0xray 4.0.8 → 4.0.10

package/.xray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "4.0.8",
+  "version": "4.0.10",
   "description": "0xRay Framework - Unified Feature Configuration",
   "suit_temperament": {
     "profile": "auto",

package/AGENTS-consumer.md

@@ -20,6 +20,7 @@ Before other work, Read `.xray/state/STATION.md`. Compaction and host change are
 
 - Copies this file → **`AGENTS.md`** in your project root
 - Fastens mill plant (`mill` + `inspect`) then overlays **your** `src/skills` (same name wins). `npx @0xray/foundry inspect` runs the mill checks (chat is not a receipt). Does **not** dump 45/42 costume unless `foundry.json` `"costume": true`. Does **not** write root **`SKILLS.md`**
+- Factory shop plant (`shop-extract`, `shop-witness`, `shop-pin` from groover-hangar) is first-class with mill plant. Extra shops: `foundry.json` `"shopPlant"`. Not costume.
 - Seeds **`.gitignore`** (from template, if absent)
 - Deploys **`.xray/`** (`codex.json`, `features.json`, `config.json`) then overlays **your** mill SSOT (`xray/codex.json`, `xray/features.json`, `src/skills`, `src/opencode/agents`; remap with `foundry.json`)
 - Writes **`.mcp.json`** with 7 MCPs servers (`npx -y 0xray mcp …`)

package/AGENTS.md

@@ -20,7 +20,7 @@ xray provides intelligent multi-agent orchestration with automatic delegation an
 - **External Governance** — Dynamo Solar SSOT, 69-term Codex
 - **Autonomous Engine** — thinDispatch 7-flow, AsideContext, confidence gate
 
-Agents are declared in `src/opencode/agents/*.yml` — the YML SSOT. Skills live in `src/skills/*/SKILL.md` — see [SKILLS.md](SKILLS.md). Consumer projects receive slimmed copies via postinstall (`AGENTS-consumer.md` → `AGENTS.md`, skills synced to platform dirs).
+Agents are declared in `src/opencode/agents/*.yml` — the YML SSOT. Skills live in `src/skills/*/SKILL.md` — see [SKILLS.md](SKILLS.md) for the exo catalog. Consumer default plant is **mill + inspect**, not a 45-skill sync (`AGENTS-consumer.md` → `AGENTS.md`). Factory hangar shops coexist via shop plant. See [llms.txt](llms.txt).
 
 ## Consumer MCP surface (7 servers)
 
@@ -42,14 +42,16 @@ Governance deliberation: **code-review**, **security-audit**, **researcher** wit
 
 `postinstall.cjs` → `installAllBridges()`:
 
-1. `AGENTS-consumer.md` → `AGENTS.md`
-2. `SKILLS.md` + 45 skills → platform skill directories
+1. `AGENTS-consumer.md` → `AGENTS.md` (does **not** write consumer-root `SKILLS.md`)
+2. Fasten mill plant (`mill` + `inspect`). Not a 45-skill costume dump unless `foundry.json` `"costume": true`
 3. `.gitignore.default` → `.gitignore` (if absent)
-4. `.xray/` config (`codex.json`, `features.json`, `config.json`)
+4. `.xray/` config (`codex.json`, `features.json`, `config.json`) then overlay their plant
 5. `.mcp.json` (7 servers)
 6. Four bridges: OpenCode, Grok, Hermes, OpenClaw
 7. Optional git hooks
 
+**Shop plant:** `shop-extract`, `shop-witness`, `shop-pin` (groover-hangar) are first-class with mill plant. Extra shops: `foundry.json` `shopPlant`. Not `"costume": true`. `npx @0xray/foundry inspect --skip-live` is the receipt.
+
 ## Memory routing + Repertoire (v3.3+)
 
 `xray/features.json` → `memory_routing` (schema: `features.schema.json`):
@@ -141,7 +143,7 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 | Source | `src/` |
 | Config | `.xray/` or `config/` |
 
-**Root essentials only:** `README.md`, `CHANGELOG.md`, `package.json`, `AGENTS.md`, `SKILLS.md`, `tsconfig.json`.
+**Root essentials only:** `README.md`, `CHANGELOG.md`, `package.json`, `AGENTS.md`, `SKILLS.md`, `llms.txt`, `tsconfig.json`.
 
 ## Available agents (42 YML surfaces)
 
@@ -207,6 +209,8 @@ Full skill mapping: [SKILLS.md](SKILLS.md).
 
 | Topic | Path |
 |-------|------|
+| Agent map (`llms.txt`) | `llms.txt` |
+| Foundry / mill plant | `docs-site/docs/architecture/v4-foundry.md` |
 | Features since 3.1 | `docs-site/docs/guides/features-since-3.1.md` |
 | features.json | `docs-site/docs/guides/features-json.md` |
 | Platform integrations | `docs-site/docs/guides/integrations.md` |
@@ -218,4 +222,4 @@ Full skill mapping: [SKILLS.md](SKILLS.md).
 
