0xray 4.0.20 → 4.0.21

package/dist/integrations/hooks/station-hook-runtime.cjs

@@ -1,6 +1,7 @@
 /**
  * Station heat — compaction / host-swap card.
- * SSOT remains session-boot.json. STATION.md is the projection the model Reads.
+ * STATION.md is the pickup ticket. session-boot.json is the snapshot.
+ * Heat must not paint leftover boot extras onto the card.
  * Grok ignores SessionStart/UserPromptSubmit stdout; disk + AGENTS.md is the contract.
  * Heat writers merge stock fields; unknown keys and ## Durable / ## Seed survive.
  */
@@ -104,6 +105,63 @@ function readPlanLine(root) {
   return readGitSubject(root);
 }
 
+function isStockTicket(value) {
+  const text = String(value || "").trim().toLowerCase();
+  return !text || text === "(none)" || text === "(none yet)";
+}
+
+function readStationTicketField(root, field) {
+  const md = readExistingStationMarkdown(root);
+  const re = field === "Plan" ? /^Plan:\s*(.*)$/im : /^Intent:\s*(.*)$/im;
+  const match = md.match(re);
+  if (!match) return null;
+  const value = clipIntent(match[1]);
+  if (!value || isStockTicket(value)) return null;
+  return value;
+}
+
+function bootHeadMoved(root, existing) {
+  const live = readGitBrief(root);
+  const bootHead = existing && existing.git && existing.git.head ? String(existing.git.head) : "";
+  return Boolean(live && live.head && bootHead && bootHead !== live.head);
+}
+
+/** Live ticket beats leftover boot. Extra spoken intent still wins. */
+function resolveHeatIntent(root, extra, existing) {
+  const incoming = clipIntent(
+    extra.intent || extra.prompt || extra.userMessage || extra.user_prompt,
+  );
+  if (incoming) return { intent: incoming, rematch: true };
+  const card = readStationTicketField(root, "Intent");
+  const pickup = clipIntent(readNotesPickup(root));
+  const bootIntent = typeof existing.intent === "string" ? clipIntent(existing.intent) : null;
+  const cardIsBootEcho = Boolean(card && bootIntent && card === bootIntent);
+  if (pickup && cardIsBootEcho && pickup !== bootIntent) {
+    return { intent: pickup, rematch: true };
+  }
+  if (card && !cardIsBootEcho) return { intent: card, rematch: card !== bootIntent };
+  if (pickup && pickup !== bootIntent) return { intent: pickup, rematch: true };
+  if (card) return { intent: card, rematch: false };
+  if (bootIntent) return { intent: bootIntent, rematch: false };
+  const git = readGitSubject(root);
+  return { intent: git, rematch: Boolean(git) };
+}
+
+function resolveHeatPlan(root, extra, existing) {
+  const incoming = clipIntent(extra.plan || extra.planLine);
+  if (incoming) return incoming;
+  const card = readStationTicketField(root, "Plan");
+  const bootPlan = typeof existing.planLine === "string" ? clipIntent(existing.planLine) : null;
+  const live = readPlanLine(root);
+  const cardIsBootEcho = Boolean(card && bootPlan && card === bootPlan);
+  if (card && !cardIsBootEcho) return card;
+  if (bootHeadMoved(root, existing) && bootPlan && live === bootPlan) {
+    return readGitSubject(root) || card || live;
+  }
+  if (card) return card;
+  return live;
+}
+
 function resolveRepertoireProviderModule(root) {
   const mr = readMemoryRoutingConfig(root);
   if (mr && typeof mr.module_path === "string" && mr.module_path) {
@@ -200,32 +258,44 @@ function readRepertoireWorking(root) {
   }
 }
 
+function isKeywordDestName(name) {
+  const n = String(name || "").trim().toLowerCase();
+  if (!n) return true;
+  if (n.startsWith("repo-") || n.startsWith("bedrock-")) return true;
+  if (n === "test-expansion" || n === "dead-code-removal" || n === "station-heat") return true;
+  if (/^release-v?\d/.test(n) || /^stamp-/.test(n) || /^drop-stale-/.test(n)) return true;
+  if (/\b4-0-\d{2}\b/.test(n) && /npm|package-lock|release|stamp/.test(n)) return true;
+  return false;
+}
+
+function isGenericFieldObservedSignal(signal) {
+  const definition = String((signal && signal.definition) || "");
+  return /field-observed domain primitive/i.test(definition);
+}
+
 function stationSafeSignals(names) {
   if (!Array.isArray(names)) return [];
   const out = [];
   for (const raw of names) {
     const name = String(raw || "").trim();
-    if (!name) continue;
-    if (name.toLowerCase().startsWith("bedrock-")) continue;
+    if (!name || isKeywordDestName(name)) continue;
     out.push(name);
     if (out.length >= 4) break;
   }
   return out;
 }
 
