0xray 4.0.10 → 4.0.12

package/.grok-plugin/plugin.json

@@ -0,0 +1,20 @@
+{
+  "name": "0xray",
+  "version": "4.0.12",
+  "description": "0xRay suit for Grok, Hermes, OpenClaw, OpenCode: mill+inspect, Codex, 7 MCP servers. Costume 45/42 is opt-in foundry, not the default wear.",
+  "author": {
+    "name": "0xRay AI",
+    "url": "https://0xray.ai"
+  },
+  "homepage": "https://github.com/0xRayAI/xray",
+  "repository": "https://github.com/0xRayAI/xray",
+  "keywords": [
+    "0xray",
+    "mill",
+    "inspect",
+    "codex",
+    "mcp",
+    "suit"
+  ],
+  "mcpServers": ".mcp.json"
+}

package/.xray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "4.0.10",
+  "version": "4.0.12",
   "description": "0xRay Framework - Unified Feature Configuration",
   "suit_temperament": {
     "profile": "auto",

package/AGENTS-consumer.md

@@ -51,7 +51,7 @@ Governance deliberation uses **code-review**, **security-audit** (via enforcer/s
 | `npx 0xray setup` | Symlinks, hook extras, Hermes skill sync |
 | `npx 0xray status` | Verify installation |
 | `npx 0xray opencode install` | OpenCode bridge (also runs on postinstall) |
-| `npx 0xray grok install` | Grok plugin + 7 MCPs servers + skill sync |
+| `npx 0xray grok install` | Project `.grok/plugins/0xray` + 7 MCPs servers (machine plugin not last-wins) |
 | `npx 0xray hermes install` | Hermes plugin bridge |
 | `npx 0xray openclaw install` | OpenClaw config + skills |
 | `npx 0xray skill:install` | Install starter skills |

package/AGENTS.md

@@ -47,7 +47,7 @@ Governance deliberation: **code-review**, **security-audit**, **researcher** wit
 3. `.gitignore.default` → `.gitignore` (if absent)
 4. `.xray/` config (`codex.json`, `features.json`, `config.json`) then overlay their plant
 5. `.mcp.json` (7 servers)
-6. Four bridges: OpenCode, Grok, Hermes, OpenClaw
+6. Four bridges: OpenCode, Grok, Hermes, OpenClaw. Grok last-mile dest is project `.grok/plugins/0xray` (shared HOME does not last-wins clobber machine `~/.grok/plugins/0xray`)
 7. Optional git hooks
 
 **Shop plant:** `shop-extract`, `shop-witness`, `shop-pin` (groover-hangar) are first-class with mill plant. Extra shops: `foundry.json` `shopPlant`. Not `"costume": true`. `npx @0xray/foundry inspect --skip-live` is the receipt.

