0xray 4.0.11 → 4.0.13

package/.opencode/commands/pre-commit-introspection.sh

@@ -1,133 +0,0 @@
-#!/bin/bash
-
-# xray 2.0 - Pre-commit Introspection
-# Comprehensive code quality and architecture validation
-
-echo "🔬 xray 2.0 - Pre-commit Introspection"
-echo "============================================================"
-
-# Initialize analysis status
-
-COMPLIANT=true
-ISSUES=()
-WARNINGS=()
-
-# 1. Syntax and Type Safety Validation
-
-echo "🔧 Validating syntax and type safety..."
-if command -v npm &> /dev/null && [ -f "package.json" ]; then # TypeScript compilation check
-if npm run typecheck > /dev/null 2>&1; then
-echo "✅ TypeScript compilation successful"
-else
-ISSUES+=("TypeScript compilation errors detected")
-COMPLIANT=false
-echo "❌ TypeScript compilation failed"
-fi
-
-    # ESLint validation
-    if npm run lint > /dev/null 2>&1; then
-        echo "✅ ESLint validation passed"
-    else
-        ISSUES+=("ESLint violations detected")
-        COMPLIANT=false
-        echo "❌ ESLint violations found"
-    fi
-
-else
-WARNINGS+=("npm/package.json not available for validation")
-fi
-
-# 2. Architecture Compliance Check
-
-echo ""
-echo "🏗️ Checking architecture compliance..."
-
-# Check for anti-patterns
-# Count any/unknown types
-ANY_COUNT=$(find src -name "*.ts" -o -name "*.tsx" | xargs grep -l ":\s*\(any\|unknown\)" | wc -l)
-if [ "$ANY_COUNT" -gt 0 ]; then
-    WARNINGS+=("Architecture warning: any|unknown types detected ($ANY_COUNT instances)")
-    echo "⚠️ Architecture warning: any|unknown types detected ($ANY_COUNT instances)"
-else
-    echo "✅ No any/unknown type violations"
-fi
-
-# Count console statements
-CONSOLE_COUNT=$(find src -name "*.ts" -o -name "*.tsx" | xargs grep -c "console\.\(log\|error\|warn\)" | awk '{sum += $1} END {print sum}')
-if [ "$CONSOLE_COUNT" -gt 0 ]; then
-    ISSUES+=("Architecture violation: console.(log|error|warn) ($CONSOLE_COUNT instances)")
-    COMPLIANT=false
-    echo "❌ Architecture violation: console.(log|error|warn) ($CONSOLE_COUNT instances)"
-else
-    echo "✅ No console statement violations"
-fi
-
-# 3. Component Size Validation
-
-echo ""
-echo "📏 Checking component sizes..."
-LARGE_COMPONENTS=$(find src -name "*.tsx" -o -name "*.ts" | xargs wc -l | awk '$1 > 300 {print $2 ": " $1 " lines"}')
-LARGE_COUNT=$(echo "$LARGE_COMPONENTS" | grep -c ":" || true)
-if [ "$LARGE_COUNT" -gt 0 ]; then
-    WARNINGS+=("$LARGE_COUNT components exceed 300-line limit (consider refactoring)")
-    echo "⚠️ Large components detected"
-    echo "$LARGE_COMPONENTS"
-    echo "💡 Consider breaking down large components for better maintainability"
-else
-    echo "✅ All components within size limits"
-fi
-
-# 4. Test Coverage Validation
-
-echo ""
-echo "🧪 Validating test coverage..."
-if command -v npm &> /dev/null && [ -f "package.json" ]; then
-    if npm test -- --run > /dev/null 2>&1; then
-        echo "✅ Tests passing"
-    else
-        ISSUES+=("Test failures detected")
-        COMPLIANT=false
-        echo "❌ Test failures detected"
-    fi
-else
-    WARNINGS+=("Test validation not available")
-fi
-
-# 5. Import Organization Check
-
-echo ""
-echo "📦 Checking import organization..."
-# Basic import validation would go here
-
-# 6. Commit Message Validation
-
-echo ""
-echo "📝 Validating commit message..."
-# Commit message validation would go here
-
-# 7. Code Duplication Check
-
-echo ""
-echo "🔄 Checking code duplication..."
-# Code duplication analysis would go here
-
-# Report Results
-
-echo ""
-echo "📊 PRE-COMMIT INTROSPECTION REPORT"
-echo "==================================="
-
-if [ "$COMPLIANT" = true ]; then
-    echo "✅ All validations passed"
-    exit 0
-else
-    echo "❌ COMMIT BLOCKED"
-    echo ""
-    echo "Critical Issues:"
-    for issue in "${ISSUES[@]}"; do
-        echo " - 🔴 $issue"
-    done
-    echo ""
-    echo "Resolution required before commit"
-    exit 1
-fi

