@lovrozagar/grunt 0.10.1 → 0.11.1

package/.rulesync/skills/implement-plan/SKILL.md

@@ -4,10 +4,10 @@ description: "Execute remaining leaves in a .tmp/grunt/plans checklist. Skip [x]
 ---
 # implement-plan
 
-You execute the plan in this session. Skip `[x]`. Start at the first open leaf. Flip only the box after each leaf. When a phase's children are `[x]`, mark the phase `[x]`. Frontmatter `in-progress` then `done`.
+You execute the plan in this session. Start only on a plan the user approved, or when the request said "plan and do it". Skip `[x]`. Start at the first open leaf. Flip only the box after each leaf. When a phase's children are `[x]`, mark the phase `[x]`. Frontmatter `in-progress` then `done`.
 
 Arg `{n|path}` picks that file. Empty arg: unique in-progress, else unique ready, else list serials.
 
-Format: `.rulesync/reference/plan-format.md`. Write-allowlist = paths listed in the plan. Run Verify leaves. Do not skip a test leaf. Do not flip a behavior leaf `[x]` until its test ran. Fat dumps go through `node scripts/grunt-job.mjs`.
+Format: `.rulesync/reference/plan-format.md`. Write-allowlist = paths listed in the plan. Run Verify leaves. Do not skip a test leaf. Do not flip a behavior leaf `[x]` until its test ran. Fat dumps go through `node .rulesync/scripts/grunt-job.mjs`.
 
 On start: if this plan has no journal, Write one under `.tmp/grunt/implementations/` (`IMPL_NAME:`, `IMPL_PLAN: {n}`). Format: `.rulesync/reference/implementation-format.md`. After each leaf: append `N.M [x] …` to Log, update Files (repo-relative product paths) and Done. Blocked → `status: blocked` and Blockers. Verify done → `status: done`. Straight shots do not write a journal.

package/.rulesync/skills/jev/SKILL.md

@@ -1,15 +1,15 @@
 ---
 name: jev
-description: "Yes/no or named-option decision on text already saved. Run node scripts/jev.mjs --available first. On yes, one decision call. On no, decide yourself and do not mention Jev."
+description: "Yes/no or named-option decision on text already saved. Run node .rulesync/scripts/jev.mjs --available first. On yes, one decision call. On no, decide yourself and do not mention Jev."
 ---
 # jev
 
 Use this when the source text is already saved and the leftover question is a yes/no or a choice among options the research already named. Spec: `.rulesync/reference/jev.md`.
 
-Run `node scripts/jev.mjs --available`. It prints `yes` or `no` and exits 0.
+Run `node .rulesync/scripts/jev.mjs --available`. It prints `yes` or `no` and exits 0.
 
 `no`: answer the question yourself. Do not run a decision call. Do not mention Jev, a missing key, or setup.
 
-`yes`: read `.rulesync/reference/jev.md`. Write the passage and one questions file under `.tmp/grunt/jev/`. Run `node scripts/jev.mjs --state <state> --questions <questions>` once. Use the printed label and confidence. A low confidence is the result. Do not call again.
+`yes`: read `.rulesync/reference/jev.md`. Write the passage and one questions file under `.tmp/grunt/jev/`. Run `node .rulesync/scripts/jev.mjs --state <state> --questions <questions>` once. Use the printed label and confidence. A low confidence is the result. Do not call again.
 
 Open research, code, and grunt-job stay with the session. If the decision call exits non-zero, answer from the sources. Do not invent a label.

package/.rulesync/skills/listen/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: listen
-description: "Speech-to-text via node scripts/listen.mjs (ffmpeg mic + local whisper.cpp, OpenAI fallback). Input only."
+description: "Speech-to-text via node .rulesync/scripts/listen.mjs (ffmpeg mic + local whisper.cpp, OpenAI fallback). Input only."
 ---
 # listen
 
-When the user wants to dictate, transcribe a recording, or toggle a mic, run `node scripts/listen.mjs`. Spec: `.rulesync/reference/listen.md`. Input only (audio → text). Do not speak. Do not use `/speak`.
+When the user wants to dictate, transcribe a recording, or toggle a mic, run `node .rulesync/scripts/listen.mjs`. Spec: `.rulesync/reference/listen.md`. Input only (audio → text). Do not speak. Do not use `/speak`.
 
 `whoami` · `devices` · `rec [--seconds N]` · `start` · `stop` · `toggle` · `status` · `file --path P` · `latest`. `--clip` copies the transcript. `--cwd DIR` when the process is not already in the repo (hotkeys). `rec` prints the transcript and `transcript=.tmp/grunt/listen/latest.txt`.
 
 STT: local `whisper-cli` first (mac: `brew install whisper-cpp`); first listen downloads the ggml model to `~/.grunt/whisper/`. Else `OPENAI_API_KEY`. Mic verbs need ffmpeg. Do not tell them to pip-install openai-whisper or curl the model by hand.
 
-If the CLI exits non-zero, print its message. Lines with `setup:` are for the user — show that command. Tell them to run `node scripts/setup.mjs listen` (or `grunt setup`) in their terminal. Do not dump JSON. Do not invent a key. Spec: `.rulesync/reference/listen.md` `.rulesync/reference/setup.md`.
+If the CLI exits non-zero, print its message. Lines with `setup:` are for the user — show that command. Tell them to run `node .rulesync/scripts/setup.mjs listen` (or `grunt setup`) in their terminal. Do not dump JSON. Do not invent a key. Spec: `.rulesync/reference/listen.md` `.rulesync/reference/setup.md`.

package/.rulesync/skills/pickup/SKILL.md

@@ -18,7 +18,7 @@ Load a handoff and continue in this session. Not a mode. Not `/handoff`. Inverse
 
 ## Resolve
 
-Read `.tmp/grunt/handoffs/`. Use `node scripts/grunt-job.mjs --job search|exec` when the listing is fat.
+Read `.tmp/grunt/handoffs/`. Use `node .rulesync/scripts/grunt-job.mjs --job search|exec` when the listing is fat.
 
 Order:
 

package/.rulesync/skills/speak/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: speak
-description: "Text-to-speech via node scripts/speak.mjs (ElevenLabs or OpenAI). Output only."
+description: "Text-to-speech via node .rulesync/scripts/speak.mjs (ElevenLabs or OpenAI). Output only."
 ---
 # speak
 
-When the user wants spoken audio, run `node scripts/speak.mjs`. Spec: `.rulesync/reference/speak.md`. Output only (text → mp3). Do not record a mic. Do not transcribe.
+When the user wants spoken audio, run `node .rulesync/scripts/speak.mjs`. Spec: `.rulesync/reference/speak.md`. Output only (text → mp3). Do not record a mic. Do not transcribe.
 
