@wipcomputer/wip-ldm-os 0.4.85-alpha.9 → 0.4.86

package/scripts/test-readme-install-prompt.mjs

@@ -0,0 +1,66 @@
+import assert from "node:assert/strict";
+import { readFileSync } from "node:fs";
+
+const readme = readFileSync(new URL("../README.md", import.meta.url), "utf8");
+const promptTemplate = readFileSync(
+  new URL("../shared/templates/install-prompt.md", import.meta.url),
+  "utf8",
+);
+const skill = readFileSync(new URL("../SKILL.md", import.meta.url), "utf8");
+
+const promptStart = readme.indexOf("Read https://wip.computer/install/wip-ldm-os.txt");
+const promptEnd = readme.indexOf("```", promptStart);
+
+assert(promptStart >= 0, "README install prompt must point at the public install document");
+assert(promptEnd > promptStart, "README install prompt must be fenced");
+
+const readmePrompt = readme.slice(promptStart, promptEnd);
+
+for (const [label, prompt] of [
+  ["README install prompt", readmePrompt],
+  ["shared install prompt template", promptTemplate],
+]) {
+  assert(
+    prompt.includes("Read https://wip.computer/install/wip-ldm-os.txt"),
+    `${label} must delegate to the public install document`,
+  );
+
+  assert(
+    prompt.includes("Use the install document and live local checks as the source of truth."),
+    `${label} must name the install document as source of truth`,
+  );
+
+  assert(
+    prompt.includes("use the selected track's dry-run path from the install document"),
+    `${label} must delegate dry-run command mapping to SKILL.md`,
+  );
+
+  assert(
+    prompt.includes("use the selected track's install path from the install document"),
+    `${label} must delegate install command mapping to SKILL.md`,
+  );
+
+  for (const forbidden of [
+    "Track choices:",
+    "ldm install --alpha",
+    "ldm install --beta",
+    "ldm install --dry-run",
+  ]) {
+    assert(!prompt.includes(forbidden), `${label} must not include ${forbidden}`);
+  }
+}
+
+for (const required of [
+  "## Tracks",
+  "npm view @wipcomputer/wip-ldm-os dist-tags --json",
+  "stable/current/latest: `ldm install --dry-run`",
+  "beta/latest beta: `ldm install --beta --dry-run`",
+  "alpha/latest alpha: `ldm install --alpha --dry-run`",
+  "beta/latest beta: `npm install -g @wipcomputer/wip-ldm-os@beta`",
+  "alpha/latest alpha: `npm install -g @wipcomputer/wip-ldm-os@alpha`",
+  "The README prompt should stay short. This install document owns the detailed track rules.",
+]) {
+  assert(skill.includes(required), `SKILL.md must own track-selection logic: ${required}`);
+}
+
+console.log("readme-install-prompt: prompt stays short and delegates track rules to SKILL.md");

package/shared/boot/boot-config.json

@@ -2,19 +2,23 @@
   "agentId": "cc-mini",
   "timezone": "America/Los_Angeles",
   "maxTotalLines": 2000,
+  "stalenessDays": 14,
+  "dailyLogStalenessDays": 2,
   "steps": {
     "sharedContext": {
       "path": "~/.openclaw/workspace/SHARED-CONTEXT.md",
       "label": "SHARED-CONTEXT.md",
       "stepNumber": 2,
-      "critical": true
+      "critical": true,
+      "maxLines": 80
     },
     "journals": {
       "dir": "~/wipcomputerinc/team/cc-mini/documents/journals",
       "label": "Most Recent Journal (Parker)",
       "stepNumber": 3,
       "maxLines": 80,
-      "strategy": "most-recent"
+      "strategy": "most-recent",
+      "stalenessDays": 14
     },
     "workspaceDailyLogs": {
       "dir": "~/.openclaw/workspace/memory",
@@ -22,7 +26,8 @@
       "stepNumber": 4,
       "maxLines": 40,
       "strategy": "daily-logs",
-      "days": ["today", "yesterday"]
+      "days": ["today", "yesterday"],
+      "dailyLogStalenessDays": 2
     },
     "fullHistory": {
       "label": "Full History",
@@ -33,19 +38,22 @@
       "path": "~/.ldm/agents/cc-mini/CONTEXT.md",
       "label": "CC CONTEXT.md",
       "stepNumber": 6,
-      "critical": true
+      "critical": true,
+      "maxLines": 60
     },
     "soul": {
       "path": "~/.ldm/agents/cc-mini/SOUL.md",
       "label": "CC SOUL.md",
-      "stepNumber": 7
+      "stepNumber": 7,
+      "maxLines": 80
