0xray 4.0.19 → 4.0.21

package/dist/integrations/hooks/station-memory-ingest.mjs

@@ -1,12 +1,160 @@
 #!/usr/bin/env node
 /**
- * Compact ingest — persist matched signals back into the organ (project-local copy).
+ * Station organ write — compact ingest + wake grow.
+ * Grow uses the worn RepertoireService. Groover field stays off.
  */
-import { existsSync, readFileSync } from 'node:fs';
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
+import { pathToFileURL } from 'node:url';
 
 const root = process.argv[2];
-const sessionId = process.argv[3] || 'station';
+const mode = process.argv[3] || 'station';
+
+function readRouting(projectRoot) {
+  let routing = { enabled: false, provider: 'null' };
+  const featuresPath = join(projectRoot, '.xray', 'features.json');
+  if (existsSync(featuresPath)) {
+    try {
+      routing = JSON.parse(readFileSync(featuresPath, 'utf8')).memory_routing || routing;
+    } catch {
+      /* leftover */
+    }
+  }
+  return routing;
+}
+
+function isExplicitOptOut(routing) {
+  return routing && routing.enabled === false && routing.provider === 'repertoire';
+}
+
+function organServiceCandidates(projectRoot, routing) {
+  const configured = routing.module_path
+    ? routing.module_path.startsWith('/') || /^[A-Za-z]:[\\/]/.test(routing.module_path)
+      ? routing.module_path
+      : join(projectRoot, routing.module_path)
+    : null;
+  const fromProvider = configured
+    ? configured.replace(/provider\/memory-routing-provider\.js$/, 'RepertoireService.js')
+    : null;
+  const raw = [
+    fromProvider,
+    join(projectRoot, 'node_modules', '@0xray', 'repertoire', 'dist', 'RepertoireService.js'),
+    join(projectRoot, 'vendor', '@0xray', 'repertoire', 'dist', 'RepertoireService.js'),
+    join(projectRoot, '..', 'repertoire', 'dist', 'RepertoireService.js'),
+  ].filter(Boolean);
+  const seen = new Set();
+  const out = [];
+  for (const dest of raw) {
+    if (seen.has(dest) || !existsSync(dest)) continue;
+    seen.add(dest);
+    out.push(dest);
+  }
+  return out;
+}
+
+function ensureDestShape(destSignals) {
+  if (!existsSync(destSignals)) return;
+  try {
+    const data = JSON.parse(readFileSync(destSignals, 'utf8'));
+    if (!Array.isArray(data.signals)) return;
+    let dirty = false;
+    for (const signal of data.signals) {
+      if (!signal) continue;
+      if (!Array.isArray(signal.tags)) {
+        signal.tags = [];
+        dirty = true;
+      }
+      if (typeof signal.definition !== 'string') {
+        signal.definition = String(signal.name || '');
+        dirty = true;
+      }
+    }
+    if (dirty) writeFileSync(destSignals, `${JSON.stringify(data, null, 2)}\n`);
+  } catch {
+    /* leftover */
+  }
+}
+
+function readCleanupDiary(projectRoot) {
+  const files = [
+    join(projectRoot, '.xray', 'state', 'NOTES.md'),
+    join(projectRoot, '.xray', 'state', 'CLEANSE-LIST.md'),
+    join(projectRoot, 'docs', 'archive', 'README.md'),
+  ];
+  const parts = [];
+  const sources = [];
+  for (const dest of files) {
+    if (!existsSync(dest)) continue;
+    try {
+      parts.push(readFileSync(dest, 'utf8'));
+      sources.push(dest);
+    } catch {
+      /* leftover */
+    }
+  }
+  return { text: parts.join('\n'), sources };
+}
+
+async function growDest(projectRoot) {
+  const routing = readRouting(projectRoot);
+  if (isExplicitOptOut(routing)) {
+    process.stdout.write(`${JSON.stringify({ skipped: 'opt-out' })}\n`);
+    return;
+  }
+  for (const dest of organServiceCandidates(projectRoot, routing)) {
+    try {
+      const mod = await import(pathToFileURL(dest).href);
+      const RepertoireService = mod.RepertoireService;
+      if (typeof RepertoireService !== 'function') continue;
+      const pathsMod = await import(pathToFileURL(dest.replace(/RepertoireService\.js$/, 'paths.js')).href);
+      const destSignals = join(projectRoot, '.xray', 'state', 'repertoire', 'curated_signals.json');
+      ensureDestShape(destSignals);
+      const service = new RepertoireService({
+        projectRoot,
+        signalsPath: destSignals,
+        syncXray: false,
+        syncField: false,
+      });
+      ensureDestShape(destSignals);
+      const before = service.signalsManager.load().signals.length;
+      const sessions = service.syncXrayMemory();
+      const kernel =
+        typeof pathsMod.collectKernelDiaryText === 'function'
+          ? pathsMod.collectKernelDiaryText(projectRoot)
+          : { text: '', sources: [] };
+      const cleanup = readCleanupDiary(projectRoot);
+      const diary = service.heatKernelDiary({
+        text: [kernel.text, cleanup.text].filter(Boolean).join('\n'),
+        sources: [...(kernel.sources || []), ...cleanup.sources],
+      });
+      const after = service.signalsManager.load().signals.length;
+      process.stdout.write(
+        `${JSON.stringify({
+          before,
+          after,
+          imported: sessions.imported,
+          observed: 0,
+          heated: diary.heated,
+        })}\n`,
+      );
+      return;
+    } catch {
+      /* try next organ */
+    }
+  }
+  process.stdout.write(`${JSON.stringify({ skipped: 'no-organ' })}\n`);
+}
+
+if (!root) {
+  process.exit(0);
+}
+
+if (mode === '--grow') {
+  await growDest(root);
+  process.exit(0);
+}
+
+const sessionId = mode;
 const hookEvent = process.argv[4] || 'post_compact';
 let signals = [];
 try {
@@ -14,7 +162,7 @@ try {
 } catch {
   signals = [];
 }
-if (!root || !Array.isArray(signals) || signals.length === 0) {
+if (!Array.isArray(signals) || signals.length === 0) {
   process.exit(0);
 }
 

