0xray 3.0.6 → 3.0.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.opencode/codex.codex +1 -1
- package/.opencode/commands/dependency-audit.md +3 -3
- package/.opencode/enforcer-config.json +2 -2
- package/.plugin/plugin.json +1 -1
- package/README.md +2 -2
- package/dist/CHANGELOG.md +16 -0
- package/dist/README.md +2 -2
- package/dist/analytics/routing-refiner.js +1 -1
- package/dist/core/boot-orchestrator.js +2 -2
- package/dist/core/features-config.js +1 -1
- package/dist/integrations/grok/hooks/pre-tool-use.js +30 -0
- package/dist/mcps/governance.server.js +1 -1
- package/dist/mcps/knowledge-skills/tech-writer.server.js +1 -1
- package/dist/mcps/registry.json +1 -1
- package/dist/skills/registry.json +1 -1
- package/package.json +1 -1
- package/scripts/node/universal-version-manager.js +3 -3
- package/src/mcps/config/__tests__/config-loader.test.ts +4 -2
- package/src/mcps/governance.server.ts +1 -1
- package/src/mcps/knowledge-skills/tech-writer.server.ts +1 -1
- package/src/mcps/registry.json +1 -1
- package/src/opencode/codex.codex +1 -1
- package/src/opencode/commands/dependency-audit.md +3 -3
- package/src/opencode/enforcer-config.json +2 -2
- package/src/skills/registry.json +1 -1
- package/xray/codex.json +1 -1
- package/xray/config.json +1 -1
- package/xray/features.json +1 -1
- package/xray/integrations.json +3 -3
package/.opencode/codex.codex
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
{
|
|
2
|
-
"version": "3.0.
|
|
2
|
+
"version": "3.0.7",
|
|
3
3
|
"terms": [
|
|
4
4
|
1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68
|
|
5
5
|
],
|
|
@@ -69,7 +69,7 @@ Comprehensive dependency analysis and security audit for all project dependencie
|
|
|
69
69
|
"vulnerabilities": [
|
|
70
70
|
{
|
|
71
71
|
"package": "lodash",
|
|
72
|
-
"version": "3.0.
|
|
72
|
+
"version": "3.0.7",
|
|
73
73
|
"severity": "high",
|
|
74
74
|
"cve": "CVE-2021-23337",
|
|
75
75
|
"description": "Command injection vulnerability"
|
|
@@ -85,14 +85,14 @@ Security-focused format for CI/CD integration:
|
|
|
85
85
|
|
|
86
86
|
```json
|
|
87
87
|
{
|
|
88
|
-
"version": "3.0.
|
|
88
|
+
"version": "3.0.7",
|
|
89
89
|
"$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
|
|
90
90
|
"runs": [
|
|
91
91
|
{
|
|
92
92
|
"tool": {
|
|
93
93
|
"driver": {
|
|
94
94
|
"name": "Dependency Audit",
|
|
95
|
-
"version": "3.0.
|
|
95
|
+
"version": "3.0.7"
|
|
96
96
|
}
|
|
97
97
|
},
|
|
98
98
|
"results": [...]
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"framework": "xray 3.0",
|
|
3
|
-
"version": "3.0.
|
|
3
|
+
"version": "3.0.7",
|
|
4
4
|
"description": "Codex-compliant framework configuration for Credible UI project",
|
|
5
5
|
"thresholds": {
|
|
6
6
|
"bundleSize": {
|
|
@@ -220,7 +220,7 @@
|
|
|
220
220
|
}
|
|
221
221
|
},
|
|
222
222
|
"codex": {
|
|
223
|
-
"version": "3.0.
|
|
223
|
+
"version": "3.0.7",
|
|
224
224
|
"terms": [
|
|
225
225
|
1,
|
|
226
226
|
2,
|
package/.plugin/plugin.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"id": "0xray",
|
|
3
3
|
"name": "0xRay",
|
|
4
|
-
"version": "3.0.
