0xray 4.0.13 → 4.0.15

package/dist/validation/report-content-validator.js

@@ -0,0 +1,218 @@
+/**
+ * Report Content Validator
+ * Reads and analyzes full report content to detect hidden errors and inconsistencies
+ */
+export class ReportContentValidator {
+    reportPatterns = {
+        // Error patterns that indicate real issues (excluding legitimate contexts)
+        criticalErrors: [
+            /\bERROR\b(?!\s*(handling|prevention|conditions?|messages?|logs?|recovery))/gi, // ERROR not followed by legitimate terms
+            /\bFAILED\b(?!\s*(to|attempts?|tests?|validation))/gi, // FAILED not in expected contexts
+            /\bCRASHED\b/gi,
+            /\bEXCEPTION\b(?!\s*(handling|thrown))/gi,
+            /\bFATAL\b(?!\s*(error|errors))/gi,
+            /❌/g,
+            /\[ERROR\]/g,
+            /\bBROKEN\b/gi,
+            /\bUNAVAILABLE\b/gi,
+            /\bDISABLED\b/gi,
+        ],
+        // Warning patterns that need attention
+        warnings: [
+            /\bWARNING\b/gi,
+            /\bWARN\b/gi,
+            /\bDEPRECATED\b/gi,
+            /\bUNSTABLE\b/gi,
+            /⚠️/g,
+            /\[WARN\]/g,
+        ],
+        // Success claims that might be false
+        falsePositives: [
+            /\bSUCCESS\b.*\bFAILED\b/gi, // Success mentioned but failed occurred
+            /\bPASSED\b.*\bERROR\b/gi, // Passed but errors present
+            /\bCOMPLETED\b.*\bCRASHED\b/gi, // Completed but crashed
+        ],
+        // Inconsistency patterns
+        inconsistencies: [
+            /\b(\d+)\s+total.*\b(\d+)\s+failed/i, // Mismatched counts
+            /\b(\d+)\s+passed.*\b(\d+)\s+failed/i, // Success/failure count mismatch
+            /health.*score.*(\d+).*issues.*(\d+)/i, // Health score vs issue count mismatch
+        ],
+    };
+    /**
+     * Validate full report content for hidden errors
+     */
+    async validateReportContent(reportPath, reportType) {
+        const issues = [];
+        const criticalErrors = [];
+        const warnings = [];
+        const falsePositives = [];
+        const inconsistencies = [];
+        try {
+            // Read full report content
+            const fs = await import("fs");
+            if (!fs.existsSync(reportPath)) {
+                issues.push(`Report file not found: ${reportPath}`);
+                return this.createValidationResult(false, issues, 0, 0, 0, 0, [], [], [], []);
+            }
+            const content = fs.readFileSync(reportPath, "utf8");
+            // Analyze for critical errors
+            for (const pattern of this.reportPatterns.criticalErrors) {
+                const matches = content.match(pattern);
+                if (matches) {
+                    criticalErrors.push(...matches.map((match) => `Critical error pattern: "${match}"`));
+                }
+            }
+            // Analyze for warnings
+            for (const pattern of this.reportPatterns.warnings) {
+                const matches = content.match(pattern);
+                if (matches) {
+                    warnings.push(...matches.map((match) => `Warning pattern: "${match}"`));
+                }
+            }
+            // Analyze for false positives
+            for (const pattern of this.reportPatterns.falsePositives) {
+                const matches = content.match(pattern);
+                if (matches) {
+                    falsePositives.push(...matches.map((match) => `False positive detected: "${match}"`));
+                }
+            }
+            // Analyze for inconsistencies
+            for (const pattern of this.reportPatterns.inconsistencies) {
+                const matches = content.match(pattern);
+                if (matches) {
+                    // Check if numbers don't add up
+                    const match = pattern.exec(content);
+                    if (match && match.length >= 3) {
+                        const num1 = parseInt(match[1] || "0");
+                        const num2 = parseInt(match[2] || "0");
+                        if (num1 > 0 && num2 > 0 && Math.abs(num1 - num2) > num1 * 0.1) {
+                            inconsistencies.push(`Number inconsistency: ${match[0]}`);
+                        }
+                    }
+                }
+            }
+            // Additional report-type specific validations
+            const typeSpecificIssues = await this.validateReportTypeSpecific(content, reportType);
+            issues.push(...typeSpecificIssues);
+            // Calculate risk level
+            const totalIssues = criticalErrors.length +
+                warnings.length +
+                falsePositives.length +
+                inconsistencies.length;
+            let riskLevel = "low";
+            if (criticalErrors.length > 0)
+                riskLevel = "critical";
+            else if (falsePositives.length > 0 || inconsistencies.length > 2)
+                riskLevel = "high";
+            else if (warnings.length > 5 || inconsistencies.length > 0)
+                riskLevel = "medium";
+            return {
+                valid: criticalErrors.length === 0 && falsePositives.length === 0,
+                issues,
+                summary: {
+                    errorCount: criticalErrors.length,
+                    warningCount: warnings.length,
+                    falsePositiveCount: falsePositives.length,
+                    inconsistencyCount: inconsistencies.length,
+                    riskLevel,
+                },
+                details: {
+                    criticalErrors,
+                    warnings,
+                    falsePositives,
+                    inconsistencies,
+                },
+            };
+        }
+        catch (error) {
+            issues.push(`Failed to validate report content: ${error}`);
+            return this.createValidationResult(false, issues, 0, 0, 0, 0, [], [], [], []);
+        }
+    }
+    async validateReportTypeSpecific(content, reportType) {
+        const issues = [];
+        switch (reportType) {
+            case "session":
+                // Check for session-specific issues
+                const hasSessionContent = content.includes("session") ||
+                    content.includes("Session") ||
+                    content.includes("coordinator") ||
+                    content.includes("agent") ||
+                    content.includes("delegation") ||
+                    content.includes("migration");
+                if (!hasSessionContent) {
+                    issues.push("Session report missing session-related content");
+                }
+                // Check for session management terminology
+                const sessionTerms = [
+                    "coordinator",
+                    "agent",
+                    "delegation",
+                    "migration",
+                    "persistence",
+                ];
+                const missingTerms = sessionTerms.filter((term) => content.includes(term) && !content.includes(term + " "));
+                if (missingTerms.length > 0) {
+                    issues.push(`Session report mentions sessions but lacks key terminology: ${missingTerms.join(", ")}`);
+                }
+                break;
+            case "framework":
+                // Check for framework health indicators
+                if (!content.includes("health") && !content.includes("Health")) {
+                    issues.push("Framework report missing health assessment");
+                }
+                if (content.includes("error") && !content.includes("resolution")) {
+                    issues.push("Framework report mentions errors but no resolution steps");
+                }
+                break;
+            case "validation":
+                // Check for validation completeness
+                if (!content.includes("validator") && !content.includes("validation")) {
+                    issues.push("Validation report missing validation terminology");
+                }
+                break;
+            case "simulation":
+                // Check for simulation metrics
+                if (!content.includes("simulation") && !content.includes("scenario")) {
+                    issues.push("Simulation report missing simulation context");
+                }
+                if (content.includes("success") && !content.includes("metrics")) {
+                    issues.push("Simulation report claims success but lacks performance metrics");
+                }
+                break;
+        }
+        return issues;
+    }
+    createValidationResult(valid, issues, errorCount, warningCount, falsePositiveCount, inconsistencyCount, criticalErrors, warnings, falsePositives, inconsistencies) {
+        return {
+            valid,
+            issues,
+            summary: {
+                errorCount,
+                warningCount,
+                falsePositiveCount,
+                inconsistencyCount,
+                riskLevel: "critical",
+            },
+            details: {
+                criticalErrors,
+                warnings,
+                falsePositives,
+                inconsistencies,
+            },
+        };
+    }
+    /**
+     * Get validation patterns for debugging
+     */
+    getValidationPatterns() {
+        return { ...this.reportPatterns };
+    }
+    /**
+     * Add custom validation pattern
+     */
+    addValidationPattern(category, pattern) {
+        this.reportPatterns[category].push(pattern);
+    }
+}

