0xray 3.1.0 → 3.2.0

package/.gitignore.default

@@ -0,0 +1,59 @@
+# 0xray — Default .gitignore
+# Generated by 0xray postinstall. Edit as needed.
+
+# Dependencies
+node_modules/
+
+# Build artifacts
+dist/
+build/
+*.tsbuildinfo
+
+# Environment & secrets
+.env
+.env.*
+.env.local
+*.local
+**/auth.json
+.hermes/
+credentials.json
+*.pem
+*.key
+
+# Runtime state (xray inference workflows, session state)
+.xray/
+.strray/
+strray/
+xray/inference/
+
+# Generated xray config files
+.opencode/agents/*.yml
+.opencode/agents/
+.opencode/commands/
+.opencode/workflows/
+.opencode/codex.codex
+.opencode/enforcer-config.json
+.opencode/skills/
+.opencode/scripts/
+.opencode/logs/
+.opencode/validation/
+.opencode/triage/
+
+# Logs
+logs/
+*.log
+
+# OS files
+.DS_Store
+Thumbs.db
+
+# IDE
+.idea/
+.vscode/
+*.swp
+*.swo
+*~
+
+# Temp
+*.tmp
+*.tgz

package/.mcp.json

@@ -0,0 +1,35 @@
+{
+  "mcpServers": {
+    "xray-governance": {
+      "command": "npx",
+      "args": ["-y", "0xray", "mcp", "governance"],
+      "env": {
+        "XRAY_FORCE_MCP_GOVERNANCE": "true"
+      }
+    },
+    "xray-skills": {
+      "command": "npx",
+      "args": ["-y", "0xray", "mcp", "skills"]
+    },
+    "xray-enforcer": {
+      "command": "npx",
+      "args": ["-y", "0xray", "mcp", "enforcer"]
+    },
+    "xray-orchestrator": {
+      "command": "npx",
+      "args": ["-y", "0xray", "mcp", "orchestrator"]
+    },
+    "xray-researcher": {
+      "command": "npx",
+      "args": ["-y", "0xray", "mcp", "researcher"]
+    },
+    "xray-code-review": {
+      "command": "npx",
+      "args": ["-y", "0xray", "mcp", "code-review"]
+    },
+    "xray-architect-tools": {
+      "command": "npx",
+      "args": ["-y", "0xray", "mcp", "architect-tools"]
+    }
+  }
+}

package/.opencode/codex.codex

@@ -1,5 +1,5 @@
 {
-  "version": "1.22.67",
+  "version": "3.2.0",
   "terms": [
     1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60
   ],

package/.opencode/commands/auto-format.md

@@ -5,11 +5,11 @@ description: Automated code formatting hook with Prettier and framework-specific
 
 #!/bin/bash
 
-# xray 2.0 - Auto Format Hook
+# xray - Auto Format Hook
 
 # Ensures consistent code formatting across all files
 
-echo "🎨 xray 2.0 - Auto Format"
+echo "🎨 xray - Auto Format"
 echo "================================================"
 
 # Initialize status
@@ -91,7 +91,7 @@ fi
 if [ "$FORMATTED" = true ]; then
 echo ""
 echo "✅ Code formatting completed successfully"
-echo "🎯 xray 2.0: FORMATTING OPERATIONAL"
+echo "🎯 xray: FORMATTING OPERATIONAL"
 else
 echo ""
 echo "⚠️ Some formatting operations failed"

package/.opencode/commands/auto-summary-capture.md

@@ -1,6 +1,6 @@
 #!/bin/bash
 
-# xray 2.0 - Auto Summary Capture
+# xray - Auto Summary Capture
 
 # Monitors for 'job done print summary' signal and automatically logs summaries
 
@@ -40,7 +40,7 @@
 
 # 🚨 VIOLATION OF THIS RULE WILL BREAK THE PROJECT'S HISTORICAL RECORD 🚨
 
-echo "📝 xray 2.0 - Auto Summary Capture"
+echo "📝 xray - Auto Summary Capture"
 echo "======================================"
 echo "Monitoring for 'job done print summary' signals..."
 echo "All AI-generated summaries will be automatically logged to REFACTORING_LOG.md"