-/** Keep subject repo-* in the short list the card and working file hold. */
-function preferSubjectHits(names, cap = 8) {
+/** Laws only. Hangar repo-* and git-slug keywords stay off the card. */
+function preferLawHits(names, cap = 8) {
   if (!Array.isArray(names)) return [];
   const unique = [];
   for (const raw of names) {
     const name = String(raw || "").trim();
-    if (!name || name.toLowerCase().startsWith("bedrock-")) continue;
+    if (!name || isKeywordDestName(name)) continue;
     if (unique.includes(name)) continue;
     unique.push(name);
   }
-  const subject = unique.filter((name) => name.startsWith("repo-"));
-  const rest = unique.filter((name) => !name.startsWith("repo-"));
-  return [...subject, ...rest].slice(0, cap);
+  return unique.slice(0, cap);
 }
 
 function destSignalsPath(root) {
@@ -279,6 +349,52 @@ function signalNameSet(filePath) {
   return new Set(readSignalRecords(filePath).map((signal) => String(signal.name).trim()));
 }
 
+function destLawNameSet(root) {
+  const names = new Set();
+  for (const fileName of ["curated_signals.json", "stack-overlay.json"]) {
+    for (const name of signalNameSet(repertoireDataFile(root, fileName))) {
+      if (!isKeywordDestName(name)) names.add(name);
+    }
+  }
+  for (const name of signalNameSet(destSignalsPath(root))) {
+    if (!isKeywordDestName(name)) names.add(name);
+  }
+  return names;
+}
+
+/** Drop hangar repo-* and git-slug keywords. Keep factory + stack laws. */
+function pruneKeywordDest(root) {
+  const dest = destSignalsPath(root);
+  if (!dest || !existsSync(dest)) return { removed: 0, kept: 0 };
+  let data;
+  try {
+    data = JSON.parse(readFileSync(dest, "utf8"));
+  } catch {
+    return { removed: 0, kept: 0 };
+  }
+  if (!Array.isArray(data.signals)) return { removed: 0, kept: 0 };
+  const factory = signalNameSet(repertoireDataFile(root, "curated_signals.json"));
+  const stack = signalNameSet(repertoireDataFile(root, "stack-overlay.json"));
+  const kept = [];
+  let removed = 0;
+  for (const signal of data.signals) {
+    const name = String((signal && signal.name) || "").trim();
+    if (!name) continue;
+    const protectedLaw = factory.has(name) || stack.has(name);
+    if (!protectedLaw && (isKeywordDestName(name) || isGenericFieldObservedSignal(signal))) {
+      removed += 1;
+      continue;
+    }
+    kept.push(signal);
+  }
+  if (removed) {
+    data.signals = kept;
+    data.last_updated = new Date().toISOString();
+    writeFileSync(dest, `${JSON.stringify(data, null, 2)}\n`);
+  }
+  return { removed, kept: kept.length };
+}
+
 function mergeMissingSignals(destPath, incoming) {
   if (!incoming.length || !existsSync(destPath)) return 0;
   let data;
@@ -308,7 +424,7 @@ function mergeMissingSignals(destPath, incoming) {
   return added;
 }
 