package/llms.txt

@@ -4,11 +4,12 @@
 
 **4.0** — mill+inspect plant, 7 MCPs, Codex 69. Constitution always on.
 
-Default consumer wear is **mill plant** (`mill` + `inspect`), not a 45-skill / 42-agent costume dump. `foundry.json` `"costume": true` is the opt-in dump. Do not use costume to land hangar shops.
+Default consumer wear is **mill plant** (`mill` + `inspect`), not a 45-skill / 42-agent costume dump. `foundry.json` `"costume": true` is the opt-in dump. Do not use costume to land hangar shops. Fasten is **foundry-plant/0**: builtin plant is mill+inspect only. `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill package declares. Organs (looker, vibe, mixer) live in the mill — adding an organ is a mill publish, not an xray catalog PR. CLI shims `foundry blip|sound` still exist on foundry 0.1.11+; fasten is the new cut. Inspect reports the last bed or blip receipt the mill exported. Nested mill `@0xray/foundry` 0.1.12. Not costume.
 
 ## Wear (what a stranger gets)
 
-- `npm install 0xray` — postinstall fastens mill+inspect, writes 7 MCP `.mcp.json`, four host bridges (OpenCode, Grok, Hermes, OpenClaw), overlays their plant. Grok last-mile dest is project `.grok/plugins/0xray`. Shared HOME does not last-wins clobber machine `~/.grok/plugins/0xray`. Isolated HOME must not write the machine plugin. Does **not** write consumer-root `SKILLS.md`.
+- `npm install 0xray` — postinstall fastens mill+inspect, writes 7 MCP `.mcp.json`, four host bridges (OpenCode, Grok, Hermes, OpenClaw) plus Cursor `.cursor/hooks.json`, overlays their plant. Grok last-mile dest is project `.grok/plugins/0xray`. Shared HOME does not last-wins clobber machine `~/.grok/plugins/0xray`. Isolated HOME must not write the machine plugin. Does **not** write consumer-root `SKILLS.md`. Lead cadence: `grok-bot/ops/LEAD-CADENCE.md` — a peer continues from Station + Repertoire; dummy tests `SKILLS.md`; same-sess wear; branch/PR; OTP then poll; loop until Station; live ticks, not idle pacers.
+
 - `npx @0xray/foundry mint --skip-live` — re-fasten mill plant, then inspect.
 - `npx @0xray/foundry inspect --skip-live` — plant-vs-worn, receipt, CI. Chat is not a receipt.
 
@@ -34,7 +35,7 @@ Registered in `.mcp.json` as `npx -y 0xray mcp <cmd>`:
 | `xray-code-review` | Proposal quality |
 | `xray-architect-tools` | System design |
 
-Not an 8th `xray-*` server. Repertoire is a vendored organ (`npx @0xray/repertoire mcp`), enable-when-resolves.
+Not an 8th `xray-*` server. Repertoire is a vendored organ (`npx @0xray/repertoire mcp`), enable-when-resolves. Survive compact is **Station** (Read `.xray/state/STATION.md`), not Repertoire 0.1.8.
 
