0xray 3.1.0 → 3.2.0

package/dist/delegation/analytics/learning-engine.js

@@ -4,7 +4,6 @@
  * P9 learning system - analyzes patterns, detects drift, and improves routing.
  * Extracted from task-skill-router.ts as part of Phase 2 refactoring.
  *
- * @version 1.0.0
  * @since 2026-03-12
  */
 import { patternPerformanceTracker } from '../../analytics/pattern-performance-tracker.js';

package/dist/delegation/analytics/outcome-tracker.js

@@ -4,7 +4,6 @@
  * Tracks routing outcomes and provides statistics for performance analysis.
  * Extracted from task-skill-router.ts as part of Phase 2 refactoring.
  *
- * @version 1.0.0
  * @since 2026-03-12
  */
 import fs from 'fs';

package/dist/delegation/analytics/routing-analytics.js

@@ -4,7 +4,6 @@
  * Provides analytics aggregation and insights generation for routing data.
  * Extracted from task-skill-router.ts as part of Phase 2 refactoring.
  *
- * @version 1.0.0
  * @since 2026-03-12
  */
 import { frameworkLogger } from "../../core/framework-logger.js";

package/dist/delegation/ast-code-parser.js

@@ -4,7 +4,6 @@
  * AST-based code parsing and structural analysis using ast-grep.
  * Provides advanced code understanding, pattern detection, and refactoring insights.
  *
- * @version 1.0.0
  * @since 2026-01-11
  */
 import * as fs from "fs";

package/dist/delegation/complexity-analyzer.js

@@ -10,7 +10,6 @@
  * - complex: 50+ - multi-agent orchestration with voting
  * - enterprise: 75+ - maximum orchestration
  *
- * @version 1.2.0
  * @since 2026-01-07
  */
 import { DEFAULT_THRESHOLDS, OPERATION_WEIGHTS, RISK_MULTIPLIERS, getLevelFromScore, getStrategyForLevel, getAgentCountForLevel, generateReasoning, } from "./complexity-core.js";

package/dist/delegation/dependency-graph-builder.js

@@ -4,7 +4,6 @@
  * Builds comprehensive dependency graphs for codebase analysis.
  * Tracks file relationships, import/export chains, and architectural dependencies.
  *
- * @version 1.0.0
  * @since 2026-01-11
  */
 import * as path from "path";

package/dist/delegation/index.js

@@ -4,7 +4,6 @@
  * Complete automatic multi-agent delegation system with complexity assessment
  * and session-based coordination.
  *
- * @version 1.1.0
  * @since 2026-01-07
  */
 export { ComplexityAnalyzer, complexityAnalyzer, } from "./complexity-analyzer.js";

package/dist/delegation/metrics-aggregator.js

@@ -4,7 +4,6 @@
  * Provides aggregation, reporting, and export functionality for delegation
  * and orchestration metrics stored in stateManager.
  *
- * @version 1.0.0
  * @since 2026-04-16
  */
 const MAX_METRICS_ENTRIES = 100;

package/dist/delegation/session-coordinator.js

@@ -4,7 +4,6 @@
  * Manages cross-agent communication and coordination within sessions.
  * Tracks delegation state, agent interactions, and conflict resolution.
  *
- * @version 1.0.0
  * @since 2026-01-07
  */
 import { frameworkLogger } from "../core/framework-logger.js";

package/dist/delegation/strategy-selector.js

@@ -8,7 +8,6 @@
  * - Architectural impact
  * - Participant count
  *
- * @version 1.0.0
  * @since 2026-04-16
  */
 const DEFAULT_STRATEGY_CONFIG = {

package/dist/delegation/voting-coordinator.js

@@ -7,7 +7,6 @@
  * - Historical learning and pattern detection
  * - Integration with session coordinator
  *
- * @version 1.0.0
  * @since 2026-04-16
  */
 import * as crypto from "crypto";

package/dist/delegation/voting-types.js

@@ -4,7 +4,6 @@
  * Comprehensive type definitions for the multi-agent voting system
  * with weighted confidence scoring and adaptive conflict resolution.
  *
- * @version 1.0.0
  * @since 2026-04-16
  */
 export {};

package/dist/delegation/weighted-voting-aggregator.js

@@ -6,7 +6,6 @@
  * - History-weighted voting that considers past successful votes
  * - Multiple aggregation strategies for different decision scenarios
  *
- * @version 1.0.0
  * @since 2026-04-17
  */
 import { getAgentExpertiseLevel, getVotingWeight, } from "./agent-expertise.js";