 ## Release artifacts
 
-`npm run release:patch` updates: `package.json`, `CHANGELOG.md`, `README.md`, `AGENTS.md`, `AGENTS-consumer.md`, `SKILLS.md`, Docusaurus guides.
+`npm run release:patch` updates: `package.json`, `CHANGELOG.md`, `README.md`, `AGENTS.md`, `AGENTS-consumer.md`, `SKILLS.md`, `llms.txt`, Docusaurus guides.

package/README.md

@@ -25,9 +25,10 @@ Consumer `npm install 0xray` auto-wires four platform bridges and seven MCP serv
 ## Quick Start
 
 ```bash
-npm install 0xray          # postinstall: 4 bridges + 7 MCPs + AGENTS.md + SKILLS.md + .mcp.json
+npm install 0xray          # postinstall: mill+inspect plant + 4 bridges + 7 MCPs + AGENTS.md + .mcp.json
 npx 0xray status          # verify install
 npx 0xray setup            # optional: symlinks, hook extras
+npx @0xray/foundry inspect --skip-live   # mill receipt (chat is not a receipt)
 ```
 
 Manual per-platform install (idempotent, same result as postinstall):
@@ -50,6 +51,8 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 
 | Version | Highlights |
 |---------|------------|
+| **Unreleased** | Shop plant first-class (`shop-extract`, `shop-witness`, `shop-pin` + `foundry.json` `shopPlant`). Not `"costume": true`. Root `llms.txt`. Pack→tmp fasten proof. |
+| **4.0.9** | Mill target: postinstall does not mill npm global prefix or `_npx` as a consumer. Isolated HOME skips machine `~/.grok`. |
 | **4.0.0** | Exo + temperament. Constitution always on; ceremony by host. Repertoire organ on (vendored 0.2). Station card survives compact/host-swap. **On npm.** [vision](docs-site/docs/architecture/v4-vision.md) · [now](docs-site/docs/architecture/v4-now.md) |
 | **3.4.1** | Unified `install-bridges.cjs` on postinstall — OpenCode, Grok, Hermes, OpenClaw in one pass. All 7 MCPs servers via `npx -y 0xray mcp <cmd>` (no `dist/` paths). Canonical `release.mjs` pipeline. |
 | **3.3.1** | Orchestrator confidence gate wired into execution planning. |
@@ -60,7 +63,7 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 
 ### Consolidations
 
-- **One consumer install path** — `postinstall.cjs` → `installAllBridges()` replaces scattered per-platform setup.
+- **One consumer install path** — `postinstall.cjs` → `installAllBridges()` replaces scattered per-platform setup. **4.0.9:** does not mill npm global prefix or `_npx`.
 - **7-server MCP surface** — `.mcp.json` SSOT; Grok plugin and all bridges share `XRAY_MCP_SERVERS`.
 - **Dev vs consumer AGENTS** — `AGENTS.md` (framework) vs `AGENTS-consumer.md` (copied to consumer projects on install).
 - **Release pipeline** — `npm run release:patch|minor|major` → reconcile → gate → artifacts → tag → publish.
@@ -99,13 +102,16 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 
 On `npm install 0xray` in a consumer project, postinstall automatically:
 
-1. Copies **`AGENTS-consumer.md` → `AGENTS.md`** and ships root **`SKILLS.md`**
-2. Seeds **`.gitignore`** from `.gitignore.default` (if absent)
-3. Deploys **`.xray/`** config (`codex.json`, `features.json`, `config.json`)
-4. Writes project **`.mcp.json`** with 7 MCPs servers (`npx -y 0xray mcp …`)
-5. Installs **4 bridges**: OpenCode (agents + `opencode.json`), Grok (plugin + global skills), Hermes (`~/.hermes/plugins/xray-hermes`), OpenClaw (config + skills)
-6. Syncs **45 framework skills** to platform skill dirs
-7. Installs git pre-commit hook (non-blocking if not a git repo)
+1. Copies **`AGENTS-consumer.md` → `AGENTS.md`**. Does **not** write consumer-root **`SKILLS.md`**.
+2. Fastens **mill plant** (`mill` + `inspect`). Not a 45-skill / 42-agent costume dump. `foundry.json` `"costume": true` is the opt-in dump.
+3. Seeds **`.gitignore`** from `.gitignore.default` (if absent)
+4. Deploys **`.xray/`** config (`codex.json`, `features.json`, `config.json`) then overlays **their** plant
+5. Writes project **`.mcp.json`** with 7 MCPs servers (`npx -y 0xray mcp …`)
+6. Installs **4 bridges**: OpenCode, Grok, Hermes, OpenClaw (PPE + wiring; mill plant, not costume)
+7. Factory shop plant (`shop-extract`, `shop-witness`, `shop-pin` from groover-hangar) may coexist when worn. Extra shops: `foundry.json` `shopPlant`. Not costume.
+8. Installs git pre-commit hook (non-blocking if not a git repo)
+
+See [llms.txt](llms.txt) for the agent map. Catalog of 45 skills lives in [SKILLS.md](SKILLS.md) — that is the exo catalog, not default consumer wear.
 
