0xray 4.0.13 → 4.0.15

package/scripts/foundry/plant/motions/registry.json

@@ -0,0 +1,82 @@
+{
+  "version": 1,
+  "law": "Motions are a dynamic registry (id → renderer). Rippel names are imports. Kapow is a design opt — two-tier stamp on the stanza.",
+  "v0": ["still", "orb", "swirl", "snap", "waves", "spark"],
+  "opt": ["kapow"],
+  "palette": {
+    "void": "#08090B",
+    "ink": "#F5F7FA",
+    "cyan": "#3DE0E8",
+    "gold": "#F5C518",
+    "blue": "#4A7FD4",
+    "plate": "power-plant-intro"
+  },
+  "motions": [
+    {
+      "id": "still",
+      "kind": "motion",
+      "source": "blips",
+      "renderer": "still",
+      "status": "v0",
+      "notes": "Power Plant ident — hard-cut titlecard/corridor/rain/endcard over 4.44s. Not a frozen still. ≥720p + bed."
+    },
+    {
+      "id": "orb",
+      "kind": "motion",
+      "source": "rippel",
+      "import": true,
+      "visualization": "canvas",
+      "renderer": "orb",
+      "status": "v0",
+      "notes": "Rippel v2 canvas — Orb Glow, sharp discs, dual rings + beat tick. ≥720p + 4.44s bed."
+    },
+    {
+      "id": "swirl",
+      "kind": "motion",
+      "source": "rippel",
+      "import": true,
+      "visualization": "3d-sacred",
+      "renderer": "swirl",
+      "status": "v0",
+      "notes": "Rippel v2 3d-sacred — merkaba + hex plate, counter-spin, beat vertices. ≥720p + 4.44s bed."
+    },
+    {
+      "id": "snap",
+      "kind": "motion",
+      "source": "rippel",
+      "import": true,
+      "visualization": "neural",
+      "renderer": "snap",
+      "status": "v0",
+      "notes": "Rippel v2 neural — dual-ring lattice, hub, skip-links, frequency + beat pulses. ≥720p + 4.44s bed."
+    },
+    {
+      "id": "waves",
+      "kind": "motion",
+      "source": "rippel",
+      "import": true,
+      "visualization": "waveform",
+      "renderer": "waves",
+      "status": "v0",
+      "notes": "Rippel v2 Wave Flow — harmonic ribbons + beat envelope + gold needle. ≥720p + 4.44s bed."
+    },
+    {
+      "id": "spark",
+      "kind": "motion",
+      "source": "rippel",
+      "import": true,
+      "visualization": "particles",
+      "renderer": "spark",
+      "status": "v0",
+      "notes": "Rippel v2 Spark Drift — beat bursts, orbital + radial motes, short trails. ≥720p + 4.44s bed."
+    },
+    {
+      "id": "kapow",
+      "kind": "motion",
+      "source": "blips",
+      "renderer": "kapow",
+      "status": "opt",
+      "notes": "Two-tier KAPOW on hook → turn → tag. Outer burst winds, inner burst + word stamp the jewel cut. Not a look. ≥720p + 4.44s bed."
+    }
+  ]
+}