package/dist/enforcement/core/index.js

@@ -7,7 +7,6 @@
  * Phase 5 refactoring: Extracted from RuleEnforcer.
  *
  * @module enforcement/core
- * @version 1.0.0
  */
 // Rule storage and management
 export { RuleRegistry } from './rule-registry.js';

package/dist/enforcement/core/rule-executor.js

@@ -8,7 +8,6 @@
  * Phase 5 refactoring: Extracted from RuleEnforcer.
  *
  * @module enforcement/core
- * @version 1.0.0
  *
  * @example
  * ```typescript

package/dist/enforcement/core/rule-hierarchy.js

@@ -7,7 +7,6 @@
  * Phase 5 refactoring: Extracted from RuleEnforcer.
  *
  * @module enforcement/core
- * @version 1.0.0
  *
  * @example
  * ```typescript

package/dist/enforcement/core/rule-registry.js

@@ -6,7 +6,6 @@
  * managing rule definitions with lifecycle operations.
  *
  * @module enforcement/core
- * @version 1.0.0
  *
  * @example
  * ```typescript

package/dist/enforcement/core/violation-fixer.js

@@ -8,7 +8,6 @@
  * Phase 5 refactoring: Extracted from RuleEnforcer.
  *
  * @module enforcement/core
- * @version 1.0.0
  *
  * @example
  * ```typescript

package/dist/enforcement/enforcer-tools.js

@@ -6,7 +6,7 @@ import { ruleEnforcer, } from "./rule-enforcer.js";
 import { frameworkLogger } from "../core/framework-logger.js";
 import { AgentDelegator } from "../delegation/agent-delegator.js";
 import { XrayStateManager } from "../state/state-manager.js";
-import { strRayConfigLoader } from "../core/config-loader.js";
+import { xrayConfigLoader } from "../core/config-loader.js";
 import * as fs from "fs";
 import * as path from "path";
 // Minimum confidence to auto-delegate to another agent
@@ -327,7 +327,7 @@ async function delegateToAgent(agentName, operation, context, jobId) {
         // Create a minimal state manager and config loader for the delegator
         const stateManager = new XrayStateManager();
         // Create the delegator
-        const delegator = new AgentDelegator(stateManager, strRayConfigLoader);
+        const delegator = new AgentDelegator(stateManager, xrayConfigLoader);
         // Build task description for the delegated agent
         const taskDescription = buildTaskDescription(operation, context);
         // Build the delegation request

package/dist/enforcement/index.js

@@ -5,7 +5,6 @@
  * It validates code against development rules and codex compliance requirements.
  *
  * @module enforcement
- * @version 1.0.0
  *
  * @example
  * ```typescript

package/dist/enforcement/loaders/agent-triage-loader.js

@@ -7,7 +7,6 @@
  * Phase 4 refactoring: Extracted from RuleEnforcer.loadAgentTriageRules()
  *
  * @module loaders/agent-triage-loader
- * @version 1.0.0
  */
 import { frameworkLogger } from "../../core/framework-logger.js";
 import { BaseLoader } from "./base-loader.js";

package/dist/enforcement/loaders/agents-md-validation-loader.js

@@ -7,7 +7,6 @@
  * Phase 4 refactoring: Extracted from RuleEnforcer.loadAgentsMdValidationRule()
  *
  * @module loaders/agents-md-validation-loader
- * @version 1.0.0
  */
 import { frameworkLogger } from "../../core/framework-logger.js";
 import { BaseLoader } from "./base-loader.js";

package/dist/enforcement/loaders/base-loader.js

@@ -8,7 +8,6 @@
  * from rule execution.
  *
  * @module loaders/base-loader
- * @version 1.0.0
  */
 import * as fs from "fs";
 import * as path from "path";

package/dist/enforcement/loaders/codex-loader.js

@@ -7,7 +7,6 @@
  * Phase 4 refactoring: Extracted from RuleEnforcer.loadCodexRules()
  *
  * @module loaders/codex-loader
- * @version 1.0.0
  */
 import { frameworkLogger } from "../../core/framework-logger.js";
 import { resolveCodexPath } from "../../core/config-paths.js";
@@ -30,13 +29,13 @@ export class CodexLoader extends BaseLoader {
     name = "codex";
     /**
      * Path to the codex.json file.
-     * Uses the standard config-paths resolver which checks .xray/, .opencode/xray/, etc.
+      * Uses the standard config-paths resolver which checks .xray/, etc.
      */
     get codexPath() {
         const candidates = resolveCodexPath();
         const found = candidates.find((p) => existsSync(p));
         // Fallback to primary path even if not found yet
-        return found ?? candidates[0] ?? this.resolvePath(".opencode/xray/codex.json");
+        return found ?? candidates[0] ?? this.resolvePath(".xray/codex.json");
     }
     /**
      * Check if codex.json exists.

package/dist/enforcement/loaders/index.js

@@ -7,7 +7,6 @@
  * Phase 4 refactoring: Extracted async rule loading from RuleEnforcer
  *
  * @module loaders
- * @version 1.0.0
  *
  * @example
  * ```typescript

