0xray 4.0.33 → 4.0.35

package/dist/cli/commands/analytics-status.js

@@ -1,68 +0,0 @@
-/**
- * Analytics Status CLI Command
- *
- * Shows current consent and analytics status
- *
- * Usage: npx 0xray analytics status
- */
-import { program } from "commander";
-import { ConsentManager } from "../../analytics/consent-manager.js";
-import { getConfigDir } from "../../core/config-paths.js";
-export const analyticsStatusCommand = program
-    .command("analytics status")
-    .description("Show current analytics consent status")
-    .option("-v, --verbose", "Show detailed information", false)
-    .action(async (options) => {
-    console.log("📊 0xRay Central Analytics Status\n");
-    try {
-        const consentManager = new ConsentManager();
-        const status = await consentManager.getStatus();
-        // Show main status
-        const enabledEmoji = status.analyticsEnabled ? "✅ ENABLED" : "❌ DISABLED";
-        console.log(`🎯 Status: ${enabledEmoji}\n`);
-        // Show project ID
-        console.log(`📋 Project Information:`);
-        console.log(`  Project ID: ${status.projectId}`);
-        console.log(`  Consent Version: ${status.consentVersion}`);
-        console.log(`  Consent Date: ${status.consentDate.toISOString()}`);
-        if (status.lastOptOut) {
-            console.log(`  Last Opt-Out: ${status.lastOptOut.toISOString()}`);
-        }
-        // Show category status
-        console.log(`\n📂 Categories Status:`);
-        const categories = consentManager.getCategories();
-        categories.forEach(cat => {
-            const emoji = cat.enabled ? "✅" : "❌";
-            console.log(`  ${emoji} ${cat.name.padEnd(15)} ${cat.description}`);
-        });
-        if (options.verbose) {
-            // Show configuration file location
-            const configDir = getConfigDir();
-            console.log(`\n📁 Configuration Files:`);
-            console.log(`  Consent Config: ${configDir}/consent.json`);
-            console.log(`  Submission Queue: ${configDir}/analytics/submission-queue.json`);
-            // Show detailed information
-            console.log(`\n📊 Detailed Information:`);
-            const enabledCats = categories.filter(c => c.enabled);
-            console.log(`  Enabled Categories: ${enabledCats.length}/${categories.length}`);
-            console.log(`  Analytics Active: ${status.analyticsEnabled}`);
-            if (status.analyticsEnabled) {
-                console.log(`\n💡 Your project is contributing to community learning!`);
-                console.log(`   • View what's being submitted: npx 0xray analytics preview`);
-                console.log(`   • Get community insights: npx 0xray analytics recommendations`);
-                console.log(`   • Check performance: npx 0xray analytics`);
-            }
-            else {
-                console.log(`\n💡 Analytics is currently disabled.`);
-                console.log(`   • Enable anytime: npx 0xray analytics enable`);
-                console.log(`   • Learn more: docs/architecture/central-analytics-store.md`);
-            }
-        }
-    }
-    catch (error) {
-        console.error("❌ Failed to get analytics status:", error instanceof Error ? error.message : String(error));
-        console.error("\n💡 Try: npx 0xray analytics status --help");
-        process.exit(1);
-    }
-});
-export default analyticsStatusCommand;

package/dist/cli/commands/enforce.d.ts

@@ -1,12 +0,0 @@
-interface EnforceOptions {
-    phase: string;
-    tool?: string;
-    args?: string;
-    result?: string;
-    error?: string;
-    files?: string;
-    code?: string;
-    focusAreas?: string;
-}
-export declare function enforceCommand(options: EnforceOptions): Promise<void>;
-export {};

