0xray 4.0.39 → 4.0.41

package/docs-site/docs/plates/live-mesh.md

@@ -0,0 +1,41 @@
+---
+title: Live mesh
+sidebar_label: Live mesh
+plate_type: pipeline
+---
+
+# Live mesh
+
+Ping-pong eng events become one ordered JSON feed, then a mesh render. Markdown is never the source.
+
+```
+┌────────────────────────────────────────────────────────────┐
+│ INPUT LAYER                                                │
+│   ┌──────────────┐ ┌──────────┐ ┌─────────┐ ┌───────────┐ │
+│   │ GitHub REST  │ │ deploy   │ │ /health │ │ X ledger  │ │
+│   │ PR/issue     │ │ muse     │ │ probe   │ │ herald    │ │
+│   └──────┬───────┘ └────┬─────┘ └────┬────┘ └─────┬─────┘ │
+│          └──────────────┴────────────┴────────────┘        │
+└─────────────────────────────┬──────────────────────────────┘
+                              v
+┌─────────────────────────────┼──────────────────────────────┐
+│ PROCESSING LAYER            v                              │
+│   ┌────────────────────────────────────────────────────┐  │
+│   │ fetch_feed.py                                      │  │
+│   │ poll → dedupe on id → rewrite live-events.json     │  │
+│   │ --watch keeps the feed warm                        │  │
+│   └──────────────────────────┬─────────────────────────┘  │
+└──────────────────────────────┼────────────────────────────┘
+                               v
+┌──────────────────────────────┼────────────────────────────┐
+│ OUTPUT LAYER                 v                            │
+│   ┌──────────────────────┐  ┌──────────────────────────┐ │
+│   │ live-events.json     │  │ render_mesh.py           │ │
+│   │ (+ jsonl append)     │  │ mp4 / --follow           │ │
+│   └──────────────────────┘  └──────────────────────────┘ │
+└────────────────────────────────────────────────────────────┘
+```
+
+Paths live under `house/live-mesh/`. Schema is `schema.json`. The plate that belongs here is house.
+
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/memory-recall.md

@@ -38,3 +38,7 @@ Intent names one plate. Equal top scores recall nothing. A missing worn copy is
 │   └────────────────────┘        └────────────────────────┘ │
 └──────────────────────────────────────────────────────────────┘
 ```
+
+A look returns the named plane, the matched law names, and the current lines from the session-note index. It does not write a law.
+
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/notes-page.md

@@ -32,4 +32,5 @@ Notes are the body the station card cannot hold.
 
 The page is `.xray/state/NOTES.md`. The pickup line equals the station intent. The default depth is the working notes: the point, the coverage, the library, the open pull requests, the rituals, and the next cut. A pickup line alone does not survive a compact. PreCompact calls `stampNotesPickup`, which updates only that line and leaves the body alone. The hook does not check the body. The seat writes it before the compact. Do not commit this file. Do not feed it to Repertoire.
 
-stamped · 0xray 4.0.36
+The station module writes this page. Heat keeps the current lines in `.xray/state/repertoire/session-notes.json` beside the laws. The wake cascade reads that index and does not write a law. A replaced note stays in that index as history. The short index returns the current line.
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/orchestration.md

@@ -57,3 +57,5 @@ Each tool is its own call. `spawnAside` opens around `orchestrate-task`, `analyz
 │   └─────────────────────┘    └─────────────────────────┘ │
 └────────────────────────────────────────────────────────────┘
 ```
+
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/package-face.md

@@ -32,4 +32,4 @@ A release writes the package face, and the agent reads it.
 
 The face is `README.md`, `package.json`, `AGENTS.md`, `llms.txt`, `CHANGELOG.md`, and `SKILLS.md`. Do not hand-bump the version.
 
-stamped · 0xray 4.0.36
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/payload-heat.md

@@ -32,4 +32,4 @@ buildSessionBootPayload calls applyStationHeat and writes the station card.
 
 The function is in `src/integrations/grok/hooks/grok-hook-utils.js`. The plates that belong here are station-heat and pickup-stamp.
 
-stamped · 0xray 4.0.36
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/pickup-stamp.md

@@ -32,4 +32,4 @@ stampNotesPickup writes one pickup line and leaves the rest of NOTES.md alone.
 
