0xray 4.0.9 → 4.0.11

package/.grok-plugin/plugin.json

@@ -0,0 +1,20 @@
+{
+  "name": "0xray",
+  "version": "4.0.11",
+  "description": "0xRay suit for Grok, Hermes, OpenClaw, OpenCode: mill+inspect, Codex, 7 MCP servers. Costume 45/42 is opt-in foundry, not the default wear.",
+  "author": {
+    "name": "0xRay AI",
+    "url": "https://0xray.ai"
+  },
+  "homepage": "https://github.com/0xRayAI/xray",
+  "repository": "https://github.com/0xRayAI/xray",
+  "keywords": [
+    "0xray",
+    "mill",
+    "inspect",
+    "codex",
+    "mcp",
+    "suit"
+  ],
+  "mcpServers": ".mcp.json"
+}

package/.xray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "4.0.9",
+  "version": "4.0.11",
   "description": "0xRay Framework - Unified Feature Configuration",
   "suit_temperament": {
     "profile": "auto",

package/AGENTS-consumer.md

@@ -20,6 +20,7 @@ Before other work, Read `.xray/state/STATION.md`. Compaction and host change are
 
 - Copies this file → **`AGENTS.md`** in your project root
 - Fastens mill plant (`mill` + `inspect`) then overlays **your** `src/skills` (same name wins). `npx @0xray/foundry inspect` runs the mill checks (chat is not a receipt). Does **not** dump 45/42 costume unless `foundry.json` `"costume": true`. Does **not** write root **`SKILLS.md`**
+- Factory shop plant (`shop-extract`, `shop-witness`, `shop-pin` from groover-hangar) is first-class with mill plant. Extra shops: `foundry.json` `"shopPlant"`. Not costume.
 - Seeds **`.gitignore`** (from template, if absent)
 - Deploys **`.xray/`** (`codex.json`, `features.json`, `config.json`) then overlays **your** mill SSOT (`xray/codex.json`, `xray/features.json`, `src/skills`, `src/opencode/agents`; remap with `foundry.json`)
 - Writes **`.mcp.json`** with 7 MCPs servers (`npx -y 0xray mcp …`)

package/AGENTS.md

@@ -20,7 +20,7 @@ xray provides intelligent multi-agent orchestration with automatic delegation an
 - **External Governance** — Dynamo Solar SSOT, 69-term Codex
 - **Autonomous Engine** — thinDispatch 7-flow, AsideContext, confidence gate
 
-Agents are declared in `src/opencode/agents/*.yml` — the YML SSOT. Skills live in `src/skills/*/SKILL.md` — see [SKILLS.md](SKILLS.md). Consumer projects receive slimmed copies via postinstall (`AGENTS-consumer.md` → `AGENTS.md`, skills synced to platform dirs).
+Agents are declared in `src/opencode/agents/*.yml` — the YML SSOT. Skills live in `src/skills/*/SKILL.md` — see [SKILLS.md](SKILLS.md) for the exo catalog. Consumer default plant is **mill + inspect**, not a 45-skill sync (`AGENTS-consumer.md` → `AGENTS.md`). Factory hangar shops coexist via shop plant. See [llms.txt](llms.txt).
 
 ## Consumer MCP surface (7 servers)
 
@@ -42,14 +42,16 @@ Governance deliberation: **code-review**, **security-audit**, **researcher** wit
 
 `postinstall.cjs` → `installAllBridges()`:
 
-1. `AGENTS-consumer.md` → `AGENTS.md`
-2. `SKILLS.md` + 45 skills → platform skill directories
+1. `AGENTS-consumer.md` → `AGENTS.md` (does **not** write consumer-root `SKILLS.md`)
+2. Fasten mill plant (`mill` + `inspect`). Not a 45-skill costume dump unless `foundry.json` `"costume": true`
 3. `.gitignore.default` → `.gitignore` (if absent)
-4. `.xray/` config (`codex.json`, `features.json`, `config.json`)
+4. `.xray/` config (`codex.json`, `features.json`, `config.json`) then overlay their plant
 5. `.mcp.json` (7 servers)
 6. Four bridges: OpenCode, Grok, Hermes, OpenClaw
 7. Optional git hooks
 
+**Shop plant:** `shop-extract`, `shop-witness`, `shop-pin` (groover-hangar) are first-class with mill plant. Extra shops: `foundry.json` `shopPlant`. Not `"costume": true`. `npx @0xray/foundry inspect --skip-live` is the receipt.
+
 ## Memory routing + Repertoire (v3.3+)
 
 `xray/features.json` → `memory_routing` (schema: `features.schema.json`):
@@ -141,7 +143,7 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 | Source | `src/` |
 | Config | `.xray/` or `config/` |
 
-**Root essentials only:** `README.md`, `CHANGELOG.md`, `package.json`, `AGENTS.md`, `SKILLS.md`, `tsconfig.json`.
+**Root essentials only:** `README.md`, `CHANGELOG.md`, `package.json`, `AGENTS.md`, `SKILLS.md`, `llms.txt`, `tsconfig.json`.
 