package/dist/cli/commands/enforce.js

@@ -1,78 +0,0 @@
-import { beforeToolHook, afterToolHook } from "../../integrations/enforcement-gate.js";
-import { frameworkLogger } from "../../core/framework-logger.js";
-import { mcpClientManager } from "../../mcps/mcp-client.js";
-export async function enforceCommand(options) {
-    const phase = options.phase || "health";
-    let parsedArgs = null;
-    if (options.args) {
-        try {
-            parsedArgs = JSON.parse(options.args);
-        }
-        catch {
-            parsedArgs = {};
-        }
-    }
-    try {
-        switch (phase) {
-            case "pre": {
-                const result = await beforeToolHook(options.tool || "unknown", parsedArgs);
-                process.stdout.write(JSON.stringify(result) + "\n");
-                break;
-            }
-            case "post": {
-                let parsedResult = null;
-                if (options.result) {
-                    try {
-                        parsedResult = JSON.parse(options.result);
-                    }
-                    catch { }
-                }
-                const result = await afterToolHook(options.tool || "unknown", parsedArgs, parsedResult, options.error || null);
-                process.stdout.write(JSON.stringify(result) + "\n");
-                break;
-            }
-            case "validate": {
-                let files = [];
-                if (options.files) {
-                    try {
-                        files = JSON.parse(options.files);
-                    }
-                    catch { }
-                }
-                const result = await mcpClientManager.callServerTool("enforcer", "run-pre-commit-validation", { files, operation: "commit" });
-                process.stdout.write(JSON.stringify(result) + "\n");
-                break;
-            }
-            case "codex-check": {
-                let focusAreas = [];
-                if (options.focusAreas) {
-                    try {
-                        focusAreas = JSON.parse(options.focusAreas);
-                    }
-                    catch { }
-                }
-                const result = await mcpClientManager.callServerTool("enforcer", "codex-enforcement", {
-                    operation: "write",
-                    newCode: options.code || "",
-                    focusAreas,
-                });
-                process.stdout.write(JSON.stringify(result) + "\n");
-                break;
-            }
-            case "health": {
-                const result = await mcpClientManager.callServerTool("enforcer", "get-enforcement-status", {});
-                process.stdout.write(JSON.stringify(result) + "\n");
-                break;
-            }
-            default:
-                process.stderr.write(`Unknown phase: ${phase}\n`);
-                process.exit(1);
-        }
-    }
-    catch (err) {
-        const errMsg = err instanceof Error ? err.message : String(err);
-        await frameworkLogger.log("enforce-command", "execution-error", "error", { phase, error: errMsg });
-        const fallback = { status: "error", phase, error: errMsg };
-        process.stdout.write(JSON.stringify(fallback) + "\n");
-    }
-}

package/dist/cli/commands/govern.d.ts

@@ -1,29 +0,0 @@
-/**
- * xray govern — the primary CLI command for the v3 nucleus
- *
- * Usage:
- *   xray govern [options]
- *
- * All existing direct commands still work (backward compat with deprecation notice).
- */
-interface GovernOptions {
-    status?: boolean;
-    audit?: boolean;
-    mcp?: string;
-    pluginInstall?: string;
-    proposals?: string;
-    skillInstall?: string;
-    skillRegistry?: string;
-    storyteller?: string;
-    mcpList?: boolean;
-    mcpStatus?: boolean;
-    mcpInstall?: string;
-    mcpRemove?: string;
-    publishAgent?: boolean;
-    archiveLogs?: boolean;
-    credibleInit?: string;
-    antigravityStatus?: boolean;
-    [key: string]: unknown;
-}
-export declare function governCommand(options: GovernOptions): Promise<void>;
-export {};

