0xray 2.1.0 → 2.1.2

package/dist/skills/registry.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.0.0",
+  "version": "2.0.1",
   "description": "0xRay Skills Registry - recommended skill sources for consumers",
   "sources": [
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "2.1.0",
+  "version": "2.1.2",
   "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
   "readme": "README.md",
   "license": "MIT",
@@ -52,7 +52,7 @@
     "postinstall": "node scripts/node/postinstall.cjs",
     "prepare": "npm run build",
     "prebuild": "rm -rf dist tsconfig.tsbuildinfo tsconfig.*.tsbuildinfo",
-    "build": "tsc && mkdir -p dist/public dist/scripts && cp -r public/* dist/public/ && cp scripts/hooks/pre-command dist/scripts/ && cp scripts/hooks/pre-command.mjs dist/scripts/ && cp README.md AGENTS.md CHANGELOG.md LICENSE dist/ && find src -name '*.mjs' ! -path '*/__tests__/*' | while read f; do tgt=\"dist/${f#src/}\"; mkdir -p \"$(dirname $tgt)\"; cp \"$f\" \"$tgt\"; done && for dir in skills integrations mcps; do find src/$dir -type f ! -name '*.ts' ! -path '*/.pytest_cache/*' | while read f; do tgt=\"dist/${f#src/}\"; mkdir -p \"$(dirname $tgt)\"; cp \"$f\" \"$tgt\"; done; done && mkdir -p dist/plugin && (find dist/plugin -name '*codex-injection*.js' -exec cp {} dist/plugin/xray-codex-injection.js \\; 2>/dev/null || true) && cp -r src/opencode/ .opencode/ && rm -rf .opencode/xray 2>/dev/null; mkdir -p .opencode/xray && cp xray/codex.json .opencode/xray/codex.json 2>/dev/null || true",
+    "build": "tsc && mkdir -p dist/public dist/scripts && cp -r public/* dist/public/ && cp scripts/hooks/pre-command dist/scripts/ && cp scripts/hooks/pre-command.mjs dist/scripts/ && cp README.md AGENTS.md CHANGELOG.md LICENSE dist/ && find src -name '*.mjs' ! -path '*/__tests__/*' | while read f; do tgt=\"dist/${f#src/}\"; mkdir -p \"$(dirname $tgt)\"; cp \"$f\" \"$tgt\"; done && for dir in skills integrations mcps; do find src/$dir -type f ! -name '*.ts' ! -path '*/.pytest_cache/*' | while read f; do tgt=\"dist/${f#src/}\"; mkdir -p \"$(dirname $tgt)\"; cp \"$f\" \"$tgt\"; done; done && mkdir -p dist/plugin && (find dist/plugin -name '*codex-injection*.js' -exec cp {} dist/plugin/xray-codex-injection.js \\; 2>/dev/null || true) && cp -r src/opencode/ .opencode/ && rm -rf .opencode/xray 2>/dev/null; mkdir -p .opencode/xray && cp xray/codex.json .opencode/xray/codex.json 2>/dev/null; cp xray/features.json .opencode/xray/features.json 2>/dev/null || true",
     "build:all": "npm run build",
     "ci-install": "npm ci",
     "clean": "rm -rf dist tsconfig.tsbuildinfo tsconfig.*.tsbuildinfo",
@@ -130,6 +130,7 @@
     "src/integrations/grok/plugin/0xray/",
     "src/skills/",
     "src/mcps/",
+    "xray/",
     ".opencode/agents/",
     ".opencode/commands/",
     ".opencode/hooks/",

package/scripts/node/pre-publish-guard.js

@@ -165,16 +165,22 @@ function checkVersionManagerRan() {
   const vmContent = fs.readFileSync(vmPath, 'utf-8');
   