package/README.md

@@ -35,7 +35,7 @@ Manual per-platform install (idempotent, same result as postinstall):
 
 ```bash
 npx 0xray opencode install
-npx 0xray grok install     # 7 MCPs servers + dual skill sync (~/.grok/plugins + ~/.grok/skills)
+npx 0xray grok install     # 7 MCPs servers + project .grok/plugins/0xray (not machine last-wins)
 npx 0xray hermes install
 npx 0xray openclaw install
 npx 0xray skill:install    # starter skills
@@ -185,7 +185,7 @@ Docs: [memory routing](docs-site/docs/guides/memory-routing.md) · [Repertoire](
 | Platform | Install | Postinstall behavior |
 |----------|---------|----------------------|
 | **OpenCode** | `npx 0xray opencode install` | Merges `opencode.json`, copies agent YML surfaces |
-| **Grok CLI / Build** | `npx 0xray grok install` | Plugin + `~/.grok/skills/` sync, 7 MCPs servers |
+| **Grok CLI / Build** | `npx 0xray grok install` | Project `.grok/plugins/0xray` (shared HOME does not clobber machine plugin), 7 MCPs servers |
 | **Hermes Agent** | `npx 0xray hermes install` | `~/.hermes/plugins/xray-hermes`, consumer root marker |
 | **OpenClaw** | `npx 0xray openclaw install` | `.xray/config/openclaw.json`, skill sync |
 

package/SKILLS.md

@@ -148,7 +148,7 @@ npx 0xray skill:install <source>
 | Source (framework) | `src/skills/<name>/SKILL.md` |
 | Published package | `node_modules/0xray/dist/skills/<name>/SKILL.md` |
 | OpenCode (after setup) | `.opencode/skills/<name>/SKILL.md` |
-| Grok | `~/.grok/skills/<name>/SKILL.md` + plugin dir |
+| Grok | project `.grok/plugins/0xray/skills/<name>/SKILL.md` (machine `~/.grok/plugins/0xray` is not last-wins) |
 | Hermes / OpenClaw | Platform skill dirs (postinstall sync) |
 
 ## Related features (since 3.1)

package/dist/AGENTS.md

@@ -47,7 +47,7 @@ Governance deliberation: **code-review**, **security-audit**, **researcher** wit
 3. `.gitignore.default` → `.gitignore` (if absent)
 4. `.xray/` config (`codex.json`, `features.json`, `config.json`) then overlay their plant
 5. `.mcp.json` (7 servers)
-6. Four bridges: OpenCode, Grok, Hermes, OpenClaw
+6. Four bridges: OpenCode, Grok, Hermes, OpenClaw. Grok last-mile dest is project `.grok/plugins/0xray` (shared HOME does not last-wins clobber machine `~/.grok/plugins/0xray`)
 7. Optional git hooks
 
 **Shop plant:** `shop-extract`, `shop-witness`, `shop-pin` (groover-hangar) are first-class with mill plant. Extra shops: `foundry.json` `shopPlant`. Not `"costume": true`. `npx @0xray/foundry inspect --skip-live` is the receipt.

package/dist/CHANGELOG.md

@@ -12,6 +12,9 @@ The format is based on [Conventional Commits](https://www.conventionalcommits.or
 - Pack → tmp suit proof: `npm run pack:tmp-proof` (and consumer smoke) installs the packed tgz, runs `foundry mint --skip-live`, plants factory hangar shops, and inspects without costume dump. Playwright n/a (mill CLI).
 
 ### 🐛 Bug Fixes
+- **Grok multi-seat wear** — last-mile dest is project `.grok/plugins/0xray`. Shared HOME (passwd `$HOME`) no longer writes machine `~/.grok/plugins/0xray`, so two seats (forge/critic/herald/blinky) cannot last-wins clobber each other's `XRAY_ROOT`. Isolated HOME may wear `$HOME/.grok/plugins/0xray` and still must not write the passwd machine plugin. Inspect reports project dest. Not a 45-skill dump.
+- **Grok marketplace pack** — `package.json` `files` includes `.grok-plugin/` so `npm pack` ships the mill-default Grok manifest (`package/.grok-plugin/plugin.json`). Consumers no longer receive only stale `.plugin/plugin.json`.
+- **Grok marketplace manifest** — `.grok-plugin/plugin.json` matches `4.0.10`: `author` is an object, `mcpServers` is a flat path (not `components.mcpServers`), description is mill+inspect default wear (not a 45 knowledge-skills claim). Fixes `grok plugin validate`.
 - **Consumer install of packed `0xray`** — stop shipping `@0xray/repertoire` as `file:./vendor/@0xray/repertoire`. npm `--install-links`, pnpm, and yarn resolve that path from the **consumer** root (`ENOENT .../vendor/@0xray/repertoire/package.json`), not from `node_modules/0xray`. The organ stays in the tarball at `vendor/@0xray/repertoire/`; postinstall wears it into `node_modules/@0xray/repertoire`. Fresh `npm install 0xray` / `npm install 0xray-*.tgz` no longer needs a consumer-root `vendor/` tree. Mill plant (`mill`+`inspect`) unchanged.
 
 ### 🔧 Maintenance
@@ -42,6 +45,22 @@ The format is based on [Conventional Commits](https://www.conventionalcommits.or
 
 ---
 
+## [4.0.12] - 2026-09-12
+
+Public npm is still `0xray@4.0.11`, which predates #29. Isolation cannot be proven from `main` alone — bots dogfood the registry. This patch PUT wears project-scoped Grok plugin dest so multi-seat wear does not last-wins clobber machine `~/.grok/plugins/0xray`. Shared HOME writes project `.grok/plugins/0xray` only. Isolated HOME may wear `$HOME/.grok/plugins/0xray` and still must not write the passwd machine plugin. Mill+inspect default. Nested mill stays **0.1.9**. Not 5.0.0. This PR does not publish.
+
+- fix(grok): project-scoped plugin dest so multi-seat wear does not last-wins clobber machine ~/.grok (747816635)
+
+---
+
+## [4.0.11] - 2026-09-12
+
+npm pack now includes `.grok-plugin/` so the mill-default Grok marketplace manifest ships in the tarball (`package/.grok-plugin/plugin.json`). Published `0xray@4.0.10` omitted it — the `files` whitelist landed in #27 after that PUT. Not 5.0.0. This PR does not publish.
+
+- fix(pack): ship .grok-plugin in npm files whitelist (5a65851cb)
+
+---
+
 ## [4.0.10] - 2026-09-12
 
 ### 🔄 Changes

package/dist/README.md

@@ -35,7 +35,7 @@ Manual per-platform install (idempotent, same result as postinstall):
 