-/** Hydrate project dest from seed + stack + subject overlays. Never write the tarball. */
+/** Hydrate project dest from seed + stack. Subject repo-* stay off dest. */
 function hydrateDestOnWake(root) {
   const dest = destSignalsPath(root);
   const seed = repertoireDataFile(root, "curated_signals.json");
@@ -317,10 +433,12 @@ function hydrateDestOnWake(root) {
     copyFileSync(seed, dest);
   }
   if (!existsSync(dest)) return { dest: null, added: 0, destCount: 0 };
-  const added =
-    mergeMissingSignals(dest, readSignalRecords(repertoireDataFile(root, "stack-overlay.json"))) +
-    mergeMissingSignals(dest, readSignalRecords(repertoireDataFile(root, "subject-overlay.json")));
-  return { dest, added, destCount: countCuratedSignals(dest) || 0 };
+  const added = mergeMissingSignals(
+    dest,
+    readSignalRecords(repertoireDataFile(root, "stack-overlay.json")),
+  );
+  const pruned = pruneKeywordDest(root);
+  return { dest, added, destCount: countCuratedSignals(dest) || 0, pruned };
 }
 
 function readNotesPickup(root) {
@@ -405,7 +523,12 @@ function sleepMs(ms) {
 /** Parallel live contexts share one project copy. Exclusive create; stale after 60s. */
 function withDestLock(root, fn) {
   const lockPath = destLockPath(root);
-  mkdirSync(join(root, ".xray", "state", "repertoire"), { recursive: true });
+  try {
+    mkdirSync(join(root, ".xray", "state", "repertoire"), { recursive: true });
+  } catch (err) {
+    if (err && (err.code === "EACCES" || err.code === "EPERM")) return null;
+    throw err;
+  }
   const started = Date.now();
   while (Date.now() - started < 50000) {
     try {
@@ -466,42 +589,18 @@ function stripConventionalSubject(message) {
     .trim();
 }
 
-/** Real git → dest names. Not a leftover catalog. Kernel structural names when the diff shows them. */
-function patternsFromGit(root, commits, span) {
+/** Observe existing laws mentioned in git. Do not mint commit slugs. */
+function patternsFromGit(root, commits) {
+  const text = (Array.isArray(commits) ? commits : [])
+    .map((row) => String((row && row.message) || ""))
+    .join("\n")
+    .toLowerCase();
   const patterns = [];
-  const seen = new Set();
-  const add = (raw, confidence, description) => {
-    const slug = slugPrimitiveName(raw);
-    if (!slug || seen.has(slug)) return;
-    seen.add(slug);
-    patterns.push({ name: slug, confidence, description: description || String(raw) });
-  };
-  for (const row of commits) {
-    add(stripConventionalSubject(row.message), 0.55, row.message);
-  }
-  try {
-    const from = span && span.from ? String(span.from) : "";
-    const to = span && span.to ? String(span.to) : "HEAD";
-    if (from && !from.startsWith("HEAD~")) {
-      const out = execFileSync("git", ["diff", "--name-status", `${from}..${to}`], {
-        cwd: root,
-        encoding: "utf8",
-        timeout: 4000,
-        stdio: ["ignore", "pipe", "pipe"],
-      });
-      const lines = String(out).split("\n").filter(Boolean);
-      if (lines.some((line) => /\.(test|spec)\.[jt]sx?|__tests__|\/tests\//.test(line))) {
-        add("test-expansion", 0.55, "git test files");
-      }
-      if (lines.some((line) => /^D[\t ]/.test(line))) {
-        add("dead-code-removal", 0.55, "git deletions");
-      }
-      if (lines.some((line) => /hooks\/station|session-capture|semantic-patterns/.test(line))) {
-        add("station-heat", 0.55, "heat path");
-      }
+  if (!text.trim()) return patterns;
+  for (const name of destLawNameSet(root)) {
+    if (text.includes(name) || text.includes(name.replace(/-/g, " "))) {
+      patterns.push({ name, confidence: 0.7, description: "observe existing law from git" });
     }
-  } catch {
-    /* structural names are extra — commit slugs still grow dest */
   }
   return patterns;
 }
@@ -521,16 +620,22 @@ function latestSessionNewerThanGrow(root) {
 
 /** Capture then grow. Skip-path for floors that already have a live card. */
 function heatLiveMemory(root) {
-  const mr = readMemoryRoutingConfig(root);
-  if (isExplicitMemoryRoutingOptOut(mr)) {
+  try {
+    const mr = readMemoryRoutingConfig(root);
+    if (isExplicitMemoryRoutingOptOut(mr)) {
+      return { captured: null, grow: null };
+    }
+    const result = withDestLock(root, () => {
+      const captured = maybeCaptureSessionOnHeadMove(root);
+      const grow = captured || latestSessionNewerThanGrow(root) ? growDestOnWake(root) : null;
+      if (grow) persistRepertoireWorking(root, { grow });
+      return { captured, grow };
+    });
+    return result || { captured: null, grow: null };
+  } catch {
+    /* dest EACCES / unwritable heat root must not deny the host tool */
     return { captured: null, grow: null };
   }
-  return withDestLock(root, () => {
-    const captured = maybeCaptureSessionOnHeadMove(root);
-    const grow = captured || latestSessionNewerThanGrow(root) ? growDestOnWake(root) : null;
-    if (grow) persistRepertoireWorking(root, { grow });
-    return { captured, grow };
-  });
 }
 