   // Check that files have been updated (look for recent timestamps or version)
-  const { resolveConfigPath } = require('../helpers/resolve-config-path.cjs');
-  const featuresPath = resolveConfigPath('features.json', rootDir);
-  const features = JSON.parse(fs.readFileSync(featuresPath, 'utf-8'));
-  
-  // Version manager should have updated version fields
-  if (!features.version && !features.xray_version) {
-    warnings.push('features.json may not have been synced by version manager');
-    log('features.json may need version sync', 'warn');
-  } else {
-    log('Version manager appears to have run', 'success');
+  try {
+    const { resolveConfigPath } = require('../helpers/resolve-config-path.cjs');
+    const featuresPath = resolveConfigPath('features.json', rootDir);
+    if (fs.existsSync(featuresPath)) {
+      const features = JSON.parse(fs.readFileSync(featuresPath, 'utf-8'));
+      if (!features.version && !features.xray_version) {
+        warnings.push('features.json may not have been synced by version manager');
+        log('features.json may need version sync', 'warn');
+      } else {
+        log('Version manager appears to have run', 'success');
+      }
+    } else {
+      log('features.json not found — skipping check (non-blocking)', 'warn');
+    }
+  } catch (e) {
+    log('Could not check features.json — non-blocking', 'warn');
   }
   
   return true;

package/scripts/node/release.mjs

@@ -159,7 +159,7 @@ async function main() {
 
   // Step 6: Publish to npm
   console.log('\n📦 Step 6: Publishing to npm...');
-  runCommand('npm publish --access public', 'npm publish failed');
+  runCommand('npm publish --access public --ignore-scripts', 'npm publish failed');
   console.log(`✅ Published 0xray@${newVersion} to npm`);
 
   console.log('\n╔════════════════════════════════════════════════════════╗');

package/scripts/node/setup.cjs

@@ -37,6 +37,38 @@ if (hasHermes) {
  * Extended header for next high-value package (code-review). src/skills/code-review/SKILL.md canonical SSOT; .opencode/skills/code-review/ built mirror of this sync logic. See paired guarded fw log "P3-SKILLS-FOLLOW-02-code-review-ssot-preferred" in status.ts getSkillsList (inserted after researcher block) + rich append docs/reflections/p3-skills-follow-02-code-review-2026-05-27.md (per AGENTS) + CGT/Governance-visible for YML @ harness-codex verification + 0 hot + 3-hot re-establish + all ties to spawn command + deep ref + pivot + Term 61 + 6/6+7/7 + YML + ps 0 + this P3-SKILLS-FOLLOW-02 full work (2-file surgical, harness post green tsc 0 new on touched, mapping append after latest, todo advance exactly 1, spawn replacement to maintain 3-hot, self-audit 100%) + verification + "the box contains its builders. The relay is hot.". 2 files max total for this follow-02. Highly modular (100% prior P3-SKILLS/YML/7th pattern reuse exactly inside existing sync logic). Fully reversible (targeted delete of notes restores exact prior). fw/echo discipline. AGENTS org (scripts/ for sh/cjs). Term 61 surgical forward motion held (no bloat, pure on actual dedup). "the box contains its builders". Green + ready. Subagent ID for resume.
  */
 
