0xray 4.0.42 → 4.1.1

package/docs-site/docs/plates/repertoire.md

@@ -0,0 +1,35 @@
+---
+title: Repertoire
+sidebar_label: Repertoire
+---
+
+# Repertoire
+
+The memory organ matches named laws.
+
+```
+┌────────────────────────────────────────────────────────────┐
+│ INPUT LAYER                                                │
+│   ┌────────────────────────────────────────────────────┐   │
+│   │ a task and its signals                             │   │
+│   └──────────────────────────┬─────────────────────────┘   │
+└──────────────────────────────┼─────────────────────────────┘
+             v
+┌────────────┼───────────────────────────────────────────────┐
+│ PROCESSING LAYER                                            │
+│   ┌────────────────────────────────────────────────────┐   │
+│   │ match the worn laws                                │   │
+│   └──────────────────────────┬─────────────────────────┘   │
+└──────────────────────────────┼─────────────────────────────┘
+                               v
+┌──────────────────────────────┼─────────────────────────────┐
+│ OUTPUT LAYER                 v                             │
+│   ┌────────────────────────────────────────────────────┐   │
+│   │ one law, or none                                   │   │
+│   └────────────────────────────────────────────────────┘   │
+└────────────────────────────────────────────────────────────┘
+```
+
+The code is `src/memory-routing`. The worn package is `@0xray/repertoire` 0.2.9. Station is the wake ticket. This organ is the judgment. Do not pin 0.1.8.
+
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/reporting.md

@@ -36,4 +36,4 @@ Logs become a report. A valid cache returns the formatted report and does not wr
 └────────────────────────────────────────────────────────────┘
 ```
 
-stamped · 0xray 4.0.42
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/review.md

@@ -54,4 +54,4 @@ A state flow plate: one critic pass, one fix, one re-review, then stop.
 
 A FAIL names the file and a test that fails on the old code. One author fixes that hole. A second session waits while the verdict is open. Re-review that new head. A hole the new test did not lock returns to ONE FIX. A PASS ends the plate. A note stays a note and does not open another lap.
 
-stamped · 0xray 4.0.42
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/routing.md

@@ -59,4 +59,4 @@ Task text becomes an agent. `scoreAndRoute` scores the work, then `routeToAgent`
 └──────────────────────────────────────────────────────────────┘
 ```
 
-stamped · 0xray 4.0.42
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/session-capture.md

@@ -35,4 +35,4 @@ Today that file is `docs/inference/latest-session.json`. The home is `.xray/infe
 
 Station reads the file for heat. The inference accumulator reads `session-*.json` beside it. Do not mint a `session-<date>-<sha>` file for the station note.
 
-stamped · 0xray 4.0.42
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/site-manual.md

@@ -32,4 +32,4 @@ The published manual is docs-site/docs.
 
 Guides, architecture, and introduction live here. Factory notes under `docs/` are a different set. Reflections stay in `docs/reflections/`.
 
-stamped · 0xray 4.0.42
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/stamp-plate.md

@@ -32,4 +32,4 @@ A stamped plate is one drawing for one plane.
 
 The file is `docs-site/docs/plates/<id>.md`. Each opened segue gets its own plate. The hook does not author this file. The plate that belongs here is review.
 
-stamped · 0xray 4.0.42
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/station-card.md

@@ -35,4 +35,4 @@ Read it after a compact. Leave Intent alone. The plan is the next cut. The long
 The station module writes this card. Heat adds `Cascade: record-map · notes N current`. The count is the current index. The body stays on the notes page.
 
 The card keeps the named plane. `Sleeve: on` means the previous ticket came back, the worn plate matched the package, the previous ticket matched the working record, and inspect passed. Judgement is continue, retry N, stop, or start. The same miss keeps its retry. A different ticket stops. Payments is on only when the ticket is a payment.
-stamped · 0xray 4.0.42
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/station-heat.md

@@ -32,4 +32,4 @@ On a compact event applyStationHeat stamps the notes pickup line.
 
 `isCompactHook` is true when the hook name contains compact. The body of NOTES.md is left alone. The plates that belong here are pickup-stamp and notes-page.
 
-stamped · 0xray 4.0.42
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/suit-organs.md

@@ -35,4 +35,4 @@ Reporting reads the activity log and may write a report. Station reads `latest-s
 
 Repertoire already keeps `inference-state.json` and the day log under `.xray/state/repertoire/`. Goggles does not write these files. It reads a plate when one plane is named.
 
-stamped · 0xray 4.0.42
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/suit-settings.md

@@ -32,4 +32,4 @@ Suit settings are features, config, and codex.
 
