0xray 2.2.0 → 2.2.1

package/.opencode/codex.codex

@@ -1,5 +1,5 @@
 {
-  "version": "2.1.3",
+  "version": "2.2.0",
   "terms": [
      1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68
   ],

package/.opencode/commands/dependency-audit.md

@@ -69,7 +69,7 @@ Comprehensive dependency analysis and security audit for all project dependencie
   "vulnerabilities": [
     {
       "package": "lodash",
-      "version": "2.1.3",
+      "version": "2.2.0",
       "severity": "high",
       "cve": "CVE-2021-23337",
       "description": "Command injection vulnerability"
@@ -85,14 +85,14 @@ Security-focused format for CI/CD integration:
 
 ```json
 {
-  "version": "2.1.3",
+  "version": "2.2.0",
   "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
   "runs": [
     {
       "tool": {
         "driver": {
           "name": "Dependency Audit",
-          "version": "2.1.3"
+          "version": "2.2.0"
         }
       },
       "results": [...]

package/.opencode/enforcer-config.json

@@ -1,6 +1,6 @@
 {
   "framework": "xray 2.0",
-  "version": "2.1.3",
+  "version": "2.2.0",
   "description": "Codex-compliant framework configuration for Credible UI project",
   "thresholds": {
     "bundleSize": {
@@ -220,7 +220,7 @@
       }
     },
     "codex": {
-      "version": "2.1.3",
+      "version": "2.2.0",
       "terms": [
         1,
         2,

package/.opencode/init.sh

@@ -70,7 +70,7 @@ echo -e "${PURPLE}//      ╚█████╔╝██╔╝ ██╗██
 echo -e "${PURPLE}//       ╚════╝ ╚═╝  ╚═╝╚═╝  ╚═╝╚═╝  ╚═╝   ╚═╝           //${NC}" && sleep 0.1
 echo -e "${PURPLE}//                                                       //${NC}" && sleep 0.1
 echo -e "${PURPLE}//      ⚡ 0xRay: Self-Healing AI Governance OS          //${NC}" && sleep 0.1
-echo -e "${PURPLE}//      42 agents · 44 skills · 41 MCP servers           //${NC}" && sleep 0.1
+echo -e "${PURPLE}//      42 agents · 44 skills · 39 MCP servers           //${NC}" && sleep 0.1
 echo -e "${PURPLE}//═══════════════════════════════════════════════════════//${NC}" && sleep 0.2
 echo -e "${PURPLE}//              🚀 Initializing...                          //${NC}" && sleep 0.3
 echo -e "${PURPLE}//═══════════════════════════════════════════════════════//${NC}" && sleep 0.2

package/AGENTS.md

@@ -1,12 +1,12 @@
 # xray Agents
 
-Quick reference for xray AI orchestration framework (v16 MCPs-centric three-subsystem).
+Quick reference for xray AI orchestration framework (v15 MCPs-centric three-subsystem).
 
 ## What is xray?
 
 xray provides intelligent multi-agent orchestration with automatic delegation and Codex compliance validation under the pure v2 three-subsystem model (Inference + External Governance via Dynamo + Autonomous Engine via thinDispatch 7-flow in MCP orchestrator). Agents operate via `.opencode/agents/*.yml` YML surfaces and 3 dedicated MCP skill servers — no manual setup needed.
 
-## v16 MCPs-Centric Architecture
+## v15 MCPs-Centric Architecture
 
 The v2 release centers on **MCP (Model Context Protocol)** as the primary surface for agent skills. Three agent MCP servers handle governance deliberation:
 
@@ -84,14 +84,14 @@ The Autonomous Engine routes via complexity:
 
 xray enforces the Universal Development Codex (60 terms) via Dynamo governance. The codex lives in `.opencode/xray/codex.json`.
 
-Pure v16 MCPs. Clean. Complete.
+Pure v15 MCPs. Clean. Complete.
 
 ## Session: v2.1.2 Release Polish
 
 - Package: `0xray` (npm), `github.com/0xRayAI/xray`. Version `2.0.0`.
 - Renamed `strray-ai` → `0xray` across 60+ source files, CLI help text, grok plugin, hermes-agent bridge (Python + JS), docusaurus config.
 - **12 stale docs git-rm'd**: AGENTS-consumer.md, AGENTS-full.md, CHANGELOG-v1.15.x.md, 7 docs/ files.
-- **AGENTS.md + README.md**: Rewritten v16 MCPs-centric.
+- **AGENTS.md + README.md**: Rewritten v15 MCPs-centric.
 - **CLI help text**: `npx 0xray` — removed dead `dashboard` command, stale examples.
 - `.npmignore`: removed `src/` (conflicted with `files` field — was silently dropping published sources).
 - `.gitignore`: cleaned stale `.strray/` entries, `strray-ai-*.tgz` → `0xray-*.tgz`.
@@ -107,5 +107,5 @@ Pure v16 MCPs. Clean. Complete.
   - `status.ts` CLI command wired into `index.ts`
   - Orphaned files analyzed (not deleted): `security-audit.ts`, `src/security/` (11 files), `session-capture-processor.ts`, `activate-kernel-pipeline.ts`
 - **Hermes-agent bridge backward compat**: all JS/Python bridge files check for both `strray-ai` (old) and `0xray` (new). Default paths updated to `0xray`.
-  - **Test suite**: 162 files, 2282 tests (+ 44 skipped), 0 failures. Build passes clean.
-  - **OpenClaw e2e**: Phase 13 validates `logs/framework/activity.log` via agent tool event → hooks → frameworkLogger pipeline — 2282 tests, 0 failures.
+  - **Test suite**: 162 files, 2196 tests (+ 44 skipped), 0 failures. Build passes clean.
+  - **OpenClaw e2e**: Phase 13 validates `logs/framework/activity.log` via agent tool event → hooks → frameworkLogger pipeline — 2196 tests, 0 failures.

package/README.md

@@ -1,6 +1,6 @@
 # 0xRay — Self-Healing AI Governance OS
 
-**v2.1.3** — 42 agents · 46 skills · 16 MCPs servers · 5 codex terms · ~2,2282 tests
+**v2.1.3** — 42 agents · 46 skills · 15 MCPs servers · 9 codex terms · ~2,2196 tests
 
 [![Docs](https://img.shields.io/badge/docs-0xRayAI.github.io/xray-10b981?style=flat-square)](https://0xrayai.github.io/xray/)
 
@@ -62,7 +62,7 @@ AI coding assistants are powerful but unreliable. They hallucinate APIs, introdu
 ├─────────────────────────────────────────────────┤
 │           External Governance (Dynamo)           │
 │  Codex enforcement · Multi-agent review · SSOT  │
-│  16 MCPs servers (governance + knowledge skills) deliberate proposals │
+│  15 MCPs servers (governance + knowledge skills) deliberate proposals │
 ├─────────────────────────────────────────────────┤
 │          Autonomous Engine (thinDispatch)        │
 │  Task routing · Multi-agent coordination        │
@@ -179,7 +179,7 @@ Every subsystem is configurable via `features.json` (located at `.opencode/xray/
 
