0xray 4.0.25 → 4.0.27

package/.grok-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "4.0.25",
+  "version": "4.0.27",
   "description": "0xRay suit for Grok, Hermes, OpenClaw, OpenCode: mill+inspect, Codex, 7 MCP servers. Costume 45/42 is opt-in foundry, not the default wear.",
   "author": {
     "name": "0xRay AI",

package/.opencode/skills/orchestrator/SKILL.md

@@ -62,7 +62,7 @@ Config: `features.json` → `multi_agent_orchestration.lead_dev_mode`
 
 ## Lead cadence (syncopation)
 
-The seven rules are the engine. The cadence is the time signature. Disk SSOT: `grok-bot/ops/LEAD-CADENCE.md`.
+The seven rules are the engine. The cadence is the time signature. Disk SSOT: `grok-bot/OP-PROC.md` (team specifics live in `house/`).
 
 Jargon is not the job. Review and cadence ask whether the change works. Do not spend the loop reciting dest names, mill liturgy, or host mantras.
 
@@ -76,8 +76,8 @@ Jargon is not the job. Review and cadence ask whether the change works. Do not s
 - **Peer boot:** four-line dispatch. They Read Station + this cadence and install without a command novel. Not a twin critic.
 - **Live tick, not pacer:** `/loop` runs work now. Keep workstreams moving. Do not idle-wait 12 minutes. **Clean ticks every cycle** — unsubscribe then resubscribe so the prompt matches metal. Name-dedupe does not rewrite. A stale prompt (waiting URL after live, Hold after strip) is dirty: rewrite, do not act. **If the card and WAVEBOARD are idle, unsubscribe and do not resubscribe.**
 - **Board clock:** PR events + resume the same critic. Not two idle pacers. Merge after PASS+CI (gate A). Publish only after mill-gate D + `foundry gate`.
-- **Dispatch:** ticket + PR URLs + “Wear, then review.” The critic Reads `SEATS.md` Reviewer. Do not paste a command novel. When a law is spoken twice, encode it this wake.
-- **Cascade:** Chat is not the brain. A cascade that must survive compaction is a named repertoire signal on the stack overlay, hydrated onto the project law list. NOTES holds the same cascade for the second Read. Station stays the ticket. A reflection is not this capture. Capture priority: a law is an invariant you would otherwise re-read the source to relearn. One law per subsystem bone. Heat touches last_seen and does not append a confidence sample, so more hits do not raise conviction. Heat touches last_seen when the diary contains that signal's name or a local clause of four definition content words; two definition words are not a hit; the same words scattered through a long diary are not a hit; a weak session score is not lifted to 0.55 and a sample below 0.55 is not recorded. Constructing the organ does not append workspace samples. Hero names: `heat-is-not-conviction`, `inference-cycle-invariant`, `governance-vote-invariant`, `thin-dispatch-invariant`. Repertoire mergeStackOverlay refreshes a changed stack definition and keeps observation stats. A floor observation count does not change a route. Feedback moves conviction by a tenth, and a failure can leave 0.55. learned-conviction.json beside dest restores that average when a wake flattens it to 0.55. It does not store the observation count.
+- **Dispatch:** ticket + PR URLs + “Wear, then review.” The critic Reads `grok-bot/OP-PROC.md` (team specifics live in `house/`). Do not paste a command novel. When a law is spoken twice, encode it this wake.
+- **Cascade:** Chat is not the brain. A cascade that must survive compaction is a named repertoire signal on the stack overlay, hydrated onto the project law list. NOTES holds the same cascade for the second Read. Station stays the ticket. A reflection is not this capture. Memory scoring rules: [docs/memory-scoring.md](https://github.com/0xRayAI/xray/blob/main/docs/memory-scoring.md).
 - **Cold brief:** a new critic or any new subagent that does not already have this thread gets the latest commit SHA on the branch under review (fetch it; do not reuse an earlier SHA from a previous pass) and the Station card (`.xray/state/STATION.md`: intent, plan, git). If the card is missing, give branch + HEAD + what just changed. If the branch moves after you brief them, send the new SHA before they verdict.
 - **Control:** The lead keeps control. Do not assume the subagent has the context. Give the duty, the latest SHA, the Station card, and the laws that apply. The subagent wears the applicable 0xRay suit before it works: the tree under review, built and installed. An older published package is not that suit. The lead checks the result.
 
@@ -96,7 +96,7 @@ This suite is the engine that builds the engine. When a seat sees OP-PROC, write
 
 Operating planes: code, OP-PROC, model, suit, mill, host, and test/ship. Test/ship is the critical OP-PROC plane. Test then ship is the hero. Ship without that proof is the catastrophe. Long-term memory is the project law list. Each wake refreshes a changed stack definition and keeps observation stats. Heat writes the matched names onto Station, the short-term card that survives compaction. Reactive decisions move out of TypeScript into OP-PROC as the model improves. That move is why the mill and the suit exist. It is not fully proved. Once a version is live, the stamper strips every present-tense patch pin from shipped guides and shipped OP-PROC, or reconcile advances the next cut. The stamper does not edit Station, NOTES, dest, or node_modules. It does not publish. Do not freeze the live cut.
 - **Close:** loop until Station is done. Compact: Station survives the cut. Overlay dest names are OP-PROC — reload `repertoire-working.json` `opProcNames`, not Station.
-- **Board:** critic Strict comments; forge implements; lead stays main thread.
+- **Board:** critic Strict comments; the implementer implements; lead stays main thread.
 - **Codex 69:** rewire this skill and existing ops. Do not add a new `SKILL.md` to hold the cadence.
-- **Ship matrix:** `LEAD-CADENCE.md` Decision matrix — A PR+CI · B pack · C `release:docs-check` (`reconcile --check`; no patch stamps on guides) · D `foundry release --i-mean-it`. Green CI is not ship. Spend / credentials stay Ask-first. Patch number lives in `package.json` + CHANGELOG.
+- **Ship matrix:** `grok-bot/OP-PROC.md` Decision matrix (team specifics live in `house/`) — A PR+CI · B pack · C `release:docs-check` (`reconcile --check`; no patch stamps on guides) · D `foundry release --i-mean-it`. Green CI is not ship. Spend / credentials stay Ask-first. Patch number lives in `package.json` + CHANGELOG.
 - **Metamorphosis:** LLM → OP-PROC is in-context worn seats (same critic, same dummy, resume only). Not more bots.

package/.opencode/skills/storyteller/SKILL.md

@@ -96,7 +96,7 @@ codex_terms: [5, 7, 32]  # Related Codex term numbers
 ```markdown
 ## What Next?
 
-- Related Codex terms: [codex.json](../../../../.xray/codex.json)
+- Related Codex terms: [codex.json](../../../.xray/codex.json)
 - Next story to write: [suggestion]
 ```
 

package/.xray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "4.0.25",
+  "version": "4.0.27",
   "description": "0xRay Framework - Unified Feature Configuration",
   "suit_temperament": {
     "profile": "auto",

package/AGENTS.md

@@ -12,7 +12,7 @@ Quick reference for the xray AI orchestration framework (**4.0**).
 
 Before other work, Read `.xray/state/STATION.md`. Compaction and host change are the same cut. Continue the card. Do not restart the job. Grok does not inject the card (OpenCode does) — this Read is the Grok contract. Do not thicken the Grok exo.
 
