0xray 3.0.9 → 3.0.10

package/.opencode/codex.codex

@@ -1,5 +1,5 @@
 {
-  "version": "3.0.8",
+  "version": "3.0.9",
   "terms": [
      1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68
   ],

package/.opencode/commands/dependency-audit.md

@@ -69,7 +69,7 @@ Comprehensive dependency analysis and security audit for all project dependencie
   "vulnerabilities": [
     {
       "package": "lodash",
-      "version": "3.0.8",
+      "version": "3.0.9",
       "severity": "high",
       "cve": "CVE-2021-23337",
       "description": "Command injection vulnerability"
@@ -85,14 +85,14 @@ Security-focused format for CI/CD integration:
 
 ```json
 {
-  "version": "3.0.8",
+  "version": "3.0.9",
   "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
   "runs": [
     {
       "tool": {
         "driver": {
           "name": "Dependency Audit",
-          "version": "3.0.8"
+          "version": "3.0.9"
         }
       },
       "results": [...]

package/.opencode/enforcer-config.json

@@ -1,6 +1,6 @@
 {
   "framework": "xray 3.0",
-  "version": "3.0.8",
+  "version": "3.0.9",
   "description": "Codex-compliant framework configuration for Credible UI project",
   "thresholds": {
     "bundleSize": {
@@ -220,7 +220,7 @@
       }
     },
     "codex": {
-      "version": "3.0.8",
+      "version": "3.0.9",
       "terms": [
         1,
         2,

package/.plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "0xray",
   "name": "0xRay",
-  "version": "3.0.8",
+  "version": "3.0.9",
   "description": "Multi-agent orchestration, Codex governance, and AI-powered development tools. 13 MCP tools (code review, security audit, API design, database design, project analysis, testing, performance, UI/UX, DevOps, documentation, storytelling) plus 44 knowledge skills for best-practice guidance across the full software development lifecycle.",
   "author": "0xRay AI",
   "homepage": "https://github.com/0xRayAI/xray",

package/README.md

@@ -1,6 +1,6 @@
 # 0xRay — Self-Healing AI Governance OS
 
-**v3.0.9** — 41 agents · 44 skills · 15 MCPs servers · 20 codex terms · 160 test files
+**v3.0.10** — 41 agents · 44 skills · 15 MCPs servers · 20 codex terms · 160 test files
 
 [![Docs](https://img.shields.io/badge/docs-0xRayAI.github.io/xray-10b981?style=flat-square)](https://0xrayai.github.io/xray/)
 
@@ -180,7 +180,7 @@ Every subsystem is configurable via `features.json` (located at `xray/features.j
 
 ```json
 {
-  "version": "3.0.8",
+  "version": "3.0.9",
   "token_optimization": {
     "enabled": true,
     "max_context_tokens": 20000,

package/dist/CHANGELOG.md

@@ -4,6 +4,14 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Conventional Commits](https://www.conventionalcommits.org/).
 
+## [3.0.10] - 2026-06-13
+
+### 🔄 Changes
+
+- Version bump
+
+---
+
 ## [3.0.9] - 2026-06-13
 
 ### 🔄 Changes

package/dist/README.md

@@ -1,6 +1,6 @@
 # 0xRay — Self-Healing AI Governance OS
 
-**v3.0.9** — 41 agents · 44 skills · 15 MCPs servers · 20 codex terms · 160 test files
+**v3.0.10** — 41 agents · 44 skills · 15 MCPs servers · 20 codex terms · 160 test files
 
 [![Docs](https://img.shields.io/badge/docs-0xRayAI.github.io/xray-10b981?style=flat-square)](https://0xrayai.github.io/xray/)
 
