@lovrozagar/grunt 0.3.0 → 0.3.2

package/.agents/agents/grunt.md

@@ -20,7 +20,7 @@ You CAN run npm/git/bash via `run_terminal_command`. Do NOT wait on MCP. Do NOT
 Run tools. Return output. Never spawn. Never implement complex/feature solutions (implementer agent). Never plan (thinker agent).
 May write simple structural folders/files (scaffold/mkdir/touch/boilerplate only). Not feature solutions.
 Low-reason write: mechanical/repetitive/obvious; volume OK.
-Scratch/tmp → `.tmp/grunt/` only (mkdir as needed). Never `.tmp/` root, `.tmp/plans/`, `.tmp/grunt/handoffs/`, or `.tmp/orchestrator-logs/`. Repo scaffold/mkdir/touch/boilerplate stays in the real tree.
+Scratch/tmp → `{workspaceRoot}/.tmp/grunt/` only (mkdir as needed). Never `.tmp/` root, `.tmp/plans/`, `.tmp/grunt/handoffs/`, or `.tmp/orchestrator-logs/`. Repo scaffold/mkdir/touch/boilerplate stays in the real tree.
 
 `job: search|exec` → first action `node scripts/grunt-job.mjs --job search|exec --query …`; whole reply = stdout.
 `job: test` → grunt-job; `FALLBACK` (exit 2) → LLM tools.

package/.agents/agents/orchestrator.md

@@ -1,6 +1,6 @@
 ---
 name: orchestrator
-description: 'Parent spawn supervisor. Always spawn+prompt. Echo [agent]: only. No parent search/write except /parent.'
+description: 'Parent spawn supervisor. Always spawn+prompt. Echo [orchestrator]: or child role tag only. No parent search/write except /parent.'
 tools:
   - view_file
   - grep_search
@@ -13,7 +13,7 @@ inheritMcp: false
 ---
 Voice: `.rulesync/reference/output.md` — must follow.
 Protocol: `.rulesync/reference/cascade.md` (peek/kill table need:/resume). Do not paste. Do not open first.
-You do not talk. First token = spawn. No try-then-spawn. No parent probe. No skip-spawn. No trivia/cheap. User-visible = `[agent]:` + child output only.
+You do not talk. First token = spawn. No try-then-spawn. No parent probe. No skip-spawn. No trivia/cheap. User-visible = `[orchestrator]:` or child role tag + child output only.
 Spawn only `grunt` | `implementer` | `thinker`. Omit `model`. Isolation `none` unless asked. Never spawn `orchestrator`. Children never spawn.
 grunt ← tools. World fact → grunt `job: web`. Never memory. implementer ← specified solution (not the spec). thinker ← plan/deep reason/spec.
 Child prompt = `You are {agent} subagent.` + task + abs paths + verdicts only.

package/.agents/hooks.json

@@ -12,7 +12,7 @@
         ]
       },
       {
-        "matcher": "Read|read_file|Grep|grep|Glob|list_dir|Bash|run_terminal_command",
+        "matcher": "Read|read_file|Grep|grep|Glob|list_dir|Bash|run_terminal_command|Write|Edit|write|search_replace",
         "hooks": [
           {
             "type": "command",

package/.agents/skills/solo/SKILL.md

@@ -10,7 +10,7 @@ Session mode, not one-turn. Persists until `/cascade` or session end.
 This session: cascade suspended. You are one normal agent.
 
 - Do not spawn. No grunt|implementer|thinker.
-- No `[agent]:` recap. Answer the user directly.
+- No recap tags. Do not recap `[orchestrator]:`. Answer the user directly.
 - No spawn-first rule. No `need:`/`verdict:` grammar.
 - Voice unchanged: `.rulesync/reference/output.md`. `/explain` is still the voice escape.
 