 ## Available agents (42 YML surfaces)
 
@@ -207,6 +209,8 @@ Full skill mapping: [SKILLS.md](SKILLS.md).
 
 | Topic | Path |
 |-------|------|
+| Agent map (`llms.txt`) | `llms.txt` |
+| Foundry / mill plant | `docs-site/docs/architecture/v4-foundry.md` |
 | Features since 3.1 | `docs-site/docs/guides/features-since-3.1.md` |
 | features.json | `docs-site/docs/guides/features-json.md` |
 | Platform integrations | `docs-site/docs/guides/integrations.md` |
@@ -218,4 +222,4 @@ Full skill mapping: [SKILLS.md](SKILLS.md).
 
 ## Release artifacts
 
-`npm run release:patch` updates: `package.json`, `CHANGELOG.md`, `README.md`, `AGENTS.md`, `AGENTS-consumer.md`, `SKILLS.md`, Docusaurus guides.
+`npm run release:patch` updates: `package.json`, `CHANGELOG.md`, `README.md`, `AGENTS.md`, `AGENTS-consumer.md`, `SKILLS.md`, `llms.txt`, Docusaurus guides.

package/README.md

@@ -25,9 +25,10 @@ Consumer `npm install 0xray` auto-wires four platform bridges and seven MCP serv
 ## Quick Start
 
 ```bash
-npm install 0xray          # postinstall: 4 bridges + 7 MCPs + AGENTS.md + SKILLS.md + .mcp.json
+npm install 0xray          # postinstall: mill+inspect plant + 4 bridges + 7 MCPs + AGENTS.md + .mcp.json
 npx 0xray status          # verify install
 npx 0xray setup            # optional: symlinks, hook extras
+npx @0xray/foundry inspect --skip-live   # mill receipt (chat is not a receipt)
 ```
 
 Manual per-platform install (idempotent, same result as postinstall):
@@ -50,6 +51,7 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 
 | Version | Highlights |
 |---------|------------|
+| **Unreleased** | Shop plant first-class (`shop-extract`, `shop-witness`, `shop-pin` + `foundry.json` `shopPlant`). Not `"costume": true`. Root `llms.txt`. Pack→tmp fasten proof. |
 | **4.0.9** | Mill target: postinstall does not mill npm global prefix or `_npx` as a consumer. Isolated HOME skips machine `~/.grok`. |
 | **4.0.0** | Exo + temperament. Constitution always on; ceremony by host. Repertoire organ on (vendored 0.2). Station card survives compact/host-swap. **On npm.** [vision](docs-site/docs/architecture/v4-vision.md) · [now](docs-site/docs/architecture/v4-now.md) |
 | **3.4.1** | Unified `install-bridges.cjs` on postinstall — OpenCode, Grok, Hermes, OpenClaw in one pass. All 7 MCPs servers via `npx -y 0xray mcp <cmd>` (no `dist/` paths). Canonical `release.mjs` pipeline. |
@@ -100,13 +102,16 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 
 On `npm install 0xray` in a consumer project, postinstall automatically:
 
-1. Copies **`AGENTS-consumer.md` → `AGENTS.md`** and ships root **`SKILLS.md`**
-2. Seeds **`.gitignore`** from `.gitignore.default` (if absent)
-3. Deploys **`.xray/`** config (`codex.json`, `features.json`, `config.json`)
-4. Writes project **`.mcp.json`** with 7 MCPs servers (`npx -y 0xray mcp …`)
-5. Installs **4 bridges**: OpenCode (agents + `opencode.json`), Grok (plugin + global skills), Hermes (`~/.hermes/plugins/xray-hermes`), OpenClaw (config + skills)
-6. Syncs **45 framework skills** to platform skill dirs
-7. Installs git pre-commit hook (non-blocking if not a git repo)
+1. Copies **`AGENTS-consumer.md` → `AGENTS.md`**. Does **not** write consumer-root **`SKILLS.md`**.
+2. Fastens **mill plant** (`mill` + `inspect`). Not a 45-skill / 42-agent costume dump. `foundry.json` `"costume": true` is the opt-in dump.
+3. Seeds **`.gitignore`** from `.gitignore.default` (if absent)
+4. Deploys **`.xray/`** config (`codex.json`, `features.json`, `config.json`) then overlays **their** plant
+5. Writes project **`.mcp.json`** with 7 MCPs servers (`npx -y 0xray mcp …`)
+6. Installs **4 bridges**: OpenCode, Grok, Hermes, OpenClaw (PPE + wiring; mill plant, not costume)
+7. Factory shop plant (`shop-extract`, `shop-witness`, `shop-pin` from groover-hangar) may coexist when worn. Extra shops: `foundry.json` `shopPlant`. Not costume.
+8. Installs git pre-commit hook (non-blocking if not a git repo)
+
+See [llms.txt](llms.txt) for the agent map. Catalog of 45 skills lives in [SKILLS.md](SKILLS.md) — that is the exo catalog, not default consumer wear.
 