 There is no settings.json. The files are `.xray/features.json`, `.xray/config.json`, and `.xray/codex.json`. The package copies live under `xray/`.
 
-stamped · 0xray 4.0.42
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/suit-wear.md

@@ -36,4 +36,4 @@ A worn project is a consumer. Its writes go to its own `.xray/logs` and `.xray/i
 
 A fresh wear fastens mill and inspect. Grok's Goggles launcher stays on that install: the checkout script when the package name is `0xray`, and `node_modules/0xray` for every other project.
 
-stamped · 0xray 4.0.42
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/suit.md

@@ -14,7 +14,7 @@ Give your agent a suit. The rules stay on, you add powers, and it runs in the to
   ├────────────────────────────────────────────────────────────┤
   │ · the rules stay on                                        │
   │ · you put it on once                                       │
-  │ · it builds the factories                                  │
+  │ · it builds the foundries                                  │
   └────────────────────────────────────────────────────────────┘
                                 │
                           you add powers
@@ -37,6 +37,6 @@ Give your agent a suit. The rules stay on, you add powers, and it runs in the to
     goggles views one plane
 ```
 
-Same rules in the repo. You are not locked into one app.
+A foundry is mills and hangars. The mill builds and ships. The hangar is the shop. Same rules in the repo. You are not locked into one app.
 
-stamped · 0xray 4.0.42
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/synthesis.md

@@ -0,0 +1,35 @@
+---
+title: Synthesis
+sidebar_label: Synthesis
+---
+
+# Synthesis
+
+The reflect checkpoint for this checkout.
+
+```
+┌────────────────────────────────────────────────────────────┐
+│ INPUT LAYER                                                │
+│   ┌────────────────────────────────────────────────────┐   │
+│   │ a gate, a turn, or a finished todo                 │   │
+│   └──────────────────────────┬─────────────────────────┘   │
+└──────────────────────────────┼─────────────────────────────┘
+             v
+┌────────────┼───────────────────────────────────────────────┐
+│ PROCESSING LAYER                                            │
+│   ┌────────────────────────────────────────────────────┐   │
+│   │ the checkpoint when enabled                        │   │
+│   └──────────────────────────┬─────────────────────────┘   │
+└──────────────────────────────┼─────────────────────────────┘
+                               v
+┌──────────────────────────────┼─────────────────────────────┐
+│ OUTPUT LAYER                 v                             │
+│   ┌────────────────────────────────────────────────────┐   │
+│   │ due or not due                                     │   │
+│   └────────────────────────────────────────────────────┘   │
+└────────────────────────────────────────────────────────────┘
+```
+
+The file is `src/nucleus/synthesis.ts`. The checkpoint is `.xray/state/synthesis-checkpoint.json`. While `synthesis.enabled` is false, a slice is not written and it does not come due.
+
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/temperament.md

@@ -0,0 +1,35 @@
+---
+title: Temperament
+sidebar_label: Temperament
+---
+
+# Temperament
+
+Ceremony scales by host.
+
+```
+┌────────────────────────────────────────────────────────────┐
+│ INPUT LAYER                                                │
+│   ┌────────────────────────────────────────────────────┐   │
+│   │ a host                                             │   │
+│   └──────────────────────────┬─────────────────────────┘   │
+└──────────────────────────────┼─────────────────────────────┘
+             v
+┌────────────┼───────────────────────────────────────────────┐
+│ PROCESSING LAYER                                            │
+│   ┌────────────────────────────────────────────────────┐   │
+│   │ read suit_temperament                              │   │
+│   └──────────────────────────┬─────────────────────────┘   │
+└──────────────────────────────┼─────────────────────────────┘
+                               v
+┌──────────────────────────────┼─────────────────────────────┐
+│ OUTPUT LAYER                 v                             │
+│   ┌────────────────────────────────────────────────────┐   │
+│   │ frontier warns, guided denies                      │   │
+│   └────────────────────────────────────────────────────┘   │
+└────────────────────────────────────────────────────────────┘
+```
+
+The module is `src/nucleus/suit-temperament.ts`. A missing `suit_temperament` stays guided. Frontier warns when a spawn has no plan. Guided and strict deny that spawn. Codex stays on. The guide is `docs-site/docs/guides/v3-temperament.md`.
+
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/trail-state.md

@@ -30,6 +30,6 @@ The suit writes its trail under .xray.
 └────────────────────────────────────────────────────────────┘
 ```
 
-Session boot, the lens match line, and the station card are state. The agent reads them. Do not commit `.xray/state`.
+Session boot and the station card are state. `.xray/state/LENS.md` is the plane cards. A named plane whose Entry and Exit are missing is written there, and later passes read that card. Commit `.xray/state/LENS.md`. Do not commit the rest of `.xray/state`.
 
