0xray 3.1.1 → 3.2.0

package/dist/processors/implementations/log-protection-processor.js

@@ -14,7 +14,6 @@
  * - Copy operations to create new archive files
  *
  * @module processors/implementations
- * @version 1.1.0
  */
 import { PreProcessor } from "../processor-interfaces.js";
 import { frameworkLogger } from "../../core/framework-logger.js";

package/dist/processors/implementations/nudge-processor.js

@@ -5,7 +5,6 @@
  * when stuck patterns are detected.
  *
  * @module processors/implementations
- * @version 1.0.0
  */
 import { PostProcessor } from "../processor-interfaces.js";
 import { frameworkLogger } from "../../core/framework-logger.js";

package/dist/processors/implementations/performance-budget-processor.js

@@ -5,7 +5,6 @@
  * Checks code content against configurable size, function-length, nesting-depth,
  * and parameter-count budgets. Returns structured violation lists.
  *
- * @version 1.0.0
  * @since 2026-03-28
  */
 import { frameworkLogger } from "../../core/framework-logger.js";

package/dist/processors/implementations/postprocessor-chain-validator.js

@@ -5,7 +5,6 @@
  * Checks that all registered postprocessors executed without errors,
  * validates priority ordering, and detects skipped or crashed processors.
  *
- * @version 1.0.0
  * @since 2026-03-28
  */
 import { frameworkLogger } from "../../core/framework-logger.js";

package/dist/processors/implementations/publish-preflight-processor.js

@@ -11,13 +11,13 @@
  * @priority 10 (runs early after post-processing starts)
  * @blocking true (blocks publish on violations)
  *
- * @version 1.0.0
  * @framework 0xRay 1.15.41
  */
 import * as fs from "fs";
 import * as path from "path";
 import { PostProcessor } from "../processor-interfaces.js";
 import { frameworkLogger } from "../../core/framework-logger.js";
+import { featuresConfigLoader } from "../../core/features-config.js";
 export class PublishPreflightProcessor extends PostProcessor {
     name = "publishPreflight";
     priority = 10;
@@ -44,17 +44,9 @@ export class PublishPreflightProcessor extends PostProcessor {
     }
     loadConfig() {
         try {
-            const configPaths = [
-                path.join(process.cwd(), ".xray", "features.json"),
-            ];
-            for (const configPath of configPaths) {
-                if (fs.existsSync(configPath)) {
-                    const configData = JSON.parse(fs.readFileSync(configPath, "utf-8"));
-                    if (configData.publish) {
-                        this.config = { ...this.config, ...configData.publish };
-                    }
-                    break;
-                }
+            const publishConfig = featuresConfigLoader.loadConfig().publish;
+            if (publishConfig) {
+                this.config = { ...this.config, ...publishConfig };
             }
         }
         catch (e) {

package/dist/processors/implementations/session-summary-processor.js

@@ -4,13 +4,11 @@
  * Generates emoji-formatted session summaries after tool execution.
  * Uses features.json -> auto_reporting config for control.
  *
- * @version 1.0.0
  * @since 2026-04-04
  */
 import { PostProcessor } from "../processor-interfaces.js";
 import { frameworkLogger } from "../../core/framework-logger.js";
-import * as path from "path";
-import * as fs from "fs";
+import { featuresConfigLoader } from "../../core/features-config.js";
 export class SessionSummaryProcessor extends PostProcessor {
     name = "sessionSummary";
     priority = 15;
@@ -30,19 +28,13 @@ export class SessionSummaryProcessor extends PostProcessor {
     }
     loadConfig() {
         try {
-            const featuresPath = path.join(process.cwd(), ".xray", "features.json");
-            const altPath = path.join(process.cwd(), ".opencode", "xray", "features.json");
-            const configPath = fs.existsSync(featuresPath) ? featuresPath :
-                fs.existsSync(altPath) ? altPath : null;
-            if (configPath) {
-                const configData = JSON.parse(fs.readFileSync(configPath, "utf-8"));
-                const autoReporting = configData.auto_reporting;
-                if (autoReporting) {
-                    this.config.enabled = autoReporting.mode !== "off";
-                    this.config.include_emojis = autoReporting.display?.indicators?.emojis !== false;
-                    this.config.include_recommendations = autoReporting.report_types?.session_summary?.include_recommendations !== false;
-                    this.config.include_agent_activities = autoReporting.report_types?.session_summary?.include_agent_activities !== false;
-                }
+            const configData = featuresConfigLoader.loadConfig();
+            const autoReporting = configData.auto_reporting;
+            if (autoReporting) {
+                this.config.enabled = autoReporting.mode !== "off";
+                this.config.include_emojis = autoReporting.display?.indicators?.emojis !== false;
+                this.config.include_recommendations = autoReporting.report_types?.session_summary?.include_recommendations !== false;
+                this.config.include_agent_activities = autoReporting.report_types?.session_summary?.include_agent_activities !== false;
             }
         }
         catch (error) {

