0xray 4.0.11 → 4.0.13

package/dist/governance/llm-governance-provider.js

@@ -1,284 +0,0 @@
-import { execFileSync } from "node:child_process";
-import { frameworkLogger } from "../core/framework-logger.js";
-const DEFAULT_HERMES_PROVIDER = "xai-oauth";
-const DEFAULT_HERMES_MODEL = "grok-4.3";
-const DEFAULT_HERMES_TIMEOUT_MS = 120_000;
-const UNIT_TEST_HERMES_TIMEOUT_MS = 2_000;
-const ROLE_PROMPTS = {
-    "code-review": `You are a senior code reviewer on a governance committee for a software project. Analyze the following proposal from a code quality, maintainability, readability, and engineering best practices perspective.
-
-Consider:
-- Does the proposal improve or degrade code quality?
-- Does it follow established design patterns?
-- Does it introduce technical debt?
-- Are there potential regressions or edge cases?
-
-Respond with a structured vote in exactly this format:
-DECISION: approve|reject|abstain
-CONFIDENCE: <0.0-1.0>
-REASONING: <2-4 sentence analysis of the proposal's code quality implications>`,
-    "security-audit": `You are a senior security engineer on a governance committee for a software project. Analyze the following proposal from a security, threat modeling, and compliance perspective.
-
-Consider:
-- Does the proposal introduce new attack surface?
-- Does it handle authentication, authorization, and data protection properly?
-- Are there compliance implications (GDPR, SOC2, PCI-DSS, etc.)?
-- Does it follow security best practices (input validation, least privilege, defense in depth)?
-
-Respond with a structured vote in exactly this format:
-DECISION: approve|reject|abstain
-CONFIDENCE: <0.0-1.0>
-REASONING: <2-4 sentence analysis of the proposal's security implications>`,
-    "researcher": `You are a senior architect and researcher on a governance committee for a software project. Analyze the following proposal from a codebase-wide architectural and historical perspective.
-
-Consider:
-- Does the proposal align with the project's observed architecture patterns?
-- Does it integrate well with existing systems and data flows?
-- Does it address recurring problems observed in the project history?
-- What is the broader impact on the codebase ecosystem?
-
-Respond with a structured vote in exactly this format:
-DECISION: approve|reject|abstain
-CONFIDENCE: <0.0-1.0>
-REASONING: <2-4 sentence analysis of the proposal's broader project impact>`,
-};
-function resolveHermesProvider() {
-    return process.env.HERMES_PROVIDER?.trim() || DEFAULT_HERMES_PROVIDER;
-}
-function resolveHermesModel() {
-    return process.env.HERMES_MODEL?.trim() || DEFAULT_HERMES_MODEL;
-}
-function inUnitTestContext() {
-    return process.env.NODE_ENV === "test" || Boolean(process.env.VITEST);
-}
-/** Dead xai-oauth (invalid_grant) hangs hermes -z until DEFAULT_HERMES_TIMEOUT_MS. Unit/Vitest must not wait. */
-function unitTestBlocksLiveHermes() {
-    if (process.env.XRAY_GOVERNANCE_ALLOW_HERMES === "true")
-        return false;
-    return inUnitTestContext();
-}
-function resolveHermesTimeoutMs() {
-    const raw = process.env.HERMES_TIMEOUT_MS?.trim();
-    if (raw) {
-        const parsed = Number(raw);
-        if (Number.isFinite(parsed) && parsed > 0)
-            return parsed;
-    }
-    if (inUnitTestContext())
-        return UNIT_TEST_HERMES_TIMEOUT_MS;
-    return DEFAULT_HERMES_TIMEOUT_MS;
-}
-export function resolveHermesBin() {
-    const explicit = process.env.HERMES_BIN?.trim();
-    if (explicit)
-        return explicit;
-    return "hermes";
-}
-function getDirectLlmConfig() {
-    const endpoint = process.env.XRAY_LLM_ENDPOINT ||
-        process.env.XRAY_GOVERNANCE_LLM_ENDPOINT ||
-        "";
-    const apiKey = process.env.XRAY_LLM_API_KEY ||
-        process.env.XRAY_GOVERNANCE_LLM_API_KEY ||
-        "";
-    const model = process.env.XRAY_LLM_MODEL ||
-        process.env.XRAY_GOVERNANCE_LLM_MODEL ||
-        "gpt-4o";
-    const directEnabled = process.env.XRAY_GOVERNANCE_LLM_ENABLED === "true" ||
-        process.env.XRAY_LLM_ENABLED === "true";
-    if (directEnabled && endpoint && apiKey) {
-        return { mode: "direct", endpoint, apiKey, model };
-    }
-    if (endpoint && apiKey) {
-        return { mode: "direct", endpoint, apiKey, model };
-    }
-    return null;
-}
-function getConfig() {
-    const direct = getDirectLlmConfig();
-    if (direct)
-        return direct;
-    if (unitTestBlocksLiveHermes())
-        return null;
-    if (hermesCliAvailable()) {
-        return {
-            mode: "hermes",
-            provider: resolveHermesProvider(),
-            model: resolveHermesModel(),
-            timeoutMs: resolveHermesTimeoutMs(),
-        };
-    }
-    return null;
-}
-export function isGovernanceLlmConfigured() {
-    return getConfig() !== null;
-}
-export function hermesCliAvailable() {
-    try {
-        execFileSync(resolveHermesBin(), ["--version"], {
-            encoding: "utf8",
-            stdio: ["ignore", "pipe", "pipe"],
-            timeout: 5_000,
-        });
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-function buildGovernancePrompt(role, proposalTitle, proposalDescription, evidence, proposalType) {
-    const evidenceBlock = evidence.length > 0