 `whoami` · `voices` · `say --text T [--provider elevenlabs|openai] [--voice ID] [--out path] [--play]`.
 
 Auth: `ELEVENLABS_API_KEY` or `OPENAI_API_KEY` or `~/.grunt/speak.json`. Do not commit the key. Default voices: ElevenLabs George (`JBFqnCBsd6RMkjVDRZzb`), OpenAI `coral`.
 
-If the CLI exits non-zero, print its message. Lines with `setup:` are for the user — show that command. Tell them to run `node scripts/setup.mjs speak` (or `grunt setup`) in their terminal. Do not dump JSON. Do not invent a key. Spec: `.rulesync/reference/speak.md` `.rulesync/reference/setup.md`.
+If the CLI exits non-zero, print its message. Lines with `setup:` are for the user — show that command. Tell them to run `node .rulesync/scripts/setup.mjs speak` (or `grunt setup`) in their terminal. Do not dump JSON. Do not invent a key. Spec: `.rulesync/reference/speak.md` `.rulesync/reference/setup.md`.

package/.rulesync/skills/tmp/SKILL.md

@@ -33,9 +33,9 @@ TMP_EXT: md
 <artifact only>
 ```
 
-`TMP_EXT` optional. Write any root filename under `.tmp/grunt/` (not `plans|handoffs|implementations|browser|orchestrator-logs`). Grok `orchestrate-parent.js` runs `scripts/persist-tmp.mjs`: serial/slug/ext from `TMP_*`, strips those lines, no YAML frontmatter, rewrites path + content. Write outside that root or missing `TMP_NAME:` is denied.
+`TMP_EXT` optional. Write any root filename under `.tmp/grunt/` (not `plans|handoffs|implementations|browser|orchestrator-logs`). Grok `orchestrate-parent.js` runs `.rulesync/scripts/persist-tmp.mjs`: serial/slug/ext from `TMP_*`, strips those lines, no YAML frontmatter, rewrites path + content. Write outside that root or missing `TMP_NAME:` is denied.
 
-Host without that hook: name the file per **Path** yourself, or pipe the body to `node scripts/persist-tmp.mjs --workspace {repo}` and use its `path`.
+Host without that hook: name the file per **Path** yourself, or pipe the body to `node .rulesync/scripts/persist-tmp.mjs --workspace {repo}` and use its `path`.
 
 Never rewrite an existing dump; new serial. Artifact file content after hook = artifact only (no TMP_* lines no YAML frontmatter).
 

package/.rulesync/skills/write-plan/SKILL.md

@@ -4,10 +4,12 @@ description: "Write a local checklist under .tmp/grunt/plans/. Then /implement-p
 ---
 # write-plan
 
-You author the plan. Persist under `.tmp/grunt/plans/` via Write (hook runs `scripts/persist-plan.mjs`). Format: `.rulesync/reference/plan-format.md`.
+You author the plan. Persist under `.tmp/grunt/plans/` via Write (hook runs `.rulesync/scripts/persist-plan.mjs`). Format: `.rulesync/reference/plan-format.md`.
 
 Empty task → ask for a task and stop.
 
 Body starts with `PLAN_NAME: <3-6 word name>`, then Goal, Context, Constraints, Watch-outs, Steps, Verify. All boxes `[ ]`. Tests: new behavior or bug → failing test leaf before impl; other behavior → test leaf right after impl; docs/rename/config/generated → skip. Verify is the end gate.
 
-Report: wrote serial N at `.tmp/grunt/plans/{file}`. Next `/implement-plan {n}`. Do not dump the plan.
+The plan is the proposal and caps the result (`.rulesync/reference/scope.md`). Before writing, research until every leaf is defensible; ask any plan-shaping question the user alone can answer, then research again on the answer. Do not default a plan-shaping choice. A minor open choice goes under Constraints as the chosen default plus "confirm".
+
+Report: serial N at `.tmp/grunt/plans/{file}`, the goal, the phase list, the top risks, and any assumption to confirm. Do not dump the plan. Stop and ask for approval; on feedback, revise this file and stop again. Run `/implement-plan {n}` in the same turn only when the request said "plan and do it".

package/.rulesync/subagents/orchestrator.md

@@ -32,4 +32,4 @@ antigravity-cli:
 geminicli:
   model: gemini-2.5-pro
 ---
-Follow AGENTS.md. Do the work. Concise complete sentences with natural grammar. Scratch in `.tmp/grunt/`. Browse with `node scripts/browser.mjs`; the rail swaps to Chromium when Lightpanda is blocked. App e2e uses Playwright.
+Follow AGENTS.md. Do the work. Concise complete sentences with natural grammar. Scratch in `.tmp/grunt/`. Browse with `node .rulesync/scripts/browser.mjs`; the rail swaps to Chromium when Lightpanda is blocked. App e2e uses Playwright.

package/AGENTS.md

@@ -1,19 +1,21 @@
 <!-- grunt:begin -->
-You are the session agent. Do the work. Use en-US unless asked. Write concise complete sentences with natural grammar. Skip filler and fluff. Ship optimal solutions only; rewrite if not. Flag blockers. Do not monkey-patch. When advising, recommend the optimal choice based on research, data, and reasoning, not the user's preference. Change it only for new evidence or a flaw found in it. Pushback or a leading question is not a reason to switch; keep the recommendation and explain why. Do and verify the work yourself with every tool and credential you have. Don't guess, say "likely" or similar, trust older memory, stop short, leave placeholders, or hand the user anything you could do. Ask only when you truly lack the means, and say what you tried. Keep all work free of AI attribution, Co-Authored-By, trailers, and generated markers.
+
+You are the session agent. Do the work. Use en-US unless asked. Write concise complete sentences with natural grammar. Skip filler and fluff. Ship optimal solutions only; rewrite if not. Flag blockers. Do not monkey-patch. When advising, recommend the optimal choice based on research, data, and reasoning, not the user's preference. Change it only for new evidence or a flaw found in it. Pushback or a leading question is not a reason to switch; keep the recommendation and explain why. Do and verify the work yourself with every tool and credential you have. Don't guess, say "likely" or similar, trust older memory, stop short, leave placeholders, or hand the user anything you could do. Stopping for approval of a written plan is not stopping short. Ask only when you truly lack the means (the user's intent and preferences count), and say what you tried. Keep all work free of AI attribution, Co-Authored-By, trailers, and generated markers.
 
 Examples are a class. `...`, `etc` / etcetera, and a `;` between specimens are that same class. An example, an open list, or a negative example means infer the class and do what reasonably fits this case, including what they did not name. Do not copy the example's words, stop at the named items, or add work outside the class. In a plan or a spawn prompt, pass the class. A `;` in code or an ordinary clause is not that cue. Closed instructions stay literal. Detail: `.rulesync/reference/output.md`.
 
 A question or a work result opens with the verdict, the counts, or the outcome, failures included. The middle is the concise explanation. The last line lands those same facts as the decision or the one real next step. Do not invent a question or change the numbers. Skip this shape for a one-line answer, a raw artifact, or a reply a skill already shapes.
 
-Size first. Straight shot: do it. Else read `.rulesync/reference/scope.md`.
+Plan first. A straight shot is one file, one obvious edit, and nothing to decide: do it. Anything else: the plan caps the result, so research until every leaf is defensible, ask what only the user can answer, and research again on each answer. A clear task gets one plan; an unclear one gets rounds. Then `/write-plan`, stop for approval, revise on feedback, and `/implement-plan`. Detail: `.rulesync/reference/scope.md`.
 Default `/auto`: keep going; ask on blockers. `/ask`: one step, then ask.
 Ask before destructive git (stash, reset, checkout, restore, clean, rebase, push -f); others share the tree. In a loop, skip it and edit code instead.
 
 Read `.rulesync/reference/INDEX.md` once. When a row matches the work, read that reference in full.
-To learn the repo layout, use the folder map if it is in your context. If it is missing, or you need more depth, run `node scripts/folder-map.mjs [dir]` instead of exploring with `ls` or `find`.
+To learn the repo layout, use the folder map if it is in your context. If it is missing, or you need more depth, run `node .rulesync/scripts/folder-map.mjs [dir]` instead of exploring with `ls` or `find`.
 
 Large dumps are compressed (search, test logs, snaps). Scratch and dumps live in `.tmp/grunt/` (gitignored). After a write, recap the path; edit with an offset slice when you need lines.
-Fat dumps: `node scripts/grunt-job.mjs --job search|exec|slice|fetch|test` first; spawn grunt only when the dump needs judgment.
+Fat dumps: `node .rulesync/scripts/grunt-job.mjs --job search|exec|slice|fetch|test` first; spawn grunt only when the dump needs judgment.
+
+Browse with `node .rulesync/scripts/browser.mjs`. Lightpanda first; the rail swaps to Chromium when Lightpanda is blocked, empty, or client-rendered. Do not stop and say you cannot. App e2e is `playwright test`.
 
-Browse with `node scripts/browser.mjs`. Lightpanda first; the rail swaps to Chromium when Lightpanda is blocked, empty, or client-rendered. Do not stop and say you cannot. App e2e is `playwright test`.
 <!-- grunt:end -->

package/CHANGELOG.md

@@ -7,6 +7,26 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.11.0] - 2026-10-12
+
+### Changed
+
+- Breaking: grunt's product scripts moved from root `scripts/` to `.rulesync/scripts/`. Hooks, `grunt:*` package scripts, the pipeline, skills, and references use the new path. `grunt upgrade` moves them: it deletes grunt-owned names from a root `scripts/` that held a grunt install, removes that dir if it ends up empty, and rewrites `scripts/<grunt name>` refs in package scripts and `.rulesync/grunt.pipeline.jsonc`. Consumer scripts and `scripts/lib/env.mjs` stay where they are. No forwarding stubs
+- Plan by default: a straight shot is one file, one obvious edit, and nothing to decide. Anything else gets research proportional to the work, plan-shaping questions the user alone can answer (with more research on each answer), then `/write-plan`, a stop for approval, revisions on feedback, and `/implement-plan`. A clear task gets one plan; an unclear one gets rounds
+- The folder map lists `.rulesync/scripts`, and `grunt-job --job search` searches dot directories (`.gitignore` still applies)
+
+### Fixed
+
+- `grunt:begin` / `grunt:end` blocks use blank lines around the body, the form prettier and other markdown formatters produce, and grunt reads either form. Formatters and `grunt:rulesync:generate` no longer rewrite each other's output, and `grunt:rulesync:check` stops reporting drift after a format
+
+## [0.10.1] - 2026-10-11
+
+### Changed
+
+- Session voice: an example, an open list, a negative example, `...`, `etc` / etcetera, or a semicolon between specimens is a class to carry out or avoid. Questions and work results open with the verdict and close on those same facts. Detail in `.rulesync/reference/output.md`
+
+## [0.10.0] - 2026-10-09
+
 ### Added
 
 - `scripts/jev.mjs`: one TypeSafe System One call for an external research decision, with a per-process and UTC-day cap. Key via `node scripts/setup.mjs jev` (`~/.grunt/jev.json`) or `TYPESAFE_API_KEY`. Doctor reports present or absent. `--available` prints `yes` or `no` and exits 0
@@ -14,9 +34,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Live agent board at `~/.grunt/board/`: one line per running agent (time, provider, model, effort, session, directory, work). A read drops a dead process. SessionStart `additionalContext` stays the folder map. UserPromptSubmit can append up to 8 other live lines.
 - `google-workspace`, `listen`, `speak`, and `clasp` are opt-in. Init and upgrade ask with a multiselect that starts clear. `--packs` selects them without a TTY (`none` selects nothing). A repo with no `.rulesync/grunt.features.jsonc` drops those copies on the next init or upgrade. The npm package still ships them. Browser stays installed. Setup lists enabled packs and always lists browser and jev. Doctor always reports jev, and reports the other four only when that pack is enabled.
 
-### Changed
-
-- Session voice: an example, an open list, a negative example, `...`, `etc` / etcetera, or a semicolon between specimens is a class to carry out or avoid. Questions and work results open with the verdict and close on those same facts. Detail in `.rulesync/reference/output.md`
+## [0.9.5] - 2026-10-05
 
 ### Fixed
 

package/CLAUDE.md

@@ -1,3 +1,5 @@
 <!-- grunt:begin -->
+
 @AGENTS.md
+
 <!-- grunt:end -->

package/README.md

@@ -43,7 +43,7 @@ All OS. Print-only. Never auto-install.
 