package/dist/processors/implementations/spawn-governance-processor.js

@@ -9,7 +9,6 @@
  *  - #56 Infinite Spawn Pattern Detection
  *  - #57 Spawn Rate Limiting
  *
- * @version 1.0.0
  * @since 2026-03-28
  */
 import { frameworkLogger } from "../../core/framework-logger.js";

package/dist/processors/implementations/storytelling-trigger-processor.js

@@ -3,6 +3,7 @@ import * as path from "path";
 import { execSync } from "child_process";
 import { PostProcessor } from "../processor-interfaces.js";
 import { frameworkLogger } from "../../core/framework-logger.js";
+import { featuresConfigLoader } from "../../core/features-config.js";
 import { analyzeStructuralPatterns, } from "../../inference/semantic-patterns.js";
 import { captureSessionInference, saveSessionInference, } from "../../inference/session-capture.js";
 export class StorytellingTriggerProcessor extends PostProcessor {
@@ -13,34 +14,8 @@ export class StorytellingTriggerProcessor extends PostProcessor {
     deepReflectionsDir = "docs/reflections/deep";
     constructor() {
         super();
-        this.loadConfig();
-    }
-    loadConfig() {
-        try {
-            const configPath = this.resolveConfigPath("features.json");
-            if (configPath && fs.existsSync(configPath)) {
-                const content = fs.readFileSync(configPath, "utf-8");
-                const parsed = JSON.parse(content);
-                if (parsed.storytelling) {
-                    this.config = parsed.storytelling;
-                }
-            }
-        }
-        catch (error) {
-            frameworkLogger.log("storytelling-trigger", "config-load-failed", "warning", {
-                error: error instanceof Error ? error.message : String(error),
-            });
-        }
-    }
-    resolveConfigPath(filename) {
-        const candidates = [
-            path.join(process.cwd(), ".xray", filename),
-        ];
-        for (const candidate of candidates) {
-            if (fs.existsSync(candidate))
-                return candidate;
-        }
-        return null;
+        const features = featuresConfigLoader.loadConfig();
+        this.config = features.storytelling ?? null;
     }
     async run(context) {
         if (!this.config?.enabled) {

package/dist/processors/implementations/test-auto-creation-processor.js

@@ -5,7 +5,6 @@
  * Supports multiple languages: TypeScript, JavaScript, Python, Go, Rust, Java, C#
  * Uses direct skill calls (no MCP overhead) for instant test generation.
  *
- * @version 1.1.0
  * @since 2026-02-15
  */
 import * as fs from "fs";

package/dist/processors/implementations/typescript-compilation-processor.js

@@ -5,7 +5,6 @@
  * Parses TypeScript error lines from stderr and returns structured results.
  * Gracefully skips when no tsconfig.json exists.
  *
- * @version 1.0.0
  * @since 2026-03-28
  */
 import { execSync } from "child_process";

package/dist/processors/implementations/version-compliance-processor.js

@@ -14,7 +14,6 @@
  * @priority 25 (high - runs early, after preValidate, before errorBoundary)
  * @blocking true (blocks on violations)
  *
- * @version 1.0.0
  * @framework 0xRay 1.3.5
  */
 import * as fs from "fs";

