0xray 4.0.42 → 4.1.1

package/dist/SKILLS.md

@@ -1,9 +1,11 @@
 # 0xray Skills
 
-**4.0** — a suit that survives the context window
+**4.1** — a suit that survives the context window
 
 Confer votes. Burst runs the swarm.
 
+0xRay is a three-subsystem autonomous engine. The suit is the wear. This file is the catalog.
+
 **45 skills** in this exo catalog. Default consumer plant is **`mill` + `inspect`**, not this dump. `npm install 0xray` does **not** sync 45 skills unless `foundry.json` `"costume": true`. Factory shop plant (`shop-extract`, `shop-witness`, `shop-pin`) coexists with mill plant when a hangar wears those shops. Extra shops: `foundry.json` `shopPlant`. Fasten is **foundry-plant/0**: builtin plant is mill+inspect only. `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill package declares — organs (looker, vibe, mixer) live in the mill, not this catalog. Nested mill `@0xray/foundry@0.1.12`. CLI shims `foundry blip|sound` still exist on foundry 0.1.11+. Agent map: [llms.txt](llms.txt).
 
 xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) as the **costume / self-plant catalog**. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. **Repertoire is preferred** for long-term judgment (vendored 0.2.9, dest = named laws). Station is the compact ticket, not a skill and not a keyword store. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`) or when you plant them. This file is the exo catalog — mill does **not** write it to the consumer root.

package/dist/cli/commands/opencode-install.js

@@ -75,7 +75,7 @@ function copyDir(src, dest, relPath = "") {
 async function installForOpencode(options = {}) {
     const { frameworkLogger } = await import('../../core/framework-logger.js');
     const { syncBuiltinSkills } = await import('./skill-install.js');
-    const { mintAfterWear, wantsCostume } = await import('./foundry-mint-wear.js');
+    const { mintAfterWear } = await import('./foundry-mint-wear.js');
     const wiring = loadWiring();
     frameworkLogger.log('opencode-integration', 'install-start', 'info', { options });
     const opencodeSource = path.join(__dirname, '..', '..', '..', '.opencode');
@@ -109,14 +109,8 @@ async function installForOpencode(options = {}) {
             console.log('Use --force to reinstall.');
         }
         else {
-            if (wantsCostume(process.cwd())) {
-                copyDir(opencodeSource, opencodeDest);
-                frameworkLogger.log('opencode-integration', 'opencode-copied', 'info', { destination: opencodeDest });
-            }
-            else {
-                fs.mkdirSync(opencodeDest, { recursive: true });
-                frameworkLogger.log('opencode-integration', 'mill-plant-plugin', 'info', { destination: opencodeDest });
-            }
+            copyDir(opencodeSource, opencodeDest);
+            frameworkLogger.log('opencode-integration', 'opencode-copied', 'info', { destination: opencodeDest });
             const pluginSource = path.join(__dirname, '..', '..', '..', 'dist', 'plugin', 'xray-codex-injection.js');
             const pluginDest = path.join(opencodeDest, 'plugin', 'xray-codex-injection.js');
             if (fs.existsSync(pluginSource)) {

package/dist/cli/commands/plugin-commands.d.ts

@@ -16,3 +16,7 @@ export declare function pluginEnableCommand(pluginName: string): Promise<void>;
 export declare function pluginDisableCommand(pluginName: string): Promise<void>;
 export declare function pluginStatusCommand(pluginName: string): Promise<void>;
 export declare function pluginUninstallCommand(pluginName: string): Promise<void>;
+type YamlMap = Record<string, unknown>;
+/** Subset of YAML used by plugin.yaml: maps, scalar lists, and lists of maps. */
+export declare function parseYaml(content: string): YamlMap;
+export {};