package/.claude/agents/grunt.md

@@ -26,7 +26,7 @@ You CAN run npm/git/bash via `Bash`. Do NOT wait on MCP. Do NOT request MCP for
 Run tools. Return output. Never spawn. Never implement complex/feature solutions (implementer agent). Never plan (thinker agent).
 May write simple structural folders/files (scaffold/mkdir/touch/boilerplate only). Not feature solutions.
 Low-reason write: mechanical/repetitive/obvious; volume OK.
-Scratch/tmp → `.tmp/grunt/` only (mkdir as needed). Never `.tmp/` root, `.tmp/plans/`, `.tmp/grunt/handoffs/`, or `.tmp/orchestrator-logs/`. Repo scaffold/mkdir/touch/boilerplate stays in the real tree.
+Scratch/tmp → `{workspaceRoot}/.tmp/grunt/` only (mkdir as needed). Never `.tmp/` root, `.tmp/plans/`, `.tmp/grunt/handoffs/`, or `.tmp/orchestrator-logs/`. Repo scaffold/mkdir/touch/boilerplate stays in the real tree.
 
 `job: search|exec` → first action `node scripts/grunt-job.mjs --job search|exec --query …`; whole reply = stdout.
 `job: test` → grunt-job; `FALLBACK` (exit 2) → LLM tools.

package/.claude/agents/orchestrator.md

@@ -1,8 +1,8 @@
 ---
 name: orchestrator
 description: >-
-  Parent spawn supervisor. Always spawn+prompt. Echo [agent]: only. No parent
-  search/write except /parent.
+  Parent spawn supervisor. Always spawn+prompt. Echo [orchestrator]: or child
+  role tag only. No parent search/write except /parent.
 model: haiku
 tools:
   - Read
@@ -16,7 +16,7 @@ effort: low
 ---
 Voice: `.rulesync/reference/output.md` — must follow.
 Protocol: `.rulesync/reference/cascade.md` (peek/kill table need:/resume). Do not paste. Do not open first.
-You do not talk. First token = spawn. No try-then-spawn. No parent probe. No skip-spawn. No trivia/cheap. User-visible = `[agent]:` + child output only.
+You do not talk. First token = spawn. No try-then-spawn. No parent probe. No skip-spawn. No trivia/cheap. User-visible = `[orchestrator]:` or child role tag + child output only.
 Spawn only `grunt` | `implementer` | `thinker`. Omit `model`. Isolation `none` unless asked. Never spawn `orchestrator`. Children never spawn.
 grunt ← tools. World fact → grunt `job: web`. Never memory. implementer ← specified solution (not the spec). thinker ← plan/deep reason/spec.
 Child prompt = `You are {agent} subagent.` + task + abs paths + verdicts only.

package/.claude/settings.json

@@ -21,7 +21,7 @@
         ]
       },
       {
-        "matcher": "Read|read_file|Grep|grep|Glob|list_dir|Bash|run_terminal_command",
+        "matcher": "Read|read_file|Grep|grep|Glob|list_dir|Bash|run_terminal_command|Write|Edit|write|search_replace",
         "hooks": [
           {
             "type": "command",

package/.claude/skills/solo/SKILL.md

@@ -10,7 +10,7 @@ Session mode, not one-turn. Persists until `/cascade` or session end.
 This session: cascade suspended. You are one normal agent.
 
 - Do not spawn. No grunt|implementer|thinker.
-- No `[agent]:` recap. Answer the user directly.
+- No recap tags. Do not recap `[orchestrator]:`. Answer the user directly.
 - No spawn-first rule. No `need:`/`verdict:` grammar.
 - Voice unchanged: `.rulesync/reference/output.md`. `/explain` is still the voice escape.
 

package/.codex/agents/grunt.toml

@@ -13,7 +13,7 @@ You CAN run npm/git/bash via `run_terminal_command`. Do NOT wait on MCP. Do NOT
 Run tools. Return output. Never spawn. Never implement complex/feature solutions (implementer agent). Never plan (thinker agent).
 May write simple structural folders/files (scaffold/mkdir/touch/boilerplate only). Not feature solutions.
 Low-reason write: mechanical/repetitive/obvious; volume OK.
-Scratch/tmp → `.tmp/grunt/` only (mkdir as needed). Never `.tmp/` root, `.tmp/plans/`, `.tmp/grunt/handoffs/`, or `.tmp/orchestrator-logs/`. Repo scaffold/mkdir/touch/boilerplate stays in the real tree.
+Scratch/tmp → `{workspaceRoot}/.tmp/grunt/` only (mkdir as needed). Never `.tmp/` root, `.tmp/plans/`, `.tmp/grunt/handoffs/`, or `.tmp/orchestrator-logs/`. Repo scaffold/mkdir/touch/boilerplate stays in the real tree.
 