package/dist/enforcement/loaders/loader-orchestrator.js

@@ -7,7 +7,6 @@
  * Phase 4 refactoring: Extracted loader orchestration from RuleEnforcer
  *
  * @module loaders/loader-orchestrator
- * @version 1.0.0
  */
 import { frameworkLogger } from "../../core/framework-logger.js";
 import { CodexLoader } from "./codex-loader.js";

package/dist/enforcement/loaders/processor-loader.js

@@ -7,7 +7,6 @@
  * Phase 4 refactoring: Extracted from RuleEnforcer.loadProcessorRules()
  *
  * @module loaders/processor-loader
- * @version 1.0.0
  */
 import { frameworkLogger } from "../../core/framework-logger.js";
 import { BaseLoader } from "./base-loader.js";

package/dist/enforcement/types.js

@@ -5,7 +5,6 @@
  * Extracted from rule-enforcer.ts as part of Phase 1 refactoring.
  *
  * @module types
- * @version 1.0.0
  */
 /**
  * Type guard to check if an object is a valid RuleValidationResult.

package/dist/enforcement/validators/architecture-validators.js

@@ -5,7 +5,6 @@
  * Each validator encapsulates the validation logic for a specific architectural rule.
  *
  * @module validators/architecture-validators
- * @version 1.0.0
  */
 import { BaseValidator } from "./base-validator.js";
 /**

package/dist/enforcement/validators/base-validator.js

@@ -5,7 +5,6 @@
  * and enforces the IValidator interface contract.
  *
  * @module validators/base-validator
- * @version 1.0.0
  */
 /**
  * Abstract base class for all validators.

package/dist/enforcement/validators/code-quality-validators.js

@@ -5,7 +5,6 @@
  * Each validator encapsulates the validation logic for a specific rule.
  *
  * @module validators/code-quality-validators
- * @version 1.0.0
  */
 import { BaseValidator } from "./base-validator.js";
 /**

package/dist/enforcement/validators/index.js

@@ -5,7 +5,6 @@
  * Part of Phase 3 refactoring to extract validators from rule-enforcer.ts.
  *
  * @module validators
- * @version 1.0.0
  */
 // Base validator class
 export { BaseValidator } from "./base-validator.js";

package/dist/enforcement/validators/security-validators.js

@@ -5,7 +5,6 @@
  * These validators enforce security best practices and input validation requirements.
  *
  * @module validators/security-validators
- * @version 1.0.0
  */
 import { BaseValidator } from "./base-validator.js";
 /**

package/dist/enforcement/validators/testing-validators.js

@@ -5,7 +5,6 @@
  * Each validator encapsulates the validation logic for a specific testing rule.
  *
  * @module validators/testing-validators
- * @version 1.0.0
  */
 import { BaseValidator } from "./base-validator.js";
 /**

package/dist/enforcement/validators/validator-registry.js

@@ -5,7 +5,6 @@
  * and category filtering capabilities.
  *
  * @module validators/validator-registry
- * @version 1.0.0
  */
 import { NoDuplicateCodeValidator, ContextAnalysisIntegrationValidator, MemoryOptimizationValidator, DocumentationRequiredValidator, NoOverEngineeringValidator, CleanDebugLogsValidator, ConsoleLogUsageValidator, } from "./code-quality-validators.js";
 import { InputValidationValidator, SecurityByDesignValidator, } from "./security-validators.js";