 ```
 grunt doctor
-node scripts/doctor.mjs
+node .rulesync/scripts/doctor.mjs
 ```
 
 Exit 1 if any required missing; 0 if all required ok. Optional tools are reported; missing optional does not fail.
@@ -59,12 +59,12 @@ Exit 1 if any required missing; 0 if all required ok. Optional tools are reporte
 | chromium-family | yes | linux `sudo apt install chromium` · mac `brew install --cask chromium` or `google-chrome` · win `winget install Google.Chrome` / `Microsoft.Edge` + PATH |
 | gh | no | report only |
 | clasp | no | `npm i -g @google/clasp` · custom Apps Script only |
-| google-workspace | no | `node scripts/google-workspace.mjs` · Sheets Docs Slides Calendar Gmail · doctor reports `oauth`/`tokens`/`adc`/`clasprc` (no secrets) · `grunt setup` / `node scripts/setup.mjs google-workspace` |
-| speak | no | `node scripts/speak.mjs` · TTS output (ElevenLabs or OpenAI) · `grunt setup` / `node scripts/setup.mjs speak` · or `ELEVENLABS_API_KEY` / `OPENAI_API_KEY` / `~/.grunt/speak.json` |
+| google-workspace | no | `node .rulesync/scripts/google-workspace.mjs` · Sheets Docs Slides Calendar Gmail · doctor reports `oauth`/`tokens`/`adc`/`clasprc` (no secrets) · `grunt setup` / `node .rulesync/scripts/setup.mjs google-workspace` |
+| speak | no | `node .rulesync/scripts/speak.mjs` · TTS output (ElevenLabs or OpenAI) · `grunt setup` / `node .rulesync/scripts/setup.mjs speak` · or `ELEVENLABS_API_KEY` / `OPENAI_API_KEY` / `~/.grunt/speak.json` |
 | ffmpeg | no | mic capture for `/listen` · mac `brew install ffmpeg` · linux `sudo apt install ffmpeg` · win `winget install Gyan.FFmpeg` |
 | whisper-cli | no | local STT for `/listen` · mac `brew install whisper-cpp` · first listen downloads `ggml-base.en.bin` · setup in `.rulesync/reference/listen.md` |
-| listen | no | `node scripts/listen.mjs` · STT input · `grunt setup` / `node scripts/setup.mjs listen` · local whisper.cpp then OpenAI Whisper |
-| jev | no | `node scripts/jev.mjs --state FILE --questions FILE` · one closed external research decision · `grunt setup` / `node scripts/setup.mjs jev` · `TYPESAFE_API_KEY` or `~/.grunt/jev.json` · local cap, one request per process |
+| listen | no | `node .rulesync/scripts/listen.mjs` · STT input · `grunt setup` / `node .rulesync/scripts/setup.mjs listen` · local whisper.cpp then OpenAI Whisper |
+| jev | no | `node .rulesync/scripts/jev.mjs --state FILE --questions FILE` · one closed external research decision · `grunt setup` / `node .rulesync/scripts/setup.mjs jev` · `TYPESAFE_API_KEY` or `~/.grunt/jev.json` · local cap, one request per process |
 
 Rulesync schema doctor is separate: `grunt:rulesync:doctor` (or SoT `rulesync:doctor`).
 
@@ -83,10 +83,10 @@ Rulesync schema doctor is separate: `grunt:rulesync:doctor` (or SoT `rulesync:do
 - `check` → run `grunt:rulesync:check`
 - `sync-globals` → run `grunt:sync:globals` (dry-run); `--apply` → `grunt:sync:globals:apply`
 - `purge-mcps` → run `grunt:purge:global-mcps` (dry-run); `--apply` → `grunt:purge:global-mcps:apply`
-- `doctor` → run `grunt:doctor` (`grunt doctor` / `node scripts/doctor.mjs` stay). Rulesync schema: `grunt:rulesync:doctor`
-- `setup` → run `grunt:setup` (`node scripts/setup.mjs`). The menu lists enabled packs and always lists browser and jev. Flags for non-TTY keys/`--creds`
+- `doctor` → run `grunt:doctor` (`grunt doctor` / `node .rulesync/scripts/doctor.mjs` stay). Rulesync schema: `grunt:rulesync:doctor`
+- `setup` → run `grunt:setup` (`node .rulesync/scripts/setup.mjs`). The menu lists enabled packs and always lists browser and jev. Flags for non-TTY keys/`--creds`
 - `upgrade` → install the latest grunt as a devDependency and re-run with it, then the same merge as init for an already-inited repo: copy owned trees/scripts, prune retired grunt-owned names, print reserved skill names
-- `map [dir]` → code-only folder map (`scripts/folder-map.mjs`); no package manager needed. See [Folder map](#folder-map)
+- `map [dir]` → code-only folder map (`.rulesync/scripts/folder-map.mjs`); no package manager needed. See [Folder map](#folder-map)
 - `help`
 - `version`
 
@@ -136,16 +136,16 @@ SoT: `.rulesync/subagents/{orchestrator grunt}.md`
 
 Emit: `.claude/` `.grok/` `.agents/` `.gemini/`
 
-- **orchestrator** — session agent. Tools on. Does the work. en-US unless asked. Concise complete sentences with natural grammar. Skip filler and fluff. Optimal solutions only; rewrite if not. Flag blockers. Do not monkey-patch. Runs `node scripts/grunt-job.mjs` for fat dumps; spawn grunt only when the dump needs judgment.
+- **orchestrator** — session agent. Tools on. Does the work. en-US unless asked. Concise complete sentences with natural grammar. Skip filler and fluff. Optimal solutions only; rewrite if not. Flag blockers. Do not monkey-patch. Runs `node .rulesync/scripts/grunt-job.mjs` for fat dumps; spawn grunt only when the dump needs judgment.
 - **grunt** — isolation worker. Facts only (≤8 lines, stash receipt when needed).
 
-Fat dumps rewrite to `scripts/grunt-job.mjs` (squeez + stash). Scratch goes in `.tmp/grunt/`. Voice: `.rulesync/reference/output.md`. Examples are a class. Questions and work results open with the verdict and close on those same facts. `GEMINI.md` → `@AGENTS.md`.
+Fat dumps rewrite to `.rulesync/scripts/grunt-job.mjs` (squeez + stash). Scratch goes in `.tmp/grunt/`. Voice: `.rulesync/reference/output.md`. Examples are a class. Questions and work results open with the verdict and close on those same facts. `GEMINI.md` → `@AGENTS.md`.
 
 ## Browser
 
-Lightpanda-first session CLI: `node scripts/browser.mjs`. Zero MCP. Zero env knobs. The rail swaps to Chromium for `shot`/`pdf`/`trace`, Windows, missing Lightpanda, probe-fail, Chromium-first hosts (figma, Google docs/sheets/slides, Gmail, earth, Amazon), or a blocked/empty/client-rendered snap. Session: `.tmp/grunt/browser/`. Spec: [`.rulesync/reference/browser.md`](.rulesync/reference/browser.md). App e2e uses Playwright. URL-in-a-cite is a cite.
