0xray 4.0.21 → 4.0.22

package/vendor/@0xray/repertoire/dist/paths.js

@@ -70,6 +70,65 @@ export function resolveWritableConfigPath(configured, cwd, fallback) {
         return configured;
     return resolve(cwd, configured);
 }
+const STACK_LAW_FIELDS = [
+    'definition',
+    'tags',
+    'priority',
+    'evaluation_criteria',
+    'validation_experiment',
+    'example_inference_snippet',
+    'implementation_notes',
+];
+function assignStackLawField(existing, field, next) {
+    switch (field) {
+        case 'definition':
+            if (typeof next === 'string')
+                existing.definition = next;
+            break;
+        case 'tags':
+            if (Array.isArray(next))
+                existing.tags = [...next];
+            break;
+        case 'priority':
+            if (typeof next === 'string')
+                existing.priority = next;
+            break;
+        case 'evaluation_criteria':
+            if (typeof next === 'string')
+                existing.evaluation_criteria = next;
+            break;
+        case 'validation_experiment':
+            if (typeof next === 'string')
+                existing.validation_experiment = next;
+            break;
+        case 'example_inference_snippet':
+            if (typeof next === 'string')
+                existing.example_inference_snippet = next;
+            break;
+        case 'implementation_notes':
+            if (typeof next === 'string')
+                existing.implementation_notes = next;
+            break;
+        default: {
+            const unexpected = field;
+            throw new Error(`unknown stack law field ${String(unexpected)}`);
+        }
+    }
+}
+/** Copy changed stack law text onto an existing project name. Observation stats stay. */
+function refreshStackLaw(existing, signal) {
+    let dirty = false;
+    for (const field of STACK_LAW_FIELDS) {
+        const next = signal[field];
+        if (next == null)
+            continue;
+        if (JSON.stringify(existing[field]) === JSON.stringify(next))
+            continue;
+        assignStackLawField(existing, field, next);
+        dirty = true;
+    }
+    return dirty;
+}
 export function isGenericFieldObservedDefinition(definition) {
     return definition.includes('Field-observed domain primitive');
 }
@@ -104,6 +163,9 @@ function mergeOverlaySignals(destPath, overlayPath, options = {}) {
             changed += 1;
             continue;
         }
+        if (options.refreshLaws && refreshStackLaw(existing, signal)) {
+            changed += 1;
+        }
         if (options.fleshGeneric && isGenericFieldObservedDefinition(existing.definition)) {
             existing.definition = signal.definition;
             if (signal.tags)
@@ -127,12 +189,12 @@ function mergeOverlaySignals(destPath, overlayPath, options = {}) {
     return changed;
 }
 /**
- * Additive merge of `data/stack-overlay.json` into a project copy.
- * Existing names keep their stats. Missing overlay names are appended.
- * Refuses the factory tarball path.
+ * Merge `data/stack-overlay.json` into a project copy.
+ * Missing names are appended. A changed stack law field is refreshed.
+ * Observation stats on existing names stay. Refuses the factory tarball path.
  */
 export function mergeStackOverlay(destPath, overlayPath = DEFAULT_STACK_OVERLAY_PATH) {
-    return mergeOverlaySignals(destPath, overlayPath);
+    return mergeOverlaySignals(destPath, overlayPath, { refreshLaws: true });
 }
 /**
  * Additive merge of `data/subject-overlay.json` — product/repo flesh.