|
|
4
|
+
"version": "3.0.7",
|
|
5
5
|
"description": "Multi-agent orchestration, Codex governance, and AI-powered development tools. 13 MCP tools (code review, security audit, API design, database design, project analysis, testing, performance, UI/UX, DevOps, documentation, storytelling) plus 44 knowledge skills for best-practice guidance across the full software development lifecycle.",
|
|
6
6
|
"author": "0xRay AI",
|
|
7
7
|
"homepage": "https://github.com/0xRayAI/xray",
|
package/README.md
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# 0xRay — Self-Healing AI Governance OS
|
|
2
2
|
|
|
3
|
-
**v3.0.
|
|
3
|
+
**v3.0.8** — 41 agents · 44 skills · 15 MCPs servers · 20 codex terms · 160 test files
|
|
4
4
|
|
|
5
5
|
[](https://0xrayai.github.io/xray/)
|
|
6
6
|
|
|
@@ -180,7 +180,7 @@ Every subsystem is configurable via `features.json` (located at `xray/features.j
|
|
|
180
180
|
|
|
181
181
|
```json
|
|
182
182
|
{
|
|
183
|
-
"version": "3.0.
|
|
183
|
+
"version": "3.0.7",
|
|
184
184
|
"token_optimization": {
|
|
185
185
|
"enabled": true,
|
|
186
186
|
"max_context_tokens": 20000,
|
package/dist/CHANGELOG.md
CHANGED
|
@@ -4,6 +4,22 @@ All notable changes to this project will be documented in this file.
|
|
|
4
4
|
|
|
5
5
|
The format is based on [Conventional Commits](https://www.conventionalcommits.org/).
|
|
6
6
|
|
|
7
|
+
## [3.0.8] - 2026-06-13
|
|
8
|
+
|
|
9
|
+
### 🔄 Changes
|
|
10
|
+
|
|
11
|
+
- Version bump
|
|
12
|
+
|
|
13
|
+
---
|
|
14
|
+
|
|
15
|
+
## [3.0.7] - 2026-06-13
|
|
16
|
+
|
|
17
|
+
### 🔄 Changes
|
|
18
|
+
|
|
19
|
+
- Version bump
|
|
20
|
+
|
|
21
|
+
---
|
|
22
|
+
|
|
7
23
|
## [3.0.6] - 2026-06-13
|
|
8
24
|
|
|
9
25
|
### 🔄 Changes
|
package/dist/README.md
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# 0xRay — Self-Healing AI Governance OS
|
|
2
2
|
|
|
3
|
-
**v3.0.
|
|
3
|
+
**v3.0.8** — 41 agents · 44 skills · 15 MCPs servers · 20 codex terms · 160 test files
|
|
4
4
|
|
|
5
5
|
[](https://0xrayai.github.io/xray/)
|
|
6
6
|
|
|
@@ -180,7 +180,7 @@ Every subsystem is configurable via `features.json` (located at `xray/features.j
|
|
|
180
180
|
|
|
181
181
|
```json
|
|
182
182
|
{
|
|
183
|
-
"version": "3.0.
|
|
183
|
+
"version": "3.0.7",
|
|
184
184
|
"token_optimization": {
|
|
185
185
|
"enabled": true,
|
|
186
186
|
"max_context_tokens": 20000,
|
|
@@ -36,7 +36,7 @@ class RoutingRefiner {
|
|
|
36
36
|
const optimizations = this.suggestMappingOptimizations(promptAnalysis, performanceReport);
|
|
37
37
|
const warnings = this.generateWarnings(newMappings, optimizations);
|
|
38
38
|
return {
|
|
39
|
-
version: "3.0.
|
|
39
|
+
version: "3.0.7",
|
|
40
40
|
generatedAt: new Date(),
|
|
41
41
|
summary: {
|
|
42
42
|
newMappings: newMappings.length,
|
|
@@ -717,9 +717,9 @@ export class BootOrchestrator {
|
|
|
717
717
|
try {
|
|
718
718
|
// Consumer runtime compat (XRAY_ env + .xray fallbacks)
|
|
719
719
|
const xrayConfig = {
|
|
720
|
-
version: "3.0.