 ## Seven MCP Servers (consumer)
 
@@ -197,9 +203,11 @@ Docs: [memory routing](docs-site/docs/guides/memory-routing.md) · [Repertoire](
 |-------|-----------------|
 | Four-floor consumer e2e | OpenCode 34/0 · Grok 63/0 · Hermes 39/0/2 · OpenClaw 96/0/1 (npm 4.0.0 pack) |
 | Consumer smoke | `npm run release:gate` — pack → clean install → 7 MCPs + 4 bridges + organ on |
+| Pack → tmp proof | `npm run pack:tmp-proof` — tgz install + `foundry mint --skip-live` + hangar shops + inspect (no costume dump). Playwright n/a (CLI). |
 
 ```bash
 npm test
+npm run pack:tmp-proof  # pack → tmp fasten + hangar inspect
 npm run release:gate    # full release gate (before upload)
 npm run release:npm     # gate + prepare + npm publish --access public
 ```

package/SKILLS.md

@@ -1,10 +1,10 @@
 # 0xray Skills
 
-**4.0** — **45 skills** · invoked via `xray-skills` MCP · synced on postinstall
+**4.0** — a suit that survives the context window
 
-xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) across the full software lifecycle. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`), agent `@mentions`, or platform skill directories after postinstall.
+**45 skills** in this exo catalog. Default consumer plant is **`mill` + `inspect`**, not this dump. `npm install 0xray` does **not** sync 45 skills unless `foundry.json` `"costume": true`. Factory shop plant (`shop-extract`, `shop-witness`, `shop-pin`) coexists with mill plant when a hangar wears those shops. Extra shops: `foundry.json` `shopPlant`. Agent map: [llms.txt](llms.txt).
 
-Consumer `npm install 0xray` syncs all 45 skills to Grok, Hermes, and OpenClaw skill dirs. Framework repo also ships this file to consumers (3.1.1+).
+xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) as the **costume / self-plant catalog**. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`) or when you plant them. This file is the exo catalog — mill does **not** write it to the consumer root.
 
 ---
 

package/dist/AGENTS.md

@@ -20,7 +20,7 @@ xray provides intelligent multi-agent orchestration with automatic delegation an
 - **External Governance** — Dynamo Solar SSOT, 69-term Codex
 - **Autonomous Engine** — thinDispatch 7-flow, AsideContext, confidence gate
 
-Agents are declared in `src/opencode/agents/*.yml` — the YML SSOT. Skills live in `src/skills/*/SKILL.md` — see [SKILLS.md](SKILLS.md). Consumer projects receive slimmed copies via postinstall (`AGENTS-consumer.md` → `AGENTS.md`, skills synced to platform dirs).
+Agents are declared in `src/opencode/agents/*.yml` — the YML SSOT. Skills live in `src/skills/*/SKILL.md` — see [SKILLS.md](SKILLS.md) for the exo catalog. Consumer default plant is **mill + inspect**, not a 45-skill sync (`AGENTS-consumer.md` → `AGENTS.md`). Factory hangar shops coexist via shop plant. See [llms.txt](llms.txt).
 
 ## Consumer MCP surface (7 servers)
 
@@ -42,14 +42,16 @@ Governance deliberation: **code-review**, **security-audit**, **researcher** wit
 
 `postinstall.cjs` → `installAllBridges()`:
 
-1. `AGENTS-consumer.md` → `AGENTS.md`
-2. `SKILLS.md` + 45 skills → platform skill directories
+1. `AGENTS-consumer.md` → `AGENTS.md` (does **not** write consumer-root `SKILLS.md`)
+2. Fasten mill plant (`mill` + `inspect`). Not a 45-skill costume dump unless `foundry.json` `"costume": true`
 3. `.gitignore.default` → `.gitignore` (if absent)
-4. `.xray/` config (`codex.json`, `features.json`, `config.json`)
+4. `.xray/` config (`codex.json`, `features.json`, `config.json`) then overlay their plant
 5. `.mcp.json` (7 servers)
 6. Four bridges: OpenCode, Grok, Hermes, OpenClaw
 7. Optional git hooks
 
+**Shop plant:** `shop-extract`, `shop-witness`, `shop-pin` (groover-hangar) are first-class with mill plant. Extra shops: `foundry.json` `shopPlant`. Not `"costume": true`. `npx @0xray/foundry inspect --skip-live` is the receipt.
+
 ## Memory routing + Repertoire (v3.3+)
 
 `xray/features.json` → `memory_routing` (schema: `features.schema.json`):
@@ -141,7 +143,7 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 | Source | `src/` |
 | Config | `.xray/` or `config/` |
 
-**Root essentials only:** `README.md`, `CHANGELOG.md`, `package.json`, `AGENTS.md`, `SKILLS.md`, `tsconfig.json`.
+**Root essentials only:** `README.md`, `CHANGELOG.md`, `package.json`, `AGENTS.md`, `SKILLS.md`, `llms.txt`, `tsconfig.json`.
 
 ## Available agents (42 YML surfaces)
 
@@ -207,6 +209,8 @@ Full skill mapping: [SKILLS.md](SKILLS.md).
 
 | Topic | Path |
 |-------|------|
+| Agent map (`llms.txt`) | `llms.txt` |
+| Foundry / mill plant | `docs-site/docs/architecture/v4-foundry.md` |
 | Features since 3.1 | `docs-site/docs/guides/features-since-3.1.md` |
 | features.json | `docs-site/docs/guides/features-json.md` |
 | Platform integrations | `docs-site/docs/guides/integrations.md` |
@@ -218,4 +222,4 @@ Full skill mapping: [SKILLS.md](SKILLS.md).
 