 ```bash
 npx 0xray opencode install
-npx 0xray grok install     # 7 MCPs servers + dual skill sync (~/.grok/plugins + ~/.grok/skills)
+npx 0xray grok install     # 7 MCPs servers + project .grok/plugins/0xray (not machine last-wins)
 npx 0xray hermes install
 npx 0xray openclaw install
 npx 0xray skill:install    # starter skills
@@ -185,7 +185,7 @@ Docs: [memory routing](docs-site/docs/guides/memory-routing.md) · [Repertoire](
 | Platform | Install | Postinstall behavior |
 |----------|---------|----------------------|
 | **OpenCode** | `npx 0xray opencode install` | Merges `opencode.json`, copies agent YML surfaces |
-| **Grok CLI / Build** | `npx 0xray grok install` | Plugin + `~/.grok/skills/` sync, 7 MCPs servers |
+| **Grok CLI / Build** | `npx 0xray grok install` | Project `.grok/plugins/0xray` (shared HOME does not clobber machine plugin), 7 MCPs servers |
 | **Hermes Agent** | `npx 0xray hermes install` | `~/.hermes/plugins/xray-hermes`, consumer root marker |
 | **OpenClaw** | `npx 0xray openclaw install` | `.xray/config/openclaw.json`, skill sync |
 

package/dist/SKILLS.md

@@ -148,7 +148,7 @@ npx 0xray skill:install <source>
 | Source (framework) | `src/skills/<name>/SKILL.md` |
 | Published package | `node_modules/0xray/dist/skills/<name>/SKILL.md` |
 | OpenCode (after setup) | `.opencode/skills/<name>/SKILL.md` |
-| Grok | `~/.grok/skills/<name>/SKILL.md` + plugin dir |
+| Grok | project `.grok/plugins/0xray/skills/<name>/SKILL.md` (machine `~/.grok/plugins/0xray` is not last-wins) |
 | Hermes / OpenClaw | Platform skill dirs (postinstall sync) |
 
 ## Related features (since 3.1)

package/dist/governance/llm-governance-provider.js

@@ -3,6 +3,7 @@ import { frameworkLogger } from "../core/framework-logger.js";
 const DEFAULT_HERMES_PROVIDER = "xai-oauth";
 const DEFAULT_HERMES_MODEL = "grok-4.3";
 const DEFAULT_HERMES_TIMEOUT_MS = 120_000;
+const UNIT_TEST_HERMES_TIMEOUT_MS = 2_000;
 const ROLE_PROMPTS = {
     "code-review": `You are a senior code reviewer on a governance committee for a software project. Analyze the following proposal from a code quality, maintainability, readability, and engineering best practices perspective.
 
@@ -47,12 +48,25 @@ function resolveHermesProvider() {
 function resolveHermesModel() {
     return process.env.HERMES_MODEL?.trim() || DEFAULT_HERMES_MODEL;
 }
+function inUnitTestContext() {
+    return process.env.NODE_ENV === "test" || Boolean(process.env.VITEST);
+}
+/** Dead xai-oauth (invalid_grant) hangs hermes -z until DEFAULT_HERMES_TIMEOUT_MS. Unit/Vitest must not wait. */
+function unitTestBlocksLiveHermes() {
+    if (process.env.XRAY_GOVERNANCE_ALLOW_HERMES === "true")
+        return false;
+    return inUnitTestContext();
+}
 function resolveHermesTimeoutMs() {
     const raw = process.env.HERMES_TIMEOUT_MS?.trim();
-    if (!raw)
-        return DEFAULT_HERMES_TIMEOUT_MS;
-    const parsed = Number(raw);
-    return Number.isFinite(parsed) && parsed > 0 ? parsed : DEFAULT_HERMES_TIMEOUT_MS;
+    if (raw) {
+        const parsed = Number(raw);
+        if (Number.isFinite(parsed) && parsed > 0)
+            return parsed;
+    }
+    if (inUnitTestContext())
+        return UNIT_TEST_HERMES_TIMEOUT_MS;
+    return DEFAULT_HERMES_TIMEOUT_MS;
 }
 export function resolveHermesBin() {
     const explicit = process.env.HERMES_BIN?.trim();
@@ -84,6 +98,8 @@ function getConfig() {
     const direct = getDirectLlmConfig();
     if (direct)
         return direct;
+    if (unitTestBlocksLiveHermes())
+        return null;
     if (hermesCliAvailable()) {
         return {
             mode: "hermes",

package/dist/integrations/grok/grok-cli.d.ts

@@ -17,6 +17,9 @@
 export interface GrokInstallOptions {
     force?: boolean;
     dryRun?: boolean;
+    env?: NodeJS.ProcessEnv;
+    machineHome?: string;
+    targetDir?: string;
 }
 export declare function installForGrokCLI(options?: GrokInstallOptions): Promise<void>;
 /** Grok TUI reads <project>/.grok/config.toml, not the package copy. */