 /** Every floor that heats. Dedup per HEAD. Patterns come from git, not a leftover catalog. */
@@ -648,7 +753,9 @@ function growDestOnWake(root) {
     });
     const line = String(out).trim().split("\n").filter(Boolean).at(-1) || "{}";
     const parsed = JSON.parse(line);
-    return parsed && typeof parsed === "object" ? parsed : null;
+    const pruned = pruneKeywordDest(root);
+    if (!parsed || typeof parsed !== "object") return { pruned };
+    return { ...parsed, pruned: pruned.removed, destCount: countCuratedSignals(destSignalsPath(root)) };
   } catch {
     return null;
   }
@@ -679,6 +786,31 @@ function isCompactHook(extra) {
   return /compact/i.test(hook);
 }
 
+function isCompactEventName(value) {
+  return /compact/i.test(String(value || ""));
+}
+
+/** Keep Compact boot fields after later preToolUse / HEAD rewrite. */
+function retainCompactFields(existing, extra = {}) {
+  const incomingHook = extra && (extra.hookEvent || extra.source || extra.hook);
+  if (isCompactEventName(incomingHook) || (extra && extra.event_class)) {
+    const kept = {};
+    if (extra.hookEvent) kept.hookEvent = extra.hookEvent;
+    if (extra.conversation_id) kept.conversation_id = extra.conversation_id;
+    if (extra.generation_id) kept.generation_id = extra.generation_id;
+    if (extra.event_class) kept.event_class = extra.event_class;
+    return kept;
+  }
+  const prior = existing && typeof existing === "object" ? existing : {};
+  if (!isCompactEventName(prior.hookEvent) && !prior.event_class) return {};
+  const kept = {};
+  if (prior.hookEvent) kept.hookEvent = prior.hookEvent;
+  if (prior.conversation_id) kept.conversation_id = prior.conversation_id;
+  if (prior.generation_id) kept.generation_id = prior.generation_id;
+  if (prior.event_class) kept.event_class = prior.event_class;
+  return kept;
+}
+
 function formatWorkingLine(working) {
   if (!working || typeof working !== "object") return null;
   const matched = stationSafeSignals(working.matchedSignals);
@@ -744,14 +876,12 @@ function applyStationHeat(root, host, extra = {}, existing = {}) {
       ? existing.hotSwap
       : null;
   const hotSwap = nextSwap || keptSwap;
-  const incomingIntent = clipIntent(
-    extra.intent || extra.prompt || extra.userMessage || extra.user_prompt,
-  );
-  const intent = incomingIntent || (typeof existing.intent === "string" ? existing.intent : null);
+  const resolved = resolveHeatIntent(root, extra, existing);
+  const intent = resolved.intent;
+  const rematch = resolved.rematch;
   const matchText = clipIntent([intent, pickup, approaches].filter(Boolean).join(" "));
-  const rematch = Boolean(incomingIntent);
   const git = readGitBrief(root);
-  const planLine = readPlanLine(root);
+  const planLine = resolveHeatPlan(root, extra, existing);
   const repertoireResume =
     typeof extra.repertoireResume === "string" ? extra.repertoireResume : buildRepertoireResume(root);
   const swapBit = hotSwap ? `hot-swap ${hotSwap.from} → ${hotSwap.to}` : `host ${host}`;
@@ -760,7 +890,7 @@ function applyStationHeat(root, host, extra = {}, existing = {}) {
   const planBit = planLine ? `plan: ${planLine}` : "plan: (none)";
   let matchedSignals = [];
   if (Array.isArray(extra.matchedSignals) && extra.matchedSignals.length) {
-    matchedSignals = preferSubjectHits(extra.matchedSignals, 8);
+    matchedSignals = preferLawHits(extra.matchedSignals, 8);
   }
   const priorWorking = readRepertoireWorking(root);
   const destCount =
