0xray 3.0.6 → 3.0.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,5 +1,5 @@
1
1
  {
2
- "version": "3.0.5",
2
+ "version": "3.0.7",
3
3
  "terms": [
4
4
  1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68
5
5
  ],
@@ -69,7 +69,7 @@ Comprehensive dependency analysis and security audit for all project dependencie
69
69
  "vulnerabilities": [
70
70
  {
71
71
  "package": "lodash",
72
- "version": "3.0.5",
72
+ "version": "3.0.7",
73
73
  "severity": "high",
74
74
  "cve": "CVE-2021-23337",
75
75
  "description": "Command injection vulnerability"
@@ -85,14 +85,14 @@ Security-focused format for CI/CD integration:
85
85
 
86
86
  ```json
87
87
  {
88
- "version": "3.0.5",
88
+ "version": "3.0.7",
89
89
  "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
90
90
  "runs": [
91
91
  {
92
92
  "tool": {
93
93
  "driver": {
94
94
  "name": "Dependency Audit",
95
- "version": "3.0.5"
95
+ "version": "3.0.7"
96
96
  }
97
97
  },
98
98
  "results": [...]
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "framework": "xray 3.0",
3
- "version": "3.0.5",
3
+ "version": "3.0.7",
4
4
  "description": "Codex-compliant framework configuration for Credible UI project",
5
5
  "thresholds": {
6
6
  "bundleSize": {
@@ -220,7 +220,7 @@
220
220
  }
221
221
  },
222
222
  "codex": {
223
- "version": "3.0.5",
223
+ "version": "3.0.7",
224
224
  "terms": [
225
225
  1,
226
226
  2,
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "id": "0xray",
3
3
  "name": "0xRay",
4
- "version": "3.0.5",
4
+ "version": "3.0.7",
5
5
  "description": "Multi-agent orchestration, Codex governance, and AI-powered development tools. 13 MCP tools (code review, security audit, API design, database design, project analysis, testing, performance, UI/UX, DevOps, documentation, storytelling) plus 44 knowledge skills for best-practice guidance across the full software development lifecycle.",
6
6
  "author": "0xRay AI",
7
7
  "homepage": "https://github.com/0xRayAI/xray",
package/README.md CHANGED
@@ -1,6 +1,6 @@
1
1
  # 0xRay — Self-Healing AI Governance OS
2
2
 
3
- **v3.0.6** — 41 agents · 44 skills · 15 MCPs servers · 20 codex terms · 160 test files
3
+ **v3.0.8** — 41 agents · 44 skills · 15 MCPs servers · 20 codex terms · 160 test files
4
4
 
5
5
  [![Docs](https://img.shields.io/badge/docs-0xRayAI.github.io/xray-10b981?style=flat-square)](https://0xrayai.github.io/xray/)
6
6
 
@@ -180,7 +180,7 @@ Every subsystem is configurable via `features.json` (located at `xray/features.j
180
180
 
181
181
  ```json
182
182
  {
183
- "version": "3.0.5",
183
+ "version": "3.0.7",
184
184
  "token_optimization": {
185
185
  "enabled": true,
186
186
  "max_context_tokens": 20000,
package/dist/CHANGELOG.md CHANGED
@@ -4,6 +4,22 @@ All notable changes to this project will be documented in this file.
4
4
 
5
5
  The format is based on [Conventional Commits](https://www.conventionalcommits.org/).
6
6
 
7
+ ## [3.0.8] - 2026-06-13
8
+
9
+ ### 🔄 Changes
10
+
11
+ - Version bump
12
+
13
+ ---
14
+
15
+ ## [3.0.7] - 2026-06-13
16
+
17
+ ### 🔄 Changes
18
+
19
+ - Version bump
20
+
21
+ ---
22
+
7
23
  ## [3.0.6] - 2026-06-13
8
24
 
9
25
  ### 🔄 Changes
package/dist/README.md CHANGED
@@ -1,6 +1,6 @@
1
1
  # 0xRay — Self-Healing AI Governance OS
2
2
 
3
- **v3.0.6** — 41 agents · 44 skills · 15 MCPs servers · 20 codex terms · 160 test files
3
+ **v3.0.8** — 41 agents · 44 skills · 15 MCPs servers · 20 codex terms · 160 test files
4
4
 
5
5
  [![Docs](https://img.shields.io/badge/docs-0xRayAI.github.io/xray-10b981?style=flat-square)](https://0xrayai.github.io/xray/)
6
6
 