package/dist/integrations/grok/grok-cli.js

@@ -49,18 +49,23 @@ function registerGrokMcpServers(targetDir) {
     }
 }
 export async function installForGrokCLI(options = {}) {
-    frameworkLogger.log('grok-integration', 'install-start', 'info', { options });
+    frameworkLogger.log('grok-integration', 'install-start', 'info', {
+        options: { force: options.force, dryRun: options.dryRun },
+    });
     const millSuit = requireCjs(path.join(packageRoot, 'scripts/foundry/mint-suit.cjs'));
-    const home = process.env.HOME || process.env.USERPROFILE || '';
-    const machine = millSuit.machineHome();
-    const targetPluginDir = path.join(home, '.grok/plugins/0xray');
-    if (millSuit.wouldClobberMachineGrok(targetPluginDir, process.env, machine)) {
-        frameworkLogger.log('grok-integration', 'refuse-machine-grok-clobber', 'error', {
-            home,
-            machineHome: machine,
-            targetPluginDir,
-        });
-        throw new Error('foundry-inspect: isolated HOME must not clobber ~/.grok/plugins/0xray');
+    const env = options.env || process.env;
+    const machine = options.machineHome || millSuit.machineHome();
+    const targetDir = options.targetDir || resolveConsumerTargetDir(packageRoot, process.cwd());
+    const dests = millSuit.resolveGrokPluginDests(targetDir, env, machine);
+    for (const dest of dests) {
+        if (millSuit.wouldClobberMachineGrok(dest, env, machine)) {
+            frameworkLogger.log('grok-integration', 'refuse-machine-grok-clobber', 'error', {
+                home: millSuit.processHome(env),
+                machineHome: machine,
+                dest,
+            });
+            throw new Error('foundry-inspect: isolated HOME must not clobber ~/.grok/plugins/0xray');
+        }
     }
     // Try to find the plugin source from the installed package
     const possibleSources = [
@@ -73,58 +78,57 @@ export async function installForGrokCLI(options = {}) {
         return;
     }
     if (options.dryRun) {
-        console.log(`[Grok] Dry run: Would copy plugin from ${sourceDir} → ${targetPluginDir}`);
+        console.log(`[Grok] Dry run: Would copy plugin from ${sourceDir} → ${dests.join(' , ')}`);
         return;
     }
-    const targetDir = resolveConsumerTargetDir(packageRoot, process.cwd());
+    const isolated = millSuit.isIsolatedHome(env, machine);
     try {
-        const pluginExists = fs.existsSync(targetPluginDir);
-        if (pluginExists && !options.force) {
-            console.log('[Grok] 0xray Grok plugin is already installed.');
-            console.log('Use --force to reinstall plugin files.');
-        }
-        else {
-            fs.cpSync(sourceDir, targetPluginDir, { recursive: true, force: true });
-            frameworkLogger.log('grok-integration', 'plugin-copied', 'info', { destination: targetPluginDir });
-            console.log(`\x1b[32m✓ Copied Grok plugin to ${targetPluginDir}\x1b[0m`);
-        }
-        // Sync builtin skills to Grok plugin skills dir
-        const grokSkillsDir = path.join(targetPluginDir, 'skills');
-        const skillsCopied = syncBuiltinSkills(grokSkillsDir);
-        if (skillsCopied > 0) {
-            console.log(`\x1b[32m✓ Synced ${skillsCopied} builtin skills to Grok plugin\x1b[0m`);
-        }
-        frameworkLogger.log('grok-integration', 'skills-synced', 'info', { count: skillsCopied });
-        // Grok Build / Cursor also reads ~/.grok/skills/ for agent_skills
-        const globalSkillsDir = path.join(home, '.grok', 'skills');
-        const globalCopied = syncBuiltinSkills(globalSkillsDir);
-        if (globalCopied > 0) {
-            console.log(`\x1b[32m✓ Synced ${globalCopied} builtin skills to ~/.grok/skills/\x1b[0m`);
+        for (const dest of dests) {
+            const pluginExists = fs.existsSync(dest);
+            if (pluginExists && !options.force) {
+                console.log(`[Grok] 0xray Grok plugin is already installed at ${dest}.`);
+                console.log('Use --force to reinstall plugin files.');
+            }
+            else {
+                fs.cpSync(sourceDir, dest, { recursive: true, force: true });
+                frameworkLogger.log('grok-integration', 'plugin-copied', 'info', { destination: dest });
+                console.log(`\x1b[32m✓ Copied Grok plugin to ${dest}\x1b[0m`);
+            }
+            if (millSuit.wantsCostume(targetDir)) {
+                const skillsCopied = syncBuiltinSkills(path.join(dest, 'skills'));
+                if (skillsCopied > 0) {
+                    console.log(`\x1b[32m✓ Synced ${skillsCopied} builtin skills to Grok plugin\x1b[0m`);
+                }
+                frameworkLogger.log('grok-integration', 'skills-synced', 'info', { count: skillsCopied });
+            }
+            pinGrokPluginToInstalledDist(dest, packageRoot, targetDir);
+            wearGrokHookCommands(dest, packageRoot, targetDir);
         }
-        pinGrokPluginToInstalledDist(targetPluginDir, packageRoot, targetDir);
-        wearGrokHookCommands(targetPluginDir, packageRoot, targetDir);
-        const projectPluginDir = path.join(targetDir, '.grok', 'plugins', '0xray');