+Lightpanda-first session CLI: `node .rulesync/scripts/browser.mjs`. Zero MCP. Zero env knobs. The rail swaps to Chromium for `shot`/`pdf`/`trace`, Windows, missing Lightpanda, probe-fail, Chromium-first hosts (figma, Google docs/sheets/slides, Gmail, earth, Amazon), or a blocked/empty/client-rendered snap. Session: `.tmp/grunt/browser/`. Spec: [`.rulesync/reference/browser.md`](.rulesync/reference/browser.md). App e2e uses Playwright. URL-in-a-cite is a cite.
 
-`node scripts/browser.mjs doctor` (alias `ensure`) runs the unified doctor (`scripts/doctor.mjs`). Install engines: [Prerequisites](#prerequisites).
+`node .rulesync/scripts/browser.mjs doctor` (alias `ensure`) runs the unified doctor (`.rulesync/scripts/doctor.mjs`). Install engines: [Prerequisites](#prerequisites).
 
 ## Skills
 
@@ -159,7 +159,7 @@ Present under `.claude` / `.rulesync` / `.agents` / `.grok` (`rulesync -f skills
 
 Reserved names: do not reuse those stems for consumer custom skills. Same name → one SSOT under `.rulesync/skills/<name>/`; re-init force-refresh overwrites grunt-owned names; extras kept; maps `origin` badge ≠ content picker. Retired 0.5 names (`parent` `solo` `cascade` plus subagents `implementer` `thinker`) are pruned on init/upgrade. See `.rulesync/reference/law.md` (flows into INDEX).
 
-Size first: `.rulesync/reference/scope.md`. Straight shot → do it. Else that file.
+Plan first: `.rulesync/reference/scope.md`. Straight shot (one file, one obvious edit, nothing to decide) → do it. Else research → `/write-plan` → approval → `/implement-plan`.
 
 `/write-plan` and `/implement-plan` SSOT: `.rulesync/skills/{write-plan,implement-plan}/`; format SSOT `.rulesync/reference/plan-format.md`. `/write-plan` plan-only inspect-pause → `next: /implement-plan {n}`; empty `/implement-plan` resumes unique in-progress or starts unique ready, else lists (need serial); slash `/implement-plan {n}` disk/file. The session agent executes the plan. `/implement-plan` also writes `.tmp/grunt/implementations/` (format `.rulesync/reference/implementation-format.md`): Files / Log / Done for commits. Straight shots skip the journal.
 
@@ -187,7 +187,7 @@ Emit writes other-CLI trees from `.rulesync` for the **next** process of that CL
 
 ### Folder map
 
-Claude and Codex get a folder map at SessionStart (`scripts/session-map.mjs`), so agents skip `ls`/`find` loops. Agents run `node scripts/folder-map.mjs <dir>` (same as `grunt map <dir>`) for depth. Grok and Antigravity get the `AGENTS.md` line only. The injected map stays under Claude Code's 10,000-character per-hook `additionalContext` limit (about 2.4k tokens); past it, Claude keeps only a 2KB preview inline. `grunt map` itself uses the full `budget`. SessionStart `additionalContext` stays that map.
+Claude and Codex get a folder map at SessionStart (`.rulesync/scripts/session-map.mjs`), so agents skip `ls`/`find` loops. Agents run `node .rulesync/scripts/folder-map.mjs <dir>` (same as `grunt map <dir>`) for depth. Grok and Antigravity get the `AGENTS.md` line only. The injected map stays under Claude Code's 10,000-character per-hook `additionalContext` limit (about 2.4k tokens); past it, Claude keeps only a 2KB preview inline. `grunt map` itself uses the full `budget`. SessionStart `additionalContext` stays that map.
 
 - Folders only, never files. Source: `git ls-files --cached --others --exclude-standard`, so gitignored paths never show
 - A folder shows when it or a descendant holds a code file (`codeExt`) and no path segment is a dot dir or in `skip`
@@ -212,13 +212,13 @@ Optional `.rulesync/grunt.map.jsonc` (missing or invalid → defaults):
 
 One live line per running agent, stored in `~/.grunt/board/` (one file per session, this machine). The line is time, provider, model, effort, session id, directory, and current work. A missing model or effort is `-`. A read deletes a line whose process is gone, so quit, crash, and OOM drop off at the next read.
 
-Claude and Codex write the row at SessionStart. `additionalContext` stays the folder map. Every UserPromptSubmit refreshes the row and may append up to 8 other live lines. Grok writes on the prompt. Antigravity runs `node scripts/board.mjs set --work` when the work changes and `node scripts/board.mjs` to read.
+Claude and Codex write the row at SessionStart. `additionalContext` stays the folder map. Every UserPromptSubmit refreshes the row and may append up to 8 other live lines. Grok writes on the prompt. Antigravity runs `node .rulesync/scripts/board.mjs set --work` when the work changes and `node .rulesync/scripts/board.mjs` to read.
 
 ### Secrets (machine)
 
 Not git. Not `sync-globals`.
 
-First-hand: `grunt setup` (TTY). The menu lists enabled packs and always lists browser and jev. Per target: `node scripts/setup.mjs speak|listen|google-workspace|browser`. Spec: `.rulesync/reference/setup.md`.
+First-hand: `grunt setup` (TTY). The menu lists enabled packs and always lists browser and jev. Per target: `node .rulesync/scripts/setup.mjs speak|listen|google-workspace|browser`. Spec: `.rulesync/reference/setup.md`.
 
 | | where |
 | --- | --- |
@@ -313,14 +313,14 @@ Same topology as the session recap; every legal edge labeled.
 
 ### `need:` / grunt-job
 
-The session agent runs `node scripts/grunt-job.mjs --job search|exec|slice|fetch|test` for fat dumps. A grunt child that still needs a fat dump **stops** on a `need:` JSON line. SubagentStop intercepts `search|exec|slice|fetch` (cap 4) in-hook. Spawn a grunt **model** only when the dump needs judgment. Grunt does not emit `need:` for its own tool use.
+The session agent runs `node .rulesync/scripts/grunt-job.mjs --job search|exec|slice|fetch|test` for fat dumps. A grunt child that still needs a fat dump **stops** on a `need:` JSON line. SubagentStop intercepts `search|exec|slice|fetch` (cap 4) in-hook. Spawn a grunt **model** only when the dump needs judgment. Grunt does not emit `need:` for its own tool use.
 