package/dist/cli/commands/govern.js

@@ -1,149 +0,0 @@
-/**
- * xray govern — the primary CLI command for the v3 nucleus
- *
- * Usage:
- *   xray govern [options]
- *
- * All existing direct commands still work (backward compat with deprecation notice).
- */
-import { resolve, join } from 'path';
-import { readFileSync, existsSync } from 'fs';
-import { spawn } from 'child_process';
-export async function governCommand(options) {
-    if (options.status) {
-        const { statusCommand } = await import('./status.js');
-        await statusCommand();
-        return;
-    }
-    if (options.audit) {
-        const { securityAuditCommand } = await import('./security-audit.js');
-        await securityAuditCommand();
-        return;
-    }
-    if (options.mcp) {
-        const serverMap = {
-            governance: 'dist/mcps/governance.server.js',
-            skills: 'dist/mcps/knowledge-skills/skill-invocation.server.js',
-        };
-        const relPath = serverMap[options.mcp];
-        if (!relPath) {
-            console.error(`Unknown MCP server: ${options.mcp}. Use: governance, skills`);
-            process.exit(1);
-        }
-        const packageJsonPath = resolve(import.meta.url.replace(/^file:/, ''), '..', '..', 'package.json');
-        const pkg = JSON.parse(readFileSync(packageJsonPath, 'utf-8'));
-        const packageRoot = resolve(packageJsonPath, '..', pkg.xray?.dist ? join('', pkg.xray.dist) : 'dist', '..');
-        const serverPath = resolve(join(packageRoot, relPath));
-        if (!existsSync(serverPath)) {
-            console.error(`MCP server not found at ${serverPath}. Is xray installed correctly?`);
-            process.exit(1);
-        }
-        const env = { ...process.env };
-        const child = spawn(process.execPath, [serverPath], { stdio: 'inherit', env });
-        child.on('exit', (code) => process.exit(code ?? 0));
-        return;
-    }
-    if (options.pluginInstall) {
-        const { pluginInstallCommand } = await import('./plugin-commands.js');
-        await pluginInstallCommand(options.pluginInstall);
-        return;
-    }
-    if (options.proposals) {
-        const { handleGovernRequest } = await import('../../nucleus/index.js');
-        let proposals;
-        try {
-            proposals = JSON.parse(options.proposals);
-        }
-        catch {
-            console.error('Invalid JSON in --proposals. Expected a JSON string with a "proposals" array.');
-            console.error('Example: xray govern --proposals \'[{"type":"fix","title":"Test","description":"A test"}]\'');
-            process.exit(1);
-        }
-        const result = await handleGovernRequest(proposals);
-        console.log(JSON.stringify(result, null, 2));
-        return;
-    }
-    if (options.skillInstall !== undefined) {
-        const { skillInstallCommand } = await import('./skill-install.js');
-        await skillInstallCommand(options.skillInstall || undefined);
-        return;
-    }
-    if (options.skillRegistry !== undefined) {
-        const { skillRegistryCommand } = await import('./skill-install.js');
-        await skillRegistryCommand(options.skillRegistry || undefined);
-        return;
-    }
-    if (options.storyteller) {
-        const { storytellerCommand } = await import('./storyteller.js');
-        await storytellerCommand(options.storyteller);
-        return;
-    }
-    if (options.mcpList) {
-        const { listMCPsCommand } = await import('./mcp-install.js');
-        listMCPsCommand();
-        return;
-    }
-    if (options.mcpStatus) {
-        const { showMCPStatusCommand } = await import('./mcp-install.js');
-        showMCPStatusCommand();
-        return;
-    }
-    if (options.mcpInstall) {
-        const { installMCPCommand } = await import('./mcp-install.js');
-        await installMCPCommand(options.mcpInstall);
-        return;
-    }
-    if (options.mcpRemove) {
-        const { removeMCPCommand } = await import('./mcp-install.js');
-        removeMCPCommand(options.mcpRemove);
-        return;
-    }
-    if (options.publishAgent) {
-        const { publishAgentCommand } = await import('./publish-agent.js');
-        await publishAgentCommand();
-        return;
-    }
-    if (options.archiveLogs) {
-        const { archiveLogFiles } = await import('./archive-logs.js');
-        const result = await archiveLogFiles(undefined, `govern-${Date.now()}`);
-        console.log(`\nResults:`);
-        console.log(`  Archived: ${result.archived} files`);
-        if (result.errors.length > 0) {
-            console.log(`  Errors: ${result.errors.length}`);
-            result.errors.forEach((e) => console.log(`    - ${e}`));
-            process.exit(1);
-        }
-        return;
-    }
-    if (options.credibleInit !== undefined) {
-        const { credibleInitCommand } = await import('./credible-init.js');
-        await credibleInitCommand();
-        return;
-    }
-    if (options.antigravityStatus) {
-        const { antigravityStatusCommand } = await import('./antigravity-status.js');
-        await antigravityStatusCommand();
-        return;
-    }
-    console.log('xray govern — the governance kernel\n');
-    console.log('Usage: xray govern [options]\n');
-    console.log('Options:');
-    console.log('  --status                   Show framework status');
-    console.log('  --audit                    Run security audit');
-    console.log('  --mcp <server>             Run an MCP server (governance, skills)');
-    console.log('  --plugin-install <name>    Install a plugin');
-    console.log('  --proposals <json>         Run governance on JSON proposals');
-    console.log('  --skill-install [source]   Install skills from registry');
-    console.log('  --skill-registry [action]   Manage skill registry sources');
-    console.log('  --storyteller <type>       Write a story (reflection, saga, journey, narrative)');
-    console.log('  --mcp-list                 List available MCP servers');
-    console.log('  --mcp-status               Show installed MCP servers');
-    console.log('  --mcp-install <name>       Install an MCP server');
-    console.log('  --mcp-remove <name>        Remove an MCP server');
-    console.log('  --publish-agent            Publish an agent to AgentStore');
-    console.log('  --archive-logs             Archive log files');
-    console.log('  --credible-init [name]     Initialize Credible Pod');
-    console.log('  --antigravity-status       Show installed skills status');
-    console.log('  -h, --help                 Show this help\n');
-    console.log('All existing commands still work: xray status, xray security-audit, etc.');
-}

