0xray 2.0.1 → 2.1.0

package/src/mcps/security-scan.server.ts

@@ -39,7 +39,7 @@ interface SecuritySummaryResults {
   summary: string;
 }
 
-class StringRaySecurityScanServer {
+class XraySecurityScanServer {
   private server: Server;
 
   constructor() {
@@ -644,8 +644,8 @@ ${results.recommendations.map((r) => `• ${r}`).join("\n") || "No recommendatio
 
 // Start the server if run directly
 if (import.meta.url === `file://${process.argv[1]}`) {
-  const server = new StringRaySecurityScanServer();
+  const server = new XraySecurityScanServer();
   server.run().catch((error) => frameworkLogger.log("mcps/security-scan", "run", "error", { error: String(error) }));
 }
 
-export { StringRaySecurityScanServer };
+export { XraySecurityScanServer };

package/src/mcps/simulation/server-simulations.ts

@@ -86,7 +86,7 @@ export const researcherSimulations: Record<string, SimulatorFunction> = {
  * Framework Help server simulations
  */
 export const frameworkHelpSimulations: Record<string, SimulatorFunction> = {
-  strray_get_capabilities: (): MCPToolResult => ({
+  xray_get_capabilities: (): MCPToolResult => ({
     content: [
       {
         type: 'text',
@@ -118,7 +118,7 @@ export const frameworkHelpSimulations: Record<string, SimulatorFunction> = {
     ],
   }),
 
-  strray_get_commands: (): MCPToolResult => ({
+  xray_get_commands: (): MCPToolResult => ({
     content: [
       {
         type: 'text',
@@ -146,7 +146,7 @@ framework-reporting-system - Generate comprehensive framework reports
     ],
   }),
 
-  strray_explain_capability: (): MCPToolResult => ({
+  xray_explain_capability: (): MCPToolResult => ({
     content: [
       {
         type: 'text',

package/src/opencode/codex.codex

@@ -1,5 +1,5 @@
 {
-  "version": "2.0.0",
+  "version": "2.1.0",
   "terms": [
      1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68
   ],

package/src/skills/hermes-agent/SKILL.md

@@ -1,21 +1,21 @@
 ---
 name: hermes-agent
-description: Manage StringRay framework from Hermes Agent via the native strray-hermes plugin. Covers the 4 plugin tools (validate, codex_check, health, hooks), lifecycle hooks, slash commands, bridge architecture, and CLI fallback.
+description: Manage 0xRay framework from Hermes Agent via the native strray-hermes plugin. Covers the 4 plugin tools (validate, codex_check, health, hooks), lifecycle hooks, slash commands, bridge architecture, and CLI fallback.
 version: 2.1.0
-author: StringRay AI
+author: 0xRay AI
 metadata:
   hermes:
-    tags: [StringRay, Plugin, Validation, Codex, GitHooks, Bridge]
+    tags: [0xRay, Plugin, Validation, Codex, GitHooks, Bridge]
     related_skills: []
 ---
 
-# StringRay Hermes Plugin (strray-hermes)
+# 0xRay Hermes Plugin (strray-hermes)
 
-Native Hermes plugin providing StringRay framework integration — quality gates, codex enforcement, git hooks, and full pre/post processing pipeline. Runs via a Node.js bridge to compiled framework components.
+Native Hermes plugin providing 0xRay framework integration — quality gates, codex enforcement, git hooks, and full pre/post processing pipeline. Runs via a Node.js bridge to compiled framework components.
 
 ## When to Use
 
-- User asks about StringRay health, validation, or codex checks
+- User asks about 0xRay health, validation, or codex checks
 - User wants to install/manage git hooks for automated enforcement
 - User asks about the plugin's tools, hooks, or slash commands
 - User asks about bridge errors or framework not loading
@@ -28,7 +28,7 @@ Native Hermes plugin providing StringRay framework integration — quality gates
 ├── __init__.py         # Plugin registration, hooks, slash commands
 ├── tools.py            # 4 tool handlers (validate, codex_check, health, hooks)
 ├── schemas.py          # JSON schemas the LLM sees
-├── bridge.mjs          # Node.js bridge to compiled StringRay framework
+├── bridge.mjs          # Node.js bridge to compiled 0xRay framework
 ├── plugin.yaml         # Plugin metadata (name, version, tools, hooks)
 ├── types.py            # TypeScript-equivalent type definitions
 ├── after-install.md    # Post-install instructions
@@ -43,7 +43,7 @@ Native Hermes plugin providing StringRay framework integration — quality gates
 
 **Fallback:** When bridge is unavailable, tools fall back to `npx 0xray` CLI commands.
 
-**Config path resolution:** `STRRAY_CONFIG_DIR/` > `.strray/` > `.opencode/strray/` > built-in defaults.
+**Config path resolution:** `STRRAY_CONFIG_DIR/` > `.xray/` > `.opencode/xray/` > built-in defaults.
 