 ```
  session agent
       │
       │  grunt-job first
       ▼
- node scripts/grunt-job.mjs --job search|exec|slice|fetch|test
+ node .rulesync/scripts/grunt-job.mjs --job search|exec|slice|fetch|test
       │
       │  spawn grunt model only if the dump needs judgment
       ▼
@@ -343,7 +343,7 @@ The session agent runs `node scripts/grunt-job.mjs --job search|exec|slice|fetch
 | `scrub-spawn-prompt` / `parse-need` / `grunt-job` | yes | **local** | Hooks and scripts. Isolation facts are grunt-job output, not a model hop. |
 | emit / generate / init | yes (this repo / install) | **local** | Writes other-CLI configs. Not a runtime line to those CLIs. |
 | WebSearch / web_fetch | tool from host | **remote-not-LLM** | Network search/fetch. Not a second Model API box. Snippet/cite/"what is X"/world fact: grunt `job: web`. Live URL/DOM: grunt browser rail, not this box. |
-| `jev` | yes | **remote-not-LLM** | `node scripts/jev.mjs --state FILE --questions FILE`. One System One decision about external source text. Not the host Model API. Not grunt-job. |
+| `jev` | yes | **remote-not-LLM** | `node .rulesync/scripts/jev.mjs --state FILE --questions FILE`. One System One decision about external source text. Not the host Model API. Not grunt-job. |
 | MCP | policy deny | n/a | Denied by policy in-tree. Do not draw as a main path. |
 | Model API | **no** (one box outside) | AI-server | This host’s vendor SDK only. Parent and child **turns** complete here. Spawn omits model; frontmatter on `.rulesync/subagents/*.md` picks the model. |
 | Other CLIs | no (not this process) | emit/config only | Same protocol files emitted elsewhere. No hop, no shared peek. |
@@ -396,9 +396,9 @@ Repo-relative (repository root):
 