-stamped · 0xray 4.0.42
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/work-fresh.md

@@ -32,4 +32,4 @@ Refresh writes one Fresh line from git and the published package.
 
 refreshFreshness in src/nucleus/work-freshness.mjs fetches origin, reads npm view 0xray version, and returns that one line. A compact hook does not call it. The plate that belongs here is station-card.
 
-stamped · 0xray 4.0.42
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/write-home.md

@@ -35,4 +35,4 @@ The path table is `src/integrations/hooks/write-home.cjs`. Writers use it. Reade
 
 Still on the old path until each caller is rewired: the activity logger, the framework logger, the pipeline hook, the Grok hook, the Hermes bridge, station capture, `saveSessionInference`, reporting, pulse, monitor, and `features.json` `log_path`.
 
-stamped · 0xray 4.0.42
+stamped · 0xray 4.1.0

package/llms.txt

@@ -1,21 +1,25 @@
 # 0xray
 
-> Exo for coding agents. A suit that survives the context window. Not a catalog of 45 skills.
+> A three-subsystem autonomous engine. The suit is the wear. The next session wakes with the job.
 
-**4.0** — mill+inspect plant, 7 MCPs, Codex 69. Constitution always on.
+**4.1** — mill+inspect plant, 7 MCPs, Codex 69. Constitution always on.
 
 Confer votes. Burst runs the swarm.
 
+**4.1** — a suit that survives the context window
+
+0xRay is a three-subsystem autonomous engine. The suit is the wear. Inference remembers. External Governance judges. The Autonomous Engine runs the work. The host you already run wears it: Grok, OpenCode, Hermes, OpenClaw, or Cursor. Memory, judgement, and payments come on with the suit. When the window closes, the next session wakes with the job, the page, and the laws. Confer votes: the agents on a decision vote, and only a real yes carries the work. Burst runs the swarm, so the agents are in the work as it happens. A foundry is built from mills and hangars.
+
 Default consumer wear is **mill plant** (`mill` + `inspect`), not a 45-skill / 42-agent costume dump. `foundry.json` `"costume": true` is the opt-in dump. Do not use costume to land hangar shops. Fasten is **foundry-plant/0**: builtin plant is mill+inspect only. `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill package declares. Organs (looker, vibe, mixer) live in the mill — adding an organ is a mill publish, not an xray catalog PR. CLI shims `foundry blip|sound` still exist on foundry 0.1.11+; fasten is the new cut. Inspect reports the last bed or blip receipt the mill exported. Nested mill `@0xray/foundry` 0.1.12. Not costume.
 
 ## Wear (what a stranger gets)
 
-- `npm install 0xray` — postinstall fastens mill+inspect, writes 7 MCP `.mcp.json`, four host bridges (OpenCode, Grok, Hermes, OpenClaw) plus Cursor `.cursor/hooks.json`, overlays their plant. Grok last-mile dest is project `.grok/plugins/0xray`. Shared HOME does not last-wins clobber machine `~/.grok/plugins/0xray`. Isolated HOME must not write the machine plugin. Does **not** write consumer-root `SKILLS.md`. Lead cadence: `grok-bot/OP-PROC.md` (team specifics live in `house/`) — a peer continues from Station + Repertoire; dummy tests `SKILLS.md`; same-sess wear; branch/PR; OTP then poll; loop until Station; live ticks, not idle pacers.
+- `npm install 0xray` links vendored `@0xray/repertoire` and prints `npx 0xray wear`. It does not write `.mcp.json` or the chat bridges. `npx 0xray wear` writes the consumer suit: managed `AGENTS.md`, `.xray` config, seven MCP servers, and the OpenCode, Grok, Hermes, and OpenClaw bridges. Inside a git checkout, wear also fastens Cursor project hooks. Grok last-mile dest is project `.grok/plugins/0xray`. Shared HOME does not last-wins clobber machine `~/.grok/plugins/0xray`. Isolated HOME must not write the machine plugin. Does **not** write consumer-root `SKILLS.md`. Lead cadence: `grok-bot/OP-PROC.md` (team specifics live in `house/`) — a peer continues from Station + Repertoire; dummy tests `SKILLS.md`; same-sess wear; branch/PR; OTP then poll; loop until Station; live ticks, not idle pacers.
 - Memory scoring rules: [docs/memory-scoring.md](docs/memory-scoring.md). The orchestrator links that file. It does not copy the rules.
 - Host `preCompact` writes the hook line and per-session receipt on the suit mill and on nested consumer wear roots (a bench with local `node_modules/0xray`). A counted cut needs a non-empty generation id and a numeric usage percent.
 - `@0xray/grok-bot`: the general page is `grok-bot/OP-PROC.md`. The team overlay is `house/` and is not in that npm pack. `templates/house/` ships. `grok-bot house init` copies the template and refuses to overwrite. Doctor uses `GROK_BOT_HOUSE` when set, otherwise walks up from the working directory for `house/HOUSE.md`.
 - MCP servers start through `scripts/node/mcp-launch.cjs`. They see PATH, HOME, and XRAY_ROOT, plus the names on their keep list. Tokens such as NPM_TOKEN are not inherited. User env values stay out of argv. Postinstall keeps user edits to AGENTS.md, `.mcp.json`, and `opencode.json`. `house init` does not copy EXAMPLE.md. Doctor FAILs while `house/EXAMPLE.md` exists. Inspect has a machinePlugin check. The Cursor hook defaults XRAY_ROOT to the suit directory.
-- `npm install` only creates the relative `node_modules/@0xray/repertoire` link to the vendored repertoire and prints `npx 0xray wear`. Run `npx 0xray wear` after install; it writes only the consumer project's `.cursor/hooks.json`. `npx 0xray unwear` restores the pre-wear snapshot.
+- `npx 0xray unwear` restores the pre-wear snapshot. Outside a git checkout, wear still writes the suit and skips only the Cursor hooks, with one warning.
 - 4.0.30: `npx 0xray wear` and `setup` also work outside a git checkout. They write the 4.0.28 project setup and skip only Cursor hooks, with one warning. In a git checkout they write the 4.0.28 project setup plus Cursor hooks.
 