package/.opencode/commands/dependency-audit.md

@@ -69,7 +69,7 @@ Comprehensive dependency analysis and security audit for all project dependencie
   "vulnerabilities": [
     {
       "package": "lodash",
-      "version": "1.22.67",
+      "version": "3.1.0",
       "severity": "high",
       "cve": "CVE-2021-23337",
       "description": "Command injection vulnerability"
@@ -85,14 +85,14 @@ Security-focused format for CI/CD integration:
 
 ```json
 {
-  "version": "1.22.67",
+  "version": "3.1.0",
   "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
   "runs": [
     {
       "tool": {
         "driver": {
           "name": "Dependency Audit",
-          "version": "1.22.67"
+          "version": "3.1.0"
         }
       },
       "results": [...]

package/.opencode/commands/enforcer-daily-scan.md

@@ -5,9 +5,9 @@ description: Automated daily framework compliance monitoring with threshold vali
 
 #!/bin/bash
 
-# Daily compliance scan for xray 2.0
+# Daily compliance scan for xray
 
-echo "🔍 xray 2.0 - Daily Compliance Scan"
+echo "🔍 xray - Daily Compliance Scan"
 echo "========================================================="
 
 # Initialize compliance status
@@ -133,5 +133,5 @@ exit 1
 fi
 
 echo ""
-echo "🎯 xray 2.0 Status: OPERATIONAL"
+echo "🎯 xray Status: OPERATIONAL"
 echo "Next scheduled scan: Tomorrow at 09:00"

package/.opencode/commands/framework-compliance-audit.md

@@ -1,10 +1,10 @@
 #!/bin/bash
 
-# xray 2.0 - Full Framework Compliance Audit
+# xray - Full Framework Compliance Audit
 
 # Comprehensive validation of all framework components and thresholds
 
-echo "📋 xray 2.0 - Full Compliance Audit"
+echo "📋 xray - Full Compliance Audit"
 echo "================================================================"
 
 # Initialize audit results
@@ -171,7 +171,7 @@ echo "===================================="
 
 if [ "$AUDIT_PASSED" = true ]; then
 echo "✅ FRAMEWORK COMPLIANCE AUDIT PASSED"
-echo "xray 2.0 is fully operational"
+echo "xray is fully operational"
 else
 echo "❌ FRAMEWORK COMPLIANCE AUDIT FAILED"
 echo ""
@@ -199,7 +199,7 @@ echo " - $score"
 done
 
 echo ""
-echo "🎯 xray 2.0"
+echo "🎯 xray"
 echo "Status: FULLY COMPLIANT & OPERATIONAL"
 echo "Codex Terms Enforced: [1,2,3,4,5,6,7,8,9,10,15,24,29,32,38,42,43]"
 echo "Runtime Error Prevention: 90% Target Active"

package/.opencode/commands/interactive-validator.md

@@ -1,10 +1,10 @@
 #!/bin/bash
 
-# xray 2.0 - Interactive Session Validator
+# xray - Interactive Session Validator
 
 # Real-time agent cross-checking during coding sessions
 
-echo "🔍 xray 2.0 - Interactive Session Validation"
+echo "🔍 xray - Interactive Session Validation"
 echo "=================================================================="
 
 # Check if this is an interactive coding session

package/.opencode/commands/job-summary-logger.md

@@ -1,6 +1,6 @@
 #!/bin/bash
 
-# xray 2.0 - AI Summary Auto-Logger
+# xray - AI Summary Auto-Logger
 
 # Automatically captures and logs whatever AI outputs as final summary
 
@@ -40,7 +40,7 @@
 
 # 🚨 VIOLATION OF THIS RULE WILL BREAK THE PROJECT'S HISTORICAL RECORD 🚨
 
-echo "📝 xray 2.0 - AI Summary Auto-Logger"
+echo "📝 xray - AI Summary Auto-Logger"
 echo "==============================="
 
 # This script captures whatever content is piped to it and logs it automatically

package/.opencode/commands/mode-switch.md

@@ -5,7 +5,7 @@ description: Switch between full (25 agents) and lite (25 agents) modes dynamica
 
 #!/bin/bash
 
-# xray 2.0 - Mode Switch Command
+# xray - Mode Switch Command
 
 # Dynamically switches between full and lite agent configurations
 

package/.opencode/commands/model-health-check.md

@@ -5,11 +5,11 @@ description: Verify dynamic model loading system health and compatibility
 
 #!/bin/bash
 
-# xray 2.0 - Dynamic Model Health Check
