0xray 3.5.4 → 4.0.0

package/.mcp.json

@@ -2,34 +2,78 @@
   "mcpServers": {
     "xray-governance": {
       "command": "npx",
-      "args": ["-y", "0xray", "mcp", "governance"],
+      "args": [
+        "-y",
+        "0xray",
+        "mcp",
+        "governance"
+      ],
       "env": {
         "XRAY_FORCE_MCP_GOVERNANCE": "true"
       }
     },
     "xray-skills": {
       "command": "npx",
-      "args": ["-y", "0xray", "mcp", "skills"]
+      "args": [
+        "-y",
+        "0xray",
+        "mcp",
+        "skills"
+      ]
     },
     "xray-enforcer": {
       "command": "npx",
-      "args": ["-y", "0xray", "mcp", "enforcer"]
+      "args": [
+        "-y",
+        "0xray",
+        "mcp",
+        "enforcer"
+      ]
     },
     "xray-orchestrator": {
       "command": "npx",
-      "args": ["-y", "0xray", "mcp", "orchestrator"]
+      "args": [
+        "-y",
+        "0xray",
+        "mcp",
+        "orchestrator"
+      ]
     },
     "xray-researcher": {
       "command": "npx",
-      "args": ["-y", "0xray", "mcp", "researcher"]
+      "args": [
+        "-y",
+        "0xray",
+        "mcp",
+        "researcher"
+      ]
     },
     "xray-code-review": {
       "command": "npx",
-      "args": ["-y", "0xray", "mcp", "code-review"]
+      "args": [
+        "-y",
+        "0xray",
+        "mcp",
+        "code-review"
+      ]
     },
     "xray-architect-tools": {
       "command": "npx",
-      "args": ["-y", "0xray", "mcp", "architect-tools"]
+      "args": [
+        "-y",
+        "0xray",
+        "mcp",
+        "architect-tools"
+      ]
+    },
+    "repertoire": {
+      "command": "node",
+      "args": [
+        "/tmp/xray-v4-validate/node_modules/@0xray/repertoire/dist/mcp/server.js"
+      ],
+      "env": {
+        "XRAY_ROOT": "/tmp/xray-v4-validate"
+      }
     }
   }
 }

package/.opencode/skills/api-design/SKILL.md

@@ -2,7 +2,7 @@
 source: framework
 name: api-design
 description: RESTful API design and validation
-author: StrRay Framework
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
 tags: [design, api, design]

package/.opencode/skills/architect-tools/SKILL.md

@@ -2,7 +2,7 @@
 source: framework
 name: architect-tools
 description: System design and technical architecture tools
-author: StrRay Framework
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
 tags: [design, architect, tools]

package/.opencode/skills/architecture-patterns/SKILL.md

@@ -2,7 +2,7 @@
 source: framework
 name: architecture-patterns
 description: Software architecture patterns and best practices
-author: StrRay Framework
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
 tags: [design, architecture, patterns]

package/.opencode/skills/auto-format/SKILL.md

@@ -2,7 +2,7 @@
 source: framework
 name: auto-format
 description: Automated code formatting and style consistency
-author: StrRay Framework
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
 tags: [formatting, auto, format]

package/.opencode/skills/boot-orchestrator/SKILL.md

@@ -2,7 +2,7 @@
 source: framework
 name: boot-orchestrator
 description: Framework initialization and boot orchestration
-author: StrRay Framework
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
 tags: [infrastructure, boot, orchestrator]
@@ -28,10 +28,6 @@ Framework initialization and boot orchestration.
 - **initialization**: Initialization
 - **framework_startup**: Framework startup
 
-## Usage
-
-This skill provides infrastructure capabilities for boot orchestrator functionality.
-
 ## Integration
 
-Activated when infrastructure capabilities are requested through the skills system.
+Lead-dev boot is handled by SessionStart hook + `orchestrator` skill — see `multi_agent_orchestration.lead_dev_mode` in features.json.

