0xray 4.0.2 → 4.0.4

package/.xray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "4.0.2",
+  "version": "4.0.4",
   "description": "0xRay Framework - Unified Feature Configuration",
   "suit_temperament": {
     "profile": "auto",

package/AGENTS-consumer.md

@@ -19,7 +19,7 @@ Before other work, Read `.xray/state/STATION.md`. Compaction and host change are
 `npm install 0xray` runs `install-bridges.cjs` and:
 
 - Copies this file → **`AGENTS.md`** in your project root
-- Syncs **45 mill skills** to platform skill directories, then overlays **your** `src/skills` (same name wins). Does **not** write root **`SKILLS.md`**
+- Fastens mill plant (`mill` + `inspect`) then overlays **your** `src/skills` (same name wins). Inspect AI work is the mill discipline. Does **not** dump 45/42 costume unless `foundry.json` `"costume": true`. Does **not** write root **`SKILLS.md`**
 - Seeds **`.gitignore`** (from template, if absent)
 - Deploys **`.xray/`** (`codex.json`, `features.json`, `config.json`) then overlays **your** mill SSOT (`xray/codex.json`, `xray/features.json`, `src/skills`, `src/opencode/agents`; remap with `foundry.json`)
 - Writes **`.mcp.json`** with 7 MCPs servers (`npx -y 0xray mcp …`)

package/dist/CHANGELOG.md

@@ -26,6 +26,22 @@ The format is based on [Conventional Commits](https://www.conventionalcommits.or
 - Mill CI report: `mill-monitor.yml` (fresh workflow ID) listens for mill CI completion. Report only.
 - Published mill `hooks` uses the 0xray garment installer (`node_modules/0xray/scripts/hooks`), not `node_modules/@0xray/hooks`. Mill tree 0.1.4 (not a 0xray bump).
 - Nested mill in the 0xray tarball (`scripts/foundry/`). Wear no longer needs a second `npm i @0xray/foundry` for mint-on-install. 4.0.2.
+- Empty garment: mill plant (`mill` skill) is the hanger. Not 45/42 costume unless `foundry.json` `"costume": true`. Mill 0.1.5.
+- Mill plant fastens **inspect** (inspect AI work) plus `mill`. Not empty. Mill 0.1.6.
+
+---
+
+## [4.0.4] - 2026-09-04
+
+Mill **fastens** an inspect suit: mill plant is `mill` + `inspect` (inspect AI work — diffs, traces, mill receipts, CI). Not empty. Not 45/42 costume unless `foundry.json` `"costume": true`. Factory Repertoire + PPE stay. Mill **0.1.6**. Not 5.0.0.
+
+Naming: inventory `suit` (`fastened` / `overlay` / `costume`). Not garment. Not hanger. Costume is the 45/42 dump flag only.
+
+---
+
+## [4.0.3] - 2026-09-04
+
+Empty garment. Their plant is the suit. Mill plant (`mill` skill) is the factory discipline on the hanger. Not 45/42 costume unless `foundry.json` `"costume": true`. Factory Repertoire still enable-when-resolves. PPE stays worn. Mill **0.1.5**. Not 5.0.0.
 
 ---
 

package/dist/cli/commands/foundry-mint-wear.d.ts

@@ -1,2 +1,3 @@
+export declare function wantsCostume(targetDir: string): boolean;
 /** Re-apply mill overlay after CLI re-wear copies mill skills. */
 export declare function mintAfterWear(targetDir: string): void;

package/dist/cli/commands/foundry-mint-wear.js

@@ -4,10 +4,13 @@ import { fileURLToPath } from "url";
 import { frameworkLogger } from "../../core/framework-logger.js";
 const require = createRequire(import.meta.url);
 const packageRoot = path.join(path.dirname(fileURLToPath(import.meta.url)), "..", "..", "..");
+const millSuit = require(path.join(packageRoot, "scripts/foundry/mint-suit.cjs"));
+export function wantsCostume(targetDir) {
+    return millSuit.wantsCostume(targetDir);
+}
 /** Re-apply mill overlay after CLI re-wear copies mill skills. */
 export function mintAfterWear(targetDir) {
-    const { mintConsumerSuit } = require(path.join(packageRoot, "scripts/foundry/mint-suit.cjs"));
-    mintConsumerSuit(packageRoot, targetDir, (component, action, status, details) => {
+    millSuit.mintConsumerSuit(packageRoot, targetDir, (component, action, status, details) => {
         const level = status === "error" ? "error" : "info";
         frameworkLogger.log(component, action, level, details);
     });