@@ -180,7 +180,7 @@ Every subsystem is configurable via `features.json` (located at `xray/features.j
 
 ```json
 {
-  "version": "3.0.8",
+  "version": "3.0.9",
   "token_optimization": {
     "enabled": true,
     "max_context_tokens": 20000,

package/dist/analytics/routing-refiner.js

@@ -36,7 +36,7 @@ class RoutingRefiner {
         const optimizations = this.suggestMappingOptimizations(promptAnalysis, performanceReport);
         const warnings = this.generateWarnings(newMappings, optimizations);
         return {
-            version: "3.0.8",
+            version: "3.0.9",
             generatedAt: new Date(),
             summary: {
                 newMappings: newMappings.length,

package/dist/core/boot-orchestrator.js

@@ -717,9 +717,9 @@ export class BootOrchestrator {
         try {
             // Consumer runtime compat (XRAY_ env + .xray fallbacks)
             const xrayConfig = {
-                version: "3.0.8",
+                version: "3.0.9",
                 codex_enabled: true,
-                codex_version: "v3.0.7",
+                codex_version: "v3.0.8",
                 codex_terms: [
                     1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20,
                     21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37,

package/dist/core/features-config.js

@@ -286,7 +286,7 @@ export class FeaturesConfigLoader {
      */
     getDefaultConfig() {
         return {
-            version: "3.0.8",
+            version: "3.0.9",
             description: "0xRay Framework - Unified Feature Configuration",
             token_optimization: {
                 enabled: true,

package/dist/enforcement/loaders/agents-md-validation-loader.js

@@ -130,7 +130,7 @@ export class AgentsMdValidationLoader extends BaseLoader {
                     passed: false,
                     message: "AGENTS.md not found in project root",
                     suggestions: [
-                        "Create AGENTS.md using template from docs/AGENTS_TEMPLATE.md",
+                        "Create AGENTS.md using template from xray/agents_template.md",
                         "Run: node scripts/node/enforce-agents-md.js --generate",
                         "See AGENTS.md for agent triage rules and codex compliance",
                     ],
@@ -233,7 +233,7 @@ export class AgentsMdValidationLoader extends BaseLoader {
                     message: `AGENTS.md missing required sections: ${missingSections.join(", ")}`,
                     suggestions: [
                         "Add missing sections to AGENTS.md",
-                        "Reference docs/AGENTS_TEMPLATE.md for structure",
+                        "Reference xray/agents_template.md for structure",
                     ],
                 };
             }

package/dist/mcps/governance.server.js

@@ -31,7 +31,7 @@ class GovernanceServer {
     }
     createServer() {
         const server = new Server({
-            name: "governance", version: "3.0.8",
+            name: "governance", version: "3.0.9",
         }, {
             capabilities: {
                 tools: {},

package/dist/mcps/knowledge-skills/tech-writer.server.js

@@ -595,7 +595,7 @@ class XrayDocumentationGenerationServer extends XrayKnowledgeSkillBase {
             openapi: "3.0.0",
             info: {
                 title: "API Documentation",
-                version: "3.0.8",
+                version: "3.0.9",
                 description: "Generated API documentation",
             },
             servers: [

package/dist/mcps/registry.json

@@ -1,5 +1,5 @@
 {
-  "version": "3.0.8",
+  "version": "3.0.9",
   "description": "0xRay Community MCPs Registry - curated API-focused MCP servers",
   "sources": [
     {

package/dist/processors/implementations/agents-md-validation-processor.js

@@ -125,7 +125,7 @@ export class AgentsMdValidationProcessor {
             result.valid = false;
             result.errors.push("AGENTS.md not found in project root");
             result.fixes = result.fixes || [];
-            result.fixes.push("Create AGENTS.md using template from docs/AGENTS_TEMPLATE.md");
+            result.fixes.push("Create AGENTS.md using template from xray/agents_template.md");
             return result;
         }
         const content = fs.readFileSync(this.agentsPath, "utf-8");

package/dist/skills/registry.json

@@ -1,5 +1,5 @@
 {
-  "version": "3.0.8",
+  "version": "3.0.9",
   "description": "0xRay Skills Registry - recommended skill sources for consumers",
   "sources": [
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "3.0.9",