+# xray - Dynamic Model Health Check
 
 # Validates the dynamic model loading system functionality
 
-echo "🏥 xray 2.0 - Dynamic Model Health Check"
+echo "🏥 xray - Dynamic Model Health Check"
 echo "================================================"
 
 # Check if dynamic loader exists

package/.opencode/commands/performance-analysis.md

@@ -1,10 +1,10 @@
 #!/bin/bash
 
-# xray 2.0 - Performance Analysis
+# xray - Performance Analysis
 
 # Comprehensive metrics analysis for framework integration
 
-echo "📊 xray 2.0 - Performance Analysis"
+echo "📊 xray - Performance Analysis"
 echo "============================================================"
 
 # Initialize performance metrics

package/.opencode/commands/pre-commit-introspection.md

@@ -5,11 +5,11 @@ description: Batched code quality and architecture introspection before commits
 
 #!/bin/bash
 
-# xray 2.0 - Pre-commit Introspection
+# xray - Pre-commit Introspection
 
 # Comprehensive code quality and architecture validation
 
-echo "🔬 xray 2.0 - Pre-commit Introspection"
+echo "🔬 xray - Pre-commit Introspection"
 echo "============================================================"
 
 # Initialize analysis status
@@ -181,5 +181,5 @@ done
 fi
 
 echo ""
-echo "🎯 xray 2.0: INTROSPECTION COMPLETE"
+echo "🎯 xray: INTROSPECTION COMPLETE"
 echo "Commit ready for integration"

package/.opencode/commands/security-scan.md

@@ -5,11 +5,11 @@ description: Automated security vulnerability scanning with dependency and code
 
 #!/bin/bash
 
-# xray 2.0 - Security Scan Hook
+# xray - Security Scan Hook
 
 # Comprehensive security analysis for vulnerabilities and threats
 
-echo "🔒 xray 2.0 - Security Scan"
+echo "🔒 xray - Security Scan"
 echo "================================================="
 
 # Initialize security status
@@ -153,5 +153,5 @@ exit 1
 fi
 
 echo ""
-echo "🛡️ xray 2.0 Status: SECURE"
+echo "🛡️ xray Status: SECURE"
 echo "Next security scan: Pre-commit and daily"

package/.opencode/commands/sisyphus-validation.md

@@ -1,10 +1,10 @@
 #!/bin/bash
 
-# xray 2.0 - Sisyphus Orchestrator Validation
+# xray - Sisyphus Orchestrator Validation
 
 # Tests async multi-agent coordination capabilities
 
-echo "🎭 xray 2.0 - Sisyphus Orchestrator Validation"
+echo "🎭 xray - Sisyphus Orchestrator Validation"
 echo "==================================================================="
 
 # Initialize orchestration test
@@ -124,5 +124,5 @@ echo " - MCP skills integrated: ${#MCP_SKILLS[@]}"
 echo " - Total coordination points: $((${#AGENTS[@]} + ${#WORKFLOW_PATTERNS[@]} + ${#MCP_SKILLS[@]}))"
 
 echo ""
-echo "🎭 xray 2.0: SISYPHUS OPERATIONAL"
+echo "🎭 xray: SISYPHUS OPERATIONAL"
 echo "Async multi-agent orchestration validated"

package/.opencode/commands/summary-logger.md

@@ -1,4 +1,4 @@
-# xray 2.0 - Summary Logger
+# xray - Summary Logger
 
 # Automatically logs AI-generated summaries and analysis to REFACTORING_LOG.md
 
@@ -38,7 +38,7 @@
 
 # 🚨 VIOLATION OF THIS RULE WILL BREAK THE PROJECT'S HISTORICAL RECORD 🚨
 
-echo "📝 xray 2.0 - Summary Logger" >&2
+echo "📝 xray - Summary Logger" >&2
 echo "====================================" >&2
 
 # Get script directory and project root
@@ -47,17 +47,17 @@ SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 PROJECT_ROOT="$(cd "${SCRIPT_DIR}/../.." && pwd)"
 REFACTORING_LOG="${PROJECT_ROOT}/docs/REFACTORING_LOG.md"
 
-# Check if summary content is provided via environment variable or stdin (XRAY_ primary + STRRAY_ min compat fallback per Scope Rule)
+# Check if summary content is provided via environment variable or stdin (XRAY_ primary)
 
 if [ -n "$XRAY_SUMMARY_CONTENT" ]; then
 SUMMARY_CONTENT="$XRAY_SUMMARY_CONTENT"
-elif [ -n "$STRRAY_SUMMARY_CONTENT" ]; then
-SUMMARY_CONTENT="$STRRAY_SUMMARY_CONTENT"
+elif [ -n "$XRAY_SUMMARY_CONTENT" ]; then
+SUMMARY_CONTENT="$XRAY_SUMMARY_CONTENT"