package/dist/cli/commands/opencode-install.js

@@ -3,7 +3,7 @@ import path from 'path';
 import { createRequire } from 'module';
 import { frameworkLogger } from '../../core/framework-logger.js';
 import { syncBuiltinSkills } from './skill-install.js';
-import { mintAfterWear } from './foundry-mint-wear.js';
+import { mintAfterWear, wantsCostume } from './foundry-mint-wear.js';
 const __dirname = path.dirname(new URL(import.meta.url).pathname);
 const require = createRequire(import.meta.url);
 const wiring = require(path.join(__dirname, '..', '..', '..', 'scripts', 'node', 'bridge-mcp-wiring.cjs'));
@@ -105,8 +105,14 @@ async function installForOpencode(options = {}) {
             console.log('Use --force to reinstall.');
         }
         else {
-            copyDir(opencodeSource, opencodeDest);
-            frameworkLogger.log('opencode-integration', 'opencode-copied', 'info', { destination: opencodeDest });
+            if (wantsCostume(process.cwd())) {
+                copyDir(opencodeSource, opencodeDest);
+                frameworkLogger.log('opencode-integration', 'opencode-copied', 'info', { destination: opencodeDest });
+            }
+            else {
+                fs.mkdirSync(opencodeDest, { recursive: true });
+                frameworkLogger.log('opencode-integration', 'mill-plant-plugin', 'info', { destination: opencodeDest });
+            }
             const pluginSource = path.join(__dirname, '..', '..', '..', 'dist', 'plugin', 'xray-codex-injection.js');
             const pluginDest = path.join(opencodeDest, 'plugin', 'xray-codex-injection.js');
             if (fs.existsSync(pluginSource)) {

package/dist/cli/commands/skill-install.js

@@ -1,6 +1,7 @@
 import { existsSync, readdirSync, readFileSync, mkdirSync, writeFileSync, cpSync, rmSync, statSync, unlinkSync, copyFileSync } from "fs";
 import { join, basename, dirname } from "path";
 import { fileURLToPath } from "url";
+import { createRequire } from "module";
 import { execSync } from "child_process";
 function getLocalRegistryPath() {
     return join(process.cwd(), ".xray", "skill-registry.json");
@@ -484,6 +485,9 @@ export async function skillRegistryCommand(action, args) {
 // Each platform's install command calls this to copy framework skills.
 export function syncBuiltinSkills(targetSkillsDir, packageRoot) {
     const root = packageRoot ?? join(dirname(fileURLToPath(import.meta.url)), "..", "..", "..");
+    const millSuit = createRequire(import.meta.url)(join(root, "scripts/foundry/mint-suit.cjs"));
+    if (!millSuit.wantsCostume(process.cwd()))
+        return 0;
     const candidateDirs = [
         join(root, "dist", "skills"),
         join(root, "src", "skills"),

package/dist/integrations/openclaw/plugin/xray-pre-tool/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xray-pre-tool",
-  "version": "4.0.2",
+  "version": "4.0.4",
   "private": true,
   "type": "module",
   "description": "0xRay constitution + temperament PreToolUse for OpenClaw",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "4.0.2",
+  "version": "4.0.4",
   "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
   "readme": "README.md",
   "license": "MIT",

package/scripts/foundry/CHANGELOG.md

@@ -1,8 +1,18 @@
 # Changelog
 
+## [0.1.6] - 2026-09-04
+
+Mill plant fastens an **inspect** suit: inspect AI work (diffs, traces, mill receipts, CI). Not empty. `mill` + `inspect` skills. Costume dump still opt-in.
+
+Inventory field is `suit` (`fastened` / `overlay` / `costume` / `dogfood`). Not `garment`. `foundry.json` `"costume": true` is the 45/42 dump.
+
+## [0.1.5] - 2026-09-04
+
+Mill plant (`plant/skills/mill`) fastened by default, not 45/42 costume. `foundry.json` `"costume": true` restores the dump. Plant overlay still mill-fill.
+
 ## [0.1.4] - 2026-09-04
 
-`npx @0xray/foundry hooks` on a published mill uses the worn garment
+`npx @0xray/foundry hooks` on a published mill uses the worn 0xray installer
 `node_modules/0xray/scripts/hooks/install-hooks.cjs`. Dogfood still uses
 `scripts/hooks` next to `scripts/foundry`. Missing installer fails honestly
 (no spawn of `node_modules/@0xray/hooks/...`).

package/scripts/foundry/README.md

@@ -2,7 +2,7 @@
 
 The **mill**, not the worn exo. Reconcile, stamp JSON/CHANGELOG, verify docs, gate, publish, overlay their suit params.
 
-PPE (`evaluatePreToolGate`) stays worn. The mill plants **their** constitution, features, skills, and agents onto the hanger. It is not a fifth MCP. The suit is [`0xray`](https://www.npmjs.com/package/0xray).
+PPE (`evaluatePreToolGate`) stays worn. The mill **fastens** their constitution, features, skills, and agents as the suit. It is not a fifth MCP. The suit is [`0xray`](https://www.npmjs.com/package/0xray).
 
 ## Install
 
@@ -35,11 +35,11 @@ npx @0xray/foundry hooks
 
 `docs-check` and `gate` run **full** 0xRay corpus only when the milled `package.json` name is `0xray` and `docs-site/` exists. Otherwise **light**: `package.json` + CHANGELOG.
 