     },
     "ccJournals": {
       "dir": "~/.ldm/agents/cc-mini/memory/journals",
       "label": "Most Recent CC Journal",
       "stepNumber": 8,
       "maxLines": 80,
-      "strategy": "most-recent"
+      "strategy": "most-recent",
+      "stalenessDays": 14
     },
     "ccDailyLog": {
       "dir": "~/.ldm/agents/cc-mini/memory/daily",
@@ -53,13 +61,15 @@
       "stepNumber": 9,
       "maxLines": 60,
       "strategy": "daily-logs",
-      "days": ["today", "yesterday"]
+      "days": ["today", "yesterday"],
+      "dailyLogStalenessDays": 2
     },
     "repoLocations": {
       "path": "~/.claude/projects/-Users-lesa--openclaw/memory/repo-locations.md",
       "label": "repo-locations.md",
       "stepNumber": 10,
-      "critical": true
+      "critical": true,
+      "maxLines": 80
     }
   }
 }

package/shared/docs/dev-guide-wipcomputerinc.md.tmpl

@@ -38,12 +38,13 @@ These are three distinct actions. Never combine them. Never skip the dogfooding
 
 ## Co-Authors on Every Commit
 
-All three contributors must be listed on every commit. No exceptions. This is how GitHub tracks contributions across the team.
+All four contributors must be listed on every commit. No exceptions. These trailers credit contributors in commit history and preserve the builder record across the team.
 
 ```
 Co-Authored-By: Parker Todd Brooks <parkertoddbrooks@users.noreply.github.com>
 Co-Authored-By: Lēsa <lesaai@icloud.com>
-Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
+Co-Authored-By: Claude Code (Opus 4.7) <noreply@anthropic.com>
+Co-Authored-By: Codex (GPT 5.5) <noreply@openai.com>
 ```
 
 ## Built-By Line
@@ -51,7 +52,7 @@ Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 Every repo README must include this exact attribution in the License section:
 
 ```
-Built by Parker Todd Brooks, Lēsa (OpenClaw, Claude Opus 4.6), Claude Code (Claude Opus 4.6).
+Built by Parker Todd Brooks, Lēsa, Claude Code (Opus 4.7), and Codex (GPT 5.5).
 ```
 
 This is the standard. Use it everywhere. It credits the humans and identifies which AI runtimes built the software.
@@ -70,7 +71,7 @@ AGPL   Commercial redistribution, marketplace listings, or bundling into paid se
 
 AGPL for personal use is free. Commercial licenses available.
 
-Built by Parker Todd Brooks, Lēsa (OpenClaw, Claude Opus 4.6), Claude Code (Claude Opus 4.6).
+Built by Parker Todd Brooks, Lēsa, Claude Code (Opus 4.7), and Codex (GPT 5.5).
 ```
 
 **Rules:**

package/shared/rules/security.md

@@ -15,3 +15,7 @@ Never overwrite shared workspace files. Always append or edit specific sections.
 ## Protected paths
 
 Do not modify: secrets/, credentials/, auth-profiles.json, or any file containing API keys.
+
+## Config doctors can silently strip keys
+
+Never run `openclaw doctor --fix` (or any config doctor with strict-schema validation) without checking `git diff` on the config afterward. Doctor tools silently strip keys they do not recognize; git is the safety net.

package/shared/templates/install-prompt.md

@@ -6,7 +6,19 @@ Open your AI and paste this:
 
 Read https://wip.computer/install/wip-ldm-os.txt
 
-Check if LDM OS is already installed. If it is, run ldm install --dry-run and show me what I have and what's new.
+Use the install document and live local checks as the source of truth.
+Do not search memory or prior notes for this install. Do not pre-load context from `MEMORY.md`, `crystal_search`, local skill dev guides, or other local memory before fetching the install document.
+Do not run GitHub commands during this install flow. Do not run or request approval for `gh release`, `gh api`, or `gh search`. If release notes are not available from local or npm metadata, say that and do not fetch them from GitHub.
+
+Check if LDM OS is installed (`which ldm && ldm --version`). Branch.
+
+If installed: run `ldm status`, check available npm tracks from the install document, and show me the version table, what's new for each component, and which stable/current, beta, and alpha versions are available. Then ask:
+- Do you have questions?