 ```json
 {
-  "version": "2.1.3",
+  "version": "2.2.0",
   "token_optimization": {
     "enabled": true,
     "max_context_tokens": 20000,
@@ -277,7 +277,7 @@ Install more skills anytime: `npx 0xray skill:install`
 
 ## Testing & Reliability
 
-0xRay is battle-tested with **~2,2282 tests** across every subsystem:
+0xRay is battle-tested with **~2,2196 tests** across every subsystem:
 
 | Suite | Tests | Status |
 |-------|-------|--------|

package/dist/AGENTS.md

@@ -1,12 +1,12 @@
 # xray Agents
 
-Quick reference for xray AI orchestration framework (v16 MCPs-centric three-subsystem).
+Quick reference for xray AI orchestration framework (v15 MCPs-centric three-subsystem).
 
 ## What is xray?
 
 xray provides intelligent multi-agent orchestration with automatic delegation and Codex compliance validation under the pure v2 three-subsystem model (Inference + External Governance via Dynamo + Autonomous Engine via thinDispatch 7-flow in MCP orchestrator). Agents operate via `.opencode/agents/*.yml` YML surfaces and 3 dedicated MCP skill servers — no manual setup needed.
 
-## v16 MCPs-Centric Architecture
+## v15 MCPs-Centric Architecture
 
 The v2 release centers on **MCP (Model Context Protocol)** as the primary surface for agent skills. Three agent MCP servers handle governance deliberation:
 
@@ -84,14 +84,14 @@ The Autonomous Engine routes via complexity:
 
 xray enforces the Universal Development Codex (60 terms) via Dynamo governance. The codex lives in `.opencode/xray/codex.json`.
 