-        if (projectPluginDir !== targetPluginDir) {
-            if (!fs.existsSync(projectPluginDir) || options.force) {
-                fs.cpSync(sourceDir, projectPluginDir, { recursive: true, force: true });
+        if (isolated && millSuit.wantsCostume(targetDir)) {
+            const home = millSuit.processHome(env);
+            const globalCopied = syncBuiltinSkills(path.join(home, '.grok', 'skills'));
+            if (globalCopied > 0) {
+                console.log(`\x1b[32m✓ Synced ${globalCopied} builtin skills to isolated ~/.grok/skills/\x1b[0m`);
             }
-            pinGrokPluginToInstalledDist(projectPluginDir, packageRoot, targetDir);
-            wearGrokHookCommands(projectPluginDir, packageRoot, targetDir);
         }
         writeProjectRepertoireMcp(targetDir);
         mintAfterWear(targetDir);
-        // Attempt auto-trust (best effort)
+        const primary = dests[0];
         try {
-            execSync(`grok plugins trust "${targetPluginDir}"`, { stdio: 'ignore' });
+            execSync(`grok plugins trust "${primary}"`, { stdio: 'ignore' });
             console.log('\x1b[32m✓ Auto-trusted the 0xray plugin with Grok CLI\x1b[0m');
         }
         catch {
             console.log('\nPlease run this command to fully trust the plugin:');
-            console.log(`  grok plugins trust "${targetPluginDir}"`);
+            console.log(`  grok plugins trust "${primary}"`);
+        }
+        if (isolated) {
+            registerGrokMcpServers(targetDir);
+            console.log('\x1b[32m✓ Registered 7 xray MCP servers with Grok CLI (npx)\x1b[0m');
+        }
+        else {
+            console.log('\x1b[32m✓ Project-scoped Grok plugin worn (machine ~/.grok/plugins/0xray not written)\x1b[0m');
         }
-        // Register MCP servers via grok mcp add (npx -y 0xray mcp — matches install-bridges)
-        registerGrokMcpServers(targetDir);
-        console.log('\x1b[32m✓ Registered 7 xray MCP servers with Grok CLI (npx)\x1b[0m');
         console.log('\n✅ 0xRay is now installed as a first-class Grok CLI plugin!');
         console.log('Restart Grok or run `grok` to load the new hooks and MCP servers.');
     }
@@ -150,38 +154,40 @@ function wearGrokHookCommands(pluginDir, xrayRoot, targetDir) {
 function pinGrokPluginToInstalledDist(pluginDir, xrayRoot, targetDir) {
     const hookJs = path.join(xrayRoot, 'dist/integrations/grok/hooks/pre-tool-use.js');
     const cliJs = path.join(xrayRoot, 'dist/cli/index.js');
-    if (!fs.existsSync(hookJs))
-        return;
     const hooksPath = path.join(pluginDir, 'hooks', 'hooks.json');
-    if (fs.existsSync(hooksPath)) {
+    if (fs.existsSync(hookJs) && fs.existsSync(hooksPath)) {
         const text = fs.readFileSync(hooksPath, 'utf8');
         fs.writeFileSync(hooksPath, text.split('${XRAY_AI_PATH:-node_modules/0xray}').join(xrayRoot));
     }
     const mcpPath = path.join(pluginDir, '.mcp.json');
-    if (fs.existsSync(mcpPath) && fs.existsSync(cliJs)) {
-        const mcp = JSON.parse(fs.readFileSync(mcpPath, 'utf8'));
-        for (const server of Object.values(mcp.mcpServers ?? {})) {
-            if (server.command === 'npx' && Array.isArray(server.args) && server.args.includes('mcp')) {
-                const mcpIdx = server.args.indexOf('mcp');
-                const mcpCmd = server.args[mcpIdx + 1] ?? 'governance';
-                server.command = 'node';
-                server.args = [cliJs, 'mcp', mcpCmd];
-            }
+    if (!fs.existsSync(mcpPath))
+        return;
+    const mcp = JSON.parse(fs.readFileSync(mcpPath, 'utf8'));
+    for (const server of Object.values(mcp.mcpServers ?? {})) {
+        server.env = { ...server.env, XRAY_ROOT: targetDir };
+        if (fs.existsSync(cliJs) &&
+            server.command === 'npx' &&
+            Array.isArray(server.args) &&
+            server.args.includes('mcp')) {
+            const mcpIdx = server.args.indexOf('mcp');
+            const mcpCmd = server.args[mcpIdx + 1] ?? 'governance';
+            server.command = 'node';
+            server.args = [cliJs, 'mcp', mcpCmd];
         }
-        const repertoireMcp = resolveRepertoireMcp(targetDir);
-        if (mcp.mcpServers) {
-            if (repertoireMcp) {
-                mcp.mcpServers.repertoire = {
-                    command: 'node',
-                    args: [repertoireMcp],
-                };
-            }
-            else {
-                delete mcp.mcpServers.repertoire;
-            }
+    }
+    const repertoireMcp = resolveRepertoireMcp(targetDir);
+    if (mcp.mcpServers) {
+        if (repertoireMcp) {
+            mcp.mcpServers.repertoire = {
+                command: 'node',
+                args: [repertoireMcp],
+            };
+        }
+        else {
+            delete mcp.mcpServers.repertoire;
         }
-        fs.writeFileSync(mcpPath, `${JSON.stringify(mcp, null, 2)}\n`);
     }
+    fs.writeFileSync(mcpPath, `${JSON.stringify(mcp, null, 2)}\n`);
 }
 /** Grok TUI reads <project>/.grok/config.toml, not the package copy. */
 export function writeProjectRepertoireMcp(projectRoot) {