package/scripts/foundry/plant/skills/blip/SKILL.md

@@ -0,0 +1,39 @@
+---
+name: blip
+description: Factory-blip plant. Brief → checksum seed → still|motion:<id> → 4.44s mp4 → inspect gate. Sibling to mill + sound. Not costume.
+---
+
+# Blip
+
+This **factory plant** fastens a tiny-video factory. 4.44 seconds of picture **with a mandatory audio bed**. Sibling to mill + sound — not a mill copy.
+
+**Seat:** `foundry.json` `"plant": "blip"` turns mill off. `"plant": ["mill", "blip"]` wears both. Default stays mill+inspect.
+
+**Motions** live in an on-disk registry (`plant/motions/registry.json`). v0 seed:
+
+`still` · `orb` · `swirl` · `snap` · `waves` · `spark`
+
+Rippel five are **imports**. Four seed + flag axes: `--look focus|cage`, `--body mill|rippel`, `--genre ambient|techno|phonk|jazz|rock|timeless`, `--camera front|three-quarter|top|low|dutch|side` (unknown camera FAIL). Suit is void + five hexes + Wu + hook → turn → tag — not a circle pack on every organ. Focus keeps the disc + one large eclipse moon the noun eats. Cage and snap rupture on the turn (gold lantern / held slash). Mill swirl is Wu mesh, snap is strike, spark is embers. Same organ, different shot — top flattens, low lifts, dutch slashes the floor. Turn dollies in. Cage recoils then whips. Receipt `lookKind` + `bodyKind` + `genre` + `organ` + `camera` + `stereoImage`. `kapow` is a design opt (`--mode motion:kapow`) — two-tier stamp, not a third look. Unknown id FAIL.
+
+`still` is the **Power Plant ident** — titlecard / corridor / rain / endcard dissolve over 4.44s at ≥720p, not a frozen poster: void `#08090B` · ink `#F5F7FA` · cyan `#3DE0E8` · gold `#F5C518` · agent blue `#4A7FD4`. Motions use that palette as the Rippel `VisualConfig.circles` theme. The mill is the renderer — no LLM in the pixel/audio loop.
+
+**Spine (headless, no browser):**
+
+1. **Brief** → checksum seed → Rippel `VisualConfig` (`CircleConfig[]`).
+2. **Mode** → `still` or `motion:<id>` from the registry.
+3. **Render** → 4.44s mp4. Motions are Rippel v2 viz at ≥720p (`--look focus|cage --body mill|rippel`, seed picks if omitted). `--engine wireframe` is emergency only.
+4. **Bed** → `--bed PATH` or auto sound mill. Auto bed **syncopates** to the motion grid (same seed + tempo + phase; downbeat kick / AND hat). The crash + motif answer land on the jewel cut. Every mp4 muxes **stereo AAC**. Missing stream or inaudible bed = inspect FAIL.
+5. **Inspect gate** → file, duration 4.44s±tol, mode id, **audio stream**, motion ≥720p. Fail-closed.
+6. **Receipt** → `.xray/blip/receipt.json` (`PASS` / `FAIL` + pictureMode + motionId + visualConfig).
+
+```bash
+npx @0xray/foundry mint --skip-live
+npx @0xray/foundry blip render --brief "night alley still" --mode still
+npx @0xray/foundry blip render --brief "warehouse floor · Power Plant" --mode motion:orb --look focus
+npx @0xray/foundry blip inspect
+npx @0xray/foundry inspect --skip-live
+```
+
+Mint fastens `blip` + `blip-inspect` + `blip-vibe`. Chat is not a receipt.
+
+A friend would hear: Blips should look like Rippel living motions with sound, not a silent wireframe box.

package/scripts/foundry/plant/skills/blip-inspect/SKILL.md

@@ -0,0 +1,32 @@
+---
+name: blip-inspect
+description: Inspect the last factory-blip — duration 4.44s, registry mode id, file present. Fail-closed. Not costume.
+---
+
+# Blip inspect
+
+This is the **factory-blip** inspect, not mill inspect. Open the receipt. Quote the numbers. Do not invent a pass.
+
+`npx @0xray/foundry inspect` reports blip plant present, live registry ids, plus last blip `PASS`/`FAIL`. `npx @0xray/foundry blip inspect` is the same check.
+
+## Gates (fail-closed)
+
+Missing mp4, unreadable mp4, or a thrown probe is **FAIL**. Never pass on a missing file.
+
+1. **File.** `.xray/blip/blip.mp4` (or receipt `mp4`) exists.
+2. **Duration.** 4.44s ± 0.12s.
+3. **Mode.** Receipt records a registry id (`still` or `motion:<id>`). Unknown id is FAIL.
+4. **Video.** Stream present.
+5. **Audio.** Stream present. Silent mp4 = FAIL. `--bed` or auto sound mill.
+6. **Resolution.** Every live blip ≥720p (`1280×720`), including the Power Plant ident (`still`).
+
+v0 ids: `still` · `orb` · `swirl` · `snap` · `waves` · `spark`. `kapow` is a design opt (two-tier stamp on the stanza). Unknown id FAIL. Receipt records the Power Plant palette.
+
+Receipt: `.xray/blip/receipt.json`. Mp4 default: `.xray/blip/blip.mp4`.
+
+```bash
+npx @0xray/foundry blip render --brief "warm basement swirl" --mode motion:swirl --bed bed.wav
+npx @0xray/foundry blip inspect
+```
+
+Plant-vs-worn allowlists `blip` + `blip-inspect` + `blip-vibe` when `"plant": "blip"`. They are not a costume dump. Mill may be off on this seat.