-**Lead cadence:** a peer wearing this file + Station + Repertoire continues without a command stream. Dummy bodies test `SKILLS.md`. Same-sess bodies wear the suit and keep a Station card. Always branch + worktree + PR. Ship when mill-gate D + `foundry gate` PASS (`LEAD-CADENCE.md` Decision matrix) — green CI is not ship. npm OTP in a browser, then poll the new version before moving on. Loop until Station is done. Live ticks and moving workstreams — not idle pacers. Same critic (resume only). Disk SSOT: `grok-bot/ops/LEAD-CADENCE.md`. Playbook: `orchestrator` skill.
+**Lead cadence:** a peer wearing this file + Station + Repertoire continues without a command stream. Dummy bodies test `SKILLS.md`. Same-sess bodies wear the suit and keep a Station card. Always branch + worktree + PR. Ship when mill-gate D + `foundry gate` PASS (`grok-bot/OP-PROC.md` Decision matrix) — green CI is not ship. npm OTP in a browser, then poll the new version before moving on. Loop until Station is done. Live ticks and moving workstreams — not idle pacers. Same critic (resume only). Disk SSOT: `grok-bot/OP-PROC.md` (team specifics live in `house/`). Playbook: `orchestrator` skill.
 
 ## What is xray?
 

package/README.md

@@ -52,6 +52,7 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 | Version | Highlights |
 |---------|------------|
 | **Unreleased** | Fasten is **foundry-plant/0**: builtin plant is mill+inspect only. `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill declares (looker / vibe / mixer live in the mill). Nested mill `@0xray/foundry@0.1.12`. CLI shims `foundry blip\|sound` remain (0.1.11+). Shop plant first-class (`shop-extract`, `shop-witness`, `shop-pin` + `foundry.json` `shopPlant`). |
+| **4.0.27** | Host compact proof needs a generation id and a numeric usage percent, and the same preCompact receipt is mirrored to nested consumer wear roots. Memory scoring: [docs/memory-scoring.md](docs/memory-scoring.md) (orchestrator links it). Companion `@0xray/grok-bot` 0.1.6: general page vs `house/` overlay, `templates/house/`, `grok-bot house init`, doctor `GROK_BOT_HOUSE` or walk-up. Not published. |
 | **4.0.9** | Mill target: postinstall does not mill npm global prefix or `_npx` as a consumer. Isolated HOME skips machine `~/.grok`. |
 | **4.0.0** | Exo + temperament. Constitution always on; ceremony by host. Repertoire organ on (vendored 0.2). Station card survives compact/host-swap. **On npm.** [vision](docs-site/docs/architecture/v4-vision.md) · [now](docs-site/docs/architecture/v4-now.md) |
 | **3.4.1** | Unified `install-bridges.cjs` on postinstall — OpenCode, Grok, Hermes, OpenClaw in one pass. All 7 MCPs servers via `npx -y 0xray mcp <cmd>` (no `dist/` paths). Canonical `release.mjs` pipeline. |

package/SKILLS.md

@@ -76,7 +76,7 @@ xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) as the **costume /
 
 | Skill | Agent | Description |
 |-------|-------|-------------|
-| `orchestrator` | @orchestrator | Multi-agent coordination + **lead-dev mode** (codex 67–68) + lead cadence (dispatch four lines; critic Reads SEATS; ship matrix A–D in `LEAD-CADENCE.md`) |
+| `orchestrator` | @orchestrator | Multi-agent coordination + **lead-dev mode** (codex 67–68) + lead cadence (dispatch four lines; critic Reads `grok-bot/OP-PROC.md`; ship matrix A–D in `grok-bot/OP-PROC.md`; team specifics live in `house/`) |
 | `xray-orchestrator` | — | xray orchestration skill (MCP orchestrator surface) |
 | `processor-pipeline` | — | Data processing pipeline management |
 | `boot-orchestrator` | — | Framework boot orchestration |

package/dist/AGENTS.md

@@ -12,7 +12,7 @@ Quick reference for the xray AI orchestration framework (**4.0**).
 
 Before other work, Read `.xray/state/STATION.md`. Compaction and host change are the same cut. Continue the card. Do not restart the job. Grok does not inject the card (OpenCode does) — this Read is the Grok contract. Do not thicken the Grok exo.
 
-**Lead cadence:** a peer wearing this file + Station + Repertoire continues without a command stream. Dummy bodies test `SKILLS.md`. Same-sess bodies wear the suit and keep a Station card. Always branch + worktree + PR. Ship when mill-gate D + `foundry gate` PASS (`LEAD-CADENCE.md` Decision matrix) — green CI is not ship. npm OTP in a browser, then poll the new version before moving on. Loop until Station is done. Live ticks and moving workstreams — not idle pacers. Same critic (resume only). Disk SSOT: `grok-bot/ops/LEAD-CADENCE.md`. Playbook: `orchestrator` skill.
+**Lead cadence:** a peer wearing this file + Station + Repertoire continues without a command stream. Dummy bodies test `SKILLS.md`. Same-sess bodies wear the suit and keep a Station card. Always branch + worktree + PR. Ship when mill-gate D + `foundry gate` PASS (`grok-bot/OP-PROC.md` Decision matrix) — green CI is not ship. npm OTP in a browser, then poll the new version before moving on. Loop until Station is done. Live ticks and moving workstreams — not idle pacers. Same critic (resume only). Disk SSOT: `grok-bot/OP-PROC.md` (team specifics live in `house/`). Playbook: `orchestrator` skill.
 
 ## What is xray?
 

package/dist/CHANGELOG.md

@@ -41,6 +41,48 @@ The format is based on [Conventional Commits](https://www.conventionalcommits.or
 - Archive root `integrations/` costume SKILL dump → `docs/archive/integrations-costume/`. Live wear is `src/integrations`.
 - Archive root `commands/` stale copy → `docs/archive/commands-copy/`. Live wear is `src/opencode/commands`.
 
+## [4.0.27] - 2026-09-25
+
+Next patch after npm `4.0.26`. Released 2026-09-26.
+
+A counted host compact needs a non-empty generation id and a numeric `context_usage_percent`. That hook line and per-session receipt are written on the suit mill and mirrored onto nested consumer wear roots. Memory scoring rules live in `docs/memory-scoring.md`. The orchestrator links that file and does not copy the rules. Companion package `@0xray/grok-bot@0.1.6`: one general operating page, a `house/` overlay that is not in that npm pack, `templates/house/` in the pack, `grok-bot house init` (copy, refuse to overwrite), and doctor lookup via `GROK_BOT_HOUSE` or a walk-up for `house/HOUSE.md`.
+
+### 🔄 Changes
+
+### 🐛 Bug Fixes
+- fix: a host compact proof requires a non-empty generation id and a numeric context_usage_percent (d869cbf79)
+- fix: mirror preCompact proof to nested consumer wear roots (16b7481af)
+
+### 📚 Documentation
+- feat(grok-bot): house init and shared house lookup (#128) (0f93687f2)
+- General operating page for grok-bot, with a fill-in house (#124) (17e02c5a7)
+- docs: orchestrator links memory-scoring (#127) (bca04dba8)
+- docs: add ben-proof suited compaction bench harness (13284b9d8)
+- docs: core audit fixes and a readable memory-scoring doc (#126) (23b370d1e)
+- docs: point 0xray at grok-bot/OP-PROC.md (#125) (53b1889dc)
+
+### 🔎 Other Changes
+- docs(grok-bot): OP-PROC amendment (Blaze 10:31) + moltbook push allow (#123) (a2abed78c)
+- docs(grok-bot): OP-PROC one-page front door + WAVEBOARD/ATTENTION_STATE mirror (#122) (519b2dae0)
+
+---
+
+## [4.0.26] - 2026-09-25
+
+### 🔄 Changes
+
+### 🐛 Bug Fixes
+- fix: store a lesson when the task matches no signal (e3c75b43d)
+- fix: prove a Cursor compact cut with a session log and per-session receipt (bb3a1c68f)
+- fix: mill check accepts a published version; mcp:status runs (a8bd79e23)
+
+### 🔎 Other Changes
+- Merge pull request #116 from 0xRayAI/cursor/mill-ci-mcp-status-fbe0 (ba94508d2)
+- Merge pull request #120 from 0xRayAI/cursor/lesson-recall-fbe0 (8f4a5a62a)
+- Merge pull request #119 from 0xRayAI/cursor/compact-receipt-proof-fbe0 (a911fd17b)
+
+---
+
 ## [4.0.25] - 2026-09-24
 
