0xray 4.0.15 → 4.0.16

package/.grok-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "4.0.15",
+  "version": "4.0.16",
   "description": "0xRay suit for Grok, Hermes, OpenClaw, OpenCode: mill+inspect, Codex, 7 MCP servers. Costume 45/42 is opt-in foundry, not the default wear.",
   "author": {
     "name": "0xRay AI",

package/.opencode/init.sh

@@ -35,8 +35,15 @@ XRAY_VERSION=$(node -e "console.log(require('$FRAMEWORK_ROOT/package.json').vers
 # Dedup guard — prevent duplicate runs during startup
 # Uses a TTL lockfile (10s window) since OpenCode may trigger config hook
 # from multiple plugin copies in quick succession
-# Key by PROJECT_ROOT (md5) so all invocations in the same project share one lock
-LOCK_KEY=$(echo -n "$PROJECT_ROOT" | md5 | cut -c1-16)
+# Key by PROJECT_ROOT so all invocations in the same project share one lock.
+# md5 is macOS; Linux has md5sum. Do not fail the boot on a leftover Mac tool.
+if command -v md5 >/dev/null 2>&1; then
+    LOCK_KEY=$(echo -n "$PROJECT_ROOT" | md5 | cut -c1-16)
+elif command -v md5sum >/dev/null 2>&1; then
+    LOCK_KEY=$(echo -n "$PROJECT_ROOT" | md5sum | awk '{print $1}' | cut -c1-16)
+else
+    LOCK_KEY=$(echo -n "$PROJECT_ROOT" | cksum | awk '{print $1}')
+fi
 LOCK_FILE="/tmp/xray-init-${LOCK_KEY}.lock"
 LOCK_TTL=10
 if [ -f "$LOCK_FILE" ]; then
@@ -123,8 +130,11 @@ else
     PLUGIN_STATUS="❌"
 fi
 
-# Framework config check
-if [ ! -f "$PROJECT_ROOT/.opencode/enforcer-config.json" ]; then
+# Framework config check — consumer wear is .xray/codex.json, not leftover enforcer-config.json
+if [ ! -f "$PROJECT_ROOT/.opencode/enforcer-config.json" ] \
+    && [ ! -f "$PROJECT_ROOT/.xray/codex.json" ] \
+    && [ ! -f "$PROJECT_ROOT/node_modules/0xray/.xray/codex.json" ] \
+    && [ ! -f "$PROJECT_ROOT/.mcp.json" ]; then
     echo -e "${PURPLE}//   ❌ Framework configuration not found                     //${NC}"
     exit 1
 fi

package/.opencode/skills/orchestrator/SKILL.md

@@ -68,7 +68,8 @@ The seven rules are the engine. The cadence is the time signature. Disk SSOT: `g
 - **Wear first:** Read `.xray/state/STATION.md`. Same cloud. Same critic (resume only). Dummy Reads Station.
 - **Dummy tests `SKILLS.md`:** a suited dummy proves the worn catalog. Same-sess bodies keep context and hold a Station card.
 - **Ship track:** always branch + worktree/aside + PR. Docs as you go. Builds. Rollback = close the PR.
-- **Publish:** spawn the OTP browser, watch success, poll `npm view` until the new version is live. Do not move on early. Railway same law.
+- **Publish:** stay logged in (do not `npm logout`). Every time run `npm publish --access public` in the live TTY. Paste the clickable `auth/cli` URL. No Enter, no VM browser, no subagent, no 6-digit code in chat. Poll `npm view` until live. Then prove **fresh** and **upgrade** registry installs. `npx 0xray validate` is the wear check (not leftover init.sh). `npm view` is not an install.
+- **Peer boot:** four-line dispatch. They Read Station + this cadence and install without a command novel. Not a twin critic.
 - **Live tick, not pacer:** `/loop` runs work now. Keep workstreams moving. Do not idle-wait 12 minutes.
 - **Board clock:** PR events + resume the same critic. Not two idle pacers. Merge after PASS+CI (gate A). Publish only after mill-gate D + `foundry gate`.
 - **Dispatch:** ticket + PR URLs + “Wear, then review.” The critic Reads `SEATS.md` Reviewer. Do not paste a command novel. When a law is spoken twice, encode it this wake.

