orchestrix 16.1.1 → 16.1.3

package/lib/embedded/yuri.md

@@ -189,19 +189,57 @@ This creates a tmux session with 4 windows:
 
 ### HANDOFF Auto-Collaboration Flow
 
+The HANDOFF chain depends on the story's **test_design_level** (set by SM based on complexity):
+
+#### Standard/Comprehensive Stories (most stories)
+
 ```
 SM (win 1) *draft → Create Story
     ↓ 🎯 HANDOFF TO architect: *review {story_id}
 Architect (win 0) → Technical review
+    ↓ 🎯 HANDOFF TO qa: *test-design {story_id}
+QA (win 3) → Design test scenarios & strategy BEFORE development
     ↓ 🎯 HANDOFF TO dev: *develop-story {story_id}
-Dev (win 2) → Code implementation
+Dev (win 2) → Code implementation (guided by QA's test design)
     ↓ 🎯 HANDOFF TO qa: *review {story_id}
-QA (win 3) → Code review
-    ↓ 🎯 HANDOFF TO sm: *draft (next Story)
+QA (win 3) → Review implementation against test design
+    ↓ pass → 🎯 HANDOFF TO sm: *draft (next Story)
+    ↓ fail → 🎯 HANDOFF TO dev: *apply-qa-fixes {story_id}
 SM (win 1) → Create next Story
     ↓ ... loop until all stories complete
 ```
 
+#### Simple Stories (low complexity, no security concerns)
+
+```
+SM (win 1) *draft → Create Story
+    ↓ 🎯 HANDOFF TO architect: *review {story_id}
+Architect (win 0) → Technical review
+    ↓ 🎯 HANDOFF TO dev: *develop-story {story_id}  (skip test-design)
+Dev (win 2) → Code implementation
+    ↓ 🎯 HANDOFF TO qa: *review {story_id}
+QA (win 3) → Review implementation
+    ↓ ... same as above
+```
+
+#### Quick Mode Stories (trivial, skip Architect + test-design)
+
+```
+SM (win 1) *draft → Create Story (mode=quick)
+    ↓ 🎯 HANDOFF TO dev: *quick-develop {story_id}
+Dev (win 2) → Quick implementation
+    ↓ 🎯 HANDOFF TO qa: *quick-verify {story_id}
+QA (win 3) → Lightweight verification
+    ↓ ... next story
+```
+
+#### QA Feedback Loops
+
+When QA finds issues:
+- **Code issues** → `🎯 HANDOFF TO dev: *apply-qa-fixes {story_id}` → Dev fixes → QA re-reviews
+- **Architecture concerns** → `🎯 HANDOFF TO architect: *review-escalation {story_id}` → Architect resolves → back to Dev
+- **Story issues** → `🎯 HANDOFF TO sm: *revise-story {story_id}` → SM revises → restart from Architect
+
 ### Monitoring
 
 ```bash
@@ -453,16 +491,16 @@ For unfamiliar projects, start with: `/o architect` → `*document-project`
 
 | Agent | ID | Commands | Output |
 |-------|----|----------|--------|
-| SM | `sm` | `*draft`, `*draft-bugfix {bug}` | `docs/stories/*.md` |
-| Architect | `architect` | `*review {story_id}` | Technical review |
-| Dev | `dev` | `*develop-story {id}`, `*solo "{desc}"`, `*quick-fix "{desc}"` | Code + git commit |
-| QA | `qa` | `*review {story_id}`, `*smoke-test {epic_id}` | Review report |
+| SM | `sm` | `*draft`, `*draft-bugfix {bug}`, `*revise-story {id}`, `*apply-proposal {id}` | `docs/stories/*.md` |
+| Architect | `architect` | `*review {id}`, `*review-escalation {id}` | Technical review |
+| QA | `qa` | `*test-design {id}`, `*review {id}`, `*quick-verify {id}`, `*smoke-test {epic}` | Test design / review report |
+| Dev | `dev` | `*develop-story {id}`, `*quick-develop {id}`, `*apply-qa-fixes {id}`, `*solo "{desc}"`, `*quick-fix "{desc}"` | Code + git commit |
 
 ### Management Agents
 
 | Agent | ID | Commands |
 |-------|----|----------|
-| PO | `po` | `*route-change` |
+| PO | `po` | `*route-change`, `*execute-checklist`, `*shard` |
 
 
 ---

package/lib/license.js

@@ -2,14 +2,24 @@
 
 const fs = require('fs');
 const path = require('path');
+const os = require('os');
 const ui = require('./ui');
 
+// License key format: orch_{tier}_{identifier}
+// Examples: orch_live_xxx, orch_trial_xxx, ORCH-TEAM-xxx
+const KEY_PATTERN = /^(orch_[a-z]+_[\w]+|ORCH-[A-Z]+-[\w-]+)$/;
+
+function isValidKeyFormat(key) {
+  return KEY_PATTERN.test(key);
+}
+
 /**
  * Resolve license key from multiple sources (priority order):
  * 1. --key CLI flag
  * 2. ORCHESTRIX_LICENSE_KEY env var
- * 3. .env.local file in cwd
- * 4. Interactive prompt
+ * 3. .orchestrix-key hidden file (project dir → home dir)
+ * 4. .env.local file in cwd
+ * 5. Interactive prompt (saves to .orchestrix-key for next time)
  */
 async function resolveKey(flags) {
   // 1. CLI flag
@@ -23,7 +33,23 @@ async function resolveKey(flags) {
     return process.env.ORCHESTRIX_LICENSE_KEY;
   }
 
-  // 3. .env.local file
+  // 3. .orchestrix-key hidden file (project dir first, then home dir)
+  const keyLocations = [
+    path.join(process.cwd(), '.orchestrix-key'),
+    path.join(os.homedir(), '.orchestrix-key'),
+  ];
+  for (const keyPath of keyLocations) {
+    if (fs.existsSync(keyPath)) {
+      const raw = fs.readFileSync(keyPath, 'utf-8').trim();
+      if (raw && isValidKeyFormat(raw)) {
+        const rel = keyPath.startsWith(process.cwd()) ? '.orchestrix-key' : '~/.orchestrix-key';
+        ui.info(`Using license key from ${rel}`);
+        return raw;
+      }
+    }
+  }
+
+  // 4. .env.local file
   const envLocalPath = path.join(process.cwd(), '.env.local');
   if (fs.existsSync(envLocalPath)) {
     const content = fs.readFileSync(envLocalPath, 'utf-8');
@@ -34,11 +60,17 @@ async function resolveKey(flags) {
     }
   }
 
-  // 4. Interactive prompt
+  // 5. Interactive prompt
   const key = await ui.prompt('Enter your Orchestrix license key');
   if (!key) {
     throw new Error('License key is required. Use --key <KEY> or set ORCHESTRIX_LICENSE_KEY env var.');
   }
+
+  // Save to ~/.orchestrix-key for future use
+  const globalKeyPath = path.join(os.homedir(), '.orchestrix-key');
+  fs.writeFileSync(globalKeyPath, key + '\n', { mode: 0o600 });
+  ui.success(`License key saved to ~/.orchestrix-key`);
+
   return key;
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "orchestrix",
-  "version": "16.1.1",
+  "version": "16.1.3",
   "description": "Install Orchestrix multi-agent infrastructure into any project. One command: npx orchestrix install",
   "bin": {
     "orchestrix": "bin/o8x.js"