-        ? `**Supporting Evidence:**\n${evidence.map((entry, index) => `${index + 1}. ${entry}`).join("\n")}\n\n`
-        : "";
-    return `${ROLE_PROMPTS[role]}
-
-## Proposal
-
-**Title:** ${proposalTitle}
-
-**Description:** ${proposalDescription}
-
-**Type:** ${proposalType}
-
-${evidenceBlock}---
-
-Please provide your structured vote.`;
-}
-function runHermesGovernanceInference(prompt, config) {
-    return execFileSync(resolveHermesBin(), ["-z", prompt, "--provider", config.provider, "--model", config.model], {
-        encoding: "utf8",
-        timeout: config.timeoutMs,
-        maxBuffer: 10 * 1024 * 1024,
-    }).trim();
-}
-function parseVote(text) {
-    const decisionMatch = text.match(/DECISION:\s*(approve|reject|abstain)/i);
-    const confidenceMatch = text.match(/CONFIDENCE:\s*([0-9.]+)/i);
-    const reasoningMatch = text.match(/REASONING:\s*(.+)/is);
-    if (!decisionMatch || !decisionMatch[1])
-        return null;
-    const rawConfidence = confidenceMatch?.[1];
-    const confidence = rawConfidence ? parseFloat(rawConfidence) : 0.5;
-    return {
-        decision: decisionMatch[1].toLowerCase(),
-        confidence: isNaN(confidence) ? 0.5 : Math.min(1, Math.max(0, confidence)),
-        reasoning: reasoningMatch?.[1]?.trim() || "No reasoning provided",
-    };
-}
-async function callDirectLlm(role, config, proposalTitle, proposalDescription, evidence, proposalType) {
-    const systemPrompt = ROLE_PROMPTS[role];
-    const userMessage = `## Proposal
-
-**Title:** ${proposalTitle}
-
-**Description:** ${proposalDescription}
-
-**Type:** ${proposalType}
-
-${evidence.length > 0 ? `**Supporting Evidence:**\n${evidence.map((entry, index) => `${index + 1}. ${entry}`).join("\n")}` : ""}
-
----
-
-Please provide your structured vote.`;
-    const response = await fetch(config.endpoint, {
-        method: "POST",
-        headers: {
-            "Content-Type": "application/json",
-            Authorization: `Bearer ${config.apiKey}`,
-        },
-        body: JSON.stringify({
-            model: config.model,
-            messages: [
-                { role: "system", content: systemPrompt },
-                { role: "user", content: userMessage },
-            ],
-            temperature: 0.3,
-            max_tokens: 500,
-        }),
-    });
-    if (!response.ok) {
-        frameworkLogger.log("llm-governance", "api-call", "error", {
-            status: response.status,
-            statusText: response.statusText,
-            role,
-        });
-        return null;
-    }
-    const data = (await response.json());
-    const choices = data?.choices;
-    const message = choices?.[0]?.message;
-    return message?.content ?? null;
-}
-export async function tryLLMGovernance(role, proposalTitle, proposalDescription, evidence, proposalType) {
-    const config = getConfig();
-    if (!config) {
-        process.stderr.write(`[llm] no config for role=${role}\n`);
-        return null;
-    }
-    if (config.mode === "hermes") {
-        process.stderr.write(`[llm] using hermes -z provider=${config.provider} model=${config.model}\n`);
-        frameworkLogger.log("llm-governance", "using-hermes-cli", "info", {
-            provider: config.provider,
-            model: config.model,
-            role,
-        });
-    }
-    else {
-        process.stderr.write(`[llm] using direct endpoint=${config.endpoint} model=${config.model}\n`);
-    }
-    try {
-        const content = config.mode === "hermes"
-            ? runHermesGovernanceInference(buildGovernancePrompt(role, proposalTitle, proposalDescription, evidence, proposalType), config)
-            : await callDirectLlm(role, config, proposalTitle, proposalDescription, evidence, proposalType);
-        if (!content) {
-            frameworkLogger.log("llm-governance", "parse", "warning", {
-                issue: "missing content in response",
-                role,
-            });
-            return null;
-        }
-        const vote = parseVote(content);
-        if (!vote) {
-            frameworkLogger.log("llm-governance", "parse", "warning", {
-                issue: "unparseable response",
-                snippet: content.slice(0, 200),
-                role,
-            });
-            return null;
-        }
-        frameworkLogger.log("llm-governance", "vote", "success", {
-            role,
-            decision: vote.decision,
-            confidence: vote.confidence,
-        });
-        return vote;
-    }
-    catch (error) {
-        frameworkLogger.log("llm-governance", "error", "error", {
-            error: String(error),
-            role,
-        });
-        return null;
-    }
-}
-export function checkHermesOAuthStatus() {
-    const direct = getDirectLlmConfig();
-    if (direct) {
-        return {
-            configured: true,
-            endpoint: direct.endpoint,
-            model: direct.model,
-        };
-    }
-    if (hermesCliAvailable()) {
-        return {
-            configured: true,
-            endpoint: "hermes-cli",
-            model: resolveHermesModel(),
-        };
-    }
-    return {
-        configured: false,
-        error: "Hermes CLI not found on PATH. Install Hermes and ensure xai-oauth is configured (same path as gateway/cron: hermes auth add xai-oauth).",
-    };
-}