package/.opencode/skills/bug-triage/SKILL.md

@@ -2,7 +2,7 @@
 source: framework
 name: bug-triage
 description: Bug triage, debugging analysis, and issue prioritization
-author: StrRay Framework
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
 tags: [debugging, bug-fix, triage, error-analysis]

package/.opencode/skills/code-analyzer/SKILL.md

@@ -2,7 +2,7 @@
 source: framework
 name: code-analyzer
 description: Deep code analysis, metrics extraction, and pattern detection (CONSOLIDATED - combines analyzer, explore, and original code-analyzer)
-author: StrRay Framework
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
 tags: [analysis, metrics, code-quality, patterns]

package/.opencode/skills/code-review/SKILL.md

@@ -2,7 +2,7 @@
 source: framework
 name: code-review
 description: Perform comprehensive code quality assessment and provide improvement suggestions
-author: StrRay Framework
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
 tags: [review, quality, assessment, improvement]

package/.opencode/skills/enforcer/SKILL.md

@@ -2,7 +2,7 @@
 source: framework
 name: enforcer
 description: Codex compliance validation and error prevention
-author: StrRay Framework
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
 tags: [quality, enforcer]

package/.opencode/skills/framework-compliance-audit/SKILL.md

@@ -2,7 +2,7 @@
 source: framework
 name: framework-compliance-audit
 description: Framework compliance auditing and validation
-author: StrRay Framework
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
 tags: [compliance, framework, compliance, audit]

package/.opencode/skills/git-workflow/SKILL.md

@@ -2,7 +2,7 @@
 source: framework
 name: git-workflow
 description: Git workflow management and collaboration tools
-author: StrRay Framework
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
 tags: [collaboration, git, workflow]

package/.opencode/skills/hermes-agent/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: hermes-agent
-description: Manage 0xRay framework from Hermes Agent via the native strray-hermes plugin. Covers the 4 plugin tools (validate, codex_check, health, hooks), lifecycle hooks, slash commands, bridge architecture, and CLI fallback.
+description: Manage 0xRay framework from Hermes Agent via the native xray-hermes plugin. Covers the 4 plugin tools (validate, codex_check, health, hooks), lifecycle hooks, slash commands, bridge architecture, and CLI fallback.
 version: 2.1.0
 author: 0xRay AI
 metadata:
@@ -9,7 +9,7 @@ metadata:
     related_skills: []
 ---
 
-# 0xRay Hermes Plugin (strray-hermes)
+# 0xRay Hermes Plugin (xray-hermes)
 
 Native Hermes plugin providing 0xRay framework integration — quality gates, codex enforcement, git hooks, and full pre/post processing pipeline. Runs via a Node.js bridge to compiled framework components.
 
@@ -24,7 +24,7 @@ Native Hermes plugin providing 0xRay framework integration — quality gates, co
 ## Plugin Architecture
 
 ```
-~/.hermes/plugins/strray-hermes/
+~/.hermes/plugins/xray-hermes/
 ├── __init__.py         # Plugin registration, hooks, slash commands
 ├── tools.py            # 4 tool handlers (validate, codex_check, health, hooks)
 ├── schemas.py          # JSON schemas the LLM sees
@@ -43,17 +43,17 @@ Native Hermes plugin providing 0xRay framework integration — quality gates, co
 
 **Fallback:** When bridge is unavailable, tools fall back to `npx 0xray` CLI commands.
 
-**Config path resolution:** `STRRAY_CONFIG_DIR/` > `.xray/` > `.opencode/xray/` > built-in defaults.
+**Config path resolution:** `XRAY_CONFIG_DIR/` > `.xray/` > built-in defaults.
 
 ## 4 Tools
 
-### strray_validate
+### xray_validate
 
 Run pre-commit validation on files. Uses bridge quality gate + processor pipeline, falls back to CLI.
 