 The comment on the function is one pickup line. There is no check that the working notes are present. The plate that belongs here is notes-page.
 
-stamped · 0xray 4.0.36
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/pre-tool.md

@@ -32,4 +32,4 @@ The tool hook is where the lens gate runs.
 
 pre-tool-use.js joins the command, the written content, and the paths, then calls lensBeforeResearch. A deny ends the hook. The plate that belongs here is lens-gate.
 
-stamped · 0xray 4.0.36
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/processor.md

@@ -42,3 +42,5 @@ sidebar_label: Processor
 │   └──────────────────────────┘   └───────────────────────┘ │
 └──────────────────────────────────────────────────────────────┘
 ```
+
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/record-map.md

@@ -38,4 +38,5 @@ Trail: state and logs under `.xray`. Codex is already loaded. This plate is the
 
 The published manual is `docs-site/docs/`. The rule sheet is `grok-bot/OP-PROC.md`. Neither is one of the five pages.
 
-stamped · 0xray 4.0.36
+Goggles plane `record-map` is the lens over this map. Station and the notes page belong to the station module. Repertoire laws stay in the law file. The session-note index sits beside that file.
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/reflection-page.md

@@ -32,4 +32,4 @@ A reflection is one episode written under docs/reflections.
 
 The loader is `loadReflectionInferences` in `src/inference/inference-accumulator.ts`. A reflection is not a repertoire law.
 
-stamped · 0xray 4.0.36
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/reporting.md

@@ -35,3 +35,5 @@ Logs become a report. A valid cache returns the formatted report and does not wr
 │   └──────────────────────────┘   └─────────────────────┘ │
 └────────────────────────────────────────────────────────────┘
 ```
+
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/review.md

@@ -54,4 +54,4 @@ A state flow plate: one critic pass, one fix, one re-review, then stop.
 
 A FAIL names the file and a test that fails on the old code. One author fixes that hole. A second session waits while the verdict is open. Re-review that new head. A hole the new test did not lock returns to ONE FIX. A PASS ends the plate. A note stays a note and does not open another lap.
 
-stamped · 0xray 4.0.36
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/routing.md

@@ -58,3 +58,5 @@ Task text becomes an agent. `scoreAndRoute` scores the work, then `routeToAgent`
 │   └────────────┘                                            │
 └──────────────────────────────────────────────────────────────┘
 ```
+
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/session-capture.md

@@ -35,4 +35,4 @@ Today that file is `docs/inference/latest-session.json`. The home is `.xray/infe
 
 Station reads the file for heat. The inference accumulator reads `session-*.json` beside it. Do not mint a `session-<date>-<sha>` file for the station note.
 
-stamped · 0xray 4.0.36
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/site-manual.md

@@ -32,4 +32,4 @@ The published manual is docs-site/docs.
 
 Guides, architecture, and introduction live here. Factory notes under `docs/` are a different set. Reflections stay in `docs/reflections/`.
 
-stamped · 0xray 4.0.36
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/stamp-plate.md

@@ -32,4 +32,4 @@ A stamped plate is one drawing for one plane.
 
 The file is `docs-site/docs/plates/<id>.md`. Each opened segue gets its own plate. The hook does not author this file. The plate that belongs here is review.
 
-stamped · 0xray 4.0.36
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/station-card.md

@@ -32,4 +32,7 @@ The station card is the one-line ticket at .xray/state/STATION.md.
 
 Read it after a compact. Leave Intent alone. The plan is the next cut. The long body belongs in notes.
 
-stamped · 0xray 4.0.36
+The station module writes this card. Heat adds `Cascade: record-map · notes N current`. The count is the current index. The body stays on the notes page.
+
+The card keeps the named plane. `Sleeve: on` means the previous ticket came back, the worn plate matched the package, the previous ticket matched the working record, and inspect passed. Judgement is continue, retry N, stop, or start. The same miss keeps its retry. A different ticket stops. Payments is on only when the ticket is a payment.
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/station-heat.md

@@ -32,4 +32,4 @@ On a compact event applyStationHeat stamps the notes pickup line.
 
 `isCompactHook` is true when the hook name contains compact. The body of NOTES.md is left alone. The plates that belong here are pickup-stamp and notes-page.
 
-stamped · 0xray 4.0.36
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/suit-organs.md

@@ -35,4 +35,4 @@ Reporting reads the activity log and may write a report. Station reads `latest-s
 
 Repertoire already keeps `inference-state.json` and the day log under `.xray/state/repertoire/`. Goggles does not write these files. It reads a plate when one plane is named.
 
-stamped · 0xray 4.0.36
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/suit-settings.md

@@ -32,4 +32,4 @@ Suit settings are features, config, and codex.
 
 There is no settings.json. The files are `.xray/features.json`, `.xray/config.json`, and `.xray/codex.json`. The package copies live under `xray/`.
 
-stamped · 0xray 4.0.36
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/suit-wear.md

@@ -34,4 +34,6 @@ Wear copies hooks, features.json, and the consumer gitignore into the project, a
 
 A worn project is a consumer. Its writes go to its own `.xray/logs` and `.xray/inference`, not into `docs/` and not into `.opencode/logs`.
 
-stamped · 0xray 4.0.36
+A fresh wear fastens mill and inspect. Grok's Goggles launcher stays on that install: the checkout script when the package name is `0xray`, and `node_modules/0xray` for every other project.
+
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/suit.md

@@ -38,3 +38,5 @@ Give your agent a suit. The rules stay on, you add powers, and it runs in the to
 ```
 