 ## Codex 69 (always on)
 
@@ -42,8 +43,10 @@ Not an 8th `xray-*` server. Repertoire is a vendored organ (`npx @0xray/repertoi
 
 ## Agent map (exo, not dump)
 
-- **Mill** — fasten their plant; factory discipline. Nested mill `@0xray/foundry` 0.1.10.
-- **Inspect** — diffs, plant-vs-worn, mill receipt, CI, live tarball GET.
+- **Mill** — fasten their plant; factory discipline. Nested mill `@0xray/foundry` 0.1.12 (foundry-plant/0). Builtin plant is mill+inspect. CLI shims `foundry blip|sound` remain (0.1.11+).
+- **Inspect** — diffs, plant-vs-worn, mill receipt, CI, live tarball GET. Fastened mill inspect is “did we wear what the mill declared” plus mill-exported inspect. Sound seat: last bed PASS/FAIL. Blip seat: last 4.44s PASS/FAIL.
+- **Sound** — factory-sound mill (`@0xray/blip`). Brief → seed → genre → crystal mill wav (Rippel membrane/metal/mixer) → metrics gate. Mixer organ lives in the mill. Not a mill copy. Not a 3-sine toy.
+- **Blip** — factory-blip mill (`@0xray/blip`). Brief → seed → still|motion:<id> → 4.44s mp4 + audio bed. Motions are Rippel v2 VisualConfig at ≥720p (sharp look + tempo/frequency animation on all five). Sparse seed mesh plus field accents (stars, grids, gradients, blinkers) are the NFT fingerprints. v0: still + Rippel five. `kapow` is a design opt (two-tier stamp on the stanza). `still` is the Power Plant ident (plate dissolves, not a frozen poster). Organs (inspect / vibe / mixer / looker) are declared by the mill, not a foundry catalog. Hangar shop pair later.
 - **Hangar** — plants factory shops on the four floors. Coexists with mill plant via shop plant allowlist.
 - **42 YML / 45 SKILL.md** — exo catalog in this repo. Not default consumer wear.
 
@@ -53,7 +56,7 @@ Not an 8th `xray-*` server. Repertoire is a vendored organ (`npx @0xray/repertoi
 - [AGENTS.md](AGENTS.md) — framework card
 - [AGENTS-consumer.md](AGENTS-consumer.md) — consumer card (copied to `AGENTS.md` on install)
 - [SKILLS.md](SKILLS.md) — catalog (costume / self-plant, not default sync)
-- [Foundry](docs-site/docs/architecture/v4-foundry.md) — mill vs exo, shopPlant
+- [Foundry](docs-site/docs/architecture/v4-foundry.md) — mill vs exo, foundry-plant/0, shopPlant
 - [Features since 3.1](docs-site/docs/guides/features-since-3.1.md)
 
 Playwright / UI: n/a. This mill is CLI.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "4.0.13",
+  "version": "4.0.15",
   "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
   "readme": "README.md",
   "license": "MIT",
@@ -61,6 +61,8 @@
   },
   "scripts": {
     "prepublishOnly": "node scripts/node/reconcile-version.mjs --check && npm run prepare-consumer && npm run build:all && find dist -name '*.js.map' -o -name '*.d.ts.map' | xargs rm -f 2>/dev/null || true",
+    "prepack": "node scripts/foundry/assert-packed-dist-cli.mjs",
+    "assert:packed-dist": "node scripts/foundry/assert-packed-dist-cli.mjs",
     "version:bump": "node scripts/foundry/reconcile-version.mjs",
     "version": "node scripts/foundry/version-manager.mjs",
     "prebuild": "rm -rf dist tsconfig.tsbuildinfo tsconfig.*.tsbuildinfo",
@@ -79,7 +81,7 @@
     "test:processors": "npm test -- src/__tests__/unit/processor-activation.test.ts src/__tests__/unit/typescript-compilation-processor.test.ts",
     "test:miscellaneous": "npm test -- src/__tests__/unit/blocked-test.test.ts",
     "test:quick": "npm test -- src/__tests__/integration/boot-orchestrator.integration.test.ts src/__tests__/unit/config-loader.test.ts src/__tests__/unit/state-manager.test.ts",
-    "test:comprehensive": "npm run typecheck && npm run test:unit && npm run test:core-framework && npm run test:security && npm run test:performance && npm run test:session-management && npm run test:code-analysis && npm run test:processors && npm run test:miscellaneous && npm test -- src/__tests__/unit/llm-governance-provider.test.ts src/__tests__/unit/mcp-server-smoke.test.ts",
+    "test:comprehensive": "npm run typecheck && npm run test:unit && npm run test:core-framework && npm run test:security && npm run test:performance && npm run test:session-management && npm run test:code-analysis && npm run test:processors && npm run test:miscellaneous && npm test -- src/__tests__/unit/llm-governance-provider.test.ts src/__tests__/unit/mcp-server-smoke.test.ts src/__tests__/unit/cursor-hooks.test.ts src/__tests__/unit/host-vs-mill-score.test.ts",
     "test:integration-all": "npm test -- src/__tests__/integration/",
     "test:performance-all": "npm test -- src/__tests__/performance/ src/__tests__/unit/performance-system.test.ts src/__tests__/unit/benchmark.test.ts src/__tests__/unit/analytics.test.ts",
     "test:agents-all": "echo 'Legacy agents test entry retired'",
@@ -210,6 +212,7 @@
     "vendor/@0xray/repertoire/"
   ],
   "dependencies": {
+    "@0xray/blip": "^0.1.2",
     "@modelcontextprotocol/sdk": "^1.0.4",
     "commander": "^11.1.0",
     "express": "^5.2.1",