package/vendor/@0xray/repertoire/dist/registry/CuratedSignalsManager.js

@@ -7,6 +7,21 @@ export const FEEDBACK_SUCCESS_CONFIDENCE_BOOST = 0.002;
 export const FEEDBACK_FAILURE_CONFIDENCE_PENALTY = 0.005;
 export const FEEDBACK_MIN_CONFIDENCE = DEFAULT_PROMOTION_MIN_CONFIDENCE;
 const FIELD_PRIMITIVE_NAME = /^[A-Za-z][A-Za-z0-9_-]{2,119}$/;
+/**
+ * The diary names a law only when it contains the signal id, or the id with
+ * hyphens read as spaces. A repo tail, leftover tokens, and two definition
+ * words are not the name.
+ */
+export function signalNameInText(text, name) {
+    const normalized = text.toLowerCase();
+    const id = name.toLowerCase();
+    if (!id)
+        return false;
+    if (normalized.includes(id))
+        return true;
+    const spaced = id.replace(/-/g, ' ');
+    return spaced !== id && normalized.includes(spaced);
+}
 const GROOVER_EXPERIMENT_NAMES = new Set([
     'criteria_selection_gap',
     'external_norm_smuggling_risk',
@@ -119,25 +134,17 @@ export class CuratedSignalsManager {
         return this.load().signals.filter((s) => s.priority === priority);
     }
     /**
-     * Score text against all signals using name, tags, definition, criteria, and snippet.
+     * Score text against signals. A hit requires the signal id, or the id with
+     * hyphens read as spaces. Two definition words are not a match.
      */
     matchByText(text, minScore = 2) {
         const normalized = text.toLowerCase();
         const matches = [];
         for (const signal of this.load().signals) {
-            const matchedOn = [];
-            let score = 0;
-            if (normalized.includes(signal.name.replace(/-/g, ' ')) || normalized.includes(signal.name)) {
-                score += 5;
-                matchedOn.push('name');
-            }
-            else if (signal.name.startsWith('repo-')) {
-                const tail = signal.name.slice(5);
-                if (tail.length >= 3 && new RegExp(`\\b${tail}\\b`, 'i').test(normalized)) {
-                    score += 5;
-                    matchedOn.push('name');
-                }
-            }
+            if (!signalNameInText(text, signal.name))
+                continue;
+            const matchedOn = ['name'];
+            let score = 5;
             for (const tag of signal.tags) {
                 if (normalized.includes(tag.toLowerCase())) {
                     score += 3;
@@ -191,6 +198,39 @@ export class CuratedSignalsManager {
         }
         return matches.sort((a, b) => b.score - a.score);
     }
+    /**
+     * Mark names the diary already matched. Does not append a confidence sample.
+     * Missing names are left absent. Heat must not mint a law.
+     */
+    touchLastSeen(names) {
+        const data = this.load();
+        const now = new Date().toISOString();
+        const updated = [];
+        const seen = new Set();
+        for (const name of names) {
+            if (!name || seen.has(name))
+                continue;
+            seen.add(name);
+            const signal = data.signals.find((entry) => entry.name === name);
+            if (!signal)
+                continue;
+            const previous = signal.observation_stats;
+            signal.observation_stats = previous
+                ? { ...previous, last_seen: now }
+                : {
+                    observation_count: 0,
+                    avg_confidence: 0,
+                    max_confidence: 0,
+                    last_seen: now,
+                    governance_forced_count: 0,
+                };
+            updated.push(signal.name);
+        }
+        if (updated.length > 0) {
+            this.save(data);
+        }
+        return updated;
+    }
     recordPrimitiveObservations(matches, options = {}) {
         const minConfidence = options.minConfidence ?? DEFAULT_PROMOTION_MIN_CONFIDENCE;
         const data = this.load();

package/xray/agents_template.md

@@ -1,22 +1,27 @@
 # 0xRay AI Agents
 
-Quick reference for the 0xRay AI orchestration framework (v16 MCPs-centric three-subsystem).
+Quick reference for the 0xRay AI orchestration framework (**4.0** — 7 consumer MCP servers).
 