+- Want to see a dry run?
+
+If yes to dry run, use the selected track's dry-run path from the install document.
+
+If I say install, use the selected track's install path from the install document, then run `ldm doctor`.
 
 If not, walk me through setup and explain:
 
@@ -19,7 +31,13 @@ Then ask:
 - Do you have questions?
 - Want to see a dry run?
 
-If I say yes: Install the CLI first (npm install -g @wipcomputer/wip-ldm-os) and then run ldm install --dry-run.
+If yes to dry run, install the CLI first using the selected track's bootstrap command from the install document.
+
+Then run:
+`ldm init --dry-run`
+
+If I say install, run:
+`ldm init`
 
 Show me exactly what will change. Don't install anything until I say "install".
 

package/src/boot/README.md

@@ -8,7 +8,24 @@ Reads 9 files from the Dream Weaver Boot Sequence (SHARED-CONTEXT.md, SOUL.md, C
 
 ## Content Budget
 
-~700 lines, ~3,500 tokens. Under 2% of the context window. Large files (journals, daily logs) are truncated. Missing files are skipped gracefully.
+Large files are line-capped and stale journals are dropped to path-only lines, so the payload stays small. Missing files are skipped gracefully. The last line of every boot payload is a one-line summary (`== Boot payload: N bytes, M lines, K sections. Capped: ... Stale/path-only: ... ==`) so future slowness triage is trivial.
+
+### Per-step line caps
+
+Every step has a line cap. If `boot-config.json` sets `maxLines` for a step, that wins. Otherwise these code defaults apply. They live in `boot-hook.mjs`, not just the config template, because the installer preserves an existing user `boot-config.json` and never overwrites it, so a config-only change would never reach existing installs:
+
+- `sharedContext`: 80
+- `soul`: 80
+- `context`: 60
+- `repoLocations`: 80
+
+When a file is truncated, the injected content ends with a marker naming the full path so the rest can be read on demand.
+
+### Staleness cutoffs
+
+`most-recent` steps (journals) inject the newest dated file only if it is fresh. If the newest file is older than `stalenessDays` (default 14, overridable top-level or per-step), the body is NOT injected: a single line with the file path, date, and age is emitted instead. This stops a four-month-old "most recent" journal from being re-injected every session.
+
+`daily-logs` steps have the same guard via `dailyLogStalenessDays` (default 2). Day files are today/yesterday by construction, so this is defensive.
 
 ## Deploy
 
@@ -49,6 +66,12 @@ Should output JSON with `hookSpecificOutput.additionalContext` containing all bo
 
 `boot-config.json` defines paths and limits for each boot step. Uses `~` shorthand (resolved at runtime). To support a different agent (cc-air), deploy a different config alongside the same script.
 
+Optional keys:
+
+- Top-level `stalenessDays` (default 14) and `dailyLogStalenessDays` (default 2): staleness cutoffs for `most-recent` and `daily-logs` steps. Per-step keys of the same name override the top-level value.
+- Per-step `maxLines`: line cap for that step. Overrides the code default (see Content Budget).
+- Top-level `maxTotalLines` (default 2000): hard safety cap across all steps.