-`hooks` installs git hooks via `scripts/hooks/install-hooks.cjs` (dogfood) or `node_modules/0xray/scripts/hooks/install-hooks.cjs` (published mill + worn garment). It does not look for `@0xray/hooks`.
+`hooks` installs git hooks via `scripts/hooks/install-hooks.cjs` (dogfood) or `node_modules/0xray/scripts/hooks/install-hooks.cjs` (published mill + worn suit). It does not look for `@0xray/hooks`.
 
 ## Suit params (`mint`)
 
-After the garment is on the hanger, overlay their plant (defaults; remap in `foundry.json` or `.xray/foundry.json`):
+After mill plant is fastened, overlay their plant (defaults; remap in `foundry.json` or `.xray/foundry.json`):
 
 | Facet | Default plant | Hanger |
 |---|---|---|
@@ -50,7 +50,9 @@ After the garment is on the hanger, overlay their plant (defaults; remap in `fou
 | Agents | `src/opencode/agents/*.yml` | `.opencode/agents/` (OpenCode hangar; other floors do not read mill YML agents) |
 | Agents card | `xray/AGENTS.md` | `AGENTS.md` if mill-managed |
 
-**Mill-fill is law:** their keys/files win; mill names they did not plant stay unless they overlay the same name. JSON facets always merge. Skill overlay is project hangers only. CLI re-wear calls mint **once** after mill copies.
+**Mill-fill is law:** their keys/files win; mill names they did not plant stay unless they overlay the same name. JSON facets always merge. Skill overlay is project dirs only (`.opencode/skills`, project Grok plugin skills). CLI re-wear calls mint **once** after mill copies.
+
+**Default mill plant:** `mill` + `inspect` (inspect AI work). Fastens a suit, not an empty one. Not 45/42 costume. `foundry.json` `"costume": true` copies that dump. Factory Repertoire still enable-when-resolves. PPE stays worn.
 
 ## Publish this mill
 

package/scripts/foundry/cli.mjs

@@ -25,7 +25,7 @@ const HELP =
   "\n" +
   "Mill, not exo. FOUNDRY_ROOT overrides cwd (the repo being milled).\n" +
   "release bumps/commits/pushes/publishes the milled cwd — pass --dry-run or --i-mean-it (or FOUNDRY_RELEASE=1).\n" +
-  "Mint overlays their plant onto project hangers (mill-fill). PPE stays worn.\n" +
+  "Mint fastens mill plant then overlays their plant (mill-fill JSON). PPE stays worn.\n" +
   "gate is build+test. docs-build is Docusaurus on the 0xray exo. ci reports GitHub Actions (no auto-push). hooks installs git pre/post hooks.\n";
 
 const cmd = process.argv[2];

package/scripts/foundry/mill-root.mjs

@@ -24,7 +24,7 @@ export function resolveMillRoot() {
 /**
  * Git hook installer. Dogfood is `scripts/hooks` next to `scripts/foundry`.
  * Published mill lives in `node_modules/@0xray/foundry` — sibling `@0xray/hooks`
- * does not exist. Use the worn 0xray garment installer instead.
+ * does not exist. Use the worn 0xray installer instead.
  */
 export function resolveHookInstaller(rootDir = resolveMillRoot(), millPkg = millPackageDir()) {
   const candidates = [

package/scripts/foundry/mint-suit.cjs

@@ -1,5 +1,5 @@
 /**
- * Mill overlay: their plant onto the hanger. Not PPE (evaluatePreToolGate).
+ * Mill overlay: fasten their plant as the suit. Not PPE (evaluatePreToolGate).
  *
  * Default SSOT (override with foundry.json or .xray/foundry.json):
  *   xray/codex.json, xray/features.json, xray/config.json,
@@ -72,22 +72,25 @@ function resolveInside(targetDir, rel) {
   return resolved;
 }
 
-function loadFoundryParams(targetDir) {
+function loadFoundryExtra(targetDir) {
   const candidates = [
     path.join(targetDir, "foundry.json"),
     path.join(targetDir, ".xray", "foundry.json"),
   ];
-  let extra = {};
   for (const candidate of candidates) {
     if (!fs.existsSync(candidate)) continue;
     try {
       const parsed = JSON.parse(fs.readFileSync(candidate, "utf8"));
-      if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) extra = parsed;
+      if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) return parsed;
     } catch {
-      extra = {};
+      return {};
     }
-    break;
   }
+  return {};
+}
+
+function loadFoundryParams(targetDir) {
+  const extra = loadFoundryExtra(targetDir);
   const params = { ...DEFAULT_PARAMS };
   for (const key of ["codex", "features", "config", "skills", "agents", "agentsCard"]) {
     if (typeof extra[key] === "string" && extra[key].trim()) params[key] = extra[key].trim();
@@ -95,6 +98,80 @@ function loadFoundryParams(targetDir) {
   return params;
 }
 