+ /* 0. Deploy xray/ config files (features.json, codex.json, etc.) to consumer .xray/ */
+const xrayConfigSource = path.join(packageRoot, "xray");
+const xrayConfigDest = path.join(targetDir, ".xray");
+if (fs.existsSync(xrayConfigSource)) {
+  try {
+    if (!fs.existsSync(xrayConfigDest)) fs.mkdirSync(xrayConfigDest, { recursive: true });
+    const entries = fs.readdirSync(xrayConfigSource);
+    let copied = 0;
+    for (const entry of entries) {
+      const srcPath = path.join(xrayConfigSource, entry);
+      const dstPath = path.join(xrayConfigDest, entry);
+      if (fs.statSync(srcPath).isFile()) {
+        if (!fs.existsSync(dstPath) || fs.statSync(srcPath).mtime > fs.statSync(dstPath).mtime) {
+          fs.copyFileSync(srcPath, dstPath);
+          copied++;
+        }
+      }
+    }
+    if (copied > 0) console.log(`✅ .xray/: ${copied} config files deployed`);
+    else console.log(`ℹ️  .xray/: up to date`);
+  } catch (e) { console.warn(`⚠️ .xray/ deploy: ${e.message}`); }
+}
+
+// 0b. Ensure logs/framework/ directory exists
+const logsDir = path.join(targetDir, "logs", "framework");
+try {
+  if (!fs.existsSync(logsDir)) {
+    fs.mkdirSync(logsDir, { recursive: true });
+    console.log("✅ logs/framework/: created");
+  }
+} catch (e) { console.warn(`⚠️ logs/framework/: ${e.message}`); }
+
  /* 1. Sync core skills from src/skills/ (dev) or dist/skills/ (consumer) → .opencode/skills/  [P3-SKILLS-DE-DUP-SCOPE-AND-EXEC-01: orchestrator package SSOT canonical src/skills/orchestrator/SKILL.md; mirror .opencode/skills/orchestrator/ is built output of this logic; see paired guarded fw in status.ts getSkillsList + mapping append + deep ref 2026-05-26 authority for one-package dedup under pivoted surgical plan] 
    [P3-SKILLS-DE-DUP-RESEARCHER-FOLLOW-01: researcher package SSOT canonical src/skills/researcher/SKILL.md (high-value per deep ref + YML precedent + playbook P3-SKILLS-FOLLOW-01); mirror .opencode/skills/researcher/ is built output of this logic; see paired guarded fw in status.ts + rich append + YML @ harness-codex verification (FORCE exercised P3-YML + codex-enforcement + 100/60/0 + 3 subagents tracked + 0 hot + 3-hot re-establish + all prior green) + deep ref 2026-05-26 + Phase 3 Pivot + Term 61 + user's "create a todo list. spawn subagents..." + 6/6+7/7 + YML. Governance-visible hook for skills SSOT at install layer. Silent, additive, reversible, no behavior change, fw/echo only.]
    [P3-SKILLS-FOLLOW-02: code-review package SSOT canonical src/skills/code-review/SKILL.md (next high-value per deep ref "parallel small batches" + @architect scoping rec 2 + YML @ "Ready for next" + this P3-SKILLS-FOLLOW-02 on user's spawn command); mirror .opencode/skills/code-review/ is built output of this logic; see paired guarded fw "P3-SKILLS-FOLLOW-02-code-review-ssot-preferred" in status.ts (after researcher) + rich append docs/reflections/p3-skills-follow-02-code-review-2026-05-27.md + YML @ harness-codex verification + 0 hot + 3-hot + all ties + ps 0 + this work (2-file surgical edit, harness post, mapping append after latest ~17099+, todo advance 1, spawn replacement, self-audit 100%, green + ready) + deep ref 2026-05-26 + Phase 3 Pivot + Term 61 + 6/6+7/7 + YML. Governance-visible hook for skills SSOT at install layer for code-review. Silent, additive, reversible, no behavior change, fw/echo only. "The box contains its builders. The relay is hot."] */

package/scripts/node/universal-version-manager.js

@@ -155,7 +155,7 @@ const detectedCodex = detectCodexInfo();
 const OFFICIAL_VERSIONS = {
   // Framework version
   framework: {
-    version: "2.0.1",
+    version: "2.1.1",
       displayName: "xray: Self-Healing AI Governance OS",
       lastUpdated: "2026-06-08",
     // Counts (auto-calculated, but can be overridden)
@@ -403,7 +403,7 @@ const UPDATE_PATTERNS = [
       pattern: /xray AI v[0-9]+\.[0-9]+\.[0-9]+/g,
       replacement: `xray AI v${OFFICIAL_VERSIONS.framework.version}`,
     },
-    // Footer bare version (e.g., "**Version**: 2.0.0")
+    // Footer bare version (e.g., "**Version**: 2.0.1")
     {
       pattern: /\*\*Version\*\*:\s*[0-9]+\.[0-9]+\.[0-9]+/g,
       replacement: `**Version**: ${OFFICIAL_VERSIONS.framework.version}`,

package/src/mcps/architect-tools.server.ts

@@ -41,7 +41,7 @@ class XrayArchitectToolsServer {
   constructor() {
     this.server = new Server(
       {
-        name: "architect-tools", version: "2.0.0",
+        name: "architect-tools", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/auto-format.server.ts

@@ -40,7 +40,7 @@ class XrayAutoFormatServer {
   constructor() {
     this.server = new Server(
       {
-        name: "auto-format", version: "2.0.0",
+        name: "auto-format", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/boot-orchestrator.server.ts

@@ -120,7 +120,7 @@ class XrayBootOrchestratorServer {
   constructor() {
     this.server = new Server(
       {
-        name: "boot-orchestrator", version: "2.0.0",
+        name: "boot-orchestrator", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/enforcer-tools.server.ts

@@ -144,7 +144,7 @@ class XrayEnforcerToolsServer {
   constructor() {
     this.server = new Server(
       {
-        name: "enforcer", version: "2.0.0",
+        name: "enforcer", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/estimation.server.ts