 `0xray@4.0.25` ships the plate schematics in the package. `docs-site/docs/plates/` is on the npm `files` list. A worn suit resolves `memory-recall` and `processor` from `dist/integrations/hooks/plates.cjs`.

package/dist/README.md

@@ -52,6 +52,7 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 | Version | Highlights |
 |---------|------------|
 | **Unreleased** | Fasten is **foundry-plant/0**: builtin plant is mill+inspect only. `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill declares (looker / vibe / mixer live in the mill). Nested mill `@0xray/foundry@0.1.12`. CLI shims `foundry blip\|sound` remain (0.1.11+). Shop plant first-class (`shop-extract`, `shop-witness`, `shop-pin` + `foundry.json` `shopPlant`). |
+| **4.0.27** | Host compact proof needs a generation id and a numeric usage percent, and the same preCompact receipt is mirrored to nested consumer wear roots. Memory scoring: [docs/memory-scoring.md](docs/memory-scoring.md) (orchestrator links it). Companion `@0xray/grok-bot` 0.1.6: general page vs `house/` overlay, `templates/house/`, `grok-bot house init`, doctor `GROK_BOT_HOUSE` or walk-up. Not published. |
 | **4.0.9** | Mill target: postinstall does not mill npm global prefix or `_npx` as a consumer. Isolated HOME skips machine `~/.grok`. |
 | **4.0.0** | Exo + temperament. Constitution always on; ceremony by host. Repertoire organ on (vendored 0.2). Station card survives compact/host-swap. **On npm.** [vision](docs-site/docs/architecture/v4-vision.md) · [now](docs-site/docs/architecture/v4-now.md) |
 | **3.4.1** | Unified `install-bridges.cjs` on postinstall — OpenCode, Grok, Hermes, OpenClaw in one pass. All 7 MCPs servers via `npx -y 0xray mcp <cmd>` (no `dist/` paths). Canonical `release.mjs` pipeline. |

package/dist/SKILLS.md

@@ -76,7 +76,7 @@ xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) as the **costume /
 
 | Skill | Agent | Description |
 |-------|-------|-------------|
-| `orchestrator` | @orchestrator | Multi-agent coordination + **lead-dev mode** (codex 67–68) + lead cadence (dispatch four lines; critic Reads SEATS; ship matrix A–D in `LEAD-CADENCE.md`) |
+| `orchestrator` | @orchestrator | Multi-agent coordination + **lead-dev mode** (codex 67–68) + lead cadence (dispatch four lines; critic Reads `grok-bot/OP-PROC.md`; ship matrix A–D in `grok-bot/OP-PROC.md`; team specifics live in `house/`) |
 | `xray-orchestrator` | — | xray orchestration skill (MCP orchestrator surface) |
 | `processor-pipeline` | — | Data processing pipeline management |
 | `boot-orchestrator` | — | Framework boot orchestration |

package/dist/cli/commands/mcp-install.d.ts

@@ -1,3 +1,15 @@
+export type McpInstallerAction = {
+    kind: "list" | "status" | "help";
+} | {
+    kind: "install" | "remove";
+    name?: string;
+} | {
+    kind: "unknown";
+    command: string;
+};
+/** Colon and hyphen forms documented on `npx 0xray` map to the bare dispatcher verbs. */
+export declare function normalizeMcpInstallerToken(command: string | undefined): string | undefined;
+export declare function classifyMcpInstallerArgs(args: readonly string[]): McpInstallerAction;
 export declare function listMCPsCommand(): void;
 export declare function showMCPStatusCommand(): void;
 export declare function installMCPCommand(name: string): Promise<void>;

package/dist/cli/commands/mcp-install.js

@@ -1,6 +1,7 @@
 import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from "fs";
-import { join, dirname } from "path";
+import { join, dirname, resolve } from "path";
 import { execSync } from "child_process";
+import { fileURLToPath } from "url";
 import { getConfigDir } from "../../core/config-paths.js";
 function getMCPConfigPath() {
     return join(process.cwd(), ".xray", "mcp-registry.json");
@@ -186,9 +187,44 @@ function removeMCP(name) {
     saveInstalledMCPs(installed);
     console.log(`\n✅ Removed ${name}`);
 }
+const MCP_INSTALLER_ALIASES = {
+    "mcp:list": "list",
+    "mcp-list": "list",
+    "mcp:status": "status",
+    "mcp-status": "status",
+    "mcp:install": "install",
+    "mcp-install": "install",
+    "mcp:remove": "remove",
+    "mcp-remove": "remove",
+};
+/** Colon and hyphen forms documented on `npx 0xray` map to the bare dispatcher verbs. */
+export function normalizeMcpInstallerToken(command) {
+    if (command === undefined)
+        return undefined;
+    return MCP_INSTALLER_ALIASES[command] ?? command;
+}
+export function classifyMcpInstallerArgs(args) {
+    const raw = args[0];
+    const command = normalizeMcpInstallerToken(raw);
+    if (command === undefined || command === "status")
+        return { kind: "status" };
+    if (command === "list")
+        return { kind: "list" };
+    if (command === "help" || command === "--help" || command === "-h")
+        return { kind: "help" };
+    if (command === "install" || command === "remove") {
+        const name = args[1];
+        return name === undefined ? { kind: command } : { kind: command, name };
+    }
+    return { kind: "unknown", command: raw ?? command };
+}
+const isDirectRun = process.argv[1] !== undefined &&
+    resolve(process.argv[1]) === fileURLToPath(import.meta.url);
 async function main() {
+    if (!isDirectRun)
+        return;
     const args = process.argv.slice(2);
-    const command = args[0];
+    const command = normalizeMcpInstallerToken(args[0]);
     switch (command) {
         case "list":
             listMCPs();

package/dist/integrations/cursor/README.md

@@ -25,7 +25,7 @@ Copy the consumer template from `src/integrations/cursor/hooks/hooks.json` and t
 
 `preCompact` labels `event_class`:
 
-- `cursor-host-precompact` — Cursor actually fired the hook
+- `cursor-host-precompact` — Cursor actually fired the hook. The event must carry a non-empty `generation_id` and a numeric `context_usage_percent`, plus the hook name or trigger. A token count or `trigger: auto` alone stays synthetic and does not write `cursor-hook.log` or `cursor-receipts/<sessionId>.json`.
 - `cursor-precompact-synthetic` — script invoked with `--event-class=cursor-precompact-synthetic` (Path C fallback)
 - `cursor-host-precompact-FAIL` — HOST-FIRE fill ran; host did not spawn `preCompact` (see `RECEIPT-HOST-PRECOMPACT.md`, `-2.md`, `-3.md`)
 - First live host fire (Arm S): `examples/killer-dual/RECEIPT-HOST-PRECOMPACT.md`
@@ -40,7 +40,11 @@ Do **not** prove window pressure with UTF-8 chars÷4. `src/integrations/cursor/h
 | `cursor-cloud` `run-info` / `get-events` / dashboard (model, bc-id, window) | yes — token MISS is honest |
 | chars÷4, fill-only, `fillBytes` | **forbidden** (`ok: false`) |
 