|
|
720
|
+
version: "3.0.7",
|
|
721
721
|
codex_enabled: true,
|
|
722
|
-
codex_version: "v3.0.
|
|
722
|
+
codex_version: "v3.0.6",
|
|
723
723
|
codex_terms: [
|
|
724
724
|
1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20,
|
|
725
725
|
21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37,
|
|
@@ -10,6 +10,27 @@
|
|
|
10
10
|
import fs from 'fs';
|
|
11
11
|
import path from 'path';
|
|
12
12
|
|
|
13
|
+
let fLogger = null;
|
|
14
|
+
|
|
15
|
+
function safeLog(component, action, details = {}) {
|
|
16
|
+
if (!fLogger) return;
|
|
17
|
+
try { fLogger.log(component, action, 'info', details).catch(() => {}); } catch {}
|
|
18
|
+
}
|
|
19
|
+
|
|
20
|
+
function flushLog() {
|
|
21
|
+
if (!fLogger) return;
|
|
22
|
+
try { fLogger.flushSync(); } catch {}
|
|
23
|
+
}
|
|
24
|
+
|
|
25
|
+
async function initLogger() {
|
|
26
|
+
try {
|
|
27
|
+
const here = path.dirname(new URL(import.meta.url).pathname);
|
|
28
|
+
const loggerPath = path.resolve(here, '../../../core/framework-logger.js');
|
|
29
|
+
const mod = await import(`file://${loggerPath}`);
|
|
30
|
+
fLogger = mod.frameworkLogger || mod.default?.frameworkLogger;
|
|
31
|
+
} catch {}
|
|
32
|
+
}
|
|
33
|
+
|
|
13
34
|
const log = (msg) => { try { console.error(`[0xRay:GrokHook] ${msg}`); } catch { /* noop */ } };
|
|
14
35
|
|
|
15
36
|
function findGovernanceCore() {
|
|
@@ -79,12 +100,15 @@ function deriveResonance(toolName, extra = '') {
|
|
|
79
100
|
}
|
|
80
101
|
|
|
81
102
|
async function main() {
|
|
103
|
+
await initLogger();
|
|
104
|
+
|
|
82
105
|
try {
|
|
83
106
|
const toolName = process.env.TOOL_NAME || process.env.HOOK_TOOL || 'unknown_tool';
|
|
84
107
|
const cwd = process.env.PWD || process.cwd();
|
|
85
108
|
const extraContext = process.env.HOOK_ARGS || process.env.TOOL_ARGS || '';
|
|
86
109
|
|
|
87
110
|
log(`PreToolUse: ${toolName}`);
|
|
111
|
+
safeLog('grok-hook', 'pre-tool-use', { tool: toolName, cwd });
|
|
88
112
|
|
|
89
113
|
const corePath = findGovernanceCore();
|
|
90
114
|
let recommendation = 'ALLOW';
|
|
@@ -95,8 +119,10 @@ async function main() {
|
|
|
95
119
|
// Governance core no longer exposes the legacy PHI/TAU matrix (purged in v3).
|
|
96
120
|
// Resonance is still derived locally for logging/decision notes.
|
|
97
121
|
log(`Using local resonance derivation (core matrix purged)`);
|
|
122
|
+
safeLog('grok-hook', 'governance-core-found', { corePath });
|
|
98
123
|
} else {
|
|
99
124
|
log('Governance core not located — using safe default');
|
|
125
|
+
safeLog('grok-hook', 'governance-core-not-found', {});
|
|
100
126
|
}
|
|
101
127
|
|
|
102
128
|
const decision = {
|
|
@@ -109,10 +135,14 @@ async function main() {
|
|
|
109
135
|
source: '0xray/grok-pre-tool-use',
|
|
110
136
|
};
|
|
111
137
|
|
|
138
|
+
safeLog('grok-hook', 'decision', { tool: toolName, decision: decision.decision, resonance: decision.resonance });
|
|
139
|
+
flushLog();
|
|
112
140
|
console.log(JSON.stringify(decision));
|
|
113
141
|
process.exit(0); // non-blocking rollout; future versions can exit(1) on strong reject
|
|
114
142
|
} catch (err) {
|
|
115
143
|
log(`Hook failure (non-fatal): ${err.message}`);
|
|
144
|
+
safeLog('grok-hook', 'hook-failure', { error: err.message });
|
|
145
|
+
flushLog();
|
|
116
146
|
process.exit(0);
|
|
117
147
|
}
|
|
118
148
|
}
|
|
@@ -595,7 +595,7 @@ class XrayDocumentationGenerationServer extends XrayKnowledgeSkillBase {
|
|
|
595
595
|
openapi: "3.0.0",
|
|
596
596
|
info: {
|
|
597
597
|
title: "API Documentation",
|
|
598
|
-
version: "3.0.