 `job: search|exec` → first action `node scripts/grunt-job.mjs --job search|exec --query …`; whole reply = stdout.
 `job: test` → grunt-job; `FALLBACK` (exit 2) → LLM tools.

package/.codex/agents/orchestrator.toml

@@ -1,5 +1,5 @@
 name = "orchestrator"
-description = "Parent spawn supervisor. Always spawn+prompt. Echo [agent]: only. No parent search/write except /parent."
+description = "Parent spawn supervisor. Always spawn+prompt. Echo [orchestrator]: or child role tag only. No parent search/write except /parent."
 model = "gpt-5.4-mini"
 model_reasoning_effort = "low"
 sandbox_mode = "danger-full-access"
@@ -7,7 +7,7 @@ approval_policy = "never"
 developer_instructions = '''
 Voice: `.rulesync/reference/output.md` — must follow.
 Protocol: `.rulesync/reference/cascade.md` (peek/kill table need:/resume). Do not paste. Do not open first.
-You do not talk. First token = spawn. No try-then-spawn. No parent probe. No skip-spawn. No trivia/cheap. User-visible = `[agent]:` + child output only.
+You do not talk. First token = spawn. No try-then-spawn. No parent probe. No skip-spawn. No trivia/cheap. User-visible = `[orchestrator]:` or child role tag + child output only.
 Spawn only `grunt` | `implementer` | `thinker`. Omit `model`. Isolation `none` unless asked. Never spawn `orchestrator`. Children never spawn.
 grunt ← tools. World fact → grunt `job: web`. Never memory. implementer ← specified solution (not the spec). thinker ← plan/deep reason/spec.
 Child prompt = `You are {agent} subagent.` + task + abs paths + verdicts only.

package/.codex/hooks.json

@@ -12,7 +12,7 @@
         ]
       },
       {
-        "matcher": "Read|read_file|Grep|grep|Glob|list_dir|Bash|run_terminal_command",
+        "matcher": "Read|read_file|Grep|grep|Glob|list_dir|Bash|run_terminal_command|Write|Edit|write|search_replace",
         "hooks": [
           {
             "type": "command",

package/.grok/agents/grunt.md

@@ -15,7 +15,7 @@ You CAN run npm/git/bash via `run_terminal_command`. Do NOT wait on MCP. Do NOT
 Run tools. Return output. Never spawn. Never implement complex/feature solutions (implementer agent). Never plan (thinker agent).
 May write simple structural folders/files (scaffold/mkdir/touch/boilerplate only). Not feature solutions.
 Low-reason write: mechanical/repetitive/obvious; volume OK.
-Scratch/tmp → `.tmp/grunt/` only (mkdir as needed). Never `.tmp/` root, `.tmp/plans/`, `.tmp/grunt/handoffs/`, or `.tmp/orchestrator-logs/`. Repo scaffold/mkdir/touch/boilerplate stays in the real tree.
+Scratch/tmp → `{workspaceRoot}/.tmp/grunt/` only (mkdir as needed). Never `.tmp/` root, `.tmp/plans/`, `.tmp/grunt/handoffs/`, or `.tmp/orchestrator-logs/`. Repo scaffold/mkdir/touch/boilerplate stays in the real tree.
 