-Host `preCompact` fire is counted from `.xray/state/cursor-hook-invoke.log` (`event=preCompact`). Do not hand-invoke `pre-compact.js` to mint that Y.
+Host `preCompact` fire is counted from `.xray/state/cursor-hook-invoke.log` (`event=preCompact`). Do not hand-invoke `pre-compact.js` to mint that Y. That invoke log has no session id.
+
+A cut counts only when `.xray/state/cursor-receipts/<sessionId>.json` exists **and** `.xray/state/cursor-hook.log` contains a line with that same session id (timestamp, `context_tokens`, `context_usage_percent`, `context_window_size`, `generation_id`). `probeLogExists` is true only when that append succeeded. `.xray/state/cursor-usage-receipt.json` and `cursor-precompact.json` keep only the newest event. That single latest json is not enough — the next arm overwrites it.
+
+Nested consumer benches under `examples/` (e.g. `examples/ben-proof/suited` with local `node_modules/0xray`) receive the same hook log line and per-session receipt as the mill — `preCompact` has no Read paths, so those wear roots are discovered from the suit mill at compact time.
 
 Arm S landscape + receipt: `examples/killer-dual/`.
 

package/dist/integrations/cursor/hooks/cursor-hook-utils.js

@@ -53,6 +53,11 @@ export {
   FORBIDDEN_USAGE_METHODS,
   invokeProbeLogPath,
   cursorUsageReceiptPath,
+  cursorHookLogPath,
+  sanitizeSessionReceiptId,
+  cursorSessionReceiptPath,
+  appendCursorCompactProofLog,
+  writeCursorSessionReceipt,
   parseInvokeProbeLog,
   hostUsageFromPreCompactEvent,
   classifyUsageCite,
@@ -182,6 +187,73 @@ export function cursorHeatRoots(event = {}) {
   return out;
 }
 
+function isNestedConsumerWearRoot(root, millRoot) {
+  if (!root || !millRoot) return false;
+  const resolved = path.resolve(String(root));
+  const millResolved = path.resolve(String(millRoot));
+  if (resolved === millResolved) return false;
+  if (!heatRootHasCard(resolved) || !isHeatRootWritable(resolved)) return false;
+  const wornRay = path.join(resolved, 'node_modules', '0xray', 'package.json');
+  if (!fs.existsSync(wornRay)) return false;
+  if (!resolved.startsWith(millResolved + path.sep)) return false;
+  return true;
+}
+
+/**
+ * Nested consumer benches (e.g. examples/ben-proof/suited) wear 0xray locally.
+ * preCompact stdin has no Read paths, so cursorHeatRoots never visits those dirs.
+ */
+export function discoverNestedConsumerWearRoots(millRoot) {
+  const millResolved = path.resolve(String(millRoot));
+  if (packageNameAt(millResolved) !== '0xray') return [];
+  const out = [];
+  const seen = new Set();
+  const queue = [path.join(millResolved, 'examples')];
+  let steps = 0;
+  while (queue.length > 0 && steps < 500) {
+    steps += 1;
+    const dir = queue.shift();
+    if (!dir || !fs.existsSync(dir)) continue;
+    let entries;
+    try {
+      entries = fs.readdirSync(dir, { withFileTypes: true });
+    } catch {
+      continue;
+    }
+    for (const ent of entries) {
+      if (!ent.isDirectory()) continue;
+      if (ent.name === 'node_modules' || ent.name === '.git' || ent.name === 'dist') continue;
+      const full = path.join(dir, ent.name);
+      if (isNestedConsumerWearRoot(full, millResolved) && !seen.has(full)) {
+        seen.add(full);
+        out.push(full);
+      }
+      queue.push(full);
+    }
+  }
+  return out;
+}
+
+/** Mill heat roots plus nested consumer wear sites that share the same compact proof. */
+export function cursorCompactProofRoots(event = {}) {
+  const seen = new Set();
+  const out = [];
+  for (const root of cursorHeatRoots(event)) {
+    const resolved = path.resolve(String(root));
+    if (seen.has(resolved)) continue;
+    seen.add(resolved);
+    out.push(resolved);
+    if (packageNameAt(resolved) !== '0xray') continue;
+    for (const worn of discoverNestedConsumerWearRoots(resolved)) {
+      const wornResolved = path.resolve(String(worn));
+      if (seen.has(wornResolved)) continue;
+      seen.add(wornResolved);
+      out.push(wornResolved);
+    }
+  }
+  return out;
+}
+
 function packageNameAt(root) {
   try {
     const pkg = JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8'));
@@ -204,6 +276,7 @@ export function cursorGateRoot(heatRoots, eventRoot) {
 export function cursorSessionId(event = {}) {
   return (
     event.conversation_id ||
+    event.conversationId ||
     event.session_id ||
     event.sessionId ||
     process.env.CURSOR_CONVERSATION_ID ||
@@ -258,13 +331,15 @@ export function classifyPreCompactEvent(event = {}, argv = process.argv) {
   if (fromEvent) return fromEvent;
 
   const named = event.hook_event_name || event.hookEventName || event.hook;
-  const looksHost =
-    named === 'preCompact' ||
-    named === 'pre_compact' ||
-    event.trigger === 'auto' ||
-    event.trigger === 'manual' ||
-    typeof event.context_tokens === 'number' ||
-    typeof event.context_usage_percent === 'number';
+  const hookNamed = named === 'preCompact' || named === 'pre_compact';
+  const triggerNamed = event.trigger === 'auto' || event.trigger === 'manual';
+  const generation = event.generation_id || event.generationId;
+  const hasGeneration = typeof generation === 'string' && generation.trim().length > 0;
+  const hasPercent = typeof event.context_usage_percent === 'number';
+  // A token count or trigger alone is not a host fire. The 2026-09-25 20:28
+  // line had context_tokens 120000 and window 200000 with no generation id,
+  // no usage percent, and no preCompact invoke.
+  const looksHost = (hookNamed || triggerNamed) && hasGeneration && hasPercent;
   return looksHost ? EVENT_CLASS_HOST : EVENT_CLASS_SYNTHETIC;
 }
 

package/dist/integrations/cursor/hooks/cursor-usage-receipt.js

@@ -28,6 +28,70 @@ export function cursorUsageReceiptPath(root) {
   return path.join(root, '.xray', 'state', 'cursor-usage-receipt.json');
 }
 