+  "version": "3.0.10",
   "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
   "license": "MIT",
   "repository": {
@@ -144,7 +144,6 @@
     "scripts/mjs/validate-mcp-connectivity.cjs",
     "scripts/mjs/validate-postinstall-config.mjs",
     "src/opencode/",
-    "src/opencode/AGENTS-consumer.md",
     "src/opencode/codex.codex",
     "src/opencode/commands/",
     "src/opencode/enforcer-config.json",

package/scripts/node/enforce-agents-md.mjs

@@ -297,7 +297,7 @@ class AgentsMdEnforcer {
       console.log('❌ AGENTS.md is MISSING');
       console.log('\n💡 To fix:');
       console.log('  1. Create AGENTS.md in project root');
-      console.log('  2. Copy template from docs/AGENTS_TEMPLATE.md');
+      console.log('  2. Copy template from xray/agents_template.md');
       console.log('  3. Customize for your project');
     } else {
       console.log('❌ AGENTS.md validation FAILED');
@@ -328,7 +328,7 @@ class AgentsMdEnforcer {
    * Load template file
    */
   async loadTemplate() {
-    const templatePath = path.join(__dirname, '..', '..', '..', 'docs', 'AGENTS_TEMPLATE.md');
+    const templatePath = path.join(__dirname, '..', '..', 'xray', 'agents_template.md');
     if (fs.existsSync(templatePath)) {
       return fs.readFileSync(templatePath, 'utf-8');
     }

package/scripts/node/postinstall.cjs

@@ -31,11 +31,11 @@ const resolvedTarget = path.resolve(targetDir);
 
 const SKIP_DIRS = new Set(["node_modules", "logs"]);
 
-// Copy AGENTS-consumer.md → AGENTS.md
-const agentsConsumer = path.join(packageRoot, "AGENTS-consumer.md");
+// Copy xray/agents_template.md → AGENTS.md (consumer only)
+const agentsTemplate = path.join(packageRoot, "xray", "agents_template.md");
 const agentsDest = path.join(targetDir, "AGENTS.md");
-if (fs.existsSync(agentsConsumer) && resolvedPackage !== resolvedTarget) {
-  fs.copyFileSync(agentsConsumer, agentsDest);
+if (fs.existsSync(agentsTemplate) && resolvedPackage !== resolvedTarget && !fs.existsSync(agentsDest)) {
+  fs.copyFileSync(agentsTemplate, agentsDest);
 }
 
 // Register MCP servers with Grok CLI (if available) using absolute paths to installed dist

package/scripts/node/pre-publish-guard.js

@@ -87,7 +87,7 @@ function checkGitStatus() {
       'CHANGELOG.md',
       'AGENTS.md',
       'AGENTS-full.md',
-      'AGENTS-consumer.md',
+      'xray/agents_template.md',
       'README.md',
       'logs/',
       'backups/',

package/scripts/node/setup.cjs

@@ -72,6 +72,16 @@ try {
   }
 } catch (e) { console.warn(`⚠️ logs/framework/: ${e.message}`); }
 
+// 0c. Deploy AGENTS.md template for consumer if none exists
+const agentsTemplate = path.join(packageRoot, "xray", "agents_template.md");
+const agentsDest = path.join(targetDir, "AGENTS.md");
+if (fs.existsSync(agentsTemplate) && !fs.existsSync(agentsDest)) {
+  try {
+    fs.copyFileSync(agentsTemplate, agentsDest);
+    console.log("✅ AGENTS.md: deployed template (consumer)");
+  } catch (e) { console.warn(`⚠️ AGENTS.md deploy: ${e.message}`); }
+}
+
  /* 1. Sync core skills from src/skills/ (dev) or dist/skills/ (consumer) → .opencode/skills/  [P3-SKILLS-DE-DUP-SCOPE-AND-EXEC-01: orchestrator package SSOT canonical src/skills/orchestrator/SKILL.md; mirror .opencode/skills/orchestrator/ is built output of this logic; see paired guarded fw in status.ts getSkillsList + mapping append + deep ref 2026-05-26 authority for one-package dedup under pivoted surgical plan] 
    [P3-SKILLS-DE-DUP-RESEARCHER-FOLLOW-01: researcher package SSOT canonical src/skills/researcher/SKILL.md (high-value per deep ref + YML precedent + playbook P3-SKILLS-FOLLOW-01); mirror .opencode/skills/researcher/ is built output of this logic; see paired guarded fw in status.ts + rich append + YML @ harness-codex verification (FORCE exercised P3-YML + codex-enforcement + 100/60/0 + 3 subagents tracked + 0 hot + 3-hot re-establish + all prior green) + deep ref 2026-05-26 + Phase 3 Pivot + Term 61 + user's "create a todo list. spawn subagents..." + 6/6+7/7 + YML. Governance-visible hook for skills SSOT at install layer. Silent, additive, reversible, no behavior change, fw/echo only.]