 ## Layout
 
-Published (`package.json` `files`): `bin/grunt.js` `cli` `scripts/check-globals.mjs` `scripts/emit-agent-shell-tools.mjs` `scripts/emit-gemini.mjs` `scripts/emit-maps.mjs` `scripts/guarded-md.mjs` `scripts/guarded-roots.mjs` `scripts/emit-mcp-policy.mjs` `scripts/gate-fat-tools.mjs` `scripts/hooks-union.mjs` `scripts/pipeline.mjs` `scripts/grunt-job.mjs` `scripts/parse-need.mjs` `scripts/persist-handoff.mjs` `scripts/persist-implementation.mjs` `scripts/persist-tmp.mjs` `scripts/persist-plan.mjs` `scripts/purge-global-mcps.mjs` `scripts/scrub-spawn-prompt.mjs` `scripts/scrub-text-lib.mjs` `scripts/sync-global-settings.mjs` `scripts/board.mjs` `scripts/browser.mjs` `scripts/feature-packs.mjs` `scripts/speak.mjs` `scripts/listen.mjs` `scripts/jev.mjs` `scripts/google-workspace.mjs` `scripts/interactive.mjs` `scripts/prompt.mjs` `scripts/setup.mjs` `scripts/doctor.mjs` `scripts/skill-conflicts.mjs` `scripts/scrub-text` `.rulesync` `.grok` `.codex` `.claude` `.agents` `AGENTS.md` `CLAUDE.md` `.mcp.json` `README.md` `LICENSE` `CHANGELOG.md`
+Published (`package.json` `files`): `bin/grunt.js` `cli` `.rulesync/scripts/check-globals.mjs` `.rulesync/scripts/emit-agent-shell-tools.mjs` `.rulesync/scripts/emit-gemini.mjs` `.rulesync/scripts/emit-maps.mjs` `.rulesync/scripts/guarded-md.mjs` `.rulesync/scripts/guarded-roots.mjs` `.rulesync/scripts/emit-mcp-policy.mjs` `.rulesync/scripts/gate-fat-tools.mjs` `.rulesync/scripts/hooks-union.mjs` `.rulesync/scripts/pipeline.mjs` `.rulesync/scripts/grunt-job.mjs` `.rulesync/scripts/parse-need.mjs` `.rulesync/scripts/persist-handoff.mjs` `.rulesync/scripts/persist-implementation.mjs` `.rulesync/scripts/persist-tmp.mjs` `.rulesync/scripts/persist-plan.mjs` `.rulesync/scripts/purge-global-mcps.mjs` `.rulesync/scripts/scrub-spawn-prompt.mjs` `.rulesync/scripts/scrub-text-lib.mjs` `.rulesync/scripts/sync-global-settings.mjs` `.rulesync/scripts/board.mjs` `.rulesync/scripts/browser.mjs` `.rulesync/scripts/feature-packs.mjs` `.rulesync/scripts/speak.mjs` `.rulesync/scripts/listen.mjs` `.rulesync/scripts/jev.mjs` `.rulesync/scripts/google-workspace.mjs` `.rulesync/scripts/interactive.mjs` `.rulesync/scripts/prompt.mjs` `.rulesync/scripts/setup.mjs` `.rulesync/scripts/doctor.mjs` `.rulesync/scripts/skill-conflicts.mjs` `.rulesync/scripts/scrub-text` `.rulesync` `.grok` `.codex` `.claude` `.agents` `AGENTS.md` `CLAUDE.md` `.mcp.json` `README.md` `LICENSE` `CHANGELOG.md`
 
-No `scripts/*.test.ts` `scripts/fixtures/` `docs/` `coverage/` `vitest.config.ts` in `files`. `cli` dir ships whole (includes `cli/*.test.ts`).
+No `.rulesync/scripts/*.test.ts` `.rulesync/scripts/fixtures/` `docs/` `coverage/` `vitest.config.ts` in `files`. `cli` dir ships whole (includes `cli/*.test.ts`).
 
 Not packed: `GEMINI.md` `.gemini/` — `emit-gemini.mjs` writes them on `generate` / `init` (`GEMINI.md` → `@AGENTS.md`). Not in `files`.
 
@@ -406,7 +406,7 @@ Repo root (also): `coverage/` `.gemini/` `GEMINI.md` — no `src/` no `CONTRIBUT
 
