0xray 4.0.16 → 4.0.17

package/.grok-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "4.0.16",
+  "version": "4.0.17",
   "description": "0xRay suit for Grok, Hermes, OpenClaw, OpenCode: mill+inspect, Codex, 7 MCP servers. Costume 45/42 is opt-in foundry, not the default wear.",
   "author": {
     "name": "0xRay AI",

package/.opencode/skills/orchestrator/SKILL.md

@@ -67,13 +67,13 @@ The seven rules are the engine. The cadence is the time signature. Disk SSOT: `g
 - **Peer test:** another instance with only worn 0xRay continues the ticket. No command stream.
 - **Wear first:** Read `.xray/state/STATION.md`. Same cloud. Same critic (resume only). Dummy Reads Station.
 - **Dummy tests `SKILLS.md`:** a suited dummy proves the worn catalog. Same-sess bodies keep context and hold a Station card.
-- **Ship track:** always branch + worktree/aside + PR. Docs as you go. Builds. Rollback = close the PR.
+- **Ship track:** always branch + worktree/aside + PR. Docs as you go. Builds. Rollback = close the PR. **Subject review. Fix n ship.** After critic PASS, review dest/domain, close leftovers, then mill-gate D. PASS is not ship. **Groover is not Repertoire.**
 - **Publish:** stay logged in (do not `npm logout`). Every time run `npm publish --access public` in the live TTY. Paste the clickable `auth/cli` URL. No Enter, no VM browser, no subagent, no 6-digit code in chat. Poll `npm view` until live. Then prove **fresh** and **upgrade** registry installs. `npx 0xray validate` is the wear check (not leftover init.sh). `npm view` is not an install.
 - **Peer boot:** four-line dispatch. They Read Station + this cadence and install without a command novel. Not a twin critic.
-- **Live tick, not pacer:** `/loop` runs work now. Keep workstreams moving. Do not idle-wait 12 minutes.
+- **Live tick, not pacer:** `/loop` runs work now. Keep workstreams moving. Do not idle-wait 12 minutes. **Clean ticks every cycle** — unsubscribe then resubscribe so the prompt matches metal. Name-dedupe does not rewrite. A stale prompt (waiting URL after live, Hold after strip) is dirty: rewrite, do not act. **If the card and WAVEBOARD are idle, unsubscribe and do not resubscribe.**
 - **Board clock:** PR events + resume the same critic. Not two idle pacers. Merge after PASS+CI (gate A). Publish only after mill-gate D + `foundry gate`.
 - **Dispatch:** ticket + PR URLs + “Wear, then review.” The critic Reads `SEATS.md` Reviewer. Do not paste a command novel. When a law is spoken twice, encode it this wake.
-- **Close:** loop until Station is done. Compact: Station survives the cut. Repertoire keeps names.
+- **Close:** loop until Station is done. Compact: Station survives the cut. Overlay dest names are OP-PROC — reload `repertoire-working.json` `opProcNames`, not Station.
 - **Board:** critic Strict comments; forge implements; lead stays main thread.
 - **Codex 69:** rewire this skill and existing ops. Do not add a new `SKILL.md` to hold the cadence.
 - **Ship matrix:** `LEAD-CADENCE.md` Decision matrix — A PR+CI · B pack · C `release:docs-check` · D `foundry release --i-mean-it`. Green CI is not ship. Spend / credentials stay Ask-first.

package/.xray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "4.0.16",
+  "version": "4.0.17",
   "description": "0xRay Framework - Unified Feature Configuration",
   "suit_temperament": {
     "profile": "auto",