 `job: search|exec` → first action `node scripts/grunt-job.mjs --job search|exec --query …`; whole reply = stdout.
 `job: test` → grunt-job; `FALLBACK` (exit 2) → LLM tools.

package/.grok/agents/orchestrator.md

@@ -1,6 +1,6 @@
 ---
 name: orchestrator
-description: 'Parent spawn supervisor. Always spawn+prompt. Echo [agent]: only. No parent search/write except /parent.'
+description: 'Parent spawn supervisor. Always spawn+prompt. Echo [orchestrator]: or child role tag only. No parent search/write except /parent.'
 model: grok-4.5
 permission_mode: bypassPermissions
 agents_md: false
@@ -9,7 +9,7 @@ tools: spawn_subagent, read_file, grep, list_dir, write, todo_write, get_command
 ---
 Voice: `.rulesync/reference/output.md` — must follow.
 Protocol: `.rulesync/reference/cascade.md` (peek/kill table need:/resume). Do not paste. Do not open first.
-You do not talk. First token = spawn. No try-then-spawn. No parent probe. No skip-spawn. No trivia/cheap. User-visible = `[agent]:` + child output only.
+You do not talk. First token = spawn. No try-then-spawn. No parent probe. No skip-spawn. No trivia/cheap. User-visible = `[orchestrator]:` or child role tag + child output only.
 Spawn only `grunt` | `implementer` | `thinker`. Omit `model`. Isolation `none` unless asked. Never spawn `orchestrator`. Children never spawn.
 grunt ← tools. World fact → grunt `job: web`. Never memory. implementer ← specified solution (not the spec). thinker ← plan/deep reason/spec.
 Child prompt = `You are {agent} subagent.` + task + abs paths + verdicts only.

package/.grok/hooks/orchestrate-parent.js

@@ -2,19 +2,26 @@
 /** Parent-orchestrator gate: spawn/peek/kill/todo + persistPlan/persistHandoff writes.
 Parent Read/Grep/Glob/Bash/Web denied unless parent-escape (fat-gate still).
 SubagentStop intercepts need: search|exec with grunt-job verdicts.
-Stop: [agent]:/[handoff]: recap | parent-escape once; else block. MAX_STOP=3. No isCheap/trivia.
-Fail-open: parse/crash → empty stdout, exit 0. Explicit JSON only when denying.
+Stop: any-line [orchestrator]:/[grunt]:/[implementer]:/[thinker]:/[handoff]: recap
+| parent-escape once; else block. MAX_STOP=3. No isCheap/trivia.
+Empty lastAssistantMessage → transcript_path tail-scan. Fail-open: parse/crash → empty stdout, exit 0.
 */
 import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
-import { rewriteSpawnToolInput } from "../../scripts/scrub-spawn-prompt.mjs";
 import {
+  MAX_PROMPT_CHARS,
+  rewriteSpawnToolInput,
+  spawnCapReason,
+} from "../../scripts/scrub-spawn-prompt.mjs";
+import {
+  denyResponse,
   fatHookOutput,
   fileSizeBytes,
   isWorkspaceGruntJob,
   processFatTools,
   resolveReadPath,
+  rewriteGruntScratchPath,
   subagentTypeOf,
 } from "../../scripts/gate-fat-tools.mjs";
 import { persistPlan } from "../../scripts/persist-plan.mjs";
@@ -24,26 +31,24 @@ import { resolveJobCwd, runJob } from "../../scripts/grunt-job.mjs";
 import { logTelemetry, ORCHESTRATOR_LOGS_DIR } from "../../scripts/telemetry.mjs";
 
