0xray 4.0.35 → 4.0.36

package/.grok-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "4.0.35",
+  "version": "4.0.36",
   "description": "0xRay suit for Grok, Hermes, OpenClaw, OpenCode: mill+inspect, Codex, 7 MCP servers. Costume 45/42 is opt-in foundry, not the default wear.",
   "author": {
     "name": "0xRay AI",

package/.xray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "4.0.35",
+  "version": "4.0.36",
   "description": "0xRay Framework - Unified Feature Configuration",
   "suit_temperament": {
     "profile": "auto",

package/dist/CHANGELOG.md

@@ -42,6 +42,16 @@ The format is based on [Conventional Commits](https://www.conventionalcommits.or
 - Archive root `integrations/` costume SKILL dump → `docs/archive/integrations-costume/`. Live wear is `src/integrations`.
 - Archive root `commands/` stale copy → `docs/archive/commands-copy/`. Live wear is `src/opencode/commands`.
 
+## [4.0.36] - 2026-10-02
+
+### 🔄 Changes
+
+### 🔎 Other Changes
+- Merge pull request #178 from 0xRayAI/fix/goggles-robust (21c8f30d9)
+- fix(goggles): hold the stop through search, read, and a dist wipe (abe603265)
+
+---
+
 ## [4.0.35] - 2026-10-02
 
 ### 🔄 Changes

package/dist/integrations/grok/plugin/0xray/hooks/hooks.json

@@ -5,7 +5,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/dist/integrations/grok/hooks/pre-tool-use.js\"",
+            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/scripts/mjs/run-grok-hook.mjs\" pre-tool-use.js",
             "timeout": 30
           }
         ]
@@ -16,7 +16,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/dist/integrations/grok/hooks/session-start.js\"",
+            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/scripts/mjs/run-grok-hook.mjs\" session-start.js",
             "timeout": 30
           }
         ]
@@ -27,7 +27,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/dist/integrations/grok/hooks/session-start.js\" --hook-event=user_prompt_submit",
+            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/scripts/mjs/run-grok-hook.mjs\" session-start.js --hook-event=user_prompt_submit",
             "timeout": 30
           }
         ]
@@ -38,7 +38,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/dist/integrations/grok/hooks/post-tool-use.js\"",
+            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/scripts/mjs/run-grok-hook.mjs\" post-tool-use.js",
             "timeout": 30
           }
         ]
@@ -49,7 +49,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/dist/integrations/grok/hooks/session-start.js\" --hook-event=pre_compact",
+            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/scripts/mjs/run-grok-hook.mjs\" session-start.js --hook-event=pre_compact",
             "timeout": 30
           }
         ]
@@ -60,7 +60,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/dist/integrations/grok/hooks/session-start.js\" --hook-event=post_compact",
+            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/scripts/mjs/run-grok-hook.mjs\" session-start.js --hook-event=post_compact",
             "timeout": 30
           }
         ]

package/dist/integrations/hooks/goggles-mcp.mjs

@@ -2,7 +2,7 @@
  * Goggles MCP. Stdio. Server name `goggles`.
  * Tools: look, status_lens. Same organ as the CLI.
  */
-import { existsSync, readFileSync } from 'node:fs';
+import { existsSync, readFileSync, realpathSync } from 'node:fs';
 import { basename, join, resolve } from 'node:path';
 import { pathToFileURL, fileURLToPath } from 'node:url';
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
@@ -328,9 +328,16 @@ async function main() {
   await server.connect(transport);
 }
 
+function sameInvoked(argvPath, modulePath) {
+  try {
+    return realpathSync(argvPath) === realpathSync(modulePath);
+  } catch {
+    return resolve(argvPath) === resolve(modulePath);
+  }
+}
+
 const thisFile = fileURLToPath(import.meta.url);
-const invoked = process.argv[1] ? resolve(process.argv[1]) : '';
-if (invoked && resolve(thisFile) === invoked) {
+if (process.argv[1] && sameInvoked(process.argv[1], thisFile)) {
   main().catch((err) => {
     process.stderr.write(`goggles MCP failed: ${err instanceof Error ? err.message : String(err)}\n`);
     process.exit(1);

