0xray 4.0.20 → 4.0.22

package/dist/README.md

@@ -14,31 +14,31 @@ Not a catalog of agents. The product is the **skeleton you wear**.
 - **Always on** — Codex 11 / 29 / 69, destructive shell, no new MCP/skill/handler surface
 - **Temperament** — `frontier` | `guided` | `strict` | `auto` — how loud the engine is, not whether governance exists
 - **Wear** — Grok, OpenCode, Hermes, OpenClaw, plus Cursor project hooks. One SSOT gate
-- **Muscle** — Repertoire: auto-enables when the module resolves; session-start writes a one-line resume so the next station is not born amnesiac
+- **Muscle** — **Repertoire is preferred.** Vendored 0.2.5 ships **on**. Dest is named laws, not hangar `repo-*` or git slugs. Station is the compact-survival ticket — not a substitute for Repertoire.
 
 ```bash
 npm install 0xray
 ```
 
-Consumer `npm install 0xray` auto-wires four chat bridges, Cursor project hooks, and seven MCP servers. Repertoire **0.2** is the factory memory organ (vendored): seed primitives, in-process routing, extra host MCP `repertoire`. Not an eighth `xray-*` server. Opt out with `"enabled": false, "provider": "repertoire"`.
+Consumer `npm install 0xray` auto-wires four chat bridges, Cursor project hooks, and seven MCP servers. **Repertoire is preferred** — vendored **0.2.5** ships on: factory + stack laws, in-process routing, extra host MCP `repertoire`. Not an eighth `xray-*` server. Dest is a judgment index. Explicit opt-out only: `"enabled": false, "provider": "repertoire"`. Do not pin 0.1.8.
 
 ## Quick Start
 
 ```bash
-npm install 0xray          # postinstall: mill+inspect plant + 4 bridges + 7 MCPs + AGENTS.md + .mcp.json
-npx 0xray status          # verify install
-npx 0xray setup            # optional: symlinks, hook extras
-npx @0xray/foundry inspect --skip-live   # mill receipt (chat is not a receipt)
+npm install 0xray # postinstall: mill+inspect plant + 4 bridges + 7 MCPs + AGENTS.md + .mcp.json
+npx 0xray status # verify install
+npx 0xray setup # optional: symlinks, hook extras
+npx @0xray/foundry inspect --skip-live # mill receipt (chat is not a receipt)
 ```
 
 Manual per-platform install (idempotent, same result as postinstall):
 
 ```bash
 npx 0xray opencode install
-npx 0xray grok install     # 7 MCPs servers + project .grok/plugins/0xray (not machine last-wins)
+npx 0xray grok install # 7 MCPs servers + project .grok/plugins/0xray (not machine last-wins)
 npx 0xray hermes install
 npx 0xray openclaw install
-npx 0xray skill:install    # starter skills
+npx 0xray skill:install # starter skills
 ```
 
 ## Autonomy command (default operating model)
@@ -51,7 +51,7 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 
 | Version | Highlights |
 |---------|------------|
-| **Unreleased** | Fasten is **foundry-plant/0**: builtin plant is mill+inspect only. `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill declares (looker / vibe / mixer live in the mill). Nested mill `@0xray/foundry@0.1.12`. CLI shims `foundry blip\|sound` remain (0.1.11+). Shop plant first-class (`shop-extract`, `shop-witness`, `shop-pin` + `foundry.json` `shopPlant`). 0xray stays 4.0.15. |
+| **Unreleased** | Fasten is **foundry-plant/0**: builtin plant is mill+inspect only. `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill declares (looker / vibe / mixer live in the mill). Nested mill `@0xray/foundry@0.1.12`. CLI shims `foundry blip\|sound` remain (0.1.11+). Shop plant first-class (`shop-extract`, `shop-witness`, `shop-pin` + `foundry.json` `shopPlant`). |
 | **4.0.9** | Mill target: postinstall does not mill npm global prefix or `_npx` as a consumer. Isolated HOME skips machine `~/.grok`. |
 | **4.0.0** | Exo + temperament. Constitution always on; ceremony by host. Repertoire organ on (vendored 0.2). Station card survives compact/host-swap. **On npm.** [vision](docs-site/docs/architecture/v4-vision.md) · [now](docs-site/docs/architecture/v4-now.md) |
 | **3.4.1** | Unified `install-bridges.cjs` on postinstall — OpenCode, Grok, Hermes, OpenClaw in one pass. All 7 MCPs servers via `npx -y 0xray mcp <cmd>` (no `dist/` paths). Canonical `release.mjs` pipeline. |
@@ -63,7 +63,7 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 
 ### Consolidations
 