package/.opencode/commands/security-scan.md

@@ -1,157 +0,0 @@
----
-name: security-scan
-description: Automated security vulnerability scanning with dependency and code analysis
----
-
-#!/bin/bash
-
-# xray - Security Scan Hook
-
-# Comprehensive security analysis for vulnerabilities and threats
-
-echo "🔒 xray - Security Scan"
-echo "================================================="
-
-# Initialize security status
-
-SECURE=true
-VULNERABILITIES=()
-THREATS=()
-
-# 1. Dependency Vulnerability Scanning
-
-echo "📦 Scanning dependencies for vulnerabilities..."
-if command -v npm &> /dev/null && [ -f "package.json" ]; then # Use npm audit if available
-if npm audit --audit-level moderate > /dev/null 2>&1; then
-echo "✅ No critical dependency vulnerabilities found"
-else
-VULNERABILITIES+=("Dependency vulnerabilities detected")
-SECURE=false
-echo "⚠️ Dependency vulnerabilities found"
-fi
-
-    # Check for outdated packages
-    OUTDATED=$(npm outdated 2>/dev/null | wc -l)
-    if [ "$OUTDATED" -gt 1 ]; then
-        echo "📅 $((OUTDATED-1)) packages are outdated"
-        if [ "$OUTDATED" -gt 5 ]; then
-            VULNERABILITIES+=("$((OUTDATED-1)) packages significantly outdated")
-        fi
-    fi
-
-else
-echo "⚠️ npm/package.json not available"
-fi
-
-# 2. Code Security Analysis
-
-echo ""
-echo "🔍 Scanning code for security issues..."
-
-# Check for hardcoded secrets
-
-SECRET_PATTERNS=("password" "secret" "key" "token" "api_key" "API_KEY" "PRIVATE_KEY")
-
-FOUND_SECRETS=false
-for pattern in "${SECRET_PATTERNS[@]}"; do
-    SECRET_FILES=$(grep -r "$pattern" --include="*.ts" --include="*.tsx" --include="*.js" --include="*.jsx" --include="*.py" --include="*.json" src/ 2>/dev/null | grep -v "node_modules" | wc -l)
-    if [ "$SECRET_FILES" -gt 0 ]; then
-THREATS+=("Potential hardcoded secrets detected ($SECRET_FILES files)")
-SECURE=false
-FOUND_SECRETS=true
-fi
-done
-
-if [ "$FOUND_SECRETS" = false ]; then
-echo "✅ No hardcoded secrets detected"
-else
-echo "⚠️ Potential hardcoded secrets found"
-fi
-
-# Check for insecure practices
-
-INSECURE_PATTERNS=("eval(" "innerHTML" "document.write" "setTimeout" "setInterval")
-
-for pattern in "${INSECURE_PATTERNS[@]}"; do
-    INSECURE_FILES=$(grep -r "$pattern" --include="*.ts" --include="*.tsx" --include="*.js" --include="*.jsx" src/ 2>/dev/null | grep -v "node_modules" | wc -l)
-    if [ "$INSECURE_FILES" -gt 0 ]; then
-THREATS+=("Insecure code patterns detected: $pattern ($INSECURE_FILES instances)")
-SECURE=false
-fi
-done
-
-# 3. File Permissions Check
-
-echo ""
-echo "🔐 Checking file permissions..."
-if [["$OSTYPE" == "darwin"*]] || [["$OSTYPE" == "linux-gnu"*]]; then # Check for world-writable files
-WRITABLE_FILES=$(find . -type f -perm -o+w 2>/dev/null | grep -v ".git" | grep -v "node_modules" | wc -l)
-    if [ "$WRITABLE_FILES" -gt 0 ]; then
-THREATS+=("$WRITABLE_FILES files have world-writable permissions")
-SECURE=false
-echo "⚠️ World-writable files detected"
-else
-echo "✅ File permissions secure"
-fi
-fi
-
-# 4. Environment Variable Exposure
-
-echo ""
-echo "🌍 Checking environment variable exposure..."
-if [ -f ".env" ]; then
-ENV*VARS=$(grep -c "^[A-Z*][A-Z0-9_]\*=" .env 2>/dev/null || echo "0")
-if [ "$ENV_VARS" -gt 0 ]; then
-echo "📄 Environment file contains $ENV_VARS variables"
-
-        # Check if .env is in .gitignore
-        if ! grep -q ".env" .gitignore 2>/dev/null; then
-            THREATS+=("Environment file not excluded from version control")
-            SECURE=false
-            echo "⚠️ .env file not in .gitignore"
-        fi
-    fi
-
-fi
-
-# 5. SSL/TLS Configuration Check (if applicable)
-
-echo ""
-echo "🔒 Checking SSL/TLS configuration..."
-if [ -f "vite.config.ts" ] || [ -f "vite.config.js" ]; then # Check for HTTPS enforcement in dev
-if ! grep -q "https.*true\|server.*https" vite.config.\* 2>/dev/null; then
-echo "ℹ️ Consider enabling HTTPS in development"
-else
-echo "✅ HTTPS configuration detected"
-fi
-fi
-
-# Report Results
-
-echo ""
-echo "📊 SECURITY SCAN REPORT"
-echo "======================="
-
-if [ "$SECURE" = true ]; then
-echo "✅ SECURITY COMPLIANT"
-echo "No critical security issues detected"
-else
-echo "❌ SECURITY VIOLATIONS DETECTED"
-echo ""
-echo "Vulnerabilities:"
-for vuln in "${VULNERABILITIES[@]}"; do
-        echo " - 🔴 $vuln"
-    done
-    echo ""
-    echo "Threats:"
-    for threat in "${THREATS[@]}"; do
-echo " - 🟡 $threat"
-done
-echo ""
-echo "Immediate remediation required"
-exit 1
-fi
-
-echo ""
-echo "🛡️ xray Status: SECURE"
-echo "Next security scan: Pre-commit and daily"