 ## Release artifacts
 
-`npm run release:patch` updates: `package.json`, `CHANGELOG.md`, `README.md`, `AGENTS.md`, `AGENTS-consumer.md`, `SKILLS.md`, Docusaurus guides.
+`npm run release:patch` updates: `package.json`, `CHANGELOG.md`, `README.md`, `AGENTS.md`, `AGENTS-consumer.md`, `SKILLS.md`, `llms.txt`, Docusaurus guides.

package/dist/CHANGELOG.md

@@ -6,6 +6,14 @@ The format is based on [Conventional Commits](https://www.conventionalcommits.or
 
 ## [Unreleased]
 
+### ✨ Features
+- Mill inspect treats factory shop plant (`shop-extract`, `shop-witness`, `shop-pin`) as first-class with mill plant. `foundry.json` `shopPlant` names more shops. Not `"costume": true`. Nested mill stays **0.1.9**.
+- Exo agent map: root `llms.txt` (mill+inspect plant, 7 MCPs, hangar/`shopPlant` coexistence, Codex 69, no costume dump). README / AGENTS / SKILLS / Docusaurus no longer claim default 45-skill sync.
+- Pack → tmp suit proof: `npm run pack:tmp-proof` (and consumer smoke) installs the packed tgz, runs `foundry mint --skip-live`, plants factory hangar shops, and inspects without costume dump. Playwright n/a (mill CLI).
+
+### 🐛 Bug Fixes
+- **Consumer install of packed `0xray`** — stop shipping `@0xray/repertoire` as `file:./vendor/@0xray/repertoire`. npm `--install-links`, pnpm, and yarn resolve that path from the **consumer** root (`ENOENT .../vendor/@0xray/repertoire/package.json`), not from `node_modules/0xray`. The organ stays in the tarball at `vendor/@0xray/repertoire/`; postinstall wears it into `node_modules/@0xray/repertoire`. Fresh `npm install 0xray` / `npm install 0xray-*.tgz` no longer needs a consumer-root `vendor/` tree. Mill plant (`mill`+`inspect`) unchanged.
+
 ### 🔧 Maintenance
 - Foundry mill: one bumper (`reconcile-version.mjs`); `version-manager.mjs` is `--artifacts-only` (JSON + CHANGELOG). Bump and `--tag` are refused.
 - Docs mill verifies era kernel headers (`4.0`) and skill counts; it does not rewrite markdown prose.
@@ -34,6 +42,22 @@ The format is based on [Conventional Commits](https://www.conventionalcommits.or
 
 ---
 
+## [4.0.10] - 2026-09-12
+
+### 🔄 Changes
+
+- Version bump
+
+---
+
+## [4.0.9] - 2026-09-11
+
+Postinstall does **not** mill npm global prefix or npx cache as a consumer. `resolveConsumerTargetDir` treats `_npx` and a prefix without `package.json` as an install prefix: mill `INIT_CWD` if it is a real project, else mill the 0xray package (dogfood skip). Isolated HOME still skips machine `~/.grok`. Mill plant stays `mill` + `inspect`. Not 45/42 costume. Nested mill stays **0.1.9**. Not 5.0.0.
+
+- fix(foundry): do not mill npm global prefix or npx cache as a consumer (b08b19612)
+
+---
+
 ## [4.0.8] - 2026-09-11
 
 ### 🔄 Changes

package/dist/README.md

@@ -25,9 +25,10 @@ Consumer `npm install 0xray` auto-wires four platform bridges and seven MCP serv
 ## Quick Start
 
 ```bash
-npm install 0xray          # postinstall: 4 bridges + 7 MCPs + AGENTS.md + SKILLS.md + .mcp.json
+npm install 0xray          # postinstall: mill+inspect plant + 4 bridges + 7 MCPs + AGENTS.md + .mcp.json
 npx 0xray status          # verify install
 npx 0xray setup            # optional: symlinks, hook extras
+npx @0xray/foundry inspect --skip-live   # mill receipt (chat is not a receipt)
 ```
 
 Manual per-platform install (idempotent, same result as postinstall):
@@ -50,6 +51,8 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 
 | Version | Highlights |
 |---------|------------|
+| **Unreleased** | Shop plant first-class (`shop-extract`, `shop-witness`, `shop-pin` + `foundry.json` `shopPlant`). Not `"costume": true`. Root `llms.txt`. Pack→tmp fasten proof. |
+| **4.0.9** | Mill target: postinstall does not mill npm global prefix or `_npx` as a consumer. Isolated HOME skips machine `~/.grok`. |
 | **4.0.0** | Exo + temperament. Constitution always on; ceremony by host. Repertoire organ on (vendored 0.2). Station card survives compact/host-swap. **On npm.** [vision](docs-site/docs/architecture/v4-vision.md) · [now](docs-site/docs/architecture/v4-now.md) |
 | **3.4.1** | Unified `install-bridges.cjs` on postinstall — OpenCode, Grok, Hermes, OpenClaw in one pass. All 7 MCPs servers via `npx -y 0xray mcp <cmd>` (no `dist/` paths). Canonical `release.mjs` pipeline. |
 | **3.3.1** | Orchestrator confidence gate wired into execution planning. |
@@ -60,7 +63,7 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 
 ### Consolidations
 