package/dist/integrations/openclaw/plugin/xray-pre-tool/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xray-pre-tool",
-  "version": "4.0.19",
+  "version": "4.0.21",
   "private": true,
   "type": "module",
   "description": "0xRay constitution + temperament PreToolUse for OpenClaw",

package/dist/nucleus/delegation-gate.js

@@ -462,17 +462,16 @@ export function evaluateConstitutionGate(toolName, toolInput, ctx) {
     return { allow: true };
 }
 export function evaluatePreToolGate(toolName, toolInput, ctx) {
-    if (ctx.host === 'openclaw') {
-        try {
-            maybeHeatHostStation(ctx.projectRoot, 'openclaw', {
-                source: '0xray/openclaw-pre-tool',
-                sessionId: ctx.sessionId || 'openclaw',
-                hookEvent: ctx.hookEvent || 'session_start',
-            });
-        }
-        catch {
-            /* station heat is best-effort — constitution still runs */
-        }
+    const host = ctx.host || 'generic';
+    try {
+        maybeHeatHostStation(ctx.projectRoot, host, {
+            source: `0xray/${host}-pre-tool`,
+            sessionId: ctx.sessionId || host,
+            hookEvent: ctx.hookEvent || 'pre_tool_use',
+        });
+    }
+    catch {
+        /* station heat is best-effort — constitution still runs */
     }
     const constitution = evaluateConstitutionGate(toolName, toolInput, ctx);
     if (!constitution.allow)

package/dist/nucleus/suit-temperament.d.ts

@@ -27,11 +27,6 @@ export declare function resolveSuitProfile(raw: SuitTemperamentConfig | undefine
  * A Hermes/OpenCode host ignores a leftover Grok boot (and vice versa).
  */
 export declare function resolveRuntimeSuitProfile(projectRoot: string, host?: SuitHost): SuitProfile;
-/**
- * Write station heat when this host/session has no live card yet.
- * OpenClaw has no SessionStart — PreToolUse is the session boundary.
- * Install/init cards without a session id are not a live session.
- */
 export declare function maybeHeatHostStation(projectRoot: string, host: SuitHost, extra?: Record<string, unknown>): string | null;
 /** Merge temperament fields into session-boot.json for the host that just started. */
 export declare function writeSuitSessionBoot(projectRoot: string, host: SuitHost, extra?: Record<string, unknown>): string;