 - `npx @0xray/foundry mint --skip-live` — re-fasten mill plant, then inspect.
@@ -43,7 +47,7 @@ Registered in `.mcp.json` as `npx -y 0xray mcp <cmd>`:
 | `xray-code-review` | Proposal quality |
 | `xray-architect-tools` | System design |
 
-Not an 8th `xray-*` server. **Repertoire is preferred** — vendored 0.2.9 ships on (`npx @0xray/repertoire mcp`). Dest is named laws, not hangar `repo-*` or git slugs. Survive compact is **Station** (Read `.xray/state/STATION.md`). Station is the ticket, not a substitute for Repertoire. Do not pin 0.1.8.
+Not an 8th `xray-*` server. **Repertoire is preferred** — vendored 0.2.9 ships on (`npx @0xray/repertoire mcp`). Dest is named laws, not hangar `repo-*` or git slugs. The wake ticket is **Station** (Read `.xray/state/STATION.md`). Station is the ticket, not a substitute for Repertoire. Do not pin 0.1.8.
 
 ## Codex 69 (always on)
 
@@ -58,10 +62,14 @@ Not an 8th `xray-*` server. **Repertoire is preferred** — vendored 0.2.9 ships
 - **Hangar** — plants factory shops on the four floors. Coexists with mill plant via shop plant allowlist.
 - **42 YML / 45 SKILL.md** — exo catalog in this repo. Not default consumer wear.
 
+## Live board (Bifrost)
+
+The board seats see is the collector board. `house/live/feed/live_mesh.py` runs the collector and the board every `LIVE_WATCH_S` seconds (default 45). A cloud agent is a board row (`bcId`, owning seat, linked card, state `running`, `finished`, or `failed`). `live-inbox` requires `LIVE_URL`, `SEAT_KEYS_DIR`, and `LIVE_CURSORS`, and exits 2 when one is missing. The seat wake is `grok-bot/templates/house/fleet/WAKE-ROUTINE.md`: turn start on every turn, turn end on every exit. A stuck card sends L1 to the next owner or the card owner, and L2 to the CoS role. Plate: `docs-site/docs/plates/bifrost.md`. Lexicon: `grok-bot/LEXICON.md`, including **button up**.
+
 ## Docs
 
 - [README.md](README.md) — exo landing
-- [AGENTS.md](AGENTS.md) — framework card
+- [AGENTS.md](AGENTS.md) — suit card
 - [AGENTS-consumer.md](AGENTS-consumer.md) — consumer card (copied to `AGENTS.md` on install)
 - [SKILLS.md](SKILLS.md) — catalog (costume / self-plant, not default sync)
 - [Foundry](docs-site/docs/architecture/v4-foundry.md) — mill vs exo, foundry-plant/0, shopPlant