 - `bin/grunt.js` — CLI bin
 - `cli/grunt.mjs` — commands
-- `scripts/` — init copies product scripts (`grunt-job.mjs` `scrub-text` …). Re-init sentinels: `.grok/hooks/orchestrate-parent.js` `.rulesync` `<!-- grunt:begin -->`
+- `.rulesync/scripts/` — init copies product scripts (`grunt-job.mjs` `scrub-text` …). Re-init sentinels: `.grok/hooks/orchestrate-parent.js` `.rulesync` `<!-- grunt:begin -->`
 - `.rulesync/` — SoT (subagents skills reference). Skills + reference maps on generate; host trees are mirrors
 - `.claude/` `.grok/` `.codex/` `.agents/` `.gemini/` — host emit; not SoT; no mirror scan
 - `coverage/` — vitest local not published
@@ -420,7 +420,7 @@ npm i && npm test
 ```
 
 - Test: `vitest run --coverage`
-- Test include: `scripts/**/*.test.ts` `cli/**/*.test.ts`
+- Test include: `.rulesync/scripts/**/*.test.ts` `cli/**/*.test.ts`
 - Coverage include: `cli/**`
 - Coverage thresholds: 100% lines / functions / branches / statements
 - Dev deps include rulesync vitest typescript

package/cli/grunt.mjs

@@ -12,9 +12,9 @@ import {
   detectPackageManager,
   isPackageManager,
   runScriptArgs,
-} from "../scripts/package-manager.mjs"
-import { mapCommand } from "../scripts/folder-map.mjs"
-import { PACK_OPTIONS, parsePacksFlag, selectedPacks } from "../scripts/feature-packs.mjs"
+} from "../.rulesync/scripts/package-manager.mjs"
+import { mapCommand } from "../.rulesync/scripts/folder-map.mjs"
+import { PACK_OPTIONS, parsePacksFlag, selectedPacks } from "../.rulesync/scripts/feature-packs.mjs"
 
 const PKG_ROOT = path.join(path.dirname(fileURLToPath(import.meta.url)), "..")
 

package/cli/grunt.test.ts

@@ -34,9 +34,9 @@ vi.mock("./init.mjs", () => ({
 }));
 vi.mock("./spawn.mjs", () => ({ execFileSync }));
 vi.mock("./self-update.mjs", () => ({ selfUpdate }));
-vi.mock("../scripts/folder-map.mjs", () => ({ mapCommand }));
-vi.mock("../scripts/package-manager.mjs", async (importOriginal) => {
-  const actual = await importOriginal<typeof import("../scripts/package-manager.mjs")>();
+vi.mock("../.rulesync/scripts/folder-map.mjs", () => ({ mapCommand }));
+vi.mock("../.rulesync/scripts/package-manager.mjs", async (importOriginal) => {
+  const actual = await importOriginal<typeof import("../.rulesync/scripts/package-manager.mjs")>();
   actualDetect.fn = actual.detectPackageManager;
   detectPackageManager.mockImplementation((...args: unknown[]) =>
     actual.detectPackageManager(
@@ -53,15 +53,15 @@ vi.mock("./prompt.mjs", () => ({
   spinner,
   bailIfCancel,
 }));
-vi.mock("../scripts/feature-packs.mjs", async (importOriginal) => {
-  const actual = await importOriginal<typeof import("../scripts/feature-packs.mjs")>();
+vi.mock("../.rulesync/scripts/feature-packs.mjs", async (importOriginal) => {
+  const actual = await importOriginal<typeof import("../.rulesync/scripts/feature-packs.mjs")>();
   return { ...actual, selectedPacks };
 });
 
 import {
   PACKAGE_MANAGER_ASK,
   UNKNOWN_PACKAGE_MANAGER,
-} from "../scripts/package-manager.mjs";
+} from "../.rulesync/scripts/package-manager.mjs";
 import { APPLY_GLOBALS_CONFIRM, parseArgv, start } from "./grunt.mjs";
 
 const USAGE = `Usage: grunt [command]

package/cli/init.mjs

@@ -7,7 +7,7 @@ import {
   findSkillContentConflicts,
   formatSkillConflictWarn,
   listSkillDirNames,
-} from "../scripts/skill-conflicts.mjs"
+} from "../.rulesync/scripts/skill-conflicts.mjs"
 import {
   SENTINEL_BEGIN,
   extractGruntBody,
@@ -16,12 +16,12 @@ import {
   remergeGuardedRoots,
   withGuardedCheckInteriors,
   mergeReferenceMarkdown,
-} from "../scripts/guarded-md.mjs"
+} from "../.rulesync/scripts/guarded-md.mjs"
 import {
   COMMANDS as PIPELINE_COMMANDS,
   PIPELINE_CONFIG_REL,
   inferPipelineSkip,
-} from "../scripts/pipeline.mjs"
+} from "../.rulesync/scripts/pipeline.mjs"
 import {
   PACKAGE_MANAGERS,
   UNKNOWN_PACKAGE_MANAGER,
@@ -29,8 +29,8 @@ import {
   installArgs,
   isPackageManager,
   runScriptArgs,
-} from "../scripts/package-manager.mjs"
-import { LAW_REL, emitMaps } from "../scripts/emit-maps.mjs"
+} from "../.rulesync/scripts/package-manager.mjs"
+import { LAW_REL, emitMaps } from "../.rulesync/scripts/emit-maps.mjs"
 import {
   isUnselectedPackPath,
   resolvePackSelection,
@@ -38,7 +38,7 @@ import {
   unselectedRefNames,
   unselectedScriptNames,
   writePacks,
-} from "../scripts/feature-packs.mjs"
+} from "../.rulesync/scripts/feature-packs.mjs"
 
 export {
   GUARDED_ROOT_FILES,
@@ -57,7 +57,7 @@ export {
   withGuardedCheckInteriors,
   extraH2Sections,
   mergeReferenceMarkdown,
-} from "../scripts/guarded-md.mjs"
+} from "../.rulesync/scripts/guarded-md.mjs"
 
 const PKG_ROOT = path.join(path.dirname(fileURLToPath(import.meta.url)), "..")
 
@@ -102,12 +102,18 @@ export const PRODUCT_SCRIPTS = [
 ]
 
 const COPY_DIRS = [".rulesync", ".grok", ".codex", ".claude", ".agents"]
+/** Product scripts home in the package and in consumers. */
+export const SCRIPTS_REL = ".rulesync/scripts"
+/** Pre-0.11 home. Grunt-owned names here move to SCRIPTS_REL on init/upgrade; consumer files stay. */
+export const LEGACY_SCRIPTS_REL = "scripts"
+/** Any of these in LEGACY_SCRIPTS_REL means grunt installed there before, so its product names are grunt's. */
+const LEGACY_SCRIPTS_MARKERS = ["guarded-roots.mjs", "gate-fat-tools.mjs"]
 /** Generated on dest from the dest tree (grunt refs + consumer extras). Never stamp the package copies. */
 export const GENERATED_MAP_FILES = new Set(["INDEX.md", "skills-map.md", "refs-map.md"])
 const COPY_ROOT_IF_MISSING = [".mcp.json"]
 export const RETIRED_SKILLS = ["parent", "solo", "cascade"]
 export const RETIRED_AGENTS = ["implementer", "thinker"]
-/** Cumulative. Dest `scripts/<name>` deleted on init/upgrade even if no longer shipped. */
+/** Cumulative. Dest `<SCRIPTS_REL|LEGACY_SCRIPTS_REL>/<name>` deleted on init/upgrade even if no longer shipped. */
