[zheng-weihao]

Summary

Redesigns orbit context as a purpose-scoped command family and moves every piece of hook logic into the CLI, so agents see a single consistent context channel across Claude, Codex, Qoder, and OpenCode.

• Three purpose-scoped entries instead of flag stacking: --startup (session-start block, routes internally to prime/reignite), bare orbit context (cruise block — in-session recovery), <key> (single value).
• Cruise block = cheap durables + conditional per-repo status (jot count / behind upstream / memo state) — never dumps memos, never fetches. Token discipline: mid-session refreshes never re-inject full memos.
• Hooks are thin wrappers — session-start.sh / session-resume.sh only run one orbit context command and wrap its markdown in <orbit-context> tags. All cold/resume detection logic moved into orbit.sh (bats-testable). stop.sh removed; its nudges are covered by add-time stderr + cruise block + done gate.
• [seed] jot sentinel and the gap model retired — replaced by inline computation on every read (add-time stderr, per-repo status, done gate), no durable placeholders.
• Done gate is per-repo with merged lines: leftover jots / thin memo with no capture / over-budget card. Advisory, but the skill now teaches the agent to treat actionable orbit: stderr as procedure requirements, not suggestions.
• OpenCode plugin: first transform injects --startup; cache rebuilds use the cruise block (never re-inject full memos); session.compacted injects two-way (immediate prompt + cache update). Resume routing is blocked on anomalyco/opencode#5409 (SessionStart hook with startup/resume/compact sources); the skill is the documented fallback.
• docs/spec-hooks.md is the new single home for the hook behavior contract (injection tiers, <orbit-context> tags, event routing matrix, auto-approve semantics).
• P8 refined: stdout carries machine-facing data by default, model-facing context for the orbit context family — session injection forwards them into model context.
• Skill: actionable orbit: stderr is a procedure requirement; explore is conditional on session-accumulated context; config key names (explore.paths, jot.bufferSize, memo.maxLines) no longer leak into agent-facing docs.

Test plan

• make test — 203/203 green
• bash -n orbit.sh hooks/*.sh hooks/codex/*.sh syntax OK
• node --experimental-strip-types --check .opencode-plugin/plugin.ts syntax OK
• Workspace A/B/C/D live verification: prime/reignite/cruise blocks, done gate per-repo, jot three-band, add stderr explore.paths, two-layer staleness, <orbit-context> tag wrapping, non-workspace silent no-op
• OpenCode live verification: startup block injected on fresh session; resume fires no event (matches #5409); session.compacted re-injects cruise block

Notes

• orbit context status → state (single key); orbit status command unchanged.
• context gaps key retired; per-repo status is the replacement.
• --prime / --reignite remain as explicit routing targets for humans/debugging; the skill exposes only --startup and bare.