package/dist/integrations/openclaw/plugin/xray-pre-tool/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xray-pre-tool",
-  "version": "4.0.10",
+  "version": "4.0.12",
   "private": true,
   "type": "module",
   "description": "0xRay constitution + temperament PreToolUse for OpenClaw",

package/llms.txt

@@ -8,7 +8,7 @@ Default consumer wear is **mill plant** (`mill` + `inspect`), not a 45-skill / 4
 
 ## Wear (what a stranger gets)
 
-- `npm install 0xray` — postinstall fastens mill+inspect, writes 7 MCP `.mcp.json`, four host bridges (OpenCode, Grok, Hermes, OpenClaw), overlays their plant. Does **not** write consumer-root `SKILLS.md`.
+- `npm install 0xray` — postinstall fastens mill+inspect, writes 7 MCP `.mcp.json`, four host bridges (OpenCode, Grok, Hermes, OpenClaw), overlays their plant. Grok last-mile dest is project `.grok/plugins/0xray`. Shared HOME does not last-wins clobber machine `~/.grok/plugins/0xray`. Isolated HOME must not write the machine plugin. Does **not** write consumer-root `SKILLS.md`.
 - `npx @0xray/foundry mint --skip-live` — re-fasten mill plant, then inspect.
 - `npx @0xray/foundry inspect --skip-live` — plant-vs-worn, receipt, CI. Chat is not a receipt.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "4.0.10",
+  "version": "4.0.12",
   "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
   "readme": "README.md",
   "license": "MIT",
@@ -79,7 +79,7 @@
     "test:processors": "npm test -- src/__tests__/unit/processor-activation.test.ts src/__tests__/unit/typescript-compilation-processor.test.ts",
     "test:miscellaneous": "npm test -- src/__tests__/unit/blocked-test.test.ts",
     "test:quick": "npm test -- src/__tests__/integration/boot-orchestrator.integration.test.ts src/__tests__/unit/config-loader.test.ts src/__tests__/unit/state-manager.test.ts",
-    "test:comprehensive": "npm run typecheck && npm run test:unit && npm run test:core-framework && npm run test:security && npm run test:performance && npm run test:session-management && npm run test:code-analysis && npm run test:processors && npm run test:miscellaneous",
+    "test:comprehensive": "npm run typecheck && npm run test:unit && npm run test:core-framework && npm run test:security && npm run test:performance && npm run test:session-management && npm run test:code-analysis && npm run test:processors && npm run test:miscellaneous && npm test -- src/__tests__/unit/llm-governance-provider.test.ts src/__tests__/unit/mcp-server-smoke.test.ts",
     "test:integration-all": "npm test -- src/__tests__/integration/",
     "test:performance-all": "npm test -- src/__tests__/performance/ src/__tests__/unit/performance-system.test.ts src/__tests__/unit/benchmark.test.ts src/__tests__/unit/analytics.test.ts",
     "test:agents-all": "echo 'Legacy agents test entry retired'",
@@ -180,6 +180,7 @@
     "src/skills/",
     "src/mcps/",
     ".plugin/",
+    ".grok-plugin/",
     ".opencode/agents/",
     ".opencode/commands/",
     ".opencode/hooks/",