package/dist/CHANGELOG.md

@@ -20,6 +20,11 @@ The format is based on [Conventional Commits](https://www.conventionalcommits.or
 - **Publish OTP latch** — stay logged in (do not `npm logout`). Every time run `npm publish --access public` in the live TTY (no `--auth-type=web`, no `--otp=` from chat, no `tee`). Paste the clickable `auth/cli` URL. Do not ask for a 6-digit authenticator code in chat. Do not press Enter. Do not hand publish to a browser subagent. Poll `npm view` until the version is live. Then prove **fresh** and **upgrade** registry installs. `npm view` is not an install.
 - **`npx 0xray validate` cleansed** — no longer shells leftover `.opencode/init.sh` (macOS `md5` + `enforcer-config.json`). Wear check: `REQUIRED_PACK_PATHS`, Cursor hooks, mill+inspect, repertoire. `init.sh` still boots OpenCode but accepts Linux `md5sum` and consumer `.xray/codex.json`.
 - **Swamp reflection (new arch)** — `docs/reflections/swamp-new-arch-reflection-2026-09-20.md`. Card, organ, hook. Lying metal. Live tarball lag.
+- **Clean ticks every cycle** — `/loop` prompt is rewritten at the end of every live tick. `subscribe_timer` name-dedupe does not update the prompt. Unsubscribe then resubscribe. A tick that contradicts metal is dirty: rewrite, do not act. Not on Station.
+- **Idle `/loop` stop** — if Station `Working` and the WAVEBOARD (open ship PR, live OTP, unfinished close) are idle, unsubscribe and do not resubscribe. A parked mill is not an active wave.
+- **Subject review. Fix n ship.** After board PASS, review the worn dest / domain (not only CI), close leftovers, then mill-gate D. PASS is not ship. On `LEAD-CADENCE.md` Ship track + `SEATS.md` Reviewer. Not on Station.
+- **OP-PROC reload after compact** — overlay dest names *are* OP-PROC. Heat writes them to `.xray/state/repertoire-working.json` `opProcNames`. Station stays a ticket (count + four working matches). Not a new skill.
+- **Groover is not Repertoire.** Groover was a broken experiment of the organ. Do not grow dest from Groover field as if that is the KB. On `LEAD-CADENCE.md` Heads from tails. Not on Station.
 
 ### 🔄 Changes
 - **Durable Hold npm** — heat + `cursorBootNeedsRefresh` + `npx 0xray validate` drop/fail `Hold npm` on Station. Identity stays. Mill-gate holds the ship latch. Not a new skill.
@@ -29,6 +34,34 @@ The format is based on [Conventional Commits](https://www.conventionalcommits.or
 
 ---
 
+## [4.0.17] - 2026-09-22
+
+### 🔄 Changes
+
+### ✨ Features
+- feat: write session-*.json from Cursor heat when HEAD moves (363186a02)
+- feat: persist overlay OP-PROC on repertoire-working after compact heat (8c55793e8)
+
+### 📚 Documentation
+- docs: ASCII gather/store/retrieve trees for Station memory (d8f2f3b89)
+- docs: Station is always the pickup memory after compact (bec431c61)
+- docs: Groover is not Repertoire — do not grow dest from Groover field (203147d19)
+- docs: Subject review. Fix n ship. — dest review then leftover then D (ad4ffa7f6)
+- docs: stop /loop when the card and WAVEBOARD are idle (60f0fd53f)
+- docs: clean ticks every cycle — rewrite /loop prompt, do not act on stale metal (e71a19559)
+
+### 🧪 Tests
+- test: match Compact cut wording on Station-as-memory (7f9a4f091)
+
+### 🔎 Other Changes
+- Merge main — include weekday-mirror #97 in 4.0.17 tarball (86fdec7ce)
+- Merge pull request #97 from 0xRayAI/cursor/weekday-mirror-dist-voice-9b4d (d0853aad1)
+- docs(grok-bot): weekday mirror for Dist reply voice and CoS wake hygiene (f91233b59)
+- Merge branch 'cursor/clean-ticks-fbe0' — clean ticks every cycle (12dd06362)
+- Merge branch 'cursor/leftover-validate-d-fbe0' — release 4.0.16 live, leftover validate gone (8fa037212)
+
+---
+
 ## [4.0.16] - 2026-09-20
 
 ### 🔄 Changes

package/dist/integrations/cursor/hooks/cursor-hook-utils.js

@@ -4,6 +4,7 @@
  * sessionStart is unavailable on managed cloud; first preToolUse / afterFileEdit boots.
  */
 
+import { execFileSync } from 'node:child_process';
 import fs from 'fs';
 import path from 'path';
 import {
@@ -152,12 +153,114 @@ export function cursorBootNeedsRefresh(existing, root) {
   return false;
 }
 