package/dist/processors/processor-interfaces.js

@@ -6,7 +6,6 @@
  * polymorphic processor classes.
  *
  * @module processors/interfaces
- * @version 1.0.0
  */
 export class BaseProcessor {
     enabled = true;

package/dist/processors/processor-types.js

@@ -6,7 +6,6 @@
  * This file is the central source of truth for shared processor types
  * to avoid circular dependencies.
  *
- * @version 1.2.0
  * @since 2026-01-07
  */
 export {};

package/dist/scripts/integration.js

@@ -5,7 +5,6 @@
  * Main CLI bridge for external systems (like Jelly commercial modules) to call into 0xRay.
  * Allows spawning OpenCode CLI with 0xRay agents to execute real tasks.
  *
- * @version 1.1.0
  * @since 2026-02-14
  *
  * Usage:

package/dist/security/comprehensive-security-audit.js

@@ -5,7 +5,6 @@
  * automated remediation, compliance checking, and weighted voting
  * for architectural decisions.
  *
- * @version 1.22.13
  */
 import { readFileSync, readdirSync, statSync, writeFileSync } from "fs";
 import { join } from "path";

package/dist/security/security-agent-coordinator.js

@@ -4,7 +4,6 @@
  * Integrates the security orchestration layer with the framework's agent system.
  * Provides coordination between security agents using weighted voting.
  *
- * @version 1.22.13
  */
 import { EventEmitter } from "events";
 import { frameworkLogger } from "../core/framework-logger.js";

package/dist/security/security-auditor.js

@@ -4,7 +4,6 @@
  * Comprehensive security auditing for the framework and its components.
  * Identifies vulnerabilities, misconfigurations, and security weaknesses.
  *
- * @version 1.0.0
  * @since 2026-01-07
  */
 import { readFileSync, readdirSync, statSync } from "fs";

package/dist/security/security-hardener.js

@@ -4,7 +4,6 @@
  * Implements additional security measures and hardening for the framework.
  * Addresses vulnerabilities identified during security audit.
  *
- * @version 1.0.0
  * @since 2026-01-07
  */
 import { promises as fs } from "fs";

package/dist/security/security-hardening-system.js

@@ -4,7 +4,6 @@
  * Comprehensive security hardening implementation with OWASP compliance.
  * Implements defense-in-depth security architecture for enterprise applications.
  *
- * @version 1.0.0
  * @since 2026-01-08
  */
 import { EventEmitter } from "events";

package/dist/security/security-headers.js

@@ -4,7 +4,6 @@
  * Comprehensive security headers implementation for HTTP responses.
  * Integrates with boot orchestrator and API endpoints.
  *
- * @version 1.0.0
  * @since 2026-01-07
  */
 import { frameworkLogger } from "../core/framework-logger.js";

package/dist/security/security-orchestration-layer.js

@@ -5,7 +5,6 @@
  * automated remediation, and compliance validation using weighted voting
  * for architectural decisions.
  *
- * @version 1.22.13
  */
 import { EventEmitter } from "events";
 import { frameworkLogger } from "../core/framework-logger.js";

package/dist/services/inference-tuner.js

@@ -8,7 +8,6 @@
  * 4. Updates configuration automatically
  *
  * @module services
- * @version 1.0.0
  */
 import * as fs from "fs";
 import * as path from "path";

package/dist/session/session-cleanup-manager.js

@@ -4,7 +4,6 @@
  * Manages automatic cleanup of sessions with TTL-based expiration,
  * idle session detection, and manual cleanup utilities.
  *
- * @version 1.0.0
  * @since 2026-01-07
  */
 import { frameworkLogger } from "../core/framework-logger.js";

package/dist/session/session-monitor.js

@@ -4,7 +4,6 @@
  * Provides real-time monitoring of sessions with health checks,
  * performance tracking, and alerting capabilities.
  *
- * @version 1.0.0
  * @since 2026-01-07
  */
 import { frameworkLogger } from "../core/framework-logger.js";