 ```
-strray_validate(files=["src/my-module.ts"], operation="commit")
-strray_validate(files=["src/auth.ts", "src/auth.test.ts"], operation="modify")
+xray_validate(files=["src/my-module.ts"], operation="commit")
+xray_validate(files=["src/auth.ts", "src/auth.test.ts"], operation="modify")
 ```
 
 Parameters:
@@ -62,13 +62,13 @@ Parameters:
 
 Returns: pass/fail with per-file results and violations.
 
-### strray_codex_check
+### xray_codex_check
 
 Validate code against the 60-term Universal Development Codex. Checks error-handling, type-safety, performance, security, architecture.
 
 ```
-strray_codex_check(code="const x: any = foo()", operation="create")
-strray_codex_check(code=snippet, operation="modify", focus_areas=["security", "error-handling"])
+xray_codex_check(code="const x: any = foo()", operation="create")
+xray_codex_check(code=snippet, operation="modify", focus_areas=["security", "error-handling"])
 ```
 
 Parameters:
@@ -78,25 +78,25 @@ Parameters:
 
 Returns: violations list with actionable remediation.
 
-### strray_health
+### xray_health
 
 Framework health check. Returns version, loaded components, project root.
 
 ```
-strray_health()
+xray_health()
 ```
 
 Returns: framework status, version, component availability, node version.
 
-### strray_hooks
+### xray_hooks
 
 Manage 0xRay git hooks (install, uninstall, list, status).
 
 ```
-strray_hooks(action="install")
-strray_hooks(action="status")
-strray_hooks(action="list")
-strray_hooks(action="uninstall", hooks=["pre-commit"])
+xray_hooks(action="install")
+xray_hooks(action="status")
+xray_hooks(action="list")
+xray_hooks(action="uninstall", hooks=["pre-commit"])
 ```
 
 Parameters:
@@ -122,7 +122,7 @@ Fires before ANY tool executes:
 1. Tracks session stats
 2. Logs tool-start event to `logs/framework/plugin-tool-events.log`
 3. For code-producing tools (write_file, patch, execute_code, write, edit): runs quality gate + pre-processors via bridge
-4. For other tools: nudges when a 0xRay MCP alternative exists (e.g., grep → search_codebase, eslint → strray_lint)
+4. For other tools: nudges when a 0xRay MCP alternative exists (e.g., grep → search_codebase, eslint → xray_lint)
 
 ### post_tool_call
 
@@ -137,16 +137,16 @@ Fires when a new session starts. Resets stats and logs to disk. Registration is
 ## Slash Command
 