-- **One consumer install path** — `postinstall.cjs` → `installAllBridges()` replaces scattered per-platform setup. **4.0.9:** does not mill npm global prefix or `_npx`.
+- **One consumer install path** — `postinstall.cjs` → `installAllBridges()` replaces scattered per-platform setup. Mill target is the consumer project, not npm global prefix or `_npx`.
 - **7-server MCP surface** — `.mcp.json` SSOT; Grok plugin and all bridges share `XRAY_MCP_SERVERS`.
 - **Dev vs consumer AGENTS** — `AGENTS.md` (framework) vs `AGENTS-consumer.md` (copied to consumer projects on install).
 - **Release pipeline** — `npm run release:patch|minor|major` → reconcile → gate → artifacts → tag → publish.
@@ -81,16 +81,16 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 
 ```
 ┌─────────────────────────────────────────────────┐
-│                  Inference                       │
-│  Proposals · Reflection · Memory routing        │
+│ Inference │
+│ Proposals · Reflection · Memory routing │
 ├─────────────────────────────────────────────────┤
-│           External Governance (Dynamo)           │
-│  Codex enforcement · Resonance/Isotopic · SSOT    │
-│  3 deliberation MCPs: code-review, security,     │
-│  researcher (within 7-server consumer surface)  │
+│ External Governance (Dynamo) │
+│ Codex enforcement · Resonance/Isotopic · SSOT │
+│ 3 deliberation MCPs: code-review, security, │
+│ researcher (within 7-server consumer surface) │
 ├─────────────────────────────────────────────────┤
-│          Autonomous Engine (thinDispatch)        │
-│  7-flow · AsideContext · Confidence gate        │
+│ Autonomous Engine (thinDispatch) │
+│ 7-flow · AsideContext · Confidence gate │
 └─────────────────────────────────────────────────┘
 ```
 
@@ -149,20 +149,20 @@ Core governance agents:
 
 See [AGENTS.md](AGENTS.md) and [SKILLS.md](SKILLS.md) for the full agent and skill catalog.
 
-## Memory Routing + Repertoire (v3.3+)
+## Memory Routing + Repertoire (preferred, v3.3+)
 
-Pluggable `memory_routing` block in `features.json` (validated by `features.schema.json`):
+**Wear Repertoire.** It is the long-term judgment organ. Station holds the ticket across compact. Dest is named invariants, not keywords. Pluggable `memory_routing` in `features.json` (validated by `features.schema.json`) ships **on**:
 
 ```json
 "memory_routing": {
-  "enabled": true,
-  "provider": "repertoire",
-  "module_path": "node_modules/@0xray/repertoire/dist/provider/memory-routing-provider.js",
-  "config": {
-    "signalsPath": ".xray/state/repertoire/curated_signals.json",
-    "statePath": ".xray/state/repertoire/inference-state.json",
-    "feedbackDir": ".xray/state/repertoire/feedback"
-  }
+ "enabled": true,
+ "provider": "repertoire",
+ "module_path": "node_modules/@0xray/repertoire/dist/provider/memory-routing-provider.js",
+ "config": {
+ "signalsPath": ".xray/state/repertoire/curated_signals.json",
+ "statePath": ".xray/state/repertoire/inference-state.json",
+ "feedbackDir": ".xray/state/repertoire/feedback"
+ }
 }
 ```
 
@@ -174,9 +174,9 @@ Pluggable `memory_routing` block in `features.json` (validated by `features.sche
 | **AsideContext** (v3.2) | `buildInheritedContext` → `inheritedContext.memoryRouting` on orchestrator `spawnAside` |
 | **Feedback** | Per-task `ingestFeedback()` closes the learning loop |
 
-**External hosts** (Hermes/Grok): add `repertoire-mcp` to `.mcp.json` — see Repertoire docs.
+**External hosts** (Hermes/Grok): add `repertoire-mcp` to `.mcp.json` — see Repertoire docs. Preferred. Not optional flavor.
 
-Opt out: `"memory_routing": { "enabled": false, "provider": "repertoire" }`.
+Explicit opt-out only: `"memory_routing": { "enabled": false, "provider": "repertoire" }`.
 