 const DENY_REASON = "parent is orchestrator; spawn grunt|implementer|thinker";
-const STOP_REASONS = [
-  "Violation: parent replied without a [agent]: recap or /parent escape.\n" +
+export const STOP_REASONS = [
+  "Violation: parent replied without a recap tag.\n" +
     "DO NOT stop. Continue IN THIS RESPONSE:\n" +
-    "1. Spawn grunt|implementer|thinker for the pending work.\n" +
-    "2. Reply with the `[agent]:` recap only.\n" +
-    "If every spawned child already returned and the turn is done, reply with the `[agent]:` recap now.\n" +
-    "If context is long, use /handoff.",
-  "Second violation: still no [agent]: recap.\n" +
+    "1. Spawn grunt|implementer|thinker if work remains.\n" +
+    "2. Recap with `[orchestrator]:` or the child role tag (`[grunt]:` `[implementer]:` `[thinker]:` `[handoff]:`).\n" +
+    "If every spawned child already returned and the turn is done, recap now.",
+  "Second violation: still no recap tag.\n" +
     "DO NOT stop. Right now, in this same response:\n" +
-    "1. Spawn grunt|implementer|thinker.\n" +
-    "2. Then reply with only the `[agent]:` recap line.\n" +
-    "Already done and every child returned? Send the `[agent]:` recap immediately.\n" +
-    "Context too long? Use /handoff.",
+    "1. Spawn grunt|implementer|thinker if needed.\n" +
+    "2. Then recap only with `[orchestrator]:` or the matching child role tag.\n" +
+    "Already done and every child returned? Send that recap immediately.",
   "Third violation: recap still missing.\n" +
     "This is the last check before fail-open. DO NOT stop:\n" +
-    "1. Spawn the correct agent for the remaining work.\n" +
-    "2. Reply with `[agent]:` recap only, nothing else.\n" +
-    "Complete with all children returned? Send the recap now.\n" +
-    "Long context? Use /handoff.",
+    "1. Spawn the correct agent for remaining work if needed.\n" +
+    "2. Reply with `[orchestrator]:` or the child role tag only, nothing else.\n" +
+    "Complete with all children returned? Send the recap now.",
 ];
+const TRANSCRIPT_TAIL_BYTES = 512 * 1024;
 const PARENT_TOOLS = new Set([
   "todowrite",
   "getcommandorsubagentoutput",
@@ -107,7 +112,8 @@ function preToolUse(data) {
     return 0;
   }
   if (SPAWN_TOOLS.has(toolKey)) {
-    const updated = rewriteSpawn(toolInput);
+    const updated = rewriteSpawn(toolInput, data);
+    if (updated && updated.__denied) return 0;
     if (updated) {
       emit({
         hookSpecificOutput: {
@@ -222,12 +228,14 @@ function parentWrite(data, toolInput) {
     return 0;
   }
   const ws = workspaceRootOf(data);
-  const rawPath =
+  let rawPath =
     toolInput.file_path ||
     toolInput.filePath ||
     toolInput.path ||
     toolInput.target_file ||
     "";
+  const rewritten = rewriteGruntScratchPath(rawPath, ws);
+  if (rewritten) rawPath = rewritten;
   const handoff = isUnderHandoffs(rawPath, ws);
   if (!handoff && !isUnderPlans(rawPath, ws)) {
     emit({ decision: "deny", reason: DENY_REASON });
@@ -256,9 +264,20 @@ function parentWrite(data, toolInput) {
   return 0;
 }
 
-function rewriteSpawn(toolInput) {
+function rewriteSpawn(toolInput, data) {
   // Type default + intent-scrub in one updatedInput (last-wins with scrub-spawn).
-  return rewriteSpawnToolInput(toolInput, { defaultGrunt: true });
+  const updated = rewriteSpawnToolInput(toolInput, { defaultGrunt: true });
+  const prompt =
+    updated && typeof updated.prompt === "string"
+      ? updated.prompt
+      : toolInput && typeof toolInput.prompt === "string"
+        ? toolInput.prompt
+        : "";
+  if (prompt.length > MAX_PROMPT_CHARS) {
+    emit(denyResponse(spawnCapReason(workspaceRootOf(data))));
+    return { __denied: true };
+  }
+  return updated;
 }
 
 function postToolUse(data) {
@@ -305,24 +324,113 @@ function userPromptSubmit(data) {
   return 0;
 }
 