-Pure v16 MCPs. Clean. Complete.
+Pure v15 MCPs. Clean. Complete.
 
 ## Session: v2.1.2 Release Polish
 
 - Package: `0xray` (npm), `github.com/0xRayAI/xray`. Version `2.0.0`.
 - Renamed `strray-ai` → `0xray` across 60+ source files, CLI help text, grok plugin, hermes-agent bridge (Python + JS), docusaurus config.
 - **12 stale docs git-rm'd**: AGENTS-consumer.md, AGENTS-full.md, CHANGELOG-v1.15.x.md, 7 docs/ files.
-- **AGENTS.md + README.md**: Rewritten v16 MCPs-centric.
+- **AGENTS.md + README.md**: Rewritten v15 MCPs-centric.
 - **CLI help text**: `npx 0xray` — removed dead `dashboard` command, stale examples.
 - `.npmignore`: removed `src/` (conflicted with `files` field — was silently dropping published sources).
 - `.gitignore`: cleaned stale `.strray/` entries, `strray-ai-*.tgz` → `0xray-*.tgz`.
@@ -107,5 +107,5 @@ Pure v16 MCPs. Clean. Complete.
   - `status.ts` CLI command wired into `index.ts`
   - Orphaned files analyzed (not deleted): `security-audit.ts`, `src/security/` (11 files), `session-capture-processor.ts`, `activate-kernel-pipeline.ts`
 - **Hermes-agent bridge backward compat**: all JS/Python bridge files check for both `strray-ai` (old) and `0xray` (new). Default paths updated to `0xray`.
-  - **Test suite**: 162 files, 2282 tests (+ 44 skipped), 0 failures. Build passes clean.
-  - **OpenClaw e2e**: Phase 13 validates `logs/framework/activity.log` via agent tool event → hooks → frameworkLogger pipeline — 2282 tests, 0 failures.
+  - **Test suite**: 162 files, 2196 tests (+ 44 skipped), 0 failures. Build passes clean.
+  - **OpenClaw e2e**: Phase 13 validates `logs/framework/activity.log` via agent tool event → hooks → frameworkLogger pipeline — 2196 tests, 0 failures.

package/dist/CHANGELOG.md

@@ -4,6 +4,14 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Conventional Commits](https://www.conventionalcommits.org/).
 
+## [2.2.1] - 2026-06-10
+
+### 🔄 Changes
+
+- Version bump
+
+---
+
 ## [2.2.0] - 2026-06-10
 
 ### 🚀 Features

package/dist/README.md

@@ -1,6 +1,6 @@
 # 0xRay — Self-Healing AI Governance OS
 
-**v2.1.3** — 42 agents · 46 skills · 16 MCPs servers · 5 codex terms · ~2,2282 tests
+**v2.1.3** — 42 agents · 46 skills · 15 MCPs servers · 9 codex terms · ~2,2196 tests
 
 [![Docs](https://img.shields.io/badge/docs-0xRayAI.github.io/xray-10b981?style=flat-square)](https://0xrayai.github.io/xray/)
 