@@ -180,7 +180,7 @@ Every subsystem is configurable via `features.json` (located at `xray/features.j
180
180
 
181
181
  ```json
182
182
  {
183
- "version": "3.0.5",
183
+ "version": "3.0.7",
184
184
  "token_optimization": {
185
185
  "enabled": true,
186
186
  "max_context_tokens": 20000,
@@ -36,7 +36,7 @@ class RoutingRefiner {
36
36
  const optimizations = this.suggestMappingOptimizations(promptAnalysis, performanceReport);
37
37
  const warnings = this.generateWarnings(newMappings, optimizations);
38
38
  return {
39
- version: "3.0.5",
39
+ version: "3.0.7",
40
40
  generatedAt: new Date(),
41
41
  summary: {
42
42
  newMappings: newMappings.length,
@@ -717,9 +717,9 @@ export class BootOrchestrator {
717
717
  try {
718
718
  // Consumer runtime compat (XRAY_ env + .xray fallbacks)
719
719
  const xrayConfig = {
720
- version: "3.0.5",
720
+ version: "3.0.7",
721
721
  codex_enabled: true,
722
- codex_version: "v3.0.5",
722
+ codex_version: "v3.0.6",
723
723
  codex_terms: [
724
724
  1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20,
725
725
  21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37,
@@ -286,7 +286,7 @@ export class FeaturesConfigLoader {
286
286
  */
287
287
  getDefaultConfig() {
288
288
  return {
289
- version: "3.0.5",
289
+ version: "3.0.7",
290
290
  description: "0xRay Framework - Unified Feature Configuration",
291
291
  token_optimization: {
292
292
  enabled: true,
@@ -10,6 +10,27 @@
10
10
  import fs from 'fs';
11
11
  import path from 'path';
12
12
 
13
+ let fLogger = null;
14
+
15
+ function safeLog(component, action, details = {}) {
16
+ if (!fLogger) return;
17
+ try { fLogger.log(component, action, 'info', details).catch(() => {}); } catch {}
18
+ }
19
+
20
+ function flushLog() {
21
+ if (!fLogger) return;
22
+ try { fLogger.flushSync(); } catch {}
23
+ }
24
+
25
+ async function initLogger() {
26
+ try {
27
+ const here = path.dirname(new URL(import.meta.url).pathname);
28
+ const loggerPath = path.resolve(here, '../../../core/framework-logger.js');
29
+ const mod = await import(`file://${loggerPath}`);
30
+ fLogger = mod.frameworkLogger || mod.default?.frameworkLogger;
31
+ } catch {}
32
+ }
33
+
13
34
  const log = (msg) => { try { console.error(`[0xRay:GrokHook] ${msg}`); } catch { /* noop */ } };
14
35
 
15
36
  function findGovernanceCore() {
@@ -79,12 +100,15 @@ function deriveResonance(toolName, extra = '') {
79
100
  }
80
101
 
81
102
  async function main() {
103
+ await initLogger();
104
+
82
105
  try {
83
106
  const toolName = process.env.TOOL_NAME || process.env.HOOK_TOOL || 'unknown_tool';
84
107
  const cwd = process.env.PWD || process.cwd();
85
108
  const extraContext = process.env.HOOK_ARGS || process.env.TOOL_ARGS || '';
86
109
 
87
110
  log(`PreToolUse: ${toolName}`);
111
+ safeLog('grok-hook', 'pre-tool-use', { tool: toolName, cwd });
88
112
 
89
113
  const corePath = findGovernanceCore();
90
114
  let recommendation = 'ALLOW';
@@ -95,8 +119,10 @@ async function main() {
95
119
  // Governance core no longer exposes the legacy PHI/TAU matrix (purged in v3).
96
120
  // Resonance is still derived locally for logging/decision notes.
97
121
  log(`Using local resonance derivation (core matrix purged)`);
122
+ safeLog('grok-hook', 'governance-core-found', { corePath });
98
123
  } else {
99
124
  log('Governance core not located — using safe default');
125
+ safeLog('grok-hook', 'governance-core-not-found', {});
100
126
  }
101
127
 
102
128
  const decision = {
@@ -109,10 +135,14 @@ async function main() {
109
135
  source: '0xray/grok-pre-tool-use',
110
136
  };
111
137
 