 ```
-/strray status    — Plugin and framework health (calls bridge)
-/strray stats     — Session pipeline statistics
-/strray help      — Show available commands
+/xray status    — Plugin and framework health (calls bridge)
+/xray stats     — Session pipeline statistics
+/xray help      — Show available commands
 /sr status        — Alias
 ```
 
 ## Session Stats (tracked automatically)
 
-The plugin tracks per-session counters visible via `/strray stats`:
-- total_tool_calls, code_operations, strray_mcp_calls, native_tool_calls
+The plugin tracks per-session counters visible via `/xray stats`:
+- total_tool_calls, code_operations, xray_mcp_calls, native_tool_calls
 - quality_gate_runs, quality_gate_blocks
 - pre_processor_runs, post_processor_runs
 - bridge_calls, bridge_errors
@@ -164,13 +164,13 @@ All logs go to `logs/framework/` in the project root:
 
 | User Says | Tool / Command |
 |----------|---------------|
-| "Is 0xRay working?" | `strray_health()` or `/strray status` |
-| "Check these files before I commit" | `strray_validate(files=[...], operation="commit")` |
-| "Is this code codex compliant?" | `strray_codex_check(code=..., operation="create")` |
-| "Set up git hooks" | `strray_hooks(action="install")` |
-| "What hooks are installed?" | `strray_hooks(action="status")` |
-| "Show session stats" | `/strray stats` |
-| "Why is the bridge failing?" | Check `strray_health()` → if `framework: "not_loaded"`, verify `dist/` symlink |
+| "Is 0xRay working?" | `xray_health()` or `/xray status` |
+| "Check these files before I commit" | `xray_validate(files=[...], operation="commit")` |
+| "Is this code codex compliant?" | `xray_codex_check(code=..., operation="create")` |
+| "Set up git hooks" | `xray_hooks(action="install")` |
+| "What hooks are installed?" | `xray_hooks(action="status")` |
+| "Show session stats" | `/xray stats` |
+| "Why is the bridge failing?" | Check `xray_health()` → if `framework: "not_loaded"`, verify `dist/` symlink |
 
 ## Bridge Commands (internal)
 
@@ -188,8 +188,8 @@ These are called by the Python tools via `bridge.mjs`, not directly by the LLM:
 
 Bridge can be invoked directly for debugging:
 ```bash
-echo '{"command":"health"}' | node ~/.hermes/plugins/strray-hermes/bridge.mjs
-node ~/.hermes/plugins/strray-hermes/bridge.mjs health --cwd /path/to/project
+echo '{"command":"health"}' | node ~/.hermes/plugins/xray-hermes/bridge.mjs
+node ~/.hermes/plugins/xray-hermes/bridge.mjs health --cwd /path/to/project
 ```
 
 ## Relationship to MCP Servers
@@ -198,15 +198,15 @@ The plugin and MCP servers are complementary:
 - **Plugin tools** = offline-first, always available, lightweight (validate, codex check, health, hooks)
 - **MCP servers** = deeper analysis requiring running Node.js (lint, security scan, architecture assessment, orchestration, codebase search)
 
-The plugin's pre_tool_call hook nudges when an MCP alternative exists (e.g., "use mcp_strray_lint_lint instead of raw eslint"). This is advisory, not blocking.
+The plugin's pre_tool_call hook nudges when an MCP alternative exists (e.g., "use mcp_xray_lint_lint instead of raw eslint"). This is advisory, not blocking.
 
 ## Pitfalls
 
 - Plugin requires restart after install/edit: Hermes loads plugins once at session start.
 - Bridge needs `dist/` symlink: The bridge loads compiled `.js` from `dist/` → `node_modules/0xray/dist/`. If the symlink breaks, bridge returns `framework: "not_loaded"`.
-- `strray_codex_check` without `code` param returns health, not a codex check. Pass `code` for actual validation.
+- `xray_codex_check` without `code` param returns health, not a codex check. Pass `code` for actual validation.
 - CLI fallback requires `npx 0xray` in PATH. If bridge fails and CLI isn't available, tools return errors.
 - Quality gate blocks are logged but NOT enforced (advisory). The tool returns violations; the agent decides what to do.
-- Git hooks use symlinks from `.git/hooks/` → `hooks/`. If the `hooks/` directory doesn't exist in the project, `strray_hooks(action="install")` skips those hooks.
-- Project root detection walks up from CWD looking for `node_modules/0xray`, `.opencode/xray/features.json`, or `package.json`. Override with `STRRAY_PROJECT_ROOT` env var.
+- Git hooks use symlinks from `.git/hooks/` → `hooks/`. If the `hooks/` directory doesn't exist in the project, `xray_hooks(action="install")` skips those hooks.