@@ -62,7 +62,7 @@ AI coding assistants are powerful but unreliable. They hallucinate APIs, introdu
 ├─────────────────────────────────────────────────┤
 │           External Governance (Dynamo)           │
 │  Codex enforcement · Multi-agent review · SSOT  │
-│  16 MCPs servers (governance + knowledge skills) deliberate proposals │
+│  15 MCPs servers (governance + knowledge skills) deliberate proposals │
 ├─────────────────────────────────────────────────┤
 │          Autonomous Engine (thinDispatch)        │
 │  Task routing · Multi-agent coordination        │
@@ -179,7 +179,7 @@ Every subsystem is configurable via `features.json` (located at `.opencode/xray/
 
 ```json
 {
-  "version": "2.1.3",
+  "version": "2.2.0",
   "token_optimization": {
     "enabled": true,
     "max_context_tokens": 20000,
@@ -277,7 +277,7 @@ Install more skills anytime: `npx 0xray skill:install`
 
 ## Testing & Reliability
 
-0xRay is battle-tested with **~2,2282 tests** across every subsystem:
+0xRay is battle-tested with **~2,2196 tests** across every subsystem:
 
 | Suite | Tests | Status |
 |-------|-------|--------|

package/dist/agents/code-reviewer.js

@@ -15,7 +15,7 @@ export const codeReviewer = {
 
 ## Framework Context
 - Universal Development Codex v1.2.0
-- Validate against all 5 codex terms
+- Validate against all 9 codex terms
 
 ## Rules (STRICT)
 - MAX 3 file reads, then review

package/dist/analytics/routing-refiner.js

@@ -36,7 +36,7 @@ class RoutingRefiner {
         const optimizations = this.suggestMappingOptimizations(promptAnalysis, performanceReport);
         const warnings = this.generateWarnings(newMappings, optimizations);
         return {
-            version: "2.1.3",
+            version: "2.2.0",
             generatedAt: new Date(),
             summary: {
                 newMappings: newMappings.length,

package/dist/core/boot-orchestrator.js

@@ -717,9 +717,9 @@ export class BootOrchestrator {
         try {
             // Consumer runtime compat (XRAY_ env + .xray fallbacks)
             const xrayConfig = {
-                version: "2.1.3",
+                version: "2.2.0",
                 codex_enabled: true,
-                codex_version: "v2.1.1",
+                codex_version: "v3.0.0",
                 codex_terms: [
                     1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20,
                     21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37,

package/dist/core/features-config.js

@@ -286,7 +286,7 @@ export class FeaturesConfigLoader {
      */
     getDefaultConfig() {
         return {
-            version: "2.1.3",
+            version: "2.2.0",
             description: "0xRay Framework - Unified Feature Configuration",
             token_optimization: {
                 enabled: true,

package/dist/core/framework-logger.d.ts

@@ -72,5 +72,6 @@ export declare class FrameworkUsageLogger {
     getRecentLogs(count?: number): FrameworkLogEntry[];
     getComponentUsage(component: string): FrameworkLogEntry[];
     printRundown(): void;
+    flushSync(): void;
 }
 export declare const frameworkLogger: FrameworkUsageLogger;

package/dist/core/framework-logger.js

@@ -1,4 +1,4 @@
-import { promises as fs, existsSync, mkdirSync } from "fs";
+import { promises as fs, existsSync, mkdirSync, appendFileSync } from "fs";
 import { join } from "path";
 /**
  * Generate a unique job ID for tracking work sessions
@@ -304,8 +304,34 @@ export class FrameworkUsageLogger {
     printRundown() {
         // Framework usage analytics placeholder
     }
+    flushSync() {
+        if (this.flushing || this.buffer.length === 0)
+            return;
+        const toWrite = this.buffer.splice(0, this.buffer.length);
+        const data = toWrite.join("");
+        try {
+            const cwd = process.cwd();
+            if (!cwd)
+                return;
+            const logDir = join(cwd, "logs", "framework");
+            const logFile = join(logDir, "activity.log");
+            if (!existsSync(logDir)) {
+                mkdirSync(logDir, { recursive: true });
+            }
+            appendFileSync(logFile, data);
+        }
+        catch {
+            // flush failure is non-fatal
+        }
+    }
 }
 export const frameworkLogger = new FrameworkUsageLogger();
+// Flush buffer synchronously on exit so CLI commands don't lose log entries
+if (typeof process !== "undefined" && process.env?.NODE_ENV !== "test") {
+    process.on("exit", () => {
+        frameworkLogger.flushSync();
+    });
+}
 // Startup self-test: verify logger works
 if (typeof process !== "undefined" && process.env?.NODE_ENV !== "test") {
     frameworkLogger.log("system", "logger initialized", "info").catch(() => { });

package/dist/mcps/governance.server.js

@@ -29,7 +29,7 @@ class GovernanceServer {
     server;
     constructor() {
         this.server = new Server({
-            name: "governance", version: "2.1.3",
+            name: "governance", version: "2.2.0",
         }, {
             capabilities: {
                 tools: {},

package/dist/mcps/knowledge-skills/tech-writer.server.js

@@ -595,7 +595,7 @@ class XrayDocumentationGenerationServer extends XrayKnowledgeSkillBase {
             openapi: "3.0.0",
             info: {
                 title: "API Documentation",
-                version: "2.1.3",
+                version: "2.2.0",
                 description: "Generated API documentation",
             },
             servers: [

package/dist/mcps/registry.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.1.3",
+  "version": "2.2.0",
   "description": "0xRay Community MCPs Registry - curated API-focused MCP servers",
   "sources": [
     {

package/dist/mcps/simulation/server-simulations.js