package/dist/execution/opencode-cli-invoker.js

@@ -17,7 +17,7 @@ import { getConfigDir } from "../core/config-paths.js";
 let opencodeAvailable = null;
 export async function invokeViaOpencode(agentName, prompt, projectRoot = process.cwd()) {
     // In pure MCP mode we must never reach here
-    if (process.env.STRRAY_FORCE_MCP_GOVERNANCE === "true") {
+    if (process.env.XRAY_FORCE_MCP_GOVERNANCE === "true") {
         throw new Error(`[PURE MCP] invokeViaOpencode called for "${agentName}" — this path is forbidden.`);
     }
     // GATE: Centralized spawn gate — blocks all agent spawning by default

package/dist/governance/codex-policy.service.js

@@ -26,7 +26,6 @@
  *   - Make CodexLoader delegate its raw data load here, then re-export from governance.
  *
  * @module governance/codex-policy.service
- * @version 2.0.0-s02-real
  */
 import { frameworkLogger } from '../core/framework-logger.js';
 import { resolveCodexPath } from '../core/config-paths.js';

package/dist/governance/governance-service.js

@@ -128,7 +128,7 @@ export class GovernanceService {
     }
     async callSkillServer(serverName, proposals, context) {
         const votes = [];
-        const useInProcess = process.env.VERCEL === '1';
+        const useInProcess = process.env.VERCEL === '1' || !!process.env.RAILWAY_ENVIRONMENT;
         for (const proposal of proposals) {
             try {
                 let text = '';

package/dist/governance/llm-governance-provider.js

@@ -59,8 +59,10 @@ function readHermesOAuthToken() {
         if (!entry?.access_token && Array.isArray(data)) {
             entry = data.find((e) => e.provider === "xai-oauth" || !!e.access_token);
         }
-        if (!entry?.access_token)
+        if (!entry?.access_token) {
+            process.stderr.write("[llm] readHermesOAuthToken: no access_token in auth file\n");
             return null;
+        }
         if (entry.expires_at && Date.now() / 1000 > entry.expires_at) {
             frameworkLogger.log("llm-governance", "hermes-token-expired", "warning", { expiresAt: entry.expires_at });
             return null;
@@ -82,16 +84,25 @@ function getConfig() {
     const directModel = process.env.XRAY_LLM_MODEL ||
         process.env.XRAY_GOVERNANCE_LLM_MODEL ||
         "gpt-4o";
+    // First try: direct env-var config (highest priority)
     const directEnabled = process.env.XRAY_GOVERNANCE_LLM_ENABLED === "true" ||
         process.env.XRAY_LLM_ENABLED === "true";
     if (directEnabled && directEndpoint && directApiKey) {
         return { endpoint: directEndpoint, apiKey: directApiKey, model: directModel };
     }
+    // Second try: Hermes xAI OAuth token from ~/.hermes/auth.json
     const hermesToken = readHermesOAuthToken();
     if (hermesToken) {
         frameworkLogger.log("llm-governance", "using-hermes-oauth", "info", { provider: "xai-oauth", endpoint: XAI_ENDPOINT, model: XAI_MODEL });
         return { endpoint: XAI_ENDPOINT, apiKey: hermesToken, model: XAI_MODEL };
     }
+    // Third try: direct endpoint even without explicit enable flag (if endpoint+key set)
+    if (directEndpoint && directApiKey) {
+        return { endpoint: directEndpoint, apiKey: directApiKey, model: directModel };
+    }
+    if (process.env.DEBUG_LLM) {
+        process.stderr.write("[llm-debug] No config found. directEnabled=" + directEnabled + " endpoint=" + !!directEndpoint + " apiKey=" + !!directApiKey + " hermes=" + !!hermesToken + "\n");
+    }
     return null;
 }
 function parseVote(text) {
@@ -111,8 +122,10 @@ function parseVote(text) {
 export async function tryLLMGovernance(role, proposalTitle, proposalDescription, evidence, proposalType) {
     const config = getConfig();
     if (!config) {
+        process.stderr.write("[llm] no config for role=" + role + "\n");
         return null;
     }
+    process.stderr.write("[llm] using config endpoint=" + config.endpoint + " model=" + config.model + "\n");
     const systemPrompt = ROLE_PROMPTS[role];
     const userMessage = `## Proposal
 