package/dist/integrations/hooks/goggles-pipeline.mjs

@@ -3,7 +3,8 @@
  * A named plane returns its view. Field pipes fill what they can see.
  * The view keeps every field for the next look.
  * A held plane stays quiet. A leave is denied.
- * On this host a search is grep. The lens file stays open.
+ * On this host a search is grep, glob, or a shell that runs one.
+ * The lens file stays open. One later read may go on, then the next read stops.
  */
 import { existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, unlinkSync, writeFileSync } from 'node:fs';
 import { createRequire } from 'node:module';
@@ -73,9 +74,12 @@ export function organStop(held, action) {
   const text = String(action?.text || '');
   const paths = (action?.paths || []).map(String).filter(Boolean);
   const tool = String(action?.tool || '');
-  if (/docs-site\/docs\/plates\/[a-z0-9-]+\.md/i.test([text, ...paths].join('\n'))) {
+  const spoken = [text, ...paths].join('\n');
+  if (/docs-site\/docs\/plates\/[a-z0-9-]+\.md/i.test(spoken)) {
     return organDeny(`The reading is ${plane}. That drawing is not the plane.`);
   }
+  const otherFile = otherPlaneFile(plane, spoken);
+  if (otherFile) return organDeny(`The reading is ${plane}. The action is ${otherFile}.`);
   const stripped = withoutPaths(text);
   const others = acceptedPlanes().filter((name) => name !== plane && planeWord(name, stripped));
   const namesThis = planeWord(plane, stripped);
@@ -256,10 +260,10 @@ function cardView(plane, scope, flavor, root) {
     teardown: plane.teardown || '',
     worn: plane.worn || '',
   };
+  view.exam = examinePlane(plane, root).text;
   if (flavor === 'triage') {
     const filled = new Set(filledOf(plane));
     view.empty = FIELD_ORDER.filter((name) => !filled.has(name));
-    view.exam = examinePlane(plane, root).text;
   }
   return view;
 }
@@ -284,6 +288,8 @@ function formatCardText(view) {
     if (view.empty.length) lines.push(`Empty: ${view.empty.join(', ')}`);
     lines.push(view.exam);
     text = `${text}\n${lines.join('\n')}`;
+  } else if (typeof view.exam === 'string' && view.exam.startsWith('Drift:')) {
+    text = `${text}\n${view.exam}`;
   }
   return text;
 }
@@ -305,6 +311,8 @@ export function formatCardPane(view) {
   if (view.flavor === 'triage') {
     if (Array.isArray(view.empty) && view.empty.length) rows.push(['Empty', view.empty.join(', ')]);
     if (view.exam) rows.push(['', view.exam]);
+  } else if (typeof view.exam === 'string' && view.exam.startsWith('Drift:')) {
+    rows.push(['', view.exam]);
   }
   const body = rows.map(([label, value]) => (label ? `${label.padEnd(8)} ${value}` : value).trimEnd());
   const title = `${view.flavor} · ${view.plane}`;
@@ -686,6 +694,33 @@ export function suitHint(text) {
 
 const DEEP_SEARCH = /search_codebase|find_implementation|get_documentation/i;
 const HOLDS_ON_NAME = new Set(['dichotomy', 'syncopate', 'synthesis']);
+const SHELL_SEARCH = /(?:^|&&|\|\||[;&|`(\n])\s*(?:(?:\/[\w.+/-]+\/)|(?:npx\s+))?(?:rg|grep|ag|ack|fd|find)\b|\bgit\s+grep\b/;
+
+function shellSearches(text) {
+  return SHELL_SEARCH.test(String(text || ''));
+}
+
+function mappedPlaneFiles(name) {
+  try {
+    const data = JSON.parse(readFileSync(planesFile(), 'utf8'));
+    const entry = data[name];
+    if (!entry || typeof entry !== 'object') return [];
+    const candidates = [entry.file, entry.worn, entry.skills];
+    if (Array.isArray(entry.files)) candidates.push(...entry.files);
+    return candidates.filter((file) => typeof file === 'string' && file.includes('.') && file.includes('/'));
+  } catch {
+    return [];
+  }
+}
+
+function otherPlaneFile(held, spoken) {
+  const text = String(spoken || '');
+  for (const name of acceptedPlanes()) {
+    if (name === held) continue;
+    if (mappedPlaneFiles(name).some((file) => text.includes(file))) return name;
+  }
+  return '';
+}
 
 function mapFiles() {
   try {
@@ -715,8 +750,8 @@ function researchCall(toolName, text) {
   const tool = String(toolName || '');
   const spoken = String(text || '');
   if (/researcher|explorer|deep[- ]?research/i.test(tool) || DEEP_SEARCH.test(tool)) return true;
-  if (/bash|shell/i.test(tool) && (/researcher|explorer|deep[- ]?research/i.test(spoken) || DEEP_SEARCH.test(spoken))) return true;
-  if (/^grep$/i.test(tool)) return true;
+  if (/bash|shell/i.test(tool) && (/researcher|explorer|deep[- ]?research/i.test(spoken) || DEEP_SEARCH.test(spoken) || shellSearches(spoken))) return true;
+  if (/^(grep|glob)$/i.test(tool)) return true;
   return /^read_file$/i.test(tool) && !opensLensFile(spoken);
 }
 