package/scripts/foundry/CHANGELOG.md

@@ -2,6 +2,72 @@
 
 ## [Unreleased]
 
+Shim `sound-voice.cjs` → `@0xray/blip/sound-voice`. Depend on published `@0xray/blip@^0.1.2`. Foundry stamp stays 0.1.12. Do not vendor mill drawers.
+
+## [0.1.12] - 2026-09-18
+
+Fasten is foundry-plant/0: mill packages declare plants in package.json (`mill.protocol`, prefix selection when skills/agents are omitted) and foundry copies organs from that package. Builtin catalog is mill+inspect only; foundry does not catalog mill organs. `foundry.json` `"plant": "blip"|"sound"` are package aliases for `@0xray/blip`, not skill lists. Unknown mill packages fail closed (`npm i`). Inventory records `millPackage` and `millProtocol` when a mill package was used.
+
+## [0.1.11] - 2026-09-18
+
+Blip and sound mill drawers moved to `@0xray/blip` (wow-pass listen/cel + looker organ in that package). This foundry keeps fasten + inspect + `foundry blip|sound` shims including `blip look` / `blip replay`. Depend on `@0xray/blip@^0.1.0`. Stamp 0.1.11 on plant agent YAMLs and llms.txt. Four organs: inspect = file/duration, vibe = stamp density, mixer = ears, looker = friend hitting replay (bar 8).
+
+### During 0.1.10 (no mill bump)
+
+Factory-blip vibe seat: `blip-vibe` scores still + Rippel five + kapow on the same aesthetic organ. Appeal 0–10. Ship bar is 8. Shared fill / tint / contrast / outline / flash / differ; kapow extras stay kapow-only. Kapow is a comic burst: 8–10 outer points, 6–8 inner, some spikes longer than others. Inspect stays last-blip. No version bump.
+
+Factory-sound mixer seat: `sound-mixer` plant agent levels every genre × tempo × motif (hats / plate / glue). `npx @0xray/foundry sound mix`. Plate send/feedback down, hot hats pulled, glue eased. Inspect stays last-bed. No version bump.
+
+Factory-blip kapow design opt: `--mode motion:kapow` paints a two-tier stamp on hook → turn → tag. Outer cyan burst winds, inner gold burst + word slam the jewel cut. One noun in the hole. Not a Rippel import and not a look. Foundry 0.1.10 — no bump.
+
+Factory-blip music drop: `motifOf` seed cell (hook statement → turn answer → tag stamps hook[0]). `mixPhraseDrop` lands a crash on `phraseMarks.turnAt` — same beat as the jewel cut — on every genre. Ambient/rock no longer keep private crashes. Six bodies stay tellable. Inspect chop/levels/peak still PASS.
+
+Factory-blip entertainment verb: focus moons paint behind the nucleus then in front (real occlusion). Strike / embers / ribbons wear the house noun (cyan disc + gold pupil). Embers erupt on the turn. Mesh stays the jewel so cage and mesh still sort. Iterate pass is every seat ≥7; drop is every seat ≥8.
+
+Factory-blip stellar pass: phrase eases spin (hook crawl → turn whip → tag hold). Mesh is a cyan/gold jewel with vertex beads. Strike wears a ghost hull under 2–3 thick strikes. Embers seat coals on verts and edge midpoints with longer wakes. Focus satellites occlude. Sacred-flow is one poly + nucleus + ring. Bed sectionGain is a Short (turn louder than hook, tag seals).
+
+Factory-blip metamorphosis pass: mill mesh wears a phrase-driven face wash; strike holds 2–3 edges (never the full hull); embers are coals with heat wakes, not pinholes. Cage keeps the nucleus and drops orbiting HUD ticks. Waves drop the gold playhead and gain turn amplitude. Phrase is mass, not a zoom knob.
+
+Factory-blip drops the outer-edge HUD bezel. Field grids are `floor` or `none`. Legacy receipt ids `ticks` / `meridian` no-op — no ruler ticks on the frame, no meridian box.
+
+Factory-blip course-correct: mill swirl / snap / spark are no longer one drawer (`mesh` / `strike` / `embers`). Sticker-sheet satellites stay on focus only. Unknown `--genre` fails closed. Still plate shares the seed genre. Auto bed writes imaged stereo (hats/color off-center), not L=R upmix. Receipt `stereoImage`.
+
+Sound mill ports techno FM lead, phonk formant stabs, rock + timeless tables (country→timeless, game→techno). Ambient scale is the 14-note Rippel table. Foundry 0.1.10 — no bump.
+