package/scripts/foundry/plant/skills/blip-looker/SKILL.md

@@ -0,0 +1,30 @@
+---
+name: blip-looker
+description: Factory-blip looker. Friend hitting replay. Hook → jewel → hold. Ship bar is 8. Not vibe density. Not last-blip inspect. Not costume.
+---
+
+# Blip looker
+
+This plant **fastens** the replay seat. Inspect quotes file / duration. Vibe quotes stamp density. Mixer quotes ears. This organ asks: **would a friend hit replay?**
+
+It is not a model. It paints hook, turn, and tag, then scores the Short. Fail closed under 8.
+
+**Seat:** fastened with `blip` + `blip-inspect` + `blip-vibe` when `foundry.json` `"plant": "blip"`. Not a 45-skill dump.
+
+**Types:** `still` · `orb` · `swirl` · `snap` · `waves` · `spark` · `kapow`. Same agent. Same bar.
+
+## Spine
+
+1. **Look** — setup, jewel cut, hold. Three frames, not a poster.
+2. **Score** — setup, punch, hold, motion (hook≠turn≠tag), jewel, replay. Mean is 0–10. Kapow also needs the word on the cut.
+3. **Bar** — **8 to ship**. Under 8 is FAIL. Do not weaken the bar. Still’s jewel is the plate change, not a brighter frame.
+4. **Receipt** — `.xray/blip-looker-receipt.json` (`PASS` / `FAIL` + score + `byType`).
+
+```bash
+npx @0xray/foundry blip look
+npx @0xray/foundry blip replay
+```
+
+A FAIL score is a phrase bug. The turn must hit. The tag must hold. Do not lower the bar.
+
+A friend would hit replay: the hook sets a stamp, the jewel punches, the tag does not die.

package/scripts/foundry/plant/skills/blip-vibe/SKILL.md

@@ -0,0 +1,30 @@
+---
+name: blip-vibe
+description: Factory-blip vibe organ. Aesthetic, appeal, cool factor. Ship bar is 8. Not last-blip inspect. Not costume.
+---
+
+# Blip vibe
+
+This plant **fastens** the appeal seat. Inspect quotes duration / mode / file. This organ **scores the picture** before a mux ships.
+
+videoReview can see and cannot hear. Do not sign a mix from this seat. Quote the score. Fail closed under 8.
+
+**Seat:** fastened with `blip` + `blip-inspect` when `foundry.json` `"plant": "blip"`. Not a 45-skill dump.
+
+**Types:** `still` · `orb` · `swirl` · `snap` · `waves` · `spark` · `kapow`. Same agent. Same bar.
+
+## Spine
+
+1. **Look** — is it a stamp a friend would replay, or a weak badge on void?
+2. **Score** — shared appeal: fill, chroma, contrast, outline, hook→turn flash, differ. Kapow adds word punch, two-tier pop, spike jag. Mean of those is 0–10.
+3. **Bar** — **8 to ship**. Under 8 is FAIL. Do not ship a cute daisy. Do not weaken the bar. Sparse organs are scored against their own fill mark, not a kapow disc.
+4. **Receipt** — `.xray/blip-vibe-receipt.json` (`PASS` / `FAIL` + score + `byType`).
+
+```bash
+npx @0xray/foundry blip vibe
+npx @0xray/foundry blip appeal
+```
+
+A FAIL score is a picture bug. Sharpen the stamp. Do not weaken the bar.
+
+A friend would see: Power Plant plates that live, Rippel five that hit the jewel cut, a comic two-tier burst (few irregular points, not a 20-needle firework) with `KAPOW!` you can read across the room.

package/scripts/foundry/plant/skills/inspect/SKILL.md

@@ -12,8 +12,8 @@ Mill **does** these checks (`npx @0xray/foundry inspect`). Mint fails on a costu
 ## What mill inspects
 