package/scripts/foundry/CHANGELOG.md

@@ -2,7 +2,7 @@
 
 ## [Unreleased]
 
-Shop plant is first-class with mill plant. `shop-extract`, `shop-witness`, `shop-pin` (and `foundry.json` `shopPlant`) are not a costume dump. `"costume": true` still required for 45/42. No mill version bump.
+Shop plant is first-class with mill plant. `shop-extract`, `shop-witness`, `shop-pin` (and `foundry.json` `shopPlant`) are not a costume dump. `"costume": true` still required for 45/42. Inspect isolated-home dest is project `.grok/plugins/0xray`. Shared HOME last-mile does not write machine `~/.grok/plugins/0xray`. Isolated HOME must not write the passwd machine plugin. No mill version bump.
 
 ## [0.1.9] - 2026-09-09
 

package/scripts/foundry/README.md

@@ -32,7 +32,7 @@ npx @0xray/foundry hooks
 
 `FOUNDRY_ROOT` overrides cwd (the repo being milled).
 
-`gate` is build + test + docs-check. `docs-build` runs Docusaurus on the 0xray exo (`docs-site/`); stranger mills skip. `inspect` runs the six mill checks (diff, plant vs worn, receipt, CI, live tarball GET, isolated HOME). Mint fails on a costume dump. Isolated HOME skips machine `~/.grok`. `ci` reports GitHub Actions (no auto-push). `hooks` installs git pre/post hooks. GitHub `0xRay CI/CD` is the mill gate on `main`. `Deploy Docs` is the mill Pages put.
+`gate` is build + test + docs-check. `docs-build` runs Docusaurus on the 0xray exo (`docs-site/`); stranger mills skip. `inspect` runs the six mill checks (diff, plant vs worn, receipt, CI, live tarball GET, isolated HOME). Mint fails on a costume dump. Isolated HOME skips machine `~/.grok`. Shared HOME last-mile dest is project `.grok/plugins/0xray` (no last-wins machine plugin). `ci` reports GitHub Actions (no auto-push). `hooks` installs git pre/post hooks. GitHub `0xRay CI/CD` is the mill gate on `main`. `Deploy Docs` is the mill Pages put.
 
 `docs-check` and `gate` run **full** 0xRay corpus only when the milled `package.json` name is `0xray` and `docs-site/` exists. Otherwise **light**: `package.json` + CHANGELOG.
 
@@ -57,7 +57,7 @@ After mill plant is fastened, overlay their plant (defaults; remap in `foundry.j
 
 **Shop plant:** `shop-extract`, `shop-witness`, `shop-pin` are first-class with mill plant. Inspect does not treat those worn names as a costume dump. `foundry.json` `"shopPlant"` names more shops (array), a plant dir (string), or `{ "skills": [...], "dir": "..." }`. This is not `"costume": true` and does not copy 45/42.
 
-**4.0.9 mill target (0xray postinstall, not this mill package):** `install-bridges.cjs` does not mill npm global prefix or npx `_npx` as a consumer. Isolated HOME skips machine `~/.grok`. Nested mill stays **0.1.9**.
+**4.0.9 mill target (0xray postinstall, not this mill package):** `install-bridges.cjs` does not mill npm global prefix or npx `_npx` as a consumer. Isolated HOME skips machine `~/.grok`. Shared HOME Grok last-mile is project `.grok/plugins/0xray` (two seats do not clobber machine plugin). Nested mill stays **0.1.9**.
 
 ## Publish this mill
 

package/scripts/foundry/inspect.mjs

@@ -42,6 +42,18 @@ export function wouldClobberMachineGrok(
   return mint.wouldClobberMachineGrok(dest, env, machine);
 }
 
+export function projectGrokPluginDir(targetDir) {
+  return mint.projectGrokPluginDir(targetDir);
+}
+
+export function resolveGrokPluginDests(
+  targetDir,
+  env = process.env,
+  machine = mint.machineHome(),
+) {
+  return mint.resolveGrokPluginDests(targetDir, env, machine);
+}
+
 function readJson(file) {
   try {
     return JSON.parse(fs.readFileSync(file, "utf8"));
@@ -218,17 +230,20 @@ export function packagesToProbe(root) {
   });
 }
 