package/.opencode/commands/sisyphus-validation.md

@@ -1,128 +0,0 @@
-#!/bin/bash
-
-# xray - Sisyphus Orchestrator Validation
-
-# Tests async multi-agent coordination capabilities
-
-echo "🎭 xray - Sisyphus Orchestrator Validation"
-echo "==================================================================="
-
-# Initialize orchestration test
-
-AGENTS=("enforcer" "architect" "code-reviewer" "testing-lead" "security-auditor")
-COORDINATION_SUCCESS=true
-TASK_RESULTS=()
-
-echo "🔄 Testing async multi-agent coordination..."
-
-# Simulate task distribution (mock orchestration)
-
-for agent in "${AGENTS[@]}"; do
-echo "📤 Coordinating with ${agent} agent..."
-
-    # Check if agent configuration exists
-    if [ -f ".opencode/agents/${agent}.md" ]; then
-        echo "✅ ${agent} agent available for coordination"
-        TASK_RESULTS+=("${agent}:coordination_successful")
-    else
-        echo "❌ ${agent} agent configuration missing"
-        TASK_RESULTS+=("${agent}:coordination_failed")
-        COORDINATION_SUCCESS=false
-    fi
-
-    # Simulate async processing delay
-    sleep 0.1
-
-done
-
-echo ""
-echo "🔗 Testing workflow pattern coordination..."
-
-# Test complex workflow patterns
-
-WORKFLOW_PATTERNS=("complex-refactor" "security-audit" "new-feature" "bug-fix")
-for pattern in "${WORKFLOW_PATTERNS[@]}"; do
-echo "🔄 Coordinating ${pattern} workflow..."
-
-    case $pattern in
-        "complex-refactor")
-            REQUIRED_AGENTS=("architect" "refactorer" "testing-lead")
-            ;;
-        "security-audit")
-            REQUIRED_AGENTS=("security-auditor" "enforcer" "code-reviewer")
-            ;;
-        "new-feature")
-            REQUIRED_AGENTS=("architect" "code-reviewer" "testing-lead")
-            ;;
-        "bug-fix")
-            REQUIRED_AGENTS=("bug-triage-specialist" "code-reviewer" "testing-lead")
-            ;;
-    esac
-
-    WORKFLOW_SUCCESS=true
-    for agent in "${REQUIRED_AGENTS[@]}"; do
-        if [ ! -f ".opencode/agents/${agent}.md" ]; then
-            WORKFLOW_SUCCESS=false
-            break
-        fi
-    done
-
-    if [ "$WORKFLOW_SUCCESS" = true ]; then
-        echo "✅ ${pattern} workflow coordination successful"
-        TASK_RESULTS+=("${pattern}_workflow:successful")
-    else
-        echo "❌ ${pattern} workflow coordination failed"
-        TASK_RESULTS+=("${pattern}_workflow:failed")
-        COORDINATION_SUCCESS=false
-    fi
-
-done
-
-echo ""
-echo "📊 MCP Knowledge Skills Integration..."
-
-# Test MCP knowledge skills integration
-
-MCP_SKILLS=("project-analysis" "testing-strategy" "architecture-patterns" "performance-optimization" "git-workflow" "api-design")
-for skill in "${MCP_SKILLS[@]}"; do
-    if [ -f ".opencode/mcps/${skill}.mcp.json" ]; then
-echo "✅ MCP skill integrated: ${skill}"
-        TASK_RESULTS+=("${skill}\_mcp:integrated")
-else
-echo "❌ MCP skill missing: ${skill}"
-        TASK_RESULTS+=("${skill}\_mcp:missing")
-COORDINATION_SUCCESS=false
-fi
-done
-
-echo ""
-echo "🎭 SISYPHUS ORCHESTRATION REPORT"
-echo "==============================="
-
-if [ "$COORDINATION_SUCCESS" = true ]; then
-echo "✅ ASYNC SUBAGENT ORCHESTRATION SUCCESSFUL"
-echo "All agents and workflows properly coordinated"
-else
-echo "❌ ORCHESTRATION ISSUES DETECTED"
-echo ""
-echo "Coordination failures:"
-for result in "${TASK_RESULTS[@]}"; do
-if [[$result == _":failed"_]] || [[$result == *":missing"*]]; then
-echo " - 🔴 $result"
-fi
-done
-echo ""
-echo "Orchestration requires attention"
-exit 1
-fi
-
-echo ""
-echo "📈 Coordination Statistics:"
-echo " - Agents coordinated: ${#AGENTS[@]}"
-echo " - Workflow patterns: ${#WORKFLOW_PATTERNS[@]}"
-echo " - MCP skills integrated: ${#MCP_SKILLS[@]}"
-echo " - Total coordination points: $((${#AGENTS[@]} + ${#WORKFLOW_PATTERNS[@]} + ${#MCP_SKILLS[@]}))"
-
-echo ""
-echo "🎭 xray: SISYPHUS OPERATIONAL"
-echo "Async multi-agent orchestration validated"