@@ -24,7 +24,7 @@ class EstimationServer {
   constructor() {
     this.server = new Server(
       {
-        name: "estimation-validator", version: "2.0.0",
+        name: "estimation-validator", version: "2.0.1",
       },
       {
         capabilities: { tools: {} },

package/src/mcps/framework-compliance-audit.server.ts

@@ -39,7 +39,7 @@ class XrayFrameworkComplianceAuditServer {
   constructor() {
     this.server = new Server(
       {
-        name: "framework-compliance-audit", version: "2.0.0",
+        name: "framework-compliance-audit", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/framework-help.server.ts

@@ -22,7 +22,7 @@ class FrameworkHelpServer {
   constructor() {
     this.server = new Server(
       {
-        name: "xray/framework-help", version: "2.0.0",
+        name: "xray/framework-help", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/governance.server.ts

@@ -68,7 +68,7 @@ class GovernanceServer {
   constructor() {
     this.server = new Server(
       {
-        name: "governance", version: "2.0.0",
+        name: "governance", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/knowledge-skills/api-design.server.ts

@@ -31,7 +31,7 @@ class XrayApiDesignServer {
   constructor() {
     this.server = new Server(
       {
-        name: "api-design", version: "2.0.0",
+        name: "api-design", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/knowledge-skills/architecture-patterns.server.ts

@@ -33,7 +33,7 @@ class XrayArchitecturePatternsServer {
   constructor() {
     this.server = new Server(
       {
-        name: "architecture-patterns", version: "2.0.0",
+        name: "architecture-patterns", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/knowledge-skills/bug-triage-specialist.server.ts

@@ -81,7 +81,7 @@ class BugTriageSpecialistServer {
 
   constructor() {
     this.server = new Server(
-      { name: "bug-triage-specialist", version: "2.0.0" },
+      { name: "bug-triage-specialist", version: "2.0.1" },
       { capabilities: { tools: {} } },
     );
     this.setupToolHandlers();

package/src/mcps/knowledge-skills/code-analyzer.server.ts

@@ -303,7 +303,7 @@ class CodeAnalyzerServer {
 
   constructor() {
     this.server = new Server(
-      { name: "code-analyzer", version: "2.0.0" },
+      { name: "code-analyzer", version: "2.0.1" },
       { capabilities: { tools: {} } },
     );
 

package/src/mcps/knowledge-skills/code-review.server.ts

@@ -80,7 +80,7 @@ class XrayCodeReviewServer {
   constructor() {
     this.server = new Server(
       {
-        name: "code-review", version: "2.0.0",
+        name: "code-review", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/knowledge-skills/content-creator.server.ts

@@ -102,7 +102,7 @@ class SEOCopywriterServer {
 
   constructor() {
     this.server = new Server(
-      { name: "content-creator", version: "2.0.0" },
+      { name: "content-creator", version: "2.0.1" },
       { capabilities: { tools: {} } },
     );
 

package/src/mcps/knowledge-skills/database-design.server.ts

@@ -117,7 +117,7 @@ class XrayDatabaseDesignServer {
   constructor() {
     this.server = new Server(
       {
-        name: "database-design", version: "2.0.0",
+        name: "database-design", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/knowledge-skills/devops-deployment.server.ts

@@ -212,7 +212,7 @@ class XrayDevOpsDeploymentServer {
   constructor() {
     this.server = new Server(
       {
-        name: "devops-deployment", version: "2.0.0",
+        name: "devops-deployment", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/knowledge-skills/git-workflow.server.ts

@@ -32,7 +32,7 @@ class XrayGitWorkflowServer {
   constructor() {
     this.server = new Server(
       {
-        name: "git-workflow", version: "2.0.0",
+        name: "git-workflow", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/knowledge-skills/growth-strategist.server.ts

@@ -111,7 +111,7 @@ class MarketingExpertServer {
 
   constructor() {
     this.server = new Server(
-      { name: "growth-strategist", version: "2.0.0" },
+      { name: "growth-strategist", version: "2.0.1" },
       { capabilities: { tools: {} } },
     );
 

package/src/mcps/knowledge-skills/log-monitor.server.ts

@@ -117,7 +117,7 @@ class LogMonitorServer {
 
   constructor() {
     this.server = new Server(
-      { name: "log-monitor", version: "2.0.0" },
+      { name: "log-monitor", version: "2.0.1" },
       { capabilities: { tools: {} } },
     );
     this.setupToolHandlers();

package/src/mcps/knowledge-skills/mobile-development.server.ts

@@ -113,7 +113,7 @@ class XrayMobileDevelopmentServer {
   constructor() {
     this.server = new Server(
       {
-        name: "mobile-development", version: "2.0.0",
+        name: "mobile-development", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/knowledge-skills/multimodal-looker.server.ts