package/dist/governance/local-confer.d.ts

@@ -1,10 +0,0 @@
-import type { GovernanceRole, GovernanceVote } from "./llm-governance-provider.js";
-export type LocalConferInput = {
-    role: GovernanceRole;
-    highConfidenceTrapPresent?: boolean | undefined;
-    recommendedAgent?: string | null | undefined;
-    llmConfigured?: boolean | undefined;
-};
-/** Receipt when nested LLM is absent or returned no vote. Never approve — analyze_proposal feeds mergeVotes. */
-export declare function localConferVote(input: LocalConferInput): GovernanceVote;
-export declare function formatGovernanceVoteText(vote: GovernanceVote, extra?: string): string;

package/dist/governance/local-confer.js

@@ -1,27 +0,0 @@
-/** Receipt when nested LLM is absent or returned no vote. Never approve — analyze_proposal feeds mergeVotes. */
-export function localConferVote(input) {
-    const role = input.role;
-    if (input.llmConfigured) {
-        return {
-            decision: "abstain",
-            confidence: 0.5,
-            reasoning: `Local confer (${role}); nested LLM configured but returned no vote.`,
-        };
-    }
-    if (input.highConfidenceTrapPresent) {
-        const agent = input.recommendedAgent?.trim() || "architect";
-        return {
-            decision: "abstain",
-            confidence: 0.62,
-            reasoning: `Local confer (${role}); nested LLM not configured. Repertoire high-confidence ontological trap — route to ${agent} before implementation.`,
-        };
-    }
-    return {
-        decision: "abstain",
-        confidence: 0.58,
-        reasoning: `Local confer (${role}); nested LLM not configured.`,
-    };
-}
-export function formatGovernanceVoteText(vote, extra = "") {
-    return `DECISION: ${vote.decision}\nCONFIDENCE: ${vote.confidence.toFixed(2)}\nREASONING: ${vote.reasoning}${extra}`;
-}