 Docs: [memory routing](docs-site/docs/guides/memory-routing.md) · [Repertoire](docs-site/docs/guides/repertoire.md) · [features.json](docs-site/docs/guides/features-json.md) · [all features since 3.1](docs-site/docs/guides/features-since-3.1.md)
 
@@ -188,7 +188,7 @@ Docs: [memory routing](docs-site/docs/guides/memory-routing.md) · [Repertoire](
 | **Grok CLI / Build** | `npx 0xray grok install` | Project `.grok/plugins/0xray` (shared HOME does not clobber machine plugin), 7 MCPs servers |
 | **Hermes Agent** | `npx 0xray hermes install` | `~/.hermes/plugins/xray-hermes`, consumer root marker |
 | **OpenClaw** | `npx 0xray openclaw install` | `.xray/config/openclaw.json`, skill sync |
-| **Cursor** | postinstall (`installCursorBridge`) | Fastens `.cursor/hooks.json` (preToolUse / preCompact / afterFileEdit). Leaves an existing file alone. Not a fifth chat TUI. |
+| **Cursor** | postinstall (`installCursorBridge`) | Fastens `.cursor/hooks.json` + relative `.cursor/hooks/*.sh`. Rewrites leftover env-assignment one-liners. Not a fifth chat TUI. |
 
 ## Governance & Codex
 
@@ -200,27 +200,27 @@ Docs: [memory routing](docs-site/docs/guides/memory-routing.md) · [Repertoire](
 
 ## Testing
 
-| Suite | Status (v4.0.1) |
-|-------|-----------------|
-| Four-floor consumer e2e | OpenCode 34/0 · Grok 63/0 · Hermes 39/0/2 · OpenClaw 96/0/1 (npm 4.0.0 pack) |
+| Suite | Status |
+|-------|--------|
+| Four-floor consumer e2e | OpenCode 34/0 · Grok 63/0 · Hermes 39/0/2 · OpenClaw 96/0/1 |
 | Consumer smoke | `npm run release:gate` — pack → clean install → 7 MCPs + 4 chat bridges + Cursor hooks + organ on |
 | Pack → tmp proof | `npm run pack:tmp-proof` — tgz install + `foundry mint --skip-live` + hangar shops + inspect (no costume dump). Playwright n/a (CLI). |
 
 ```bash
 npm test
-npm run pack:tmp-proof  # pack → tmp fasten + hangar inspect
-npm run release:gate    # full release gate (before upload)
-npm run release:npm     # gate + prepare + npm publish --access public
+npm run pack:tmp-proof # pack → tmp fasten + hangar inspect
+npm run release:gate # full release gate (before upload)
+npm run release:npm # gate + prepare + npm publish --access public
 ```
 
 ## Release
 
-Product **4.0.0** is on npm. Do **not** run `release:major` to ship a 4.x fix (that becomes 5.0.0). Do **not** put a `scripts.publish` lifecycle that re-runs the gate after the registry PUT.
+The **4.0** line is on npm. Do **not** run `release:major` to ship a 4.x fix (that becomes 5.0.0). Do **not** put a `scripts.publish` lifecycle that re-runs the gate after the registry PUT. Patch number lives in `package.json` + CHANGELOG.
 
 ```bash
 npm run release:gate
-npm run release:npm     # after gate is green; uses npm publish --access public
-npm run release:patch   # version bump pipeline (not for a already-bumped 4.0.0)
+npm run release:npm # after gate is green; uses npm publish --access public
+npm run release:patch # version bump pipeline (not for an already-bumped package.json)
 ```
 
 Pipeline: reconcile-version → release-gate (build + test + consumer smoke) → CHANGELOG/README/AGENTS artifacts → commit → tag → npm publish.

package/dist/SKILLS.md

@@ -4,7 +4,7 @@
 
 **45 skills** in this exo catalog. Default consumer plant is **`mill` + `inspect`**, not this dump. `npm install 0xray` does **not** sync 45 skills unless `foundry.json` `"costume": true`. Factory shop plant (`shop-extract`, `shop-witness`, `shop-pin`) coexists with mill plant when a hangar wears those shops. Extra shops: `foundry.json` `shopPlant`. Fasten is **foundry-plant/0**: builtin plant is mill+inspect only. `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill package declares — organs (looker, vibe, mixer) live in the mill, not this catalog. Nested mill `@0xray/foundry@0.1.12`. CLI shims `foundry blip|sound` still exist on foundry 0.1.11+. Agent map: [llms.txt](llms.txt).
 
-xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) as the **costume / self-plant catalog**. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`) or when you plant them. This file is the exo catalog — mill does **not** write it to the consumer root.
+xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) as the **costume / self-plant catalog**. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. **Repertoire is preferred** for long-term judgment (vendored 0.2.5, dest = named laws). Station is the compact ticket, not a skill and not a keyword store. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`) or when you plant them. This file is the exo catalog — mill does **not** write it to the consumer root.
 