+function sessionCaptureStampPath(root) {
+  return path.join(root, '.xray', 'state', 'session-capture-stamp.json');
+}
+
+function readSessionCaptureConfig(root) {
+  let cfg = {};
+  try {
+    const raw = JSON.parse(fs.readFileSync(path.join(root, '.xray', 'features.json'), 'utf8'));
+    cfg = raw.inference_session_capture || {};
+  } catch {
+    cfg = {};
+  }
+  return {
+    enabled: cfg.enabled === true,
+    minCommits: typeof cfg.min_commits === 'number' && cfg.min_commits > 0 ? cfg.min_commits : 3,
+    lookback: typeof cfg.lookback_commits === 'number' && cfg.lookback_commits > 0 ? cfg.lookback_commits : 20,
+  };
+}
+
+function readSessionCaptureStamp(root) {
+  try {
+    return JSON.parse(fs.readFileSync(sessionCaptureStampPath(root), 'utf8'));
+  } catch {
+    return null;
+  }
+}
+
+function gitCommitSubjects(root, args) {
+  try {
+    const out = execFileSync('git', ['log', '--format=%h||%s', '--no-merges', ...args], {
+      cwd: root,
+      encoding: 'utf8',
+      timeout: 5000,
+      stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    return String(out)
+      .split('\n')
+      .map((line) => line.trim())
+      .filter(Boolean)
+      .map((line) => {
+        const idx = line.indexOf('||');
+        return {
+          hash: idx === -1 ? line : line.slice(0, idx),
+          message: idx === -1 ? '' : line.slice(idx + 2),
+        };
+      });
+  } catch {
+    return [];
+  }
+}
+
+/**
+ * Cursor never runs the git post-commit hook. When HEAD moves, write the same
+ * session-*.json the kernel already knows how to ingest. Dedup per HEAD.
+ */
+export function maybeCaptureSessionOnHeadMove(root) {
+  const cfg = readSessionCaptureConfig(root);
+  if (!cfg.enabled) return null;
+  const git = readGitBrief(root);
+  if (!git || !git.head) return null;
+  const stamp = readSessionCaptureStamp(root);
+  if (stamp && stamp.head === git.head) return null;
+
+  const commits = stamp && stamp.head
+    ? gitCommitSubjects(root, [`${stamp.head}..HEAD`])
+    : gitCommitSubjects(root, ['-n', String(cfg.lookback)]);
+  if (commits.length < cfg.minCommits) return null;
+
+  const sessionId = `session-${new Date().toISOString().slice(0, 10)}-${git.head}`;
+  const approaches = commits.map((c) => c.message).filter(Boolean);
+  const session = {
+    sessionId,
+    timestamp: new Date().toISOString(),
+    span: {
+      from: stamp && stamp.head ? stamp.head : `HEAD~${cfg.lookback}`,
+      to: git.head,
+    },
+    problems: [],
+    approaches,
+    wrongTurns: [],
+    solutions: [],
+    patterns: [],
+    matched_primitives: [],
+    metrics: { commits: commits.length },
+  };
+
+  const outDir = path.join(root, 'docs', 'inference');
+  fs.mkdirSync(outDir, { recursive: true });
+  const filePath = path.join(outDir, `session-${sessionId.replace(/^session-/, '')}.json`);
+  fs.writeFileSync(filePath, `${JSON.stringify(session, null, 2)}\n`);
+  fs.writeFileSync(path.join(outDir, 'latest-session.json'), `${JSON.stringify(session, null, 2)}\n`);
+  fs.mkdirSync(path.dirname(sessionCaptureStampPath(root)), { recursive: true });
+  fs.writeFileSync(
+    sessionCaptureStampPath(root),
+    `${JSON.stringify({ head: git.head, sessionId, path: filePath, updatedAt: session.timestamp }, null, 2)}\n`,
+  );
+  return filePath;
+}
+
 export function ensureCursorSessionBoot(root, source = '0xray/cursor-pre-tool-use-boot', extra = {}) {
   const bootPath = sessionBootPath(root);
   if (fs.existsSync(bootPath)) {
     try {
       const existing = JSON.parse(fs.readFileSync(bootPath, 'utf8'));
-      if (!cursorBootNeedsRefresh(existing, root)) return bootPath;
+      if (!cursorBootNeedsRefresh(existing, root)) {
+        maybeCaptureSessionOnHeadMove(root);
+        return bootPath;
+      }
     } catch {
       /* rewrite corrupt or host-mismatched boot */
     }
@@ -166,7 +269,9 @@ export function ensureCursorSessionBoot(root, source = '0xray/cursor-pre-tool-us
     host: CURSOR_HOST,
     ...extra,
   });
-  return writeSessionBoot(root, payload) || bootPath;
+  const written = writeSessionBoot(root, payload) || bootPath;
+  maybeCaptureSessionOnHeadMove(root);
+  return written;
 }
 