-function checkIsolatedHome(env = process.env, machine = mint.machineHome()) {
+function checkIsolatedHome(root, env = process.env, machine = mint.machineHome()) {
   const isolated = isIsolatedHome(env, machine);
   const machinePlugin = machineGrokPluginDir(machine);
-  const home = env.HOME || env.USERPROFILE || "";
-  const dest = home ? path.join(home, ".grok", "plugins", "0xray") : "";
-  const clobber = wouldClobberMachineGrok(dest, env, machine);
+  const dests = mint.resolveGrokPluginDests(root, env, machine);
+  const dest = dests[0] || null;
+  const clobber = dests.some((d) => wouldClobberMachineGrok(d, env, machine));
   if (clobber) {
     return {
       id: "isolated-home",
       ok: false,
       isolated,
+      dest,
+      dests,
+      machinePlugin,
       detail: `isolated HOME must not write ${machinePlugin}`,
     };
   }
@@ -237,7 +252,8 @@ function checkIsolatedHome(env = process.env, machine = mint.machineHome()) {
     ok: true,
     isolated,
     machinePlugin,
-    dest: dest || null,
+    dest,
+    dests,
   };
 }
 
@@ -275,7 +291,7 @@ export async function inspectSuit(root, opts = {}) {
     }
   }
 
-  checks.push(checkIsolatedHome(env, machineHome));
+  checks.push(checkIsolatedHome(root, env, machineHome));
 
   const failed = checks.filter((c) => c.ok === false);
   const receipt = checks.find((c) => c.id === "receipt") || {};

package/scripts/foundry/mint-suit.cjs

@@ -217,6 +217,10 @@ function machineGrokPluginDir(machine) {
   return path.join(machine || machineHome(), ".grok", "plugins", "0xray");
 }
 
+function projectGrokPluginDir(targetDir) {
+  return path.join(targetDir, ".grok", "plugins", "0xray");
+}
+
 function wouldClobberMachineGrok(dest, env, machine) {
   if (!dest) return false;
   const realMachine = machine || machineHome();
@@ -226,6 +230,24 @@ function wouldClobberMachineGrok(dest, env, machine) {
   return target === real || target.startsWith(`${real}${path.sep}`);
 }
 
+/**
+ * Last-mile Grok plugin dests. Project floor always.
+ * Isolated HOME may also wear $HOME/.grok/plugins/0xray (not passwd machine).
+ * Shared HOME never writes machine ~/.grok/plugins/0xray (multi-seat last-wins).
+ */
+function resolveGrokPluginDests(targetDir, env, machine) {
+  const realMachine = machine || machineHome();
+  const dests = [projectGrokPluginDir(targetDir)];
+  if (!isIsolatedHome(env, realMachine)) return dests;
+  const home = processHome(env);
+  if (!home) return dests;
+  const isolatedDest = path.join(home, ".grok", "plugins", "0xray");
+  if (wouldClobberMachineGrok(isolatedDest, env, realMachine)) return dests;
+  if (path.resolve(isolatedDest) === path.resolve(dests[0])) return dests;
+  dests.push(isolatedDest);
+  return dests;
+}
+
 /**
  * Project skill dirs on every TUI floor. Create on fasten. Never machine home.
  * YML agents stay OpenCode (`.opencode/agents`).
@@ -578,5 +600,7 @@ module.exports = {
   processHome,
   isIsolatedHome,
   machineGrokPluginDir,
+  projectGrokPluginDir,
+  resolveGrokPluginDests,
   wouldClobberMachineGrok,
 };

package/scripts/foundry/plant/skills/inspect/SKILL.md

@@ -16,7 +16,7 @@ Mill **does** these checks (`npx @0xray/foundry inspect`). Mint fails on a costu
 3. **Mill receipt.** `.xray/foundry-inventory.json` — mill name/version, `suit` (`fastened` / `overlay` / `costume`), `millPlant.skills` must include `mill` and `inspect`.
 4. **CI.** GitHub mill CI report (`.opencode/logs/ci-cd-monitor-report.json`), not a green check in chat. No token is a skip, not a pass invented.
 5. **Live PUT.** HTTP 200 on the npm `.tgz`. Metadata without a tarball is not shipped.
-6. **Isolated HOME.** Last-mile must not clobber `~/.grok/plugins/0xray`. Mill compares `$HOME` to the passwd home (`os.userInfo().homedir`), not `os.homedir()` (which follows `$HOME`).
+6. **Isolated HOME.** Last-mile dest is project `.grok/plugins/0xray`. Isolated HOME may wear `$HOME/.grok/plugins/0xray` and must not write machine `~/.grok/plugins/0xray`. Shared HOME (passwd `$HOME`) does not last-wins clobber the machine plugin. Mill compares `$HOME` to the passwd home (`os.userInfo().homedir`), not `os.homedir()` (which follows `$HOME`).
 
 ## How to work