package/.xray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "4.0.15",
+  "version": "4.0.16",
   "description": "0xRay Framework - Unified Feature Configuration",
   "suit_temperament": {
     "profile": "auto",

package/dist/CHANGELOG.md

@@ -17,14 +17,37 @@ The format is based on [Conventional Commits](https://www.conventionalcommits.or
 - **Dispatch encode** — lead cards ticket + PR URLs + “Wear, then review.” Critic OP-PROC lives on `SEATS.md` Reviewer. When a law is spoken twice, write it to disk this wake. No new skill.
 - **Ship decision matrix** — lead-owned. A PR+CI · B pack (`assert-packed-dist-cli` + consumer smoke) · C `npm run release:docs-check` · D `npx @0xray/foundry release --i-mean-it`. Green CI is not ship. Spend / credentials stay Ask-first. Host Auto Review may still card npm/Railway; that is not the OS decision.
 - **Metamorphosis** — an LLM becomes OP-PROC through in-context worn seats (same critic, same dummy, four-line dispatch). Spawning more bots is the old skin.
+- **Publish OTP latch** — stay logged in (do not `npm logout`). Every time run `npm publish --access public` in the live TTY (no `--auth-type=web`, no `--otp=` from chat, no `tee`). Paste the clickable `auth/cli` URL. Do not ask for a 6-digit authenticator code in chat. Do not press Enter. Do not hand publish to a browser subagent. Poll `npm view` until the version is live. Then prove **fresh** and **upgrade** registry installs. `npm view` is not an install.
+- **`npx 0xray validate` cleansed** — no longer shells leftover `.opencode/init.sh` (macOS `md5` + `enforcer-config.json`). Wear check: `REQUIRED_PACK_PATHS`, Cursor hooks, mill+inspect, repertoire. `init.sh` still boots OpenCode but accepts Linux `md5sum` and consumer `.xray/codex.json`.
+- **Swamp reflection (new arch)** — `docs/reflections/swamp-new-arch-reflection-2026-09-20.md`. Card, organ, hook. Lying metal. Live tarball lag.
 
 ### 🔄 Changes
+- **Durable Hold npm** — heat + `cursorBootNeedsRefresh` + `npx 0xray validate` drop/fail `Hold npm` on Station. Identity stays. Mill-gate holds the ship latch. Not a new skill.
 - **Hangar catalog** — mill hangar docs use Clearing `GET /v1/catalog` as the directory (listed hangars: Groover DID + pin, plus solar + live shop), not a hardcoded extract/witness/pin route table. Groover MCP `list_hangars` reads that catalog. 0xray stays 4.0.15.
 - **foundry-plant/0** — fasten is a protocol any mill implements, not a 0xray-owned catalog of plant kinds. Builtin plant is mill+inspect only. `foundry.json` `"plant": "@0xray/blip"` (alias `"blip"`) fastens whatever that mill package declares. Organs (looker, vibe, mixer) live in the mill; adding one is a mill publish, not an xray catalog PR. Nested mill `@0xray/foundry@0.1.12`. CLI shims `foundry blip|sound` still exist on foundry 0.1.11+. 0xray stays 4.0.15.
 - **Blip/sound mills moved to `@0xray/blip`** — 4.44s drawers (render, kapow, vibe, wow-pass listen/cel, sound bed/mixer, looker) live in the blip product mill. `@0xray/foundry@0.1.11` shims `foundry blip|sound` including `blip look`. Railway plant consumes the product mill, not a hand-vendored copy. 0xray stays 4.0.15.
 