 ## Available MCP Servers
 
+All seven use `npx -y 0xray mcp <cmd>`:
+
 | Server | Role |
 |--------|------|
 | `xray-governance` | Proposal governance, codex snapshot, quality gates |
-| `xray-skills` | Skill invocation, agent-specific knowledge servers |
+| `xray-skills` | Skill invocation, 45 knowledge skills |
+| `xray-orchestrator` | thinDispatch routing, AsideContext, confidence gate |
 | `xray-enforcer` | Codex compliance enforcement, rule validation |
-| `xray-orchestrator` | Multi-agent workflow coordination, task delegation |
+| `xray-researcher` | Codebase exploration, memory-routing enrichment |
+| `xray-code-review` | Proposal quality, code review deliberation |
+| `xray-architect-tools` | System design, architecture decisions |
 
 ## CLI Commands
 
 | Command | Description |
 |---------|-------------|
 | `xray setup` | Full framework setup (hooks, Hermes, symlinks) |
-| `xray validate` | Validate codex compliance |
+| `xray validate` | Wear check (pack paths, Cursor hooks, mill) — not leftover init.sh |
 | `xray codex check` | Check codex rules |
 | `xray health` | Framework health check |
 | `xray hooks` | Manage lifecycle hooks |
@@ -25,7 +30,7 @@ Quick reference for the 0xRay AI orchestration framework (v16 MCPs-centric three
 
 xray operates under the three-subsystem model: Inference + External Governance (Dynamo Solar SSOT) + Autonomous Engine (thinDispatch 7-flow in MCP orchestrator). All actions are validated against the Universal Development Codex before execution.
 
-**Codex**: The codex lives in `.xray/codex.json` and enforces 60 terms across all agent interactions.
+**Codex**: `.xray/codex.json` — **69 terms** across all agent interactions.
 
 ## thinDispatch Routing
 

package/xray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "4.0.21",
+  "version": "4.0.22",
   "description": "0xRay Framework - Unified Feature Configuration",
   "suit_temperament": {
     "profile": "auto",

package/dist/mcps/shared/prompt-security-validator.d.ts

@@ -1,44 +0,0 @@
-/**
- * 0xRay Framework - AI Prompt Security Validator
- *
- * Specialized security validation for AI agent prompts and responses
- * Prevents prompt injection, system prompt override, and malicious inputs
- */
-export interface PromptSecurityConfig {
-    enabled: boolean;
-    maxPromptLength: number;
-    allowedPatterns: RegExp[];
-    blockedPatterns: RegExp[];
-    sanitizeLevel: "basic" | "strict" | "paranoid";
-}
-export interface SecurityValidationResult {
-    isSafe: boolean;
-    violations: string[];
-    sanitizedPrompt?: string | undefined;
-    riskLevel: "low" | "medium" | "high" | "critical";
-}
-export declare class PromptSecurityValidator {
-    private config;
-    constructor(config?: Partial<PromptSecurityConfig>);
-    /**
-     * Validate AI prompt for security issues
-     */
-    validatePrompt(prompt: string): SecurityValidationResult;
-    /**
-     * Check for system prompt override attempts
-     */
-    private containsSystemPromptOverride;
-    /**
-     * Check for prompt injection attempts
-     */
-    private containsInjectionAttempts;
-    /**
-     * Sanitize prompt by removing dangerous patterns
-     */
-    private sanitizePrompt;
-    /**
-     * Validate agent response for safety
-     */
-    validateResponse(response: string): SecurityValidationResult;
-}
-export declare const promptSecurityValidator: PromptSecurityValidator;