 export function writeCursorPrecompactReceipt(root, fields) {

package/dist/integrations/hooks/station-hook-runtime.cjs

@@ -203,6 +203,25 @@ function stationSafeSignals(names) {
   return out;
 }
 
+/** Overlay + factory names on dest. OP-PROC lives here — not on Station.md. */
+function readOpProcNames(root) {
+  const dest = join(root, ".xray", "state", "repertoire", "curated_signals.json");
+  if (!existsSync(dest)) return [];
+  try {
+    const data = JSON.parse(readFileSync(dest, "utf8"));
+    if (!Array.isArray(data.signals)) return [];
+    const names = [];
+    for (const signal of data.signals) {
+      const name = String(signal && signal.name ? signal.name : "").trim();
+      if (!name || name.toLowerCase().startsWith("bedrock-")) continue;
+      names.push(name);
+    }
+    return names;
+  } catch {
+    return [];
+  }
+}
+
 function persistRepertoireWorking(root, snapshot) {
   try {
     mkdirSync(join(root, ".xray", "state"), { recursive: true });
@@ -340,6 +359,8 @@ function applyStationHeat(root, host, extra = {}, existing = {}) {
     repertoireResume,
   };
   if (matchedSignals.length) workingSnapshot.matchedSignals = matchedSignals;
+  const opProcNames = readOpProcNames(root);
+  if (opProcNames.length) workingSnapshot.opProcNames = opProcNames;
   const working = persistRepertoireWorking(root, workingSnapshot);
   if (isCompactHook(extra) && matchedSignals.length) {
     ingestCompactFeedbackSync(
@@ -519,6 +540,7 @@ module.exports = {
   isLeftoverMemoryRoutingOff,
   persistRepertoireWorking,
   readRepertoireWorking,
+  readOpProcNames,
   formatWorkingLine,
   applyStationHeat,
   extractPreservedStationLines,

package/dist/integrations/hooks/station-hook-runtime.mjs

@@ -18,6 +18,7 @@ export const readPlanLine = impl.readPlanLine;
 export const buildRepertoireResume = impl.buildRepertoireResume;
 export const persistRepertoireWorking = impl.persistRepertoireWorking;
 export const readRepertoireWorking = impl.readRepertoireWorking;
+export const readOpProcNames = impl.readOpProcNames;
 export const formatWorkingLine = impl.formatWorkingLine;
 export const applyStationHeat = impl.applyStationHeat;
 export const extractPreservedStationLines = impl.extractPreservedStationLines;

package/dist/integrations/openclaw/plugin/xray-pre-tool/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xray-pre-tool",
-  "version": "4.0.16",
+  "version": "4.0.17",
   "private": true,
   "type": "module",
   "description": "0xRay constitution + temperament PreToolUse for OpenClaw",

package/dist/skills/orchestrator/SKILL.md

@@ -67,13 +67,13 @@ The seven rules are the engine. The cadence is the time signature. Disk SSOT: `g
 - **Peer test:** another instance with only worn 0xRay continues the ticket. No command stream.
 - **Wear first:** Read `.xray/state/STATION.md`. Same cloud. Same critic (resume only). Dummy Reads Station.
 - **Dummy tests `SKILLS.md`:** a suited dummy proves the worn catalog. Same-sess bodies keep context and hold a Station card.
-- **Ship track:** always branch + worktree/aside + PR. Docs as you go. Builds. Rollback = close the PR.
+- **Ship track:** always branch + worktree/aside + PR. Docs as you go. Builds. Rollback = close the PR. **Subject review. Fix n ship.** After critic PASS, review dest/domain, close leftovers, then mill-gate D. PASS is not ship. **Groover is not Repertoire.**
 - **Publish:** stay logged in (do not `npm logout`). Every time run `npm publish --access public` in the live TTY. Paste the clickable `auth/cli` URL. No Enter, no VM browser, no subagent, no 6-digit code in chat. Poll `npm view` until live. Then prove **fresh** and **upgrade** registry installs. `npx 0xray validate` is the wear check (not leftover init.sh). `npm view` is not an install.
 - **Peer boot:** four-line dispatch. They Read Station + this cadence and install without a command novel. Not a twin critic.
-- **Live tick, not pacer:** `/loop` runs work now. Keep workstreams moving. Do not idle-wait 12 minutes.
+- **Live tick, not pacer:** `/loop` runs work now. Keep workstreams moving. Do not idle-wait 12 minutes. **Clean ticks every cycle** — unsubscribe then resubscribe so the prompt matches metal. Name-dedupe does not rewrite. A stale prompt (waiting URL after live, Hold after strip) is dirty: rewrite, do not act. **If the card and WAVEBOARD are idle, unsubscribe and do not resubscribe.**
 - **Board clock:** PR events + resume the same critic. Not two idle pacers. Merge after PASS+CI (gate A). Publish only after mill-gate D + `foundry gate`.
 - **Dispatch:** ticket + PR URLs + “Wear, then review.” The critic Reads `SEATS.md` Reviewer. Do not paste a command novel. When a law is spoken twice, encode it this wake.
-- **Close:** loop until Station is done. Compact: Station survives the cut. Repertoire keeps names.
+- **Close:** loop until Station is done. Compact: Station survives the cut. Overlay dest names are OP-PROC — reload `repertoire-working.json` `opProcNames`, not Station.
 - **Board:** critic Strict comments; forge implements; lead stays main thread.
 - **Codex 69:** rewire this skill and existing ops. Do not add a new `SKILL.md` to hold the cadence.
 - **Ship matrix:** `LEAD-CADENCE.md` Decision matrix — A PR+CI · B pack · C `release:docs-check` · D `foundry release --i-mean-it`. Green CI is not ship. Spend / credentials stay Ask-first.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "4.0.16",
+  "version": "4.0.17",
   "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
   "readme": "README.md",
   "license": "MIT",