 ---
 
+## [4.0.16] - 2026-09-20
+
+### 🔄 Changes
+
+### 🐛 Bug Fixes
+- fix: type validate pack paths — no untyped mjs import in src/cli (ff936b276)
+- fix: cleanse npx 0xray validate — wear check, not leftover init.sh (741cca410)
+
+### 📚 Documentation
+- docs: new-arch reflection after wading part of the swamp (12d1fff69)
+- docs: persist peer-boot seat bc-49e17122 after four-line wear (5c8be98bb)
+- docs: encode registry install as live-verify after npm view (bd32bd1c4)
+- docs: encode npm CLI OTP latch — lead publishes, no subagent (d600d12a2)
+
+### 🔎 Other Changes
+- Merge branch 'cursor/npm-cli-otp-fbe0' — OTP latch, two-path live-verify, cleanse leftover validate (568797952)
+
+---
+
 ## [4.0.15] - 2026-09-17
 
 ### ✨ Features

package/dist/cli/commands/validate.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Consumer wear check — not leftover OpenCode init.sh.
+ *
+ * `npx 0xray validate` used to shell `.opencode/init.sh` (macOS `md5`,
+ * `.opencode/enforcer-config.json`). That is factory boot theater, not wear.
+ */
+/** Same paths as `REQUIRED_PACK_PATHS` in assert-packed-dist-cli.mjs — typed here so src/cli does not import untyped .mjs. */
+export declare const VALIDATE_PACK_PATHS: readonly string[];
+export declare const CONSUMER_WEAR_PATHS: readonly ["AGENTS.md", ".mcp.json", ".xray/codex.json", ".xray/features.json", ".cursor/hooks.json"];
+export declare const MILL_PLANT_SKILLS: readonly ["mill", "inspect"];
+export type ValidateCheck = {
+    id: string;
+    ok: boolean;
+    detail: string;
+};
+export type ValidateReport = {
+    ok: boolean;
+    consumer: boolean;
+    packageRoot: string;
+    checks: ValidateCheck[];
+};
+export declare function resolveInstalledPackageRoot(cwd: string): string | null;
+export declare function isConsumerInstall(cwd: string, packageRoot: string): boolean;
+export declare function collectValidateReport(cwd: string): ValidateReport;
+export declare function validateCommand(cwd?: string): Promise<ValidateReport>;
+export default validateCommand;