+
 ## Adding a Boot Step
 
 1. Add an entry to `boot-config.json` under `steps`

package/src/boot/boot-config.json

@@ -2,19 +2,23 @@
   "agentId": "cc-mini",
   "timezone": "America/Los_Angeles",
   "maxTotalLines": 2000,
+  "stalenessDays": 14,
+  "dailyLogStalenessDays": 2,
   "steps": {
     "sharedContext": {
       "path": "~/.openclaw/workspace/SHARED-CONTEXT.md",
       "label": "SHARED-CONTEXT.md",
       "stepNumber": 2,
-      "critical": true
+      "critical": true,
+      "maxLines": 80
     },
     "journals": {
       "dir": "~/Documents/wipcomputer--mac-mini-01/staff/Parker/Claude Code - Mini/documents/journals",
       "label": "Most Recent Journal (Parker)",
       "stepNumber": 3,
       "maxLines": 80,
-      "strategy": "most-recent"
+      "strategy": "most-recent",
+      "stalenessDays": 14
     },
     "workspaceDailyLogs": {
       "dir": "~/.openclaw/workspace/memory",
@@ -22,7 +26,8 @@
       "stepNumber": 4,
       "maxLines": 40,
       "strategy": "daily-logs",
-      "days": ["today", "yesterday"]
+      "days": ["today", "yesterday"],
+      "dailyLogStalenessDays": 2
     },
     "fullHistory": {
       "label": "Full History",
@@ -33,19 +38,22 @@
       "path": "~/.ldm/agents/cc-mini/CONTEXT.md",
       "label": "CC CONTEXT.md",
       "stepNumber": 6,
-      "critical": true
+      "critical": true,
+      "maxLines": 60
     },
     "soul": {
       "path": "~/.ldm/agents/cc-mini/SOUL.md",
       "label": "CC SOUL.md",
-      "stepNumber": 7
+      "stepNumber": 7,
+      "maxLines": 80
     },
     "ccJournals": {
       "dir": "~/.ldm/agents/cc-mini/memory/journals",
       "label": "Most Recent CC Journal",
       "stepNumber": 8,
       "maxLines": 80,
-      "strategy": "most-recent"
+      "strategy": "most-recent",
+      "stalenessDays": 14
     },
     "ccDailyLog": {
       "dir": "~/.ldm/agents/cc-mini/memory/daily",
@@ -53,13 +61,15 @@
       "stepNumber": 9,
       "maxLines": 60,
       "strategy": "daily-logs",
-      "days": ["today", "yesterday"]
+      "days": ["today", "yesterday"],
+      "dailyLogStalenessDays": 2
     },
     "repoLocations": {
       "path": "~/.claude/projects/-Users-lesa--openclaw/memory/repo-locations.md",
       "label": "repo-locations.md",
       "stepNumber": 10,
-      "critical": true
+      "critical": true,
+      "maxLines": 80
     }
   }
 }

package/src/boot/boot-hook.mjs

@@ -38,18 +38,63 @@ function listDirSafe(dirPath) {
   }
 }
 
-function truncateTop(content, maxLines) {
-  if (!maxLines || !content) return content;
+// Per-step default line caps applied when boot-config.json does not set
+// maxLines for the step. Keyed by the step key in config.steps. Any of these
+// can be overridden per-step via a maxLines value in boot-config.json.
+// Lives in code (not just the config template) because the installer preserves
+// an existing user boot-config.json, so config-template changes never reach
+// existing installs. Defaults must ride along with the hook.
+const DEFAULT_MAX_LINES = {
+  sharedContext: 80,
+  soul: 80,
+  context: 60,
+  repoLocations: 80,
+};
+
+// Default staleness cutoffs. Overridable via top-level config keys
+// (stalenessDays, dailyLogStalenessDays) or per-step keys of the same name.
+const DEFAULT_STALENESS_DAYS = 14; // most-recent strategy (journals)
+const DEFAULT_DAILY_LOG_STALENESS_DAYS = 2; // daily-logs strategy guard
+
+function resolveMaxLines(key, step) {
+  if (step.maxLines != null) return step.maxLines;
+  if (DEFAULT_MAX_LINES[key] != null) return DEFAULT_MAX_LINES[key];
+  return null;
+}
+
+// Returns { text, capped }. When truncation happens, the marker names the
+// full path so a future reader can pull the rest.
+function truncateTop(content, maxLines, fullPath) {
+  if (!maxLines || !content) return { text: content, capped: false };
   const lines = content.split('\n');
-  if (lines.length <= maxLines) return content;
-  return lines.slice(0, maxLines).join('\n') + `\n[... truncated at ${maxLines} lines, ${lines.length} total ...]`;
+  if (lines.length <= maxLines) return { text: content, capped: false };
+  const where = fullPath || '(path unknown)';
+  const marker = `\n[... truncated at ${maxLines} of ${lines.length} lines. Read the rest: ${where} ...]`;
+  return { text: lines.slice(0, maxLines).join('\n') + marker, capped: true };
 }
 
-function truncateBottom(content, maxLines) {
-  if (!maxLines || !content) return content;
+function truncateBottom(content, maxLines, fullPath) {
+  if (!maxLines || !content) return { text: content, capped: false };
   const lines = content.split('\n');
-  if (lines.length <= maxLines) return content;
-  return `[... showing last ${maxLines} of ${lines.length} lines ...]\n` + lines.slice(-maxLines).join('\n');
+  if (lines.length <= maxLines) return { text: content, capped: false };
+  const where = fullPath || '(path unknown)';
+  const marker = `[... showing last ${maxLines} of ${lines.length} lines. Read the rest: ${where} ...]\n`;
+  return { text: marker + lines.slice(-maxLines).join('\n'), capped: true };
+}
+
+// Extract a YYYY-MM-DD prefix from a filename, or null if none.