+/** Proof log. A cut is greppable here; cursor-hook-invoke.log has no session id. */
+export function cursorHookLogPath(root) {
+  return path.join(root, '.xray', 'state', 'cursor-hook.log');
+}
+
+function logToken(value) {
+  if (value == null) return '';
+  return String(value).replace(/[\r\n]+/g, '');
+}
+
+/**
+ * Safe filename segment for `.xray/state/cursor-receipts/<id>.json`.
+ * Empty when the id cannot be kept inside that directory.
+ */
+export function sanitizeSessionReceiptId(sessionId) {
+  const raw = typeof sessionId === 'string' ? sessionId.trim() : '';
+  if (!raw) return '';
+  const safe = raw
+    .replace(/\0/g, '')
+    .replace(/[/\\]/g, '_')
+    .replace(/\.\./g, '_')
+    .replace(/[^A-Za-z0-9._-]+/g, '_')
+    .replace(/^[._]+/, '')
+    .replace(/[._]+$/g, '');
+  if (!safe || safe === '.' || safe === '..') return '';
+  return safe.slice(0, 180);
+}
+
+export function cursorSessionReceiptPath(root, sessionId) {
+  const safe = sanitizeSessionReceiptId(sessionId);
+  if (!safe) return null;
+  return path.join(root, '.xray', 'state', 'cursor-receipts', `${safe}.json`);
+}
+
+/**
+ * Append one preCompact proof line. True only when the append landed and
+ * the file contains that session id (grep of *.log can find the cut).
+ */
+export function appendCursorCompactProofLog(root, fields = {}) {
+  const sessionId = logToken(fields.sessionId);
+  const timestamp = logToken(fields.timestamp) || new Date().toISOString();
+  const line = [
+    `ts=${timestamp}`,
+    `session_id=${sessionId}`,
+    `context_tokens=${logToken(fields.context_tokens)}`,
+    `context_usage_percent=${logToken(fields.context_usage_percent)}`,
+    `context_window_size=${logToken(fields.context_window_size)}`,
+    `generation_id=${logToken(fields.generation_id)}`,
+  ].join(' ');
+  const dest = cursorHookLogPath(root);
+  try {
+    fs.mkdirSync(path.dirname(dest), { recursive: true });
+    fs.appendFileSync(dest, `${line}\n`);
+  } catch {
+    return false;
+  }
+  if (!sessionId) return false;
+  try {
+    return fs.readFileSync(dest, 'utf8').includes(`session_id=${sessionId}`);
+  } catch {
+    return false;
+  }
+}
+
 export function parseInvokeProbeLog(root) {
   const dest = invokeProbeLogPath(root);
   const counts = { preToolUse: 0, preCompact: 0, afterFileEdit: 0, unknown: 0 };
@@ -228,7 +292,7 @@ export function buildCursorUsageReceipt(root, input = {}) {
       preToolUseCount: probe.counts.preToolUse,
       afterFileEditCount: probe.counts.afterFileEdit,
       eventClass,
-      probeLogExists: probe.exists,
+      probeLogExists: input.probeLogExists === true,
     },
     usage,
     repertoire,
@@ -299,3 +363,32 @@ export function writeCursorUsageReceipt(root, input = {}) {
     return null;
   }
 }
+
+/**
+ * Per-session copy of the latest precompact + usage receipts.
+ * The next arm overwrites cursor-precompact.json and cursor-usage-receipt.json.
+ */
+export function writeCursorSessionReceipt(root, sessionId, paths = {}) {
+  const dest = cursorSessionReceiptPath(root, sessionId);
+  if (!dest) return null;
+  if (!paths.precompactPath && !paths.usagePath) return null;
+  try {
+    const payload = {
+      sessionId: typeof sessionId === 'string' ? sessionId : null,
+      precompact: null,
+      usage: null,
+    };
+    if (paths.precompactPath && fs.existsSync(paths.precompactPath)) {
+      payload.precompact = JSON.parse(fs.readFileSync(paths.precompactPath, 'utf8'));
+    }
+    if (paths.usagePath && fs.existsSync(paths.usagePath)) {
+      payload.usage = JSON.parse(fs.readFileSync(paths.usagePath, 'utf8'));
+    }
+    if (!payload.precompact && !payload.usage) return null;
+    fs.mkdirSync(path.dirname(dest), { recursive: true });
+    fs.writeFileSync(dest, JSON.stringify(payload, null, 2));
+    return dest;
+  } catch {
+    return null;
+  }
+}

package/dist/integrations/cursor/hooks/pre-compact.js

@@ -10,15 +10,18 @@ import {
   buildSessionBootPayload,
   classifyPreCompactEvent,
   cursorGenerationId,
-  cursorHeatRoots,
+  cursorCompactProofRoots,
   cursorSessionId,
+  EVENT_CLASS_HOST,
   cursorWorkspaceRoot,
   readStdinJson,
   writeCursorPrecompactReceipt,
   writeSessionBoot,
 } from './cursor-hook-utils.js';
 import {
+  appendCursorCompactProofLog,
   hostUsageFromPreCompactEvent,
+  writeCursorSessionReceipt,
   writeCursorUsageReceipt,
 } from './cursor-usage-receipt.js';
 
@@ -122,7 +125,7 @@ async function main() {
     } catch {
       plates = null;
     }
-    for (const root of cursorHeatRoots(event)) {
+    for (const root of cursorCompactProofRoots(event)) {
       const payload = buildSessionBootPayload(root, '0xray/cursor-compact', {
         host: 'cursor',
         hookEvent: 'pre_compact',
@@ -132,6 +135,20 @@ async function main() {
       });
       bootPath = writeSessionBoot(root, payload);
       stationLine = payload.stationLine;
+      const stampedAt = new Date().toISOString();
+      const hostProof = eventClass === EVENT_CLASS_HOST;
+      const proofLogged = hostProof
+        ? appendCursorCompactProofLog(root, {
+            sessionId,
+            timestamp: stampedAt,
+            context_tokens: typeof event.context_tokens === 'number' ? event.context_tokens : null,
+            context_usage_percent:
+              typeof event.context_usage_percent === 'number' ? event.context_usage_percent : null,
+            context_window_size:
+              typeof event.context_window_size === 'number' ? event.context_window_size : null,
+            generation_id: generationId,
+          })
+        : false;
       receiptPath = writeCursorPrecompactReceipt(root, {
         event_class: eventClass,
         hookEvent: 'pre_compact',
@@ -145,13 +162,20 @@ async function main() {
         messages_to_compact:
           typeof event.messages_to_compact === 'number' ? event.messages_to_compact : null,
         bootPath,
-        timestamp: new Date().toISOString(),
+        timestamp: stampedAt,
       });
       usagePath = writeCursorUsageReceipt(root, {
         eventClass,
         sessionId,
+        probeLogExists: proofLogged,
         usage: hostUsageFromPreCompactEvent(event),
       });
+      if (hostProof) {
+        writeCursorSessionReceipt(root, sessionId, {
+          precompactPath: receiptPath,
+          usagePath,
+        });
+      }
       if (plates) {
         try {
           const named = plates.recallPlate(payload.intent || intent || '');

package/dist/integrations/openclaw/plugin/xray-pre-tool/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xray-pre-tool",
-  "version": "4.0.25",
+  "version": "4.0.27",
   "private": true,
   "type": "module",
   "description": "0xRay constitution + temperament PreToolUse for OpenClaw",

package/dist/memory-routing/record-lesson.d.ts

@@ -4,13 +4,18 @@ export interface LessonInput {
     taskId: string;
     assignedAgent: string;
     sessionId: string;
-    /** Signals the finished task already named. When set, text matching is not used. */
+    /**
+     * Signals the finished task already named. When set, text matching is not used.
+     * An empty list with a lesson still stores that lesson under a name taken from the task.
+     */
     signals?: string[];
     /** Approaches, solutions, or the wrong turn from the sessions that named the law. */
     lesson?: string;
 }
 /**
  * A finished task names the signals its text actually matched and says
- * whether the outcome was good. That is the one-tenth step. No match, no write.
+ * whether the outcome was good. That is the one-tenth step.
+ * A lesson with no matched signal is stored under a hyphenated name from the
+ * task, so the same task text recalls it. No lesson and no match, no write.
  */
 export declare function recordLesson(input: LessonInput): string[];