package/.opencode/commands/summary-logger.md

@@ -1,83 +0,0 @@
-# xray - Summary Logger
-
-# Automatically logs AI-generated summaries and analysis to REFACTORING_LOG.md
-
-# 🚨 CRITICAL RULE: REFACTORING LOG IS APPEND-ONLY 🚨
-
-#
-
-# The REFACTORING_LOG.md file serves as an immutable audit trail of the project's evolution.
-
-# This file must NEVER be edited or modified after creation - only NEW entries may be appended.
-
-#
-
-# ❌ NEVER edit existing entries
-
-# ❌ NEVER delete entries
-
-# ❌ NEVER reorder entries
-
-# ❌ NEVER modify timestamps or content
-
-#
-
-# ✅ ONLY append new entries to the end
-
-# ✅ ONLY add new information, never change old information
-
-# ✅ ONLY use this automated logging system for consistency
-
-#
-
-# This ensures the refactoring log remains a reliable, immutable record of all changes.
-
-# If you need to correct information, append a new entry documenting the correction.
-
-#
-
-# 🚨 VIOLATION OF THIS RULE WILL BREAK THE PROJECT'S HISTORICAL RECORD 🚨
-
-echo "📝 xray - Summary Logger" >&2
-echo "====================================" >&2
-
-# Get script directory and project root
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-PROJECT_ROOT="$(cd "${SCRIPT_DIR}/../.." && pwd)"
-REFACTORING_LOG="${PROJECT_ROOT}/docs/REFACTORING_LOG.md"
-
-# Check if summary content is provided via environment variable or stdin (XRAY_ primary)
-
-if [ -n "$XRAY_SUMMARY_CONTENT" ]; then
-SUMMARY_CONTENT="$XRAY_SUMMARY_CONTENT"
-elif [ -n "$XRAY_SUMMARY_CONTENT" ]; then
-SUMMARY_CONTENT="$XRAY_SUMMARY_CONTENT"
-elif [ ! -t 0 ]; then
-    # Read from stdin
-    SUMMARY_CONTENT=$(cat)
-else
-echo "❌ No summary content provided. Use XRAY_SUMMARY_CONTENT environment variable or pipe content."
-echo "Usage:"
-echo " export XRAY_SUMMARY_CONTENT='summary content' && bash .opencode/commands/summary-logger.md"
-echo " echo 'summary content' | bash .opencode/commands/summary-logger.md"
-exit 1
-fi
-
-# Validate REFACTORING_LOG.md exists
-
-if [ ! -f "$REFACTORING_LOG" ]; then
-echo "❌ $REFACTORING_LOG not found"
-exit 1
-fi
-
-# Generate timestamp
-
-TIMESTAMP=$(date '+%B %Y')
-
-# Log raw content directly without wrapper
-
-echo "$SUMMARY_CONTENT" >> "$REFACTORING_LOG"
-
-echo "✅ Summary successfully logged to docs/REFACTORING_LOG.md"
-echo "📊 Entry added with timestamp: $(date '+%Y-%m-%d %H:%M:%S')"