|
|
598
|
+
version: "3.0.7",
|
|
599
599
|
description: "Generated API documentation",
|
|
600
600
|
},
|
|
601
601
|
servers: [
|
package/dist/mcps/registry.json
CHANGED
package/package.json
CHANGED
|
@@ -147,7 +147,7 @@ function detectCodexInfo() {
|
|
|
147
147
|
return { version: cver.startsWith("v") ? cver : `v${cver}`, termsCount: termCount, lastUpdated: new Date().toISOString().split("T")[0] };
|
|
148
148
|
} catch {}
|
|
149
149
|
}
|
|
150
|
-
return { version: "v3.0.
|
|
150
|
+
return { version: "v3.0.6", termsCount: 68, lastUpdated: new Date().toISOString().split("T")[0] };
|
|
151
151
|
}
|
|
152
152
|
|
|
153
153
|
const detectedCodex = detectCodexInfo();
|
|
@@ -155,7 +155,7 @@ const detectedCodex = detectCodexInfo();
|
|
|
155
155
|
const OFFICIAL_VERSIONS = {
|
|
156
156
|
// Framework version
|
|
157
157
|
framework: {
|
|
158
|
-
version: "3.0.
|
|
158
|
+
version: "3.0.8",
|
|
159
159
|
displayName: "xray: Self-Healing AI Governance OS",
|
|
160
160
|
lastUpdated: "2026-06-13",
|
|
161
161
|
// Counts (auto-calculated, but can be overridden)
|
|
@@ -403,7 +403,7 @@ const UPDATE_PATTERNS = [
|
|
|
403
403
|
pattern: /xray AI v[0-9]+\.[0-9]+\.[0-9]+/g,
|
|
404
404
|
replacement: `xray AI v${OFFICIAL_VERSIONS.framework.version}`,
|
|
405
405
|
},
|
|
406
|
-
// Footer bare version (e.g., "**Version**: 3.0.
|
|
406
|
+
// Footer bare version (e.g., "**Version**: 3.0.7")
|
|
407
407
|
{
|
|
408
408
|
pattern: /\*\*Version\*\*:\s*[0-9]+\.[0-9]+\.[0-9]+/g,
|
|
409
409
|
replacement: `**Version**: ${OFFICIAL_VERSIONS.framework.version}`,
|
|
@@ -273,11 +273,13 @@ describe('ConfigLoader', () => {
|
|
|
273
273
|
|
|
274
274
|
it('should return true when default config file exists', () => {
|
|
275
275
|
const testConfigs = [{ serverName: 'test', command: 'node', args: ['test.js'], timeout: 30000 }];
|
|
276
|
-
|
|
276
|
+
const tmpConfig = '.test-mcp-default.json';
|
|
277
|
+
fs.writeFileSync(tmpConfig, JSON.stringify(testConfigs));
|
|
278
|
+
loader.addConfigPath(tmpConfig);
|
|
277
279
|
|
|
278
280
|
expect(loader.hasConfigFile()).toBe(true);
|
|
279
281
|
|
|
280
|
-
fs.unlinkSync(
|
|
282
|
+
fs.unlinkSync(tmpConfig);
|
|
281
283
|
});
|
|
282
284
|
|
|
283
285
|
it('should return true when added config file exists', () => {
|
|
@@ -888,7 +888,7 @@ class XrayDocumentationGenerationServer extends XrayKnowledgeSkillBase {
|
|
|
888
888
|
openapi: "3.0.0",
|
|
889
889
|
info: {
|
|
890
890
|
title: "API Documentation",
|
|
891
|
-
version: "3.0.