+Factory-blip phrase eases (hookEase/turnEase/tagEase). Still plates dissolve (~300ms). Focus orb wears field + mesh mass. Ambient bed is a 3-section score (turn crash, tag stab). Mill stays deterministic — no LLM in the render loop.
+
+Factory-blip is a 4.44s Short: hook → turn → tag on the shared motion grid (picture + bed). Motif lines, pad in-key, bass an octave down. Voices: polyBLEP + biquad, layered kick, FM hat + noise, 2-op rhodes. Mix pocket + short plate on color/hat.
+
+Factory-blip look variants: seed + `--look focus|cage`. `focus` restores the sharp-dogfood solid cyan disc + gold pupil + orbiting satellites. `cage` keeps Wu hairline + field. Receipt `visualConfig.lookKind`.
+
+Factory-blip mux is stereo AAC. Inspect FAILs a missing stream or an inaudible bed (max volume ≤ −40 dB). A silent wav is no longer a PASS.
+
+Factory-blip orb nucleus is orb-only (disc / eclipse / pulse, color + size on the grid). Swirl / snap / spark no longer stamp the same double circle.
+
+Factory-blip audio syncopates to the motion grid: same seed + tempo + phase0=0. Downbeat kick locks to `kickAccent`; AND hat locks to `andAccent`. Not a flat bed under unrelated LFOs.
+
+Factory-blip auto bed is the music — same seed / tempo / phase0 as the picture. 4.44s beds hit on the first downbeat (no 0.5s duck). Kick + AND hat + bass/rhodes on the grid. Pad sits under.
+
+Factory-blip lines: Wu hairline (solid 1px core, coverage AA as the only glow). Cyan/gold/blue along the stroke. Vertex beads gone.
+
+Factory-blip lines iridesce: cyan/gold/blue travel + glow + beat fireflies on the sparse cage. Field stars / grids / gradients / blinkers are luminous, not CAD ticks. Not more wire. Not a strobe.
+
+Factory-blip field accents: uniqueness is stars / grids (`floor` / `none`) / gradients / blinkers around one sparse seed cage. Receipt `visualConfig.mesh` + `visualConfig.field`. Not more wire in the middle.
+
+Factory-blip meshes: every mint gets a seed-unique polyhedron (12 families + gait). Worn by all five viz and the Power Plant ident.
+
+Factory-blip Power Plant is a living ident (`look: power-plant-blip`) — titlecard / corridor / rain / endcard dissolve over 4.44s at ≥720p. Not a frozen 320×180 poster.
+
+Factory-blip Rippel v2: the sharp orb look (`stampFocusDisc` opaque body + crisp rim + short glow) is now the look on **all five** viz — swirl / snap / waves / spark were still Phase 1 bokeh strokes. Animation is the complex Rippel set, paced as a 4.44s blip (fast abstract travel, soft gold tints — no hard strobe). Video LFOs share the crystal-mill genre tempo + `CircleConfig.frequency` with the audio bed. Mandatory 4.44s mux unchanged. No version bump.
+
+Factory-blip Phase 1 (TICKET-BLIP-RENDERER-UPGRADE): default motion path is the Rippel converter spine (`VisualConfig.circles` → SimplifiedVisualConverter viz ids) at ≥720p, not ffmpeg geometry labeled as orb. `htafolla/rippel-synapse-flow@e5014cd`. Every Blip muxes a 4.44s audio bed (`--bed` or auto sound mill); silent mp4 = inspect FAIL. ffmpeg wireframe is `--engine wireframe` only. Still stays the Power Plant plate until Phase 2. No `@0xray/foundry` bump.
+
+Factory-blip plant (`blip` + `blip-inspect`) — sibling to mill + sound, not a mill copy. `foundry.json` `"plant": "blip"` fastens the tiny-video factory and turns mill off. Dynamic motion registry (not a frozen Rippel enum). v0: still + Rippel five. `kapow` is a growth stub. Still generator wears the Power Plant intro plate (`#08090B` `#F5F7FA` `#3DE0E8` `#F5C518` `#4A7FD4`). Headless 4.44s mp4 + receipt. Inspect reports last blip PASS/FAIL. Not costume. No version bump — dogfood from branch / pack.
+
+Sound plant retool: crystal-clear mill of Rippel SSOT chains (membrane / metal / duo-bass / mixer), not the Lovable volume-hack soup and not #62 sine beds. Tone.Offline blocked in Node. `phonk` first-class. No version bump.
+
+Factory-sound plant (`sound` + `sound-inspect`). `foundry.json` `"plant": "sound"` fastens the bed factory and turns mill off. Headless render + metrics receipt. Inspect reports last bed PASS/FAIL. Not a mill copy. Not costume. No version bump — dogfood from branch / pack.
+
 ## [0.1.10] - 2026-09-12
 