    [P3-SKILLS-FOLLOW-02: code-review package SSOT canonical src/skills/code-review/SKILL.md (next high-value per deep ref "parallel small batches" + @architect scoping rec 2 + YML @ "Ready for next" + this P3-SKILLS-FOLLOW-02 on user's spawn command); mirror .opencode/skills/code-review/ is built output of this logic; see paired guarded fw "P3-SKILLS-FOLLOW-02-code-review-ssot-preferred" in status.ts (after researcher) + rich append docs/reflections/p3-skills-follow-02-code-review-2026-05-27.md + YML @ harness-codex verification + 0 hot + 3-hot + all ties + ps 0 + this work (2-file surgical edit, harness post, mapping append after latest ~17099+, todo advance 1, spawn replacement, self-audit 100%, green + ready) + deep ref 2026-05-26 + Phase 3 Pivot + Term 61 + 6/6+7/7 + YML. Governance-visible hook for skills SSOT at install layer for code-review. Silent, additive, reversible, no behavior change, fw/echo only. "The box contains its builders. The relay is hot."] */

package/scripts/node/universal-version-manager.js

@@ -147,7 +147,7 @@ function detectCodexInfo() {
       return { version: cver.startsWith("v") ? cver : `v${cver}`, termsCount: termCount, lastUpdated: new Date().toISOString().split("T")[0] };
     } catch {}
   }
-  return { version: "v3.0.7", termsCount: 68, lastUpdated: new Date().toISOString().split("T")[0] };
+  return { version: "v3.0.8", termsCount: 68, lastUpdated: new Date().toISOString().split("T")[0] };
 }
 
 const detectedCodex = detectCodexInfo();
@@ -155,7 +155,7 @@ const detectedCodex = detectCodexInfo();
 const OFFICIAL_VERSIONS = {
   // Framework version
   framework: {
-    version: "3.0.9",
+    version: "3.0.10",
       displayName: "xray: Self-Healing AI Governance OS",
       lastUpdated: "2026-06-13",
     // Counts (auto-calculated, but can be overridden)
@@ -403,7 +403,7 @@ const UPDATE_PATTERNS = [
       pattern: /xray AI v[0-9]+\.[0-9]+\.[0-9]+/g,
       replacement: `xray AI v${OFFICIAL_VERSIONS.framework.version}`,
     },
-    // Footer bare version (e.g., "**Version**: 3.0.8")
+    // Footer bare version (e.g., "**Version**: 3.0.9")
     {
       pattern: /\*\*Version\*\*:\s*[0-9]+\.[0-9]+\.[0-9]+/g,
       replacement: `**Version**: ${OFFICIAL_VERSIONS.framework.version}`,
@@ -702,8 +702,8 @@ const UPDATE_PATTERNS = [
   const documentationFiles = [
     "README.md",
     "AGENTS.md",
-    "src/opencode/AGENTS-consumer.md",
-    rcp("agents_template.md") || "src/opencode/agents_template.md",
+    "xray/agents_template.md",
+    "xray/agents_template.md",
     "docs/reference/templates/agents_template.md",
     "docs/reference/templates/master-agent-template.md",
     "docs/reference/templates/agent-template-dev.md",
@@ -982,7 +982,7 @@ const UPDATE_PATTERNS = [
  * =====================================
  *
  * ✅ COMPLETED FEATURES:
- * - Comprehensive documentation management (AGENTS.md, AGENTS-consumer.md, etc.)
+ * - Comprehensive documentation management (AGENTS.md, xray/agents_template.md, etc.)
  * - File categorization (critical, documentation, historical, test assertions)
  * - Validation step for consistency checking
  * - Changelog generation
@@ -998,7 +998,7 @@ const UPDATE_PATTERNS = [
  *
  * 📋 FILE CATEGORIES:
  * - Critical: src/opencode/codex.codex, etc.
- * - Documentation: AGENTS.md, AGENTS-consumer.md, docs/*.md
+ * - Documentation: AGENTS.md, xray/agents_template.md, docs/*.md
  * - Historical: docs/reflections/, docs/archive/
  * - Test Assertions: context-loader.test.ts, codex-parser.test.ts
  *

package/src/mcps/governance.server.ts

@@ -72,7 +72,7 @@ class GovernanceServer {
   private createServer(): Server {
     const server = new Server(
       {
-        name: "governance", version: "3.0.8",
+        name: "governance", version: "3.0.9",
       },
       {
         capabilities: {

package/src/mcps/knowledge-skills/tech-writer.server.ts

@@ -888,7 +888,7 @@ class XrayDocumentationGenerationServer extends XrayKnowledgeSkillBase {
       openapi: "3.0.0",
       info: {
         title: "API Documentation",
-        version: "3.0.8",
+        version: "3.0.9",
         description: "Generated API documentation",
       },
       servers: [

package/src/mcps/registry.json

@@ -1,5 +1,5 @@
 {
-  "version": "3.0.8",
+  "version": "3.0.9",
   "description": "0xRay Community MCPs Registry - curated API-focused MCP servers",
   "sources": [
     {

package/src/opencode/codex.codex

@@ -1,5 +1,5 @@
 {
-  "version": "3.0.8",
+  "version": "3.0.9",
   "terms": [
      1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68
   ],

package/src/opencode/commands/dependency-audit.md

@@ -69,7 +69,7 @@ Comprehensive dependency analysis and security audit for all project dependencie
   "vulnerabilities": [
     {
       "package": "lodash",
-      "version": "3.0.8",
+      "version": "3.0.9",
       "severity": "high",
       "cve": "CVE-2021-23337",
       "description": "Command injection vulnerability"
@@ -85,14 +85,14 @@ Security-focused format for CI/CD integration:
 