@@ -727,16 +762,17 @@ function passPath(root) {
 function loadReadPass(root) {
   try {
     const data = JSON.parse(readFileSync(passPath(root), 'utf8'));
-    return Boolean(data && data.read === true);
+    if (!data || data.read !== true) return null;
+    return data.spent === true ? 'spent' : 'armed';
   } catch {
-    return false;
+    return null;
   }
 }
 
-function saveReadPass(root) {
+function saveReadPass(root, spent) {
   const file = passPath(root);
   mkdirSync(dirname(file), { recursive: true });
-  writeFileSync(file, `${JSON.stringify({ read: true })}\n`);
+  writeFileSync(file, `${JSON.stringify({ read: true, spent: Boolean(spent) })}\n`);
 }
 
 /** One plane: the files the suit continues with. A look with no plane stops. Two planes stay quiet. */
@@ -771,15 +807,20 @@ function stampPlane(root, id) {
   }
 }
 
-/** A search stays stopped. The lens file stays open. One later read may go on. */
+/** A search stays stopped. The lens file stays open. One later read may go on, then the next read stops. */
 export function lensBeforeResearch(root, toolName, text) {
   const spoken = String(text || '');
   if (!researchCall(toolName, spoken)) return null;
   const names = CARD_PLANES.filter((name) => intentWords(spoken).includes(name));
   if (/^read_file$/i.test(String(toolName || ''))) {
-    if (loadReadPass(root)) return null;
-    if (names.length === 1) stampPlane(root, names[0]);
-    saveReadPass(root);
+    if (loadReadPass(root) === 'armed') {
+      saveReadPass(root, true);
+      return null;
+    }
+    if (loadReadPass(root) !== 'spent') {
+      if (names.length === 1) stampPlane(root, names[0]);
+      saveReadPass(root, false);
+    }
     return { gate: 'lens', decision: 'deny', reason: lensPage(root, names) };
   }
   if (names.length === 1) stampPlane(root, names[0]);
@@ -825,22 +866,17 @@ function seenFields(plane, root) {
   };
 }
 
-function kept(stored, seen, key) {
-  if (key === 'files') {
-    if (Array.isArray(seen.files) && seen.files.length) return seen.files.map(String);
-    return Array.isArray(stored.files) ? stored.files.map(String) : [];
-  }
-  if (seen[key]) return seen[key];
-  return stored[key] || '';
+function freshField(seen, key) {
+  if (key === 'files') return Array.isArray(seen.files) ? seen.files.map(String) : [];
+  return seen[key] || '';
 }
 
 export function growPlane(id, platesDir, root) {
   const seen = seenFields(assemblePlane(id, platesDir), sourceRoot(platesDir));
   const views = loadViews(root);
-  const stored = views[id] && typeof views[id] === 'object' ? views[id] : {};
   const grown = { id };
-  for (const key of VIEW_KEYS) grown[key] = kept(stored, seen, key);
-  if (id === 'ground') grown.from = stored.from || '';
+  for (const key of VIEW_KEYS) grown[key] = freshField(seen, key);
+  if (id === 'ground') grown.from = '';
   views[id] = {};
   for (const key of VIEW_KEYS) views[id][key] = grown[key];
   saveViews(root, views);

package/dist/integrations/openclaw/plugin/xray-pre-tool/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xray-pre-tool",
-  "version": "4.0.35",
+  "version": "4.0.36",
   "private": true,
   "type": "module",
   "description": "0xRay constitution + temperament PreToolUse for OpenClaw",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "4.0.35",
+  "version": "4.0.36",
   "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
   "readme": "README.md",
   "license": "MIT",
@@ -171,6 +171,7 @@
     "scripts/mjs/verify-four-floor-compact.mjs",
     "scripts/mjs/run-repertoire-mcp.mjs",
     "scripts/mjs/run-goggles-mcp.mjs",
+    "scripts/mjs/run-grok-hook.mjs",
     "scripts/mjs/verify-delegation-gate-core.mjs",
     "scripts/mjs/delegation-gate-fixture.mjs",
     "src/opencode/",