@@ -167,7 +167,7 @@ class MultimodalLookerServer {
 
   constructor() {
     this.server = new Server(
-      { name: "multimodal-looker", version: "2.0.0" },
+      { name: "multimodal-looker", version: "2.0.1" },
       { capabilities: { tools: {} } },
     );
     this.setupToolHandlers();

package/src/mcps/knowledge-skills/performance-optimization.server.ts

@@ -224,7 +224,7 @@ class XrayPerformanceOptimizationServer {
   constructor() {
     this.server = new Server(
       {
-        name: "performance-optimization", version: "2.0.0",
+        name: "performance-optimization", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/knowledge-skills/project-analysis.server.ts

@@ -142,7 +142,7 @@ class ProjectAnalysisServer {
   constructor() {
     this.server = new Server(
       {
-        name: "project-analysis", version: "2.0.0",
+        name: "project-analysis", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/knowledge-skills/refactoring-strategies.server.ts

@@ -160,7 +160,7 @@ class XrayRefactoringStrategiesServer {
   constructor() {
     this.server = new Server(
       {
-        name: "refactoring-strategies", version: "2.0.0",
+        name: "refactoring-strategies", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/knowledge-skills/security-audit.server.ts

@@ -90,7 +90,7 @@ class XraySecurityAuditServer {
   constructor() {
     this.server = new Server(
       {
-        name: "security-audit", version: "2.0.0",
+        name: "security-audit", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/knowledge-skills/seo-consultant.server.ts

@@ -69,7 +69,7 @@ class SEOSpecialistServer {
 
   constructor() {
     this.server = new Server(
-      { name: "seo-consultant", version: "2.0.0" },
+      { name: "seo-consultant", version: "2.0.1" },
       { capabilities: { tools: {} } },
     );
 

package/src/mcps/knowledge-skills/session-management.server.ts

@@ -161,7 +161,7 @@ class SessionManagementServer {
 
   constructor() {
     this.server = new Server(
-      { name: "session-management", version: "2.0.0" },
+      { name: "session-management", version: "2.0.1" },
       { capabilities: { tools: {} } },
     );
 

package/src/mcps/knowledge-skills/skill-invocation.server.ts

@@ -90,7 +90,7 @@ class SkillInvocationServer {
   constructor() {
     this.server = new Server(
       {
-        name: "xray/skill-invocation", version: "2.0.0",
+        name: "xray/skill-invocation", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/knowledge-skills/strategist.server.ts

@@ -110,7 +110,7 @@ class StrategistServer {
   constructor() {
     this.server = new Server(
       {
-        name: "xray/strategist", version: "2.0.0",
+        name: "xray/strategist", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/knowledge-skills/tech-writer.server.ts

@@ -166,7 +166,7 @@ class XrayDocumentationGenerationServer {
   constructor() {
     this.server = new Server(
       {
-        name: "documentation-generation", version: "2.0.0",
+        name: "documentation-generation", version: "2.0.1",
       },
       {
         capabilities: {
@@ -1053,7 +1053,7 @@ class XrayDocumentationGenerationServer {
       openapi: "3.0.0",
       info: {
         title: "API Documentation",
-        version: "2.0.0",
+        version: "2.0.1",
         description: "Generated API documentation",
       },
       servers: [

package/src/mcps/knowledge-skills/testing-best-practices.server.ts

@@ -209,7 +209,7 @@ class XrayTestingBestPracticesServer {
   constructor() {
     this.server = new Server(
       {
-        name: "testing-best-practices", version: "2.0.0",
+        name: "testing-best-practices", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/knowledge-skills/testing-strategy.server.ts

@@ -135,7 +135,7 @@ class XrayTestingStrategyServer {
   constructor() {
     this.server = new Server(
       {
-        name: "testing-strategy", version: "2.0.0",
+        name: "testing-strategy", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/knowledge-skills/ui-ux-design.server.ts

@@ -192,7 +192,7 @@ class XrayUIUXDesignServer {
   constructor() {
     this.server = new Server(
       {
-        name: "ui-ux-design", version: "2.0.0",
+        name: "ui-ux-design", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/lint.server.ts