 ---
 
@@ -129,7 +129,7 @@ xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) as the **costume /
 Configured in project `.mcp.json` on postinstall:
 
 ```bash
-npx -y 0xray mcp skills    # stdio server
+npx -y 0xray mcp skills # stdio server
 ```
 
 MCP tools include: `invoke-skill`, `list-skills`, `skill-code-review`, `skill-security-audit`, `skill-api-design`, `skill-testing-strategy`, and more.
@@ -156,9 +156,9 @@ npx 0xray skill:install <source>
 
 | Feature | Skill connection |
 |---------|------------------|
-| **Memory routing** (v3.3) | Researcher uses Repertoire signals; optional `@0xray/repertoire` MCP |
+| **Memory routing** (v3.3) | **Repertoire preferred** — researcher + thinDispatch + planner use dest laws. Extra MCP `npx @0xray/repertoire mcp` (not an 8th `xray-*`). Dest is named invariants, not `repo-*` slugs. |
 | **AsideContext** (v3.2) | Orchestrator subcontexts during skill dispatch |
-| **7 MCP servers** (v4.0.1) | `xray-skills` is the primary skill invocation surface |
+| **7 MCP servers** (v4.0) | `xray-skills` is the primary skill invocation surface |
 
 Docs: [AGENTS.md](AGENTS.md) · [README.md](README.md) · [Docusaurus guides](docs-site/docs/guides/)
 

package/dist/cli/commands/validate.d.ts

@@ -6,7 +6,7 @@
  */
 /** Same paths as `REQUIRED_PACK_PATHS` in assert-packed-dist-cli.mjs — typed here so src/cli does not import untyped .mjs. */
 export declare const VALIDATE_PACK_PATHS: readonly string[];
-export declare const CONSUMER_WEAR_PATHS: readonly ["AGENTS.md", ".mcp.json", ".xray/codex.json", ".xray/features.json", ".cursor/hooks.json"];
+export declare const CONSUMER_WEAR_PATHS: readonly ["AGENTS.md", ".mcp.json", ".xray/codex.json", ".xray/features.json", ".cursor/hooks.json", ".cursor/hooks/pre-tool-use.sh", ".cursor/hooks/xray-cloud-hook.sh"];
 export declare const MILL_PLANT_SKILLS: readonly ["mill", "inspect"];
 export type ValidateCheck = {
     id: string;

package/dist/cli/commands/validate.js

@@ -18,6 +18,10 @@ export const VALIDATE_PACK_PATHS = [
     "dist/integrations/cursor/hooks/after-file-edit.js",
     "dist/integrations/cursor/hooks/cursor-hook-utils.js",
     "dist/integrations/cursor/hooks/cursor-usage-receipt.js",
+    "dist/integrations/cursor/hooks/xray-cloud-hook.sh",
+    "dist/integrations/cursor/hooks/pre-tool-use.sh",
+    "dist/integrations/cursor/hooks/pre-compact.sh",
+    "dist/integrations/cursor/hooks/after-file-edit.sh",
 ];
 export const CONSUMER_WEAR_PATHS = [
     "AGENTS.md",
@@ -25,6 +29,8 @@ export const CONSUMER_WEAR_PATHS = [
     ".xray/codex.json",
     ".xray/features.json",
     ".cursor/hooks.json",
+    ".cursor/hooks/pre-tool-use.sh",
+    ".cursor/hooks/xray-cloud-hook.sh",
 ];
 export const MILL_PLANT_SKILLS = ["mill", "inspect"];
 export function resolveInstalledPackageRoot(cwd) {
@@ -101,7 +107,7 @@ export function collectValidateReport(cwd) {
             id: "consumer-wear",
             ok: missingWear.length === 0,
             detail: missingWear.length === 0
-                ? "AGENTS.md · .mcp.json · .xray · .cursor/hooks.json"
+                ? "AGENTS.md · .mcp.json · .xray · .cursor/hooks.json · .cursor/hooks/*.sh"
                 : `missing ${missingWear.join(", ")}`,
         });
         const millRoot = join(cwd, ".opencode", "skills");

package/dist/governance/governance-core.d.ts

@@ -9,7 +9,8 @@
 import type { GovernanceVote, GovernanceResult } from './governance-types.js';
 export interface DecisionMatrixInput {
     resonance: number;
-    isotopicRatio: number;
+    /** Present only when a real moralFusion number was supplied. Absent is not 0.5. */
+    isotopicRatio?: number;
     vortexVolume?: number;
     historicalCoherence?: number;
     solarActivity?: 'quiet' | 'moderate' | 'active' | 'storm';