@@ -776,10 +906,10 @@ function applyStationHeat(root, host, extra = {}, existing = {}) {
       Array.isArray(priorWorking.matchedSignals) &&
       priorWorking.matchedSignals.length
     ) {
-      matchedSignals = preferSubjectHits(priorWorking.matchedSignals, 8);
+      matchedSignals = preferLawHits(priorWorking.matchedSignals, 8);
     } else {
-      matchedSignals = preferSubjectHits(
-        matchStationSignalsSync(root, rematch && incomingIntent ? incomingIntent : matchText),
+      matchedSignals = preferLawHits(
+        matchStationSignalsSync(root, rematch && intent ? intent : matchText),
         8,
       );
     }
@@ -787,16 +917,18 @@ function applyStationHeat(root, host, extra = {}, existing = {}) {
   if (!matchedSignals.length && priorWorking) {
     matchedSignals = stationSafeSignals(priorWorking.matchedSignals);
   }
+  const compactHold = retainCompactFields(existing, extra);
+  const nextHook = compactHold.hookEvent || extra.hookEvent || extra.source || null;
   const workingSnapshot = {
     host,
     intent,
     git,
     hotSwap,
-    hookEvent: extra.hookEvent || extra.source || null,
     memoryRouting: repertoireResume.startsWith("Repertoire: on") ? "on" : "off",
     repertoireResume,
     destCount,
   };
+  if (nextHook) workingSnapshot.hookEvent = nextHook;
   if (pickup) workingSnapshot.pickup = pickup;
   if (matchText) workingSnapshot.matchText = matchText;
   if (captured) workingSnapshot.sessionCapture = captured;
@@ -812,7 +944,6 @@ function applyStationHeat(root, host, extra = {}, existing = {}) {
   if (matchedSignals.length) workingSnapshot.matchedSignals = matchedSignals.slice(0, 8);
   const opProcNames = readOpProcNames(root);
   if (opProcNames.length) workingSnapshot.opProcNames = opProcNames;
-  const working = persistRepertoireWorking(root, workingSnapshot);
   const pickupChanged = Boolean(pickup && (!priorWorking || priorWorking.pickup !== pickup));
   if (
     !memoryOff &&
@@ -826,6 +957,11 @@ function applyStationHeat(root, host, extra = {}, existing = {}) {
       matchedSignals,
     );
   }
+  if (!memoryOff) {
+    const latePrune = pruneKeywordDest(root);
+    if (latePrune.kept) workingSnapshot.destCount = latePrune.kept;
+  }
+  const working = persistRepertoireWorking(root, workingSnapshot);
   const workingLine = formatWorkingLine(working);
   const workingBit = workingLine ? workingLine : "working: (none)";
   const stationLine = `${swapBit}. ${intentBit}. ${planBit}. ${gitBit}. ${repertoireResume}. ${workingBit}`;
@@ -838,6 +974,7 @@ function applyStationHeat(root, host, extra = {}, existing = {}) {
     repertoireResume,
     workingLine,
     stationLine,
+    ...compactHold,
   };
 }
 
@@ -884,6 +1021,12 @@ function stationBootNeedsRefresh(existing, root, host) {
   const liveResume = buildRepertoireResume(root);
   if (liveResume && existing.repertoireResume && liveResume !== existing.repertoireResume) return true;
   if (stationDurableHoldsNpm(root)) return true;
+  const cardIntent = readStationTicketField(root, "Intent");
+  const bootIntent = typeof existing.intent === "string" ? clipIntent(existing.intent) : null;
+  if (cardIntent && bootIntent && cardIntent !== bootIntent) return true;
+  const cardPlan = readStationTicketField(root, "Plan");
+  const bootPlan = typeof existing.planLine === "string" ? clipIntent(existing.planLine) : null;
+  if (cardPlan && bootPlan && cardPlan !== bootPlan) return true;
   return false;
 }
 