 Same rules in the repo. You are not locked into one app.
+
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/trail-state.md

@@ -32,4 +32,4 @@ The suit writes its trail under .xray.
 
 Session boot, the lens match line, and the station card are state. The agent reads them. Do not commit `.xray/state`.
 
-stamped · 0xray 4.0.36
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/work-fresh.md

@@ -32,4 +32,4 @@ Refresh writes one Fresh line from git and the published package.
 
 refreshFreshness in src/nucleus/work-freshness.mjs fetches origin, reads npm view 0xray version, and returns that one line. A compact hook does not call it. The plate that belongs here is station-card.
 
-stamped · 0xray 4.0.36
+stamped · 0xray 4.0.41

package/docs-site/docs/plates/write-home.md

@@ -35,4 +35,4 @@ The path table is `src/integrations/hooks/write-home.cjs`. Writers use it. Reade
 
 Still on the old path until each caller is rewired: the activity logger, the framework logger, the pipeline hook, the Grok hook, the Hermes bridge, station capture, `saveSessionInference`, reporting, pulse, monitor, and `features.json` `log_path`.
 
-stamped · 0xray 4.0.36
+stamped · 0xray 4.0.41

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "4.0.39",
+  "version": "4.0.41",
   "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
   "readme": "README.md",
   "license": "MIT",
@@ -226,6 +226,7 @@
   },
   "devDependencies": {
     "@eslint/js": "^9.39.2",
+    "@playwright/test": "^1.55.0",
     "@types/express": "^5.0.0",
     "@types/jsonwebtoken": "^9.0.7",
     "@types/node": "^22.10.2",

package/scripts/node/bridge-mcp-wiring.cjs

@@ -139,11 +139,32 @@ function enableMemoryRoutingIfResolves(features, targetDir) {
   };
 }
 
+function isDogfoodXrayPackage(targetDir) {
+  try {
+    const pkgPath = path.join(targetDir, "package.json");
+    if (!fs.existsSync(pkgPath)) return false;
+    const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf8"));
+    return pkg && pkg.name === "0xray";
+  } catch {
+    return false;
+  }
+}
+
 function resolveGogglesMcp(targetDir) {
-  const candidates = [
-    path.join(targetDir, "node_modules", "0xray", "scripts", "mjs", "run-goggles-mcp.mjs"),
-    path.join(targetDir, "scripts", "mjs", "run-goggles-mcp.mjs"),
-  ];
+  const installed = path.join(
+    targetDir,
+    "node_modules",
+    "0xray",
+    "scripts",
+    "mjs",
+    "run-goggles-mcp.mjs",
+  );
+  const checkout = path.join(targetDir, "scripts", "mjs", "run-goggles-mcp.mjs");
+  // The factory package is not installed into its own node_modules. npm upgrade
+  // removes that folder, and a recorded node_modules path then fails the handshake.
+  const candidates = isDogfoodXrayPackage(targetDir)
+    ? [checkout, installed]
+    : [installed, checkout];
   return candidates.find((file) => fs.existsSync(file)) || null;
 }
 