 elif [ ! -t 0 ]; then
     # Read from stdin
     SUMMARY_CONTENT=$(cat)
 else
-echo "❌ No summary content provided. Use XRAY_SUMMARY_CONTENT (or STRRAY_ compat) environment variable or pipe content."
+echo "❌ No summary content provided. Use XRAY_SUMMARY_CONTENT environment variable or pipe content."
 echo "Usage:"
 echo " export XRAY_SUMMARY_CONTENT='summary content' && bash .opencode/commands/summary-logger.md"
 echo " echo 'summary content' | bash .opencode/commands/summary-logger.md"

package/.opencode/enforcer-config.json

@@ -1,6 +1,6 @@
 {
   "framework": "xray 2.0",
-  "version": "1.22.67",
+  "version": "3.1.0",
   "description": "Codex-compliant framework configuration for Credible UI project",
   "thresholds": {
     "bundleSize": {
@@ -220,7 +220,7 @@
       }
     },
     "codex": {
-      "version": "1.22.67",
+      "version": "3.1.0",
       "terms": [
         1,
         2,

package/.opencode/hooks/post-commit

@@ -21,7 +21,7 @@ BRANCH=$(git rev-parse --abbrev-ref HEAD)
 ) &
 
 # Load auto_reflection config from features.json
-CONFIG_FILE="$PROJECT_ROOT/.opencode/xray/features.json"
+CONFIG_FILE="$PROJECT_ROOT/.xray/features.json"
 MODE="minimal"
 COMMIT_THRESHOLD=25
 DAYS_THRESHOLD=14

package/.opencode/init.sh

@@ -104,6 +104,8 @@ PLUGIN_DEV="$PROJECT_ROOT/.opencode/plugin/xray-codex-injection.js"
 PLUGIN_DEV_PLURAL="$PROJECT_ROOT/.opencode/plugins/xray-codex-injection.js"
 PLUGIN_CONSUMER="$PROJECT_ROOT/node_modules/0xray/.opencode/plugin/xray-codex-injection.js"
 PLUGIN_CONSUMER_PLURAL="$PROJECT_ROOT/node_modules/0xray/.opencode/plugins/xray-codex-injection.js"
+PLUGIN_DIST="$PROJECT_ROOT/dist/plugin/xray-codex-injection.js"
+PLUGIN_DIST_PLURAL="$PROJECT_ROOT/node_modules/0xray/dist/plugin/xray-codex-injection.js"
 
 if [ -f "$PLUGIN_DEV" ]; then
     PLUGIN_STATUS="✅"
@@ -113,6 +115,10 @@ elif [ -f "$PLUGIN_CONSUMER" ]; then
     PLUGIN_STATUS="✅"
 elif [ -f "$PLUGIN_CONSUMER_PLURAL" ]; then
     PLUGIN_STATUS="✅"
+elif [ -f "$PLUGIN_DIST" ]; then
+    PLUGIN_STATUS="✅"
+elif [ -f "$PLUGIN_DIST_PLURAL" ]; then
+    PLUGIN_STATUS="✅"
 else
     PLUGIN_STATUS="❌"
 fi

package/.plugin/plugin.json

@@ -0,0 +1,11 @@
+{
+  "id": "0xray",
+  "name": "0xRay",
+  "version": "3.1.0",
+  "description": "Multi-agent orchestration, Codex governance, and AI-powered development tools. 13 MCP tools (code review, security audit, API design, database design, project analysis, testing, performance, UI/UX, DevOps, documentation, storytelling) plus 44 knowledge skills for best-practice guidance across the full software development lifecycle.",
+  "author": "0xRay AI",
+  "homepage": "https://github.com/0xRayAI/xray",
+  "components": {
+    "mcpServers": [".mcp.json"]
+  }
+}

package/AGENTS-consumer.md

@@ -0,0 +1,46 @@
+# 0xRay AI Agents
+
+Quick reference for the 0xRay AI orchestration framework (v16 MCPs-centric three-subsystem).
+
+## Available MCP Servers
+
+| Server | Role |
+|--------|------|
+| `xray-governance` | Proposal governance, codex snapshot, quality gates |
+| `xray-skills` | Skill invocation, agent-specific knowledge servers |
+| `xray-enforcer` | Codex compliance enforcement, rule validation |
+| `xray-orchestrator` | Multi-agent workflow coordination, task delegation |
+
+## CLI Commands
+
+| Command | Description |
+|---------|-------------|
+| `xray setup` | Full framework setup (hooks, Hermes, symlinks) |
+| `xray validate` | Validate codex compliance |
+| `xray codex check` | Check codex rules |
+| `xray health` | Framework health check |
+| `xray hooks` | Manage lifecycle hooks |
+
+## Governance
+
+xray operates under the three-subsystem model: Inference + External Governance (Dynamo Solar SSOT) + Autonomous Engine (thinDispatch 7-flow in MCP orchestrator). All actions are validated against the Universal Development Codex before execution.