@@ -79,7 +79,7 @@ export const frameworkHelpSimulations = {
                 type: 'text',
                 text: `**0xRay Framework Capabilities:**
 
-**42 Specialized Agents:**
+**41 Specialized Agents:**
 - enforcer: Codex compliance & error prevention
 - architect: System design & technical decisions
 - orchestrator: Multi-agent workflow coordination

package/dist/skills/registry.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.1.3",
+  "version": "2.2.0",
   "description": "0xRay Skills Registry - recommended skill sources for consumers",
   "sources": [
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "2.2.0",
+  "version": "2.2.1",
   "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
   "license": "MIT",
   "repository": {

package/scripts/node/universal-version-manager.js

@@ -147,7 +147,7 @@ function detectCodexInfo() {
       return { version: cver.startsWith("v") ? cver : `v${cver}`, termsCount: termCount, lastUpdated: new Date().toISOString().split("T")[0] };
     } catch {}
   }
-  return { version: "v2.1.1", termsCount: 68, lastUpdated: new Date().toISOString().split("T")[0] };
+  return { version: "v3.0.0", termsCount: 68, lastUpdated: new Date().toISOString().split("T")[0] };
 }
 
 const detectedCodex = detectCodexInfo();
@@ -155,7 +155,7 @@ const detectedCodex = detectCodexInfo();
 const OFFICIAL_VERSIONS = {
   // Framework version
   framework: {
-    version: "2.2.0",
+    version: "2.2.1",
       displayName: "xray: Self-Healing AI Governance OS",
       lastUpdated: "2026-06-10",
     // Counts (auto-calculated, but can be overridden)
@@ -346,29 +346,29 @@ const UPDATE_PATTERNS = [
     },
 
     // === BADGE AND COUNT PATTERNS ===
-    // Test count in docs badge (e.g., tests-2282-brightgreen)
+    // Test count in docs badge (e.g., tests-2196-brightgreen)
     {
       pattern: /tests-[0-9]+(?=-brightgreen)/g,
       replacement: `tests-${OFFICIAL_VERSIONS.framework.tests}`,
     },
-    // Test count in npm badge (e.g., tests-2282%20passed-brightgreen)
+    // Test count in npm badge (e.g., tests-2196%20passed-brightgreen)
     {
       pattern: /tests-[0-9,]+%20passed/g,
       replacement: `tests-${OFFICIAL_VERSIONS.framework.tests}%20passed`,
     },
-    // Test count in prose (e.g., "2,2282 Tests" or "2282 Tests" but NOT in badge URLs)
+    // Test count in prose (e.g., "2,2196 Tests" or "2196 Tests" but NOT in badge URLs)
     {
       pattern: /(\*\s*✅\s*)([0-9]{1,3},?[0-9]{3})(\s*Tests)/g,
       replacement: (match, p1, p2, p3) => {
         return `${p1}${OFFICIAL_VERSIONS.framework.tests}${p3}`;
       },
     },
-    // Test count in feature bullets (e.g., "✅ 2282 Tests")
+    // Test count in feature bullets (e.g., "✅ 2196 Tests")
     {
       pattern: /[0-9]+ Tests/g,
       replacement: `${OFFICIAL_VERSIONS.framework.tests} Tests`,
     },
-    // Test count in config tree (e.g., "2282 tests")
+    // Test count in config tree (e.g., "2196 tests")
     {
       pattern: /[0-9]+ tests/g,
       replacement: `${OFFICIAL_VERSIONS.framework.tests} tests`,
@@ -403,7 +403,7 @@ const UPDATE_PATTERNS = [
       pattern: /xray AI v[0-9]+\.[0-9]+\.[0-9]+/g,
       replacement: `xray AI v${OFFICIAL_VERSIONS.framework.version}`,
     },
-    // Footer bare version (e.g., "**Version**: 2.1.3")
+    // Footer bare version (e.g., "**Version**: 2.2.0")
     {
       pattern: /\*\*Version\*\*:\s*[0-9]+\.[0-9]+\.[0-9]+/g,
       replacement: `**Version**: ${OFFICIAL_VERSIONS.framework.version}`,

package/scripts/node/validate-mcp-connectivity.js

@@ -3,7 +3,7 @@
 /**
  * MCP Server Connectivity Validator
  *
- * Tests all xray v41 MCP servers for proper startup and protocol compliance
+ * Tests all xray v39 MCP servers for proper startup and protocol compliance
  * Validates external integration points that internal tests miss
  * 
  * FIXED: Converted to ES module syntax

package/src/mcps/governance.server.ts

@@ -68,7 +68,7 @@ class GovernanceServer {
   constructor() {
     this.server = new Server(
       {
-        name: "governance", version: "2.1.3",
+        name: "governance", version: "2.2.0",
       },
       {
         capabilities: {

package/src/mcps/knowledge-skills/tech-writer.server.ts

@@ -888,7 +888,7 @@ class XrayDocumentationGenerationServer extends XrayKnowledgeSkillBase {
       openapi: "3.0.0",
       info: {
         title: "API Documentation",
-        version: "2.1.3",
+        version: "2.2.0",
         description: "Generated API documentation",
       },
       servers: [

package/src/mcps/registry.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.1.3",
+  "version": "2.2.0",
   "description": "0xRay Community MCPs Registry - curated API-focused MCP servers",
   "sources": [
     {

package/src/mcps/simulation/server-simulations.ts

@@ -92,7 +92,7 @@ export const frameworkHelpSimulations: Record<string, SimulatorFunction> = {
         type: 'text',
         text: `**0xRay Framework Capabilities:**
 
-**42 Specialized Agents:**
+**41 Specialized Agents:**
 - enforcer: Codex compliance & error prevention
 - architect: System design & technical decisions
 - orchestrator: Multi-agent workflow coordination

package/src/opencode/codex.codex

@@ -1,5 +1,5 @@
 {
-  "version": "2.1.3",
+  "version": "2.2.0",
   "terms": [
      1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68
   ],

package/src/opencode/commands/dependency-audit.md

@@ -69,7 +69,7 @@ Comprehensive dependency analysis and security audit for all project dependencie
   "vulnerabilities": [
     {
       "package": "lodash",
-      "version": "2.1.3",
+      "version": "2.2.0",
       "severity": "high",
       "cve": "CVE-2021-23337",
       "description": "Command injection vulnerability"
@@ -85,14 +85,14 @@ Security-focused format for CI/CD integration:
 