-function isChildRecap(msg) {
+const RECAP_TAG_RE =
+  /^\[(?:orchestrator|grunt|implementer|thinker|handoff)\]:/;
+
+export function isRecap(msg) {
   const lines = String(msg || "").split("\n");
-  let firstNonEmpty = "";
   for (const line of lines) {
-    if (line.trim() !== "") {
-      firstNonEmpty = line;
-      break;
+    const stripped = line.replace(/^[\s`*_>]+/, "");
+    if (RECAP_TAG_RE.test(stripped)) return true;
+  }
+  return false;
+}
+
+function payloadAssistantMessage(data) {
+  if (!data || typeof data !== "object") return "";
+  const camel = data.lastAssistantMessage;
+  if (camel != null && String(camel) !== "") return String(camel);
+  const snake = data.last_assistant_message;
+  if (snake != null && String(snake) !== "") return String(snake);
+  return "";
+}
+
+function isAssistantRecord(obj) {
+  if (!obj || typeof obj !== "object") return false;
+  const type = String(obj.type || "").toLowerCase();
+  if (type === "user" || type === "human" || type === "tool" || type === "tool_result") {
+    return false;
+  }
+  if (type === "assistant") return true;
+  const role = String(
+    obj.role || (obj.message && obj.message.role) || "",
+  ).toLowerCase();
+  if (role === "user" || role === "human") return false;
+  return role === "assistant";
+}
+
+function assistantTextFromRecord(obj) {
+  if (!isAssistantRecord(obj)) return null;
+  const msg = obj.message && typeof obj.message === "object" ? obj.message : obj;
+  const content = msg.content ?? obj.content;
+  if (Array.isArray(content)) {
+    const texts = [];
+    for (const part of content) {
+      if (!part || typeof part !== "object") continue;
+      const pt = String(part.type || "");
+      if (pt === "tool_use" || pt === "tool_result" || pt === "function_call") continue;
+      if (typeof part.text === "string" && part.text) texts.push(part.text);
     }
+    const joined = texts.join("\n").trim();
+    return joined ? joined : null;
   }
-  const stripped = firstNonEmpty.replace(/^[\s`*_>]+/, "");
-  return /^\[(?:grunt|implementer|thinker|handoff)\]:/.test(stripped);
+  if (typeof content === "string" && content.trim()) return content;
+  if (typeof obj.text === "string" && obj.text.trim()) return obj.text;
+  return null;
+}
+
+export function lastAssistantFromTranscript(filePath) {
+  try {
+    if (!filePath) return "";
+    const st = fs.statSync(filePath);
+    const start = Math.max(0, st.size - TRANSCRIPT_TAIL_BYTES);
+    const fd = fs.openSync(filePath, "r");
+    try {
+      const buf = Buffer.alloc(st.size - start);
+      fs.readSync(fd, buf, 0, buf.length, start);
+      const text = buf.toString("utf8");
+      const lines = text.split("\n");
+      if (start > 0 && lines.length) lines.shift();
+      let last = "";
+      for (const line of lines) {
+        const t = line.trim();
+        if (!t) continue;
+        let rec;
+        try {
+          rec = JSON.parse(t);
+        } catch {
+          continue;
+        }
+        const extracted = assistantTextFromRecord(rec);
+        if (extracted) last = extracted;
+      }
+      return last;
+    } finally {
+      fs.closeSync(fd);
+    }
+  } catch {
+    return "";
+  }
+}
+
+function logParentStop(data, fields) {
+  logTelemetry("parent-stop", fields, workspaceRootOf(data));
 }
 
 function stop(data) {
   if (data.subagentType || data.subagent_type) {
     return interceptNeed(data, "Stop");
   }
-  if (data.stopHookActive || data.stop_hook_active) return 0;
+  if (data.stopHookActive || data.stop_hook_active) {
+    logParentStop(data, {
+      recap: false,
+      recapSource: "none",
+      attempt: 0,
+      failOpen: true,
+      stopHookActive: true,
+    });
+    return 0;
+  }
   const reason = String(data.reason || "");
   if (reason && reason !== "end_turn") return 0;
 
@@ -335,8 +443,28 @@ function stop(data) {
     return 0;
   }
 
-  const msg = data.lastAssistantMessage || data.last_assistant_message || "";
-  if (isChildRecap(msg)) return 0;
+  const payloadMsg = payloadAssistantMessage(data);
+  let recapSource = "none";
+  let msg = "";
+  if (payloadMsg) {
+    msg = payloadMsg;
+    recapSource = "payload";
+  } else {
+    const tp = data.transcript_path || data.transcriptPath || "";
+    msg = lastAssistantFromTranscript(tp);
+    if (msg) recapSource = "transcript";
+  }
+
+  if (isRecap(msg)) {
+    logParentStop(data, {
+      recap: true,
+      recapSource,
+      attempt: 0,
+      failOpen: false,
+      stopHookActive: false,
+    });
+    return 0;
+  }
 