 Inspect isolated-home `dest` is `resolveGrokPluginDests` — on shared HOME that is project `.grok/plugins/0xray`, not machine `$HOME/.grok/plugins/0xray`. Published 0.1.9 still joined dest from `$HOME` (report/CLI lag after 0xray@4.0.12 / #29 wear). Shop plant is first-class with mill plant. `shop-extract`, `shop-witness`, `shop-pin` (and `foundry.json` `shopPlant`) are not a costume dump. `"costume": true` still required for 45/42. Isolated HOME must not write the passwd machine plugin. Not an 8th MCP. Not 5.0.

package/scripts/foundry/README.md

@@ -24,6 +24,13 @@ npx @0xray/foundry release --publish-only --dry-run
 npx @0xray/foundry release --publish-only --i-mean-it
 npx @0xray/foundry mint
 npx @0xray/foundry inspect [--skip-live]
+npx @0xray/foundry sound render [--brief TEXT] [--genre ambient|techno|jazz]
+npx @0xray/foundry sound inspect
+npx @0xray/foundry sound mix
+npx @0xray/foundry blip render --brief TEXT --mode still|motion:<id> [--look focus|cage] [--body mill|rippel] [--genre ambient|techno|phonk|jazz|rock|timeless] [--camera front|three-quarter|top|low|dutch|side] [--bed PATH] [--engine rippel|wireframe]
+npx @0xray/foundry blip inspect
+npx @0xray/foundry blip vibe
+npx @0xray/foundry blip look
 npx @0xray/foundry ci [--commit SHA] [--report]
 npx @0xray/foundry hooks
 ```
@@ -53,11 +60,23 @@ After mill plant is fastened, overlay their plant (defaults; remap in `foundry.j
 
 **Mill-fill is law:** their keys/files win; mill names they did not plant stay unless they overlay the same name. JSON facets always merge. Skill overlay is project dirs on every TUI floor (OpenCode, Grok, Hermes, OpenClaw). YML agents stay OpenCode. CLI re-wear calls mint **once** after mill copies. Isolated HOME is passwd home, not `os.homedir()`. CI report is `.xray/foundry-ci-report.json` (`.opencode/logs` shim).
 
-**Default mill plant:** `mill` + `inspect` (inspect AI work). Fastens a suit, not an empty one. Not 45/42 costume. `foundry.json` `"costume": true` copies that dump. Factory Repertoire still enable-when-resolves. PPE stays worn.
+**Default mill plant:** `mill` + `inspect` (inspect AI work). Fasten is **foundry-plant/0**: builtin plant is mill+inspect only (files from this package `plant/`). Fastens a suit, not an empty one. Not 45/42 costume. `foundry.json` `"costume": true` copies that dump. Factory Repertoire still enable-when-resolves. PPE stays worn.
+
+**foundry-plant/0:** `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill package declares and ships in its own `plant/`. Organs (looker, vibe, mixer) live in the mill. Adding an organ is a mill publish, not a foundry catalog PR. CLI shims `foundry blip|sound` still exist on foundry 0.1.11+; fasten is the new cut. Foundry **0.1.12**.
+
+**Sound plant (factory-sound):** mill `@0xray/blip`. Alias `"plant": "sound"` fastens what that mill declares (`sound` + `sound-inspect` + `sound-mixer` today) and turns mill off. Spine: brief → checksum seed → genre (`ambient` | `techno` | `jazz` | `phonk`) → crystal-clear headless wav (Rippel membrane + metal + mixer, not a 3-sine toy) → metrics gate → `.xray/sound-bed-receipt.json`. `npx @0xray/foundry sound mix` levels every genre × tempo × motif (hats / plate / glue). Tone.Offline is blocked in Node (no `OfflineAudioContext`). Mixer organ lives in `@0xray/blip`; this package shims `foundry sound`. Inspect reports the mill-declared plant plus last bed `PASS`/`FAIL`. Not costume.
+
+A 4.44s lock is a Short: seed motif (hook cell → turn answer → tag stamps hook[0]). The crash lands on the jewel cut.
+
+A friend would hear: the sound mill mills Dist beds like Rippel’s prototype grew up — kick membranes, metal hats, and a crystal-clear mixer, not a muddy toy and not a 3-sine pad.
+
+**Blip plant (factory-blip):** mill `@0xray/blip` — sibling factory to mill + sound, not a mill copy. Alias `"plant": "blip"` fastens what that mill declares (`blip` + `blip-inspect` + `blip-vibe` + `blip-looker` today) and turns mill off. `npx @0xray/foundry blip vibe` scores stamp density. `npx @0xray/foundry blip look` is the friend hitting replay (appeal 0–10, ship bar 8). Motions live in `plant/motions/registry.json` (not a frozen Rippel enum). v0: `still` + Rippel five (`orb` `swirl` `snap` `waves` `spark`). `kapow` is a design opt — two-tier comic stamp on the same stanza (outer burst winds, inner burst + word slam the jewel cut). Unknown id FAIL. Rippel v2 default motion path is the Rippel converter (`VisualConfig.circles` → canvas / 3d-sacred / neural / waveform / particles) at ≥720p — one mill suit (Wu, Power Plant, hook → turn → tag) on `--look` / `--body` / `--genre` / `--camera` (seed picks). Audio syncopates to the motion grid (same seed, tempo, phase0=0). Each mint wears a sparse seed mesh plus a seed camera (front / three-quarter / top / low / dutch / side) plus field accents (stars, grids, gradients, blinkers) so 4.44s is unique blip art; the turn ruptures cage and snap, and looker wears one large eclipse moon the noun eats. Receipt `visualConfig.mesh` + `visualConfig.field` are the fingerprints. ffmpeg wireframe is `--engine wireframe` only. `still` is the Power Plant ident (void `#08090B` · ink `#F5F7FA` · cyan `#3DE0E8` · gold `#F5C518` · agent blue `#4A7FD4`) — titlecard / corridor / rain / endcard dissolve over 4.44s at ≥720p, not a frozen poster. Every 4.44s mp4 muxes a stereo AAC bed (`--bed` or auto sound mill) → `.xray/blip/receipt.json`. Missing stream or inaudible bed = inspect FAIL. Inspect reports the mill-declared plant, live ids, plus last blip `PASS`/`FAIL`. Organs live in `@0xray/blip`; this package shims `foundry blip`. Not costume.