 ```json
 {
-  "version": "3.0.8",
+  "version": "3.0.9",
   "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
   "runs": [
     {
       "tool": {
         "driver": {
           "name": "Dependency Audit",
-          "version": "3.0.8"
+          "version": "3.0.9"
         }
       },
       "results": [...]

package/src/opencode/enforcer-config.json

@@ -1,6 +1,6 @@
 {
   "framework": "xray 3.0",
-  "version": "3.0.8",
+  "version": "3.0.9",
   "description": "Codex-compliant framework configuration for Credible UI project",
   "thresholds": {
     "bundleSize": {
@@ -220,7 +220,7 @@
       }
     },
     "codex": {
-      "version": "3.0.8",
+      "version": "3.0.9",
       "terms": [
         1,
         2,

package/src/skills/registry.json

@@ -1,5 +1,5 @@
 {
-  "version": "3.0.8",
+  "version": "3.0.9",
   "description": "0xRay Skills Registry - recommended skill sources for consumers",
   "sources": [
     {

package/xray/agents_template.md

@@ -1,109 +1,49 @@
-# StringRay AI v1.15.1 – Agent Context & Universal Development Codex
+# AGENTS.md — 0xRay Consumer Template
 
-**Framework Version**: 1.14.0  
-**Codex Version**: 1.7.5 (condensed)  
-**Last Updated**: 2026-03-23  
-**Purpose**: Systematic error prevention and production-ready AI-assisted development
+**Version**: 3.0.9
+**Updated**: 2026-06-13
 
-## 🎯 CRITICAL RULES – ZERO TOLERANCE (MANDATORY)
+## What is 0xRay?
 