package/dist/cli/commands/validate.js

@@ -0,0 +1,164 @@
+/**
+ * Consumer wear check — not leftover OpenCode init.sh.
+ *
+ * `npx 0xray validate` used to shell `.opencode/init.sh` (macOS `md5`,
+ * `.opencode/enforcer-config.json`). That is factory boot theater, not wear.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { frameworkLogger } from "../../core/framework-logger.js";
+/** Same paths as `REQUIRED_PACK_PATHS` in assert-packed-dist-cli.mjs — typed here so src/cli does not import untyped .mjs. */
+export const VALIDATE_PACK_PATHS = [
+    "dist/cli/index.js",
+    "dist/mcps/orchestrator.server.js",
+    "dist/integrations/grok/hooks/session-start.js",
+    "dist/integrations/cursor/hooks/hooks.json",
+    "dist/integrations/cursor/hooks/pre-tool-use.js",
+    "dist/integrations/cursor/hooks/pre-compact.js",
+    "dist/integrations/cursor/hooks/after-file-edit.js",
+    "dist/integrations/cursor/hooks/cursor-hook-utils.js",
+    "dist/integrations/cursor/hooks/cursor-usage-receipt.js",
+];
+export const CONSUMER_WEAR_PATHS = [
+    "AGENTS.md",
+    ".mcp.json",
+    ".xray/codex.json",
+    ".xray/features.json",
+    ".cursor/hooks.json",
+];
+export const MILL_PLANT_SKILLS = ["mill", "inspect"];
+export function resolveInstalledPackageRoot(cwd) {
+    const nested = join(cwd, "node_modules", "0xray");
+    if (existsSync(join(nested, "package.json"))) {
+        return nested;
+    }
+    const pkgPath = join(cwd, "package.json");
+    if (!existsSync(pkgPath)) {
+        return null;
+    }
+    try {
+        const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
+        if (pkg.name === "0xray") {
+            return cwd;
+        }
+    }
+    catch {
+        return null;
+    }
+    return null;
+}
+export function isConsumerInstall(cwd, packageRoot) {
+    return packageRoot !== cwd;
+}
+function checkPath(root, rel) {
+    return existsSync(join(root, rel));
+}
+function stationDurableHoldsNpm(cwd) {
+    const dest = join(cwd, ".xray", "state", "STATION.md");
+    if (!existsSync(dest))
+        return false;
+    try {
+        return /\bhold\s+npm\b/i.test(readFileSync(dest, "utf8"));
+    }
+    catch {
+        return false;
+    }
+}
+export function collectValidateReport(cwd) {
+    const packageRoot = resolveInstalledPackageRoot(cwd);
+    const checks = [];
+    if (!packageRoot) {
+        return {
+            ok: false,
+            consumer: false,
+            packageRoot: cwd,
+            checks: [
+                {
+                    id: "package",
+                    ok: false,
+                    detail: "0xray package not found in cwd or node_modules/0xray",
+                },
+            ],
+        };
+    }
+    const consumer = isConsumerInstall(cwd, packageRoot);
+    checks.push({
+        id: "package",
+        ok: true,
+        detail: consumer ? `consumer node_modules/0xray at ${packageRoot}` : `exo dogfood at ${packageRoot}`,
+    });
+    const missingPack = VALIDATE_PACK_PATHS.filter((p) => !checkPath(packageRoot, p));
+    checks.push({
+        id: "pack-paths",
+        ok: missingPack.length === 0,
+        detail: missingPack.length === 0
+            ? `REQUIRED_PACK_PATHS ${VALIDATE_PACK_PATHS.length}/${VALIDATE_PACK_PATHS.length}`
+            : `missing ${missingPack.join(", ")}`,
+    });
+    if (consumer) {
+        const missingWear = CONSUMER_WEAR_PATHS.filter((p) => !checkPath(cwd, p));
+        checks.push({
+            id: "consumer-wear",
+            ok: missingWear.length === 0,
+            detail: missingWear.length === 0
+                ? "AGENTS.md · .mcp.json · .xray · .cursor/hooks.json"
+                : `missing ${missingWear.join(", ")}`,
+        });
+        const millRoot = join(cwd, ".opencode", "skills");
+        const missingMill = MILL_PLANT_SKILLS.filter((name) => !existsSync(join(millRoot, name, "SKILL.md")));
+        checks.push({
+            id: "mill-plant",
+            ok: missingMill.length === 0,
+            detail: missingMill.length === 0
+                ? "mill + inspect fastened"
+                : `missing plant ${missingMill.join(", ")}`,
+        });
+        const repertoire = existsSync(join(cwd, "node_modules", "@0xray", "repertoire", "package.json")) ||
+            existsSync(join(packageRoot, "vendor", "@0xray", "repertoire", "package.json"));
+        checks.push({
+            id: "repertoire",
+            ok: repertoire,
+            detail: repertoire ? "repertoire organ on disk" : "missing @0xray/repertoire",
+        });
+    }
+    const stationPath = join(cwd, ".xray", "state", "STATION.md");
+    if (existsSync(stationPath)) {
+        const staleHold = stationDurableHoldsNpm(cwd);
+        checks.push({
+            id: "durable-hold",
+            ok: !staleHold,
+            detail: staleHold
+                ? "STATION Durable still says Hold npm — heat should have stripped it"
+                : "Durable has no Hold npm",
+        });
+    }
+    return {
+        ok: checks.every((c) => c.ok),
+        consumer,
+        packageRoot,
+        checks,
+    };
+}
+export async function validateCommand(cwd = process.cwd()) {
+    frameworkLogger.log("cli", "validate-start", "info", { cwd });
+    const report = collectValidateReport(cwd);
+    for (const check of report.checks) {
+        const mark = check.ok ? "✅" : "❌";
+        console.log(`${mark} ${check.id}: ${check.detail}`);
+    }
+    if (report.ok) {
+        console.log("");
+        console.log("🎉 Wear checks passed. This is not leftover init.sh.");
+        frameworkLogger.log("cli", "validate-success", "info", { consumer: report.consumer });
+    }
+    else {
+        console.log("");
+        console.log("❌ Validation failed. Pack/wear miss — not a Mac init.sh leftover.");
+        frameworkLogger.log("cli", "validate-fail", "error", {
+            consumer: report.consumer,
+            failed: report.checks.filter((c) => !c.ok).map((c) => c.id),
+        });
+    }
+    return report;
+}
+export default validateCommand;