package/dist/index.d.ts

@@ -1,28 +0,0 @@
-/**
- * 0xRay Framework - Main Entry Point
- *
- * This is the main entry point for the 0xRay framework.
- * It exports the core initialization function and key components.
- */
-export { XrayOrchestrator } from "./orchestrator/orchestrator.js";
-export { XrayStateManager } from "./state/index.js";
-export { AgentDelegator } from "./delegation/index.js";
-export { frameworkLogger } from "./core/framework-logger.js";
-export { BUILTIN_CODEX } from "./core/codex-formatter.js";
-import { defaultXrayConfig } from "./core/index.js";
-export { defaultXrayConfig };
-export { OpenClawIntegration, initializeOpenClawIntegration, getOpenClawIntegration, shutdownOpenClawIntegration } from "./integrations/openclaw/index.js";
-export type { OpenClawIntegrationConfig } from "./integrations/openclaw/types.js";
-export declare function initializeXray(config?: {}): {
-    success: boolean;
-    config: {
-        enableOrchestrator: boolean;
-        enableBootOrchestrator: boolean;
-        enableStateManagement: boolean;
-        enableHooks: boolean;
-        enableCodexInjection: boolean;
-        enableProcessors: boolean;
-        enablePostProcessor: boolean;
-    };
-    message: string;
-};

package/dist/index.js

@@ -1,24 +0,0 @@
-/**
- * 0xRay Framework - Main Entry Point
- *
- * This is the main entry point for the 0xRay framework.
- * It exports the core initialization function and key components.
- */
-export { XrayOrchestrator } from "./orchestrator/orchestrator.js";
-export { XrayStateManager } from "./state/index.js";
-export { AgentDelegator } from "./delegation/index.js";
-export { frameworkLogger } from "./core/framework-logger.js";
-export { BUILTIN_CODEX } from "./core/codex-formatter.js";
-import { defaultXrayConfig } from "./core/index.js";
-export { defaultXrayConfig };
-export { OpenClawIntegration, initializeOpenClawIntegration, getOpenClawIntegration, shutdownOpenClawIntegration } from "./integrations/openclaw/index.js";
-// Main initialization function
-export function initializeXray(config = {}) {
-    const mergedConfig = { ...defaultXrayConfig, ...config };
-    // Return a standardized initialization result
-    return {
-        success: true,
-        config: mergedConfig,
-        message: "0xRay framework initialized successfully",
-    };
-}

package/dist/inference/deploy-verifier.d.ts

@@ -1,26 +0,0 @@
-export interface DeployVerificationResult {
-    success: boolean;
-    packageVersion: string;
-    tarballPath: string;
-    installDir: string;
-    checks: DeployCheck[];
-    duration: number;
-    timestamp: string;
-}
-export interface DeployCheck {
-    name: string;
-    passed: boolean;
-    output: string;
-    duration: number;
-}
-export declare class DeployVerifier {
-    private projectRoot;
-    constructor(projectRoot?: string);
-    verify(): DeployVerificationResult;
-    quickVerify(): DeployVerificationResult;
-    private runCheck;
-    private exec;
-    private readPackageJson;
-    private cleanup;
-    private result;
-}