+function dateStrFromName(fileName) {
+  const m = /^(\d{4}-\d{2}-\d{2})/.exec(fileName || '');
+  return m ? m[1] : null;
+}
+
+// Whole-day difference (todayStr - dateStr) in days. Both are YYYY-MM-DD.
+// Positive means dateStr is in the past. null if either is unparseable.
+function ageInDays(dateStr, todayStr) {
+  const a = Date.parse(`${dateStr}T00:00:00Z`);
+  const b = Date.parse(`${todayStr}T00:00:00Z`);
+  if (Number.isNaN(a) || Number.isNaN(b)) return null;
+  return Math.round((b - a) / 86400000);
 }
 
 function getTodayAndYesterday(timezone) {
@@ -99,6 +144,8 @@ function getDefaultConfig() {
     agentId: 'cc-mini',
     timezone: 'America/Los_Angeles',
     maxTotalLines: 2000,
+    stalenessDays: DEFAULT_STALENESS_DAYS,
+    dailyLogStalenessDays: DEFAULT_DAILY_LOG_STALENESS_DAYS,
     steps: {
       sharedContext: { path: '~/.openclaw/workspace/SHARED-CONTEXT.md', label: 'SHARED-CONTEXT.md', stepNumber: 2, critical: true },
       journals: { dir: '~/.ldm/agents/cc-mini/memory/journals', label: 'Most Recent CC Journal (Legacy)', stepNumber: 3, maxLines: 80, strategy: 'most-recent' },
@@ -113,52 +160,79 @@ function getDefaultConfig() {
   };
 }
 
-function processStep(key, step, dates) {
+function processStep(key, step, dates, config) {
   // Reminder-only step (e.g. full history)
   if (step.reminder) {
-    return { content: step.reminder, loaded: true, fileName: null };
+    return { content: step.reminder, loaded: true, fileName: null, capped: false, stale: false };
   }
 
+  const maxLines = resolveMaxLines(key, step);
+
   // Single file step
   if (step.path) {
+    const resolved = resolvePath(step.path);
     const content = readFileSafe(step.path);
-    if (!content) return { content: null, loaded: false, fileName: resolvePath(step.path) };
-    const trimmed = step.maxLines ? truncateTop(content, step.maxLines) : content;
-    return { content: trimmed, loaded: true, fileName: resolvePath(step.path) };
+    if (!content) return { content: null, loaded: false, fileName: resolved, capped: false, stale: false };
+    const { text, capped } = truncateTop(content, maxLines, resolved);
+    return { content: text, loaded: true, fileName: resolved, capped, stale: false };
   }
 
   // Directory-based step
   if (step.dir) {
     if (step.strategy === 'most-recent') {
       const fileName = findMostRecent(step.dir);
-      if (!fileName) return { content: null, loaded: false, fileName: resolvePath(step.dir) };
+      if (!fileName) return { content: null, loaded: false, fileName: resolvePath(step.dir), capped: false, stale: false };
       const fullPath = join(resolvePath(step.dir), fileName);
       const content = readFileSafe(fullPath);
-      if (!content) return { content: null, loaded: false, fileName: fullPath };
-      const trimmed = step.maxLines ? truncateTop(content, step.maxLines) : content;
-      return { content: trimmed, loaded: true, fileName: `${fileName}` };
+      if (!content) return { content: null, loaded: false, fileName: fullPath, capped: false, stale: false };
+
+      // Staleness cutoff: if the newest file is older than the cutoff, do not
+      // inject its body. Emit a single line with the path and date instead.