package/dist/governance/governance-core.js

@@ -61,22 +61,28 @@ export function applyDecisionMatrix(input) {
         voteWeight *= 1.05;
         reasons.push(`Moral alignment confirmed (score: ${(moralScore * 100).toFixed(0)}%)`);
     }
-    if (resonance >= 0.92 && isotopicRatio >= 0.95) {
+    // Cutoffs stay the literals the tests lock (0.92/0.95, 0.82/0.88, 0.75/0.80).
+    // PHI and TAU are not those cutoffs, so reasons do not claim them.
+    const ratio = typeof isotopicRatio === 'number' && Number.isFinite(isotopicRatio) ? isotopicRatio : undefined;
+    const highBand = resonance >= 0.92 && (ratio === undefined || ratio >= 0.95);
+    const solidBand = resonance >= 0.82 && (ratio === undefined || ratio >= 0.88);
+    const belowCutoff = resonance < 0.75 || (ratio !== undefined && ratio < 0.80);
+    if (highBand) {
         recommendation = 'PASS';
         confidence = 0.97;
         voteWeight = 1.4;
-        reasons.push('High symbiotic resonance (PHI-aligned)');
+        reasons.push('High symbiotic resonance');
     }
-    else if (resonance >= 0.82 && isotopicRatio >= 0.88) {
+    else if (solidBand) {
         recommendation = 'PASS';
         confidence = 0.89;
         voteWeight = 1.15;
-        reasons.push('Solid alignment above TAU threshold');
+        reasons.push('Solid alignment above the resonance cutoff');
     }
-    else if (resonance < 0.75 || isotopicRatio < 0.80) {
+    else if (belowCutoff) {
         recommendation = 'REJECT';
         confidence = 0.84;
-        reasons.push('Signal below critical threshold (1 - TAU)');
+        reasons.push('Signal below the critical resonance or isotopic cutoff');
     }
     else {
         reasons.push('Moderate resonance - requires refinement');
@@ -124,14 +130,17 @@ export function mergeVotes(votes) {
             reasoningSummary: 'No votes received',
         };
     }
+    const weightOf = (vote) => vote.weight ?? 1;
     const approveWeight = votes
         .filter(v => v.decision === 'approve')
-        .reduce((sum, v) => sum + (v.weight ?? 1) * v.confidence, 0);
-    const totalWeight = votes.reduce((sum, v) => sum + (v.weight ?? 1) * v.confidence, 0);
-    const avgConfidence = totalWeight > 0 ? totalWeight / votes.length : 0.5;
+        .reduce((sum, v) => sum + weightOf(v) * v.confidence, 0);
+    const weightedConfidenceSum = votes.reduce((sum, v) => sum + weightOf(v) * v.confidence, 0);
+    const weightSum = votes.reduce((sum, v) => sum + weightOf(v), 0);
+    const rawMean = weightSum > 0 ? weightedConfidenceSum / weightSum : 0.5;
+    const avgConfidence = Math.min(1, Math.max(0, rawMean));
     let finalDecision = 'needs_revision';
-    if (totalWeight > 0) {
-        const approveRatio = approveWeight / totalWeight;
+    if (weightedConfidenceSum > 0) {
+        const approveRatio = approveWeight / weightedConfidenceSum;
         if (approveRatio > 0.66) {
             finalDecision = 'approve';
         }

package/dist/governance/governance-service.js

@@ -136,22 +136,24 @@ export class GovernanceService {
                 let finalDecision = merged.finalDecision;
                 let averageConfidence = merged.averageConfidence;
                 let moralOverride = 'none';
-                if (externalVote?.moralTension ||
-                    externalVote?.moralScore != null ||
-                    externalVote?.moralFusion != null) {
+                if (externalVote &&
+                    (externalVote.moralTension ||
+                        externalVote.moralScore != null ||
+                        externalVote.moralFusion != null)) {
                     const matrixInput = {
                         resonance: averageConfidence,
-                        isotopicRatio: externalVote.moralFusion ?? 0.5,
                     };
+                    const fusion = externalVote.moralFusion;
+                    if (typeof fusion === 'number' && Number.isFinite(fusion)) {
+                        matrixInput.isotopicRatio = fusion;
+                        matrixInput.moralFusion = fusion;
+                    }
                     if (externalVote.moralTension != null) {
                         matrixInput.moralTension = externalVote.moralTension;
                     }
                     if (externalVote.moralScore != null) {
                         matrixInput.moralScore = externalVote.moralScore;
                     }
-                    if (externalVote.moralFusion != null) {
-                        matrixInput.moralFusion = externalVote.moralFusion;
-                    }
                     const matrix = applyDecisionMatrix(matrixInput);
                     moralOverride = matrix.moralOverride ?? 'none';
                     if (matrix.recommendation === 'REJECT') {