@@ -1023,6 +1166,10 @@ module.exports = {
   maybeCaptureSessionOnHeadMove,
   formatWorkingLine,
   applyStationHeat,
+  isStockTicket,
+  readStationTicketField,
+  resolveHeatIntent,
+  resolveHeatPlan,
   extractPreservedStationLines,
   mergeStationMarkdown,
   formatStationMarkdown,
@@ -1030,4 +1177,9 @@ module.exports = {
   isHoldNpmLine,
   stationDurableHoldsNpm,
   stationBootNeedsRefresh,
+  isKeywordDestName,
+  pruneKeywordDest,
+  preferLawHits,
+  retainCompactFields,
+  destLawNameSet,
 };

package/dist/integrations/hooks/station-hook-runtime.mjs

@@ -29,6 +29,10 @@ export const readNotesPickup = impl.readNotesPickup;
 export const maybeCaptureSessionOnHeadMove = impl.maybeCaptureSessionOnHeadMove;
 export const formatWorkingLine = impl.formatWorkingLine;
 export const applyStationHeat = impl.applyStationHeat;
+export const isStockTicket = impl.isStockTicket;
+export const readStationTicketField = impl.readStationTicketField;
+export const resolveHeatIntent = impl.resolveHeatIntent;
+export const resolveHeatPlan = impl.resolveHeatPlan;
 export const extractPreservedStationLines = impl.extractPreservedStationLines;
 export const mergeStationMarkdown = impl.mergeStationMarkdown;
 export const formatStationMarkdown = impl.formatStationMarkdown;
@@ -36,3 +40,8 @@ export const writeStationMarkdown = impl.writeStationMarkdown;
 export const isHoldNpmLine = impl.isHoldNpmLine;
 export const stationDurableHoldsNpm = impl.stationDurableHoldsNpm;
 export const stationBootNeedsRefresh = impl.stationBootNeedsRefresh;
+export const isKeywordDestName = impl.isKeywordDestName;
+export const pruneKeywordDest = impl.pruneKeywordDest;
+export const preferLawHits = impl.preferLawHits;
+export const retainCompactFields = impl.retainCompactFields;
+export const destLawNameSet = impl.destLawNameSet;

package/dist/integrations/hooks/station-memory-ingest.mjs

@@ -118,7 +118,6 @@ async function growDest(projectRoot) {
       ensureDestShape(destSignals);
       const before = service.signalsManager.load().signals.length;
       const sessions = service.syncXrayMemory();
-      const siblings = service.syncWorkspaceRepos();
       const kernel =
         typeof pathsMod.collectKernelDiaryText === 'function'
           ? pathsMod.collectKernelDiaryText(projectRoot)
@@ -134,7 +133,7 @@ async function growDest(projectRoot) {
           before,
           after,
           imported: sessions.imported,
-          observed: siblings.observed,
+          observed: 0,
           heated: diary.heated,
         })}\n`,
       );

package/dist/integrations/openclaw/plugin/xray-pre-tool/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xray-pre-tool",
-  "version": "4.0.20",
+  "version": "4.0.21",
   "private": true,
   "type": "module",
   "description": "0xRay constitution + temperament PreToolUse for OpenClaw",

package/dist/nucleus/suit-temperament.d.ts

@@ -27,11 +27,6 @@ export declare function resolveSuitProfile(raw: SuitTemperamentConfig | undefine
  * A Hermes/OpenCode host ignores a leftover Grok boot (and vice versa).
  */
 export declare function resolveRuntimeSuitProfile(projectRoot: string, host?: SuitHost): SuitProfile;
-/**
- * Write station heat when this host/session has no live card yet.
- * OpenClaw has no SessionStart — PreToolUse is the session boundary.
- * Install/init cards without a session id are not a live session.
- */
 export declare function maybeHeatHostStation(projectRoot: string, host: SuitHost, extra?: Record<string, unknown>): string | null;
 /** Merge temperament fields into session-boot.json for the host that just started. */
 export declare function writeSuitSessionBoot(projectRoot: string, host: SuitHost, extra?: Record<string, unknown>): string;