+- Project root detection walks up from CWD looking for `node_modules/0xray`, `.xray/features.json`, or `package.json`. Override with `XRAY_PROJECT_ROOT` env var.
 - `logs/framework/` is created automatically. Never breaks the agent if permissions fail.

package/.opencode/skills/inference-improve/SKILL.md

@@ -2,7 +2,7 @@
 source: framework
 name: inference-improve
 description: Autonomous inference improvement through collaborative agent analysis
-author: StrRay Framework
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
 tags: [inference, improvement, autonomous, learning]

package/.opencode/skills/lint/SKILL.md

@@ -2,7 +2,7 @@
 source: framework
 name: lint
 description: Code linting and static analysis
-author: StrRay Framework
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
 tags: [quality, lint]

package/.opencode/skills/log-monitor/SKILL.md

@@ -2,7 +2,7 @@
 source: framework
 name: log-monitor
 description: Log analysis, pattern detection, and alerting
-author: StrRay Framework
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
 tags: [monitoring, logging, alerting, observability]

package/.opencode/skills/model-health-check/SKILL.md

@@ -2,7 +2,7 @@
 source: framework
 name: model-health-check
 description: AI model health monitoring and diagnostics
-author: StrRay Framework
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
 tags: [monitoring, model, health, check]

package/.opencode/skills/multimodal-looker/SKILL.md

@@ -2,7 +2,7 @@
 source: framework
 name: multimodal-looker
 description: Visual content analysis for diagrams, screenshots, and UI mockups
-author: StrRay Framework
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
 tags: [visual, diagrams, screenshots, accessibility, ui-analysis]

package/.opencode/skills/orchestrator/SKILL.md

@@ -1,11 +1,11 @@
 ---
 source: framework
 name: orchestrator
-description: Multi-agent workflow coordination and task delegation
-author: StrRay Framework
+description: Multi-agent workflow coordination, lead-dev operating model (codex 67-68), and task delegation. Default when suit is worn — no keywords required.
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
-tags: [orchestration, orchestrator]
+tags: [orchestration, orchestrator, lead-dev]
 capabilities:
   - coordinate_agents
   - delegate_tasks
@@ -15,23 +15,47 @@ dependencies: []
 mcp:
   orchestrator:
     command: node
-    args: [node_modules/0xray/dist/mcps/orchestrator/server.js]
+    args: [node_modules/0xray/dist/mcps/orchestrator.server.js]
 ---
 
-# Orchestrator Skill
+# Orchestrator Skill — includes lead-dev operating model
 
-Multi-agent workflow coordination and task delegation.
+When `multi_agent_orchestration.lead_dev_mode` is true in `features.json` (default when suit is worn), this is the **default OS behavior** — not a separate skill or MCP.
 
-## Tools Available
+## Seven rules (codex 67–68)
 
-- **task_coordination**: Task coordination
-- **agent_delegation**: Agent delegation
-- **workflow_management**: Workflow management
+1. Phased plan + detailed todos; assign best subagent; monitor output
+2. Lead dev loops test→fix until green; no permission pings
+3. Per-suite test triage after major changes; full suite last
+4. Lead stays main thread; subagents execute; update todos
+5. Read all console and test output; triage fix rerun
+6. Never defer errors as "pre-existing" — add todo and resolve
+7. Resolve all errors before phase completion
 
-## Usage
+## MCP loop (one tool surface — no autonomy-intake)
 
-This skill provides orchestration capabilities for orchestrator functionality.
+| Step | MCP tool | Notes |
+|------|----------|-------|
+| **Intake + classify** | `analyze-complexity` | Pass `tasks` array; persists `.xray/state/lead-dev-plan.json` when mode is on |
+| Delegate (consult) | `orchestrate-task` | Invokes MCP consult skills (code-review, researcher, security-audit, etc.) |
+| Delegate (implement) | **host `Task` / `spawn_subagent`** | `orchestrate-task` **defers** backend-engineer, frontend-engineer, bug-triage — lead must spawn |
+| Monitor | `get-orchestration-status` | Lead updates todos |
+| Major work | researcher + architect-tools + code-review | Auto-listed in plan when complexity > threshold |
 
-## Integration
+## Subagent routing
 
-Activated when orchestration capabilities are requested through the skills system.
+| Task | Subagent |
+|------|----------|
+| Phasing | strategist |
