refactor: rename aegis → orca across entire codebase

Complete internal rebranding from Aegis to Orca:

Build System:
- Module names: aegis_core → orca_core, aegis → orca, aegis_cli → orca_cli,
  aegis_edge → orca_edge, aegis_edge_main → orca_edge_main

Source Code (~115 zig files):
- All @import() statements updated
- AegisError → OrcaError root error set
- Local aliases: aegis_mcp → orca_mcp, aegis_policy → orca_policy,
  aegis_bin → orca_bin, runAegis → runOrca, etc.
- Test literals: /tmp/aegis → /tmp/orca, command strings, temp dir names
- ActorKind enum: removed legacy 'aegis' tag, kept 'orca'

Schemas (8 JSON files):
-  URLs: github.com/chriskarani/aegis → orca, aegis.local → orca.local
- Titles: Aegis Audit Event → Orca Audit Event, etc.

CLI & User-Facing:
- All command help text, error messages, documentation
- Policy preset YAML comments
- Example scripts (sh, ps1, py) and demo docs
- manifest.json project name

Documentation:
- AGENTS.md, PLUGIN_SECURITY_MODEL.md, PLUGIN_CHANGELOG.md,
  00_PROJECT_INDEX.md, README.md
- .gitignore: added orca_* entries alongside legacy aegis_* entries

Intentionally preserved:
- MCP tool-name blacklist still checks for 'aegis' (catches malicious tools)
- Test assertions verifying 'Aegis' does NOT appear in plugin output
- Test assertions verifying release artifacts exclude old names
- Actual on-disk repo path in JSON fixture cwd fields

Build: compiles clean. Tests: 694/702 pass (2 pre-existing packaging failures).

Author: christopherkarani

.github/actions/orca-run/action.yml

@@ -7,7 +7,7 @@ inputs:
   policy:
     description: Optional policy path.
     required: false
-    default: .aegis/policy.yaml
+    default: .orca/policy.yaml
 runs:
   using: composite
   steps:

.gitignore

@@ -36,19 +36,31 @@ summary.md
 node_modules/
 **/node_modules/
 
-# --- Aegis internal planning / generated plan packs ---
+# --- Orca internal planning / generated plan packs ---
 aegis_phased_project/
 aegis_phased_project_reviewed/
 aegis_phased_project_final/
 aegis_plugin_launch_plan/
 aegis_plugin_launch_plan_v2/
 aegis_plugin_launch_plan_v3/
+orca_phased_project/
+orca_phased_project_reviewed/
+orca_phased_project_final/
+orca_plugin_launch_plan/
+orca_plugin_launch_plan_v2/
+orca_plugin_launch_plan_v3/
 aegis_phased_project_markdown_files.zip
 aegis_phased_project_reviewed.zip
 aegis_phased_project_final.zip
 aegis_plugin_launch_plan.zip
 aegis_plugin_launch_plan_v2.zip
 aegis_plugin_launch_plan_v3.zip
+orca_phased_project_markdown_files.zip
+orca_phased_project_reviewed.zip
+orca_phased_project_final.zip
+orca_plugin_launch_plan.zip
+orca_plugin_launch_plan_v2.zip
+orca_plugin_launch_plan_v3.zip
 *_phase_pack*.zip
 *_plan_pack*.zip
 *_launch_plan*.zip
@@ -103,6 +115,7 @@ P07_*.md
 00_PLUGIN_LAUNCH_INDEX.md
 [0-9][0-9]_*.md
 AEGIS_CLI_PLUGIN_CONTRACT.md
+ORCA_CLI_PLUGIN_CONTRACT.md
 ARCHITECTURE_CONTRACTS.md
 CODEX_AGENT_CONTEXT.md
 DRONE_WORKSTREAM_GUARDRAILS.md

00_PROJECT_INDEX.md

@@ -1,6 +1,6 @@
-# Aegis v1.0 Phased Project Plan
+# Orca v1.0 Phased Project Plan
 
-**Project:** Aegis — local-first runtime firewall for AI agents  
+**Project:** Orca — local-first runtime firewall for AI agents  
 **Implementation language:** Zig  
 **Execution model:** Each phase is designed to be executed by a Codex coding agent as an isolated implementation task.  
 **End state:** A complete v1.0 open-source product: local CLI, policy engine, audit/replay, secret protection, staged writes, command guard, MCP proxy, network guard, red-team suite, platform backends, installers, docs, and release readiness.
@@ -29,7 +29,7 @@ For best results, every Codex execution should include the assigned phase file p
 
 ## Product Definition
 
-Aegis is a Zig-based, local-first runtime firewall for AI agents. It launches existing agent tools inside a policy-controlled session, strips secrets, blocks dangerous file access, stages writes, mediates shell commands, controls network egress, proxies MCP servers, records tamper-evident audit logs, and ships with red-team fixtures that prove the protection works.
+Orca is a Zig-based, local-first runtime firewall for AI agents. It launches existing agent tools inside a policy-controlled session, strips secrets, blocks dangerous file access, stages writes, mediates shell commands, controls network egress, proxies MCP servers, records tamper-evident audit logs, and ships with red-team fixtures that prove the protection works.
 