 ## 4 Tools
 
@@ -90,7 +90,7 @@ Returns: framework status, version, component availability, node version.
 
 ### strray_hooks
 
-Manage StringRay git hooks (install, uninstall, list, status).
+Manage 0xRay git hooks (install, uninstall, list, status).
 
 ```
 strray_hooks(action="install")
@@ -122,7 +122,7 @@ Fires before ANY tool executes:
 1. Tracks session stats
 2. Logs tool-start event to `logs/framework/plugin-tool-events.log`
 3. For code-producing tools (write_file, patch, execute_code, write, edit): runs quality gate + pre-processors via bridge
-4. For other tools: nudges when a StringRay MCP alternative exists (e.g., grep → search_codebase, eslint → strray_lint)
+4. For other tools: nudges when a 0xRay MCP alternative exists (e.g., grep → search_codebase, eslint → strray_lint)
 
 ### post_tool_call
 
@@ -164,7 +164,7 @@ All logs go to `logs/framework/` in the project root:
 
 | User Says | Tool / Command |
 |----------|---------------|
-| "Is StringRay working?" | `strray_health()` or `/strray status` |
+| "Is 0xRay working?" | `strray_health()` or `/strray status` |
 | "Check these files before I commit" | `strray_validate(files=[...], operation="commit")` |
 | "Is this code codex compliant?" | `strray_codex_check(code=..., operation="create")` |
 | "Set up git hooks" | `strray_hooks(action="install")` |

package/src/skills/storyteller/SKILL.md

@@ -96,7 +96,7 @@ codex_terms: [5, 7, 32]  # Related Codex term numbers
 ```markdown
 ## What Next?
 