 ```json
 {
-  "version": "2.1.3",
+  "version": "2.2.0",
   "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
   "runs": [
     {
       "tool": {
         "driver": {
           "name": "Dependency Audit",
-          "version": "2.1.3"
+          "version": "2.2.0"
         }
       },
       "results": [...]

package/src/opencode/enforcer-config.json

@@ -1,6 +1,6 @@
 {
   "framework": "xray 2.0",
-  "version": "2.1.3",
+  "version": "2.2.0",
   "description": "Codex-compliant framework configuration for Credible UI project",
   "thresholds": {
     "bundleSize": {
@@ -220,7 +220,7 @@
       }
     },
     "codex": {
-      "version": "2.1.3",
+      "version": "2.2.0",
       "terms": [
         1,
         2,

package/src/skills/registry.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.1.3",
+  "version": "2.2.0",
   "description": "0xRay Skills Registry - recommended skill sources for consumers",
   "sources": [
     {

package/xray/codex.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.1.3",
+  "version": "2.2.0",
   "lastUpdated": "2026-06-05",
   "errorPreventionTarget": 0.998,
   "terms": {

package/xray/config.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./config.schema.json",
-  "version": "2.1.3",
+  "version": "2.2.0",
   "description": "0xRay Framework - Token Management & Performance Configuration",
   "token_management": {
     "maxPromptTokens": 20000,

package/xray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "2.1.3",
+  "version": "2.2.0",
   "description": "0xRay Framework - Unified Feature Configuration",
   "token_optimization": {
     "enabled": true,

package/xray/integrations.json

@@ -4,19 +4,19 @@
     "openclaw": {
       "enabled": false,
       "type": "external-service",
-      "version": "2.1.3",
+      "version": "2.2.0",
       "config": {}
     },
     "python-bridge": {
       "enabled": false,
       "type": "protocol-bridge",
-      "version": "2.1.3",
+      "version": "2.2.0",
       "config": {}
     },
     "react": {
       "enabled": false,
       "type": "framework-adapter",
-      "version": "2.1.3",
+      "version": "2.2.0",
       "config": {}
     }
   }