138
+ safeLog('grok-hook', 'decision', { tool: toolName, decision: decision.decision, resonance: decision.resonance });
139
+ flushLog();
112
140
  console.log(JSON.stringify(decision));
113
141
  process.exit(0); // non-blocking rollout; future versions can exit(1) on strong reject
114
142
  } catch (err) {
115
143
  log(`Hook failure (non-fatal): ${err.message}`);
144
+ safeLog('grok-hook', 'hook-failure', { error: err.message });
145
+ flushLog();
116
146
  process.exit(0);
117
147
  }
118
148
  }
@@ -32,7 +32,7 @@ class GovernanceServer {
32
32
  }
33
33
  createServer() {
34
34
  const server = new Server({
35
- name: "governance", version: "3.0.5",
35
+ name: "governance", version: "3.0.7",
36
36
  }, {
37
37
  capabilities: {
38
38
  tools: {},
@@ -595,7 +595,7 @@ class XrayDocumentationGenerationServer extends XrayKnowledgeSkillBase {
595
595
  openapi: "3.0.0",
596
596
  info: {
597
597
  title: "API Documentation",
598
- version: "3.0.5",
598
+ version: "3.0.7",
599
599
  description: "Generated API documentation",
600
600
  },
601
601
  servers: [
@@ -1,5 +1,5 @@
1
1
  {
2
- "version": "3.0.5",
2
+ "version": "3.0.7",
3
3
  "description": "0xRay Community MCPs Registry - curated API-focused MCP servers",
4
4
  "sources": [
5
5
  {
@@ -1,5 +1,5 @@
1
1
  {
2
- "version": "3.0.5",
2
+ "version": "3.0.7",
3
3
  "description": "0xRay Skills Registry - recommended skill sources for consumers",
4
4
  "sources": [
5
5
  {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "0xray",
3
- "version": "3.0.6",
3
+ "version": "3.0.8",
4
4
  "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
5
5
  "license": "MIT",
6
6
  "repository": {
@@ -147,7 +147,7 @@ function detectCodexInfo() {
147
147
  return { version: cver.startsWith("v") ? cver : `v${cver}`, termsCount: termCount, lastUpdated: new Date().toISOString().split("T")[0] };
148
148
  } catch {}
149
149
  }
150
- return { version: "v3.0.5", termsCount: 68, lastUpdated: new Date().toISOString().split("T")[0] };
150
+ return { version: "v3.0.6", termsCount: 68, lastUpdated: new Date().toISOString().split("T")[0] };
151
151
  }
152
152
 
153
153
  const detectedCodex = detectCodexInfo();
@@ -155,7 +155,7 @@ const detectedCodex = detectCodexInfo();
155
155
  const OFFICIAL_VERSIONS = {
156
156
  // Framework version
157
157
  framework: {
158
- version: "3.0.6",
158
+ version: "3.0.8",
159
159
  displayName: "xray: Self-Healing AI Governance OS",
160
160
  lastUpdated: "2026-06-13",
161
161
  // Counts (auto-calculated, but can be overridden)
@@ -403,7 +403,7 @@ const UPDATE_PATTERNS = [
403
403
  pattern: /xray AI v[0-9]+\.[0-9]+\.[0-9]+/g,
404
404
  replacement: `xray AI v${OFFICIAL_VERSIONS.framework.version}`,
405
405
  },
406
- // Footer bare version (e.g., "**Version**: 3.0.5")
406
+ // Footer bare version (e.g., "**Version**: 3.0.7")
407
407
  {
408
408
  pattern: /\*\*Version\*\*:\s*[0-9]+\.[0-9]+\.[0-9]+/g,
409
409
  replacement: `**Version**: ${OFFICIAL_VERSIONS.framework.version}`,
@@ -273,11 +273,13 @@ describe('ConfigLoader', () => {
273
273
 
274
274
  it('should return true when default config file exists', () => {
275
275
  const testConfigs = [{ serverName: 'test', command: 'node', args: ['test.js'], timeout: 30000 }];
276
- fs.writeFileSync('.mcp.json', JSON.stringify(testConfigs));
276
+ const tmpConfig = '.test-mcp-default.json';
277
+ fs.writeFileSync(tmpConfig, JSON.stringify(testConfigs));
278
+ loader.addConfigPath(tmpConfig);
277
279
 
278
280
  expect(loader.hasConfigFile()).toBe(true);
279
281
 
280
- fs.unlinkSync('.mcp.json');
282
+ fs.unlinkSync(tmpConfig);
281
283