package/dist/nucleus/suit-temperament.js

@@ -95,7 +95,13 @@ function concreteSessionId(value) {
  * OpenClaw has no SessionStart — PreToolUse is the session boundary.
  * Install/init cards without a session id are not a live session.
  */
+function isCursorWorkspaceWrapper(projectRoot) {
+    return (fs.existsSync(path.join(projectRoot, 'repos', 'xray')) ||
+        fs.existsSync(path.join(projectRoot, 'repos', 'repertoire')));
+}
 export function maybeHeatHostStation(projectRoot, host, extra = {}) {
+    if (isCursorWorkspaceWrapper(projectRoot))
+        return null;
     const bootPath = path.join(projectRoot, '.xray', 'state', 'session-boot.json');
     const cardPath = path.join(projectRoot, '.xray', 'state', 'STATION.md');
     let existing = {};
@@ -124,8 +130,14 @@ export function maybeHeatHostStation(projectRoot, host, extra = {}) {
 export function writeSuitSessionBoot(projectRoot, host, extra = {}) {
     const profile = resolveSuitProfile(loadSuitTemperamentRaw(projectRoot), host);
     const stateDir = path.join(projectRoot, '.xray', 'state');
-    fs.mkdirSync(stateDir, { recursive: true });
     const bootPath = path.join(stateDir, 'session-boot.json');
+    try {
+        fs.mkdirSync(stateDir, { recursive: true });
+    }
+    catch {
+        /* Cloud workspace wrapper is often unwritable — fail open */
+        return bootPath;
+    }
     let existing = {};
     if (fs.existsSync(bootPath)) {
         try {

package/dist/skills/orchestrator/SKILL.md

@@ -76,5 +76,5 @@ The seven rules are the engine. The cadence is the time signature. Disk SSOT: `g
 - **Close:** loop until Station is done. Compact: Station survives the cut. Overlay dest names are OP-PROC — reload `repertoire-working.json` `opProcNames`, not Station.
 - **Board:** critic Strict comments; forge implements; lead stays main thread.
 - **Codex 69:** rewire this skill and existing ops. Do not add a new `SKILL.md` to hold the cadence.
-- **Ship matrix:** `LEAD-CADENCE.md` Decision matrix — A PR+CI · B pack · C `release:docs-check` · D `foundry release --i-mean-it`. Green CI is not ship. Spend / credentials stay Ask-first.
+- **Ship matrix:** `LEAD-CADENCE.md` Decision matrix — A PR+CI · B pack · C `release:docs-check` (`reconcile --check`; no patch stamps on guides) · D `foundry release --i-mean-it`. Green CI is not ship. Spend / credentials stay Ask-first. Patch number lives in `package.json` + CHANGELOG.
 - **Metamorphosis:** LLM → OP-PROC is in-context worn seats (same critic, same dummy, resume only). Not more bots.

package/llms.txt

@@ -35,7 +35,7 @@ Registered in `.mcp.json` as `npx -y 0xray mcp <cmd>`:
 | `xray-code-review` | Proposal quality |
 | `xray-architect-tools` | System design |
 
-Not an 8th `xray-*` server. Repertoire is a vendored organ (`npx @0xray/repertoire mcp`), enable-when-resolves. Survive compact is **Station** (Read `.xray/state/STATION.md`), not Repertoire 0.1.8.
+Not an 8th `xray-*` server. **Repertoire is preferred** — vendored 0.2.5 ships on (`npx @0xray/repertoire mcp`). Dest is named laws, not hangar `repo-*` or git slugs. Survive compact is **Station** (Read `.xray/state/STATION.md`). Station is the ticket, not a substitute for Repertoire. Do not pin 0.1.8.
 
 ## Codex 69 (always on)
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "4.0.20",
+  "version": "4.0.21",
   "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
   "readme": "README.md",
   "license": "MIT",
@@ -124,7 +124,7 @@
     "consumer:smoke": "node scripts/node/consumer-install-smoke.mjs",
     "pack:tmp-proof": "node scripts/node/pack-tmp-suit-proof.mjs",
     "release:gate": "node scripts/foundry/release-gate.mjs",
-    "release:docs-check": "node scripts/foundry/validate-release-docs.mjs",
+    "release:docs-check": "node scripts/foundry/reconcile-version.mjs --check && node scripts/foundry/validate-release-docs.mjs",
     "pre-publish-guard": "node scripts/node/pre-publish-guard.js",
     "safe-publish": "npm run prepare-consumer && npm run build",
     "release:npm": "node scripts/foundry/release.mjs --publish-only",

package/scripts/foundry/README.md

@@ -60,7 +60,7 @@ After mill plant is fastened, overlay their plant (defaults; remap in `foundry.j
 
 **Mill-fill is law:** their keys/files win; mill names they did not plant stay unless they overlay the same name. JSON facets always merge. Skill overlay is project dirs on every TUI floor (OpenCode, Grok, Hermes, OpenClaw). YML agents stay OpenCode. CLI re-wear calls mint **once** after mill copies. Isolated HOME is passwd home, not `os.homedir()`. CI report is `.xray/foundry-ci-report.json` (`.opencode/logs` shim).
 