-- Related Codex terms: [codex.json](../../.opencode/strray/codex.json)
+- Related Codex terms: [codex.json](../../.opencode/xray/codex.json)
 - Next story to write: [suggestion]
 ```
 

package/src/skills/xray-orchestrator/SKILL.md

@@ -0,0 +1,141 @@
+---
+name: xray-orchestrator
+description: |
+  Main orchestration skill for xray agents.
+  Provides commands to coordinate agent work and invoke xray APIs
+  through the local HTTP API server.
+metadata:
+  openclaw:
+    primaryEnv: XRAY_API_KEY
+    emoji: 🤖
+  author: xray
+  tags:
+    - ai
+    - orchestration
+    - agent
+user-invocable: true
+---
+
+# xray Orchestrator Commands
+
+## /xray
+
+Display xray status and available commands.
+
+**Usage:** `/xray`
+
+**Example:**
+```
+/xray
+```
+
+## /xray-status
+
+Get detailed status of xray integration including connection status.
+
+**Usage:** `/xray-status`
+
+**Example:**
+```
+/xray-status
+```
+
+## /xray-analyze
+
+Analyze code using xray code analysis capabilities.
+
+**Usage:** `/xray-analyze <file-path>`
+
+**Arguments:**
+- `file-path`: Path to file to analyze (required)
+
+**Example:**
+```
+/xray-analyze src/index.ts
+```
+
+## /xray-code
+
+Perform code review on a file.
+
+**Usage:** `/xray-code <file-path> [options]`
+
+**Arguments:**
+- `file-path`: Path to file to review (required)
+- `--fix`: Attempt to fix issues automatically (optional)
+
+**Example:**
+```
+/xray-code src/utils/helper.ts
+/xray-code src/utils/helper.ts --fix
+```
+
+## /xray-file
+
+Read file using xray file tools.
+
+**Usage:** `/xray-file <file-path> [line-start:line-end]`
+
+**Arguments:**
+- `file-path`: Path to file to read (required)
+- `line-start:line-end`: Line range to read (optional)
+
+**Example:**
+```
+/xray-file src/index.ts
+/xray-file src/index.ts 1:50
+```
+
+## /xray-exec
+
+Execute arbitrary xray command or script.
+
+**Usage:** `/xray-exec <command>`
+
+**Arguments:**
+- `command`: Command to execute (required)
+
+**Example:**
+```
+/xray-exec list files src/
+```
+
+## /xray-help
+
+Show this help message.
+
+**Usage:** `/xray-help [command]`
+
+**Arguments:**
+- `command`: Specific command to get help for (optional)
+
+**Example:**
+```
+/xray-help
+/xray-help xray-analyze
+```
+
+# Implementation Notes
+
+This skill acts as the main interface between OpenClaw channels and xray agents.
+It processes user commands and forwards them to the xray API server running on localhost:18431.
+
+## API Endpoints
+
+- `POST /api/agent/invoke` - Invoke xray agent
+- `GET /api/agent/status` - Get agent status
+- `GET /health` - Health check
+
+## Authentication
+
+The skill reads the `XRAY_API_KEY` environment variable for authentication.
+
+## Error Handling
+
+All errors are caught and formatted as user-friendly messages.
+Detailed error information is logged for debugging.
+
+# Dependencies
+
+- xray API server running on localhost:18431
+- XRAY_API_KEY environment variable

package/src/skills/xray-orchestrator/index.ts

@@ -0,0 +1,268 @@
+/**
+ * xray Orchestrator Skill
+ *
+ * OpenClaw skill that provides xray orchestration commands.
+ *
+ * @version 1.0.0
+ * @since 2026-03-14
+ */
+
+const API_BASE = process.env.XRAY_API_URL || 'http://localhost:18431';
+const API_KEY = process.env.XRAY_API_KEY;
+
+interface ParsedArgs extends Record<string, unknown> {
+  _?: string[];
+}
+
+function parseArgs(input: string): { command: string; args: ParsedArgs } {
+  const parts = input.trim().split(/\s+/);
+  const command = parts[0] || '';
+  const args: ParsedArgs = {};
+
+  for (const part of parts.slice(1)) {
+    if (part.startsWith('--')) {
+      const key = part.slice(2);
+      args[key] = true;
+    } else if (part.includes(':')) {
+      const colonIdx = part.indexOf(':');
+      const key = part.slice(0, colonIdx);
+      const value = part.slice(colonIdx + 1);
+      if (key && value) args[key] = value;
+    } else if (!args._) {
+      args._ = [];
+      args._.push(part);
+    } else {
+      args._.push(part);
+    }
+  }
+
+  return { command, args };
+}
+
+async function callAPI(endpoint: string, data?: Record<string, unknown>): Promise<Record<string, unknown>> {
+  const headers: Record<string, string> = {
+    'Content-Type': 'application/json',
+  };
+
+  if (API_KEY) {
+    headers['Authorization'] = `Bearer ${API_KEY}`;
+  }
+
+  const response = await fetch(`${API_BASE}${endpoint}`, {
+    method: data ? 'POST' : 'GET',
+    headers,
+    body: data ? JSON.stringify(data) : null,
+  });
+
+  if (!response.ok) {
+    const error = await response.json().catch(() => ({ error: 'Unknown error' }));
+    throw new Error(error.error || `HTTP ${response.status}`);
+  }
+
+  return response.json();
+}
+
+export async function handleSkill(input: string): Promise<string> {
+  const { command, args } = parseArgs(input);
+
+  try {
+    switch (command.toLowerCase()) {
+      // xray primary
+      case 'xray':
+      case 'xray-status':
+        return await handleStatus();
+
+      case 'xray-analyze':
+        return await handleAnalyze(args);
+
+      case 'xray-code':