-1. **Full File Reading Before Edit**  
-   ALWAYS read the ENTIRE file using the `read` tool before ANY edit, refactor, or write.  
-   Understand complete structure, imports, dependencies, and context.  
-   Partial/contextual edits are strictly forbidden.
+0xRay provides intelligent multi-agent orchestration with automatic delegation and Codex compliance validation under the pure three-subsystem model (Inference + External Governance via Dynamo + Autonomous Engine via thinDispatch 7-flow in MCP orchestrator). Agents operate via YML surfaces and MCP skill servers.
 
-2. **Verify Changes Actually Applied**  
-   After every edit/write: use `read` to confirm the exact changes are present.  
-   Check for regressions and unintended modifications.  
-   NEVER declare success without observable verification.
+## Available MCP Servers
 
-3. **Command & Tool Output Review**  
-   Immediately review ALL command/tool outputs.  
-   Identify errors, warnings, or anomalies.  
-   Add TODO for course correction if issues found.  
-   Do not proceed until critical problems are resolved.
+| Server | Purpose |
+|--------|---------|
+| `xray-enforcer` | Codex compliance & error prevention |
+| `xray-governance` | Proposal governance, codex snapshot |
+| `xray-orchestrator` | thinDispatch 7-flow delegation routing |
+| `xray-skills` | Skill invocation (code-review, security-audit, researcher, etc.) |
 
-4. **No False Success Claims**  
-   Only report "completed", "edited", or "fixed" after verification steps confirm success.  
-   Prohibited: assuming success, subjective "looks correct", skipping checks for "trivial" changes.
+## CLI Commands
 
-5. **Surgical & Progressive Fixes**  
-   Fix root causes minimally – no patches, stubs, or over-engineering.  
-   All code must be production-ready from first commit.
+```
+npx 0xray setup          Full framework configuration
+npx 0xray validate        Run Codex compliance validation
+npx 0xray status          Show framework status
+npx 0xray install <mcp>   Install MCP server (groks)
+```
 
-6. **Error & Loop Prevention**  
-   Resolve all errors before continuing (90%+ runtime prevention target).  
-   Every loop/async must have clear termination/timeout.
+## Governance
 
-7. **Type Safety & Immutability First**  
-   No `any`, `@ts-ignore`. Prefer immutable patterns and early returns/guards.
+All actions are governed by the Universal Development Codex via Dynamo (External Governance SSOT). Governance precedes action.
 
-8. **DRY, YAGNI, Separation of Concerns**  
-   No duplication. No unnecessary features. One responsibility per module/function.
+## Logging
 
-9. **Test & Performance Awareness**  
-   >85% behavioral coverage target. Respect bundle <2MB, FCP <2s budgets.
+Use `fwLogger` / `frameworkLogger` structured logging only (never `console.*`). Logs go to `logs/framework/activity.log` + `.opencode/logs/`.
 
-10. **Security & Input Validation**  
-    Validate/sanitize all inputs. Security by design.
+## Architecture
 
-## Core Codex Terms (Top 20 – Enforced)
+- **Inference**: Session capture, pattern accumulation, governance triggers
+- **External Governance**: Dynamo Solar SSOT via codex.json
+- **Autonomous Engine**: thinDispatch 7-flow in MCP orchestrator
 
-1. Progressive production-ready code  
-2. No patches/stubs/bridge code  
-3. Avoid over-engineering  
-4. Fit-for-purpose prod-level code  
-5. Surgical root-cause fixes  
-6. Batched introspection cycles  
-7. Resolve all errors (90% prevention)  
-8. Prevent infinite loops/timeouts  
-9. Shared global state / single source of truth  
-10. Type safety first (no `any`)  
-11. Early returns & guard clauses  
-12. Error boundaries & graceful degradation  
-13. Immutability preferred  
-14. Separation of concerns  
-15. DRY – eliminate duplication  
-16. YAGNI – no speculative features  
-17. Meaningful, self-documenting names  
-18. Small, focused functions (<30 lines ideal)  
-19. Consistent style (linter enforced)  
-20. Test coverage >85% (behavioral focus)
+## Complexity Routing
 