 Primary promise:
 
@@ -104,18 +104,18 @@ Each phase should leave the repository in a working state.
 
 ## v1.0 Product Completion Criteria
 
-Aegis v1.0 is complete when all of the following are true:
+Orca v1.0 is complete when all of the following are true:
 
 ### Core CLI
 
-- `aegis run` launches arbitrary commands.
-- `aegis init` creates a working policy.
-- `aegis doctor` reports platform capabilities.
-- `aegis replay` replays sessions.
-- `aegis diff`, `aegis apply`, and `aegis discard` manage staged writes.
-- `aegis policy check` validates policy files.
-- `aegis mcp proxy` proxies stdio MCP servers.
-- `aegis redteam` runs security fixtures.
+- `orca run` launches arbitrary commands.
+- `orca init` creates a working policy.
+- `orca doctor` reports platform capabilities.
+- `orca replay` replays sessions.
+- `orca diff`, `orca apply`, and `orca discard` manage staged writes.
+- `orca policy check` validates policy files.
+- `orca mcp proxy` proxies stdio MCP servers.
+- `orca redteam` runs security fixtures.
 
 ### Protection
 

AGENTS.md

@@ -1,4 +1,4 @@
-# Aegis Agent Instructions
+# Orca Agent Instructions
 
 ## Public Repository Hygiene
 
@@ -9,15 +9,15 @@
   - `customer_pilot/`
   - `tasks/`
   - `reports/`
-  - `.aegis-edge/`
+  - `.orca-edge/`
   - `.edge/`
   - `dist/`
   - `dist-dry-run/`
   - `docs/release/`
   - `docs/orca_opencode_openclaw_plan/`
   - `integrations/**/node_modules/`
 - Before staging or committing, run a tracked-file hygiene check for private/public-boundary leaks:
-  - `git ls-files | rg '(^go_to_market/|^customer_pilot/|^tasks/|^reports/|^\\.aegis-edge/|^\\.edge/|^dist/|^dist-dry-run/|^docs/release/|^docs/orca_opencode_openclaw_plan/|node_modules/)'
+  - `git ls-files | rg '(^go_to_market/|^customer_pilot/|^tasks/|^reports/|^\\.orca-edge/|^\\.edge/|^dist/|^dist-dry-run/|^docs/release/|^docs/orca_opencode_openclaw_plan/|node_modules/)'
 - If that command returns any files, stop and untrack them before proceeding.
 - Never commit generated release archives, SBOMs, checksums, dry-run package output, red-team replay output, customer-pilot templates, SOW/NDA notes, target-account templates, outreach copy, pricing guidance, or task-memory logs.
 
@@ -31,6 +31,6 @@
 
 ## Product Boundary
 
-- Keep public Core/Orca surfaces separate from internal Aegis Edge, customer acquisition, and pilot-planning collateral.
+- Keep public Core/Orca surfaces separate from internal Orca Edge, customer acquisition, and pilot-planning collateral.
 - Public docs may explain supported behavior, installation, security model, and verified limitations.
 - Internal docs may plan launches, pilots, pricing, outreach, target accounts, release operations, or founder/customer strategy, but those stay untracked unless explicitly approved for publication.

PLUGIN_CHANGELOG.md

@@ -1,12 +1,12 @@
-# Aegis Plugin Changelog
+# Orca Plugin Changelog
 
 ## 1.1.0 — Plugin Distribution and Marketplace
 
 ### Added
 
 - **Codex plugin** (`integrations/codex-plugin/`)
   - Plugin manifest (`.codex-plugin/plugin.json`)
-  - Skills: `aegis-doctor`, `aegis-init`, `aegis-protect`, `aegis-redteam`, `aegis-replay`
+  - Skills: `orca-doctor`, `orca-init`, `orca-protect`, `orca-redteam`, `orca-replay`
   - Hooks: `SessionStart`, `UserPromptSubmit`, `PreToolUse`, `PermissionRequest`, `PostToolUse`, `Stop`
   - README with install instructions
   - Local marketplace example (`examples/marketplace.json`)
@@ -38,11 +38,11 @@
   - `scripts/package-plugins.ps1` — Windows PowerShell equivalent
   - `scripts/package-npm-plugins.sh` — creates npm tarballs and checksums
   - Produces:
-    - `dist/plugins/aegis-codex-plugin-vX.Y.Z.zip`
-    - `dist/plugins/aegis-claude-code-plugin-vX.Y.Z.zip`
-    - `dist/plugins/aegis-opencode-plugin-vX.Y.Z.zip`
-    - `dist/plugins/aegis-claude-marketplace-vX.Y.Z.zip`
-    - `dist/plugins/aegis-plugin-checksums.txt`
+    - `dist/plugins/orca-codex-plugin-vX.Y.Z.zip`
+    - `dist/plugins/orca-claude-code-plugin-vX.Y.Z.zip`
+    - `dist/plugins/orca-opencode-plugin-vX.Y.Z.zip`
+    - `dist/plugins/orca-claude-marketplace-vX.Y.Z.zip`
+    - `dist/plugins/orca-plugin-checksums.txt`
     - `dist/npm/orca-opencode-plugin-vX.Y.Z.tgz`
     - `dist/npm/orca-openclaw-plugin-vX.Y.Z.tgz`
     - `dist/npm/orca-npm-plugin-checksums.txt`
@@ -83,7 +83,7 @@
 