 1. **Diff.** `git status` / `git diff --stat` of the milled cwd. Ignore the agent's summary if the diff disagrees.
-2. **Plant vs worn.** `src/skills`, `src/opencode/agents` vs `.opencode/skills`, `.opencode/agents`. Same name: plant wins. Shop plant (`shop-extract`, `shop-witness`, `shop-pin`, plus `foundry.json` `shopPlant`) is first-class with mill plant. Costume dump (worn names they did not plant, mill did not fasten, and shop plant did not name) fails mint unless `foundry.json` has `"costume": true`.
-3. **Mill receipt.** `.xray/foundry-inventory.json` — mill name/version, `suit` (`fastened` / `overlay` / `costume`), `millPlant.skills` must include `mill` and `inspect`.
+2. **Plant vs worn.** `src/skills`, `src/opencode/agents` vs `.opencode/skills`, `.opencode/agents`. Same name: plant wins. Shop plant (`shop-extract`, `shop-witness`, `shop-pin`, plus `foundry.json` `shopPlant`) is first-class with mill plant. Sound plant (`sound`, `sound-inspect`, `sound-mixer`) is first-class when `foundry.json` `"plant": "sound"` (mill may be off). Blip plant (`blip`, `blip-inspect`) is first-class when `foundry.json` `"plant": "blip"` (mill may be off). Costume dump (worn names they did not plant, mill did not fasten, sound did not fasten, blip did not fasten, and shop plant did not name) fails mint unless `foundry.json` has `"costume": true`.
+3. **Mill receipt.** `.xray/foundry-inventory.json` — mill name/version, `suit` (`fastened` / `overlay` / `costume`), `plant`. Mill seats: `millPlant.skills` must include `mill` and `inspect`. Sound seats: `soundPlant.skills` must include `sound`, `sound-inspect`, and `sound-mixer`; last bed receipt is a separate check. Blip seats: `blipPlant.skills` must include `blip` and `blip-inspect`; last blip receipt is a separate check.
 4. **CI.** GitHub mill CI report (`.opencode/logs/ci-cd-monitor-report.json`), not a green check in chat. No token is a skip, not a pass invented.
 5. **Live PUT.** HTTP 200 on the npm `.tgz`. Metadata without a tarball is not shipped.
 6. **Isolated HOME.** Last-mile dest is project `.grok/plugins/0xray`. Isolated HOME may wear `$HOME/.grok/plugins/0xray` and must not write machine `~/.grok/plugins/0xray`. Shared HOME (passwd `$HOME`) does not last-wins clobber the machine plugin. Mill compares `$HOME` to the passwd home (`os.userInfo().homedir`), not `os.homedir()` (which follows `$HOME`).

package/scripts/foundry/plant/skills/sound/SKILL.md

@@ -0,0 +1,31 @@
+---
+name: sound
+description: Factory-sound plant. Brief → checksum seed → genre → headless wav → metrics gate. Not mill. Not costume.
+---
+
+# Sound
+
+This plant **fastens** a music/bed factory. Dist audio beds get a real plant like mill — not code-mill skills on a sound seat.
+
+**Seat:** `foundry.json` `"plant": "sound"` turns mill off. `"plant": ["mill", "sound"]` wears both. Default stays mill+inspect.
+
+**Spine (headless, no browser):**
+
+1. **Brief** → checksum seed (stable hash lineage).
+2. **Genre** → tempo + voice prefs: `ambient` | `techno` | `jazz` (`phonk` / `destination` are aliases).
+3. **Render** → wav via a crystal-clear mill of Rippel’s prototype chains (Membrane kick / Metal hat / Duo bass / mixer). Tone.Offline is blocked in Node (`OfflineAudioContext` missing); this is the lean headless port, not a 3-sine bed and not the Lovable volume-hack soup.
+4. **Metrics gate** → chop / levels / peak / hum. Fail-closed.
+5. **Receipt** → `.xray/sound-bed-receipt.json` (`PASS` / `FAIL` + numbers).
+
+```bash
+npx @0xray/foundry mint --skip-live
+npx @0xray/foundry sound render --brief "night alley rain" --genre ambient
+npx @0xray/foundry sound inspect
+npx @0xray/foundry inspect --skip-live
+```
+
+Mint fastens `sound` + `sound-inspect` + `sound-mixer`. It does not dump mill inspect onto a sound-only seat. Chat is not a bed receipt. `sound mix` levels every genre × tempo × motif (hats / plate / glue). Inspect still quotes the last bed.
+
+A 4.44s lock is a Short: seed motif (hook cell → turn answer → tag stamps hook[0]). The crash lands on the jewel cut (`phraseMarks.turnAt`), not a sectionGain fader. Six genre bodies stay tellable.
+
+A friend would hear: the sound mill mills Dist beds like Rippel’s prototype grew up — kick membranes, metal hats, and a crystal-clear mixer, not a muddy toy and not a 3-sine pad.