package/dist/inference/inference-cycle.js

@@ -10,16 +10,30 @@ import { generateProposals } from "./inference-proposal-generator.js";
 import { applyProposals as applyProposalsEx } from "./inference-applier.js";
 const CYCLE_STATE_FILE = "inference-cycle-state.json";
 const CYCLE_HISTORY_FILE = "inference-cycle-history.json";
+function governanceToolText(result) {
+    if (typeof result !== "object" || result === null || !("content" in result)) {
+        return "";
+    }
+    const content = result.content;
+    const text = content?.[0]?.text;
+    return typeof text === "string" ? text : "";
+}
 export class InferenceCycle {
     static instances = new Map();
     static reEntryLock = false;
     static governedProposalIds = new Set();
     static getInstance(projectRoot, options) {
         const root = path.resolve(projectRoot || process.cwd());
-        if (!InferenceCycle.instances.has(root)) {
-            InferenceCycle.instances.set(root, new InferenceCycle(root, undefined, options));
+        const existing = InferenceCycle.instances.get(root);
+        if (existing) {
+            if (options) {
+                existing.options = { ...existing.options, ...options };
+            }
+            return existing;
         }
-        return InferenceCycle.instances.get(root);
+        const created = new InferenceCycle(root, undefined, options);
+        InferenceCycle.instances.set(root, created);
+        return created;
     }
     static resetInstance() {
         InferenceCycle.instances.clear();
@@ -121,7 +135,10 @@ export class InferenceCycle {
             const proposals = generateProposals(corpus, this.loadHistory());
             if (proposals.length === 0) {
                 this.setPhase("complete");
-                return this.buildResult(cycleId, true, threshold.reason, startTime, corpus, proposals);
+                this.saveCycleState(cycleId);
+                const emptyResult = this.buildResult(cycleId, true, threshold.reason, startTime, corpus, proposals);
+                this.appendHistory(emptyResult);
+                return emptyResult;
             }
             this.setPhase("governing");
             let votes = [];
@@ -223,7 +240,7 @@ export class InferenceCycle {
             }),
             new Promise((_, reject) => setTimeout(() => reject(new Error("Governance MCP timed out after 8s")), 8000)),
         ]);
-        const text = result?.content?.[0]?.text || "";
+        const text = governanceToolText(result);
         const parsed = this.parseGovernanceMcpResponse(text, proposals);
         frameworkLogger.log("inference-cycle", "governance-mcp-primary-path", "info", {
             proposalCount: proposals.length,

package/dist/integrations/cursor/README.md

@@ -2,24 +2,25 @@
 
 Thin adapter. Repo `.cursor/hooks.json` (schema **version 1**) calls 0xRay gates and the Station PreCompact writer. **sessionStart is not used** — managed Cursor cloud does not fire it.
 
-Repertoire MCP is optional. Station + gates work without a full memory-routing rewire.
+Repertoire is preferred (vendored, dest = named laws). Station + Codex gates still run if memory-routing is explicitly off — that is fallback, not the preferred brain.
 
 ## How cloud picks up project hooks
 
 1. Commit `.cursor/hooks.json` at the **project root** (this file, not `~/.cursor/hooks.json`).
 2. Cursor Cloud Agent clones the repo and loads **project** hooks. Desktop Agent Chat does the same when the folder is the workspace.
-3. Hook names are camelCase: `preToolUse`, `preCompact`, `afterFileEdit`. Commands are shell strings. Stdin is JSON; stdout is JSON.
-4. First `preToolUse` or `afterFileEdit` writes `.xray/state/session-boot.json` + `.xray/state/STATION.md`. After a compact, **Read STATION.md**. The host does not inject it.
-5. `preCompact` is observational (cannot block). It merges Station (stock heat updates; ticket / seed / Durable / unfinished keys stay).
+3. Hook names are camelCase: `preToolUse`, `preCompact`, `afterFileEdit`, plus Cloud `beforeShellExecution` / `beforeReadFile`. Command is a **relative** `.cursor/hooks/*.sh` — Cloud execs argv[0] without a shell. Do not put `XRAY_AI_PATH=` in `hooks.json`. Stdin is JSON; stdout is JSON.
+4. First `preToolUse` or `afterFileEdit` writes `.xray/state/session-boot.json` + `.xray/state/STATION.md`. After a compact, **Read STATION.md**. The host does not inject it. A multi-repo Cloud wrapper (`/agent` with `repos/xray`) is not a dest heat root, even if a leftover wrapper card exists. Heat the mill under `repos/` and the Read path. Dest `EACCES` fail-opens — a wired hook must not deny every tool.
+5. `install-bridges` also fastens the daemon workspace root when it can see `repos/xray` above the checkout, then pokes local `ReloadAgentSkills` so a mid-session wear binds this daemon. Command stays a relative `.cursor/hooks/*.sh`.
+6. `preCompact` is observational (cannot block). Cloud **does** fire it ([hooks.md](https://cursor.com/docs/hooks.md) support matrix: Yes) once hooks are bound and the host actually compacts. Stdout is only `{ "user_message": "…" }` — that is a notice, not a spawn. The spawn id is stdin `conversation_id` (same `bc-`) plus Task's returned agent id. Resume that id. Do not cold-start a twin. Station merge keeps ticket / seed / Durable / unfinished keys.
 