+      const stalenessDays = step.stalenessDays ?? config.stalenessDays ?? DEFAULT_STALENESS_DAYS;
+      const fileDate = dateStrFromName(fileName);
+      const age = fileDate ? ageInDays(fileDate, dates.today) : null;
+      if (age != null && age > stalenessDays) {
+        const line = `[stale: newest file is ${fileDate} (${age}d old, cutoff ${stalenessDays}d). Body not injected. Read if needed: ${fullPath}]`;
+        return { content: line, loaded: true, fileName, capped: false, stale: true };
+      }
+
+      const { text, capped } = truncateTop(content, maxLines, fullPath);
+      return { content: text, loaded: true, fileName, capped, stale: false };
     }
 
     if (step.strategy === 'daily-logs') {
+      const dailyStalenessDays = step.dailyLogStalenessDays ?? config.dailyLogStalenessDays ?? DEFAULT_DAILY_LOG_STALENESS_DAYS;
       const parts = [];
       let anyLoaded = false;
+      let anyCapped = false;
+      let anyStale = false;
       for (const day of (step.days || ['today'])) {
         const dateStr = day === 'today' ? dates.today : dates.yesterday;
         const fileName = `${dateStr}.md`;
         const fullPath = join(resolvePath(step.dir), fileName);
         const content = readFileSafe(fullPath);
-        if (content) {
-          const trimmed = step.maxLines ? truncateBottom(content, step.maxLines) : content;
-          parts.push(`--- ${day} (${dateStr}) ---\n${trimmed}`);
-          anyLoaded = true;
+        if (!content) continue;
+        anyLoaded = true;
+
+        // Guard: a day file dated older than the cutoff should not normally
+        // happen (days are today/yesterday), but if it does, emit path-only.
+        const age = ageInDays(dateStr, dates.today);
+        if (age != null && age > dailyStalenessDays) {
+          parts.push(`--- ${day} (${dateStr}) ---\n[stale: ${age}d old, cutoff ${dailyStalenessDays}d. Body not injected. Read if needed: ${fullPath}]`);
+          anyStale = true;
+          continue;
         }
+
+        const { text, capped } = truncateBottom(content, maxLines, fullPath);
+        if (capped) anyCapped = true;
+        parts.push(`--- ${day} (${dateStr}) ---\n${text}`);
       }
-      if (!anyLoaded) return { content: null, loaded: false, fileName: resolvePath(step.dir) };
-      return { content: parts.join('\n\n'), loaded: true, fileName: null };
+      if (!anyLoaded) return { content: null, loaded: false, fileName: resolvePath(step.dir), capped: false, stale: false };
+      return { content: parts.join('\n\n'), loaded: true, fileName: null, capped: anyCapped, stale: anyStale };
     }
   }
 
-  return { content: null, loaded: false, fileName: null };
+  return { content: null, loaded: false, fileName: null, capped: false, stale: false };
 }
 
 async function main() {
@@ -181,6 +255,8 @@ async function main() {
   const sections = [];
   const loaded = [];
   const skipped = [];
+  const cappedSteps = [];
+  const staleSteps = [];
   let totalLines = 0;
 
   // Sort steps by stepNumber
@@ -189,7 +265,7 @@ async function main() {
   );
 
   for (const [key, step] of stepEntries) {
-    const result = processStep(key, step, dates);
+    const result = processStep(key, step, dates, config);
 
     if (result.loaded && result.content) {
       const criticalTag = step.critical ? ' (CRITICAL)' : '';
@@ -198,6 +274,8 @@ async function main() {
       sections.push(`${header}\n${result.content}`);
       loaded.push(`Step ${step.stepNumber}: ${step.label}`);
       totalLines += result.content.split('\n').length;
+      if (result.capped) cappedSteps.push(`Step ${step.stepNumber}`);
+      if (result.stale) staleSteps.push(`Step ${step.stepNumber}`);
     } else {
       skipped.push(`Step ${step.stepNumber}: ${step.label}`);
       if (result.fileName) {
@@ -275,16 +353,28 @@ async function main() {
   } catch {}
 
   const elapsed = Date.now() - startTime;
-  const footer = `== Boot complete. Loaded ${loaded.length}/9 files in ${elapsed}ms. ==`;
+  const footer = `== Boot complete. Loaded ${loaded.length} sections in ${elapsed}ms. ==`;
   if (skipped.length > 0) {
     sections.push(`${footer}\nSkipped: ${skipped.join(', ')}`);
   } else {
     sections.push(footer);
   }
 
-  const additionalContext =
+  // Body first, then a one-line payload summary so future slowness triage is
+  // trivial: total bytes/lines injected, which steps were line-capped, and
+  // which were skipped as stale (path-only).