-**Default mill plant:** `mill` + `inspect` (inspect AI work). Fasten is **foundry-plant/0**: builtin plant is mill+inspect only (files from this package `plant/`). Fastens a suit, not an empty one. Not 45/42 costume. `foundry.json` `"costume": true` copies that dump. Factory Repertoire still enable-when-resolves. PPE stays worn.
+**Default mill plant:** `mill` + `inspect` (inspect AI work). Fasten is **foundry-plant/0**: builtin plant is mill+inspect only (files from this package `plant/`). Fastens a suit, not an empty one. Not 45/42 costume. `foundry.json` `"costume": true` copies that dump. **Repertoire is preferred** (vendored, dest = laws). PPE stays worn.
 
 **foundry-plant/0:** `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill package declares and ships in its own `plant/`. Organs (looker, vibe, mixer) live in the mill. Adding an organ is a mill publish, not a foundry catalog PR. CLI shims `foundry blip|sound` still exist on foundry 0.1.11+; fasten is the new cut. Foundry **0.1.12**.
 
@@ -76,7 +76,7 @@ A friend would hear: Blips should look like Rippel living motions with sound, no
 
 **Shop plant:** `shop-extract`, `shop-witness`, `shop-pin` are first-class with mill plant. Inspect does not treat those worn names as a costume dump. `foundry.json` `"shopPlant"` names more shops (array), a plant dir (string), or `{ "skills": [...], "dir": "..." }`. This is not `"costume": true` and does not copy 45/42.
 
-**4.0.9 mill target (0xray postinstall, not this mill package):** `install-bridges.cjs` does not mill npm global prefix or npx `_npx` as a consumer. Isolated HOME skips machine `~/.grok`. Shared HOME Grok last-mile is project `.grok/plugins/0xray` (two seats do not clobber machine plugin). Nested mill **0.1.12** (foundry-plant/0; blip/sound drawers in `@0xray/blip`; inspect dest matches `resolveGrokPluginDests`).
+**Mill target (0xray postinstall, not this mill package):** `install-bridges.cjs` does not mill npm global prefix or npx `_npx` as a consumer. Isolated HOME skips machine `~/.grok`. Shared HOME Grok last-mile is project `.grok/plugins/0xray` (two seats do not clobber machine plugin). Nested mill ships in the 0xray tarball (foundry-plant/0; blip/sound drawers in `@0xray/blip`; inspect dest matches `resolveGrokPluginDests`).
 
 ## Publish this mill
 

package/scripts/foundry/assert-packed-dist-cli.mjs

@@ -24,6 +24,10 @@ export const REQUIRED_PACK_PATHS = [
   "dist/integrations/cursor/hooks/after-file-edit.js",
   "dist/integrations/cursor/hooks/cursor-hook-utils.js",
   "dist/integrations/cursor/hooks/cursor-usage-receipt.js",
+  "dist/integrations/cursor/hooks/xray-cloud-hook.sh",
+  "dist/integrations/cursor/hooks/pre-tool-use.sh",
+  "dist/integrations/cursor/hooks/pre-compact.sh",
+  "dist/integrations/cursor/hooks/after-file-edit.sh",
 ];
 
 export function packedFilePaths(files) {

package/scripts/foundry/plant/skills/mill/SKILL.md

@@ -11,7 +11,7 @@ The mill **fastens** a suit. Default mill plant is **inspect** (inspecting AI wo
 
 **Mill-fill:** their keys/files win. Mill plant names they did not overlay stay. JSON always merges.
 
-**Factory:** Repertoire enable-when-resolves. Seven generated MCP. Constitution (PPE) stays worn. Not a fifth MCP. Not 5.0.
+**Factory:** **Repertoire is preferred** (vendored 0.2.5 ships on; dest = named laws). Seven generated MCP. Constitution (PPE) stays worn. Not a fifth MCP. Not 5.0.
 
 **Costume:** `foundry.json` `"costume": true` copies the 45/42 mill costume.