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "0xray",
-  "version": "4.0.42",
-  "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
+  "version": "4.1.1",
+  "description": "Three-subsystem autonomous engine. The suit powers the agent you already run: memory, judgement, payments, and the wake.",
   "readme": "README.md",
   "license": "MIT",
   "repository": {
@@ -80,7 +80,7 @@
     "test:code-analysis": "npm test -- src/__tests__/unit/codebase-context-analyzer.test.ts src/__tests__/unit/dependency-graph-builder.test.ts src/__tests__/unit/rule-enforcer.test.ts src/__tests__/unit/codex-parser.test.ts src/__tests__/unit/codex-injector.test.ts",
     "test:processors": "npm test -- src/__tests__/unit/processor-activation.test.ts src/__tests__/unit/typescript-compilation-processor.test.ts",
     "test:miscellaneous": "npm test -- src/__tests__/unit/blocked-test.test.ts",
-    "test:grok-bot": "npm test -- src/__tests__/unit/grok-bot-seat-doctor.test.ts src/__tests__/unit/grok-bot-op-proc-map.test.ts src/__tests__/unit/lead-cadence.test.ts src/__tests__/unit/grok-bot-auto-review-policy.test.ts",
+    "test:grok-bot": "npm test -- src/__tests__/unit/grok-bot-seat-doctor.test.ts src/__tests__/unit/grok-bot-house-migrate.test.ts src/__tests__/unit/grok-bot-house-template.test.ts src/__tests__/unit/grok-bot-op-proc-map.test.ts src/__tests__/unit/lead-cadence.test.ts src/__tests__/unit/grok-bot-auto-review-policy.test.ts",
     "test:quick": "npm test -- src/__tests__/integration/boot-orchestrator.integration.test.ts src/__tests__/unit/config-loader.test.ts src/__tests__/unit/state-manager.test.ts",
     "test:comprehensive": "npm run typecheck && npm run test:unit && npm run test:core-framework && npm run test:security && npm run test:performance && npm run test:session-management && npm run test:code-analysis && npm run test:processors && npm run test:miscellaneous && npm test -- src/__tests__/unit/llm-governance-provider.test.ts src/__tests__/unit/mcp-server-smoke.test.ts src/__tests__/unit/cursor-hooks.test.ts src/__tests__/unit/host-vs-mill-score.test.ts src/__tests__/unit/wear-pack-file-list.test.ts && npm run test:grok-bot",
     "test:integration-all": "npm test -- src/__tests__/integration/",

package/scripts/foundry/README.md

@@ -17,7 +17,7 @@ npx @0xray/foundry reconcile [patch|minor|major] [--apply] [--check]
 npx @0xray/foundry stamp
 npx @0xray/foundry docs-check
 npx @0xray/foundry docs-build
-npx @0xray/foundry gate [--verify-only]
+npx @0xray/foundry gate [--verify-only|--prove-published]
 npx @0xray/foundry release [patch|minor|major] --dry-run
 npx @0xray/foundry release [patch|minor|major] --i-mean-it
 npx @0xray/foundry release --publish-only --dry-run
@@ -37,9 +37,11 @@ npx @0xray/foundry hooks
 
 `release` without `--dry-run` requires `--i-mean-it` or `FOUNDRY_RELEASE=1`. It is a bump/commit/push/publish bot for the **milled cwd**, not a casual command.
 
+On the 0xray repo, `reconcile --apply` and `stamp` refuse unless `release.mjs` called them. `npm run version:sync` refuses here too. Run `npx @0xray/foundry release [patch|minor|major] --i-mean-it`. That command publishes. A docs fix does not.
+
 `FOUNDRY_ROOT` overrides cwd (the repo being milled).
 
-`gate` is build + test + docs-check. `docs-build` runs Docusaurus on the 0xray exo (`docs-site/`); stranger mills skip. `inspect` runs the six mill checks (diff, plant vs worn, receipt, CI, live tarball GET, isolated HOME) plus observational harness (Cursor/Grok hooks bound, Repertoire fastened, Station present). `--go` emits a shop-style forge GO receipt; `--require-harness=bare|suited|partial` turns that observation into a gate. Mint fails on a costume dump. Isolated HOME skips machine `~/.grok`. Shared HOME last-mile dest is project `.grok/plugins/0xray` (no last-wins machine plugin). `ci` reports GitHub Actions (no auto-push). `hooks` installs git pre/post hooks. GitHub `0xRay CI/CD` is the mill gate on `main`. `Deploy Docs` is the mill Pages put.
+`gate` is build + test + docs-check. `--skip-docs` fails the gate. `--prove-published` is Gate D and does not publish: npm lists the version, the annotated tag points at HEAD, and the GitHub Release page exists. A local gate pass is not Gate D. `docs-build` runs Docusaurus on the 0xray exo (`docs-site/`); stranger mills skip. `inspect` runs the six mill checks (diff, plant vs worn, receipt, CI, live tarball GET, isolated HOME) plus observational harness (Cursor/Grok hooks bound, Repertoire fastened, Station present). `--go` emits a shop-style forge GO receipt; `--require-harness=bare|suited|partial` turns that observation into a gate. Mint fails on a costume dump. Isolated HOME skips machine `~/.grok`. Shared HOME last-mile dest is project `.grok/plugins/0xray` (no last-wins machine plugin). `ci` reports GitHub Actions (no auto-push). `hooks` installs git pre/post hooks. GitHub `0xRay CI/CD` is the mill gate on `main`. `Deploy Docs` is the mill Pages put.
 