package/dist/mcps/shared/prompt-security-validator.js

@@ -1,148 +0,0 @@
-/**
- * 0xRay Framework - AI Prompt Security Validator
- *
- * Specialized security validation for AI agent prompts and responses
- * Prevents prompt injection, system prompt override, and malicious inputs
- */
-export class PromptSecurityValidator {
-    config;
-    constructor(config = {}) {
-        this.config = {
-            enabled: true,
-            maxPromptLength: 10000,
-            allowedPatterns: [],
-            blockedPatterns: [
-                /system\s+prompt\s*[:=]/gi,
-                /ignore\s+previous\s+instructions/gi,
-                /you\s+are\s+now\s+/gi,
-                /forget\s+your\s+previous\s+/gi,
-                /override\s+(your\s+)?instructions/gi,
-                /jailbreak/gi,
-                /dan.*mode/gi,
-            ],
-            sanitizeLevel: "strict",
-            ...config,
-        };
-    }
-    /**
-     * Validate AI prompt for security issues
-     */
-    validatePrompt(prompt) {
-        if (!this.config.enabled) {
-            return { isSafe: true, violations: [], riskLevel: "low" };
-        }
-        const violations = [];
-        let riskLevel = "low";
-        // Length check
-        if (prompt.length > this.config.maxPromptLength) {
-            violations.push(`Prompt too long: ${prompt.length} > ${this.config.maxPromptLength}`);
-            riskLevel = "medium";
-        }
-        // Blocked pattern check
-        for (const pattern of this.config.blockedPatterns) {
-            if (pattern.test(prompt)) {
-                violations.push(`Blocked pattern detected: ${pattern.source}`);
-                riskLevel = "high";
-            }
-        }
-        // Advanced pattern analysis
-        if (this.containsSystemPromptOverride(prompt)) {
-            violations.push("Potential system prompt override attempt");
-            riskLevel = "critical";
-        }
-        if (this.containsInjectionAttempts(prompt)) {
-            violations.push("Potential prompt injection detected");
-            riskLevel = "high";
-        }
-        const isSafe = violations.length === 0;
-        const sanitizedPrompt = isSafe ? undefined : this.sanitizePrompt(prompt);
-        return {
-            isSafe,
-            violations,
-            sanitizedPrompt,
-            riskLevel,
-        };
-    }
-    /**
-     * Check for system prompt override attempts
-     */
-    containsSystemPromptOverride(prompt) {
-        const overrideIndicators = [
-            "you are now",
-            "act as if",
-            "pretend to be",
-            "role-play as",
-            "from now on you are",
-            "ignore your system",
-            "override your",
-            "new personality",
-            "different role",
-        ];
-        const lowerPrompt = prompt.toLowerCase();
-        return overrideIndicators.some((indicator) => lowerPrompt.includes(indicator));
-    }
-    /**
-     * Check for prompt injection attempts
-     */
-    containsInjectionAttempts(prompt) {
-        const injectionIndicators = [
-            "ignore previous",
-            "forget instructions",
-            "start over",
-            "new conversation",
-            "reset context",
-            "clear memory",
-            "delete history",
-        ];
-        const lowerPrompt = prompt.toLowerCase();
-        return injectionIndicators.some((indicator) => lowerPrompt.includes(indicator));
-    }
-    /**
-     * Sanitize prompt by removing dangerous patterns
-     */
-    sanitizePrompt(prompt) {
-        let sanitized = prompt;
-        // Remove blocked patterns
-        for (const pattern of this.config.blockedPatterns) {
-            sanitized = sanitized.replace(pattern, "[REDACTED]");
-        }
-        // Additional sanitization based on level
-        if (this.config.sanitizeLevel === "strict" ||
-            this.config.sanitizeLevel === "paranoid") {
-            // Remove potential code execution
-            sanitized = sanitized.replace(/```[\s\S]*?```/g, "[CODE_BLOCK_REMOVED]");
-            // Remove potential file system access
-            sanitized = sanitized.replace(/(?:\/|\\)\.\.(?:\/|\\)/g, "/");
-            // Remove potential command injection
-            sanitized = sanitized.replace(/[;&|`$()]/g, "");
-        }
-        if (this.config.sanitizeLevel === "paranoid") {
-            // Extreme sanitization - only allow alphanumeric, spaces, and basic punctuation
-            sanitized = sanitized.replace(/[^a-zA-Z0-9\s.,!?-]/g, "");
-        }
-        return sanitized;
-    }
-    /**
-     * Validate agent response for safety
-     */
-    validateResponse(response) {
-        // Similar validation but focused on response safety
-        const violations = [];
-        // Check for potentially harmful content
-        if (response.includes("system prompt") ||
-            response.includes("internal instructions")) {
-            violations.push("Response contains sensitive system information");
-        }
-        // Check for code execution attempts
-        if (/eval\s*\(|Function\s*\(/.test(response)) {
-            violations.push("Response contains potential code execution");
-        }
-        return {
-            isSafe: violations.length === 0,
-            violations,
-            riskLevel: violations.length > 0 ? "medium" : "low",
-        };
-    }
-}
-// Export singleton instance
-export const promptSecurityValidator = new PromptSecurityValidator();