-## Agent Capabilities Matrix
-
-| Agent                     | Role                              | Complexity | Key Tools                              | Strategy          |
-|---------------------------|-----------------------------------|------------|----------------------------------------|-------------------|
-| enforcer                  | Codex & error prevention          | All        | read, grep, lsp_*, bash                | Block violations  |
-| orchestrator              | Workflow coordination             | Enterprise | read, grep, call_omo_agent, session_*  | Consensus         |
-| architect                 | Design & decisions                | High       | read, grep, lsp_*, background_task     | Expert priority   |
-| bug-triage-specialist     | Error investigation & fixes       | Debug      | read, grep, ast_grep_*                 | Majority vote     |
-| code-reviewer             | Quality & standards               | Changes    | read, grep, lsp_diagnostics            | Expert priority   |
-| security-auditor          | Vulnerabilities & compliance      | Security   | read, grep, grep_app_searchGitHub      | Block critical    |
-| refactorer                | Debt & consolidation              | Refactor   | read, grep, lsp_rename, ast_grep_*     | Majority vote     |
-| testing-lead              | Testing strategy & coverage       | Tests      | read, grep, lsp_*                      | Expert priority   |
-| storyteller               | Narrative deep reflections       | Narrative  | read, grep, write                      | Expert priority   |
-| researcher                | Codebase exploration              | Research   | read, grep, codesearch, websearch       | Expert priority   |
-
-## Complexity Routing Summary
-
-Score = (files×2 + change/10 + deps×3 + duration/10) × operation_weight × risk_mult  
-- Operation weights: debug 2.0, refactor 1.8, analyze 1.5, modify 1.2, others 1.0  
-- Risk multipliers: critical 1.6, high 1.3, medium 1.0, low 0.8  
-Thresholds:  
-- ≤15 → single agent  
-- 16–50 → multi-agent possible  
-- 51+ → orchestrator-led
-
-## Operational Guidelines
-
-- Evaluate complexity before execution  
-- Always verify: read full file → apply change → read again → confirm no regressions  
-- Use `call_omo_agent` or `task()` for delegation  
-- Log JobId for traceability  
-- Enforce codex compliance on every operation
-
-**Codex Enforcement**: All actions validated against these rules. Violations block progress until resolved.  
-**Target**: 99.6% systematic error prevention through verification-first behavior.
-
-(End of file - total 105 lines)
+| Complexity | Score | Strategy |
+|-----------|-------|----------|
+| Simple | ≤15 | Single agent |
+| Moderate | ≤25 | Single agent with tools |
+| Complex | ≤50 | Multi-agent coordination |
+| Enterprise | >50 | Orchestrator-led team |

package/xray/codex.json

@@ -1,5 +1,5 @@
 {
-  "version": "3.0.8",
+  "version": "3.0.9",
   "lastUpdated": "2026-06-05",
   "errorPreventionTarget": 0.998,
   "terms": {

package/xray/config.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./config.schema.json",
-  "version": "3.0.8",
+  "version": "3.0.9",
   "description": "0xRay Framework - Token Management & Performance Configuration",
   "token_management": {
     "maxPromptTokens": 20000,

package/xray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "3.0.8",
+  "version": "3.0.9",
   "description": "0xRay Framework - Unified Feature Configuration",
   "token_optimization": {
     "enabled": true,

package/xray/integrations.json

@@ -4,19 +4,19 @@
     "openclaw": {
       "enabled": false,
       "type": "external-service",
-      "version": "3.0.8",
+      "version": "3.0.9",
       "config": {}
     },
     "python-bridge": {
       "enabled": false,
       "type": "protocol-bridge",
-      "version": "3.0.8",
+      "version": "3.0.9",
       "config": {}
     },
     "react": {
       "enabled": false,
       "type": "framework-adapter",
-      "version": "3.0.8",
+      "version": "3.0.9",
       "config": {}
     }
   }