-- **One consumer install path** — `postinstall.cjs` → `installAllBridges()` replaces scattered per-platform setup.
+- **One consumer install path** — `postinstall.cjs` → `installAllBridges()` replaces scattered per-platform setup. **4.0.9:** does not mill npm global prefix or `_npx`.
 - **7-server MCP surface** — `.mcp.json` SSOT; Grok plugin and all bridges share `XRAY_MCP_SERVERS`.
 - **Dev vs consumer AGENTS** — `AGENTS.md` (framework) vs `AGENTS-consumer.md` (copied to consumer projects on install).
 - **Release pipeline** — `npm run release:patch|minor|major` → reconcile → gate → artifacts → tag → publish.
@@ -99,13 +102,16 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 
 On `npm install 0xray` in a consumer project, postinstall automatically:
 
-1. Copies **`AGENTS-consumer.md` → `AGENTS.md`** and ships root **`SKILLS.md`**
-2. Seeds **`.gitignore`** from `.gitignore.default` (if absent)
-3. Deploys **`.xray/`** config (`codex.json`, `features.json`, `config.json`)
-4. Writes project **`.mcp.json`** with 7 MCPs servers (`npx -y 0xray mcp …`)
-5. Installs **4 bridges**: OpenCode (agents + `opencode.json`), Grok (plugin + global skills), Hermes (`~/.hermes/plugins/xray-hermes`), OpenClaw (config + skills)
-6. Syncs **45 framework skills** to platform skill dirs
-7. Installs git pre-commit hook (non-blocking if not a git repo)
+1. Copies **`AGENTS-consumer.md` → `AGENTS.md`**. Does **not** write consumer-root **`SKILLS.md`**.
+2. Fastens **mill plant** (`mill` + `inspect`). Not a 45-skill / 42-agent costume dump. `foundry.json` `"costume": true` is the opt-in dump.
+3. Seeds **`.gitignore`** from `.gitignore.default` (if absent)
+4. Deploys **`.xray/`** config (`codex.json`, `features.json`, `config.json`) then overlays **their** plant
+5. Writes project **`.mcp.json`** with 7 MCPs servers (`npx -y 0xray mcp …`)
+6. Installs **4 bridges**: OpenCode, Grok, Hermes, OpenClaw (PPE + wiring; mill plant, not costume)
+7. Factory shop plant (`shop-extract`, `shop-witness`, `shop-pin` from groover-hangar) may coexist when worn. Extra shops: `foundry.json` `shopPlant`. Not costume.
+8. Installs git pre-commit hook (non-blocking if not a git repo)
+
+See [llms.txt](llms.txt) for the agent map. Catalog of 45 skills lives in [SKILLS.md](SKILLS.md) — that is the exo catalog, not default consumer wear.
 
 ## Seven MCP Servers (consumer)
 
@@ -197,9 +203,11 @@ Docs: [memory routing](docs-site/docs/guides/memory-routing.md) · [Repertoire](
 |-------|-----------------|
 | Four-floor consumer e2e | OpenCode 34/0 · Grok 63/0 · Hermes 39/0/2 · OpenClaw 96/0/1 (npm 4.0.0 pack) |
 | Consumer smoke | `npm run release:gate` — pack → clean install → 7 MCPs + 4 bridges + organ on |
+| Pack → tmp proof | `npm run pack:tmp-proof` — tgz install + `foundry mint --skip-live` + hangar shops + inspect (no costume dump). Playwright n/a (CLI). |
 
 ```bash
 npm test
+npm run pack:tmp-proof  # pack → tmp fasten + hangar inspect
 npm run release:gate    # full release gate (before upload)
 npm run release:npm     # gate + prepare + npm publish --access public
 ```

package/dist/SKILLS.md

@@ -1,10 +1,10 @@
 # 0xray Skills
 
-**4.0** — **45 skills** · invoked via `xray-skills` MCP · synced on postinstall
+**4.0** — a suit that survives the context window
 
-xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) across the full software lifecycle. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`), agent `@mentions`, or platform skill directories after postinstall.
+**45 skills** in this exo catalog. Default consumer plant is **`mill` + `inspect`**, not this dump. `npm install 0xray` does **not** sync 45 skills unless `foundry.json` `"costume": true`. Factory shop plant (`shop-extract`, `shop-witness`, `shop-pin`) coexists with mill plant when a hangar wears those shops. Extra shops: `foundry.json` `shopPlant`. Agent map: [llms.txt](llms.txt).
 
-Consumer `npm install 0xray` syncs all 45 skills to Grok, Hermes, and OpenClaw skill dirs. Framework repo also ships this file to consumers (3.1.1+).
+xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) as the **costume / self-plant catalog**. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`) or when you plant them. This file is the exo catalog — mill does **not** write it to the consumer root.
 
