0xray 3.0.11 → 3.0.14

package/dist/integrations/hermes-agent/after-install.md

@@ -1,4 +1,4 @@
-# Xray Hermes Plugin Installed
+# StringRay Hermes Plugin Installed
 
 **Restart your Hermes session** for the plugin to take effect.
 
@@ -6,10 +6,10 @@
 
 | Component | Description |
 |-----------|-------------|
-| `xray_validate` | Pre-commit validation with quality gates |
-| `xray_codex_check` | Code review against 60 Codex error-prevention rules |
-| `xray_health` | Framework health check |
-| `xray_hooks` | Git hooks management (install, uninstall, list, status) |
+| `strray_validate` | Pre-commit validation with quality gates |
+| `strray_codex_check` | Code review against 60 Codex error-prevention rules |
+| `strray_health` | Framework health check |
+| `strray_hooks` | Git hooks management (install, uninstall, list, status) |
 | `pre_tool_call` hook | Quality gates + nudges before every tool call |
 | `post_tool_call` hook | Post-processors after every tool call |
 
@@ -27,24 +27,24 @@ The plugin can install git hooks for automated validation:
 ### Install Hooks
 
 ```
-/xray hooks install
+/strray hooks install
 ```
 
 Or use the tool directly:
 ```
-xray_hooks(action="install")
+strray_hooks(action="install")
 ```
 
 ### Check Hook Status
 
 ```
-/xray hooks status
+/strray hooks status
 ```
 
 ### Uninstall Hooks
 
 ```
-/xray hooks uninstall
+/strray hooks uninstall
 ```
 
 ## Quick Test
@@ -52,20 +52,20 @@ xray_hooks(action="install")
 After restarting Hermes, try:
 
 ```
-/xray status
-/xray stats
+/strray status
+/strray stats
 ```
 
-Or use the tools directly — `xray_health` will confirm the bridge is connected.
+Or use the tools directly — `strray_health` will confirm the bridge is connected.
 
 ## MCP Servers
 
-The plugin works alongside Xray's MCP servers (if configured in your
+The plugin works alongside StringRay's MCP servers (if configured in your
 Hermes config). The plugin's native tools provide offline/offline-first
 validation, while MCP servers offer deeper framework integration.
 
 ## Files
 
-The plugin lives at `~/.hermes/plugins/xray-hermes/`. It is auto-updated
+The plugin lives at `~/.hermes/plugins/strray-hermes/`. It is auto-updated
 when you run `npm install` or `npm update` in a project with `0xray`
 as a dependency.

package/dist/integrations/hermes-agent/bridge.mjs

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
 /**
- * Xray Framework Bridge for Hermes Agent
+ * StringRay Framework Bridge for Hermes Agent
  *
- * Provides direct access to Xray framework components
+ * Provides direct access to StringRay framework components
  * (ProcessorManager, QualityGate, StateManager) from Python.
  * Uses JSON stdin/stdout protocol for IPC.
  *
@@ -42,18 +42,9 @@ import { homedir } from "os";
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 
-// Redirect console methods to stderr so only the final JSON result goes to stdout.
-// Any dynamically loaded module using console.log/info/debug/warn will then
-// write diagnostic output to stderr, keeping stdout clean for JSON.parse.
-const _stderrWrite = process.stderr.write.bind(process.stderr);
-console.log = (...args) => { _stderrWrite(args.join(' ') + '\n'); };
-console.info = (...args) => { _stderrWrite('[INFO] ' + args.join(' ') + '\n'); };
-console.debug = (...args) => { _stderrWrite('[DEBUG] ' + args.join(' ') + '\n'); };
-console.warn = (...args) => { _stderrWrite('[WARN] ' + args.join(' ') + '\n'); };
-
 // ── Framework components (lazy-loaded) ───────────────────────
 let ProcessorManager = null;
-let XrayStateManager = null;
+let StrRayStateManager = null;
 let featuresConfigLoader = null;
 let runQualityGateWithLogging = null;
 let enforcerValidators = null;
@@ -62,7 +53,7 @@ let frameworkLoadAttempted = false;
 
 // ── Project root detection ───────────────────────────────────
 function findProjectRoot() {
-  const envHome = process.env.XRAY_HOME;
+  const envHome = process.env.STRRAY_HOME;
   if (envHome && existsSync(join(envHome, "package.json"))) return envHome;
 
   const candidates = [
@@ -158,11 +149,11 @@ async function loadFramework(projectRoot) {
         }
       }
 