package/dist/mcps/shared/security-scanner.d.ts

@@ -1,119 +0,0 @@
-/**
- * 0xRay Framework - Security Scanner
- *
- * Automated security vulnerability scanning and compliance validation
- * Integrates with security tools and provides comprehensive security reports
- */
-export interface SecurityScanConfig {
-    enabled: boolean;
-    tools: {
-        npmAudit: boolean;
-        trivy: boolean;
-        eslintSecurity: boolean;
-        dependencyCheck: boolean;
-    };
-    severityThreshold: "low" | "moderate" | "high" | "critical";
-    reportPath: string;
-    failOnVulnerabilities: boolean;
-}
-export interface SecurityVulnerability {
-    id: string;
-    title: string;
-    description: string;
-    severity: "low" | "moderate" | "high" | "critical";
-    package?: string;
-    version?: string;
-    cve?: string;
-    url?: string;
-    recommendation: string;
-}
-export interface SecurityReport {
-    timestamp: string;
-    duration: number;
-    tools: {
-        npmAudit: SecurityVulnerability[];
-        trivy: SecurityVulnerability[];
-        eslintSecurity: SecurityVulnerability[];
-        dependencyCheck: SecurityVulnerability[];
-    };
-    summary: {
-        totalVulnerabilities: number;
-        bySeverity: Record<string, number>;
-        byTool: Record<string, number>;
-    };
-    recommendations: string[];
-    compliant: boolean;
-}
-export declare class SecurityScanner {
-    private config;
-    constructor(config?: Partial<SecurityScanConfig>);
-    /**
-     * Run comprehensive security scan
-     */
-    runSecurityScan(): Promise<SecurityReport>;
-    /**
-     * Run npm audit
-     */
-    private runNpmAudit;
-    /**
-     * Run Trivy security scan
-     */
-    private runTrivyScan;
-    /**
-     * Run ESLint security rules
-     */
-    private runEslintSecurity;
-    /**
-     * Run OWASP Dependency Check
-     */
-    private runDependencyCheck;
-    /**
-     * Generate comprehensive security report
-     */
-    private generateReport;
-    /**
-     * Generate security recommendations
-     */
-    private generateRecommendations;
-    /**
-     * Save report to file
-     */
-    private saveReport;
-    /**
-     * Log security scan results
-     */
-    private logResults;
-    /**
-     * Map npm audit severity levels
-     */
-    private mapNpmSeverity;
-    /**
-     * Map Trivy severity levels
-     */
-    private mapTrivySeverity;
-    /**
-     * Map Dependency Check severity levels
-     */
-    private mapDependencyCheckSeverity;
-    /**
-     * Validate AI prompt security
-     */
-    validatePrompt(prompt: string): Promise<{
-        isSafe: boolean;
-        violations: string[];
-        riskLevel: string;
-    }>;
-    /**
-     * Validate AI response security
-     */
-    validateResponse(response: string): Promise<{
-        isSafe: boolean;
-        violations: string[];
-        riskLevel: string;
-    }>;
-    /**
-     * Create empty report when scanning is disabled
-     */
-    private createEmptyReport;
-}
-export declare const securityScanner: SecurityScanner;