package/scripts/mjs/run-grok-hook.mjs

@@ -0,0 +1,50 @@
+#!/usr/bin/env node
+/**
+ * Runs a Grok hook from dist, or from src when a rebuild has removed dist.
+ * The hook command stays on this file, which prebuild does not delete.
+ */
+import { existsSync, realpathSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+
+const here = dirname(fileURLToPath(import.meta.url));
+const root = join(here, '..', '..');
+
+export function resolveGrokHook(packageRoot, name) {
+  const base = String(name || '');
+  if (!base || base.includes('/') || base.includes('..') || !base.endsWith('.js')) return '';
+  const candidates = [
+    join(packageRoot, 'dist', 'integrations', 'grok', 'hooks', base),
+    join(packageRoot, 'src', 'integrations', 'grok', 'hooks', base),
+  ];
+  return candidates.find((file) => existsSync(file)) || '';
+}
+
+function allow() {
+  process.stdout.write('{"decision":"allow"}\n');
+  process.exit(0);
+}
+
+async function main() {
+  const name = process.argv[2];
+  const hit = resolveGrokHook(root, name);
+  if (!hit) allow();
+  const extra = process.argv.slice(3);
+  process.argv = [process.argv[0], hit, ...extra];
+  try {
+    await import(pathToFileURL(hit).href);
+  } catch {
+    allow();
+  }
+}
+
+function samePath(left, right) {
+  try {
+    return realpathSync(left) === realpathSync(right);
+  } catch {
+    return left === right;
+  }
+}
+
+const invoked = Boolean(process.argv[1]) && samePath(process.argv[1], fileURLToPath(import.meta.url));
+if (invoked) await main();

package/scripts/node/install-bridges.cjs

@@ -228,10 +228,10 @@ function mergeOpencodeJson(targetDir, packageRoot, log) {
 }
 
 function grokHookShellCommand(packageRoot, scriptName, extraArgs) {
-  const script = path.join(packageRoot, "dist", "integrations", "grok", "hooks", scriptName);
+  const script = path.join(packageRoot, "scripts", "mjs", "run-grok-hook.mjs");
   const extra = extraArgs ? ` ${extraArgs}` : "";
   // JSON.stringify quotes so spaces/$ in install paths still exec (Grok fail-opens on crash).
-  return `XRAY_AI_PATH=${JSON.stringify(packageRoot)} node ${JSON.stringify(script)}${extra}`;
+  return `XRAY_AI_PATH=${JSON.stringify(packageRoot)} node ${JSON.stringify(script)} ${scriptName}${extra}`;
 }
 
 function patchGrokHookEntry(hook, packageRoot, targetDir, scriptName, extraArgs) {
@@ -260,7 +260,7 @@ function ensureGrokHookEvent(hooks, eventName) {
 function patchGrokHooks(pluginDir, packageRoot, targetDir, log, label) {
   const hooksDir = path.join(pluginDir, "hooks");
   const hooksPath = path.join(hooksDir, "hooks.json");
-  const hookScript = path.join(packageRoot, "dist", "integrations", "grok", "hooks", "pre-tool-use.js");
+  const hookScript = path.join(packageRoot, "scripts", "mjs", "run-grok-hook.mjs");
   if (!fs.existsSync(hooksPath)) {
     if (!fs.existsSync(hooksDir)) fs.mkdirSync(hooksDir, { recursive: true });
     if (!fs.existsSync(hooksPath)) return;

package/src/integrations/grok/plugin/0xray/hooks/hooks.json

@@ -5,7 +5,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/dist/integrations/grok/hooks/pre-tool-use.js\"",
+            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/scripts/mjs/run-grok-hook.mjs\" pre-tool-use.js",
             "timeout": 30
           }
         ]
@@ -16,7 +16,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/dist/integrations/grok/hooks/session-start.js\"",
+            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/scripts/mjs/run-grok-hook.mjs\" session-start.js",
             "timeout": 30
           }
         ]
@@ -27,7 +27,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/dist/integrations/grok/hooks/session-start.js\" --hook-event=user_prompt_submit",
+            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/scripts/mjs/run-grok-hook.mjs\" session-start.js --hook-event=user_prompt_submit",
             "timeout": 30
           }
         ]
@@ -38,7 +38,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/dist/integrations/grok/hooks/post-tool-use.js\"",
+            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/scripts/mjs/run-grok-hook.mjs\" post-tool-use.js",
             "timeout": 30
           }
         ]
@@ -49,7 +49,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/dist/integrations/grok/hooks/session-start.js\" --hook-event=pre_compact",
+            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/scripts/mjs/run-grok-hook.mjs\" session-start.js --hook-event=pre_compact",
             "timeout": 30
           }
         ]
@@ -60,7 +60,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/dist/integrations/grok/hooks/session-start.js\" --hook-event=post_compact",
+            "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/scripts/mjs/run-grok-hook.mjs\" session-start.js --hook-event=post_compact",
             "timeout": 30
           }
         ]

package/src/integrations/openclaw/plugin/xray-pre-tool/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xray-pre-tool",
-  "version": "4.0.35",
+  "version": "4.0.36",
   "private": true,
   "type": "module",
   "description": "0xRay constitution + temperament PreToolUse for OpenClaw",

package/xray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "4.0.35",
+  "version": "4.0.36",
   "description": "0xRay Framework - Unified Feature Configuration",
   "suit_temperament": {
     "profile": "auto",