+
+A friend would hear: Blips should look like Rippel living motions with sound, not a silent wireframe box.
 
 **Shop plant:** `shop-extract`, `shop-witness`, `shop-pin` are first-class with mill plant. Inspect does not treat those worn names as a costume dump. `foundry.json` `"shopPlant"` names more shops (array), a plant dir (string), or `{ "skills": [...], "dir": "..." }`. This is not `"costume": true` and does not copy 45/42.
 
-**4.0.9 mill target (0xray postinstall, not this mill package):** `install-bridges.cjs` does not mill npm global prefix or npx `_npx` as a consumer. Isolated HOME skips machine `~/.grok`. Shared HOME Grok last-mile is project `.grok/plugins/0xray` (two seats do not clobber machine plugin). Nested mill **0.1.10** (inspect dest matches `resolveGrokPluginDests`; published 0.1.9 still reported machine `$HOME` dest).
+**4.0.9 mill target (0xray postinstall, not this mill package):** `install-bridges.cjs` does not mill npm global prefix or npx `_npx` as a consumer. Isolated HOME skips machine `~/.grok`. Shared HOME Grok last-mile is project `.grok/plugins/0xray` (two seats do not clobber machine plugin). Nested mill **0.1.12** (foundry-plant/0; blip/sound drawers in `@0xray/blip`; inspect dest matches `resolveGrokPluginDests`).
 
 ## Publish this mill
 

package/scripts/foundry/assert-packed-dist-cli.mjs

@@ -0,0 +1,103 @@
+#!/usr/bin/env node
+/**
+ * Fail if the tarball npm would publish does not contain dist/cli/index.js.
+ *
+ * 0xray@4.0.13 listed dist/ in package.json files[] but packed 0 dist files.
+ * npm pack silently omits missing files[] entries when dist/ is not on disk.
+ *
+ * Dry-run uses --ignore-scripts so this can run from prepack without recursion.
+ */
+
+import { execSync } from "node:child_process";
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { isXrayExoRepo, resolveMillRoot } from "./mill-root.mjs";
+
+export const REQUIRED_PACK_PATHS = [
+  "dist/cli/index.js",
+  "dist/mcps/orchestrator.server.js",
+  "dist/integrations/grok/hooks/session-start.js",
+  "dist/integrations/cursor/hooks/hooks.json",
+  "dist/integrations/cursor/hooks/pre-tool-use.js",
+  "dist/integrations/cursor/hooks/pre-compact.js",
+  "dist/integrations/cursor/hooks/after-file-edit.js",
+  "dist/integrations/cursor/hooks/cursor-hook-utils.js",
+  "dist/integrations/cursor/hooks/cursor-usage-receipt.js",
+];
+
+export function packedFilePaths(files) {
+  if (!Array.isArray(files)) return [];
+  return files
+    .map((f) => (typeof f === "string" ? f : f && typeof f.path === "string" ? f.path : ""))
+    .filter(Boolean)
+    .map((p) => p.replace(/^package\//, ""));
+}
+
+export function parseNpmPackJson(raw) {
+  const text = String(raw ?? "");
+  const start = text.search(/[\[{]/);
+  if (start < 0) {
+    throw new Error("npm pack --json produced no JSON");
+  }
+  const parsed = JSON.parse(text.slice(start));
+  const entry = Array.isArray(parsed) ? parsed[0] : parsed;
+  return packedFilePaths(entry?.files);
+}
+
+export function assertPackedPaths(paths, required = REQUIRED_PACK_PATHS) {
+  const set = new Set((paths ?? []).map((p) => String(p).replace(/^package\//, "")));
+  const missing = required.filter((p) => !set.has(p));
+  if (missing.length > 0) {
+    throw new Error(
+      `npm pack omitted ${missing.join(", ")}. ` +
+        `package.json files[] lists dist/ but npm omits it when dist/ is missing on disk. ` +
+        `Run npm run build. Do not publish. (0xray@4.0.13 shipped 0 dist files.)`,
+    );
+  }
+}
+
+export function assertDistCliOnDisk(rootDir) {
+  const cli = path.join(rootDir, "dist", "cli", "index.js");
+  if (!fs.existsSync(cli)) {
+    throw new Error(
+      `dist/cli/index.js missing on disk at ${cli}. Run npm run build before pack/publish.`,
+    );
+  }
+}
+
+export function listPackedPathsDryRun(rootDir) {
+  const out = execSync("npm pack --dry-run --json --ignore-scripts", {
+    cwd: rootDir,
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "pipe"],
+  });
+  return parseNpmPackJson(out);
+}
+
+export function assertPackedDistCli(rootDir = resolveMillRoot()) {
+  if (!isXrayExoRepo(rootDir)) {
+    return { skipped: true, reason: "not 0xray exo" };
+  }
+  assertDistCliOnDisk(rootDir);
+  const paths = listPackedPathsDryRun(rootDir);
+  assertPackedPaths(paths);
+  return { skipped: false, paths: REQUIRED_PACK_PATHS };
+}
+
+const isMain =
+  process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url);
+