   const stopStamp = stampPath(data, "stop-block");
   let n = 0;
@@ -344,11 +472,27 @@ function stop(data) {
     n = parseInt(fs.readFileSync(stopStamp, "utf8"), 10);
     if (!Number.isFinite(n) || n < 0) n = 0;
   }
-  if (n >= MAX_STOP) return 0;
+  if (n >= MAX_STOP) {
+    logParentStop(data, {
+      recap: false,
+      recapSource,
+      attempt: n,
+      failOpen: true,
+      stopHookActive: false,
+    });
+    return 0;
+  }
   if (stopStamp) {
     fs.mkdirSync(path.dirname(stopStamp), { recursive: true });
     fs.writeFileSync(stopStamp, String(n + 1));
   }
+  logParentStop(data, {
+    recap: false,
+    recapSource,
+    attempt: n + 1,
+    failOpen: false,
+    stopHookActive: false,
+  });
   const reasonText = STOP_REASONS[Math.min(n, STOP_REASONS.length - 1)];
   emit({ decision: "block", reason: reasonText });
   return 0;

package/.grok/skills/solo/SKILL.md

@@ -10,7 +10,7 @@ Session mode, not one-turn. Persists until `/cascade` or session end.
 This session: cascade suspended. You are one normal agent.
 
 - Do not spawn. No grunt|implementer|thinker.
-- No `[agent]:` recap. Answer the user directly.
+- No recap tags. Do not recap `[orchestrator]:`. Answer the user directly.
 - No spawn-first rule. No `need:`/`verdict:` grammar.
 - Voice unchanged: `.rulesync/reference/output.md`. `/explain` is still the voice escape.
 

package/.rulesync/hooks.jsonc

@@ -11,8 +11,9 @@
         "timeout": 5
       },
       {
-        // Fat Read/Grep/Glob/Bash: inject limits, path denylist, implementer dump deny.
-        "matcher": "Read|read_file|Grep|grep|Glob|list_dir|Bash|run_terminal_command",
+        // Fat Read/Grep/Glob/Bash + Write/Edit scratch rewrite (never deny writes).
+        // Parent-deny stays Grok-only (orchestrate-parent.js).
+        "matcher": "Read|read_file|Grep|grep|Glob|list_dir|Bash|run_terminal_command|Write|Edit|write|search_replace",
         "type": "command",
         "command": "node \"${GROK_WORKSPACE_ROOT:-${CLAUDE_PROJECT_DIR:-.}}/scripts/gate-fat-tools.mjs\"",
         "timeout": 5

package/.rulesync/reference/cascade.md

@@ -28,9 +28,9 @@ Every 60s peek is real host status (no `sleep` then guess). `timeout_ms=60000` e
 Quote host fields only (`status`, elapsed since spawn, last activity/output snippet) or quote the error. Never invent.
 Classify `done` | `alive` | `stuck` vs prior peek: **done** (completed/failed), **alive** (running + fields/output changed), **stuck** (running + unchanged). Unchanged snippet = stuck, not “still working”.
 Loop until done. No auto-kill. Kill only if the user asks and the host has a kill tool.
-Then print recap as `[agent]: …` with real child output. Do not redo the child's work.
+Then print recap as `[orchestrator]: …` (or the child role tag) with real child output. Do not redo the child's work.
 
-Parent Stop (`MAX_STOP=3`): do not waive fenced/impl finals for `tools-used` stamp. Allow only `[grunt|implementer|thinker|handoff]:` recap prefix, or consume `parent-escape-{sid}` once. Else block. No `isCheap` / trivia / long definitions.
+Parent Stop (`MAX_STOP=3`): do not waive fenced/impl finals for `tools-used` stamp. Allow any-line `[orchestrator|grunt|implementer|thinker|handoff]:` recap, or consume `parent-escape-{sid}` once. Else block. No `isCheap` / trivia / long definitions.
 `/handoff` is the other in-parent turn: context large + work unfinished → parent writes one `.tmp/grunt/handoffs/` file from its own transcript (no child sees the session), recaps `[handoff]: serial=… path=…`, tells the user to continue in a new session. No spawn, one write, not a mode.
 `/solo` is the session mode (not one-turn): `beforeSubmitPrompt` writes `.tmp/orchestrator-logs/grunt-off-{sid}`, every gate short-circuits while it exists, `/cascade` unlinks it. Everything above resumes next turn. Antigravity: skill-only, no stamp create (see hooks.md). `/parent` is one-turn (not a mode): UserPromptSubmit writes `.tmp/orchestrator-logs/parent-escape-{sid}`; Stop consumes+unlinks once. Next Stop resumes spawn/recap rules. Skills point here; do not paste this file.
 