package/dist/session/session-state-manager.js

@@ -4,7 +4,6 @@
  * Manages cross-session state sharing, dependency tracking,
  * and coordination for complex workflows.
  *
- * @version 1.0.0
  * @since 2026-01-07
  */
 import { frameworkLogger } from "../core/framework-logger.js";

package/dist/skills/xray-orchestrator/index.js

@@ -3,7 +3,6 @@
  *
  * OpenClaw skill that provides xray orchestration commands.
  *
- * @version 1.0.0
  * @since 2026-03-14
  */
 const API_BASE = process.env.XRAY_API_URL || 'http://localhost:18431';

package/dist/utils/codex-parser.js

@@ -4,7 +4,6 @@
  * Unified parsing utility for codex content in both JSON and Markdown formats.
  * Provides consistent parsing across all components with format detection and validation.
  *
- * @version 1.0.1
  * @since 2026-01-07
  */
 import { frameworkLogger } from "../core/framework-logger.js";

package/dist/utils/language-detector.js

@@ -4,7 +4,6 @@
  * Detects project language and test framework from project files.
  * Supports: TypeScript, JavaScript, Python, Go, Rust, Java, C++, Ruby, PHP
  *
- * @version 1.0.0
  * @since 2026-02-25
  */
 import * as fs from "fs";

package/dist/utils/shutdown-handler.js

@@ -4,7 +4,6 @@
  * Centralized shutdown handling for MCP servers.
  * Extracts common shutdown patterns to reduce code duplication.
  *
- * @version 1.0.0
  * @since 2026-03-22
  */
 import { frameworkLogger } from "../core/framework-logger.js";