package/dist/nucleus/suit-temperament.js

@@ -95,7 +95,13 @@ function concreteSessionId(value) {
  * OpenClaw has no SessionStart — PreToolUse is the session boundary.
  * Install/init cards without a session id are not a live session.
  */
+function isCursorWorkspaceWrapper(projectRoot) {
+    return (fs.existsSync(path.join(projectRoot, 'repos', 'xray')) ||
+        fs.existsSync(path.join(projectRoot, 'repos', 'repertoire')));
+}
 export function maybeHeatHostStation(projectRoot, host, extra = {}) {
+    if (isCursorWorkspaceWrapper(projectRoot))
+        return null;
     const bootPath = path.join(projectRoot, '.xray', 'state', 'session-boot.json');
     const cardPath = path.join(projectRoot, '.xray', 'state', 'STATION.md');
     let existing = {};
@@ -111,7 +117,11 @@ export function maybeHeatHostStation(projectRoot, host, extra = {}) {
     const existingSessionId = concreteSessionId(existing.sessionId);
     const sameHost = existing.host === host;
     const sameSession = existingSessionId !== null && sessionId !== null && existingSessionId === sessionId;
-    if (sameHost && sameSession && fs.existsSync(cardPath)) {
+    if (sameHost &&
+        sameSession &&
+        fs.existsSync(cardPath) &&
+        !stationHeat.stationBootNeedsRefresh(existing, projectRoot, host)) {
+        stationHeat.heatLiveMemory(projectRoot);
         return bootPath;
     }
     return writeSuitSessionBoot(projectRoot, host, extra);
@@ -120,8 +130,14 @@ export function maybeHeatHostStation(projectRoot, host, extra = {}) {
 export function writeSuitSessionBoot(projectRoot, host, extra = {}) {
     const profile = resolveSuitProfile(loadSuitTemperamentRaw(projectRoot), host);
     const stateDir = path.join(projectRoot, '.xray', 'state');
-    fs.mkdirSync(stateDir, { recursive: true });
     const bootPath = path.join(stateDir, 'session-boot.json');
+    try {
+        fs.mkdirSync(stateDir, { recursive: true });
+    }
+    catch {
+        /* Cloud workspace wrapper is often unwritable — fail open */
+        return bootPath;
+    }
     let existing = {};
     if (fs.existsSync(bootPath)) {
         try {

package/dist/skills/orchestrator/SKILL.md

@@ -76,5 +76,5 @@ The seven rules are the engine. The cadence is the time signature. Disk SSOT: `g
 - **Close:** loop until Station is done. Compact: Station survives the cut. Overlay dest names are OP-PROC — reload `repertoire-working.json` `opProcNames`, not Station.
 - **Board:** critic Strict comments; forge implements; lead stays main thread.
 - **Codex 69:** rewire this skill and existing ops. Do not add a new `SKILL.md` to hold the cadence.
-- **Ship matrix:** `LEAD-CADENCE.md` Decision matrix — A PR+CI · B pack · C `release:docs-check` · D `foundry release --i-mean-it`. Green CI is not ship. Spend / credentials stay Ask-first.
+- **Ship matrix:** `LEAD-CADENCE.md` Decision matrix — A PR+CI · B pack · C `release:docs-check` (`reconcile --check`; no patch stamps on guides) · D `foundry release --i-mean-it`. Green CI is not ship. Spend / credentials stay Ask-first. Patch number lives in `package.json` + CHANGELOG.
 - **Metamorphosis:** LLM → OP-PROC is in-context worn seats (same critic, same dummy, resume only). Not more bots.

package/llms.txt

@@ -35,7 +35,7 @@ Registered in `.mcp.json` as `npx -y 0xray mcp <cmd>`:
 | `xray-code-review` | Proposal quality |
 | `xray-architect-tools` | System design |
 
-Not an 8th `xray-*` server. Repertoire is a vendored organ (`npx @0xray/repertoire mcp`), enable-when-resolves. Survive compact is **Station** (Read `.xray/state/STATION.md`), not Repertoire 0.1.8.
+Not an 8th `xray-*` server. **Repertoire is preferred** — vendored 0.2.5 ships on (`npx @0xray/repertoire mcp`). Dest is named laws, not hangar `repo-*` or git slugs. Survive compact is **Station** (Read `.xray/state/STATION.md`). Station is the ticket, not a substitute for Repertoire. Do not pin 0.1.8.
 