+/** 45/42 costume dump. Default false on consumers. Exo mill keeps the costume. */
+function wantsCostume(targetDir) {
+  if (isExoRepo(targetDir)) return true;
+  return loadFoundryExtra(targetDir).costume === true;
+}
+
+function millPlantDir(millPackageRoot) {
+  const nested = path.join(millPackageRoot, "scripts", "foundry", "plant");
+  if (isDirectory(nested)) return nested;
+  const packed = path.join(millPackageRoot, "plant");
+  if (isDirectory(packed)) return packed;
+  return null;
+}
+
+function listSkillNamesAt(skillsSrc) {
+  if (!isDirectory(skillsSrc)) return [];
+  const names = [];
+  for (const entry of fs.readdirSync(skillsSrc, { withFileTypes: true })) {
+    if (!entry.isDirectory() || entry.name.startsWith(".")) continue;
+    const skillMd = path.join(skillsSrc, entry.name, "SKILL.md");
+    if (!fs.existsSync(skillMd)) continue;
+    names.push(entry.name);
+  }
+  return names;
+}
+
+function listAgentFilesAt(agentsSrc) {
+  if (!isDirectory(agentsSrc)) return [];
+  return fs
+    .readdirSync(agentsSrc, { withFileTypes: true })
+    .filter(
+      (entry) =>
+        entry.isFile() && (entry.name.endsWith(".yml") || entry.name.endsWith(".yaml")),
+    )
+    .map((entry) => entry.name);
+}
+
+/** Mill mill-fill mill plant: mill mill mill mill-fill mill names they did not plant stay. */
+function fastenMillPlant(millPackageRoot, targetDir, log) {
+  const plant = millPlantDir(millPackageRoot);
+  if (!plant) return { skills: [], agents: [] };
+  const skillsSrc = path.join(plant, "skills");
+  const agentsSrc = path.join(plant, "agents");
+  const skills = listSkillNamesAt(skillsSrc);
+  const agents = listAgentFilesAt(agentsSrc);
+  const skillDirs = listProjectSkillDirs(targetDir);
+  const agentsDest = path.join(targetDir, ".opencode", "agents");
+  for (const dir of skillDirs) {
+    for (const name of skills) {
+      const src = path.join(skillsSrc, name, "SKILL.md");
+      const destMd = path.join(dir, name, "SKILL.md");
+      if (path.resolve(src) === path.resolve(destMd)) continue;
+      if (fs.existsSync(destMd)) continue;
+      fs.mkdirSync(path.dirname(destMd), { recursive: true });
+      fs.copyFileSync(src, destMd);
+    }
+  }
+  for (const file of agents) {
+    const src = path.join(agentsSrc, file);
+    const dest = path.join(agentsDest, file);
+    if (path.resolve(src) === path.resolve(dest)) continue;
+    if (fs.existsSync(dest)) continue;
+    fs.mkdirSync(agentsDest, { recursive: true });
+    fs.copyFileSync(src, dest);
+  }
+  if (log && (skills.length > 0 || agents.length > 0)) {
+    log("foundry-mint", "Fastened mill plant", "info", {
+      skills: skills.length,
+      agents: agents.length,
+    });
+  }
+  return { skills, agents };
+}
+
 function isDirectory(p) {
   try {
     return Boolean(p) && fs.existsSync(p) && fs.statSync(p).isDirectory();
@@ -103,8 +180,8 @@ function isDirectory(p) {
   }
 }
 
-/** Project skill hangers only. */
-function listSkillHangers(targetDir) {
+/** Project skill dirs only (.opencode/skills, project Grok plugin skills). */
+function listProjectSkillDirs(targetDir) {
   const dests = [path.join(targetDir, ".opencode", "skills")];
   const projectGrok = path.join(targetDir, ".grok", "plugins", "0xray", "skills");
   if (isDirectory(projectGrok)) dests.push(projectGrok);
@@ -138,28 +215,13 @@ function overlayJsonFacet(src, dest) {
 function listConsumerSkillNames(targetDir, skillsRel) {
   const rel = skillsRel || DEFAULT_PARAMS.skills;
   const skillsSrc = resolveInside(targetDir, rel);
-  if (!isDirectory(skillsSrc)) return [];
-  const names = [];
-  for (const entry of fs.readdirSync(skillsSrc, { withFileTypes: true })) {
-    if (!entry.isDirectory() || entry.name.startsWith(".")) continue;
-    const skillMd = path.join(skillsSrc, entry.name, "SKILL.md");
-    if (!fs.existsSync(skillMd)) continue;
-    names.push(entry.name);
-  }
-  return names;
+  return listSkillNamesAt(skillsSrc);
 }
 