 `docs-check` and `gate` run **full** 0xRay corpus only when the milled `package.json` name is `0xray` and `docs-site/` exists. Otherwise **light**: `package.json` + CHANGELOG.
 
@@ -60,7 +62,7 @@ After mill plant is fastened, overlay their plant (defaults; remap in `foundry.j
 
 **Mill-fill is law:** their keys/files win; mill names they did not plant stay unless they overlay the same name. JSON facets always merge. Skill overlay is project dirs on every TUI floor (OpenCode, Grok, Hermes, OpenClaw). YML agents stay OpenCode. CLI re-wear calls mint **once** after mill copies. Isolated HOME is passwd home, not `os.homedir()`. CI report is `.xray/foundry-ci-report.json` (`.opencode/logs` shim).
 
-**Default mill plant:** `mill` + `inspect` (inspect AI work). Fasten is **foundry-plant/0**: builtin plant is mill+inspect only (files from this package `plant/`). Fastens a suit, not an empty one. Not 45/42 costume. `foundry.json` `"costume": true` copies that dump. **Repertoire is preferred** (vendored, dest = laws). PPE stays worn.
+**Default mill plant:** `mill` + `inspect` (inspect AI work). Fasten is **foundry-plant/0**: builtin plant is mill+inspect only (files from this package `plant/`). Fastens a suit, not an empty one. The mill suit also wears every catalog skill and every role file. A blip or sound seat fastens that plant only. A name outside the fastened set still fails inspect. **Repertoire is preferred** (vendored, dest = laws). PPE stays worn.
 
 **foundry-plant/0:** `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill package declares and ships in its own `plant/`. Organs (looker, vibe, mixer) live in the mill. Adding an organ is a mill publish, not a foundry catalog PR. CLI shims `foundry blip|sound` still exist on foundry 0.1.11+; fasten is the new cut. Foundry **0.1.12**.
 

package/scripts/foundry/mint-suit.cjs

@@ -114,12 +114,91 @@ function loadFoundryParams(targetDir) {
   return params;
 }
 
-/** 45/42 costume dump. Default false on consumers. Exo mill keeps the costume. */
+/** Exo repo, or foundry.json costume true. This flag does not gate catalog skills. */
 function wantsCostume(targetDir) {
   if (isExoRepo(targetDir)) return true;
   return loadFoundryExtra(targetDir).costume === true;
 }
 