package/scripts/foundry/plant/skills/sound-inspect/SKILL.md

@@ -0,0 +1,28 @@
+---
+name: sound-inspect
+description: Inspect the last factory-sound bed — loudness/smoothness gates, not code-mill diffs. Not costume.
+---
+
+# Sound inspect
+
+This is the **bed** inspect, not mill inspect. Open the receipt. Quote the numbers. Do not invent a pass.
+
+`npx @0xray/foundry inspect` reports sound plant present plus last bed `PASS`/`FAIL`. `npx @0xray/foundry sound inspect` is the same bed check.
+
+## Gates (fail-closed)
+
+Missing wav, unreadable wav, or a thrown metric is **FAIL**. Never pass on silence.
+
+1. **Chop.** Mean |ΔRMS| over 0.25s windows ≪ 0.1 (strong ≤ 0.05).
+2. **Levels.** Body / intro mean RMS ratio ~1.5–3.0. Body min RMS ≥ 0.05 (exclude the final 1s fade).
+3. **Peak.** Max |sample| < 0.95.
+4. **Hum.** No continuous near-constant drone (dominant-bin share over the piece).
+
+Receipt: `.xray/sound-bed-receipt.json`. Wav default: `.xray/sound/bed.wav`.
+
+```bash
+npx @0xray/foundry sound render --brief "warm basement pad" --genre jazz
+npx @0xray/foundry sound inspect
+```
+
+Plant-vs-worn allowlists `sound` + `sound-inspect` + `sound-mixer` when `"plant": "sound"`. They are not a costume dump. Mill may be off on this seat. Mixer is the variation tuner (`sound mix`); this skill still quotes the last bed.

package/scripts/foundry/plant/skills/sound-mixer/SKILL.md

@@ -0,0 +1,28 @@
+---
+name: sound-mixer
+description: Factory-sound tuner. Level every genre × tempo × motif — hats, plate, glue, phrase. Not last-bed inspect. Not costume.
+---
+
+# Sound mixer
+
+This plant **fastens** the mixer seat. Inspect quotes the last bed. This organ **tunes every variation** before a mux ships.
+
+videoReview cannot hear. Do not sign a mix from a picture pass. Run the matrix. Quote the numbers. Fail closed.
+
+**Seat:** fastened with `sound` + `sound-inspect` when `foundry.json` `"plant": "sound"`. Not a 45-skill dump.
+
+## Spine
+
+1. **Enumerate** — six bodies (`ambient` `techno` `jazz` `phonk` `rock` `timeless`) × each tempo table × motif roots 0/2/4 on the 4.44s lock, plus one unlock seat per body.
+2. **Render** — same `renderSamples` the blip mux uses (`syncopate` on lock).
+3. **Level** — inspect (chop / levels / peak / hum) plus mixer seats: plate hang, hat air, turn/body, crest, peak. Every voice in the bus, not just the crash.
+4. **Receipt** — `.xray/sound-mix-receipt.json` (`PASS` / `FAIL` + every seat).
+
+```bash
+npx @0xray/foundry sound mix
+npx @0xray/foundry sound mixer
+```
+
+A FAIL seat is a mix bug. Do not weaken inspect. Dry the plate, pull hot hats, ease glue, or lift a quiet body floor.
+
+A friend would hear: hats sit, the jewel still hits, the room does not wash the next bar.

package/scripts/foundry/release-gate.mjs

@@ -53,33 +53,41 @@ function main() {
     if (!isXrayExoRepo(rootDir)) {
       runLightGate();
     } else if (verifyOnly) {
-      step("1/5 Git + reconcile", "node scripts/node/pre-publish-guard.js --verify-only");
+      step("1/6 Git + reconcile", "node scripts/node/pre-publish-guard.js --verify-only");
       if (!skipDocs) {
-        step("2/5 Release docs", docsCheckCmd());
+        step("2/6 Release docs", docsCheckCmd());
       }
       step(
-        "3/5 Plugin infrastructure",
+        "3/6 Plugin infrastructure",
         "node scripts/test/validate-plugins-e2e.cjs --structural-only",
       );
+      step(
+        "4/6 Packed dist/cli",
+        `${JSON.stringify(process.execPath)} ${JSON.stringify(millScript("assert-packed-dist-cli.mjs"))}`,
+      );
       if (!skipSmoke) {
-        step("4/5 Consumer install smoke", "node scripts/node/consumer-install-smoke.mjs");
+        step("5/6 Consumer install smoke", "node scripts/node/consumer-install-smoke.mjs");
       }
     } else {
-      step("1/7 Build", "npm run build");
-      step("2/7 Tests", "npm run test:comprehensive");
+      step("1/8 Build", "npm run build");
+      step(
+        "2/8 Packed dist/cli",
+        `${JSON.stringify(process.execPath)} ${JSON.stringify(millScript("assert-packed-dist-cli.mjs"))}`,
+      );
+      step("3/8 Tests", "npm run test:comprehensive");
       if (!skipDocs) {
-        step("3/7 Release docs", docsCheckCmd());
+        step("4/8 Release docs", docsCheckCmd());
       }
       step(
-        "4/7 Consumer hook verifiers",
+        "5/8 Consumer hook verifiers",
         "npm run verify:pre-commit-diff && npm run verify:pre-push-diff && node scripts/mjs/verify-delegation-gate-core.mjs --host=grok && node scripts/mjs/verify-delegation-gate-core.mjs --host=hermes && node scripts/mjs/verify-delegation-gate-core.mjs --host=opencode && node scripts/mjs/verify-hermes-session-start.mjs && node scripts/mjs/verify-confer-core.mjs && npm run verify:user-aside && npm run build && node scripts/mjs/verify-pipeline-facets.mjs --package-only",
       );
       step(
-        "5/7 Plugin infrastructure",
+        "6/8 Plugin infrastructure",
         "node scripts/test/validate-plugins-e2e.cjs --structural-only",
       );
       if (!skipSmoke) {
-        step("6/7 Consumer install smoke (fresh + upgrade)", "node scripts/node/consumer-install-smoke.mjs");
+        step("7/8 Consumer install smoke (fresh + upgrade)", "node scripts/node/consumer-install-smoke.mjs");
       }
     }
 