package/dist/validation/agent-config-validator.js

@@ -0,0 +1,280 @@
+/**
+ * Agent Configuration Validator
+ *
+ * Validates agent configuration files for correctness and completeness
+ * ensuring all required fields are present and properly formatted.
+ *
+ * @since 2026-01-23
+ */
+import { frameworkLogger } from "../core/framework-logger.js";
+import * as fs from "fs";
+import * as path from "path";
+import * as yaml from "yaml";
+export class AgentConfigValidator {
+    requiredFields = [
+        "name",
+        "description",
+        "version",
+        "model",
+        "mode",
+    ];
+    validModes = ["primary", "subagent"];
+    validLogLevels = ["debug", "info", "warn", "error"];
+    validLogFormats = ["json", "text"];
+    validPriorities = ["low", "medium", "high", "critical"];
+    validProcessorTypes = [
+        "validation",
+        "orchestration",
+        "monitoring",
+    ];
+    /**
+     * Validate agent configuration from file
+     */
+    async validateConfigFile(filePath) {
+        const jobId = `validate-config-${Date.now()}-${Math.random().toString(36).substring(2, 11)}`;
+        try {
+            // Check if file exists
+            if (!fs.existsSync(filePath)) {
+                return {
+                    valid: false,
+                    errors: [`Configuration file does not exist: ${filePath}`],
+                    warnings: [],
+                    config: null,
+                };
+            }
+            // Read and parse file
+            const content = fs.readFileSync(filePath, "utf8");
+            let config;
+            if (filePath.endsWith(".yml") || filePath.endsWith(".yaml")) {
+                config = yaml.parse(content);
+            }
+            else if (filePath.endsWith(".json")) {
+                config = JSON.parse(content);
+            }
+            else {
+                return {
+                    valid: false,
+                    errors: [`Unsupported file format: ${path.extname(filePath)}`],
+                    warnings: [],
+                    config: null,
+                };
+            }
+            const result = this.validateConfig(config);
+            frameworkLogger.log("agent-config-validator", `Configuration validation ${result.valid ? "passed" : "failed"} for ${filePath}`, result.valid ? "success" : "error", {
+                jobId,
+                filePath,
+                errorCount: result.errors.length,
+                warningCount: result.warnings.length,
+            });
+            return {
+                ...result,
+                config: result.valid ? config : null,
+            };
+        }
+        catch (error) {
+            frameworkLogger.log("agent-config-validator", `Configuration validation error for ${filePath}`, "error", {
+                jobId,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return {
+                valid: false,
+                errors: [
+                    `Failed to parse configuration: ${error instanceof Error ? error.message : String(error)}`,
+                ],
+                warnings: [],
+                config: null,
+            };
+        }
+    }
+    /**
+     * Validate agent configuration object
+     */
+    validateConfig(config) {
+        const errors = [];
+        const warnings = [];
+        // Check required fields
+        for (const field of this.requiredFields) {
+            if (!config[field]) {
+                errors.push(`Missing required field: ${field}`);
+            }
+        }
+        // Validate mode
+        if (config.mode && !this.validModes.includes(config.mode)) {
+            errors.push(`Invalid mode '${config.mode}'. Must be one of: ${this.validModes.join(", ")}`);
+        }
+        // Validate logging configuration
+        if (config.logging) {
+            this.validateLoggingConfig(config.logging, errors, warnings);
+        }
+        // Validate processor pipeline
+        if (config.processor_pipeline) {
+            this.validateProcessorPipeline(config.processor_pipeline, errors, warnings);
+        }
+        // Validate performance configuration
+        if (config.performance) {
+            this.validatePerformanceConfig(config.performance, errors, warnings);
+        }
+        // Validate security configuration
+        if (config.security) {
+            this.validateSecurityConfig(config.security, errors, warnings);
+        }
+        // Validate error handling configuration
+        if (config.error_handling) {
+            this.validateErrorHandlingConfig(config.error_handling, errors, warnings);
+        }
+        return {
+            valid: errors.length === 0,
+            errors,
+            warnings,
+            config: null,
+        };
+    }
+    /**
+     * Validate logging configuration
+     */
+    validateLoggingConfig(logging, errors, warnings) {
+        if (logging.level && !this.validLogLevels.includes(logging.level)) {
+            errors.push(`Invalid log level '${logging.level}'. Must be one of: ${this.validLogLevels.join(", ")}`);
+        }
+        if (logging.format && !this.validLogFormats.includes(logging.format)) {
+            errors.push(`Invalid log format '${logging.format}'. Must be one of: ${this.validLogFormats.join(", ")}`);
+        }
+        if (logging.destinations && !Array.isArray(logging.destinations)) {
+            errors.push("logging.destinations must be an array");
+        }
+        if (logging.retention_days &&
+            (typeof logging.retention_days !== "number" || logging.retention_days < 1)) {
+            errors.push("logging.retention_days must be a positive number");
+        }
+    }
+    /**
+     * Validate processor pipeline configuration
+     */
+    validateProcessorPipeline(pipeline, errors, warnings) {
+        if (!Array.isArray(pipeline)) {
+            errors.push("processor_pipeline must be an array");
+            return;
+        }
+        pipeline.forEach((processor, index) => {
+            if (!processor.name) {