package/dist/cli/commands/plugin-commands.js

@@ -152,24 +152,25 @@ export async function pluginStatusCommand(pluginName) {
     console.log(`  Type:        ${m.type}`);
     console.log(`  Description: ${m.description}`);
     console.log(`  License:     ${m.license || "N/A"}`);
-    if (m.capabilities) {
+    if (Array.isArray(m.capabilities)) {
         console.log("\n  Capabilities:");
         for (const cap of m.capabilities) {
-            console.log(`    - ${cap}`);
+            console.log(`    - ${String(cap)}`);
         }
     }
-    if (m.tools) {
+    if (Array.isArray(m.tools)) {
         console.log("\n  Tools:");
         for (const tool of m.tools) {
-            console.log(`    - ${tool.name}: ${tool.description}`);
+            const row = tool;
+            console.log(`    - ${String(row.name)}: ${String(row.description)}`);
         }
     }
-    if (m.runtime) {
+    if (m.runtime && typeof m.runtime === "object" && !Array.isArray(m.runtime)) {
         const runtime = m.runtime;
         console.log("\n  Runtime:");
-        console.log(`    Command: ${runtime.command}`);
-        if (runtime.args) {
-            console.log(`    Args:    ${runtime.args.join(" ")}`);
+        console.log(`    Command: ${String(runtime.command)}`);
+        if (Array.isArray(runtime.args)) {
+            console.log(`    Args:    ${runtime.args.map((arg) => String(arg)).join(" ")}`);
         }
     }
     console.log("\n" + "═".repeat(50) + "\n");
@@ -195,51 +196,93 @@ function validateManifest(manifest) {
         }
     }
 }
-function parseYaml(content) {
-    const lines = content.split("\n");
-    const result = {};
-    let currentKey = "";
-    const stack = [
-        { indent: -1, obj: result },
-    ];
-    for (const line of lines) {
+function parseScalar(raw) {
+    const value = raw.trim();
+    if ((value.startsWith('"') && value.endsWith('"')) ||
+        (value.startsWith("'") && value.endsWith("'"))) {
+        return value.slice(1, -1);
+    }
+    if (value.startsWith("[") && value.endsWith("]")) {
+        const inner = value.slice(1, -1).trim();
+        if (!inner)
+            return [];
+        return inner.split(",").map((part) => parseScalar(part));
+    }
+    if (value === "true")
+        return true;
+    if (value === "false")
+        return false;
+    if (/^-?\d+$/.test(value))
+        return Number(value);
+    return value;
+}
+/** Subset of YAML used by plugin.yaml: maps, scalar lists, and lists of maps. */
+export function parseYaml(content) {
+    const root = {};
+    const stack = [{ indent: -1, container: root }];
+    for (const line of content.split("\n")) {
         const trimmed = line.trim();
         if (!trimmed || trimmed.startsWith("#"))
             continue;
         const indent = line.search(/\S/);
-        const isListItem = trimmed.startsWith("- ");
-        if (isListItem) {
-            const value = trimmed.slice(2).trim();
+        while (stack.length > 1) {
             const top = stack[stack.length - 1];
-            if (top && currentKey && !Array.isArray(top.obj[currentKey])) {
-                top.obj[currentKey] = [];
-            }
-            if (top && currentKey) {
-                top.obj[currentKey].push(value);
-            }
-            continue;
+            if (!top || indent > top.indent)
+                break;
+            stack.pop();
         }
-        const colonIndex = trimmed.indexOf(":");
-        if (colonIndex > 0) {
-            const key = trimmed.slice(0, colonIndex).trim();
-            const value = trimmed.slice(colonIndex + 1).trim();
-            const top = stack[stack.length - 1];
-            while (top && stack.length > 1 && indent <= top.indent) {
+        if (trimmed.startsWith("- ")) {
+            let owner = stack[stack.length - 1];
+            if (owner &&
+                !Array.isArray(owner.container) &&
+                Object.keys(owner.container).length === 0 &&
+                stack.length > 1) {
+                const holder = stack[stack.length - 2];
+                const emptyIndent = owner.indent;
                 stack.pop();
+                if (holder && !Array.isArray(holder.container) && holder.key) {
+                    const list = [];
+                    holder.container[holder.key] = list;
+                    stack.push({ indent: emptyIndent, container: list });
+                }
+                owner = stack[stack.length - 1];
             }
-            const current = stack[stack.length - 1];
-            if (!current)
+            if (!owner || !Array.isArray(owner.container))
                 continue;
-            const parent = current.obj;
-            if (value) {
-                parent[key] = value;
+            const rest = trimmed.slice(2).trim();
+            const colon = rest.indexOf(":");
+            const quoted = rest.startsWith('"') || rest.startsWith("'");
+            if (!quoted && colon > 0) {
+                const item = {};
+                const key = rest.slice(0, colon).trim();
+                const value = rest.slice(colon + 1).trim();
+                item[key] = value ? parseScalar(value) : {};
+                owner.container.push(item);
+                stack.push({ indent, container: item, key });
             }
             else {
-                parent[key] = {};
-                stack.push({ indent, obj: parent[key] });
+                owner.container.push(parseScalar(rest));
             }
-            currentKey = key;
+            continue;
+        }
+        const colonIndex = trimmed.indexOf(":");
+        if (colonIndex <= 0)
+            continue;
+        const key = trimmed.slice(0, colonIndex).trim();
+        const value = trimmed.slice(colonIndex + 1).trim();
+        const current = stack[stack.length - 1];
+        if (!current || Array.isArray(current.container))
+            continue;
+        if (value) {
+            current.container[key] = parseScalar(value);
+            current.key = key;
+        }
+        else {
+            const child = {};
+            current.container[key] = child;
+            current.key = key;
+            stack.push({ indent, container: child });
         }
     }
-    return result;
+    return root;
 }