package/dist/memory-routing/record-lesson.js

@@ -1,14 +1,48 @@
 import { ensureMemoryRoutingProviderSync } from "./provider-registry.js";
+/**
+ * Hyphenated phrase whose spaced form is still inside the task.
+ * A later routing read of that same task hits the name.
+ */
+function signalNameForUnmatchedLesson(task) {
+    const words = task
+        .toLowerCase()
+        .split(/[^a-z0-9]+/)
+        .filter((word) => word.length >= 3);
+    const normalized = task.toLowerCase();
+    const kept = [];
+    for (const word of words) {
+        const next = [...kept, word];
+        const phrase = next.join(" ");
+        const hyphen = next.join("-");
+        if (!normalized.includes(phrase) || hyphen.length > 120)
+            break;
+        kept.push(word);
+    }
+    if (kept.length === 0)
+        return null;
+    return kept.join("-");
+}
 /**
  * A finished task names the signals its text actually matched and says
- * whether the outcome was good. That is the one-tenth step. No match, no write.
+ * whether the outcome was good. That is the one-tenth step.
+ * A lesson with no matched signal is stored under a hyphenated name from the
+ * task, so the same task text recalls it. No lesson and no match, no write.
  */
 export function recordLesson(input) {
     const provider = ensureMemoryRoutingProviderSync();
     if (provider.id === "null" || !provider.ingestFeedback)
         return [];
-    const named = input.signals ?? provider.buildRoutingContext(input.operation).matchedSignals;
-    const names = [...new Set(named.filter((name) => name.length > 0))];
+    const lesson = (input.lesson ?? "").trim();
+    const supplied = input.signals;
+    const named = supplied !== undefined
+        ? supplied
+        : provider.buildRoutingContext(input.operation).matchedSignals;
+    let names = [...new Set(named.filter((name) => name.length > 0))];
+    if (names.length === 0 && lesson.length > 0) {
+        const coined = signalNameForUnmatchedLesson(input.operation);
+        if (coined)
+            names = [coined];
+    }
     if (names.length === 0)
         return [];
     provider.ingestFeedback({

package/dist/skills/orchestrator/SKILL.md

@@ -62,7 +62,7 @@ Config: `features.json` → `multi_agent_orchestration.lead_dev_mode`
 
 ## Lead cadence (syncopation)
 
-The seven rules are the engine. The cadence is the time signature. Disk SSOT: `grok-bot/ops/LEAD-CADENCE.md`.
+The seven rules are the engine. The cadence is the time signature. Disk SSOT: `grok-bot/OP-PROC.md` (team specifics live in `house/`).
 
 Jargon is not the job. Review and cadence ask whether the change works. Do not spend the loop reciting dest names, mill liturgy, or host mantras.
 
@@ -76,8 +76,8 @@ Jargon is not the job. Review and cadence ask whether the change works. Do not s
 - **Peer boot:** four-line dispatch. They Read Station + this cadence and install without a command novel. Not a twin critic.
 - **Live tick, not pacer:** `/loop` runs work now. Keep workstreams moving. Do not idle-wait 12 minutes. **Clean ticks every cycle** — unsubscribe then resubscribe so the prompt matches metal. Name-dedupe does not rewrite. A stale prompt (waiting URL after live, Hold after strip) is dirty: rewrite, do not act. **If the card and WAVEBOARD are idle, unsubscribe and do not resubscribe.**
 - **Board clock:** PR events + resume the same critic. Not two idle pacers. Merge after PASS+CI (gate A). Publish only after mill-gate D + `foundry gate`.
-- **Dispatch:** ticket + PR URLs + “Wear, then review.” The critic Reads `SEATS.md` Reviewer. Do not paste a command novel. When a law is spoken twice, encode it this wake.
-- **Cascade:** Chat is not the brain. A cascade that must survive compaction is a named repertoire signal on the stack overlay, hydrated onto the project law list. NOTES holds the same cascade for the second Read. Station stays the ticket. A reflection is not this capture. Capture priority: a law is an invariant you would otherwise re-read the source to relearn. One law per subsystem bone. Heat touches last_seen and does not append a confidence sample, so more hits do not raise conviction. Heat touches last_seen when the diary contains that signal's name or a local clause of four definition content words; two definition words are not a hit; the same words scattered through a long diary are not a hit; a weak session score is not lifted to 0.55 and a sample below 0.55 is not recorded. Constructing the organ does not append workspace samples. Hero names: `heat-is-not-conviction`, `inference-cycle-invariant`, `governance-vote-invariant`, `thin-dispatch-invariant`. Repertoire mergeStackOverlay refreshes a changed stack definition and keeps observation stats. A floor observation count does not change a route. Feedback moves conviction by a tenth, and a failure can leave 0.55. learned-conviction.json beside dest restores that average when a wake flattens it to 0.55. It does not store the observation count.
+- **Dispatch:** ticket + PR URLs + “Wear, then review.” The critic Reads `grok-bot/OP-PROC.md` (team specifics live in `house/`). Do not paste a command novel. When a law is spoken twice, encode it this wake.
+- **Cascade:** Chat is not the brain. A cascade that must survive compaction is a named repertoire signal on the stack overlay, hydrated onto the project law list. NOTES holds the same cascade for the second Read. Station stays the ticket. A reflection is not this capture. Memory scoring rules: [docs/memory-scoring.md](https://github.com/0xRayAI/xray/blob/main/docs/memory-scoring.md).
 - **Cold brief:** a new critic or any new subagent that does not already have this thread gets the latest commit SHA on the branch under review (fetch it; do not reuse an earlier SHA from a previous pass) and the Station card (`.xray/state/STATION.md`: intent, plan, git). If the card is missing, give branch + HEAD + what just changed. If the branch moves after you brief them, send the new SHA before they verdict.
 - **Control:** The lead keeps control. Do not assume the subagent has the context. Give the duty, the latest SHA, the Station card, and the laws that apply. The subagent wears the applicable 0xRay suit before it works: the tree under review, built and installed. An older published package is not that suit. The lead checks the result.
 
@@ -96,7 +96,7 @@ This suite is the engine that builds the engine. When a seat sees OP-PROC, write
 
 Operating planes: code, OP-PROC, model, suit, mill, host, and test/ship. Test/ship is the critical OP-PROC plane. Test then ship is the hero. Ship without that proof is the catastrophe. Long-term memory is the project law list. Each wake refreshes a changed stack definition and keeps observation stats. Heat writes the matched names onto Station, the short-term card that survives compaction. Reactive decisions move out of TypeScript into OP-PROC as the model improves. That move is why the mill and the suit exist. It is not fully proved. Once a version is live, the stamper strips every present-tense patch pin from shipped guides and shipped OP-PROC, or reconcile advances the next cut. The stamper does not edit Station, NOTES, dest, or node_modules. It does not publish. Do not freeze the live cut.
 - **Close:** loop until Station is done. Compact: Station survives the cut. Overlay dest names are OP-PROC — reload `repertoire-working.json` `opProcNames`, not Station.
-- **Board:** critic Strict comments; forge implements; lead stays main thread.
+- **Board:** critic Strict comments; the implementer implements; lead stays main thread.
 - **Codex 69:** rewire this skill and existing ops. Do not add a new `SKILL.md` to hold the cadence.
-- **Ship matrix:** `LEAD-CADENCE.md` Decision matrix — A PR+CI · B pack · C `release:docs-check` (`reconcile --check`; no patch stamps on guides) · D `foundry release --i-mean-it`. Green CI is not ship. Spend / credentials stay Ask-first. Patch number lives in `package.json` + CHANGELOG.
+- **Ship matrix:** `grok-bot/OP-PROC.md` Decision matrix (team specifics live in `house/`) — A PR+CI · B pack · C `release:docs-check` (`reconcile --check`; no patch stamps on guides) · D `foundry release --i-mean-it`. Green CI is not ship. Spend / credentials stay Ask-first. Patch number lives in `package.json` + CHANGELOG.
 - **Metamorphosis:** LLM → OP-PROC is in-context worn seats (same critic, same dummy, resume only). Not more bots.