 function listConsumerAgentFiles(targetDir, agentsRel) {
   const rel = agentsRel || DEFAULT_PARAMS.agents;
   const agentsSrc = resolveInside(targetDir, rel);
-  if (!isDirectory(agentsSrc)) return [];
-  return fs
-    .readdirSync(agentsSrc, { withFileTypes: true })
-    .filter(
-      (entry) =>
-        entry.isFile() && (entry.name.endsWith(".yml") || entry.name.endsWith(".yaml")),
-    )
-    .map((entry) => entry.name);
+  return listAgentFilesAt(agentsSrc);
 }
 
 const MANAGED_AGENTS_MARKER = "<!-- 0xray-managed -->";
@@ -184,13 +246,13 @@ function overlayConsumerTree(targetDir, log, params) {
   const agents = listConsumerAgentFiles(targetDir, agentsRel);
   const skillsSrc = resolveInside(targetDir, skillsRel);
   const agentsSrc = resolveInside(targetDir, agentsRel);
-  const skillHangers = listSkillHangers(targetDir);
+  const skillDirs = listProjectSkillDirs(targetDir);
   const agentsDest = path.join(targetDir, ".opencode", "agents");
 
-  for (const hanger of skillHangers) {
+  for (const dir of skillDirs) {
     for (const name of skills) {
       const src = path.join(skillsSrc, name, "SKILL.md");
-      const destMd = path.join(hanger, name, "SKILL.md");
+      const destMd = path.join(dir, name, "SKILL.md");
       if (path.resolve(src) === path.resolve(destMd)) continue;
       fs.mkdirSync(path.dirname(destMd), { recursive: true });
       fs.copyFileSync(src, destMd);
@@ -205,10 +267,10 @@ function overlayConsumerTree(targetDir, log, params) {
   }
 
   if (log && (skills.length > 0 || agents.length > 0)) {
-    log("foundry-mint", "Overlaid consumer skills/agents onto hangers", "info", {
+    log("foundry-mint", "Overlaid consumer skills/agents", "info", {
       skills: skills.length,
       agents: agents.length,
-      skillHangers: skillHangers.length,
+      skillDirs: skillDirs.length,
     });
   }
   return { skills, agents, params: resolved };
@@ -216,7 +278,7 @@ function overlayConsumerTree(targetDir, log, params) {
 
 function mintConsumerFromSsot(packageRoot, targetDir, log, tree) {
   if (isDogfood(packageRoot, targetDir)) {
-    return { garment: "dogfood", skipped: true, consumer: readPackageIdentity(path.join(targetDir, "package.json")) };
+    return { suit: "dogfood", skipped: true, consumer: readPackageIdentity(path.join(targetDir, "package.json")) };
   }
   const mill = readPackageIdentity(path.join(packageRoot, "package.json"));
   const consumer = readPackageIdentity(path.join(targetDir, "package.json"));
@@ -233,13 +295,28 @@ function mintConsumerFromSsot(packageRoot, targetDir, log, tree) {
     features ||
     config ||
     agentsCard;
-  const garment = overlayed ? "overlay" : "copied-onto-hanger";
+  const millPlanted =
+    (Array.isArray(tree?.millPlantSkills) && tree.millPlantSkills.length > 0) ||
+    (Array.isArray(tree?.millPlantAgents) && tree.millPlantAgents.length > 0);
+  const costume = wantsCostume(targetDir);
+  const suit = overlayed
+    ? "overlay"
+    : millPlanted
+      ? "fastened"
+      : costume
+        ? "costume"
+        : "fastened";
   const inventory = {
     mill: { name: mill.name || "@0xray/foundry", version: mill.version },
     consumer: { name: consumer.name, version: consumer.version },
-    garment,
+    suit,
     params: tree?.params || loadFoundryParams(targetDir),
     tree: { skills, agents },
+    millPlant: {
+      skills: Array.isArray(tree?.millPlantSkills) ? tree.millPlantSkills : [],
+      agents: Array.isArray(tree?.millPlantAgents) ? tree.millPlantAgents : [],
+    },
+    costume,
     facets: {
       constitution,
       features,
@@ -260,7 +337,7 @@ function mintConsumerFromSsot(packageRoot, targetDir, log, tree) {
     log("foundry-mint", "Minted foundry-inventory from consumer mill SSOT", "info", {
       consumer: consumer.name,
       version: consumer.version,
-      garment,
+      suit,
     });
   }
   return inventory;
@@ -268,10 +345,13 @@ function mintConsumerFromSsot(packageRoot, targetDir, log, tree) {
 