 ---
 

package/dist/integrations/openclaw/plugin/xray-pre-tool/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xray-pre-tool",
-  "version": "4.0.4",
+  "version": "4.0.10",
   "private": true,
   "type": "module",
   "description": "0xRay constitution + temperament PreToolUse for OpenClaw",

package/dist/memory-routing/provider-loader.js

@@ -22,6 +22,7 @@ function resolveUnavailableReason(provider) {
 const REPERTOIRE_CANDIDATE_PATHS = [
     'node_modules/@0xray/repertoire/dist/provider/memory-routing-provider.js',
     'vendor/@0xray/repertoire/dist/provider/memory-routing-provider.js',
+    'node_modules/0xray/vendor/@0xray/repertoire/dist/provider/memory-routing-provider.js',
     '../repertoire/dist/provider/memory-routing-provider.js',
     '../../repertoire/dist/provider/memory-routing-provider.js',
     '../../../repertoire/dist/provider/memory-routing-provider.js',
@@ -73,6 +74,9 @@ function leftoverRepertoireModulePath(cwd) {
     const vendor = join(cwd, 'vendor', '@0xray', 'repertoire', 'dist', 'provider', 'memory-routing-provider.js');
     if (existsSync(vendor))
         return vendor;
+    const packedVendor = join(cwd, 'node_modules', '0xray', 'vendor', '@0xray', 'repertoire', 'dist', 'provider', 'memory-routing-provider.js');
+    if (existsSync(packedVendor))
+        return packedVendor;
     const sibling = resolve(cwd, '../repertoire/dist/provider/memory-routing-provider.js');
     if (existsSync(sibling))
         return sibling;

package/llms.txt

@@ -0,0 +1,59 @@
+# 0xray
+
+> Exo for coding agents. A suit that survives the context window. Not a catalog of 45 skills.
+
+**4.0** — mill+inspect plant, 7 MCPs, Codex 69. Constitution always on.
+
+Default consumer wear is **mill plant** (`mill` + `inspect`), not a 45-skill / 42-agent costume dump. `foundry.json` `"costume": true` is the opt-in dump. Do not use costume to land hangar shops.
+
+## Wear (what a stranger gets)
+
+- `npm install 0xray` — postinstall fastens mill+inspect, writes 7 MCP `.mcp.json`, four host bridges (OpenCode, Grok, Hermes, OpenClaw), overlays their plant. Does **not** write consumer-root `SKILLS.md`.
+- `npx @0xray/foundry mint --skip-live` — re-fasten mill plant, then inspect.
+- `npx @0xray/foundry inspect --skip-live` — plant-vs-worn, receipt, CI. Chat is not a receipt.
+
+## Shop plant (hangar coexistence)
+
+Factory shop plant is first-class with mill plant: `shop-extract`, `shop-witness`, `shop-pin` (groover-hangar). Worn shops are **not** a costume dump.
+
+- Extra shop names: `foundry.json` `"shopPlant"` (string[] / plant dir / `{ skills, dir }`).
+- Field is `shopPlant`, not `hangarPlant` (mill plant copy cannot say hangar).
+- Undeclared leftovers (including undeclared `shop-*`, leftover `enforcer`) still fail plant-vs-worn.
+
+## Seven MCP servers
+
+Registered in `.mcp.json` as `npx -y 0xray mcp <cmd>`:
+
+| Server | Role |
+|--------|------|
+| `xray-governance` | Proposal governance, Codex snapshot |
+| `xray-skills` | Skill invoke (catalog exists; default plant is still mill+inspect) |
+| `xray-orchestrator` | thinDispatch, AsideContext, confidence gate |
+| `xray-enforcer` | Codex compliance |
+| `xray-researcher` | Codebase exploration |
+| `xray-code-review` | Proposal quality |
+| `xray-architect-tools` | System design |
+
+Not an 8th `xray-*` server. Repertoire is a vendored organ (`npx @0xray/repertoire mcp`), enable-when-resolves.
+
+## Codex 69 (always on)
+
+`.xray/codex.json` — 69 terms. PPE (`evaluatePreToolGate`) denies Codex 11 / 29 / 69. No new MCP / skill / handler surface. No `any`. No `eval`. Temperament scales ceremony (guided vs frontier), not whether governance exists.
+
+## Agent map (exo, not dump)
+
+- **Mill** — fasten their plant; factory discipline. Nested mill `@0xray/foundry` 0.1.9.
+- **Inspect** — diffs, plant-vs-worn, mill receipt, CI, live tarball GET.
+- **Hangar** — plants factory shops on the four floors. Coexists with mill plant via shop plant allowlist.
+- **42 YML / 45 SKILL.md** — exo catalog in this repo. Not default consumer wear.
+
+## Docs
+
+- [README.md](README.md) — exo landing
+- [AGENTS.md](AGENTS.md) — framework card
+- [AGENTS-consumer.md](AGENTS-consumer.md) — consumer card (copied to `AGENTS.md` on install)
+- [SKILLS.md](SKILLS.md) — catalog (costume / self-plant, not default sync)
+- [Foundry](docs-site/docs/architecture/v4-foundry.md) — mill vs exo, shopPlant
+- [Features since 3.1](docs-site/docs/guides/features-since-3.1.md)
+
+Playwright / UI: n/a. This mill is CLI.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "4.0.8",
+  "version": "4.0.10",
   "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
   "readme": "README.md",
   "license": "MIT",
@@ -120,6 +120,7 @@
     "release:dry": "node scripts/foundry/release.mjs patch --dry-run",
     "version:reconcile": "node scripts/foundry/reconcile-version.mjs",
     "consumer:smoke": "node scripts/node/consumer-install-smoke.mjs",
+    "pack:tmp-proof": "node scripts/node/pack-tmp-suit-proof.mjs",
     "release:gate": "node scripts/foundry/release-gate.mjs",
     "release:docs-check": "node scripts/foundry/validate-release-docs.mjs",
     "pre-publish-guard": "node scripts/node/pre-publish-guard.js",
@@ -189,6 +190,7 @@
     ".opencode/enforcer-config.json",
     "opencode.json",
     "README.md",
+    "llms.txt",
     ".mcp.json",
     "AGENTS.md",
     "AGENTS-consumer.md",
@@ -207,7 +209,6 @@
     "vendor/@0xray/repertoire/"
   ],
   "dependencies": {
-    "@0xray/repertoire": "file:./vendor/@0xray/repertoire",
     "@modelcontextprotocol/sdk": "^1.0.4",
     "commander": "^11.1.0",
     "express": "^5.2.1",