-      if (!XrayStateManager) {
+      if (!StrRayStateManager) {
         const smPath = join(distDir, "state", "state-manager.js");
         if (existsSync(smPath)) {
           const sm = await import(smPath);
-          XrayStateManager = sm.XrayStateManager || sm.StrRayStateManager;
+          StrRayStateManager = sm.StrRayStateManager;
         }
       }
 
@@ -239,15 +230,15 @@ async function runQualityGateCheck(context, projectRoot, logDir) {
 
 // ── Processor Pipeline ───────────────────────────────────────
 async function runProcessors(tool, args, phase, projectRoot, logDir) {
-    if (!ProcessorManager || !XrayStateManager) {
+  if (!ProcessorManager || !StrRayStateManager) {
     return { ran: false, reason: "framework modules not loaded" };
   }
 
   const logger = new BridgeLogger(logDir);
 
   try {
-    const stateDir = join(projectRoot, ".xray", "state");
-    const stateManager = new XrayStateManager(stateDir);
+    const stateDir = join(projectRoot, ".strray", "state");
+    const stateManager = new StrRayStateManager(stateDir);
     const processorManager = new ProcessorManager(stateManager);
 
     // Register processors matching OpenCode plugin
@@ -299,12 +290,12 @@ async function runProcessors(tool, args, phase, projectRoot, logDir) {
       });
     }
 
-    let rawResults;
+    let results;
     if (phase === "pre") {
       if (typeof processorManager.executePreProcessors !== "function") {
         return { ran: false, reason: "executePreProcessors not available" };
       }
-      rawResults = await processorManager.executePreProcessors({
+      results = await processorManager.executePreProcessors({
         tool,
         args: args || {},
         context: {
@@ -317,7 +308,7 @@ async function runProcessors(tool, args, phase, projectRoot, logDir) {
       if (typeof processorManager.executePostProcessors !== "function") {
         return { ran: false, reason: "executePostProcessors not available" };
       }
-      rawResults = await processorManager.executePostProcessors(tool, {
+      results = await processorManager.executePostProcessors(tool, {
         directory: projectRoot,
         operation: tool,
         filePath: args?.filePath || args?.path,
@@ -330,23 +321,17 @@ async function runProcessors(tool, args, phase, projectRoot, logDir) {
       }, []);
     }
 
-    // Normalize: executePreProcessors returns { success, results: [...] }
-    // executePostProcessors returns [...] directly
-    const results = Array.isArray(rawResults) ? rawResults : (rawResults.results || []);
-    const allSuccess = Array.isArray(rawResults) ? results.every((r) => r.success) : rawResults.success;
-
-    const details = results.map((r) => ({
-      name: r.processorName || r.name,
-      success: r.success,
-      error: r.error,
-    }));
-
-    // Log individual processor results
-    const phaseTag = phase === "pre" ? "pre-processor" : "post-processor";
-    for (const d of details) {
-      const status = d.success ? "ok" : `FAILED${d.error ? `: ${d.error}` : ""}`;
-      logToActivity(logDir, `[${phaseTag}] ${d.name} — ${status}`);
-    }
+    const allSuccess = Array.isArray(results)
+      ? results.every((r) => r.success)
+      : results.success;
+
+    const details = Array.isArray(results)
+      ? results.map((r) => ({
+          name: r.processorName || r.name,
+          success: r.success,
+          error: r.error,
+        }))
+      : [];
 
     return {
       ran: true,
@@ -368,7 +353,7 @@ async function handleHealth(input) {
   const components = {
     qualityGate: !!runQualityGateWithLogging,
     processorManager: !!ProcessorManager,
-    stateManager: !!XrayStateManager,
+    stateManager: !!StrRayStateManager,
     featuresConfig: !!featuresConfigLoader,
   };
 
@@ -413,10 +398,7 @@ async function handlePreProcess(input, projectRoot, logDir) {
 
   const duration = Date.now() - startTime;
 
-  logToActivity(logDir, `pre-process: complete duration=${duration}ms quality=${qualityResult.passed} processors=${processorResult.processorCount || 0}`);
-  if (processorResult.ran) {
-    logToActivity(logDir, `[pre-processors] ${processorResult.processorCount} processor(s)`);
-  }
+  logToActivity(logDir, `pre-process: complete duration=${duration}ms quality=${qualityResult.passed}`);
 
   return {
     passed: qualityResult.passed,
@@ -447,9 +429,6 @@ async function handlePostProcess(input, projectRoot, logDir) {
   });
 
   logToActivity(logDir, `post-process: complete duration=${duration}ms processors=${processorResult.success}`);
-  if (processorResult.ran) {
-    logToActivity(logDir, `[post-processors] ${processorResult.processorCount} processor(s)`);
-  }
 