 export const RETIRED_SCRIPTS = ["telemetry.mjs", "grunt-config.mjs"]
 /** Repo-relative paths grunt used to ship. Deleted on init/upgrade. Consumer extras elsewhere kept. */
 export const RETIRED_PATHS = [
@@ -238,13 +244,40 @@ export function pruneRetired(dest, { pkgRoot } = {}) {
     rmQuiet(path.join(root, ".grok", "roles", `${name}.toml`))
   }
   for (const name of RETIRED_SCRIPTS) {
-    rmQuiet(path.join(root, "scripts", name))
+    rmQuiet(path.join(root, ...SCRIPTS_REL.split("/"), name))
+    rmQuiet(path.join(root, LEGACY_SCRIPTS_REL, name))
   }
   for (const rel of RETIRED_PATHS) {
     rmQuiet(path.join(root, ...rel.split("/")))
   }
 }
 
+/** Drop grunt-owned names from the pre-0.11 root `scripts/`; remove the dir only when that leaves it empty. */
+export function pruneLegacyScripts(dest) {
+  const dir = path.join(path.resolve(dest), LEGACY_SCRIPTS_REL)
+  if (!LEGACY_SCRIPTS_MARKERS.some((name) => fs.existsSync(path.join(dir, name)))) return
+  for (const name of PRODUCT_SCRIPTS) rmQuiet(path.join(dir, name))
+  if (fs.readdirSync(dir).length === 0) fs.rmdirSync(dir)
+}
+
+const LEGACY_SCRIPT_REF_RE = new RegExp(
+  `(^|[\\s"'\`=(]|\\./|\\}/)${LEGACY_SCRIPTS_REL}/(${PRODUCT_SCRIPTS.map(escapeRe).join("|")})(?![\\w.-])`,
+  "g",
+)
+
+/** Rewrite pre-0.11 `scripts/<grunt name>` command refs to SCRIPTS_REL. Consumer script refs stay. */
+export function rewriteLegacyScriptRefs(text) {
+  return String(text).replace(LEGACY_SCRIPT_REF_RE, `$1${SCRIPTS_REL}/$2`)
+}
+
+function rewriteLegacyPipelineConfig(dest) {
+  const abs = path.join(dest, PIPELINE_CONFIG_REL)
+  if (!fs.existsSync(abs)) return
+  const text = fs.readFileSync(abs, "utf8")
+  const next = rewriteLegacyScriptRefs(text)
+  if (next !== text) fs.writeFileSync(abs, next)
+}
+
 export function mergeGitignore(dest) {
   const gi = path.join(dest, ".gitignore")
   const text = fs.existsSync(gi) ? fs.readFileSync(gi, "utf8") : ""
@@ -338,8 +371,10 @@ export function mergeClaudeSettings(destRoot, pkgRoot) {
   fs.writeFileSync(destPath, `${JSON.stringify(destSettings, null, 2)}\n`)
 }
 
+// A command grunt wrote: one of its scripts, or a run of a grunt: script. Not any `bun run`, which a
+// repo's own `bun run build && …` would match, and its script would be taken over as grunt's.
 function looksGruntOwnedPrefix(prefix) {
-  return /rulesync|sync:globals|^(?:npm|yarn|pnpm|bun) run |guarded-roots\.mjs|hooks-union\.mjs|doctor\.mjs|sync-global-settings\.mjs|check-globals\.mjs|purge-global-mcps\.mjs/.test(
+  return /rulesync|sync:globals|^(?:npm|yarn|pnpm|bun) run grunt:|guarded-roots\.mjs|hooks-union\.mjs|doctor\.mjs|sync-global-settings\.mjs|check-globals\.mjs|purge-global-mcps\.mjs/.test(
     prefix,
   )
 }
@@ -478,7 +513,12 @@ export function mergePackageJson(dest, pkgRoot) {
   if (destPkg.name === "@lovrozagar/grunt") return
 
   const srcPkg = JSON.parse(fs.readFileSync(path.join(pkgRoot, "package.json"), "utf8"))
-  destPkg.scripts = { ...(destPkg.scripts || {}) }
+  destPkg.scripts = Object.fromEntries(
+    Object.entries(destPkg.scripts || {}).map(([k, v]) => [
+      k,
+      typeof v === "string" ? rewriteLegacyScriptRefs(v) : v,
+    ]),
+  )
   const srcKeys = []
   for (const [k, v] of Object.entries(srcPkg.scripts || {})) {
     if (k === "test" || k.endsWith(":raw") || k in LAUNCH_SCRIPTS) continue
@@ -603,8 +643,10 @@ export function init(dest, { pkgRoot: pkgRootOpt, execFileSync: exec = execFileS
     const refSnap = self ? {} : snapshotReferenceDocs(dest)
     let destPipelineSrc = ""
     if (!self) {
-      const destPipeline = path.join(dest, "scripts", "pipeline.mjs")
-      if (fs.existsSync(destPipeline)) destPipelineSrc = fs.readFileSync(destPipeline, "utf8")
+      const destPipeline = [SCRIPTS_REL, LEGACY_SCRIPTS_REL]
+        .map((rel) => path.join(dest, ...rel.split("/"), "pipeline.mjs"))
+        .find((p) => fs.existsSync(p))
+      if (destPipeline) destPipelineSrc = rewriteLegacyScriptRefs(fs.readFileSync(destPipeline, "utf8"))
     }
 
     for (const dir of COPY_DIRS) {
@@ -616,7 +658,12 @@ export function init(dest, { pkgRoot: pkgRootOpt, execFileSync: exec = execFileS
         copyTree(src, d, (s) => path.basename(s) !== "settings.json" && allowPack(s))
         mergeClaudeSettings(dest, pkgRoot)
       } else if (dir === ".rulesync") {
-        copyTree(src, d, (s) => !GENERATED_MAP_FILES.has(path.basename(s)) && allowPack(s))
+        const scriptsSrc = path.join(pkgRoot, ...SCRIPTS_REL.split("/"))
+        copyTree(
+          src,
+          d,
+          (s) => s !== scriptsSrc && !GENERATED_MAP_FILES.has(path.basename(s)) && allowPack(s),
+        )
       } else {
         copyTree(src, d, allowPack)
       }
@@ -628,21 +675,24 @@ export function init(dest, { pkgRoot: pkgRootOpt, execFileSync: exec = execFileS
       mergeGuardedMarkdown(dest, pkgRoot, file)
     }
 
-    fs.mkdirSync(path.join(dest, "scripts"), { recursive: true })
+    const scriptsDest = path.join(dest, ...SCRIPTS_REL.split("/"))
+    fs.mkdirSync(scriptsDest, { recursive: true })
     const skipScripts = unselectedScriptNames(selected)
     for (const name of PRODUCT_SCRIPTS) {
       if (skipScripts.has(name)) continue
-      const src = path.join(pkgRoot, "scripts", name)
-      const d = path.join(dest, "scripts", name)
+      const src = path.join(pkgRoot, ...SCRIPTS_REL.split("/"), name)
+      const d = path.join(scriptsDest, name)
       if (samePath(src, d)) continue
       copyTree(src, d)
     }
+    if (!self) pruneLegacyScripts(dest)
 
     fs.mkdirSync(path.join(dest, ".tmp"), { recursive: true })
     mergeGitignore(dest)
 
     if (!self) {
       remergeReferenceDocs(dest, refSnap, pkgRoot, unselectedRefNames(selected))
+      rewriteLegacyPipelineConfig(dest)
       seedPipelineConfig(dest, destPipelineSrc)
       mergePackageJson(dest, pkgRoot)
       copyRootIfMissing(dest, pkgRoot)