package/scripts/foundry/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## [Unreleased]
+
+Shop plant is first-class with mill plant. `shop-extract`, `shop-witness`, `shop-pin` (and `foundry.json` `shopPlant`) are not a costume dump. `"costume": true` still required for 45/42. No mill version bump.
+
 ## [0.1.9] - 2026-09-09
 
 Inventory writes `dna` (keccak256 of canonical JSON without `mintedAt`). Inspect receipt echoes `dna` + pack `0xray-suit` for Groover GRVR. Mill does not mint on chain. Not an 8th MCP. Not 5.0.

package/scripts/foundry/README.md

@@ -55,6 +55,10 @@ After mill plant is fastened, overlay their plant (defaults; remap in `foundry.j
 
 **Default mill plant:** `mill` + `inspect` (inspect AI work). Fastens a suit, not an empty one. Not 45/42 costume. `foundry.json` `"costume": true` copies that dump. Factory Repertoire still enable-when-resolves. PPE stays worn.
 
+**Shop plant:** `shop-extract`, `shop-witness`, `shop-pin` are first-class with mill plant. Inspect does not treat those worn names as a costume dump. `foundry.json` `"shopPlant"` names more shops (array), a plant dir (string), or `{ "skills": [...], "dir": "..." }`. This is not `"costume": true` and does not copy 45/42.
+
+**4.0.9 mill target (0xray postinstall, not this mill package):** `install-bridges.cjs` does not mill npm global prefix or npx `_npx` as a consumer. Isolated HOME skips machine `~/.grok`. Nested mill stays **0.1.9**.
+
 ## Publish this mill
 
 From **this directory**, not the 0xray repo root:

package/scripts/foundry/inspect.mjs

@@ -80,12 +80,14 @@ function checkPlantVsWorn(root, millRoot) {
     skills: mint.listConsumerSkillNames(root, params.skills),
     agents: mint.listConsumerAgentFiles(root, params.agents),
   };
+  const shopPlant = mint.loadShopPlant(root);
   try {
     mint.assertNoCostumeDump(root, millPlant, tree);
     return {
       id: "plant-vs-worn",
       ok: true,
       millPlant: millPlant.skills,
+      shopPlant,
       tree: tree.skills,
       worn: mint.wornSkillNames(root),
     };
@@ -96,6 +98,7 @@ function checkPlantVsWorn(root, millRoot) {
       detail: err instanceof Error ? err.message : String(err),
       extraSkills: err.extraSkills || [],
       extraAgents: err.extraAgents || [],
+      shopPlant,
     };
   }
 }

package/scripts/foundry/mint-suit.cjs

@@ -21,6 +21,9 @@ const DEFAULT_PARAMS = {
   agentsCard: "xray/AGENTS.md",
 };
 
+/** Factory shop plant. First-class with mill plant. Not 45/42 costume. */
+const FACTORY_SHOP_SKILLS = ["shop-extract", "shop-witness", "shop-pin"];
+
 function deepMerge(src, dest) {
   if (typeof src !== "object" || src === null) return dest !== undefined ? dest : src;
   if (Array.isArray(src)) return Array.isArray(dest) ? dest : src;
@@ -298,13 +301,59 @@ function wornAgentFiles(targetDir) {
   return listAgentFilesAt(path.join(targetDir, ".opencode", "agents"));
 }
 