 ## Seven MCP Servers (consumer)
 
@@ -198,9 +203,11 @@ Docs: [memory routing](docs-site/docs/guides/memory-routing.md) · [Repertoire](
 |-------|-----------------|
 | Four-floor consumer e2e | OpenCode 34/0 · Grok 63/0 · Hermes 39/0/2 · OpenClaw 96/0/1 (npm 4.0.0 pack) |
 | Consumer smoke | `npm run release:gate` — pack → clean install → 7 MCPs + 4 bridges + organ on |
+| Pack → tmp proof | `npm run pack:tmp-proof` — tgz install + `foundry mint --skip-live` + hangar shops + inspect (no costume dump). Playwright n/a (CLI). |
 
 ```bash
 npm test
+npm run pack:tmp-proof  # pack → tmp fasten + hangar inspect
 npm run release:gate    # full release gate (before upload)
 npm run release:npm     # gate + prepare + npm publish --access public
 ```

package/SKILLS.md

@@ -1,10 +1,10 @@
 # 0xray Skills
 
-**4.0** — **45 skills** · invoked via `xray-skills` MCP · synced on postinstall
+**4.0** — a suit that survives the context window
 
-xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) across the full software lifecycle. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`), agent `@mentions`, or platform skill directories after postinstall.
+**45 skills** in this exo catalog. Default consumer plant is **`mill` + `inspect`**, not this dump. `npm install 0xray` does **not** sync 45 skills unless `foundry.json` `"costume": true`. Factory shop plant (`shop-extract`, `shop-witness`, `shop-pin`) coexists with mill plant when a hangar wears those shops. Extra shops: `foundry.json` `shopPlant`. Agent map: [llms.txt](llms.txt).
 
-Consumer `npm install 0xray` syncs all 45 skills to Grok, Hermes, and OpenClaw skill dirs. Framework repo also ships this file to consumers (3.1.1+).
+xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) as the **costume / self-plant catalog**. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`) or when you plant them. This file is the exo catalog — mill does **not** write it to the consumer root.
 
 ---
 

package/dist/AGENTS.md

@@ -20,7 +20,7 @@ xray provides intelligent multi-agent orchestration with automatic delegation an
 - **External Governance** — Dynamo Solar SSOT, 69-term Codex
 - **Autonomous Engine** — thinDispatch 7-flow, AsideContext, confidence gate
 
-Agents are declared in `src/opencode/agents/*.yml` — the YML SSOT. Skills live in `src/skills/*/SKILL.md` — see [SKILLS.md](SKILLS.md). Consumer projects receive slimmed copies via postinstall (`AGENTS-consumer.md` → `AGENTS.md`, skills synced to platform dirs).
+Agents are declared in `src/opencode/agents/*.yml` — the YML SSOT. Skills live in `src/skills/*/SKILL.md` — see [SKILLS.md](SKILLS.md) for the exo catalog. Consumer default plant is **mill + inspect**, not a 45-skill sync (`AGENTS-consumer.md` → `AGENTS.md`). Factory hangar shops coexist via shop plant. See [llms.txt](llms.txt).
 
 ## Consumer MCP surface (7 servers)
 
@@ -42,14 +42,16 @@ Governance deliberation: **code-review**, **security-audit**, **researcher** wit
 
 `postinstall.cjs` → `installAllBridges()`:
 
-1. `AGENTS-consumer.md` → `AGENTS.md`
-2. `SKILLS.md` + 45 skills → platform skill directories
+1. `AGENTS-consumer.md` → `AGENTS.md` (does **not** write consumer-root `SKILLS.md`)
+2. Fasten mill plant (`mill` + `inspect`). Not a 45-skill costume dump unless `foundry.json` `"costume": true`
 3. `.gitignore.default` → `.gitignore` (if absent)
-4. `.xray/` config (`codex.json`, `features.json`, `config.json`)
+4. `.xray/` config (`codex.json`, `features.json`, `config.json`) then overlay their plant
 5. `.mcp.json` (7 servers)
 6. Four bridges: OpenCode, Grok, Hermes, OpenClaw
 7. Optional git hooks
 
+**Shop plant:** `shop-extract`, `shop-witness`, `shop-pin` (groover-hangar) are first-class with mill plant. Extra shops: `foundry.json` `shopPlant`. Not `"costume": true`. `npx @0xray/foundry inspect --skip-live` is the receipt.
+
 ## Memory routing + Repertoire (v3.3+)
 
 `xray/features.json` → `memory_routing` (schema: `features.schema.json`):
@@ -141,7 +143,7 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 | Source | `src/` |
 | Config | `.xray/` or `config/` |
 
-**Root essentials only:** `README.md`, `CHANGELOG.md`, `package.json`, `AGENTS.md`, `SKILLS.md`, `tsconfig.json`.
+**Root essentials only:** `README.md`, `CHANGELOG.md`, `package.json`, `AGENTS.md`, `SKILLS.md`, `llms.txt`, `tsconfig.json`.
 