+if (isMain) {
+  try {
+    const result = assertPackedDistCli();
+    if (result.skipped) {
+      process.stdout.write(`ℹ️  packed dist/cli check skipped (${result.reason})\n`);
+    } else {
+      process.stdout.write(`✅ pack includes ${REQUIRED_PACK_PATHS.join(", ")}\n`);
+    }
+  } catch (err) {
+    process.stderr.write(`❌ ${err.message}\n`);
+    process.exit(1);
+  }
+}

package/scripts/foundry/blip-kapow.cjs

@@ -0,0 +1,2 @@
+/** Shim — mill drawers live in @0xray/blip. */
+module.exports = require("@0xray/blip/blip-kapow");

package/scripts/foundry/blip-looker.cjs

@@ -0,0 +1,2 @@
+/** Shim — mill drawers live in @0xray/blip. */
+module.exports = require("@0xray/blip/blip-looker");

package/scripts/foundry/blip-render.cjs

@@ -0,0 +1,2 @@
+/** Shim — mill drawers live in @0xray/blip. */
+module.exports = require("@0xray/blip/blip-render");

package/scripts/foundry/blip-rippel-organs.cjs

@@ -0,0 +1,2 @@
+/** Shim — mill drawers live in @0xray/blip. */
+module.exports = require("@0xray/blip/blip-rippel-organs");

package/scripts/foundry/blip-rippel.cjs

@@ -0,0 +1,2 @@
+/** Shim — mill drawers live in @0xray/blip. */
+module.exports = require("@0xray/blip/blip-rippel");

package/scripts/foundry/blip-scene.cjs

@@ -0,0 +1,2 @@
+/** Shim — mill drawers live in @0xray/blip. */
+module.exports = require("@0xray/blip/blip-scene");

package/scripts/foundry/blip-stroke.cjs

@@ -0,0 +1,2 @@
+/** Shim — mill drawers live in @0xray/blip. */
+module.exports = require("@0xray/blip/blip-stroke");

package/scripts/foundry/blip-vibe.cjs

@@ -0,0 +1,2 @@
+/** Shim — mill drawers live in @0xray/blip. */
+module.exports = require("@0xray/blip/blip-vibe");

package/scripts/foundry/blip.mjs

@@ -0,0 +1,35 @@
+#!/usr/bin/env node
+/**
+ * Shim: product mill lives in @0xray/blip.
+ *   npx @0xray/foundry blip render|inspect|vibe|look [...]
+ */
+import { spawnSync } from "node:child_process";
+import { createRequire } from "node:module";
+import path from "node:path";
+import { pathToFileURL } from "node:url";
+
+export { inspectBlip } from "@0xray/blip";
+
+const require = createRequire(import.meta.url);
+
+function runCli(args) {
+  let cli;
+  try {
+    cli = require.resolve("@0xray/blip/cli");
+  } catch {
+    process.stderr.write("Install @0xray/blip — the 4.44s mill moved off the OS foundry.\n");
+    process.exit(1);
+  }
+  const result = spawnSync(process.execPath, [cli, ...args], {
+    stdio: "inherit",
+    cwd: process.env.FOUNDRY_ROOT || process.cwd(),
+    env: process.env,
+  });
+  process.exit(result.status === null ? 1 : result.status);
+}
+
+const invoked =
+  process.argv[1] && pathToFileURL(path.resolve(process.argv[1])).href === import.meta.url;
+if (invoked) {
+  runCli(process.argv.slice(2));
+}

package/scripts/foundry/cli.mjs

@@ -2,7 +2,7 @@
 /**
  * @0xray/foundry CLI — mill, not exo. No fifth MCP.
  *
- *   npx @0xray/foundry <reconcile|stamp|gate|release|docs-check|docs-build|mint|inspect|ci|hooks> [...args]
+ *   npx @0xray/foundry <reconcile|stamp|gate|release|docs-check|docs-build|mint|inspect|sound|blip|ci|hooks> [...args]
  */
 
 import { spawnSync } from "node:child_process";
@@ -17,17 +17,21 @@ const COMMANDS = {
   "docs-build": { script: "docs-build.mjs", preset: [] },
   mint: { script: "mint.mjs", preset: [] },
   inspect: { script: "inspect.mjs", preset: [] },
+  sound: { script: "sound.mjs", preset: [] },
+  blip: { script: "blip.mjs", preset: [] },
   ci: { script: "ci-monitor.mjs", preset: [] },
   hooks: { script: "hooks.mjs", preset: [] },
 };
 
 const HELP =
-  "Usage: npx @0xray/foundry <reconcile|stamp|gate|release|docs-check|docs-build|mint|inspect|ci|hooks> [...args]\n" +
+  "Usage: npx @0xray/foundry <reconcile|stamp|gate|release|docs-check|docs-build|mint|inspect|sound|blip|ci|hooks> [...args]\n" +
   "\n" +
   "Mill, not exo. FOUNDRY_ROOT overrides cwd (the repo being milled).\n" +
   "release bumps/commits/pushes/publishes the milled cwd — pass --dry-run or --i-mean-it (or FOUNDRY_RELEASE=1).\n" +
-  "Mint fastens mill plant then overlays their plant (mill-fill JSON), then runs inspect. PPE stays worn.\n" +
-  "inspect runs the six mill checks (diff, plant vs worn, receipt, CI, live tarball GET, isolated HOME). Not an 8th MCP.\n" +
+  "Mint fastens the requested factory plant (default mill; foundry.json plant: sound|blip turns mill off), then inspect.\n" +
+  "inspect runs mill checks plus, on a sound seat, last bed receipt PASS/FAIL; on a blip seat, last blip receipt.\n" +
+  "sound render|inspect|mix is the factory-sound plant (brief → seed → genre → wav → metrics; mix levels every variation). Sibling to mill, not a mill copy.\n" +
+  "blip render|inspect|vibe|look is the factory-blip plant (brief → seed → still|motion:<id> → 4.44s mp4; vibe is stamp density, look is the friend hitting replay, ship bar 8). Sibling to mill + sound.\n" +
   "gate is build+test. docs-build is Docusaurus on the 0xray exo. ci reports GitHub Actions (no auto-push). hooks installs git pre/post hooks.\n";
 
 const cmd = process.argv[2];