   return {
     duration,
@@ -507,7 +486,21 @@ async function handleCodexCheck(input, projectRoot, logDir) {
   // Phase 2: Enforcement validators (deep code analysis — security, quality, architecture)
   //    Use ValidatorRegistry directly instead of RuleEnforcer.validateOperation()
   //    to avoid the dependency chain cascade that blocks validators on snippet analysis.
-  //    Run all registered validators — v3: full registry
+  //    Only run content-analysis validators — skip project-level validators that
+  //    require full context (docs, tests, CI, package.json) and always fail on snippets.
+  const SNIPPET_SAFE_RULES = new Set([
+    "security-by-design",
+    "input-validation",
+    "clean-debug-logs",
+    "console-log-usage",
+    "no-duplicate-code",
+    "loop-safety",
+    "no-over-engineering",
+    "single-responsibility",
+    "error-resolution",
+    "module-system-consistency",
+  ]);
+
   if (enforcerValidators && codeLen > 0) {
     try {
       const ctx = { operation: "write", newCode: code, files: [] };
@@ -515,9 +508,18 @@ async function handleCodexCheck(input, projectRoot, logDir) {
       let enforcerViolations = 0;
 
       for (const v of validators) {
-        // Run all registered validators — v3: full registry
-        if (focusAreas && focusAreas !== "all" && Array.isArray(focusAreas) && focusAreas.length > 0) {
-          if (!focusAreas.includes(v.category)) continue;
+        // Only run snippet-safe validators, or respect focus areas
+        if (!SNIPPET_SAFE_RULES.has(v.ruleId)) {
+          // Still run if focus area explicitly requests this category
+          if (focusAreas && focusAreas !== "all" && Array.isArray(focusAreas)) {
+            if (focusAreas.includes(v.category)) {
+              // Fall through to validate
+            } else {
+              continue;
+            }
+          } else {
+            continue;
+          }
         }
 
         try {
@@ -538,7 +540,7 @@ async function handleCodexCheck(input, projectRoot, logDir) {
       }
 
       enforcerRan = true;
-      logToActivity(logDir, `codex-check: Validators ran against ${validators.length} rules, ${enforcerViolations} violations`);
+      logToActivity(logDir, `codex-check: Validators ran against ${validators.length} rules (${SNIPPET_SAFE_RULES.size} snippet-safe), ${enforcerViolations} violations`);
     } catch (e) {
       logToActivity(logDir, `codex-check: Validator error: ${e.message}`);
     }
@@ -561,7 +563,7 @@ function handleHooks(input, projectRoot) {
   const { action, hooks } = input;
   const hookTypes = hooks || ["pre-commit", "post-commit", "pre-push", "post-push"];
   const gitHooksDir = join(projectRoot, ".git", "hooks");
-  const xrayHooksDir = join(projectRoot, "hooks");
+  const strrayHooksDir = join(projectRoot, "hooks");
 
   if (!existsSync(gitHooksDir)) {
     return { error: "Not a git repository — no .git/hooks directory" };
@@ -573,7 +575,7 @@ function handleHooks(input, projectRoot) {
   if (action === "list" || action === "status") {
     for (const hookName of hookTypes) {
       const gitHook = join(gitHooksDir, hookName);
-      const xrayHook = join(xrayHooksDir, hookName);
+      const strrayHook = join(strrayHooksDir, hookName);
 
       if (!existsSync(gitHook)) {
         result.missing.push(hookName);
@@ -590,8 +592,8 @@ function handleHooks(input, projectRoot) {
         }
       }
 
-      // Check if xray source hook exists
-      if (!existsSync(xrayHook)) {
+      // Check if strray source hook exists
+      if (!existsSync(strrayHook)) {
         result.stale.push(hookName);
       }
     }
@@ -601,7 +603,7 @@ function handleHooks(input, projectRoot) {
       action,
       hooks: result,
       gitHooksDir,
-      xrayHooksDir,
+      strrayHooksDir,
     };
   }
 