|
|
891
|
+
version: "3.0.7",
|
|
892
892
|
description: "Generated API documentation",
|
|
893
893
|
},
|
|
894
894
|
servers: [
|
package/src/mcps/registry.json
CHANGED
package/src/opencode/codex.codex
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
{
|
|
2
|
-
"version": "3.0.
|
|
2
|
+
"version": "3.0.7",
|
|
3
3
|
"terms": [
|
|
4
4
|
1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68
|
|
5
5
|
],
|
|
@@ -69,7 +69,7 @@ Comprehensive dependency analysis and security audit for all project dependencie
|
|
|
69
69
|
"vulnerabilities": [
|
|
70
70
|
{
|
|
71
71
|
"package": "lodash",
|
|
72
|
-
"version": "3.0.
|
|
72
|
+
"version": "3.0.7",
|
|
73
73
|
"severity": "high",
|
|
74
74
|
"cve": "CVE-2021-23337",
|
|
75
75
|
"description": "Command injection vulnerability"
|
|
@@ -85,14 +85,14 @@ Security-focused format for CI/CD integration:
|
|
|
85
85
|
|
|
86
86
|
```json
|
|
87
87
|
{
|
|
88
|
-
"version": "3.0.
|
|
88
|
+
"version": "3.0.7",
|
|
89
89
|
"$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
|
|
90
90
|
"runs": [
|
|
91
91
|
{
|
|
92
92
|
"tool": {
|
|
93
93
|
"driver": {
|
|
94
94
|
"name": "Dependency Audit",
|
|
95
|
-
"version": "3.0.
|
|
95
|
+
"version": "3.0.7"
|
|
96
96
|
}
|
|
97
97
|
},
|
|
98
98
|
"results": [...]
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"framework": "xray 3.0",
|
|
3
|
-
"version": "3.0.
|
|
3
|
+
"version": "3.0.7",
|
|
4
4
|
"description": "Codex-compliant framework configuration for Credible UI project",
|
|
5
5
|
"thresholds": {
|
|
6
6
|
"bundleSize": {
|
|
@@ -220,7 +220,7 @@
|
|
|
220
220
|
}
|
|
221
221
|
},
|
|
222
222
|
"codex": {
|
|
223
|
-
"version": "3.0.
|
|
223
|
+
"version": "3.0.7",
|
|
224
224
|
"terms": [
|
|
225
225
|
1,
|
|
226
226
|
2,
|
package/src/skills/registry.json
CHANGED
package/xray/codex.json
CHANGED
package/xray/config.json
CHANGED
package/xray/features.json
CHANGED
package/xray/integrations.json
CHANGED
|
@@ -4,19 +4,19 @@
|
|
|
4
4
|
"openclaw": {
|
|
5
5
|
"enabled": false,
|
|
6
6
|
"type": "external-service",
|
|
7
|
-
"version": "3.0.
|
|
7
|
+
"version": "3.0.7",
|
|
8
8
|
"config": {}
|
|
9
9
|
},
|
|
10
10
|
"python-bridge": {
|
|
11
11
|
"enabled": false,
|
|
12
12
|
"type": "protocol-bridge",
|
|
13
|
-
"version": "3.0.
|
|
13
|
+
"version": "3.0.7",
|
|
14
14
|
"config": {}
|
|
15
15
|
},
|
|
16
16
|
"react": {
|
|
17
17
|
"enabled": false,
|
|
18
18
|
"type": "framework-adapter",
|
|
19
|
-
"version": "3.0.
|
|
19
|
+
"version": "3.0.7",
|
|
20
20
|
"config": {}
|
|
21
21
|
}
|
|
22
22
|
}
|