-Copy the consumer template from `src/integrations/cursor/hooks/hooks.json` (dist paths under `node_modules/0xray`) when wearing the published package. This exo repo wears `src/integrations/cursor/hooks/*.js` so a cloud can run before `npm run build`.
+Copy the consumer template from `src/integrations/cursor/hooks/hooks.json` and the sibling `.sh` runners. `xray-cloud-hook.sh` finds mill JS at `XRAY_AI_PATH`, `../xray`, or `node_modules/0xray` (dist then src). This exo repo wears `src/integrations/cursor/hooks/*.js` so a cloud can run before `npm run build`.
 
 ## Contracts
 
 | Hook | Stdin | Stdout |
 |------|--------|--------|
 | `preToolUse` | Cursor tool event (`tool_name`, `tool_input`, `cwd`, `workspace_roots`, `conversation_id`) | `{ "permission": "allow" \| "deny" }` plus `user_message` / `agent_message` on deny |
-| `preCompact` | `{ trigger, context_tokens, … }` | `{ "user_message": "…" }` after Station write |
+| `preCompact` | `{ trigger, context_tokens, conversation_id, generation_id, … }` | `{ "user_message": "…" }` after Station write. Receipt keeps `conversation_id` + `generation_id`. That id is enough to resume. |
 | `afterFileEdit` | file event | `{}` — boots Station only |
 
 `preCompact` labels `event_class`:

package/dist/integrations/cursor/hooks/after-file-edit.sh

@@ -0,0 +1,3 @@
+#!/bin/sh
+HERE="$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)"
+exec /bin/sh "${HERE}/xray-cloud-hook.sh" afterFileEdit after-file-edit.js

package/dist/integrations/cursor/hooks/before-read-file.sh

@@ -0,0 +1,3 @@
+#!/bin/sh
+HERE="$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)"
+exec /bin/sh "${HERE}/xray-cloud-hook.sh" beforeReadFile pre-tool-use.js

package/dist/integrations/cursor/hooks/before-shell-execution.sh

@@ -0,0 +1,3 @@
+#!/bin/sh
+HERE="$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)"
+exec /bin/sh "${HERE}/xray-cloud-hook.sh" beforeShellExecution pre-tool-use.js

package/dist/integrations/cursor/hooks/cursor-hook-utils.js

@@ -84,32 +84,123 @@ function addHeatRoot(out, seen, value) {
   out.push(resolved);
 }
 
+export function isCursorWorkspaceWrapper(root) {
+  if (!root) return false;
+  const resolved = path.resolve(String(root));
+  return (
+    fs.existsSync(path.join(resolved, 'repos', 'xray')) ||
+    fs.existsSync(path.join(resolved, 'repos', 'repertoire'))
+  );
+}
+
+export function heatRootHasCard(root) {
+  if (!root) return false;
+  const resolved = path.resolve(String(root));
+  return (
+    fs.existsSync(path.join(resolved, '.xray', 'state', 'STATION.md')) ||
+    fs.existsSync(path.join(resolved, '.xray', 'features.json'))
+  );
+}
+
+export function isHeatRootWritable(root) {
+  if (!root) return false;
+  const resolved = path.resolve(String(root));
+  try {
+    const probe = path.join(resolved, '.xray', 'state');
+    fs.mkdirSync(probe, { recursive: true });
+    fs.accessSync(probe, fs.constants.W_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+export function shouldHeatRoot(root) {
+  if (!root) return false;
+  const resolved = path.resolve(String(root));
+  if (isCursorWorkspaceWrapper(resolved)) return false;
+  if (heatRootHasCard(resolved)) return isHeatRootWritable(resolved);
+  return isHeatRootWritable(resolved);
+}
+
+export function millRootFromToolPath(filePath) {
+  if (!filePath) return null;
+  const resolved = path.resolve(String(filePath));
+  const marker = `${path.sep}repos${path.sep}`;
+  const idx = resolved.indexOf(marker);
+  if (idx === -1) return null;
+  const after = resolved.slice(idx + marker.length);
+  const repo = after.split(path.sep)[0];
+  if (!repo) return null;
+  return resolved.slice(0, idx + marker.length + repo.length);
+}
+
+function addMillCardsUnderWrapper(out, seen, wrapper) {
+  if (!wrapper || !isCursorWorkspaceWrapper(wrapper)) return;
+  const mill = path.join(path.resolve(String(wrapper)), 'repos', 'xray');
+  if (heatRootHasCard(mill) && isHeatRootWritable(mill)) addHeatRoot(out, seen, mill);
+}
+
 /** Every live context that already has a Station card — cwd plus mill when they differ. */
 export function cursorHeatRoots(event = {}) {
   const seen = new Set();
   const out = [];
-  addHeatRoot(out, seen, event.cwd);
-  addHeatRoot(out, seen, event.workspaceRoot);
+  const candidates = [event.cwd, event.workspaceRoot];
   const listed = event.workspace_roots || event.workspaceRoots;
   if (Array.isArray(listed)) {
     for (const row of listed) {
-      if (typeof row === 'string') addHeatRoot(out, seen, row);
-      else if (row && typeof row === 'object' && row.path) addHeatRoot(out, seen, row.path);
+      if (typeof row === 'string') candidates.push(row);
+      else if (row && typeof row === 'object' && row.path) candidates.push(row.path);
     }
   }
-  addHeatRoot(out, seen, process.env.CURSOR_PROJECT_DIR);
-  const mill = process.env.XRAY_AI_PATH;
+  candidates.push(process.env.CURSOR_PROJECT_DIR);
+  for (const value of candidates) {
+    if (shouldHeatRoot(value)) addHeatRoot(out, seen, value);
+    addMillCardsUnderWrapper(out, seen, value);
+  }
+  const mill = process.env.XRAY_AI_PATH || process.env.XRAY_ROOT;
   if (mill) {
     const resolved = path.resolve(String(mill));
-    const millHasCard =
-      fs.existsSync(path.join(resolved, '.xray', 'state', 'STATION.md')) ||
-      fs.existsSync(path.join(resolved, '.xray', 'features.json'));
-    if (millHasCard) addHeatRoot(out, seen, resolved);
+    if (shouldHeatRoot(resolved)) addHeatRoot(out, seen, resolved);
+  }
+  const ctx = cursorToolContext(event);
+  for (const filePath of ctx.paths) {
+    const fromPath = millRootFromToolPath(filePath);
+    if (
+      fromPath &&
+      fs.existsSync(path.join(fromPath, '.xray', 'state', 'STATION.md')) &&
+      isHeatRootWritable(fromPath)
+    ) {
+      addHeatRoot(out, seen, fromPath);
+    }
+  }
+  if (out.length === 0) {
+    const fallback = cursorWorkspaceRoot(event);
+    if (shouldHeatRoot(fallback)) addHeatRoot(out, seen, fallback);
+    addMillCardsUnderWrapper(out, seen, fallback);
   }
-  if (out.length === 0) addHeatRoot(out, seen, cursorWorkspaceRoot(event));
   return out;
 }
 