package/dist/skills/storyteller/SKILL.md

@@ -96,7 +96,7 @@ codex_terms: [5, 7, 32]  # Related Codex term numbers
 ```markdown
 ## What Next?
 
-- Related Codex terms: [codex.json](../../../../.xray/codex.json)
+- Related Codex terms: [codex.json](../../../.xray/codex.json)
 - Next story to write: [suggestion]
 ```
 

package/llms.txt

@@ -8,7 +8,10 @@ Default consumer wear is **mill plant** (`mill` + `inspect`), not a 45-skill / 4
 
 ## Wear (what a stranger gets)
 
-- `npm install 0xray` — postinstall fastens mill+inspect, writes 7 MCP `.mcp.json`, four host bridges (OpenCode, Grok, Hermes, OpenClaw) plus Cursor `.cursor/hooks.json`, overlays their plant. Grok last-mile dest is project `.grok/plugins/0xray`. Shared HOME does not last-wins clobber machine `~/.grok/plugins/0xray`. Isolated HOME must not write the machine plugin. Does **not** write consumer-root `SKILLS.md`. Lead cadence: `grok-bot/ops/LEAD-CADENCE.md` — a peer continues from Station + Repertoire; dummy tests `SKILLS.md`; same-sess wear; branch/PR; OTP then poll; loop until Station; live ticks, not idle pacers.
+- `npm install 0xray` — postinstall fastens mill+inspect, writes 7 MCP `.mcp.json`, four host bridges (OpenCode, Grok, Hermes, OpenClaw) plus Cursor `.cursor/hooks.json`, overlays their plant. Grok last-mile dest is project `.grok/plugins/0xray`. Shared HOME does not last-wins clobber machine `~/.grok/plugins/0xray`. Isolated HOME must not write the machine plugin. Does **not** write consumer-root `SKILLS.md`. Lead cadence: `grok-bot/OP-PROC.md` (team specifics live in `house/`) — a peer continues from Station + Repertoire; dummy tests `SKILLS.md`; same-sess wear; branch/PR; OTP then poll; loop until Station; live ticks, not idle pacers.
+- Memory scoring rules: [docs/memory-scoring.md](docs/memory-scoring.md). The orchestrator links that file. It does not copy the rules.
+- Host `preCompact` writes the hook line and per-session receipt on the suit mill and on nested consumer wear roots (a bench with local `node_modules/0xray`). A counted cut needs a non-empty generation id and a numeric usage percent.
+- `@0xray/grok-bot`: the general page is `grok-bot/OP-PROC.md`. The team overlay is `house/` and is not in that npm pack. `templates/house/` ships. `grok-bot house init` copies the template and refuses to overwrite. Doctor uses `GROK_BOT_HOUSE` when set, otherwise walks up from the working directory for `house/HOUSE.md`.
 
 - `npx @0xray/foundry mint --skip-live` — re-fasten mill plant, then inspect.
 - `npx @0xray/foundry inspect --skip-live` — plant-vs-worn, receipt, CI. Chat is not a receipt.
@@ -58,5 +61,6 @@ Not an 8th `xray-*` server. **Repertoire is preferred** — vendored 0.2.8 ships
 - [SKILLS.md](SKILLS.md) — catalog (costume / self-plant, not default sync)
 - [Foundry](docs-site/docs/architecture/v4-foundry.md) — mill vs exo, foundry-plant/0, shopPlant
 - [Features since 3.1](docs-site/docs/guides/features-since-3.1.md)
+- [Memory scoring](docs/memory-scoring.md)
 
 Playwright / UI: n/a. This mill is CLI.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "4.0.25",
+  "version": "4.0.27",
   "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
   "readme": "README.md",
   "license": "MIT",
@@ -80,8 +80,9 @@
     "test:code-analysis": "npm test -- src/__tests__/unit/codebase-context-analyzer.test.ts src/__tests__/unit/dependency-graph-builder.test.ts src/__tests__/unit/rule-enforcer.test.ts src/__tests__/unit/codex-parser.test.ts src/__tests__/unit/codex-injector.test.ts",
     "test:processors": "npm test -- src/__tests__/unit/processor-activation.test.ts src/__tests__/unit/typescript-compilation-processor.test.ts",
     "test:miscellaneous": "npm test -- src/__tests__/unit/blocked-test.test.ts",
+    "test:grok-bot": "npm test -- src/__tests__/unit/grok-bot-seat-doctor.test.ts src/__tests__/unit/grok-bot-op-proc-map.test.ts src/__tests__/unit/lead-cadence.test.ts src/__tests__/unit/grok-bot-auto-review-policy.test.ts",
     "test:quick": "npm test -- src/__tests__/integration/boot-orchestrator.integration.test.ts src/__tests__/unit/config-loader.test.ts src/__tests__/unit/state-manager.test.ts",
-    "test:comprehensive": "npm run typecheck && npm run test:unit && npm run test:core-framework && npm run test:security && npm run test:performance && npm run test:session-management && npm run test:code-analysis && npm run test:processors && npm run test:miscellaneous && npm test -- src/__tests__/unit/llm-governance-provider.test.ts src/__tests__/unit/mcp-server-smoke.test.ts src/__tests__/unit/cursor-hooks.test.ts src/__tests__/unit/host-vs-mill-score.test.ts",
+    "test:comprehensive": "npm run typecheck && npm run test:unit && npm run test:core-framework && npm run test:security && npm run test:performance && npm run test:session-management && npm run test:code-analysis && npm run test:processors && npm run test:miscellaneous && npm test -- src/__tests__/unit/llm-governance-provider.test.ts src/__tests__/unit/mcp-server-smoke.test.ts src/__tests__/unit/cursor-hooks.test.ts src/__tests__/unit/host-vs-mill-score.test.ts && npm run test:grok-bot",
     "test:integration-all": "npm test -- src/__tests__/integration/",
     "test:performance-all": "npm test -- src/__tests__/performance/ src/__tests__/unit/performance-system.test.ts src/__tests__/unit/benchmark.test.ts src/__tests__/unit/analytics.test.ts",
     "test:agents-all": "echo 'Legacy agents test entry retired'",

package/scripts/foundry/reconcile-version.mjs

@@ -11,7 +11,9 @@
  *   npx @0xray/foundry reconcile patch --apply
  *
  * --apply writes package.json and the package-lock.json version fields.
- * --check fails when the lock does not match package.json.
+ * --check passes when package.json is equal to the registry (already published)
+ * or greater (the pre-publish bump). It fails when package.json is behind npm,
+ * or when the lock does not match package.json.
  */
 
 import { execSync } from "child_process";
@@ -91,6 +93,21 @@ function fail(msg) {
   process.exit(1);
 }
 
+/**
+ * Registry gate for --check.
+ * Equal to npm is a shipped release. Greater is the pre-publish bump.
+ * Only a package.json behind the registry fails.
+ * @param {string} local
+ * @param {string} npmVersion
+ * @returns {string | null}
+ */
+export function publishedVersionCheckError(local, npmVersion) {
+  if (compare(local, npmVersion) < 0) {
+    return `package.json (${local}) must be >= npm (${npmVersion}). Run: npx @0xray/foundry reconcile patch --apply`;
+  }
+  return null;
+}
+
 function main() {
   const local = readLocalVersion();
   const npm = readPublishedVersion();
@@ -138,9 +155,12 @@ function main() {
     return;
   }
 