+function normalizeNameList(value) {
+  if (!Array.isArray(value)) return [];
+  const names = [];
+  for (const item of value) {
+    if (typeof item !== "string") continue;
+    const name = item.trim();
+    if (name) names.push(name);
+  }
+  return names;
+}
+
+function shopPlantFromDir(targetDir, rel) {
+  const resolved = resolveInside(targetDir, rel);
+  if (!resolved || !isDirectory(resolved)) return [];
+  const nested = path.join(resolved, "skills");
+  return listSkillNamesAt(isDirectory(nested) ? nested : resolved);
+}
+
+function declaredShopPlant(targetDir) {
+  const raw = loadFoundryExtra(targetDir).shopPlant;
+  const names = [];
+  if (Array.isArray(raw)) {
+    names.push(...normalizeNameList(raw));
+  } else if (typeof raw === "string" && raw.trim()) {
+    names.push(...shopPlantFromDir(targetDir, raw.trim()));
+  } else if (raw && typeof raw === "object") {
+    names.push(...normalizeNameList(raw.skills));
+    if (typeof raw.dir === "string" && raw.dir.trim()) {
+      names.push(...shopPlantFromDir(targetDir, raw.dir.trim()));
+    }
+  }
+  return names;
+}
+
+/** Factory shop names plus foundry.json shopPlant. Not costume. */
+function loadShopPlant(targetDir) {
+  return [...new Set([...FACTORY_SHOP_SKILLS, ...declaredShopPlant(targetDir)])];
+}
+
 function previousTreeAllowlist(targetDir) {
   const file = path.join(targetDir, ".xray", "foundry-inventory.json");
   if (!fs.existsSync(file)) return { skills: [], agents: [] };
   try {
     const inventory = JSON.parse(fs.readFileSync(file, "utf8"));
+    const shopFromInv = inventory?.shopPlant;
+    const shopSkills = Array.isArray(shopFromInv)
+      ? normalizeNameList(shopFromInv)
+      : normalizeNameList(shopFromInv?.skills);
     return {
-      skills: Array.isArray(inventory?.tree?.skills) ? inventory.tree.skills : [],
+      skills: [
+        ...(Array.isArray(inventory?.tree?.skills) ? inventory.tree.skills : []),
+        ...shopSkills,
+      ],
       agents: Array.isArray(inventory?.tree?.agents) ? inventory.tree.agents : [],
     };
   } catch {
@@ -312,13 +361,15 @@ function previousTreeAllowlist(targetDir) {
   }
 }
 
-/** Extra worn names that are neither mill plant, their plant, nor a prior overlay. */
+/** Extra worn names that are neither mill plant, their plant, shop plant, nor a prior overlay. */
 function costumeDumpExtras(targetDir, millPlant, tree) {
   const prior = previousTreeAllowlist(targetDir);
+  const shopPlant = loadShopPlant(targetDir);
   const allowedSkills = new Set([
     ...(Array.isArray(millPlant?.skills) ? millPlant.skills : []),
     ...(Array.isArray(tree?.skills) ? tree.skills : []),
     ...prior.skills,
+    ...shopPlant,
   ]);
   const allowedAgents = new Set([
     ...(Array.isArray(millPlant?.agents) ? millPlant.agents : []),
@@ -427,6 +478,9 @@ function mintConsumerFromSsot(packageRoot, targetDir, log, tree) {
       skills: Array.isArray(tree?.millPlantSkills) ? tree.millPlantSkills : [],
       agents: Array.isArray(tree?.millPlantAgents) ? tree.millPlantAgents : [],
     },
+    shopPlant: {
+      skills: Array.isArray(tree?.shopPlantSkills) ? tree.shopPlantSkills : loadShopPlant(targetDir),
+    },
     costume,
     facets: {
       constitution,
@@ -465,6 +519,7 @@ function mintConsumerSuit(millPackageRoot, targetDir, log) {
   const tree = overlayConsumerTree(targetDir, log, params);
   tree.millPlantSkills = millPlant.skills;
   tree.millPlantAgents = millPlant.agents;
+  tree.shopPlantSkills = loadShopPlant(targetDir);
   tree.codex = overlayJsonFacet(
     resolveInside(targetDir, params.codex),
     path.join(targetDir, ".xray", "codex.json"),
@@ -491,9 +546,12 @@ function mintConsumerSuit(millPackageRoot, targetDir, log) {
 
 module.exports = {
   DEFAULT_PARAMS,
+  FACTORY_SHOP_SKILLS,
   deepMerge,
   loadFoundryParams,
   loadFoundryExtra,
+  loadShopPlant,
+  declaredShopPlant,
   wantsCostume,
   millPlantDir,
   listSkillNamesAt,

package/scripts/foundry/plant/skills/inspect/SKILL.md

@@ -12,7 +12,7 @@ Mill **does** these checks (`npx @0xray/foundry inspect`). Mint fails on a costu
 ## What mill inspects
 
 1. **Diff.** `git status` / `git diff --stat` of the milled cwd. Ignore the agent's summary if the diff disagrees.
-2. **Plant vs worn.** `src/skills`, `src/opencode/agents` vs `.opencode/skills`, `.opencode/agents`. Same name: plant wins. Costume dump (worn names they did not plant and mill did not fasten) fails mint unless `foundry.json` has `"costume": true`.
+2. **Plant vs worn.** `src/skills`, `src/opencode/agents` vs `.opencode/skills`, `.opencode/agents`. Same name: plant wins. Shop plant (`shop-extract`, `shop-witness`, `shop-pin`, plus `foundry.json` `shopPlant`) is first-class with mill plant. Costume dump (worn names they did not plant, mill did not fasten, and shop plant did not name) fails mint unless `foundry.json` has `"costume": true`.
 3. **Mill receipt.** `.xray/foundry-inventory.json` — mill name/version, `suit` (`fastened` / `overlay` / `costume`), `millPlant.skills` must include `mill` and `inspect`.
 4. **CI.** GitHub mill CI report (`.opencode/logs/ci-cd-monitor-report.json`), not a green check in chat. No token is a skip, not a pass invented.
 5. **Live PUT.** HTTP 200 on the npm `.tgz`. Metadata without a tarball is not shipped.