+        return await handleCodeReview(args);
+
+      case 'xray-file':
+        return await handleFileRead(args);
+
+      case 'xray-exec':
+        return await handleExec(args);
+
+      case 'xray-help':
+        return handleHelp(args._ as string | undefined);
+
+      default:
+        return formatHelp();
+    }
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return `❌ Error: ${message}`;
+  }
+}
+
+async function handleStatus(): Promise<string> {
+  const health = await callAPI('/health') as { status: string; version: string; uptime: number };
+
+  return `🤖 xray Status
+
+• Status: ${health.status}
+• Version: ${health.version}
+• Uptime: ${formatUptime(health.uptime)}
+
+Use /xray-help for available commands.`;
+}
+
+async function handleAnalyze(args: Record<string, unknown>): Promise<string> {
+  const filePath = (args._ as string[])?.[0];
+
+  if (!filePath) {
+    return '❌ Usage: /xray-analyze <file-path>';
+  }
+
+  const result = await callAPI('/api/agent/invoke', {
+    command: 'analyze',
+    args: { filePath },
+  }) as { success: boolean; result?: unknown; error?: string };
+
+  if (!result.success) {
+    return `❌ Analysis failed: ${result.error}`;
+  }
+
+  return `✅ Analysis complete for ${filePath}\n\n${JSON.stringify(result.result, null, 2)}`;
+}
+
+async function handleCodeReview(args: Record<string, unknown>): Promise<string> {
+  const filePath = (args._ as string[])?.[0];
+  const fix = args.fix === true;
+
+  if (!filePath) {
+    return '❌ Usage: /xray-code <file-path> [--fix]';
+  }
+
+  const result = await callAPI('/api/agent/invoke', {
+    command: 'code-review',
+    args: { filePath, fix },
+  }) as { success: boolean; result?: unknown; error?: string };
+
+  if (!result.success) {
+    return `❌ Code review failed: ${result.error}`;
+  }
+
+  return `✅ Code review complete for ${filePath}\n\n${JSON.stringify(result.result, null, 2)}`;
+}
+
+async function handleFileRead(args: Record<string, unknown>): Promise<string> {
+  const rest = args._ as string[] | undefined;
+  const filePath = rest?.[0];
+  const range = rest?.[1];
+
+  if (!filePath) {
+    return '❌ Usage: /xray-file <file-path> [line-start:line-end]';
+  }
+
+  let lineRange: { start?: number; end?: number } | undefined;
+  if (range?.includes(':')) {
+    const [rawStart, rawEnd] = range.split(':');
+    lineRange = {};
+    if (rawStart) lineRange.start = Number(rawStart);
+    if (rawEnd) lineRange.end = Number(rawEnd);
+  }
+
+  const result = await callAPI('/api/agent/invoke', {
+    command: 'read',
+    args: { filePath, ...lineRange },
+  }) as { success: boolean; result?: unknown; error?: string };
+
+  if (!result.success) {
+    return `❌ File read failed: ${result.error}`;
+  }
+
+  return `📄 ${filePath}\n\`\`\`\n${result.result}\n\`\`\``;
+}
+
+async function handleExec(args: Record<string, unknown>): Promise<string> {
+  const command = (args._ as string[])?.[0];
+
+  if (!command) {
+    return '❌ Usage: /xray-exec <command>';
+  }
+
+  const result = await callAPI('/api/agent/invoke', {
+    command: 'exec',
+    args: { command },
+  }) as { success: boolean; result?: unknown; error?: string };
+
+  if (!result.success) {
+    return `❌ Execution failed: ${result.error}`;
+  }
+
+  return `✅ Command executed\n\n${JSON.stringify(result.result, null, 2)}`;
+}
+
+function handleHelp(command?: string): string {
+  if (command) {
+    switch (command) {
+      case 'xray-analyze':
+        return `📖 /xray-analyze <file-path>
+
+Analyze code in a file.
+
+Example: /xray-analyze src/index.ts`;
+
+      case 'xray-code':
+        return `📖 /xray-code <file-path> [--fix]
+
+Perform code review on a file.
+Use --fix to attempt automatic fixes.
+
+Example: /xray-code src/utils/helper.ts
+Example: /xray-code src/utils/helper.ts --fix`;
+
+      case 'xray-file':
+        return `📖 /xray-file <file-path> [line-start:line-end]
+
+Read a file.
+Optionally specify line range.
+
+Example: /xray-file src/index.ts
+Example: /xray-file src/index.ts 1:50`;
+
+      case 'xray-exec':
+        return `📖 /xray-exec <command>
+
+Execute an arbitrary command.
+
+Example: /xray-exec list files src/`;
+
+      default:
+        return `Unknown command: ${command}`;
+    }
+  }
+
+  return formatHelp();
+}
+
+function formatHelp(): string {
+  return `🤖 xray Orchestrator
+
+Available Commands:
+• /xray - Show status
+• /xray-analyze <file> - Analyze code
+• /xray-code <file> [--fix] - Code review
+• /xray-file <file> [lines] - Read file
+• /xray-exec <command> - Execute command
+• /xray-help [command] - Show help
+
+Use /xray-help <command> for detailed usage.`;
+}
+
+function formatUptime(ms: number): string {
+  const seconds = Math.floor(ms / 1000);
+  const minutes = Math.floor(seconds / 60);
+  const hours = Math.floor(minutes / 60);
+  const days = Math.floor(hours / 24);
+
+  if (days > 0) return `${days}d ${hours % 24}h`;
+  if (hours > 0) return `${hours}h ${minutes % 60}m`;
+  if (minutes > 0) return `${minutes}m`;
+  return `${seconds}s`;
+}
+
+// Export for OpenClaw
+export default { handleSkill };