-  // Strict checks for release gate / pre-tag
-  if (compare(local, npm) <= 0) {
-    fail(`package.json (${local}) must be > npm (${npm}). Run: npx @0xray/foundry reconcile patch --apply`);
+  // Strict checks for release gate / pre-tag.
+  // `local` is the version read before --apply. Apply still writes
+  // bumpVersion(max(npm, tag)) and is not this gate.
+  const behindNpm = publishedVersionCheckError(local, npm);
+  if (behindNpm) {
+    fail(behindNpm);
   }
 
   const pkgVersion = readLocalVersion();

package/src/integrations/openclaw/plugin/xray-pre-tool/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xray-pre-tool",
-  "version": "4.0.25",
+  "version": "4.0.27",
   "private": true,
   "type": "module",
   "description": "0xRay constitution + temperament PreToolUse for OpenClaw",

package/src/skills/orchestrator/SKILL.md

@@ -62,7 +62,7 @@ Config: `features.json` → `multi_agent_orchestration.lead_dev_mode`
 
 ## Lead cadence (syncopation)
 
-The seven rules are the engine. The cadence is the time signature. Disk SSOT: `grok-bot/ops/LEAD-CADENCE.md`.
+The seven rules are the engine. The cadence is the time signature. Disk SSOT: `grok-bot/OP-PROC.md` (team specifics live in `house/`).
 
 Jargon is not the job. Review and cadence ask whether the change works. Do not spend the loop reciting dest names, mill liturgy, or host mantras.
 
@@ -76,8 +76,8 @@ Jargon is not the job. Review and cadence ask whether the change works. Do not s
 - **Peer boot:** four-line dispatch. They Read Station + this cadence and install without a command novel. Not a twin critic.
 - **Live tick, not pacer:** `/loop` runs work now. Keep workstreams moving. Do not idle-wait 12 minutes. **Clean ticks every cycle** — unsubscribe then resubscribe so the prompt matches metal. Name-dedupe does not rewrite. A stale prompt (waiting URL after live, Hold after strip) is dirty: rewrite, do not act. **If the card and WAVEBOARD are idle, unsubscribe and do not resubscribe.**
 - **Board clock:** PR events + resume the same critic. Not two idle pacers. Merge after PASS+CI (gate A). Publish only after mill-gate D + `foundry gate`.
-- **Dispatch:** ticket + PR URLs + “Wear, then review.” The critic Reads `SEATS.md` Reviewer. Do not paste a command novel. When a law is spoken twice, encode it this wake.
-- **Cascade:** Chat is not the brain. A cascade that must survive compaction is a named repertoire signal on the stack overlay, hydrated onto the project law list. NOTES holds the same cascade for the second Read. Station stays the ticket. A reflection is not this capture. Capture priority: a law is an invariant you would otherwise re-read the source to relearn. One law per subsystem bone. Heat touches last_seen and does not append a confidence sample, so more hits do not raise conviction. Heat touches last_seen when the diary contains that signal's name or a local clause of four definition content words; two definition words are not a hit; the same words scattered through a long diary are not a hit; a weak session score is not lifted to 0.55 and a sample below 0.55 is not recorded. Constructing the organ does not append workspace samples. Hero names: `heat-is-not-conviction`, `inference-cycle-invariant`, `governance-vote-invariant`, `thin-dispatch-invariant`. Repertoire mergeStackOverlay refreshes a changed stack definition and keeps observation stats. A floor observation count does not change a route. Feedback moves conviction by a tenth, and a failure can leave 0.55. learned-conviction.json beside dest restores that average when a wake flattens it to 0.55. It does not store the observation count.
+- **Dispatch:** ticket + PR URLs + “Wear, then review.” The critic Reads `grok-bot/OP-PROC.md` (team specifics live in `house/`). Do not paste a command novel. When a law is spoken twice, encode it this wake.
+- **Cascade:** Chat is not the brain. A cascade that must survive compaction is a named repertoire signal on the stack overlay, hydrated onto the project law list. NOTES holds the same cascade for the second Read. Station stays the ticket. A reflection is not this capture. Memory scoring rules: [docs/memory-scoring.md](https://github.com/0xRayAI/xray/blob/main/docs/memory-scoring.md).
 - **Cold brief:** a new critic or any new subagent that does not already have this thread gets the latest commit SHA on the branch under review (fetch it; do not reuse an earlier SHA from a previous pass) and the Station card (`.xray/state/STATION.md`: intent, plan, git). If the card is missing, give branch + HEAD + what just changed. If the branch moves after you brief them, send the new SHA before they verdict.
 - **Control:** The lead keeps control. Do not assume the subagent has the context. Give the duty, the latest SHA, the Station card, and the laws that apply. The subagent wears the applicable 0xRay suit before it works: the tree under review, built and installed. An older published package is not that suit. The lead checks the result.
 
@@ -96,7 +96,7 @@ This suite is the engine that builds the engine. When a seat sees OP-PROC, write
 
 Operating planes: code, OP-PROC, model, suit, mill, host, and test/ship. Test/ship is the critical OP-PROC plane. Test then ship is the hero. Ship without that proof is the catastrophe. Long-term memory is the project law list. Each wake refreshes a changed stack definition and keeps observation stats. Heat writes the matched names onto Station, the short-term card that survives compaction. Reactive decisions move out of TypeScript into OP-PROC as the model improves. That move is why the mill and the suit exist. It is not fully proved. Once a version is live, the stamper strips every present-tense patch pin from shipped guides and shipped OP-PROC, or reconcile advances the next cut. The stamper does not edit Station, NOTES, dest, or node_modules. It does not publish. Do not freeze the live cut.
 - **Close:** loop until Station is done. Compact: Station survives the cut. Overlay dest names are OP-PROC — reload `repertoire-working.json` `opProcNames`, not Station.
-- **Board:** critic Strict comments; forge implements; lead stays main thread.
+- **Board:** critic Strict comments; the implementer implements; lead stays main thread.
 - **Codex 69:** rewire this skill and existing ops. Do not add a new `SKILL.md` to hold the cadence.
-- **Ship matrix:** `LEAD-CADENCE.md` Decision matrix — A PR+CI · B pack · C `release:docs-check` (`reconcile --check`; no patch stamps on guides) · D `foundry release --i-mean-it`. Green CI is not ship. Spend / credentials stay Ask-first. Patch number lives in `package.json` + CHANGELOG.
+- **Ship matrix:** `grok-bot/OP-PROC.md` Decision matrix (team specifics live in `house/`) — A PR+CI · B pack · C `release:docs-check` (`reconcile --check`; no patch stamps on guides) · D `foundry release --i-mean-it`. Green CI is not ship. Spend / credentials stay Ask-first. Patch number lives in `package.json` + CHANGELOG.
 - **Metamorphosis:** LLM → OP-PROC is in-context worn seats (same critic, same dummy, resume only). Not more bots.

package/src/skills/storyteller/SKILL.md

@@ -96,7 +96,7 @@ codex_terms: [5, 7, 32]  # Related Codex term numbers
 ```markdown
 ## What Next?
 
-- Related Codex terms: [codex.json](../../../../.xray/codex.json)
+- Related Codex terms: [codex.json](../../../.xray/codex.json)
 - Next story to write: [suggestion]
 ```
 

package/xray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "4.0.25",
+  "version": "4.0.27",
   "description": "0xRay Framework - Unified Feature Configuration",
   "suit_temperament": {
     "profile": "auto",