strray-ai 1.22.59 → 1.22.60

package/.opencode/AGENTS-consumer.md

@@ -651,4 +651,4 @@ npx strray-ai --version
 - [Troubleshooting](https://github.com/htafolla/stringray/blob/master/docs/TROUBLESHOOTING.md)
 
 ---
-**Version**: 1.22.58 | [GitHub](https://github.com/htafolla/stringray)
+**Version**: 1.22.59 | [GitHub](https://github.com/htafolla/stringray)

package/.opencode/codex.codex

@@ -1,5 +1,5 @@
 {
-  "version": "1.22.58",
+  "version": "1.22.59",
   "terms": [
     1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60
   ],

package/.opencode/commands/dependency-audit.md

@@ -0,0 +1,184 @@
+# Dependency Audit Command
+
+## Description
+
+Comprehensive dependency analysis and security audit for all project dependencies across npm, pip, cargo, and other package managers.
+
+## Usage
+
+/dependency-audit [options]
+
+## Options
+
+- `--managers=<list>`: Package managers to audit (npm,pip,cargo,go,maven)
+- `--severity=<level>`: Minimum severity to report (low,medium,high,critical)
+- `--fix`: Auto-fix issues where possible
+- `--update`: Update dependencies to latest compatible versions
+- `--report=<format>`: Output format (json, html, markdown, sarif)
+
+## Implementation
+
+### 1. Dependency Discovery
+
+- **Package Managers**: Auto-detect and scan all used managers
+- **Lock Files**: Parse package-lock.json, requirements.txt, Cargo.lock, etc.
+- **Transitive Dependencies**: Analyze entire dependency tree
+- **Dev Dependencies**: Separate analysis for dev vs production deps
+
+### 2. Security Vulnerability Scanning
+
+- **CVE Database**: Check against NIST NVD
+- **Advisory Sources**: NPM, PyPI, RustSec, GitHub Advisories
+- **Custom Rules**: Project-specific security policies
+- **License Compliance**: Open source license validation
+
+### 3. Version Analysis
+
+- **Outdated Packages**: Identify packages with available updates
+- **Compatibility**: Check version compatibility across dependencies
+- **Breaking Changes**: Identify potentially breaking updates
+- **Maintenance Status**: Check package maintenance activity
+
+### 4. Performance Impact
+
+- **Bundle Size**: Impact of dependencies on bundle size
+- **Load Time**: Network loading performance
+- **Tree Shaking**: Dead code elimination effectiveness
+- **Caching**: Browser caching efficiency
+
+### 5. Quality Metrics
+
+- **Maintenance**: Commit frequency, issue response time
+- **Popularity**: Download counts, GitHub stars
+- **Security**: Security audit history
+- **Compatibility**: Platform and Node.js version support
+
+## Output Formats
+
+### JSON Report
+
+```json
+{
+  "timestamp": "2024-01-09T12:00:00Z",
+  "summary": {
+    "totalDeps": 245,
+    "vulnerable": 3,
+    "outdated": 12,
+    "unmaintained": 1
+  },
+  "vulnerabilities": [
+    {
+      "package": "lodash",
+      "version": "1.22.59",
+      "severity": "high",
+      "cve": "CVE-2021-23337",
+      "description": "Command injection vulnerability"
+    }
+  ],
+  "recommendations": [...]
+}
+```
+
+### SARIF Report
+
+Security-focused format for CI/CD integration:
+
+```json
+{
+  "version": "1.22.59",
+  "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
+  "runs": [
+    {
+      "tool": {
+        "driver": {
+          "name": "Dependency Audit",
+          "version": "1.22.59"
+        }
+      },
+      "results": [...]
+    }
+  ]
+}
+```
+
+### HTML Dashboard
+
+Interactive dashboard with:
+
+- Vulnerability timeline
+- Dependency tree visualization
+- Risk assessment charts
+- Remediation recommendations
+
+## Remediation Actions
+
+### Automatic Fixes
+
+- **Patch Updates**: Apply security patches
+- **Version Pinning**: Lock to secure versions
+- **Dependency Removal**: Remove unused dependencies
+- **Alternative Packages**: Suggest secure alternatives
+
+### Manual Actions Required
+
+- **Code Changes**: Update API usage for breaking changes
+- **Configuration Updates**: Modify config for new versions
+- **Testing**: Validate functionality after updates
+- **Documentation**: Update docs for API changes
+
+## Integration
+
+### CI/CD Pipeline
+
+```yaml
+- name: Dependency Audit
+  run: /dependency-audit --severity=medium --report=sarif
+  continue-on-error: false
+```
+
+### Pre-commit Hook
+
+```bash
+#!/bin/bash
+/dependency-audit --managers=npm --severity=high
+if [ $? -ne 0 ]; then
+  echo "Dependency audit failed. Fix vulnerabilities before committing."
+  exit 1
+fi
+```
+
+### Scheduled Scans
+
+- Daily security scans
+- Weekly dependency updates
+- Monthly comprehensive audits
+
+## Configuration
+
+Project-specific settings in `.dependency-audit.json`:
+
+```json
+{
+  "managers": {
+    "npm": {
+      "ignore": ["devDependencies"],
+      "allowList": ["lodash@4.17.21"]
+    },
+    "pip": {
+      "index-url": "https://pypi.org/simple/"
+    }
+  },
+  "policies": {
+    "maxAge": "1y",
+    "minDownloads": 1000,
+    "requireSbom": true
+  }
+}
+```
+
+## Dependencies
+
+- Node.js 18+
+- Package managers (npm, yarn, pnpm, pip, cargo, etc.)
+- Security databases (NVD, OSV)
+- Vulnerability scanners (npm audit, safety, cargo audit)