+                errors.push(`processor_pipeline[${index}]: missing 'name' field`);
+            }
+            if (!processor.type) {
+                errors.push(`processor_pipeline[${index}]: missing 'type' field`);
+            }
+            else if (!this.validProcessorTypes.includes(processor.type)) {
+                errors.push(`processor_pipeline[${index}]: invalid type '${processor.type}'. Must be one of: ${this.validProcessorTypes.join(", ")}`);
+            }
+            if (!processor.priority) {
+                errors.push(`processor_pipeline[${index}]: missing 'priority' field`);
+            }
+            else if (!this.validPriorities.includes(processor.priority)) {
+                errors.push(`processor_pipeline[${index}]: invalid priority '${processor.priority}'. Must be one of: ${this.validPriorities.join(", ")}`);
+            }
+            if (processor.timeout_ms &&
+                (typeof processor.timeout_ms !== "number" || processor.timeout_ms < 0)) {
+                errors.push(`processor_pipeline[${index}]: timeout_ms must be a non-negative number`);
+            }
+            if (processor.retry_attempts &&
+                (typeof processor.retry_attempts !== "number" ||
+                    processor.retry_attempts < 0)) {
+                errors.push(`processor_pipeline[${index}]: retry_attempts must be a non-negative number`);
+            }
+        });
+    }
+    /**
+     * Validate performance configuration
+     */
+    validatePerformanceConfig(performance, errors, warnings) {
+        if (performance.timeout_ms &&
+            (typeof performance.timeout_ms !== "number" || performance.timeout_ms < 0)) {
+            errors.push("performance.timeout_ms must be a non-negative number");
+        }
+        if (performance.concurrency_limit &&
+            (typeof performance.concurrency_limit !== "number" ||
+                performance.concurrency_limit < 1)) {
+            errors.push("performance.concurrency_limit must be a positive number");
+        }
+        if (performance.memory_limit_mb &&
+            (typeof performance.memory_limit_mb !== "number" ||
+                performance.memory_limit_mb < 1)) {
+            errors.push("performance.memory_limit_mb must be a positive number");
+        }
+        if (performance.cpu_limit_percent &&
+            (typeof performance.cpu_limit_percent !== "number" ||
+                performance.cpu_limit_percent < 1 ||
+                performance.cpu_limit_percent > 100)) {
+            errors.push("performance.cpu_limit_percent must be between 1 and 100");
+        }
+    }
+    /**
+     * Validate security configuration
+     */
+    validateSecurityConfig(security, errors, warnings) {
+        if (security.permission_level &&
+            typeof security.permission_level !== "string") {
+            errors.push("security.permission_level must be a string");
+        }
+        if (security.data_classification &&
+            typeof security.data_classification !== "string") {
+            errors.push("security.data_classification must be a string");
+        }
+    }
+    /**
+     * Validate error handling configuration
+     */
+    validateErrorHandlingConfig(errorHandling, errors, warnings) {
+        if (errorHandling.retry_attempts &&
+            (typeof errorHandling.retry_attempts !== "number" ||
+                errorHandling.retry_attempts < 0)) {
+            errors.push("error_handling.retry_attempts must be a non-negative number");
+        }
+        if (errorHandling.circuit_breaker) {
+            const cb = errorHandling.circuit_breaker;
+            if (cb.failure_threshold &&
+                (typeof cb.failure_threshold !== "number" || cb.failure_threshold < 1)) {
+                errors.push("error_handling.circuit_breaker.failure_threshold must be a positive number");
+            }
+            if (cb.recovery_timeout_ms &&
+                (typeof cb.recovery_timeout_ms !== "number" ||
+                    cb.recovery_timeout_ms < 0)) {
+                errors.push("error_handling.circuit_breaker.recovery_timeout_ms must be a non-negative number");
+            }
+        }
+    }
+    /**
+     * Validate all agent configurations in a directory
+     */
+    async validateAllAgentConfigs(agentConfigDir = ".opencode/agents") {
+        const results = [];
+        // Gracefully handle missing agent config directory (headless/no .opencode/ mode)
+        if (!fs.existsSync(agentConfigDir)) {
+            frameworkLogger.log("agent-config-validator", `Agent config directory not found, skipping validation: ${agentConfigDir}`, "warning", {});
+            return {
+                results: [],
+                summary: { total: 0, valid: 0, invalid: 0 },
+            };
+        }
+        try {
+            const files = fs.readdirSync(agentConfigDir);
+            const configFiles = files.filter((f) => f.endsWith(".yml") || f.endsWith(".yaml") || f.endsWith(".json"));
+            for (const file of configFiles) {
+                const filePath = path.join(agentConfigDir, file);
+                const result = await this.validateConfigFile(filePath);
+                results.push({ file, result });
+            }
+        }
+        catch (error) {
+            frameworkLogger.log("agent-config-validator", "Failed to read agent config directory", "error", { error: error instanceof Error ? error.message : String(error) });
+        }
+        const summary = {
+            total: results.length,
+            valid: results.filter((r) => r.result.valid).length,
+            invalid: results.length - results.filter((r) => r.result.valid).length,
+        };
+        frameworkLogger.log("agent-config-validator", `Validated ${summary.total} agent configurations: ${summary.valid} valid, ${summary.invalid} invalid`, summary.invalid > 0 ? "error" : "info");
+        return { results, summary };
+    }
+}
+// Export singleton instance
+export const agentConfigValidator = new AgentConfigValidator();