@@ -315,7 +336,18 @@ function pinnedMcpLaunch(targetDir, mcpCmd) {
  */
 const LIVE_ENV_NAMES = ["PATH", "HOME"];
 
+let launcherPackageRoot = "";
+
+/** Wear sets this so a /tmp checkout is not the path written into a real project. */
+function pinLauncherPackageRoot(packageRoot) {
+  launcherPackageRoot = packageRoot ? path.resolve(packageRoot) : "";
+}
+
 function mcpLauncherPath() {
+  if (launcherPackageRoot) {
+    const candidate = path.join(launcherPackageRoot, "scripts", "node", "mcp-launch.cjs");
+    if (fs.existsSync(candidate)) return candidate;
+  }
   return path.join(__dirname, "mcp-launch.cjs");
 }
 
@@ -988,6 +1020,7 @@ module.exports = {
   enableMemoryRoutingIfResolves,
   isEphemeralInstallRoot,
   isIsolatedHome,
+  pinLauncherPackageRoot,
   copyHermesHookRuntimes,
   resolveOpenClawPreToolHookSource,
   resolveOpenClawPluginDir,

package/scripts/node/install-bridges.cjs

@@ -32,6 +32,7 @@ const {
   maybeWriteOpenClawCliBackend,
   isEphemeralInstallRoot,
   enableMemoryRoutingIfResolves,
+  pinLauncherPackageRoot,
   XRAY_MCP_SERVERS,
 } = require("./bridge-mcp-wiring.cjs");
 
@@ -334,6 +335,34 @@ function mergeOpencodeJson(targetDir, packageRoot, log) {
   }
 }
 
+function settlePackageRoot(packageRoot, targetDir) {
+  const resolved = path.resolve(packageRoot || ".");
+  if (!targetDir || !isEphemeralInstallRoot(resolved) || isEphemeralInstallRoot(path.resolve(targetDir))) {
+    return resolved;
+  }
+  const dest = path.join(machineHome(), ".grok", "wears", "0xray");
+  if (resolved === dest) return dest;
+  // Copy beside the live wear. A hook pointed at dest keeps loading until the swap.
+  const staging = `${dest}.next`;
+  const backup = `${dest}.prev`;
+  fs.rmSync(staging, { recursive: true, force: true });
+  fs.mkdirSync(path.dirname(dest), { recursive: true });
+  fs.cpSync(resolved, staging, {
+    recursive: true,
+    filter(src) {
+      const rel = path.relative(resolved, src);
+      if (!rel) return true;
+      const top = rel.split(path.sep)[0];
+      return top !== "node_modules" && top !== ".git";
+    },
+  });
+  fs.rmSync(backup, { recursive: true, force: true });
+  if (fs.existsSync(dest)) fs.renameSync(dest, backup);
+  fs.renameSync(staging, dest);
+  fs.rmSync(backup, { recursive: true, force: true });
+  return dest;
+}
+
 function grokHookShellCommand(packageRoot, scriptName, extraArgs) {
   const script = path.join(packageRoot, "scripts", "mjs", "run-grok-hook.mjs");
   const extra = extraArgs ? ` ${extraArgs}` : "";
@@ -365,6 +394,7 @@ function ensureGrokHookEvent(hooks, eventName) {
 }
 
 function patchGrokHooks(pluginDir, packageRoot, targetDir, log, label) {
+  packageRoot = settlePackageRoot(packageRoot, targetDir);
   const hooksDir = path.join(pluginDir, "hooks");
   const hooksPath = path.join(hooksDir, "hooks.json");
   const hookScript = path.join(packageRoot, "scripts", "mjs", "run-grok-hook.mjs");
@@ -580,6 +610,83 @@ function grokPluginSettled(sourceDir, dest, packageRoot, targetDir) {
   return true;
 }
 