package/dist/cli/commands/security-audit.d.ts

@@ -1,23 +0,0 @@
-/**
- * Security Audit CLI Command
- *
- * Comprehensive security audit with vulnerability scanning,
- * compliance checking, and weighted voting for architectural decisions.
- *
- * Usage:
- *   npx 0xray security-audit           # Quick audit
- *   npx 0xray security-audit --deep    # Deep audit with all standards
- *   npx 0xray security-audit --output ./reports/security.md
- *   npx 0xray security-audit --no-remediation
- *   npx 0xray security-audit --no-voting
- *
- * Options:
- *   --deep           Deep scan with all compliance standards (OWASP, CWE, NIST, ISO, PCI)
- *   --output <path>  Output report to file (JSON or Markdown)
- *   --format <fmt>   Output format: json, markdown (default: markdown)
- *   --no-remediation Skip automated remediation analysis
- *   --no-voting      Disable weighted voting for architectural decisions
- *   --project <path> Project path to audit (default: current directory)
- */
-export declare function securityAuditCommand(args?: string[]): Promise<void>;
-export default securityAuditCommand;

package/dist/cli/commands/security-audit.js

@@ -1,219 +0,0 @@
-/**
- * Security Audit CLI Command
- *
- * Comprehensive security audit with vulnerability scanning,
- * compliance checking, and weighted voting for architectural decisions.
- *
- * Usage:
- *   npx 0xray security-audit           # Quick audit
- *   npx 0xray security-audit --deep    # Deep audit with all standards
- *   npx 0xray security-audit --output ./reports/security.md
- *   npx 0xray security-audit --no-remediation
- *   npx 0xray security-audit --no-voting
- *
- * Options:
- *   --deep           Deep scan with all compliance standards (OWASP, CWE, NIST, ISO, PCI)
- *   --output <path>  Output report to file (JSON or Markdown)
- *   --format <fmt>   Output format: json, markdown (default: markdown)
- *   --no-remediation Skip automated remediation analysis
- *   --no-voting      Disable weighted voting for architectural decisions
- *   --project <path> Project path to audit (default: current directory)
- */
-import { join } from "path";
-import { writeFileSync, existsSync, mkdirSync } from "fs";
-import { frameworkLogger } from "../../core/framework-logger.js";
-import { createSecurityAuditSystem, runQuickSecurityAudit, runDeepSecurityAudit, } from "../../security/comprehensive-security-audit.js";
-function parseArgs(args) {
-    const options = {
-        deep: false,
-        output: null,
-        format: "markdown",
-        enableRemediation: true,
-        enableVoting: true,
-        projectPath: null,
-    };
-    for (let i = 0; i < args.length; i++) {
-        const arg = args[i];
-        switch (arg) {
-            case "--deep":
-                options.deep = true;
-                break;
-            case "--output":
-            case "-o":
-                options.output = args[++i] || null;
-                break;
-            case "--format":
-            case "-f":
-                const format = args[++i]?.toLowerCase();
-                if (format === "json" || format === "markdown") {
-                    options.format = format;
-                }
-                break;
-            case "--no-remediation":
-                options.enableRemediation = false;
-                break;
-            case "--no-voting":
-                options.enableVoting = false;
-                break;
-            case "--project":
-            case "-p":
-                options.projectPath = args[++i] || null;
-                break;
-            case "--help":
-            case "-h":
-                printHelp();
-                process.exit(0);
-                break;
-        }
-    }
-    return options;
-}
-function printHelp() {
-    console.log(`
-0xRay Security Audit Command
-
-Comprehensive security audit with vulnerability scanning, compliance checking,
-and weighted voting for architectural decisions.
-
-Usage:
-  npx 0xray security-audit [options]
-
-Options:
-  --deep              Deep scan with all compliance standards
-  --output, -o       Output report to file
-  --format, -f       Output format: json, markdown (default: markdown)
-  --no-remediation   Skip automated remediation analysis
-  --no-voting        Disable weighted voting for architectural decisions
-  --project, -p      Project path to audit
-  --help, -h         Show this help message
-
-Examples:
-  npx 0xray security-audit
-  npx 0xray security-audit --deep
-  npx 0xray security-audit --output ./security-report.md
-  npx 0xray security-audit --format json --output ./report.json
-  `);
-}
-async function runSecurityAudit(options) {
-    const projectPath = options.projectPath || process.cwd();
-    const config = {
-        projectPath,
-        scanDepth: options.deep ? "deep" : "shallow",
-        includeDependencies: true,
-        complianceStandards: options.deep