 ## Available agents (42 YML surfaces)
 
@@ -207,6 +209,8 @@ Full skill mapping: [SKILLS.md](SKILLS.md).
 
 | Topic | Path |
 |-------|------|
+| Agent map (`llms.txt`) | `llms.txt` |
+| Foundry / mill plant | `docs-site/docs/architecture/v4-foundry.md` |
 | Features since 3.1 | `docs-site/docs/guides/features-since-3.1.md` |
 | features.json | `docs-site/docs/guides/features-json.md` |
 | Platform integrations | `docs-site/docs/guides/integrations.md` |
@@ -218,4 +222,4 @@ Full skill mapping: [SKILLS.md](SKILLS.md).
 
 ## Release artifacts
 
-`npm run release:patch` updates: `package.json`, `CHANGELOG.md`, `README.md`, `AGENTS.md`, `AGENTS-consumer.md`, `SKILLS.md`, Docusaurus guides.
+`npm run release:patch` updates: `package.json`, `CHANGELOG.md`, `README.md`, `AGENTS.md`, `AGENTS-consumer.md`, `SKILLS.md`, `llms.txt`, Docusaurus guides.

package/dist/CHANGELOG.md

@@ -6,6 +6,16 @@ The format is based on [Conventional Commits](https://www.conventionalcommits.or
 
 ## [Unreleased]
 
+### ✨ Features
+- Mill inspect treats factory shop plant (`shop-extract`, `shop-witness`, `shop-pin`) as first-class with mill plant. `foundry.json` `shopPlant` names more shops. Not `"costume": true`. Nested mill stays **0.1.9**.
+- Exo agent map: root `llms.txt` (mill+inspect plant, 7 MCPs, hangar/`shopPlant` coexistence, Codex 69, no costume dump). README / AGENTS / SKILLS / Docusaurus no longer claim default 45-skill sync.
+- Pack → tmp suit proof: `npm run pack:tmp-proof` (and consumer smoke) installs the packed tgz, runs `foundry mint --skip-live`, plants factory hangar shops, and inspects without costume dump. Playwright n/a (mill CLI).
+
+### 🐛 Bug Fixes
+- **Grok marketplace pack** — `package.json` `files` includes `.grok-plugin/` so `npm pack` ships the mill-default Grok manifest (`package/.grok-plugin/plugin.json`). Consumers no longer receive only stale `.plugin/plugin.json`.
+- **Grok marketplace manifest** — `.grok-plugin/plugin.json` matches `4.0.10`: `author` is an object, `mcpServers` is a flat path (not `components.mcpServers`), description is mill+inspect default wear (not a 45 knowledge-skills claim). Fixes `grok plugin validate`.
+- **Consumer install of packed `0xray`** — stop shipping `@0xray/repertoire` as `file:./vendor/@0xray/repertoire`. npm `--install-links`, pnpm, and yarn resolve that path from the **consumer** root (`ENOENT .../vendor/@0xray/repertoire/package.json`), not from `node_modules/0xray`. The organ stays in the tarball at `vendor/@0xray/repertoire/`; postinstall wears it into `node_modules/@0xray/repertoire`. Fresh `npm install 0xray` / `npm install 0xray-*.tgz` no longer needs a consumer-root `vendor/` tree. Mill plant (`mill`+`inspect`) unchanged.
+
 ### 🔧 Maintenance
 - Foundry mill: one bumper (`reconcile-version.mjs`); `version-manager.mjs` is `--artifacts-only` (JSON + CHANGELOG). Bump and `--tag` are refused.
 - Docs mill verifies era kernel headers (`4.0`) and skill counts; it does not rewrite markdown prose.
@@ -34,6 +44,22 @@ The format is based on [Conventional Commits](https://www.conventionalcommits.or
 
 ---
 
+## [4.0.11] - 2026-09-12
+
+npm pack now includes `.grok-plugin/` so the mill-default Grok marketplace manifest ships in the tarball (`package/.grok-plugin/plugin.json`). Published `0xray@4.0.10` omitted it — the `files` whitelist landed in #27 after that PUT. Not 5.0.0. This PR does not publish.
+
+- fix(pack): ship .grok-plugin in npm files whitelist (5a65851cb)
+
+---
+
+## [4.0.10] - 2026-09-12
+
+### 🔄 Changes
+
+- Version bump
+
+---
+
 ## [4.0.9] - 2026-09-11
 