+/** Absolute paths under a temp checkout. Longest match wins so a script path is retargeted before its root. */
+function retargetEphemeralText(text, durableRoot) {
+  if (typeof text !== "string" || !isEphemeralInstallRoot(text)) return text;
+  const re = /(?:\/private\/var\/folders\/|\/var\/folders\/|\/private\/tmp\/|\/tmp\/|\/Temp\/)[^\s"']*/g;
+  const tokens = [...new Set(text.match(re) || [])].sort((a, b) => b.length - a.length);
+  let out = text;
+  for (const token of tokens) {
+    const scriptsAt = token.indexOf("/scripts/");
+    if (scriptsAt > 0) {
+      const repl = path.join(durableRoot, token.slice(scriptsAt + 1));
+      if (fs.existsSync(repl)) out = out.split(token).join(repl);
+      continue;
+    }
+    const runner = path.join(durableRoot, "scripts", "mjs", "run-grok-hook.mjs");
+    if (
+      !fs.existsSync(token) &&
+      fs.existsSync(runner) &&
+      (out.includes("run-grok-hook") || out.includes("mcp-launch.cjs"))
+    ) {
+      out = out.split(token).join(durableRoot);
+    }
+  }
+  return out;
+}
+
+function scrubEphemeralPins(node, durableRoot) {
+  if (Array.isArray(node)) return node.map((item) => scrubEphemeralPins(item, durableRoot));
+  if (!node || typeof node !== "object") {
+    return typeof node === "string" ? retargetEphemeralText(node, durableRoot) : node;
+  }
+  const out = {};
+  for (const [key, value] of Object.entries(node)) {
+    if ((key === "env" || key === "environment") && value && typeof value === "object" && !Array.isArray(value)) {
+      const env = {};
+      for (const [envKey, envValue] of Object.entries(value)) {
+        if (typeof envValue === "string" && isEphemeralInstallRoot(envValue)) {
+          if (envKey === "XRAY_AI_PATH") env[envKey] = durableRoot;
+          continue;
+        }
+        env[envKey] = scrubEphemeralPins(envValue, durableRoot);
+      }
+      out[key] = env;
+      continue;
+    }
+    out[key] = scrubEphemeralPins(value, durableRoot);
+  }
+  return out;
+}
+
+/**
+ * Shared HOME does not wear the machine plugin, but Grok still loads a stale
+ * `~/.grok/plugins/0xray`. Drop temp XRAY_ROOT pins and retarget dead launch
+ * paths onto the durable wear. A real project root on that plugin is left alone.
+ */
+function scrubEphemeralMachineGrokPins(machine, durablePackageRoot) {
+  if (!machine || !durablePackageRoot) return 0;
+  const runner = path.join(durablePackageRoot, "scripts", "mjs", "run-grok-hook.mjs");
+  if (!fs.existsSync(runner)) return 0;
+  const plugin = path.join(machine, ".grok", "plugins", "0xray");
+  const files = [path.join(plugin, "hooks", "hooks.json"), path.join(plugin, ".mcp.json")];
+  let changed = 0;
+  for (const file of files) {
+    if (!fs.existsSync(file)) continue;
+    let data;
+    try {
+      data = JSON.parse(fs.readFileSync(file, "utf8"));
+    } catch {
+      continue;
+    }
+    const next = scrubEphemeralPins(data, durablePackageRoot);
+    if (JSON.stringify(data) === JSON.stringify(next)) continue;
+    writeFileIfChanged(file, `${JSON.stringify(next, null, 2)}\n`);
+    changed += 1;
+  }
+  return changed;
+}
+
 function installGrokBridge(targetDir, packageRoot, log, opts) {
   const sourceDir = findGrokPluginSource(packageRoot);
   if (!sourceDir) {
@@ -599,6 +706,7 @@ function installGrokBridge(targetDir, packageRoot, log, opts) {
     log("grok-bridge", "skip machine ~/.grok plugin — isolated HOME", "info");
   } else {
     log("grok-bridge", "skip machine ~/.grok plugin — project-scoped wear", "info");
+    scrubEphemeralMachineGrokPins(machine, settlePackageRoot(packageRoot, targetDir));
   }
 
   for (const dest of targets) {
@@ -1846,26 +1954,29 @@ function syncSetupSkillsAndRootLinks(packageRoot, targetDir) {
   require("./setup.cjs").syncSetupSkillsAndRootLinks(packageRoot, targetDir);
 }
 