package/src/integrations/openclaw/plugin/xray-pre-tool/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xray-pre-tool",
-  "version": "4.0.16",
+  "version": "4.0.17",
   "private": true,
   "type": "module",
   "description": "0xRay constitution + temperament PreToolUse for OpenClaw",

package/src/skills/orchestrator/SKILL.md

@@ -67,13 +67,13 @@ The seven rules are the engine. The cadence is the time signature. Disk SSOT: `g
 - **Peer test:** another instance with only worn 0xRay continues the ticket. No command stream.
 - **Wear first:** Read `.xray/state/STATION.md`. Same cloud. Same critic (resume only). Dummy Reads Station.
 - **Dummy tests `SKILLS.md`:** a suited dummy proves the worn catalog. Same-sess bodies keep context and hold a Station card.
-- **Ship track:** always branch + worktree/aside + PR. Docs as you go. Builds. Rollback = close the PR.
+- **Ship track:** always branch + worktree/aside + PR. Docs as you go. Builds. Rollback = close the PR. **Subject review. Fix n ship.** After critic PASS, review dest/domain, close leftovers, then mill-gate D. PASS is not ship. **Groover is not Repertoire.**
 - **Publish:** stay logged in (do not `npm logout`). Every time run `npm publish --access public` in the live TTY. Paste the clickable `auth/cli` URL. No Enter, no VM browser, no subagent, no 6-digit code in chat. Poll `npm view` until live. Then prove **fresh** and **upgrade** registry installs. `npx 0xray validate` is the wear check (not leftover init.sh). `npm view` is not an install.
 - **Peer boot:** four-line dispatch. They Read Station + this cadence and install without a command novel. Not a twin critic.
-- **Live tick, not pacer:** `/loop` runs work now. Keep workstreams moving. Do not idle-wait 12 minutes.
+- **Live tick, not pacer:** `/loop` runs work now. Keep workstreams moving. Do not idle-wait 12 minutes. **Clean ticks every cycle** — unsubscribe then resubscribe so the prompt matches metal. Name-dedupe does not rewrite. A stale prompt (waiting URL after live, Hold after strip) is dirty: rewrite, do not act. **If the card and WAVEBOARD are idle, unsubscribe and do not resubscribe.**
 - **Board clock:** PR events + resume the same critic. Not two idle pacers. Merge after PASS+CI (gate A). Publish only after mill-gate D + `foundry gate`.
 - **Dispatch:** ticket + PR URLs + “Wear, then review.” The critic Reads `SEATS.md` Reviewer. Do not paste a command novel. When a law is spoken twice, encode it this wake.
-- **Close:** loop until Station is done. Compact: Station survives the cut. Repertoire keeps names.
+- **Close:** loop until Station is done. Compact: Station survives the cut. Overlay dest names are OP-PROC — reload `repertoire-working.json` `opProcNames`, not Station.
 - **Board:** critic Strict comments; forge implements; lead stays main thread.
 - **Codex 69:** rewire this skill and existing ops. Do not add a new `SKILL.md` to hold the cadence.
 - **Ship matrix:** `LEAD-CADENCE.md` Decision matrix — A PR+CI · B pack · C `release:docs-check` · D `foundry release --i-mean-it`. Green CI is not ship. Spend / credentials stay Ask-first.

package/xray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "4.0.16",
+  "version": "4.0.17",
   "description": "0xRay Framework - Unified Feature Configuration",
   "suit_temperament": {
     "profile": "auto",