-            ? ["owasp-top-10", "cwe", "nist", "iso-27001", "pci-dss"]
-            : ["owasp-top-10", "cwe"],
-        enableAutoRemediation: options.enableRemediation,
-        enableWeightedVoting: options.enableVoting,
-    };
-    await frameworkLogger.log("security-audit-cli", "audit-started", "info", {
-        projectPath,
-        deep: options.deep,
-        format: options.format,
-    });
-    if (options.deep) {
-        return runDeepSecurityAudit(projectPath, options.output || undefined);
-    }
-    return runQuickSecurityAudit(projectPath);
-}
-function formatReport(report, format) {
-    if (format === "json") {
-        return JSON.stringify(report, null, 2);
-    }
-    const system = createSecurityAuditSystem({
-        projectPath: report.metadata.projectPath,
-        enableWeightedVoting: false,
-    });
-    return system.generateMarkdownReport(report);
-}
-function printSummary(report) {
-    const scoreEmoji = report.summary.securityScore >= 90
-        ? "🟢"
-        : report.summary.securityScore >= 70
-            ? "🟡"
-            : report.summary.securityScore >= 50
-                ? "🟠"
-                : "🔴";
-    console.log("");
-    console.log("╔══════════════════════════════════════════════════════════╗");
-    console.log("║         0xRay Security Audit Report                 ║");
-    console.log("╚══════════════════════════════════════════════════════════╝");
-    console.log("");
-    console.log(`  📊 Security Score: ${scoreEmoji} ${report.summary.securityScore}/100`);
-    console.log(`  📁 Files Scanned: ${report.metadata.totalFilesScanned}`);
-    console.log(`  ⏱️  Duration: ${report.metadata.duration}ms`);
-    console.log("");
-    console.log("  Vulnerability Summary:");
-    console.log(`    🚨 Critical: ${report.summary.bySeverity.critical}`);
-    console.log(`    🔴 High:     ${report.summary.bySeverity.high}`);
-    console.log(`    🟡 Medium:   ${report.summary.bySeverity.medium}`);
-    console.log(`    🟢 Low:      ${report.summary.bySeverity.low}`);
-    console.log(`    ℹ️  Info:    ${report.summary.bySeverity.info}`);
-    console.log("");
-    if (report.compliance.length > 0) {
-        console.log("  Compliance Results:");
-        for (const result of report.compliance) {
-            const status = result.passed ? "✅" : "❌";
-            console.log(`    ${status} ${result.standard}: ${result.score}/100`);
-        }
-        console.log("");
-    }
-    if (report.remediation.totalIssues > 0) {
-        console.log("  Remediation Plan:");
-        console.log(`    Total Issues: ${report.remediation.totalIssues}`);
-        console.log(`    Automatable:  ${report.remediation.automatable}`);
-        console.log(`    Manual Fix:   ${report.remediation.manualRequired}`);
-        console.log(`    Est. Time:    ${report.remediation.estimatedFixTime}`);
-        console.log("");
-    }
-    if (report.agentConsensus) {
-        console.log("  Agent Consensus:");
-        console.log(`    Agreement: ${report.agentConsensus.averageAgreement}%`);
-        console.log(`    Agents: ${report.agentConsensus.participatingAgents.join(", ")}`);
-        console.log("");
-    }
-    console.log(`  Audit ID: ${report.metadata.auditId}`);
-    console.log(`  Generated: ${report.metadata.timestamp.toISOString()}`);
-    console.log("");
-}
-function saveReport(content, outputPath) {
-    const dir = join(outputPath, "..");
-    if (!existsSync(dir)) {
-        mkdirSync(dir, { recursive: true });
-    }
-    writeFileSync(outputPath, content, "utf-8");
-}
-export async function securityAuditCommand(args = process.argv.slice(2)) {
-    try {
-        const options = parseArgs(args);
-        const report = await runSecurityAudit(options);
-        printSummary(report);
-        if (options.output) {
-            const content = formatReport(report, options.format);
-            saveReport(content, options.output);
-            console.log(`  📄 Report saved to: ${options.output}`);
-            console.log("");
-        }
-        await frameworkLogger.log("security-audit-cli", "audit-completed", "info", {
-            auditId: report.metadata.auditId,
-            vulnerabilities: report.summary.totalVulnerabilities,
-            securityScore: report.summary.securityScore,
-            output: options.output,
-        });
-        process.exit(report.summary.bySeverity.critical > 0 ? 2 : 0);
-    }
-    catch (error) {
-        await frameworkLogger.log("security-audit-cli", "audit-failed", "error", {
-            error: String(error),
-        });
-        console.error("");
-        console.error("  ❌ Security audit failed:");
-        console.error(`     ${error}`);
-        console.error("");
-        process.exit(1);
-    }
-}
-export default securityAuditCommand;
-if (import.meta.url === `file://${process.argv[1]}`) {
-    securityAuditCommand();
-}

package/dist/cli/server.d.ts

@@ -1 +0,0 @@
-export {};