-function setupSkillMirrorNames(packageRoot) {
-  const skillsSource = fs.existsSync(path.join(packageRoot, "src", "skills"))
+/** A byte-identical package skill is the old mirror. A different body still throws. */
+function wornSkillMatchesPackage(packageRoot, targetDir, name) {
+  const source = fs.existsSync(path.join(packageRoot, "src", "skills"))
     ? path.join(packageRoot, "src", "skills")
     : path.join(packageRoot, "dist", "skills");
-  if (!fs.existsSync(skillsSource)) return new Set();
-  const names = new Set();
-  for (const entry of fs.readdirSync(skillsSource, { withFileTypes: true })) {
-    if (!entry.isDirectory()) continue;
-    if (fs.existsSync(path.join(skillsSource, entry.name, "SKILL.md"))) names.add(entry.name);
+  const packaged = path.join(source, name, "SKILL.md");
+  if (!fs.existsSync(packaged)) return false;
+  const packagedBytes = fs.readFileSync(packaged);
+  let saw = false;
+  for (const parts of ROLE_SKILL_DIRS) {
+    const worn = path.join(targetDir, ...parts, name, "SKILL.md");
+    if (!fs.existsSync(worn)) continue;
+    saw = true;
+    if (!packagedBytes.equals(fs.readFileSync(worn))) return false;
   }
-  return names;
+  return saw;
 }
 
-/** The 4.0.28 skill mirror is not a consumer costume. Any other extra name still throws. */
-function isSetupSkillMirrorDump(err, packageRoot) {
+function isSetupSkillMirrorDump(err, packageRoot, targetDir) {
   if (!err || err.code !== "FOUNDRY_COSTUME_DUMP") return false;
   if (!Array.isArray(err.extraSkills) || err.extraSkills.length === 0) return false;
   if (Array.isArray(err.extraAgents) && err.extraAgents.length > 0) return false;
-  const mirrored = setupSkillMirrorNames(packageRoot);
-  return err.extraSkills.every((name) => mirrored.has(name));
+  return err.extraSkills.every((name) => wornSkillMatchesPackage(packageRoot, targetDir, name));
 }
 
 function packageShipsConsumerSuit(packageRoot) {
@@ -1873,11 +1984,41 @@ function packageShipsConsumerSuit(packageRoot) {
 }
 
 /**
- * 4.0.28 consumer postinstall files: AGENTS.md, .gitignore, repertoire link,
- * .xray config, bridges, mill plant, then the setup.cjs skill mirror and
- * dist/scripts links. Does not install Cursor hooks or git hooks.
+ * Consumer wear files: AGENTS.md, .gitignore, repertoire link, .xray config,
+ * bridges, mill plant (mill + inspect), and the scripts and dist links.
+ * The role-skill mirror stays in the package.
+ * Does not install Cursor hooks or git hooks.
  * Existing user files follow the 4.0.28 guards inside those functions.
  */
+
+const ROLE_SKILL_KEEP = new Set(["mill", "inspect"]);
+const ROLE_SKILL_DIRS = [
+  [".opencode", "skills"],
+  [".grok", "plugins", "0xray", "skills"],
+  [".hermes", "plugins", "xray-hermes", "skills"],
+  [".openclaw", "skills"],
+];
+
+function removeCopiedRoleSkills(packageRoot, targetDir) {
+  const source = fs.existsSync(path.join(packageRoot, "src", "skills"))
+    ? path.join(packageRoot, "src", "skills")
+    : path.join(packageRoot, "dist", "skills");
+  if (!fs.existsSync(source)) return;
+  for (const parts of ROLE_SKILL_DIRS) {
+    const dir = path.join(targetDir, ...parts);
+    if (!fs.existsSync(dir)) continue;
+    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+      if (!entry.isDirectory() || ROLE_SKILL_KEEP.has(entry.name)) continue;
+      const packaged = path.join(source, entry.name, "SKILL.md");
+      const worn = path.join(dir, entry.name, "SKILL.md");
+      if (!fs.existsSync(packaged) || !fs.existsSync(worn)) continue;
+      const same = fs.readFileSync(packaged).equals(fs.readFileSync(worn));
+      if (!same) continue;
+      fs.rmSync(path.join(dir, entry.name), { recursive: true, force: true });
+    }
+  }
+}
+
 function installConsumerProjectFiles(packageRoot, targetDir, log) {
   const write = typeof log === "function" ? log : () => {};
   if (!isConsumerInstall(packageRoot, targetDir) || !packageShipsConsumerSuit(packageRoot)) {
@@ -1896,10 +2037,11 @@ function installConsumerProjectFiles(packageRoot, targetDir, log) {
   installGrokBridge(targetDir, packageRoot, write);
   installHermesBridge(targetDir, packageRoot, write);
   installOpenclawBridge(targetDir, packageRoot, write);
+  removeCopiedRoleSkills(packageRoot, targetDir);
   try {
     mintConsumerSuit(packageRoot, targetDir, write);
   } catch (err) {
-    if (!isSetupSkillMirrorDump(err, packageRoot)) throw err;
+    if (!isSetupSkillMirrorDump(err, packageRoot, targetDir)) throw err;
   }
   syncSetupSkillsAndRootLinks(packageRoot, targetDir);
   return true;
@@ -2085,7 +2227,9 @@ function wearCursorHooks(targetDir, packageRoot, log, opts) {
   const write = typeof log === "function" ? log : () => {};
   const options = opts || {};
   const resolvedTarget = path.resolve(targetDir);
-  const resolvedPackage = path.resolve(packageRoot);
+  const resolvedPackage = settlePackageRoot(path.resolve(packageRoot), resolvedTarget);
+  pinLauncherPackageRoot(resolvedPackage);
+  try {
   if (classifyCursorWearGit(resolvedTarget) === "not-work-tree") {
     wearSuitSkippingCursorHooks(resolvedPackage, resolvedTarget, write);
     return;
@@ -2137,6 +2281,9 @@ function wearCursorHooks(targetDir, packageRoot, log, opts) {
   }
   write("cursor-bridge", "hooks.json wired to installed dist", "info", { path: hooksPath });
   return hooksPath;
+  } finally {
+    pinLauncherPackageRoot("");
+  }
 }
 