package/dist/cli/commands/skill-install.js

@@ -1,7 +1,6 @@
 import { existsSync, readdirSync, readFileSync, mkdirSync, writeFileSync, cpSync, rmSync, statSync, unlinkSync, copyFileSync } from "fs";
 import { join, basename, dirname } from "path";
 import { fileURLToPath } from "url";
-import { createRequire } from "module";
 import { execSync } from "child_process";
 function getLocalRegistryPath() {
     return join(process.cwd(), ".xray", "skill-registry.json");
@@ -485,9 +484,6 @@ export async function skillRegistryCommand(action, args) {
 // Each platform's install command calls this to copy framework skills.
 export function syncBuiltinSkills(targetSkillsDir, packageRoot) {
     const root = packageRoot ?? join(dirname(fileURLToPath(import.meta.url)), "..", "..", "..");
-    const millSuit = createRequire(import.meta.url)(join(root, "scripts/foundry/mint-suit.cjs"));
-    if (!millSuit.wantsCostume(process.cwd()))
-        return 0;
     const candidateDirs = [
         join(root, "dist", "skills"),
         join(root, "src", "skills"),
@@ -500,7 +496,16 @@ export function syncBuiltinSkills(targetSkillsDir, packageRoot) {
         if (!existsSync(targetSkillsDir))
             mkdirSync(targetSkillsDir, { recursive: true });
         for (const entry of readdirSync(sourceDir, { withFileTypes: true })) {
-            if (!entry.isDirectory())
+            let linkedDir = false;
+            if (entry.isSymbolicLink()) {
+                try {
+                    linkedDir = statSync(join(sourceDir, entry.name)).isDirectory();
+                }
+                catch {
+                    linkedDir = false;
+                }
+            }
+            if (!entry.isDirectory() && !linkedDir)
                 continue;
             const skillMd = join(sourceDir, entry.name, "SKILL.md");
             if (!existsSync(skillMd))

package/dist/cli/goggles-status.d.ts

@@ -1,13 +1,10 @@
 /**
  * Goggles on status and health.
- * Organ present is not Kind 0. Quiet is a match. No phone-home.
+ * The line is whether the organ is worn.
  */
 export type GogglesStatus = {
     organPresent: boolean;
-    kind0Text: string;
-    kind0Quiet: boolean;
-    kind0Label: string;
     organLine: string;
 };
-export declare function probeGoggles(packageRoot: string, cwd: string): GogglesStatus;
+export declare function probeGoggles(packageRoot: string, _cwd: string): GogglesStatus;
 export declare function formatGogglesStatus(probe: GogglesStatus): string[];

