Feature Configuration",
   "suit_temperament": {
     "profile": "auto",