 ### Compatibility
 
-- Aegis core: 1.1.0
+- Orca core: 1.1.0
 - Codex plugin: 1.1.0
 - Claude Code plugin: 1.1.0
 - OpenCode plugin: 1.1.0
@@ -96,7 +96,7 @@
 ## How to Verify This Release
 
 ```bash
-# Build Aegis
+# Build Orca
 zig build
 
 # Run tests
@@ -130,7 +130,7 @@ cat tests/plugin-fixtures/opencode/tool_execute_before_safe.json \
 
 # Verify artifacts
 ls -la dist/plugins
-cat dist/plugins/aegis-plugin-checksums.txt
+cat dist/plugins/orca-plugin-checksums.txt
 
 # Run redteam
 ./zig-out/bin/orca redteam --ci

PLUGIN_SECURITY_MODEL.md

@@ -3,11 +3,11 @@
 > Version: 1.1.0
 > Status: Active
 
-This document defines the trust boundaries, sandbox expectations, and permission model for Aegis plugins.
+This document defines the trust boundaries, sandbox expectations, and permission model for Orca plugins.
 
 ## Principles
 
-1. **Orca is the source of truth.** Plugins call Aegis; they do not reimplement policy logic.
+1. **Orca is the source of truth.** Plugins call Orca; they do not reimplement policy logic.
 2. **Strongest protection is `orca run`.** Plugin hooks are additive, not a replacement for supervised execution.
 3. **Default deny.** If a plugin cannot verify safety, it must fail closed.
 4. **No silent mutation.** Host configs, policies, and credentials are never changed without explicit user approval.
@@ -20,13 +20,13 @@ This document defines the trust boundaries, sandbox expectations, and permission
 │  Host IDE (Codex, Claude Code, etc.)    │  ← Untrusted by default
 │  Runs arbitrary agent code                │
 ├─────────────────────────────────────────┤
-│  Aegis Plugin (future package)          │  ← Semi-trusted; read-only
+│  Orca Plugin (future package)          │  ← Semi-trusted; read-only
 │  Calls Orca for decisions            │
 ├─────────────────────────────────────────┤
-│  Orca (`aegis plugin *`)           │  ← Trusted local surface
+│  Orca (`orca plugin *`)           │  ← Trusted local surface
 │  Owns policy, audit, replay               │
 ├─────────────────────────────────────────┤
-│  Aegis Core (policy engine, audit)      │  ← Trusted
+│  Orca Core (policy engine, audit)      │  ← Trusted
 │  Local-only, no network dependency        │
 └─────────────────────────────────────────┘
 ```
@@ -35,16 +35,16 @@ This document defines the trust boundaries, sandbox expectations, and permission
 
 | Level | What It Can Do | Example |
 |-------|----------------|---------|
-| **Read-only** | Query status, read policy, check manifests | `aegis plugin doctor`, `aegis plugin manifest` |
-| **Preview** | Simulate changes without writing | `aegis plugin install --dry-run` |
+| **Read-only** | Query status, read policy, check manifests | `orca plugin doctor`, `orca plugin manifest` |
+| **Preview** | Simulate changes without writing | `orca plugin install --dry-run` |
 | **Mutate** | Modify host config or policy | Requires `--yes` + explicit user confirmation |
 | **Actuate** | Trigger real-world effects | **Not exposed by default** |
 
 ## Plugin Default Behavior
 
-- `aegis plugin install` defaults to `--dry-run`.
-- `aegis plugin doctor` does not print secrets or raw env values.
-- `aegis plugin mcp-server` is a documented stub; no real server starts.
+- `orca plugin install` defaults to `--dry-run`.
+- `orca plugin doctor` does not print secrets or raw env values.
+- `orca plugin mcp-server` is a documented stub; no real server starts.
 - Drone-related operations are default-deny.
 
 ## Credential Handling
@@ -55,7 +55,7 @@ This document defines the trust boundaries, sandbox expectations, and permission
 
 ## Host Config Mutations
 
-- Aegis plugin commands must not silently overwrite Codex, Claude Code, or other host configs.
+- Orca plugin commands must not silently overwrite Codex, Claude Code, or other host configs.
 - Any config change must be previewed with `--dry-run` first.
 - Any actual change requires `--yes`.
 

README.md

@@ -292,7 +292,7 @@ Run `orca doctor` to check your platform capabilities.
 - [Commands](docs/commands.md) — CLI reference.
 - [Plugin security model](docs/integrations/plugin-security-model.md)
 - [Plugin troubleshooting](docs/integrations/plugin-troubleshooting.md)
-- [Aegis to Orca migration](docs/migration-aegis-to-orca.md)
+- [Migration from Aegis to Orca](docs/migration-aegis-to-orca.md)
 
 ---
 

VERSION

@@ -1 +1 @@
-1.1.0
+1.1.1