 Postinstall does **not** mill npm global prefix or npx cache as a consumer. `resolveConsumerTargetDir` treats `_npx` and a prefix without `package.json` as an install prefix: mill `INIT_CWD` if it is a real project, else mill the 0xray package (dogfood skip). Isolated HOME still skips machine `~/.grok`. Mill plant stays `mill` + `inspect`. Not 45/42 costume. Nested mill stays **0.1.9**. Not 5.0.0.

package/dist/README.md

@@ -25,9 +25,10 @@ Consumer `npm install 0xray` auto-wires four platform bridges and seven MCP serv
 ## Quick Start
 
 ```bash
-npm install 0xray          # postinstall: 4 bridges + 7 MCPs + AGENTS.md + SKILLS.md + .mcp.json
+npm install 0xray          # postinstall: mill+inspect plant + 4 bridges + 7 MCPs + AGENTS.md + .mcp.json
 npx 0xray status          # verify install
 npx 0xray setup            # optional: symlinks, hook extras
+npx @0xray/foundry inspect --skip-live   # mill receipt (chat is not a receipt)
 ```
 
 Manual per-platform install (idempotent, same result as postinstall):
@@ -50,6 +51,7 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 
 | Version | Highlights |
 |---------|------------|
+| **Unreleased** | Shop plant first-class (`shop-extract`, `shop-witness`, `shop-pin` + `foundry.json` `shopPlant`). Not `"costume": true`. Root `llms.txt`. Pack→tmp fasten proof. |
 | **4.0.9** | Mill target: postinstall does not mill npm global prefix or `_npx` as a consumer. Isolated HOME skips machine `~/.grok`. |
 | **4.0.0** | Exo + temperament. Constitution always on; ceremony by host. Repertoire organ on (vendored 0.2). Station card survives compact/host-swap. **On npm.** [vision](docs-site/docs/architecture/v4-vision.md) · [now](docs-site/docs/architecture/v4-now.md) |
 | **3.4.1** | Unified `install-bridges.cjs` on postinstall — OpenCode, Grok, Hermes, OpenClaw in one pass. All 7 MCPs servers via `npx -y 0xray mcp <cmd>` (no `dist/` paths). Canonical `release.mjs` pipeline. |
@@ -100,13 +102,16 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 
 On `npm install 0xray` in a consumer project, postinstall automatically:
 
-1. Copies **`AGENTS-consumer.md` → `AGENTS.md`** and ships root **`SKILLS.md`**
-2. Seeds **`.gitignore`** from `.gitignore.default` (if absent)
-3. Deploys **`.xray/`** config (`codex.json`, `features.json`, `config.json`)
-4. Writes project **`.mcp.json`** with 7 MCPs servers (`npx -y 0xray mcp …`)
-5. Installs **4 bridges**: OpenCode (agents + `opencode.json`), Grok (plugin + global skills), Hermes (`~/.hermes/plugins/xray-hermes`), OpenClaw (config + skills)
-6. Syncs **45 framework skills** to platform skill dirs
-7. Installs git pre-commit hook (non-blocking if not a git repo)
+1. Copies **`AGENTS-consumer.md` → `AGENTS.md`**. Does **not** write consumer-root **`SKILLS.md`**.
+2. Fastens **mill plant** (`mill` + `inspect`). Not a 45-skill / 42-agent costume dump. `foundry.json` `"costume": true` is the opt-in dump.
+3. Seeds **`.gitignore`** from `.gitignore.default` (if absent)
+4. Deploys **`.xray/`** config (`codex.json`, `features.json`, `config.json`) then overlays **their** plant
+5. Writes project **`.mcp.json`** with 7 MCPs servers (`npx -y 0xray mcp …`)
+6. Installs **4 bridges**: OpenCode, Grok, Hermes, OpenClaw (PPE + wiring; mill plant, not costume)
+7. Factory shop plant (`shop-extract`, `shop-witness`, `shop-pin` from groover-hangar) may coexist when worn. Extra shops: `foundry.json` `shopPlant`. Not costume.
+8. Installs git pre-commit hook (non-blocking if not a git repo)
+
+See [llms.txt](llms.txt) for the agent map. Catalog of 45 skills lives in [SKILLS.md](SKILLS.md) — that is the exo catalog, not default consumer wear.
 