+| Architecture | architect-tools |
+| Research | researcher |
+| Implementation | backend-engineer / frontend-engineer |
+| Test failures | bug-triage |
+| Review | code-review |
+
+## Hooks (rewired, not new MCPs)
+
+- **SessionStart** → `session-start.js` boots lead_dev_mode
+- **PreToolUse** → hints `per_suite_triage_required` on full `npm test`
+
+Config: `features.json` → `multi_agent_orchestration.lead_dev_mode`

package/.opencode/skills/performance-analysis/SKILL.md

@@ -2,7 +2,7 @@
 source: framework
 name: performance-analysis
 description: System performance analysis and optimization
-author: StrRay Framework
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
 tags: [performance, performance, analysis]

package/.opencode/skills/performance-optimization/SKILL.md

@@ -2,7 +2,7 @@
 source: framework
 name: performance-optimization
 description: Application performance optimization and tuning
-author: StrRay Framework
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
 tags: [performance, performance, optimization]

package/.opencode/skills/processor-pipeline/SKILL.md

@@ -2,7 +2,7 @@
 source: framework
 name: processor-pipeline
 description: Data processing pipeline management
-author: StrRay Framework
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
 tags: [processing, processor, pipeline]

package/.opencode/skills/project-analysis/SKILL.md

@@ -2,7 +2,7 @@
 source: framework
 name: project-analysis
 description: Analyze project structure, complexity, and health metrics
-author: StrRay Framework
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
 tags: [analysis, project, complexity, health]

package/.opencode/skills/refactoring-strategies/SKILL.md

@@ -2,7 +2,7 @@
 source: framework
 name: refactoring-strategies
 description: Code refactoring techniques and strategies
-author: StrRay Framework
+author: Xray Framework
 version: 1.0.0
 schema_version: "1.0"
 tags: [refactoring, refactoring, strategies]

package/.opencode/skills/registry.json

@@ -0,0 +1,65 @@
+{
+  "description": "0xRay Skills Registry - recommended skill sources for consumers",
+  "sources": [
+    {
+      "name": "agency-agents",
+      "url": "https://github.com/msitarzewski/agency-agents",
+      "description": "170+ AI agency agent definitions across engineering, design, marketing, testing, and more",
+      "license": "MIT"
+    },
+    {
+      "name": "superpowers",
+      "url": "https://github.com/obra/superpowers",
+      "description": "14 agentic skills including TDD, systematic debugging, plan writing, and code review workflows",
+      "license": "MIT"
+    },
+    {
+      "name": "antigravity",
+      "url": "https://github.com/sickn33/antigravity-awesome-skills",
+      "description": "1300+ curated community skills across TypeScript, Python, Docker, Security, and more",
+      "license": "MIT"
+    },
+    {
+      "name": "minimax",
+      "url": "https://github.com/MiniMax-AI/skills",
+      "description": "Frontend, fullstack, Android, iOS, shader, PDF, XLSX, DOCX skills",
+      "license": "MIT"
+    },
+    {
+      "name": "vuejs-nuxt",
+      "url": "https://github.com/robert-zaremba/ai-agent-skills",
+      "description": "Vue.js 3, Nuxt 4+, Nuxt UI, and VueUse skills",
+      "license": "MIT"
+    },
+    {
+      "name": "impeccable",
+      "url": "https://github.com/pbakaus/impeccable",
+      "description": "AI frontend design language for professional UI/UX generation",
+      "license": "Apache-2.0"
+    },
+    {
+      "name": "gemini-skills",
+      "url": "https://github.com/google-gemini/gemini-skills",
+      "description": "Official Google Gemini skills for AI-assisted development",
+      "license": "Apache-2.0"
+    },
+    {
+      "name": "ai-web3-security",
+      "url": "https://github.com/pashov/ai-web3-security",
+      "description": "Web3 security skills for smart contract auditing and vulnerability detection",
+      "license": "MIT"
+    },
+    {
+      "name": "anthropic-skills",
+      "url": "https://github.com/anthropics/skills",
+      "description": "Official Anthropic skills for Claude Code development workflows",
+      "license": "MIT"
+    },
+    {
+      "name": "ui-ux-pro-max",
+      "url": "https://github.com/nextlevelbuilder/ui-ux-pro-max-skill",
+      "description": "Professional UI/UX design skill for high-quality interface generation",
+      "license": "MIT"
+    }
+  ]
+}