package/dist/cli/index.js

@@ -99,23 +99,15 @@ program
 });
 program
     .command("validate")
-    .description("Validate xray framework installation")
+    .description("Validate consumer wear (pack paths, Cursor hooks, mill plant) — not leftover init.sh")
     .action(async () => {
     console.log("🔬 xray CLI: Validating installation...");
     try {
-        // Run the init.sh script to validate
-        const initScript = join(packageRoot, ".opencode", "init.sh");
-        const fs = await import("fs");
-        if (!fs.existsSync(initScript)) {
-            console.error("❌ Validation failed: init script not found:", initScript);
+        const { validateCommand } = await import("./commands/validate.js");
+        const report = await validateCommand(process.cwd());
+        if (!report.ok) {
             process.exit(1);
         }
-        // SECURITY: Validate script path before execution
-        validateScriptPath(initScript, "init script");
-        execSync(`bash "${initScript}"`, {
-            stdio: "inherit",
-            cwd: process.cwd(),
-        });
     }
     catch (error) {
         console.error("❌ Validation failed:", error instanceof Error ? error.message : String(error));

package/dist/integrations/cursor/hooks/cursor-hook-utils.js

@@ -25,6 +25,7 @@ import { appendHookActivity } from '../../grok/hooks/grok-hook-activity.js';
 import {
   buildRepertoireResume,
   readGitBrief,
+  stationDurableHoldsNpm,
 } from '../../hooks/station-hook-runtime.mjs';
 
 export const CURSOR_HOST = 'cursor';
@@ -147,6 +148,7 @@ export function cursorBootNeedsRefresh(existing, root) {
   if (liveGit && liveGit.head && bootHead !== liveGit.head) return true;
   const liveResume = buildRepertoireResume(root);
   if (liveResume && existing.repertoireResume && liveResume !== existing.repertoireResume) return true;
+  if (stationDurableHoldsNpm(root)) return true;
   return false;
 }
 

package/dist/integrations/hooks/station-hook-runtime.cjs

@@ -383,6 +383,23 @@ function isDurableStationHeading(line) {
   return /^##\s+(durable|seed)\b/i.test(String(line || "").trim());
 }
 
+/** Durable is identity. Hold/ship lives in mill-gate — not on the card. */
+function isHoldNpmLine(line) {
+  return /\bhold\s+npm\b/i.test(String(line || "").trim());
+}
+
+function stripHoldNpm(line) {
+  return String(line || "")
+    .replace(/\s*hold\s+npm\.?/gi, "")
+    .replace(/[ \t]+$/g, "");
+}
+
+function stationDurableHoldsNpm(root) {
+  return readExistingStationMarkdown(root)
+    .split(/\r?\n/)
+    .some((line) => isHoldNpmLine(line));
+}
+
 function isStockStationLine(line) {
   const trimmed = String(line || "").trim();
   if (!trimmed) return true;
@@ -411,12 +428,14 @@ function extractPreservedStationLines(existing) {
       if (otherHeading || isStockStationLine(line)) {
         inDurable = false;
       } else {
-        preserved.push(line);
+        const durableLine = stripHoldNpm(line);
+        if (durableLine.trim()) preserved.push(durableLine);
         continue;
       }
     }
     if (isStockStationLine(line)) continue;
-    preserved.push(line);
+    const kept = stripHoldNpm(line);
+    if (kept.trim()) preserved.push(kept);
   }
   while (preserved.length && !preserved[0].trim()) preserved.shift();
   while (preserved.length && !preserved[preserved.length - 1].trim()) preserved.pop();
@@ -506,4 +525,6 @@ module.exports = {
   mergeStationMarkdown,
   formatStationMarkdown,
   writeStationMarkdown,
+  isHoldNpmLine,
+  stationDurableHoldsNpm,
 };

package/dist/integrations/hooks/station-hook-runtime.mjs

@@ -24,3 +24,5 @@ export const extractPreservedStationLines = impl.extractPreservedStationLines;
 export const mergeStationMarkdown = impl.mergeStationMarkdown;
 export const formatStationMarkdown = impl.formatStationMarkdown;
 export const writeStationMarkdown = impl.writeStationMarkdown;
+export const isHoldNpmLine = impl.isHoldNpmLine;
+export const stationDurableHoldsNpm = impl.stationDurableHoldsNpm;