package/scripts/foundry/release.mjs

@@ -112,6 +112,9 @@ function publishIdempotent(version) {
     console.log(`ℹ️  ${packageName()}@${version} already on npm — skipping publish`);
     return;
   }
+  if (isXrayExoRepo(rootDir)) {
+    runMill("assert-packed-dist-cli.mjs", [], "packed dist/cli");
+  }
   execSync(npmPublishCmd(), { cwd: rootDir, stdio: "inherit", encoding: "utf-8" });
   console.log(`✅ Published ${packageName()}@${version}`);
 }

package/scripts/foundry/sound-bed.cjs

@@ -0,0 +1,2 @@
+/** Shim — mill drawers live in @0xray/blip. */
+module.exports = require("@0xray/blip/sound-bed");

package/scripts/foundry/sound-mixer.cjs

@@ -0,0 +1,2 @@
+/** Shim — mill drawers live in @0xray/blip. */
+module.exports = require("@0xray/blip/sound-mixer");

package/scripts/foundry/sound-rippel.cjs

@@ -0,0 +1,2 @@
+/** Shim — mill drawers live in @0xray/blip. */
+module.exports = require("@0xray/blip/sound-rippel");

package/scripts/foundry/sound-taste.cjs

@@ -0,0 +1,2 @@
+/** Shim — mill drawers live in @0xray/blip. */
+module.exports = require("@0xray/blip/sound-taste");

package/scripts/foundry/sound-voice.cjs

@@ -0,0 +1,2 @@
+/** Shim — mill drawers live in @0xray/blip. */
+module.exports = require("@0xray/blip/sound-voice");

package/scripts/foundry/sound.mjs

@@ -0,0 +1,35 @@
+#!/usr/bin/env node
+/**
+ * Shim: sound mill lives in @0xray/blip.
+ *   npx @0xray/foundry sound render|inspect|mix [...]
+ */
+import { spawnSync } from "node:child_process";
+import { createRequire } from "node:module";
+import path from "node:path";
+import { pathToFileURL } from "node:url";
+
+export { inspectBed } from "@0xray/blip/sound";
+
+const require = createRequire(import.meta.url);
+
+function runCli(args) {
+  let cli;
+  try {
+    cli = require.resolve("@0xray/blip/cli");
+  } catch {
+    process.stderr.write("Install @0xray/blip — the sound mill moved off the OS foundry.\n");
+    process.exit(1);
+  }
+  const result = spawnSync(process.execPath, [cli, "sound", ...args], {
+    stdio: "inherit",
+    cwd: process.env.FOUNDRY_ROOT || process.cwd(),
+    env: process.env,
+  });
+  process.exit(result.status === null ? 1 : result.status);
+}
+
+const invoked =
+  process.argv[1] && pathToFileURL(path.resolve(process.argv[1])).href === import.meta.url;
+if (invoked) {
+  runCli(process.argv.slice(2));
+}

package/scripts/node/assert-packed-dist-cli.mjs

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+export * from "../foundry/assert-packed-dist-cli.mjs";
+import { millMain } from "./foundry-shim.mjs";
+millMain(import.meta.url, "assert-packed-dist-cli.mjs");