+
+**Codex**: The codex lives in `.xray/codex.json` and enforces 60 terms across all agent interactions.
+
+## thinDispatch Routing
+
+- Simple (≤15): Single agent
+- Moderate (≤25): Single agent with tools
+- Complex (≤50): Multi-agent coordination
+- Enterprise (>50): Orchestrator-led team
+
+## File Organization
+
+| File Type | Save To |
+|-----------|---------|
+| Reflections | `docs/reflections/` |
+| Logs | `logs/` |
+| Scripts | `scripts/` or `scripts/bash/` |
+| Test Files | `src/__tests__/` |
+| Source Code | `src/` |
+| Config | `config/` or `.xray/` |

package/AGENTS.md

@@ -39,7 +39,7 @@ xray operates under the pure three-subsystem model: Inference + External Governa
 | **Scripts** | `scripts/` or `scripts/bash/` | `scripts/bash/my-script.sh` |
 | **Test Files** | `src/__tests__/` | `src/__tests__/unit/my-test.test.ts` |
 | **Source Code** | `src/` | `src/my-module.ts` |
-| **Config** | `config/` or `.opencode/xray/` | `.opencode/xray/config.json` |
+| **Config** | `config/` or `.xray/` | `.xray/config.json` |
 
 **Never save to root** - Root directory is for essential files only:
 - `README.md`, `CHANGELOG.md`, `package.json`, `tsconfig.json`
@@ -82,16 +82,6 @@ The Autonomous Engine routes via complexity:
 
 ## Codex
 
-xray enforces the Universal Development Codex (60 terms) via Dynamo governance. The codex lives in `.opencode/xray/codex.json`.
+xray enforces the Universal Development Codex (60 terms) via Dynamo governance. The codex lives in `.xray/codex.json`.
 
 Pure v16 MCPs. Clean. Complete.
-
-## Session: v3.0.14 Rename Polish
-
-- Package: `0xray` (npm), `github.com/0xRayAI/xray`. Version `3.0.14`.
-- **All 182 test files pass**: 2527 tests, 0 failures, 36 skipped.
-- **Build fix**: removed stale `.opencode/plugin/` copy; `package.json` → `dist/plugin/xray-codex-injection.js`.
-- **default-plugins.ts**: monkey-patch `Server.prototype.setRequestHandler` to capture tool definitions from MCP Server instances; all registration functions async.
-- **8 failing test files fixed**: class name references (`StringRaySecurityAuditServer` → `XraySecurityAuditServer`, `XrayStateManager` → `StringRayStateManager`); added `calculateMetamorphosisScore`; delegation re-exports; source-inspection tests updated; infrastructure path fix; antigravity registry removed.
-- **CHANGELOG.md**: added v3.0.13 entry.
-- **Stale READMEs**: updated `StringRay` → `0xray` in 4 subdirectory READMEs.

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 StrRay Framework Team
+Copyright (c) 2026 Xray Framework Team
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -1,6 +1,6 @@
 # xray — MCP-Centric AI Governance OS
 
-**v2.0.0** — 9 agents · 44 skills · 16 MCPs governance servers · 60 codex terms · 2,2527 tests
+9 agents · 44 skills · 16 MCPs governance servers · 60 codex terms
 
 xray is the pure v2 three-subsystem AI orchestration framework, now **MCP-centric** with dedicated skill servers for governance deliberation:
 
@@ -98,17 +98,17 @@ Codex enforcement is integrated at every level:
 - frameworkLogger structured logging throughout (never console.*)
 - Active codex snapshot available via `get_active_codex` MCP tool
 
-## Testing (2,2527 tests)
+## Testing (2,2500 tests)
 
 | Suite | Status |
 |-------|--------|
 | Unit / Integration | 158 files, all pass |
-| Performance | 2527 tests, all pass |
-| Infrastructure | 2527 tests, all pass |
+| Performance | 2500 tests, all pass |
+| Infrastructure | 2500 tests, all pass |
 | Consumer E2E | 4 platforms, all pass |
 | OpenCode E2E | 42/42 solo, 34/34 orchestrator, all pass |
-| OpenClaw E2E | 2527 tests, all pass |
-| Hermes E2E | 2527 tests, all pass |
+| OpenClaw E2E | 2500 tests, all pass |
+| Hermes E2E | 2500 tests, all pass |
 | Grok CLI E2E | 60/60 solo, 59/59 orchestrator, all pass |
 
 ## Release