package/dist/integrations/openclaw/plugin/xray-pre-tool/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xray-pre-tool",
-  "version": "4.0.15",
+  "version": "4.0.16",
   "private": true,
   "type": "module",
   "description": "0xRay constitution + temperament PreToolUse for OpenClaw",

package/dist/skills/orchestrator/SKILL.md

@@ -68,7 +68,8 @@ The seven rules are the engine. The cadence is the time signature. Disk SSOT: `g
 - **Wear first:** Read `.xray/state/STATION.md`. Same cloud. Same critic (resume only). Dummy Reads Station.
 - **Dummy tests `SKILLS.md`:** a suited dummy proves the worn catalog. Same-sess bodies keep context and hold a Station card.
 - **Ship track:** always branch + worktree/aside + PR. Docs as you go. Builds. Rollback = close the PR.
-- **Publish:** spawn the OTP browser, watch success, poll `npm view` until the new version is live. Do not move on early. Railway same law.
+- **Publish:** stay logged in (do not `npm logout`). Every time run `npm publish --access public` in the live TTY. Paste the clickable `auth/cli` URL. No Enter, no VM browser, no subagent, no 6-digit code in chat. Poll `npm view` until live. Then prove **fresh** and **upgrade** registry installs. `npx 0xray validate` is the wear check (not leftover init.sh). `npm view` is not an install.
+- **Peer boot:** four-line dispatch. They Read Station + this cadence and install without a command novel. Not a twin critic.
 - **Live tick, not pacer:** `/loop` runs work now. Keep workstreams moving. Do not idle-wait 12 minutes.
 - **Board clock:** PR events + resume the same critic. Not two idle pacers. Merge after PASS+CI (gate A). Publish only after mill-gate D + `foundry gate`.
 - **Dispatch:** ticket + PR URLs + “Wear, then review.” The critic Reads `SEATS.md` Reviewer. Do not paste a command novel. When a law is spoken twice, encode it this wake.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "4.0.15",
+  "version": "4.0.16",
   "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
   "readme": "README.md",
   "license": "MIT",

package/src/integrations/openclaw/plugin/xray-pre-tool/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xray-pre-tool",
-  "version": "4.0.15",
+  "version": "4.0.16",
   "private": true,
   "type": "module",
   "description": "0xRay constitution + temperament PreToolUse for OpenClaw",

package/src/skills/orchestrator/SKILL.md

@@ -68,7 +68,8 @@ The seven rules are the engine. The cadence is the time signature. Disk SSOT: `g
 - **Wear first:** Read `.xray/state/STATION.md`. Same cloud. Same critic (resume only). Dummy Reads Station.
 - **Dummy tests `SKILLS.md`:** a suited dummy proves the worn catalog. Same-sess bodies keep context and hold a Station card.
 - **Ship track:** always branch + worktree/aside + PR. Docs as you go. Builds. Rollback = close the PR.
-- **Publish:** spawn the OTP browser, watch success, poll `npm view` until the new version is live. Do not move on early. Railway same law.
+- **Publish:** stay logged in (do not `npm logout`). Every time run `npm publish --access public` in the live TTY. Paste the clickable `auth/cli` URL. No Enter, no VM browser, no subagent, no 6-digit code in chat. Poll `npm view` until live. Then prove **fresh** and **upgrade** registry installs. `npx 0xray validate` is the wear check (not leftover init.sh). `npm view` is not an install.
+- **Peer boot:** four-line dispatch. They Read Station + this cadence and install without a command novel. Not a twin critic.
 - **Live tick, not pacer:** `/loop` runs work now. Keep workstreams moving. Do not idle-wait 12 minutes.
 - **Board clock:** PR events + resume the same critic. Not two idle pacers. Merge after PASS+CI (gate A). Publish only after mill-gate D + `foundry gate`.
 - **Dispatch:** ticket + PR URLs + “Wear, then review.” The critic Reads `SEATS.md` Reviewer. Do not paste a command novel. When a law is spoken twice, encode it this wake.

package/xray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "4.0.15",
+  "version": "4.0.16",
   "description": "0xRay Framework - Unified Feature Configuration",
   "suit_temperament": {
     "profile": "auto",