package/scripts/node/consumer-install-smoke.mjs

@@ -60,7 +60,25 @@ function assertPackedPackageHasNoFileDeps(tarballPath) {
       throw new Error("packed tarball missing vendor/@0xray/repertoire/package.json");
     }
   }
-  console.log("  ✅ packed package.json has no file: deps; vendor organ is in the tarball");
+  process.stdout.write("  ✅ packed package.json has no file: deps; vendor organ is in the tarball\n");
+}
+
+const REQUIRED_TARBALL_DIST = [
+  "package/dist/cli/index.js",
+  "package/dist/mcps/orchestrator.server.js",
+  "package/dist/integrations/grok/hooks/session-start.js",
+];
+
+function assertPackedDistCliInTarball(tarballPath) {
+  const listing = run(`tar -tzf ${JSON.stringify(tarballPath)}`);
+  const lines = new Set(listing.split("\n").map((l) => l.trim()).filter(Boolean));
+  const missing = REQUIRED_TARBALL_DIST.filter((p) => !lines.has(p));
+  if (missing.length > 0) {
+    throw new Error(
+      `packed tarball missing ${missing.join(", ")} (0xray@4.0.13 shipped 0 dist files)`,
+    );
+  }
+  process.stdout.write("  ✅ packed tarball includes dist/cli + MCP + Grok hooks\n");
 }
 
 function assertOrganRequire(tmpRoot) {
@@ -248,6 +266,7 @@ function main() {
     }
 
     assertPackedPackageHasNoFileDeps(tarballPath);
+    assertPackedDistCliInTarball(tarballPath);
 
     writeBareConsumerManifest(tmpRoot);
 

package/scripts/node/install-bridges.cjs

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
 /**
  * install-bridges.cjs — Unified 4-platform bridge installer for consumer postinstall.
- * Mirrors npx 0xray {opencode,grok,hermes,openclaw} install in one synchronous pass.
+ * Mirrors npx 0xray {opencode,grok,hermes,openclaw} install in one synchronous pass
+ * plus Cursor project hooks (fifth wear — not a fifth chat TUI).
  */
 
 const fs = require("fs");
@@ -709,6 +710,35 @@ function deployXrayConfig(targetDir, packageRoot, log) {
   return copied;
 }
 
+function resolveCursorHooksTemplate(packageRoot) {
+  const src = path.join(packageRoot, "src", "integrations", "cursor", "hooks", "hooks.json");
+  if (fs.existsSync(src)) return src;
+  const dist = path.join(packageRoot, "dist", "integrations", "cursor", "hooks", "hooks.json");
+  if (fs.existsSync(dist)) return dist;
+  return null;
+}
+
+/**
+ * Fifth wear: project `.cursor/hooks.json` so Cursor Cloud heats Station and gates tools.
+ * Leave an existing file alone (this exo already wears src/ via invoke-probe).
+ */
+function installCursorBridge(targetDir, packageRoot, log) {
+  const dest = path.join(targetDir, ".cursor", "hooks.json");
+  if (fs.existsSync(dest)) {
+    log("cursor-bridge", ".cursor/hooks.json exists — leave", "info");
+    return dest;
+  }
+  const template = resolveCursorHooksTemplate(packageRoot);
+  if (!template) {
+    log("cursor-bridge", "skipped", "warn", { reason: "cursor hooks template missing" });
+    return null;
+  }
+  fs.mkdirSync(path.dirname(dest), { recursive: true });
+  fs.copyFileSync(template, dest);
+  log("cursor-bridge", "hooks.json fastened", "info", { path: ".cursor/hooks.json" });
+  return dest;
+}
+
 function installGitHooks(packageRoot, log) {
   const installHooks = path.join(packageRoot, "scripts", "hooks", "install-hooks.cjs");
   if (!fs.existsSync(installHooks)) return;
@@ -730,6 +760,8 @@ function installFrameworkDogfoodWear(packageRoot, log) {
     applyResolvedMemoryRouting(featuresPath, packageRoot);
   }
 
+  installCursorBridge(packageRoot, packageRoot, log);
+
   const sourceDir = findGrokPluginSource(packageRoot);
   const pluginDest = path.join(packageRoot, ".grok", "plugins", "0xray");
   if (!sourceDir) {
@@ -744,7 +776,7 @@ function installFrameworkDogfoodWear(packageRoot, log) {
 }
 
 /**
- * Install all 4 platform bridges for a consumer project.
+ * Install 4 chat bridges plus Cursor project hooks for a consumer project.
  * @param {{ targetDir: string, packageRoot: string, log?: Function }} opts
  */
 function installAllBridges(opts) {
@@ -764,7 +796,7 @@ function installAllBridges(opts) {
     return;
   }
 