+function suitPackageRoot(start) {
+  let dir = start;
+  for (let i = 0; i < 4 && dir; i += 1) {
+    if (
+      fs.existsSync(path.join(dir, "src", "skills"))
+      || fs.existsSync(path.join(dir, "dist", "skills"))
+      || fs.existsSync(path.join(dir, "src", "opencode", "agents"))
+    ) return dir;
+    const parent = path.dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return start || "";
+}
+
+function catalogSkillDir(packageRoot) {
+  const base = suitPackageRoot(packageRoot);
+  const dirs = [path.join(base, "dist", "skills"), path.join(base, "src", "skills")];
+  return dirs.find((dir) => listSkillNamesAt(dir).length > 0) || "";
+}
+
+function catalogSkillNames(packageRoot) {
+  const dir = catalogSkillDir(packageRoot);
+  return dir ? listSkillNamesAt(dir) : [];
+}
+
+function catalogAgentDirs(packageRoot) {
+  const base = suitPackageRoot(packageRoot);
+  return [
+    path.join(base, "src", "opencode", "agents"),
+    path.join(base, ".opencode", "agents"),
+  ].filter((p) => fs.existsSync(p));
+}
+
+function catalogAgentFiles(packageRoot) {
+  const names = new Set();
+  for (const dir of catalogAgentDirs(packageRoot)) {
+    for (const file of listAgentFilesAt(dir)) names.add(file);
+  }
+  return [...names];
+}
+
+/**
+ * The mill suit wears the catalog. A blip-only or sound-only seat does not.
+ * Costume stays a separate flag and does not decide this.
+ */
+function suitCatalogApplies(targetDir, millPlant, packageRoot) {
+  const fromPlant = Array.isArray(millPlant?.kinds) ? millPlant.kinds : [];
+  const kinds = fromPlant.length > 0
+    ? fromPlant
+    : loadFactoryPlantKinds(targetDir, packageRoot || "");
+  return kinds.includes("mill");
+}
+
+/** Every catalog skill and role file. An existing file stays. */
+function wearCatalog(packageRoot, targetDir) {
+  const source = catalogSkillDir(packageRoot);
+  if (source) {
+    for (const dir of listProjectSkillDirs(targetDir)) {
+      for (const name of catalogSkillNames(packageRoot)) {
+        const src = path.join(source, name, "SKILL.md");
+        const dest = path.join(dir, name, "SKILL.md");
+        if (!fs.existsSync(src) || fs.existsSync(dest)) continue;
+        fs.mkdirSync(path.dirname(dest), { recursive: true });
+        fs.copyFileSync(src, dest);
+      }
+    }
+  }
+  const agentsDest = path.join(targetDir, ".opencode", "agents");
+  for (const dir of catalogAgentDirs(packageRoot)) {
+    for (const file of listAgentFilesAt(dir)) {
+      const dest = path.join(agentsDest, file);
+      if (fs.existsSync(dest)) continue;
+      fs.mkdirSync(agentsDest, { recursive: true });
+      fs.copyFileSync(path.join(dir, file), dest);
+    }
+  }
+}
+
 function millPlantDir(millPackageRoot) {
   return millPlantProtocol.foundryPlantDir(millPackageRoot);
 }
@@ -208,11 +287,21 @@ function inventoryPlantKinds(inventory) {
   return millPlantProtocol.plantKindsFromInventory(inventory);
 }
 
+function skillDirEntry(parent, entry) {
+  if (entry.isDirectory()) return true;
+  if (!entry.isSymbolicLink()) return false;
+  try {
+    return fs.statSync(path.join(parent, entry.name)).isDirectory();
+  } catch {
+    return false;
+  }
+}
+
 function listSkillNamesAt(skillsSrc) {
   if (!isDirectory(skillsSrc)) return [];
   const names = [];
   for (const entry of fs.readdirSync(skillsSrc, { withFileTypes: true })) {
-    if (!entry.isDirectory() || entry.name.startsWith(".")) continue;
+    if (entry.name.startsWith(".") || !skillDirEntry(skillsSrc, entry)) continue;
     const skillMd = path.join(skillsSrc, entry.name, "SKILL.md");
     if (!fs.existsSync(skillMd)) continue;
     names.push(entry.name);
@@ -615,7 +704,10 @@ function costumeDumpExtras(targetDir, millPlant, tree) {
       if (Array.isArray(spec?.agents)) plantMapAgents.push(...spec.agents);
     }
   }
+  const packageRoot = tree?.millPackageRoot || "";
+  const catalogOn = suitCatalogApplies(targetDir, millPlant, packageRoot);
   const allowedSkills = new Set([
+    ...(catalogOn ? catalogSkillNames(packageRoot) : []),
     ...(Array.isArray(millPlant?.skills) ? millPlant.skills : []),
     ...(Array.isArray(millPlant?.sound?.skills) ? millPlant.sound.skills : []),
     ...(Array.isArray(millPlant?.blip?.skills) ? millPlant.blip.skills : []),
@@ -627,6 +719,7 @@ function costumeDumpExtras(targetDir, millPlant, tree) {
     ...shopPlant,
   ]);
   const allowedAgents = new Set([
+    ...(catalogOn ? catalogAgentFiles(packageRoot) : []),
     ...(Array.isArray(millPlant?.agents) ? millPlant.agents : []),
     ...(Array.isArray(millPlant?.sound?.agents) ? millPlant.sound.agents : []),
     ...(Array.isArray(millPlant?.blip?.agents) ? millPlant.blip.agents : []),
@@ -795,12 +888,34 @@ function mintConsumerFromSsot(packageRoot, targetDir, log, tree) {
   return withDna;
 }
 