package/dist/cli/goggles-status.js

@@ -1,10 +1,9 @@
 /**
  * Goggles on status and health.
- * Organ present is not Kind 0. Quiet is a match. No phone-home.
+ * The line is whether the organ is worn.
  */
-import { existsSync, readFileSync } from "node:fs";
+import { existsSync } from "node:fs";
 import { join } from "node:path";
-const WORN_PLANES = ["dichotomy", "syncopate", "synthesis", "digest", "triage", "loop"];
 const ORGAN_PAIRS = [
     ["dist/integrations/hooks/goggles-pipeline.mjs", "dist/integrations/hooks/goggles-planes.json"],
     ["src/integrations/hooks/goggles-pipeline.mjs", "src/integrations/hooks/goggles-planes.json"],
@@ -17,60 +16,13 @@ function organPair(packageRoot) {
     }
     return null;
 }
-function lensText(cwd) {
-    const file = join(cwd, ".xray", "state", "LENS.md");
-    if (!existsSync(file))
-        return { found: false, text: "" };
-    try {
-        return { found: true, text: readFileSync(file, "utf8").trim() };
-    }
-    catch {
-        return { found: false, text: "" };
-    }
-}
-function mapDrift(packageRoot, planesRel) {
-    try {
-        const data = JSON.parse(readFileSync(join(packageRoot, planesRel), "utf8"));
-        const map = Array.isArray(data.planes) ? data.planes.map((name) => String(name)) : [];
-        const same = map.length === WORN_PLANES.length && map.every((name, index) => name === WORN_PLANES[index]);
-        return same ? "" : "Actuality. Drift: worn is not the map.";
-    }
-    catch {
-        return "";
-    }
-}
-export function probeGoggles(packageRoot, cwd) {
-    const pair = organPair(packageRoot);
-    const organPresent = pair !== null;
-    const lens = lensText(cwd);
-    let kind0Text = "";
-    let kind0Label = "(no LENS yet)";
-    let kind0Quiet = false;
-    if (lens.found) {
-        kind0Text = lens.text;
-        if (!lens.text || lens.text === "quiet (match)") {
-            kind0Quiet = true;
-            kind0Label = "quiet (match)";
-        }
-        else {
-            kind0Label = lens.text;
-        }
-    }
-    else if (pair) {
-        const drift = mapDrift(packageRoot, pair[1]);
-        if (drift) {
-            kind0Text = drift;
-            kind0Label = drift;
-        }
-    }
+export function probeGoggles(packageRoot, _cwd) {
+    const organPresent = organPair(packageRoot) !== null;
     return {
         organPresent,
-        kind0Text,
-        kind0Quiet,
-        kind0Label,
         organLine: organPresent ? "Goggles: worn" : "Goggles: not found",
     };
 }
 export function formatGogglesStatus(probe) {
-    return [probe.organLine, `Kind 0: ${probe.kind0Label}`];
+    return [probe.organLine];
 }

package/dist/cli/index.js

@@ -79,7 +79,7 @@ program
         process.exit(1);
     }
 });
-const LOOK_HELP = "Kind 0 is quiet on a match. One outer is a reading. digest and triage return a card.";
+const LOOK_HELP = "dev, integration, domain, or ecosystem. The card is in LENS.md.";
 function gogglesScript() {
     const built = join(packageRoot, "dist", "integrations", "hooks", "goggles-pipeline.mjs");
     const source = join(packageRoot, "src", "integrations", "hooks", "goggles-pipeline.mjs");
@@ -104,7 +104,7 @@ function runGoggles(args) {
 }
 program
     .command("look")
-    .argument("[args...]", "kind 0, one outer, or digest/triage and one card plane")
+    .argument("[args...]", "one card plane")
     .description(LOOK_HELP)
     .action((args) => {
     runGoggles(args);

package/dist/core/config-loader.js

@@ -93,9 +93,9 @@ export class XrayConfigLoader {
         }
         const cfg = config;
         return {
-            enabled: typeof cfg.enabled === 'boolean' ? cfg.enabled : true,
+            enabled: typeof cfg.enabled === 'boolean' ? cfg.enabled : false,
             interval_minutes: Math.max(5, Math.min(1440, typeof cfg.interval_minutes === 'number' ? cfg.interval_minutes : 60)),
-            auto_schedule: typeof cfg.auto_schedule === 'boolean' ? cfg.auto_schedule : true,
+            auto_schedule: typeof cfg.auto_schedule === 'boolean' ? cfg.auto_schedule : false,
             include_health_assessment: typeof cfg.include_health_assessment === 'boolean' ? cfg.include_health_assessment : true,
             include_agent_activities: typeof cfg.include_agent_activities === 'boolean' ? cfg.include_agent_activities : true,
             include_pipeline_operations: typeof cfg.include_pipeline_operations === 'boolean' ? cfg.include_pipeline_operations : true,
@@ -123,9 +123,9 @@ export class XrayConfigLoader {
                 session_persistence: true,
             },
             autonomous_reporting: {
-                enabled: true,
+                enabled: false,
                 interval_minutes: 60,
-                auto_schedule: true,
+                auto_schedule: false,
                 include_health_assessment: true,
                 include_agent_activities: true,
                 include_pipeline_operations: true,

package/dist/core/features-config.d.ts

@@ -406,7 +406,7 @@ export interface FeaturesConfig {
         enabled?: boolean;
     };
     memory_routing?: MemoryRoutingConfig;
-    /** P2.2 — lightweight Grok write-tool postprocessor marker */
+    /** Marker is opt-in and the shipped default is off. */
     grok_postprocessor_light?: boolean;
     /** P2 — git post-commit session inference capture */
     inference_session_capture?: {