 function mintConsumerSuit(millPackageRoot, targetDir, log) {
   if (isDogfood(millPackageRoot, targetDir)) {
-    return { garment: "dogfood", skipped: true };
+    return { suit: "dogfood", skipped: true };
   }
   const params = loadFoundryParams(targetDir);
+  const millPlant = fastenMillPlant(millPackageRoot, targetDir, log);
   const tree = overlayConsumerTree(targetDir, log, params);
+  tree.millPlantSkills = millPlant.skills;
+  tree.millPlantAgents = millPlant.agents;
   tree.codex = overlayJsonFacet(
     resolveInside(targetDir, params.codex),
     path.join(targetDir, ".xray", "codex.json"),
@@ -299,13 +379,17 @@ module.exports = {
   DEFAULT_PARAMS,
   deepMerge,
   loadFoundryParams,
+  loadFoundryExtra,
+  wantsCostume,
+  millPlantDir,
+  fastenMillPlant,
   resolveInside,
   overlayJsonFacet,
   overlayAgentsCard,
   overlayConsumerTree,
   listConsumerSkillNames,
   listConsumerAgentFiles,
-  listSkillHangers,
+  listProjectSkillDirs,
   mintConsumerFromSsot,
   mintConsumerSuit,
   isDogfood,

package/scripts/foundry/mint.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 /**
- * Overlay their mill SSOT onto the hanger (cwd / FOUNDRY_ROOT).
+ * Overlay their mill SSOT onto the project (cwd / FOUNDRY_ROOT).
  * Not a fifth 0xray CLI. Not PPE.
  */
 
@@ -19,7 +19,7 @@ function main() {
     process.stdout.write(`${component} ${action} ${status}\n`);
   });
   if (inventory.skipped) {
-    process.stderr.write("mint: skipped dogfood / 0xray exo plant (not a consumer hanger)\n");
+    process.stderr.write("mint: skipped dogfood / 0xray exo plant (not a consumer project)\n");
     process.exit(0);
   }
   process.stdout.write(`${JSON.stringify(inventory, null, 2)}\n`);

package/scripts/foundry/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@0xray/foundry",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "private": false,
   "type": "module",
   "description": "0xRay mill: mint their suit params, stamp, gate, publish, CI report, git hooks. Not the worn exo.",
@@ -26,7 +26,8 @@
     "cli.js",
     "README.md",
     "LICENSE",
-    "CHANGELOG.md"
+    "CHANGELOG.md",
+    "plant"
   ],
   "exports": {
     "./version-manager": "./version-manager.mjs",

package/scripts/foundry/plant/agents/inspect.yml

@@ -0,0 +1,5 @@
+name: inspect
+skill: inspect
+description: "Inspect AI work: diffs, traces, mill receipts, CI. Fastened mill plant."
+version: "0.1.6"
+mode: subagent

package/scripts/foundry/plant/agents/mill.yml

@@ -0,0 +1,5 @@
+name: mill
+skill: mill
+description: "Mill mill-fill mill plant. Their plant is the suit. Factory Repertoire."
+version: "0.1.6"
+mode: subagent

package/scripts/foundry/plant/skills/inspect/SKILL.md

@@ -0,0 +1,31 @@
+---
+name: inspect
+description: Inspect AI work — diffs, tool traces, mill receipts, CI. Factory mill plant. Not 45/42 costume.
+---
+
+# Inspect
+
+This mill **fastens** a suit for **inspecting AI work**. Not an empty suit. Not a copy of 0xRay's 45/42 costume.
+
+Use this when an agent (or a mill) just wrote, minted, or shipped something. Read the work. Do not trust the receipt until you have opened the files.
+
+## What to inspect
+
+1. **Diff.** What actually changed. Ignore the agent's summary if the diff disagrees.
+2. **Plant vs worn.** `src/skills`, `src/opencode/agents`, `xray/*.json` vs `.opencode/skills`, `.opencode/agents`, `.xray/`. Same name: plant should win. Costume dump (45 skills / 42 agents they did not plant) is a fail unless `foundry.json` has `"costume": true`.
+3. **Mill receipt.** `.xray/foundry-inventory.json` — mill name/version, `suit` (`fastened` / `overlay` / `costume`), `millPlant.skills` should include `mill` and `inspect`.
+4. **CI.** GitHub mill CI and mill-monitor report, not just a green check in chat.
+5. **Live PUT.** `npm view <pkg> version` and HTTP 200 on the `.tgz`. Metadata without a tarball is not shipped.
+6. **Machine hangar.** Isolated HOME last-mile must not clobber `~/.grok/plugins/0xray`.
+
+## How to work
+
+- Open the files. Quote paths. Do not invent a pass.
+- Constitution stays on (Codex 11 / 69 / destructive). Inspecting is not a license to add an 8th MCP.
+- Factory Repertoire is the organ, not the inspection.
+- Fasten their plant on top; do not dump our costume.
+
+```bash
+npx @0xray/foundry mint
+npx @0xray/foundry ci --report
+```