 ## Codex 69 (always on)
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "4.0.19",
+  "version": "4.0.21",
   "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
   "readme": "README.md",
   "license": "MIT",
@@ -124,7 +124,7 @@
     "consumer:smoke": "node scripts/node/consumer-install-smoke.mjs",
     "pack:tmp-proof": "node scripts/node/pack-tmp-suit-proof.mjs",
     "release:gate": "node scripts/foundry/release-gate.mjs",
-    "release:docs-check": "node scripts/foundry/validate-release-docs.mjs",
+    "release:docs-check": "node scripts/foundry/reconcile-version.mjs --check && node scripts/foundry/validate-release-docs.mjs",
     "pre-publish-guard": "node scripts/node/pre-publish-guard.js",
     "safe-publish": "npm run prepare-consumer && npm run build",
     "release:npm": "node scripts/foundry/release.mjs --publish-only",

package/scripts/foundry/README.md

@@ -60,7 +60,7 @@ After mill plant is fastened, overlay their plant (defaults; remap in `foundry.j
 
 **Mill-fill is law:** their keys/files win; mill names they did not plant stay unless they overlay the same name. JSON facets always merge. Skill overlay is project dirs on every TUI floor (OpenCode, Grok, Hermes, OpenClaw). YML agents stay OpenCode. CLI re-wear calls mint **once** after mill copies. Isolated HOME is passwd home, not `os.homedir()`. CI report is `.xray/foundry-ci-report.json` (`.opencode/logs` shim).
 
-**Default mill plant:** `mill` + `inspect` (inspect AI work). Fasten is **foundry-plant/0**: builtin plant is mill+inspect only (files from this package `plant/`). Fastens a suit, not an empty one. Not 45/42 costume. `foundry.json` `"costume": true` copies that dump. Factory Repertoire still enable-when-resolves. PPE stays worn.
+**Default mill plant:** `mill` + `inspect` (inspect AI work). Fasten is **foundry-plant/0**: builtin plant is mill+inspect only (files from this package `plant/`). Fastens a suit, not an empty one. Not 45/42 costume. `foundry.json` `"costume": true` copies that dump. **Repertoire is preferred** (vendored, dest = laws). PPE stays worn.
 
 **foundry-plant/0:** `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill package declares and ships in its own `plant/`. Organs (looker, vibe, mixer) live in the mill. Adding an organ is a mill publish, not a foundry catalog PR. CLI shims `foundry blip|sound` still exist on foundry 0.1.11+; fasten is the new cut. Foundry **0.1.12**.
 
@@ -76,7 +76,7 @@ A friend would hear: Blips should look like Rippel living motions with sound, no
 
 **Shop plant:** `shop-extract`, `shop-witness`, `shop-pin` are first-class with mill plant. Inspect does not treat those worn names as a costume dump. `foundry.json` `"shopPlant"` names more shops (array), a plant dir (string), or `{ "skills": [...], "dir": "..." }`. This is not `"costume": true` and does not copy 45/42.
 
-**4.0.9 mill target (0xray postinstall, not this mill package):** `install-bridges.cjs` does not mill npm global prefix or npx `_npx` as a consumer. Isolated HOME skips machine `~/.grok`. Shared HOME Grok last-mile is project `.grok/plugins/0xray` (two seats do not clobber machine plugin). Nested mill **0.1.12** (foundry-plant/0; blip/sound drawers in `@0xray/blip`; inspect dest matches `resolveGrokPluginDests`).
+**Mill target (0xray postinstall, not this mill package):** `install-bridges.cjs` does not mill npm global prefix or npx `_npx` as a consumer. Isolated HOME skips machine `~/.grok`. Shared HOME Grok last-mile is project `.grok/plugins/0xray` (two seats do not clobber machine plugin). Nested mill ships in the 0xray tarball (foundry-plant/0; blip/sound drawers in `@0xray/blip`; inspect dest matches `resolveGrokPluginDests`).
 