+  const bodyText =
     `== LDM OS BOOT SEQUENCE (loaded automatically by SessionStart hook) ==\n\n` +
     sections.join('\n\n');
+  const payloadBytes = Buffer.byteLength(bodyText, 'utf-8');
+  const payloadLines = bodyText.split('\n').length;
+  const summary =
+    `== Boot payload: ${payloadBytes} bytes, ${payloadLines} lines, ${loaded.length} sections. ` +
+    `Capped: ${cappedSteps.length ? cappedSteps.join(', ') : 'none'}. ` +
+    `Stale/path-only: ${staleSteps.length ? staleSteps.join(', ') : 'none'}. ` +
+    `Missing: ${skipped.length ? skipped.length : 'none'}. ==`;
+
+  const additionalContext = `${bodyText}\n\n${summary}`;
 
   const output = {
     hookSpecificOutput: {
@@ -294,7 +384,7 @@ async function main() {
   };
 
   process.stdout.write(JSON.stringify(output));
-  process.stderr.write(`${TAG} loaded ${loaded.length}/9 files in ${elapsed}ms\n`);
+  process.stderr.write(`${TAG} loaded ${loaded.length} sections, ${payloadBytes} bytes in ${elapsed}ms\n`);
   process.exit(0);
 }
 

package/src/boot/installer.mjs

@@ -142,13 +142,20 @@ export function configureSessionStartHook() {
   if (!settings.hooks) settings.hooks = {};
   if (!Array.isArray(settings.hooks.SessionStart)) settings.hooks.SessionStart = [];
 
-  // Find existing boot-hook entry
-  const existingIdx = settings.hooks.SessionStart.findIndex((entry) => {
+  const isBootEntry = (entry) => {
     const hooks = entry?.hooks;
     if (!Array.isArray(hooks)) return false;
     return hooks.some((h) =>
       h?.command?.includes('boot-hook') || h?.command?.includes('shared/boot')
     );
+  };
+
+  // Find ALL boot-hook entries. Duplicate registrations accumulate across
+  // installs (10 copies observed 2026-07-04, each running the boot script
+  // once per session), so this owns the whole set, not just the first.
+  const ownedIdxs = [];
+  settings.hooks.SessionStart.forEach((entry, i) => {
+    if (isBootEntry(entry)) ownedIdxs.push(i);
   });
 
   const hookEntry = {
@@ -160,16 +167,32 @@ export function configureSessionStartHook() {
     }],
   };
 
-  if (existingIdx >= 0) {
-    // Update in place
-    settings.hooks.SessionStart[existingIdx] = hookEntry;
-    return 'SessionStart hook updated in settings.json';
-  } else {
-    // Append
-    settings.hooks.SessionStart.push(hookEntry);
+  // Collapse duplicates beyond the first. Walk right-to-left so earlier
+  // indices stay valid while splicing.
+  let removed = 0;
+  for (let j = ownedIdxs.length - 1; j >= 1; j--) {
+    settings.hooks.SessionStart.splice(ownedIdxs[j], 1);
+    removed++;
+  }
+
+  if (ownedIdxs.length > 0) {
+    const idx = ownedIdxs[0];
+    const identical =
+      JSON.stringify(settings.hooks.SessionStart[idx]) === JSON.stringify(hookEntry);
+    if (identical && removed === 0) {
+      // Nothing to change; do not touch the file.
+      return 'SessionStart hook already configured';
+    }
+    settings.hooks.SessionStart[idx] = hookEntry;
     writeJSON(CC_SETTINGS, settings);
-    return 'SessionStart hook added to settings.json';
+    return removed > 0
+      ? `SessionStart hook updated in settings.json (removed ${removed} duplicate entr${removed === 1 ? 'y' : 'ies'})`
+      : 'SessionStart hook updated in settings.json';
   }
+
+  settings.hooks.SessionStart.push(hookEntry);
+  writeJSON(CC_SETTINGS, settings);
+  return 'SessionStart hook added to settings.json';
 }
 
 // ── Registry ──

package/src/hosted-mcp/.env.example

@@ -1,3 +1,7 @@
 # Kaleidoscope server environment
 # Copy to .env and fill in values. Never commit .env itself.
 DATABASE_URL=postgresql://kaleidoscope:YOUR_PASSWORD@localhost:5432/kaleidoscope
+KALEIDOSCOPE_LIVE_WALL_FILE=/var/lib/wip/kaleidoscope-live-wall.json
+KALEIDOSCOPE_LIVE_WALL_MEDIA_DIR=/var/www/wip.computer/public_html/media/kaleidoscope/generated
+KALEIDOSCOPE_LIVE_WALL_MAX_IMAGE_BYTES=10485760
+KALEIDOSCOPE_LIVE_WALL_FETCH_TIMEOUT_MS=15000