 /**
@@ -2344,15 +2491,16 @@ function installFrameworkDogfoodWear(packageRoot, log) {
  * @param {{ targetDir: string, packageRoot: string, log?: Function }} opts
  */
 function installAllBridges(opts) {
-  const packageRoot = path.resolve(opts.packageRoot);
   const targetDir = path.resolve(opts.targetDir);
+  const packageRoot = settlePackageRoot(path.resolve(opts.packageRoot), targetDir);
+  pinLauncherPackageRoot(packageRoot);
   const logFn = opts.log;
   const log =
     logFn ||
     ((_component, _action, _status, _details) => {
       /* noop */
     });
-
+  try {
   wearVendoredRepertoire(packageRoot, targetDir, log);
 
   if (!isConsumerInstall(packageRoot, targetDir)) {
@@ -2373,6 +2521,9 @@ function installAllBridges(opts) {
   installCursorBridge(targetDir, packageRoot, log);
 
   log("install-bridges", "4-platform + cursor wear complete", "success");
+  } finally {
+    pinLauncherPackageRoot("");
+  }
 }
 
 module.exports = {
@@ -2393,6 +2544,8 @@ module.exports = {
   MERGE_CONFIG_FILES,
   patchGrokHooks,
   grokHookShellCommand,
+  settlePackageRoot,
+  scrubEphemeralMachineGrokPins,
   writeGrokDiscoveredHooks,
   isEphemeralInstallRoot,
   isIsolatedHome,

package/scripts/node/playwright-smoke-server.cjs

@@ -0,0 +1,27 @@
+#!/usr/bin/env node
+/**
+ * Minimal static server for the Arch1 Playwright release-gate battery.
+ * Serves one HTML page with a tiny script so chromium coverage has a target.
+ */
+const http = require('http');
+const port = Number(process.env.PLAYWRIGHT_SMOKE_PORT || 3000);
+const html = `<!doctype html>
+<html lang="en">
+<head><meta charset="utf-8"><title>0xray release gate</title></head>
+<body>
+  <main id="gate">release-gate-ok</main>
+  <script>
+    window.__XRAY_RELEASE_GATE__ = function mark() {
+      return document.getElementById('gate').textContent;
+    };
+    window.__XRAY_RELEASE_GATE__();
+  </script>
+</body>
+</html>`;
+const server = http.createServer((req, res) => {
+  res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+  res.end(html);
+});
+server.listen(port, '127.0.0.1', () => {
+  process.stdout.write(`playwright-smoke-server listening on ${port}\n`);
+});