 ## Seven MCP Servers (consumer)
 
@@ -198,9 +203,11 @@ Docs: [memory routing](docs-site/docs/guides/memory-routing.md) · [Repertoire](
 |-------|-----------------|
 | Four-floor consumer e2e | OpenCode 34/0 · Grok 63/0 · Hermes 39/0/2 · OpenClaw 96/0/1 (npm 4.0.0 pack) |
 | Consumer smoke | `npm run release:gate` — pack → clean install → 7 MCPs + 4 bridges + organ on |
+| Pack → tmp proof | `npm run pack:tmp-proof` — tgz install + `foundry mint --skip-live` + hangar shops + inspect (no costume dump). Playwright n/a (CLI). |
 
 ```bash
 npm test
+npm run pack:tmp-proof  # pack → tmp fasten + hangar inspect
 npm run release:gate    # full release gate (before upload)
 npm run release:npm     # gate + prepare + npm publish --access public
 ```

package/dist/SKILLS.md

@@ -1,10 +1,10 @@
 # 0xray Skills
 
-**4.0** — **45 skills** · invoked via `xray-skills` MCP · synced on postinstall
+**4.0** — a suit that survives the context window
 
-xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) across the full software lifecycle. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`), agent `@mentions`, or platform skill directories after postinstall.
+**45 skills** in this exo catalog. Default consumer plant is **`mill` + `inspect`**, not this dump. `npm install 0xray` does **not** sync 45 skills unless `foundry.json` `"costume": true`. Factory shop plant (`shop-extract`, `shop-witness`, `shop-pin`) coexists with mill plant when a hangar wears those shops. Extra shops: `foundry.json` `shopPlant`. Agent map: [llms.txt](llms.txt).
 
-Consumer `npm install 0xray` syncs all 45 skills to Grok, Hermes, and OpenClaw skill dirs. Framework repo also ships this file to consumers (3.1.1+).
+xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) as the **costume / self-plant catalog**. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`) or when you plant them. This file is the exo catalog — mill does **not** write it to the consumer root.
 
 ---
 

package/dist/governance/llm-governance-provider.js

@@ -3,6 +3,7 @@ import { frameworkLogger } from "../core/framework-logger.js";
 const DEFAULT_HERMES_PROVIDER = "xai-oauth";
 const DEFAULT_HERMES_MODEL = "grok-4.3";
 const DEFAULT_HERMES_TIMEOUT_MS = 120_000;
+const UNIT_TEST_HERMES_TIMEOUT_MS = 2_000;
 const ROLE_PROMPTS = {
     "code-review": `You are a senior code reviewer on a governance committee for a software project. Analyze the following proposal from a code quality, maintainability, readability, and engineering best practices perspective.
 
@@ -47,12 +48,25 @@ function resolveHermesProvider() {
 function resolveHermesModel() {
     return process.env.HERMES_MODEL?.trim() || DEFAULT_HERMES_MODEL;
 }
+function inUnitTestContext() {
+    return process.env.NODE_ENV === "test" || Boolean(process.env.VITEST);
+}
+/** Dead xai-oauth (invalid_grant) hangs hermes -z until DEFAULT_HERMES_TIMEOUT_MS. Unit/Vitest must not wait. */
+function unitTestBlocksLiveHermes() {
+    if (process.env.XRAY_GOVERNANCE_ALLOW_HERMES === "true")
+        return false;
+    return inUnitTestContext();
+}
 function resolveHermesTimeoutMs() {
     const raw = process.env.HERMES_TIMEOUT_MS?.trim();
-    if (!raw)
-        return DEFAULT_HERMES_TIMEOUT_MS;
-    const parsed = Number(raw);
-    return Number.isFinite(parsed) && parsed > 0 ? parsed : DEFAULT_HERMES_TIMEOUT_MS;
+    if (raw) {
+        const parsed = Number(raw);
+        if (Number.isFinite(parsed) && parsed > 0)
+            return parsed;
+    }
+    if (inUnitTestContext())
+        return UNIT_TEST_HERMES_TIMEOUT_MS;
+    return DEFAULT_HERMES_TIMEOUT_MS;
 }
 export function resolveHermesBin() {
     const explicit = process.env.HERMES_BIN?.trim();
@@ -84,6 +98,8 @@ function getConfig() {
     const direct = getDirectLlmConfig();
     if (direct)
         return direct;
+    if (unitTestBlocksLiveHermes())
+        return null;
     if (hermesCliAvailable()) {
         return {
             mode: "hermes",

package/dist/integrations/openclaw/plugin/xray-pre-tool/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xray-pre-tool",
-  "version": "4.0.9",
+  "version": "4.0.11",
   "private": true,
   "type": "module",
   "description": "0xRay constitution + temperament PreToolUse for OpenClaw",

package/dist/memory-routing/provider-loader.js

@@ -22,6 +22,7 @@ function resolveUnavailableReason(provider) {
 const REPERTOIRE_CANDIDATE_PATHS = [
     'node_modules/@0xray/repertoire/dist/provider/memory-routing-provider.js',
     'vendor/@0xray/repertoire/dist/provider/memory-routing-provider.js',
+    'node_modules/0xray/vendor/@0xray/repertoire/dist/provider/memory-routing-provider.js',
     '../repertoire/dist/provider/memory-routing-provider.js',
     '../../repertoire/dist/provider/memory-routing-provider.js',
     '../../../repertoire/dist/provider/memory-routing-provider.js',
@@ -73,6 +74,9 @@ function leftoverRepertoireModulePath(cwd) {
     const vendor = join(cwd, 'vendor', '@0xray', 'repertoire', 'dist', 'provider', 'memory-routing-provider.js');
     if (existsSync(vendor))
         return vendor;
+    const packedVendor = join(cwd, 'node_modules', '0xray', 'vendor', '@0xray', 'repertoire', 'dist', 'provider', 'memory-routing-provider.js');
+    if (existsSync(packedVendor))
+        return packedVendor;
     const sibling = resolve(cwd, '../repertoire/dist/provider/memory-routing-provider.js');
     if (existsSync(sibling))
         return sibling;