@@ -612,7 +614,7 @@ function handleHooks(input, projectRoot) {
     const errors = [];
 
     for (const hookName of hookTypes) {
-      const src = join(xrayHooksDir, hookName);
+      const src = join(strrayHooksDir, hookName);
       const dst = join(gitHooksDir, hookName);
 
       if (!existsSync(src)) {
@@ -621,11 +623,11 @@ function handleHooks(input, projectRoot) {
       }
 
       try {
-        // Backup existing non-xray hooks
+        // Backup existing non-strray hooks
         if (existsSync(dst)) {
           const content = readFileSync(dst, "utf-8");
           if (!content.includes("StringRay") && !content.includes("strray") && !content.includes("run-hook.js")) {
-            renameSync(dst, `${dst}.xray-backup`);
+            renameSync(dst, `${dst}.strray-backup`);
           } else {
             unlinkSync(dst);
           }
@@ -657,15 +659,15 @@ function handleHooks(input, projectRoot) {
 
     for (const hookName of hookTypes) {
       const dst = join(gitHooksDir, hookName);
-      const backup = `${dst}.xray-backup`;
+      const backup = `${dst}.strray-backup`;
 
       if (!existsSync(dst)) continue;
 
       try {
         const content = readFileSync(dst, "utf-8");
-        const isXray = content.includes("StringRay") || content.includes("strray") || content.includes("run-hook.js");
+        const isStrray = content.includes("StringRay") || content.includes("strray") || content.includes("run-hook.js");
 
-        if (isXray || lstatSync(dst).isSymbolicLink()) {
+        if (isStrray || lstatSync(dst).isSymbolicLink()) {
           unlinkSync(dst);
 
           // Restore backup if exists

package/dist/integrations/hermes-agent/conftest.py

@@ -0,0 +1,14 @@
+"""Pytest configuration for Hermes Agent plugin tests.
+
+Prevents pytest from collecting __init__.py as a test module,
+since it uses relative imports that fail outside the Hermes runtime.
+"""
+
+collect_ignore = ["__init__.py"]
+
+
+def pytest_ignore_collect(collection_path, config):
+    """Ignore __init__.py in this directory."""
+    if collection_path.name == "__init__.py":
+        return True
+    return None

package/dist/integrations/hermes-agent/plugin.yaml

@@ -1,12 +1,12 @@
-name: 0xray-hermes
+name: strray-hermes
 version: 2.2.0
 description: 0xRay AI integration plugin — auto-enforcement hooks, quality gates, git hooks, and tool awareness for Hermes Agent
 author: 0xRay AI
 provides_tools:
-  - xray_validate
-  - xray_codex_check
-  - xray_health
-  - xray_hooks
+  - strray_validate
+  - strray_codex_check
+  - strray_health
+  - strray_hooks
 provides_hooks:
   - pre_tool_call
   - post_tool_call

package/dist/integrations/hermes-agent/schemas.py

@@ -1,9 +1,9 @@
 """Tool schemas — what the LLM sees."""
 
-XRAY_VALIDATE = {
-    "name": "xray_validate",
+STRRAY_VALIDATE = {
+    "name": "strray_validate",
     "description": (
-        "Run Xray pre-commit validation on specified files. "
+        "Run StringRay pre-commit validation on specified files. "
         "Checks codex compliance, rule validation, and quality gates. "
         "Use this before committing any code changes. Returns pass/fail "
         "with actionable remediation for any violations."
@@ -26,8 +26,8 @@ XRAY_VALIDATE = {
     },
 }
 
-XRAY_CODEX_CHECK = {
-    "name": "xray_codex_check",
+STRRAY_CODEX_CHECK = {
+    "name": "strray_codex_check",
     "description": (
         "Validate code against the Universal Development Codex (60 error-prevention terms). "
         "Checks error-handling, type-safety, performance, security, and architecture patterns. "
@@ -57,12 +57,12 @@ XRAY_CODEX_CHECK = {
     },
 }
 
-XRAY_HEALTH = {
-    "name": "xray_health",
+STRRAY_HEALTH = {
+    "name": "strray_health",
     "description": (
-        "Run Xray framework health check. Returns version, agent count, "
+        "Run StringRay framework health check. Returns version, agent count, "
         "MCP server status, and enforcement statistics. Use to verify the "
-        "Xray integration is working correctly."
+        "StringRay integration is working correctly."
     ),
     "parameters": {
         "type": "object",
@@ -70,10 +70,10 @@ XRAY_HEALTH = {
     },
 }
 
-XRAY_HOOKS = {
-    "name": "xray_hooks",
+STRRAY_HOOKS = {
+    "name": "strray_hooks",
     "description": (
-        "Manage Xray git hooks (install, uninstall, list, status). "
+        "Manage StringRay git hooks (install, uninstall, list, status). "
         "Installs pre-commit, post-commit, pre-push, and post-push hooks "
         "that run TypeScript validation, Codex checks, and monitoring. "
         "Use 'install' to set up all hooks, 'list' to see current status."