package/.opencode/commands/lint.md

@@ -0,0 +1,11 @@
+# Lint Command
+
+## Description
+
+Run linting checks on the codebase.
+
+## Steps
+
+1. Execute ESLint
+2. Check TypeScript compilation
+3. Report findings

package/.opencode/commands/pre-commit-introspection.sh

@@ -1,9 +1,9 @@
 #!/bin/bash
 
-# 0xRay AI v1.22.58 - Pre-commit Introspection
+# 0xRay AI v1.22.59 - Pre-commit Introspection
 # Comprehensive code quality and architecture validation
 
-echo "🔬 0xRay AI v1.22.58 - Pre-commit Introspection"
+echo "🔬 0xRay AI v1.22.59 - Pre-commit Introspection"
 echo "============================================================"
 
 # Initialize analysis status

package/.opencode/enforcer-config.json

@@ -1,6 +1,6 @@
 {
   "framework": "0xRay 1.0.0",
-  "version": "1.22.58",
+  "version": "1.22.59",
   "description": "Codex-compliant framework configuration for Credible UI project",
   "thresholds": {
     "bundleSize": {
@@ -220,7 +220,7 @@
       }
     },
     "codex": {
-      "version": "1.22.58",
+      "version": "1.22.59",
       "terms": [
         1,
         2,

package/.opencode/skills/registry.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.22.58",
+  "version": "1.22.59",
   "description": "0xRay Skills Registry - recommended skill sources for consumers",
   "sources": [
     {

package/.opencode/strray/codex.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.22.58",
+  "version": "1.22.59",
   "lastUpdated": "2026-03-09",
   "errorPreventionTarget": 0.996,
   "terms": {

package/.opencode/strray/config.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./config.schema.json",
-  "version": "1.22.58",
+  "version": "1.22.59",
   "description": "0xRay Framework - Token Management & Performance Configuration",
   
   "token_management": {

package/.opencode/strray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "1.22.58",
+  "version": "1.22.59",
   "description": "0xRay Framework - Unified Feature Configuration",
   "token_optimization": {
     "enabled": true,
@@ -101,7 +101,7 @@
     "max_cache_size_mb": 25
   },
   "agent_spawn": {
-    "enabled": false,
+    "enabled": true,
     "max_concurrent": 8,
     "max_per_type": 3,
     "spawn_cooldown_ms": 500,
@@ -410,7 +410,7 @@
   },
   "inference_governance": {
     "description": "External governance MCP integration for inference-driven proposals via chrono-warp-drive Dynamo endpoint",
-    "enabled": false,
+    "enabled": true,
     "endpoint_url": "https://mcp-production-80e2.up.railway.app/governance",
     "request_timeout_ms": 10000,
     "min_confidence_threshold": 0.5,

package/.opencode/strray/integrations.json

@@ -4,19 +4,19 @@
     "openclaw": {
       "enabled": false,
       "type": "external-service",
-      "version": "1.22.58",
+      "version": "1.22.59",
       "config": {}
     },
     "python-bridge": {
       "enabled": false,
       "type": "protocol-bridge",
-      "version": "1.22.58",
+      "version": "1.22.59",
       "config": {}
     },
     "react": {
       "enabled": false,
       "type": "framework-adapter",
-      "version": "1.22.58",
+      "version": "1.22.59",
       "config": {}
     }
   }

package/.strray/codex.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.22.58",
+  "version": "1.22.59",
   "lastUpdated": "2026-03-09",
   "errorPreventionTarget": 0.996,
   "terms": {

package/.strray/config.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./config.schema.json",
-  "version": "1.22.58",
+  "version": "1.22.59",
   "description": "0xRay Framework - Token Management & Performance Configuration",
   
   "token_management": {

package/.strray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "1.22.58",
+  "version": "1.22.59",
   "description": "0xRay Framework - Unified Feature Configuration",
   "token_optimization": {
     "enabled": true,
@@ -101,7 +101,7 @@
     "max_cache_size_mb": 25
   },
   "agent_spawn": {
-    "enabled": false,
+    "enabled": true,
     "max_concurrent": 8,
     "max_per_type": 3,
     "spawn_cooldown_ms": 500,
@@ -410,7 +410,7 @@
   },
   "inference_governance": {
     "description": "External governance MCP integration for inference-driven proposals via chrono-warp-drive Dynamo endpoint",
-    "enabled": false,
+    "enabled": true,
     "endpoint_url": "https://mcp-production-80e2.up.railway.app/governance",
     "request_timeout_ms": 10000,
     "min_confidence_threshold": 0.5,

package/.strray/inference/governance-model.json

@@ -0,0 +1,7 @@
+{
+  "cycleId": "cycle-1778626230357",
+  "proposals": 3,
+  "votes": 3,
+  "phase": "complete",
+  "duration": 636
+}

package/.strray/inference/governance-state.json

@@ -13,5 +13,5 @@
     "agentParticipation": {},
     "averageVoterTurnout": 0
   },
-  "exportedAt": "2026-05-11T16:10:58.756Z"
+  "exportedAt": "2026-05-19T14:23:38.774Z"
 }