package/llms.txt

@@ -0,0 +1,59 @@
+# 0xray
+
+> Exo for coding agents. A suit that survives the context window. Not a catalog of 45 skills.
+
+**4.0** — mill+inspect plant, 7 MCPs, Codex 69. Constitution always on.
+
+Default consumer wear is **mill plant** (`mill` + `inspect`), not a 45-skill / 42-agent costume dump. `foundry.json` `"costume": true` is the opt-in dump. Do not use costume to land hangar shops.
+
+## Wear (what a stranger gets)
+
+- `npm install 0xray` — postinstall fastens mill+inspect, writes 7 MCP `.mcp.json`, four host bridges (OpenCode, Grok, Hermes, OpenClaw), overlays their plant. Does **not** write consumer-root `SKILLS.md`.
+- `npx @0xray/foundry mint --skip-live` — re-fasten mill plant, then inspect.
+- `npx @0xray/foundry inspect --skip-live` — plant-vs-worn, receipt, CI. Chat is not a receipt.
+
+## Shop plant (hangar coexistence)
+
+Factory shop plant is first-class with mill plant: `shop-extract`, `shop-witness`, `shop-pin` (groover-hangar). Worn shops are **not** a costume dump.
+
+- Extra shop names: `foundry.json` `"shopPlant"` (string[] / plant dir / `{ skills, dir }`).
+- Field is `shopPlant`, not `hangarPlant` (mill plant copy cannot say hangar).
+- Undeclared leftovers (including undeclared `shop-*`, leftover `enforcer`) still fail plant-vs-worn.
+
+## Seven MCP servers
+
+Registered in `.mcp.json` as `npx -y 0xray mcp <cmd>`:
+
+| Server | Role |
+|--------|------|
+| `xray-governance` | Proposal governance, Codex snapshot |
+| `xray-skills` | Skill invoke (catalog exists; default plant is still mill+inspect) |
+| `xray-orchestrator` | thinDispatch, AsideContext, confidence gate |
+| `xray-enforcer` | Codex compliance |
+| `xray-researcher` | Codebase exploration |
+| `xray-code-review` | Proposal quality |
+| `xray-architect-tools` | System design |
+
+Not an 8th `xray-*` server. Repertoire is a vendored organ (`npx @0xray/repertoire mcp`), enable-when-resolves.
+
+## Codex 69 (always on)
+
+`.xray/codex.json` — 69 terms. PPE (`evaluatePreToolGate`) denies Codex 11 / 29 / 69. No new MCP / skill / handler surface. No `any`. No `eval`. Temperament scales ceremony (guided vs frontier), not whether governance exists.
+
+## Agent map (exo, not dump)
+
+- **Mill** — fasten their plant; factory discipline. Nested mill `@0xray/foundry` 0.1.9.
+- **Inspect** — diffs, plant-vs-worn, mill receipt, CI, live tarball GET.
+- **Hangar** — plants factory shops on the four floors. Coexists with mill plant via shop plant allowlist.
+- **42 YML / 45 SKILL.md** — exo catalog in this repo. Not default consumer wear.
+
+## Docs
+
+- [README.md](README.md) — exo landing
+- [AGENTS.md](AGENTS.md) — framework card
+- [AGENTS-consumer.md](AGENTS-consumer.md) — consumer card (copied to `AGENTS.md` on install)
+- [SKILLS.md](SKILLS.md) — catalog (costume / self-plant, not default sync)
+- [Foundry](docs-site/docs/architecture/v4-foundry.md) — mill vs exo, shopPlant
+- [Features since 3.1](docs-site/docs/guides/features-since-3.1.md)
+
+Playwright / UI: n/a. This mill is CLI.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "4.0.9",
+  "version": "4.0.11",
   "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
   "readme": "README.md",
   "license": "MIT",
@@ -79,7 +79,7 @@
     "test:processors": "npm test -- src/__tests__/unit/processor-activation.test.ts src/__tests__/unit/typescript-compilation-processor.test.ts",
     "test:miscellaneous": "npm test -- src/__tests__/unit/blocked-test.test.ts",
     "test:quick": "npm test -- src/__tests__/integration/boot-orchestrator.integration.test.ts src/__tests__/unit/config-loader.test.ts src/__tests__/unit/state-manager.test.ts",
-    "test:comprehensive": "npm run typecheck && npm run test:unit && npm run test:core-framework && npm run test:security && npm run test:performance && npm run test:session-management && npm run test:code-analysis && npm run test:processors && npm run test:miscellaneous",
+    "test:comprehensive": "npm run typecheck && npm run test:unit && npm run test:core-framework && npm run test:security && npm run test:performance && npm run test:session-management && npm run test:code-analysis && npm run test:processors && npm run test:miscellaneous && npm test -- src/__tests__/unit/llm-governance-provider.test.ts src/__tests__/unit/mcp-server-smoke.test.ts",
     "test:integration-all": "npm test -- src/__tests__/integration/",
     "test:performance-all": "npm test -- src/__tests__/performance/ src/__tests__/unit/performance-system.test.ts src/__tests__/unit/benchmark.test.ts src/__tests__/unit/analytics.test.ts",
     "test:agents-all": "echo 'Legacy agents test entry retired'",
@@ -120,6 +120,7 @@
     "release:dry": "node scripts/foundry/release.mjs patch --dry-run",
     "version:reconcile": "node scripts/foundry/reconcile-version.mjs",
     "consumer:smoke": "node scripts/node/consumer-install-smoke.mjs",
+    "pack:tmp-proof": "node scripts/node/pack-tmp-suit-proof.mjs",
     "release:gate": "node scripts/foundry/release-gate.mjs",
     "release:docs-check": "node scripts/foundry/validate-release-docs.mjs",
     "pre-publish-guard": "node scripts/node/pre-publish-guard.js",
@@ -179,6 +180,7 @@
     "src/skills/",
     "src/mcps/",
     ".plugin/",
+    ".grok-plugin/",
     ".opencode/agents/",
     ".opencode/commands/",
     ".opencode/hooks/",
@@ -189,6 +191,7 @@
     ".opencode/enforcer-config.json",
     "opencode.json",
     "README.md",
+    "llms.txt",
     ".mcp.json",
     "AGENTS.md",
     "AGENTS-consumer.md",
@@ -207,7 +210,6 @@
     "vendor/@0xray/repertoire/"
   ],
   "dependencies": {
-    "@0xray/repertoire": "file:./vendor/@0xray/repertoire",
     "@modelcontextprotocol/sdk": "^1.0.4",
     "commander": "^11.1.0",
     "express": "^5.2.1",