package/dist/inference/deploy-verifier.js

@@ -1,161 +0,0 @@
-import * as fs from "fs";
-import * as path from "path";
-import * as os from "os";
-import { execSync } from "child_process";
-const E2E_TEST_PATTERNS = [
-    { name: "opencode-integration", pattern: "oh-my-opencode-integration" },
-    { name: "hermes-agent", pattern: "hermes-agent" },
-    { name: "openclaw-integration", pattern: "openclaw-integration" },
-    { name: "e2e-orchestration", pattern: "e2e-orchestration" },
-    { name: "framework-init", pattern: "framework-init" },
-    { name: "processor-integration", pattern: "processors.test" },
-    { name: "security-integration", pattern: "security-integration" },
-];
-export class DeployVerifier {
-    projectRoot;
-    constructor(projectRoot) {
-        this.projectRoot = projectRoot || process.cwd();
-    }
-    verify() {
-        const startTime = Date.now();
-        const checks = [];
-        let tarballPath = "";
-        let installDir = "";
-        const pkg = this.readPackageJson();
-        const version = pkg.version;
-        const buildCheck = this.runCheck("build", () => {
-            this.exec("npm run build", this.projectRoot, 120000);
-            return "Build succeeded";
-        });
-        checks.push(buildCheck);
-        if (!buildCheck.passed) {
-            return this.result(false, version, tarballPath, installDir, checks, startTime);
-        }
-        const packCheck = this.runCheck("npm-pack", () => {
-            const output = this.exec("npm pack --pack-destination /tmp", this.projectRoot, 30000);
-            const match = output.match(/0xray-[\d.]+\.tgz/);
-            if (!match)
-                throw new Error("No tarball produced");
-            tarballPath = `/tmp/${match[0]}`;
-            return `Packed ${match[0]}`;
-        });
-        checks.push(packCheck);
-        if (!packCheck.passed) {
-            return this.result(false, version, tarballPath, installDir, checks, startTime);
-        }
-        installDir = fs.mkdtempSync(path.join(os.tmpdir(), "xray-deploy-verify-"));
-        const installCheck = this.runCheck("npm-install-fresh", () => {
-            this.exec(`npm install ${tarballPath} --no-save`, installDir, 60000);
-            return "Fresh install succeeded";
-        });
-        checks.push(installCheck);
-        if (!installCheck.passed) {
-            this.cleanup(installDir, tarballPath);
-            return this.result(false, version, tarballPath, installDir, checks, startTime);
-        }
-        const cliCheck = this.runCheck("cli-health", () => {
-            const cliPath = path.join(installDir, "node_modules", ".bin", "0xray");
-            if (!fs.existsSync(cliPath))
-                throw new Error("CLI not found in installed package");
-            const output = this.exec(`${cliPath} health`, installDir, 15000);
-            return `CLI health: ${output.substring(0, 100)}`;
-        });
-        checks.push(cliCheck);
-        for (const e2e of E2E_TEST_PATTERNS) {
-            const testCheck = this.runCheck(`e2e-${e2e.name}`, () => {
-                const output = this.exec(`npx vitest run --reporter=verbose -- ${e2e.pattern}`, this.projectRoot, 120000);
-                const passMatch = output.match(/(\d+) passed/);
-                const failMatch = output.match(/(\d+) failed/);
-                const fails = failMatch ? parseInt(failMatch[1], 10) : 0;
-                if (fails > 0)
-                    throw new Error(`${fails} tests failed`);
-                return passMatch ? `${passMatch[1]} tests passed` : "Tests ran";
-            });
-            checks.push(testCheck);
-        }
-        const allPassed = checks.every((c) => c.passed);
-        this.cleanup(installDir, tarballPath);
-        return this.result(allPassed, version, tarballPath, installDir, checks, startTime);
-    }
-    quickVerify() {
-        const startTime = Date.now();
-        const checks = [];
-        const pkg = this.readPackageJson();
-        const version = pkg.version;
-        if (!fs.existsSync(path.join(this.projectRoot, "package.json"))) {
-            checks.push({ name: "build", passed: false, output: "No package.json found", duration: 0 });
-            return this.result(false, version, "", "", checks, startTime);
-        }
-        const buildCheck = this.runCheck("build", () => {
-            this.exec("npm run build", this.projectRoot, 120000);
-            return "Build succeeded";
-        });
-        checks.push(buildCheck);
-        const testCheck = this.runCheck("test-suite", () => {
-            const output = this.exec("npm test", this.projectRoot, 120000);
-            const failMatch = output.match(/(\d+) failed/);
-            const fails = failMatch ? parseInt(failMatch[1], 10) : 0;
-            if (fails > 0)
-                throw new Error(`${fails} tests failed`);
-            return "All tests passed";
-        });
-        checks.push(testCheck);
-        const allPassed = checks.every((c) => c.passed);
-        return this.result(allPassed, version, "", "", checks, startTime);
-    }
-    runCheck(name, fn) {
-        const start = Date.now();
-        try {
-            const output = fn();
-            return { name, passed: true, output, duration: Date.now() - start };
-        }
-        catch (error) {
-            return {
-                name,
-                passed: false,
-                output: error instanceof Error ? error.message : String(error),
-                duration: Date.now() - start,
-            };
-        }
-    }
-    exec(command, cwd, timeout) {
-        return execSync(command, {
-            cwd,
-            encoding: "utf-8",
-            stdio: "pipe",
-            timeout,
-        });
-    }
-    readPackageJson() {
-        const pkgPath = path.join(this.projectRoot, "package.json");
-        if (!fs.existsSync(pkgPath)) {
-            return { version: "0.0.0-test" };
-        }
-        const content = fs.readFileSync(pkgPath, "utf-8");
-        return JSON.parse(content);
-    }
-    cleanup(installDir, tarballPath) {
-        try {
-            if (installDir && fs.existsSync(installDir)) {
-                fs.rmSync(installDir, { recursive: true, force: true });
-            }
-            if (tarballPath && fs.existsSync(tarballPath)) {
-                fs.unlinkSync(tarballPath);
-            }
-        }
-        catch {
-            // best effort
-        }
-    }
-    result(success, version, tarballPath, installDir, checks, startTime) {
-        return {
-            success,
-            packageVersion: version,
-            tarballPath,
-            installDir,
-            checks,
-            duration: Date.now() - startTime,
-            timestamp: new Date().toISOString(),
-        };
-    }
-}