package/dist/core/features-config.js

@@ -342,9 +342,9 @@ export class FeaturesConfigLoader {
                 no_new_surface: true,
             },
             autonomous_reporting: {
-                enabled: true,
+                enabled: false,
                 interval_minutes: 60,
-                auto_schedule: true,
+                auto_schedule: false,
                 include_health_assessment: true,
                 include_agent_activities: true,
                 include_pipeline_operations: true,
@@ -410,7 +410,7 @@ export class FeaturesConfigLoader {
                 max_cache_size_mb: 50,
             },
             inference: {
-                description: "Self-improvement cycle that grades a new named session into repertoire",
+                description: "The cycle runs from the CLI command inference:run and the session wake does not start it.",
                 enabled: true,
                 workflow_dir: ".xray/inference",
                 reports_dir: ".xray/reports",

package/dist/enforcement/enforcer-tools.d.ts

@@ -22,7 +22,7 @@ export declare function preProcessAndRoute(operation: string, context: RuleValid
 export declare const FOUNDRY_EXO_CANNOT_SHIP = "Exo cannot ship. Use: node scripts/node/release.mjs [patch|minor|major]";
 /**
  * Release keyword used to run version-manager + git add -A + npm publish from the exo.
- * That path is refused. Canonical mill: reconcile → artifacts-only → gate → PUT → tag.
+ * That path is refused. Canonical mill: scripts/foundry/release.mjs.
  */
 export declare function executeReleaseWorkflow(operation: string, _context: RuleValidationContext, jobId: string, _routing: RoutingRecommendation): Promise<EnforcementResult>;
 export interface EnforcementResult {

package/dist/enforcement/enforcer-tools.js

@@ -203,7 +203,7 @@ function buildTaskDescription(operation, context) {
 export const FOUNDRY_EXO_CANNOT_SHIP = "Exo cannot ship. Use: node scripts/node/release.mjs [patch|minor|major]";
 /**
  * Release keyword used to run version-manager + git add -A + npm publish from the exo.
- * That path is refused. Canonical mill: reconcile → artifacts-only → gate → PUT → tag.
+ * That path is refused. Canonical mill: scripts/foundry/release.mjs.
  */
 export async function executeReleaseWorkflow(operation, _context, jobId, _routing) {
     await frameworkLogger.log("enforcer-tools", "release-workflow-refused", "error", {

package/dist/integrations/cursor/README.md

@@ -34,7 +34,7 @@ Install the package first (`npm install`), then `npx 0xray wear`. Postinstall wr
 
 | Hook | Stdin | Stdout |
 |------|--------|--------|
-| `preToolUse` | Cursor tool event (`tool_name`, `tool_input`, `cwd`, `workspace_roots`, `conversation_id`) | `{ "permission": "allow" \| "deny" }` plus `user_message` / `agent_message` on deny |
+| `preToolUse` | Cursor tool event (`tool_name`, `tool_input`, `cwd`, `workspace_roots`, `conversation_id`) | `{ "permission": "allow" \| "deny" }` plus `user_message` / `agent_message` when the hook has something to say |
 | `preCompact` | `{ trigger, context_tokens, conversation_id, generation_id, … }` | `{ "user_message": "…" }` after Station write. Receipt keeps `conversation_id` + `generation_id`. That id is enough to resume. |
 | `afterFileEdit` | file event | `{}` — boots Station only |
 

package/dist/integrations/cursor/hooks/hooks.json

@@ -3,7 +3,8 @@
   "hooks": {
     "preToolUse": [
       {
-        "command": ".cursor/hooks/pre-tool-use.sh"
+        "command": ".cursor/hooks/pre-tool-use.sh",
+        "failClosed": true
       }
     ],
     "preCompact": [
@@ -18,12 +19,14 @@
     ],
     "beforeShellExecution": [
       {
-        "command": ".cursor/hooks/before-shell-execution.sh"
+        "command": ".cursor/hooks/before-shell-execution.sh",
+        "failClosed": true
       }
     ],
     "beforeReadFile": [
       {
-        "command": ".cursor/hooks/before-read-file.sh"
+        "command": ".cursor/hooks/before-read-file.sh",
+        "failClosed": true
       }
     ]
   }