+function packageNameAt(root) {
+  try {
+    const pkg = JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8'));
+    return typeof pkg.name === 'string' ? pkg.name : '';
+  } catch {
+    return '';
+  }
+}
+
+/**
+ * Constitution follows the suit mill when that package is in the heat set.
+ * A sibling repo's leftover synthesis checkpoint must not deny the host.
+ */
+export function cursorGateRoot(heatRoots, eventRoot) {
+  const mill = heatRoots.find((root) => packageNameAt(root) === '0xray');
+  if (mill) return mill;
+  return heatRoots[0] || eventRoot;
+}
+
 export function cursorSessionId(event = {}) {
   return (
     event.conversation_id ||
@@ -121,6 +212,10 @@ export function cursorSessionId(event = {}) {
   );
 }
 
+export function cursorGenerationId(event = {}) {
+  return event.generation_id || event.generationId || null;
+}
+
 export function cursorToolContext(event = {}) {
   const toolName = event.tool_name || event.toolName || process.env.TOOL_NAME || 'unknown';
   const toolInput = event.tool_input ?? event.toolInput ?? {};
@@ -179,11 +274,16 @@ export function cursorBootNeedsRefresh(existing, root) {
 
 export function ensureCursorSessionBoot(root, source = '0xray/cursor-pre-tool-use-boot', extra = {}) {
   const bootPath = sessionBootPath(root);
+  if (!shouldHeatRoot(root)) return bootPath;
   if (fs.existsSync(bootPath)) {
     try {
       const existing = JSON.parse(fs.readFileSync(bootPath, 'utf8'));
       if (!cursorBootNeedsRefresh(existing, root)) {
-        heatLiveMemory(root);
+        try {
+          heatLiveMemory(root);
+        } catch {
+          /* dest EACCES must not deny the host tool */
+        }
         return bootPath;
       }
     } catch {

package/dist/integrations/cursor/hooks/cursor-usage-receipt.js

@@ -69,6 +69,9 @@ export function hostUsageFromPreCompactEvent(event = {}) {
   if (typeof event.windowCite === 'string' && event.windowCite) usage.windowCite = event.windowCite;
   if (typeof event.model === 'string' && event.model) usage.model = event.model;
   if (typeof event.bcId === 'string' && event.bcId) usage.bcId = event.bcId;
+  else if (typeof event.conversation_id === 'string' && event.conversation_id) {
+    usage.bcId = event.conversation_id;
+  }
   return usage;
 }