  });
282
284
 
283
285
  it('should return true when added config file exists', () => {
@@ -72,7 +72,7 @@ class GovernanceServer {
72
72
  private createServer(): Server {
73
73
  const server = new Server(
74
74
  {
75
- name: "governance", version: "3.0.5",
75
+ name: "governance", version: "3.0.7",
76
76
  },
77
77
  {
78
78
  capabilities: {
@@ -888,7 +888,7 @@ class XrayDocumentationGenerationServer extends XrayKnowledgeSkillBase {
888
888
  openapi: "3.0.0",
889
889
  info: {
890
890
  title: "API Documentation",
891
- version: "3.0.5",
891
+ version: "3.0.7",
892
892
  description: "Generated API documentation",
893
893
  },
894
894
  servers: [
@@ -1,5 +1,5 @@
1
1
  {
2
- "version": "3.0.5",
2
+ "version": "3.0.7",
3
3
  "description": "0xRay Community MCPs Registry - curated API-focused MCP servers",
4
4
  "sources": [
5
5
  {
@@ -1,5 +1,5 @@
1
1
  {
2
- "version": "3.0.5",
2
+ "version": "3.0.7",
3
3
  "terms": [
4
4
  1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68
5
5
  ],
@@ -69,7 +69,7 @@ Comprehensive dependency analysis and security audit for all project dependencie
69
69
  "vulnerabilities": [
70
70
  {
71
71
  "package": "lodash",
72
- "version": "3.0.5",
72
+ "version": "3.0.7",
73
73
  "severity": "high",
74
74
  "cve": "CVE-2021-23337",
75
75
  "description": "Command injection vulnerability"
@@ -85,14 +85,14 @@ Security-focused format for CI/CD integration:
85
85
 
86
86
  ```json
87
87
  {
88
- "version": "3.0.5",
88
+ "version": "3.0.7",
89
89
  "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
90
90
  "runs": [
91
91
  {
92
92
  "tool": {
93
93
  "driver": {
94
94
  "name": "Dependency Audit",
95
- "version": "3.0.5"
95
+ "version": "3.0.7"
96
96
  }
97
97
  },
98
98
  "results": [...]
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "framework": "xray 3.0",
3
- "version": "3.0.5",
3
+ "version": "3.0.7",
4
4
  "description": "Codex-compliant framework configuration for Credible UI project",
5
5
  "thresholds": {
6
6
  "bundleSize": {
@@ -220,7 +220,7 @@
220
220
  }
221
221
  },
222
222
  "codex": {
223
- "version": "3.0.5",
223
+ "version": "3.0.7",
224
224
  "terms": [
225
225
  1,
226
226
  2,
@@ -1,5 +1,5 @@
1
1
  {
2
- "version": "3.0.5",
2
+ "version": "3.0.7",
3
3
  "description": "0xRay Skills Registry - recommended skill sources for consumers",
4
4
  "sources": [
5
5
  {
package/xray/codex.json CHANGED
@@ -1,5 +1,5 @@
1
1
  {
2
- "version": "3.0.5",
2
+ "version": "3.0.7",
3
3
  "lastUpdated": "2026-06-05",
4
4
  "errorPreventionTarget": 0.998,
5
5
  "terms": {
package/xray/config.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "./config.schema.json",
3
- "version": "3.0.5",
3
+ "version": "3.0.7",
4
4
  "description": "0xRay Framework - Token Management & Performance Configuration",
5
5
  "token_management": {
6
6
  "maxPromptTokens": 20000,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "./features.schema.json",
3
- "version": "3.0.5",
3
+ "version": "3.0.7",
4
4
  "description": "0xRay Framework - Unified Feature Configuration",
5
5
  "token_optimization": {
6
6
  "enabled": true,
@@ -4,19 +4,19 @@
4
4
  "openclaw": {
5
5
  "enabled": false,
6
6
  "type": "external-service",
7
- "version": "3.0.5",
7
+ "version": "3.0.7",
8
8
  "config": {}
9
9
  },
10
10
  "python-bridge": {
11
11
  "enabled": false,
12
12
  "type": "protocol-bridge",
13
- "version": "3.0.5",
13
+ "version": "3.0.7",
14
14
  "config": {}
15
15
  },
16
16
  "react": {
17
17
  "enabled": false,
18
18
  "type": "framework-adapter",
19
- "version": "3.0.5",
19
+ "version": "3.0.7",
20
20
  "config": {}
21
21
  }
22
22
  }