-  log("install-bridges", "starting 4-platform install", "info");
+  log("install-bridges", "starting 4-platform + cursor wear", "info");
 
   deployXrayConfig(targetDir, packageRoot, log);
   deployProjectMcpJson(targetDir, log);
@@ -773,9 +805,10 @@ function installAllBridges(opts) {
   installGrokBridge(targetDir, packageRoot, log);
   installHermesBridge(targetDir, packageRoot, log);
   installOpenclawBridge(targetDir, packageRoot, log);
+  installCursorBridge(targetDir, packageRoot, log);
   installGitHooks(packageRoot, log);
 
-  log("install-bridges", "4-platform install complete", "success");
+  log("install-bridges", "4-platform + cursor wear complete", "success");
 }
 
 module.exports = {
@@ -798,4 +831,6 @@ module.exports = {
   isIsolatedHome,
   installFrameworkDogfoodWear,
   wearVendoredRepertoire,
+  installCursorBridge,
+  resolveCursorHooksTemplate,
 };

package/src/integrations/openclaw/plugin/xray-pre-tool/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xray-pre-tool",
-  "version": "4.0.13",
+  "version": "4.0.15",
   "private": true,
   "type": "module",
   "description": "0xRay constitution + temperament PreToolUse for OpenClaw",

package/src/skills/orchestrator/SKILL.md

@@ -58,4 +58,22 @@ When `multi_agent_orchestration.lead_dev_mode` is true in `features.json` (defau
 - **SessionStart** → `session-start.js` boots lead_dev_mode
 - **PreToolUse** → hints `per_suite_triage_required` on full `npm test`
 
-Config: `features.json` → `multi_agent_orchestration.lead_dev_mode`
+Config: `features.json` → `multi_agent_orchestration.lead_dev_mode`
+
+## Lead cadence (syncopation)
+
+The seven rules are the engine. The cadence is the time signature. Disk SSOT: `grok-bot/ops/LEAD-CADENCE.md`.
+
+- **Peer test:** another instance with only worn 0xRay continues the ticket. No command stream.
+- **Wear first:** Read `.xray/state/STATION.md`. Same cloud. Same critic (resume only). Dummy Reads Station.
+- **Dummy tests `SKILLS.md`:** a suited dummy proves the worn catalog. Same-sess bodies keep context and hold a Station card.
+- **Ship track:** always branch + worktree/aside + PR. Docs as you go. Builds. Rollback = close the PR.
+- **Publish:** spawn the OTP browser, watch success, poll `npm view` until the new version is live. Do not move on early. Railway same law.
+- **Live tick, not pacer:** `/loop` runs work now. Keep workstreams moving. Do not idle-wait 12 minutes.
+- **Board clock:** PR events + resume the same critic. Not two idle pacers. Merge after PASS+CI (gate A). Publish only after mill-gate D + `foundry gate`.
+- **Dispatch:** ticket + PR URLs + “Wear, then review.” The critic Reads `SEATS.md` Reviewer. Do not paste a command novel. When a law is spoken twice, encode it this wake.
+- **Close:** loop until Station is done. Compact: Station survives the cut. Repertoire keeps names.
+- **Board:** critic Strict comments; forge implements; lead stays main thread.
+- **Codex 69:** rewire this skill and existing ops. Do not add a new `SKILL.md` to hold the cadence.
+- **Ship matrix:** `LEAD-CADENCE.md` Decision matrix — A PR+CI · B pack · C `release:docs-check` · D `foundry release --i-mean-it`. Green CI is not ship. Spend / credentials stay Ask-first.
+- **Metamorphosis:** LLM → OP-PROC is in-context worn seats (same critic, same dummy, resume only). Not more bots.

package/xray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "4.0.13",
+  "version": "4.0.15",
   "description": "0xRay Framework - Unified Feature Configuration",
   "suit_temperament": {
     "profile": "auto",
@@ -162,7 +162,7 @@
     "provider": "repertoire",
     "module_path": "node_modules/@0xray/repertoire/dist/provider/memory-routing-provider.js",
     "config": {
-      "signalsPath": "node_modules/@0xray/repertoire/data/curated_signals.json",
+      "signalsPath": ".xray/state/repertoire/curated_signals.json",
       "statePath": ".xray/state/repertoire/inference-state.json",
       "feedbackDir": ".xray/state/repertoire/feedback"
     }

package/xray/features.schema.json

@@ -104,7 +104,7 @@
         "profile": {
           "type": "string",
           "enum": ["auto", "frontier", "guided", "strict"],
-          "description": "auto = host_defaults (grok→frontier, hermes/opencode/openclaw→guided)"
+          "description": "auto = host_defaults (grok/cursor→frontier, hermes/opencode/openclaw→guided)"
         },
         "host_defaults": {
           "type": "object",