+
+function gogglesDisabled(targetDir) {
+  const file = path.join(targetDir, ".xray", "features.json");
+  if (!fs.existsSync(file)) return false;
+  try {
+    const data = JSON.parse(fs.readFileSync(file, "utf8"));
+    return Boolean(data && data.goggles && data.goggles.enabled === false);
+  } catch {
+    return false;
+  }
+}
+
+function assertGogglesOn(targetDir) {
+  if (gogglesDisabled(targetDir)) {
+    throw new Error("goggles off — the suit keeps goggles on");
+  }
+}
+
 function mintConsumerSuit(millPackageRoot, targetDir, log) {
+  assertGogglesOn(targetDir);
   if (isDogfood(millPackageRoot, targetDir)) {
     return { suit: "dogfood", skipped: true };
   }
   const params = loadFoundryParams(targetDir);
   const millPlant = fastenMillPlant(millPackageRoot, targetDir, log);
+  if (suitCatalogApplies(targetDir, millPlant, millPackageRoot)) {
+    wearCatalog(millPackageRoot, targetDir);
+  }
   const tree = overlayConsumerTree(targetDir, log, params);
   tree.plantKinds = millPlant.kinds || loadFactoryPlantKinds(targetDir);
   tree.millPlantSkills = millPlant.skills;
@@ -825,6 +940,7 @@ function mintConsumerSuit(millPackageRoot, targetDir, log) {
     resolveInside(targetDir, params.features),
     path.join(targetDir, ".xray", "features.json"),
   );
+  assertGogglesOn(targetDir);
   tree.config = overlayJsonFacet(
     resolveInside(targetDir, params.config),
     path.join(targetDir, ".xray", "config.json"),
@@ -866,6 +982,7 @@ module.exports = {
   loadShopPlant,
   declaredShopPlant,
   wantsCostume,
+  suitCatalogApplies,
   millPlantDir,
   loadFactoryPlantKinds,
   factoryPlantAllowlist,
@@ -884,6 +1001,7 @@ module.exports = {
   listProjectSkillDirs,
   mintConsumerFromSsot,
   mintConsumerSuit,
+  assertGogglesOn,
   attachInventoryDna,
   inventoryDna,
   isDogfood,

package/scripts/foundry/plant/skills/mill/SKILL.md

@@ -13,7 +13,7 @@ The mill **fastens** a suit. Default mill plant is **inspect** (inspecting AI wo
 
 **Factory:** **Repertoire is preferred** (vendored 0.2.9 ships on; dest = named laws). Seven generated MCP. Constitution (PPE) stays worn. Not a fifth MCP. Not 5.0.
 
-**Costume:** `foundry.json` `"costume": true` copies the 45/42 mill costume.
+**Skills:** the mill suit wears every catalog skill and every role file. The mill plant stays `mill` and `inspect`. A blip or sound seat fastens that plant only.
 
 ```bash
 npx @0xray/foundry mint

package/scripts/foundry/reconcile-version.mjs

@@ -20,7 +20,7 @@ import { execSync } from "child_process";
 import fs from "fs";
 import path from "path";
 import { fileURLToPath } from "url";
-import { readRootPackage, resolveMillRoot } from "./mill-root.mjs";
+import { isXrayExoRepo, readRootPackage, resolveMillRoot } from "./mill-root.mjs";
 import { packageLockVersions, syncPackageLockVersion } from "./version-manager.mjs";
 
 const rootDir = resolveMillRoot();
@@ -103,7 +103,7 @@ function fail(msg) {
  */
 export function publishedVersionCheckError(local, npmVersion) {
   if (compare(local, npmVersion) < 0) {
-    return `package.json (${local}) must be >= npm (${npmVersion}). Run: npx @0xray/foundry reconcile patch --apply`;
+    return `package.json (${local}) must be >= npm (${npmVersion}). The bump is npx @0xray/foundry release patch --i-mean-it. That command publishes. A docs fix does not. Stop.`;
   }
   return null;
 }
@@ -134,6 +134,13 @@ function main() {
   }
 
   if (applyMode && bumpType) {
+    if (isXrayExoRepo(rootDir) && process.env.FOUNDRY_VIA_RELEASE !== "1") {
+      fail(
+        "This repo bumps only through scripts/foundry/release.mjs.\n" +
+          "Ship: node scripts/foundry/release.mjs patch --i-mean-it\n" +
+          "That command publishes. A docs fix does not. Stop.",
+      );
+    }
     const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf-8"));
     pkg.version = target;
     fs.writeFileSync(pkgPath, JSON.stringify(pkg, null, 2) + "\n");
@@ -167,7 +174,7 @@ function main() {
   const lockNow = packageLockVersions(rootDir);
   if (lockNow && (lockNow.root !== pkgVersion || lockNow.pkg !== pkgVersion)) {
     fail(
-      `package-lock.json (${lockNow.root} / ${lockNow.pkg}) must match package.json (${pkgVersion}). The bumper writes both: npx @0xray/foundry reconcile patch --apply`,
+      `package-lock.json (${lockNow.root} / ${lockNow.pkg}) must match package.json (${pkgVersion}). The bumper is npx @0xray/foundry release patch --i-mean-it. That command publishes. A docs fix does not. Stop.`,
     );
   }