package/scripts/foundry/plant/skills/mill/SKILL.md

@@ -0,0 +1,20 @@
+---
+name: mill
+description: Fasten their plant as the suit. Factory Repertoire. Inspect is the mill discipline. Not 45/42 costume.
+---
+
+# Mill
+
+The mill **fastens** a suit. Default mill plant is **inspect** (inspecting AI work) plus this mill card. Not empty. Not 0xRay's 45-skill / 42-agent costume unless they opt in.
+
+**Plant (their SSOT):** `xray/codex.json`, `xray/features.json`, `xray/config.json`, `src/skills/<name>/SKILL.md`, `src/opencode/agents/*.yml`. Remap with `foundry.json`.
+
+**Mill-fill:** their keys/files win. Mill plant names they did not overlay stay. JSON always merges.
+
+**Factory:** Repertoire enable-when-resolves. Seven generated MCP. Constitution (PPE) stays worn. Not a fifth MCP. Not 5.0.
+
+**Costume:** `foundry.json` `"costume": true` copies the 45/42 mill costume.
+
+```bash
+npx @0xray/foundry mint
+```

package/scripts/node/consumer-install-smoke.mjs

@@ -210,6 +210,7 @@ function main() {
       "scripts/node/postinstall.cjs",
       "scripts/foundry/mint-suit.cjs",
       "scripts/foundry/hooks.mjs",
+      "scripts/foundry/plant/skills/mill/SKILL.md",
       "package.json",
       "xray/features.json",
       "xray/features.schema.json",
@@ -223,6 +224,20 @@ function main() {
       console.log(`  ✅ ${rel}`);
     }
 
+    const millSkillHanger = path.join(tmpRoot, ".opencode", "skills", "mill", "SKILL.md");
+    if (!fs.existsSync(millSkillHanger)) {
+      throw new Error("mill plant missing mill skill");
+    }
+    const wornSkills = path.join(tmpRoot, ".opencode", "skills");
+    const wornNames = fs.existsSync(wornSkills)
+      ? fs.readdirSync(wornSkills).filter((n) =>
+          fs.existsSync(path.join(wornSkills, n, "SKILL.md")),
+        )
+      : [];
+    if (wornNames.length > 3) {
+      throw new Error(`costume dump: ${wornNames.join(",")}`);
+    }
+
     const installedPkg = JSON.parse(fs.readFileSync(path.join(nmRoot, "package.json"), "utf-8"));
     if (installedPkg.version !== version) {
       throw new Error(`Installed version ${installedPkg.version} != packed ${version}`);

package/scripts/node/install-bridges.cjs

@@ -8,6 +8,7 @@ const fs = require("fs");
 const path = require("path");
 const os = require("os");
 const { execSync } = require("child_process");
+const { wantsCostume } = require("../foundry/mint-suit.cjs");
 const {
   wireHermesBridge,
   wireOpencodeBridge,
@@ -92,6 +93,11 @@ function syncBuiltinSkills(targetSkillsDir, packageRoot) {
   return copied;
 }
 
+function syncCostumeSkills(targetSkillsDir, packageRoot, targetDir) {
+  if (targetDir && !wantsCostume(targetDir)) return 0;
+  return syncBuiltinSkills(targetSkillsDir, packageRoot);
+}
+
 function copyTree(src, dest, relPath = "") {
   if (!fs.existsSync(src)) return;
   if (!fs.existsSync(dest)) fs.mkdirSync(dest, { recursive: true });
@@ -267,38 +273,46 @@ function writeGrokDiscoveredHooks(targetDir, hooksPath, log, label) {
   }
 }
 
+function copyOpencodePlugin(packageRoot, opencodeDest, log) {
+  const pluginSource = path.join(packageRoot, "dist", "plugin", "xray-codex-injection.js");
+  const pluginDest = path.join(opencodeDest, "plugin", "xray-codex-injection.js");
+  if (!fs.existsSync(pluginSource)) return;
+  const pluginDestDir = path.dirname(pluginDest);
+  if (!fs.existsSync(pluginDestDir)) fs.mkdirSync(pluginDestDir, { recursive: true });
+  const shouldCopy =
+    !fs.existsSync(pluginDest) ||
+    fs.statSync(pluginSource).mtime > fs.statSync(pluginDest).mtime;
+  if (shouldCopy) {
+    fs.copyFileSync(pluginSource, pluginDest);
+    log("opencode-bridge", "plugin updated", "info");
+  }
+}
+
 function installOpencodeBridge(targetDir, packageRoot, log) {
   const opencodeSource = path.join(packageRoot, ".opencode");
   const opencodeDest = path.join(targetDir, ".opencode");
-  if (!fs.existsSync(opencodeSource)) {
-    log("opencode-bridge", "skipped", "warn", { reason: ".opencode source missing" });
-    return;
-  }
+  const costume = wantsCostume(targetDir);
 
