XRay: properly specify vendored framework and public headers