package/dist/index.js

@@ -4,13 +4,13 @@
  * This is the main entry point for the 0xRay framework.
  * It exports the core initialization function and key components.
  */
-export { XrayOrchestrator, StringRayOrchestrator } from "./orchestrator/orchestrator.js";
-export { XrayStateManager, StringRayStateManager } from "./state/index.js";
+export { XrayOrchestrator } from "./orchestrator/orchestrator.js";
+export { XrayStateManager } from "./state/index.js";
 export { AgentDelegator } from "./delegation/index.js";
 export { frameworkLogger } from "./core/framework-logger.js";
 export { BUILTIN_CODEX } from "./core/codex-formatter.js";
 import { defaultXrayConfig } from "./core/index.js";
-export { defaultXrayConfig, defaultXrayConfig as defaultStringRayConfig };
+export { defaultXrayConfig };
 export { OpenClawIntegration, initializeOpenClawIntegration, getOpenClawIntegration, shutdownOpenClawIntegration } from "./integrations/openclaw/index.js";
 // Main initialization function
 export function initializeXray(config = {}) {
@@ -22,5 +22,3 @@ export function initializeXray(config = {}) {
         message: "0xRay framework initialized successfully",
     };
 }
-// Backward compat alias
-export { initializeXray as initializeStringRay };

package/dist/inference/inference-agent-invoker.js

@@ -0,0 +1,67 @@
+import { frameworkLogger } from "../core/framework-logger.js";
+import { invokeViaOpencode as invokeOpencodeFromEngine } from "../execution/opencode-cli-invoker.js";
+const MCP_TIMEOUT_MS = 8000;
+export async function invokeAgent(agentName, prompt, projectRoot, agentInvoker) {
+    frameworkLogger.log("inference-cycle", "invoke-agent-internal", "info", {
+        agentName,
+        promptLength: prompt.length,
+    });
+    try {
+        const { mcpClientManager } = await import("../mcps/mcp-client.js");
+        const result = await Promise.race([
+            mcpClientManager.callServerTool("orchestrator", "orchestrate-task", {
+                description: prompt,
+                tasks: [{
+                        id: `task-${Date.now()}`,
+                        description: prompt,
+                        type: agentName,
+                        priority: "high",
+                    }],
+                executionMode: "sequential",
+            }),
+            new Promise((_, reject) => setTimeout(() => reject(new Error(`Orchestrator MCP timed out after ${MCP_TIMEOUT_MS}ms`)), MCP_TIMEOUT_MS)),
+        ]);
+        const content = result.content;
+        let responseText = "";
+        if (content && Array.isArray(content)) {
+            responseText = content.map((c) => c.text ?? "").join("");
+        }
+        else {
+            responseText = JSON.stringify(result);
+        }
+        const isPureMcp = process.env.XRAY_FORCE_MCP_GOVERNANCE === 'true';
+        const hasRealContent = /PROPOSAL:\s*\d+/i.test(responseText) ||
+            /DECISION:\s*(approve|reject|abstain)/i.test(responseText) ||
+            /Agent Outputs \(real MCP responses\):/i.test(responseText);
+        if (hasRealContent || isPureMcp) {
+            if (isPureMcp && !hasRealContent) {
+                frameworkLogger.log("inference-cycle", "pure-mcp-orchestrator-response", "info", {
+                    agentName,
+                    responsePreview: responseText.substring(0, 300),
+                });
+            }
+            return responseText;
+        }
+        frameworkLogger.log("inference-cycle", "mcp-no-useful-content", "info", {
+            agentName,
+            responsePreview: responseText.substring(0, 200),
+        });
+    }
+    catch (mcpError) {
+        frameworkLogger.log("inference-cycle", "mcp-invocation-failed", "info", {
+            agentName,
+            error: String(mcpError),
+        });
+    }
+    if (agentInvoker) {
+        frameworkLogger.log("inference-cycle", "invoke-via-callback", "info", { agentName });
+        return agentInvoker(agentName, prompt);
+    }
+    if (process.env.XRAY_FORCE_MCP_GOVERNANCE === 'true') {
+        throw new Error(`[PURE MCP] Orchestrator returned no usable response for agent "${agentName}" and OpenCode fallback is disabled`);
+    }
+    return invokeViaOpencode(agentName, prompt, projectRoot);
+}
+export async function invokeViaOpencode(agentName, prompt, projectRoot) {
+    return invokeOpencodeFromEngine(agentName, prompt, projectRoot);
+}