 ## Publish this mill
 

package/scripts/foundry/assert-packed-dist-cli.mjs

@@ -24,6 +24,10 @@ export const REQUIRED_PACK_PATHS = [
   "dist/integrations/cursor/hooks/after-file-edit.js",
   "dist/integrations/cursor/hooks/cursor-hook-utils.js",
   "dist/integrations/cursor/hooks/cursor-usage-receipt.js",
+  "dist/integrations/cursor/hooks/xray-cloud-hook.sh",
+  "dist/integrations/cursor/hooks/pre-tool-use.sh",
+  "dist/integrations/cursor/hooks/pre-compact.sh",
+  "dist/integrations/cursor/hooks/after-file-edit.sh",
 ];
 
 export function packedFilePaths(files) {

package/scripts/foundry/plant/skills/mill/SKILL.md

@@ -11,7 +11,7 @@ The mill **fastens** a suit. Default mill plant is **inspect** (inspecting AI wo
 
 **Mill-fill:** their keys/files win. Mill plant names they did not overlay stay. JSON always merges.
 
-**Factory:** Repertoire enable-when-resolves. Seven generated MCP. Constitution (PPE) stays worn. Not a fifth MCP. Not 5.0.
+**Factory:** **Repertoire is preferred** (vendored 0.2.5 ships on; dest = named laws). Seven generated MCP. Constitution (PPE) stays worn. Not a fifth MCP. Not 5.0.
 
 **Costume:** `foundry.json` `"costume": true` copies the 45/42 mill costume.
 

package/scripts/foundry/validate-release-docs.mjs

@@ -29,6 +29,40 @@ function kernelLineHasPatchStamp(content) {
   return /^\*\*v?\d+\.\d+\.\d+\*\*/m.test(content);
 }
 
+/**
+ * Present-tense cut pins. Keep: package.json, CHANGELOG, stamped JSON,
+ * features-since headings. Rip from guides, Station, OP-PROC.
+ */
+const PRESENT_TENSE_PATCH_RE =
+  /This cut is|Do not republish \d+\.\d+\.\d+|0xray@\d+\.\d+\.\d+|npm is \*\*\d+\.\d+\.\d+\*\*|Product \*\*\d+\.\d+\.\d+\*\* is on npm/;
+
+const NO_PRESENT_TENSE_PATCH = [
+  'README.md',
+  'AGENTS.md',
+  'AGENTS-consumer.md',
+  'SKILLS.md',
+  'llms.txt',
+  'docs-site/docs/architecture/v4-now.md',
+  'docs-site/docs/architecture/v4-vision.md',
+  'docs-site/docs/guides/memory-wake.md',
+  'docs-site/docs/guides/memory-routing.md',
+  'docs-site/docs/guides/repertoire.md',
+  'docs-site/docs/guides/getting-started.md',
+  'docs-site/docs/guides/integrations.md',
+  'docs-site/docs/guides/consumer-migration.md',
+  'docs-site/docs/mcp/README.md',
+  'grok-bot/ops/LEAD-CADENCE.md',
+  'grok-bot/AGENTS.md',
+  'src/skills/orchestrator/SKILL.md',
+];
+
+function presentTensePatchPinErrors(content) {
+  if (PRESENT_TENSE_PATCH_RE.test(content)) {
+    return ['present-tense patch pin — keep versions in package.json + CHANGELOG + stamped JSON only'];
+  }
+  return [];
+}
+
 /** Guides that must exist and reference the current release (body or header). */
 const REQUIRED_GUIDES = [
   'docs-site/docs/guides/features-since-3.1.md',
@@ -310,7 +344,17 @@ export function validateReleaseDocs(rootDir = resolveMillRoot()) {
     if (content.trim().length < 200) {
       errors.push(`${rel}: guide too short — likely stub`);
     }
+  }
 
+  for (const rel of NO_PRESENT_TENSE_PATCH) {
+    const content = readFile(rootDir, rel);
+    if (!content) {
+      errors.push(`${rel}: file missing`);
+      continue;
+    }
+    for (const e of presentTensePatchPinErrors(content)) {
+      errors.push(`${rel}: ${e}`);
+    }
   }
 
   const docusaurus = readFile(rootDir, 'docs-site/docusaurus.config.ts');