package/scripts/foundry/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## [Unreleased]
+
+Shop plant is first-class with mill plant. `shop-extract`, `shop-witness`, `shop-pin` (and `foundry.json` `shopPlant`) are not a costume dump. `"costume": true` still required for 45/42. No mill version bump.
+
 ## [0.1.9] - 2026-09-09
 
 Inventory writes `dna` (keccak256 of canonical JSON without `mintedAt`). Inspect receipt echoes `dna` + pack `0xray-suit` for Groover GRVR. Mill does not mint on chain. Not an 8th MCP. Not 5.0.

package/scripts/foundry/README.md

@@ -55,6 +55,8 @@ After mill plant is fastened, overlay their plant (defaults; remap in `foundry.j
 
 **Default mill plant:** `mill` + `inspect` (inspect AI work). Fastens a suit, not an empty one. Not 45/42 costume. `foundry.json` `"costume": true` copies that dump. Factory Repertoire still enable-when-resolves. PPE stays worn.
 
+**Shop plant:** `shop-extract`, `shop-witness`, `shop-pin` are first-class with mill plant. Inspect does not treat those worn names as a costume dump. `foundry.json` `"shopPlant"` names more shops (array), a plant dir (string), or `{ "skills": [...], "dir": "..." }`. This is not `"costume": true` and does not copy 45/42.
+
 **4.0.9 mill target (0xray postinstall, not this mill package):** `install-bridges.cjs` does not mill npm global prefix or npx `_npx` as a consumer. Isolated HOME skips machine `~/.grok`. Nested mill stays **0.1.9**.
 
 ## Publish this mill

package/scripts/foundry/inspect.mjs

@@ -80,12 +80,14 @@ function checkPlantVsWorn(root, millRoot) {
     skills: mint.listConsumerSkillNames(root, params.skills),
     agents: mint.listConsumerAgentFiles(root, params.agents),
   };
+  const shopPlant = mint.loadShopPlant(root);
   try {
     mint.assertNoCostumeDump(root, millPlant, tree);
     return {
       id: "plant-vs-worn",
       ok: true,
       millPlant: millPlant.skills,
+      shopPlant,
       tree: tree.skills,
       worn: mint.wornSkillNames(root),
     };
@@ -96,6 +98,7 @@ function checkPlantVsWorn(root, millRoot) {
       detail: err instanceof Error ? err.message : String(err),
       extraSkills: err.extraSkills || [],
       extraAgents: err.extraAgents || [],
+      shopPlant,
     };
   }
 }