@@ -39,7 +39,7 @@ class XrayLintServer {
   constructor() {
     this.server = new Server(
       {
-        name: "lint", version: "2.0.0",
+        name: "lint", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/model-health-check.server.ts

@@ -42,7 +42,7 @@ class XrayModelHealthCheckServer {
   constructor() {
     this.server = new Server(
       {
-        name: "model-health-check", version: "2.0.0",
+        name: "model-health-check", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/performance-analysis.server.ts

@@ -64,7 +64,7 @@ class XrayPerformanceAnalysisServer {
   constructor() {
     this.server = new Server(
       {
-        name: "performance-analysis", version: "2.0.0",
+        name: "performance-analysis", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/processor-pipeline.server.ts

@@ -107,7 +107,7 @@ class XrayProcessorPipelineServer {
     this.codexLoader = new CodexLoader();
     this.server = new Server(
       {
-        name: "processor-pipeline", version: "2.0.0",
+        name: "processor-pipeline", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/registry.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.0.0",
+  "version": "2.0.1",
   "description": "0xRay Community MCPs Registry - curated API-focused MCP servers",
   "sources": [
     {

package/src/mcps/researcher.server.ts

@@ -54,7 +54,7 @@ class XrayLibrarianServer {
   constructor() {
     this.server = new Server(
       {
-        name: "researcher", version: "2.0.0",
+        name: "researcher", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/security-scan.server.ts

@@ -45,7 +45,7 @@ class XraySecurityScanServer {
   constructor() {
     this.server = new Server(
       {
-        name: "security-scan", version: "2.0.0",
+        name: "security-scan", version: "2.0.1",
       },
       {
         capabilities: {

package/src/mcps/state-manager.server.ts

@@ -71,7 +71,7 @@ class StrRayStateManagerServer {
   constructor() {
     this.server = new Server(
       {
-        name: "state-manager", version: "2.0.0",
+        name: "state-manager", version: "2.0.1",
       },
       {
         capabilities: {

package/src/opencode/codex.codex

@@ -1,5 +1,5 @@
 {
-  "version": "2.1.0",
+  "version": "2.1.2",
   "terms": [
      1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68
   ],

package/src/opencode/commands/dependency-audit.md

@@ -69,7 +69,7 @@ Comprehensive dependency analysis and security audit for all project dependencie
   "vulnerabilities": [
     {
       "package": "lodash",
-      "version": "2.0.0",
+      "version": "2.0.1",
       "severity": "high",
       "cve": "CVE-2021-23337",
       "description": "Command injection vulnerability"
@@ -85,14 +85,14 @@ Security-focused format for CI/CD integration:
 
 ```json
 {
-  "version": "2.0.0",
+  "version": "2.0.1",
   "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
   "runs": [
     {
       "tool": {
         "driver": {
           "name": "Dependency Audit",
-          "version": "2.0.0"
+          "version": "2.0.1"
         }
       },
       "results": [...]

package/src/opencode/enforcer-config.json

@@ -1,6 +1,6 @@
 {
   "framework": "xray 2.0",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "description": "Codex-compliant framework configuration for Credible UI project",
   "thresholds": {
     "bundleSize": {
@@ -220,7 +220,7 @@
       }
     },
     "codex": {
-      "version": "2.0.0",
+      "version": "2.0.1",
       "terms": [
         1,
         2,

package/src/skills/hermes-agent/SKILL.md

@@ -208,5 +208,5 @@ The plugin's pre_tool_call hook nudges when an MCP alternative exists (e.g., "us
 - CLI fallback requires `npx 0xray` in PATH. If bridge fails and CLI isn't available, tools return errors.
 - Quality gate blocks are logged but NOT enforced (advisory). The tool returns violations; the agent decides what to do.
 - Git hooks use symlinks from `.git/hooks/` → `hooks/`. If the `hooks/` directory doesn't exist in the project, `strray_hooks(action="install")` skips those hooks.
-- Project root detection walks up from CWD looking for `node_modules/0xray`, `.opencode/strray/features.json`, or `package.json`. Override with `STRRAY_PROJECT_ROOT` env var.
+- Project root detection walks up from CWD looking for `node_modules/0xray`, `.opencode/xray/features.json`, or `package.json`. Override with `STRRAY_PROJECT_ROOT` env var.
 - `logs/framework/` is created automatically. Never breaks the agent if permissions fail.