package/dist/inference/index.d.ts

@@ -1,10 +0,0 @@
-export { analyzeStructuralPatterns } from "./semantic-patterns.js";
-export type { StructuralPattern } from "./semantic-patterns.js";
-export { captureSessionInference, saveSessionInference, } from "./session-capture.js";
-export type { SessionInference, ReasoningLink, SessionMetrics, } from "./session-capture.js";
-export { shouldTriggerCycle, accumulateCorpus } from "./inference-accumulator.js";
-export type { InferenceCorpus, RecurringPattern, RecurringProblem } from "./inference-accumulator.js";
-export { InferenceCycle } from "./inference-cycle.js";
-export type { InferenceProposal, InferenceCycleResult, CyclePhase } from "./inference-cycle.js";
-export { DeployVerifier } from "./deploy-verifier.js";
-export type { DeployVerificationResult, DeployCheck } from "./deploy-verifier.js";

package/dist/inference/index.js

@@ -1,5 +0,0 @@
-export { analyzeStructuralPatterns } from "./semantic-patterns.js";
-export { captureSessionInference, saveSessionInference, } from "./session-capture.js";
-export { shouldTriggerCycle, accumulateCorpus } from "./inference-accumulator.js";
-export { InferenceCycle } from "./inference-cycle.js";
-export { DeployVerifier } from "./deploy-verifier.js";

package/dist/inference/inference-accumulator.d.ts

@@ -1,29 +0,0 @@
-import { SessionInference } from "./session-capture.js";
-export interface InferenceCorpus {
-    sessions: SessionInference[];
-    totalCommits: number;
-    recurringPatterns: RecurringPattern[];
-    recurringProblems: RecurringProblem[];
-    uniqueApproaches: string[];
-    allWrongTurns: string[];
-    collectedAt: string;
-}
-export interface RecurringPattern {
-    name: string;
-    occurrences: number;
-    avgConfidence: number;
-    sessions: string[];
-    evidence: string[];
-    description: string;
-}
-export interface RecurringProblem {
-    pattern: string;
-    occurrences: number;
-    sessions: string[];
-}
-export declare function shouldTriggerCycle(inferenceDir: string, lastCycleFile: string): {
-    trigger: boolean;
-    reason: string;
-};
-export declare function accumulateCorpus(inferenceDir: string): InferenceCorpus;
-export declare function loadSessionInferences(dir: string): SessionInference[];