-  if (!fs.existsSync(opencodeDest)) {
-    copyTree(opencodeSource, opencodeDest);
-    log("opencode-bridge", "copied .opencode tree", "info");
-  } else {
-    log("opencode-bridge", ".opencode exists — merging skills/plugin only", "info");
-  }
-
-  const pluginSource = path.join(packageRoot, "dist", "plugin", "xray-codex-injection.js");
-  const pluginDest = path.join(opencodeDest, "plugin", "xray-codex-injection.js");
-  if (fs.existsSync(pluginSource)) {
-    const pluginDestDir = path.dirname(pluginDest);
-    if (!fs.existsSync(pluginDestDir)) fs.mkdirSync(pluginDestDir, { recursive: true });
-    const shouldCopy =
-      !fs.existsSync(pluginDest) ||
-      fs.statSync(pluginSource).mtime > fs.statSync(pluginDest).mtime;
-    if (shouldCopy) {
-      fs.copyFileSync(pluginSource, pluginDest);
-      log("opencode-bridge", "plugin updated", "info");
+  if (costume) {
+    if (!fs.existsSync(opencodeSource)) {
+      log("opencode-bridge", "skipped", "warn", { reason: ".opencode source missing" });
+      return;
     }
+    if (!fs.existsSync(opencodeDest)) {
+      copyTree(opencodeSource, opencodeDest);
+      log("opencode-bridge", "copied .opencode tree", "info");
+    } else {
+      log("opencode-bridge", ".opencode exists — merging skills/plugin only", "info");
+    }
+    copyOpencodePlugin(packageRoot, opencodeDest, log);
+    const copied = syncCostumeSkills(path.join(opencodeDest, "skills"), packageRoot, targetDir);
+    if (copied > 0) log("opencode-bridge", `skills synced (${copied})`, "info", { path: ".opencode/skills/" });
+  } else {
+    log("opencode-bridge", "mill plant — plugin only, not costume dump", "info");
+    fs.mkdirSync(opencodeDest, { recursive: true });
+    copyOpencodePlugin(packageRoot, opencodeDest, log);
   }
 
-  const copied = syncBuiltinSkills(path.join(opencodeDest, "skills"), packageRoot);
-  if (copied > 0) log("opencode-bridge", `skills synced (${copied})`, "info", { path: ".opencode/skills/" });
-
   try {
     const count = wireOpencodeBridge(targetDir);
     log("opencode-bridge", `opencode.json mcp wired (${count} servers)`, "info");
@@ -376,14 +390,14 @@ function installGrokBridge(targetDir, packageRoot, log) {
       log("grok-bridge", "plugin copied", "info", { path: rel || dest });
       writePluginMcpJson(dest, targetDir, log, "grok-bridge");
       patchGrokHooks(dest, packageRoot, targetDir, log, "grok-bridge");
-      const copied = syncBuiltinSkills(path.join(dest, "skills"), packageRoot);
+      const copied = syncCostumeSkills(path.join(dest, "skills"), packageRoot, targetDir);
       if (copied > 0) log("grok-bridge", `plugin skills synced (${copied})`, "info", { path: rel });
     }
   }
 
   if (!ephemeral) {
     const grokGlobalSkills = path.join(home, ".grok", "skills");
-    const globalCopied = syncBuiltinSkills(grokGlobalSkills, packageRoot);
+    const globalCopied = syncCostumeSkills(grokGlobalSkills, packageRoot, targetDir);
     if (globalCopied > 0) {
       log("grok-bridge", `global skills synced (${globalCopied})`, "info", { path: "~/.grok/skills/" });
     }
@@ -421,7 +435,7 @@ function installHermesBridge(targetDir, packageRoot, log) {
 
   writePluginMcpJson(targetPluginDir, targetDir, log, "hermes-bridge");
 
-  const copied = syncBuiltinSkills(path.join(targetPluginDir, "skills"), packageRoot);
+  const copied = syncCostumeSkills(path.join(targetPluginDir, "skills"), packageRoot, targetDir);
   if (copied > 0) log("hermes-bridge", `skills synced (${copied})`, "info");
 
   const rootMarker = path.join(targetPluginDir, "xray-consumer-root.txt");
@@ -473,7 +487,7 @@ function installOpenclawBridge(targetDir, packageRoot, log) {
     log("openclaw-bridge", "config created", "info", { path: ".xray/config/openclaw.json" });
   }
 
-  const copied = syncBuiltinSkills(path.join(os.homedir(), ".openclaw", "skills"), packageRoot);
+  const copied = syncCostumeSkills(path.join(os.homedir(), ".openclaw", "skills"), packageRoot, targetDir);
   if (copied > 0) log("openclaw-bridge", `skills synced (${copied})`, "info", { path: "~/.openclaw/skills/" });
 
   try {

package/src/integrations/openclaw/plugin/xray-pre-tool/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xray-pre-tool",
-  "version": "4.0.2",
+  "version": "4.0.4",
   "private": true,
   "type": "module",
   "description": "0xRay constitution + temperament PreToolUse for OpenClaw",

package/xray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "4.0.2",
+  "version": "4.0.4",
   "description": "0xRay Framework - Unified Feature Configuration",
   "suit_temperament": {
     "profile": "auto",