package/.rulesync/reference/hooks.md

@@ -12,7 +12,7 @@ Claude / Codex / Antigravity PreToolUse still run `scripts/scrub-spawn-prompt.mj
 
 Parent `run_terminal_command` is deny-by-default except `node` (optional leading `rtk`) invoking `{workspace}/scripts/grunt-job.mjs` with `--job search|exec` and `--query`. Optional `--path` `--glob` (repeatable) `--cwd`. Not `web|test`, not other scripts. META strips `--query` value first so `|` inside query is allowed; pipes/`&&` outside query still deny. Never `cd &&`. Exec shell-meta in query is grunt-job FALLBACK (exit 2), not a parent-bash allow. Unknown flags → FALLBACK.
 
-SubagentStop (and child Stop with `subagentType`) intercepts a parseable `need:` whose jobs are all `search|exec` (cap 4): runs grunt-job in-hook and continues the child with concatenated `verdict:` blobs. Mixed/web/test, parse fail, FALLBACK, `stopHookActive`, or more than 3 intercepts per child session → empty stdout (allow stop; parent LLM path). Parent `write` is deny-by-default except `.tmp/plans/` (`persist-plan.mjs`) and `.tmp/grunt/handoffs/` (`persist-handoff.mjs`); both validate + rewrite path/content, invalid body denies. Parent Stop (`MAX_STOP=3`): do not waive impl finals for `tools-used`. Allow only `[grunt|implementer|thinker|handoff]:` recap prefix, or consume `parent-escape-{sid}` once (`/parent`). No `isCheap` / trivia. Stamps: `tools-used` / `stop-block` / `need-intercept` / `parent-escape`. Skills point to cascade; do not paste protocol here.
+SubagentStop (and child Stop with `subagentType`) intercepts a parseable `need:` whose jobs are all `search|exec` (cap 4): runs grunt-job in-hook and continues the child with concatenated `verdict:` blobs. Mixed/web/test, parse fail, FALLBACK, `stopHookActive`, or more than 3 intercepts per child session → empty stdout (allow stop; parent LLM path). Parent `write` is deny-by-default except `.tmp/plans/` (`persist-plan.mjs`) and `.tmp/grunt/handoffs/` (`persist-handoff.mjs`); both validate + rewrite path/content, invalid body denies. Parent Stop (`MAX_STOP=3`): do not waive impl finals for `tools-used`. Allow any-line `[orchestrator|grunt|implementer|thinker|handoff]:` recap, or consume `parent-escape-{sid}` once (`/parent`). No `isCheap` / trivia. Stamps: `tools-used` / `stop-block` / `need-intercept` / `parent-escape`. Skills point to cascade; do not paste protocol here.
 
 `/solo` writes `grunt-off-{sid}`; `/cascade` unlinks it (`beforeSubmitPrompt`, exact-match only). While set: PreToolUse allows parent tools (fat gate still runs) and skips the `defaultGrunt` spawn rewrite; Stop returns 0 **before** the `parent-escape` consume, so solo never burns the one-turn stamp. Session-scoped, fail-closed.
 

package/.rulesync/rules/CLAUDE.md

@@ -8,7 +8,7 @@ All output exclude AI attribution, Co-Authored-By, trailers, generated markers.
 Protocol: `.rulesync/reference/cascade.md`. Do not paste. Do not open first.
 Parent = this file not `.claude/agents/orchestrator.md`. You do not talk. Spawn wait echo.
 Spawn only grunt|implementer|thinker. Never spawn orchestrator. Children never spawn.
-First token = spawn. No try-then-spawn. No parent probe. After child: `[agent]:` echo only. No skip-spawn. /parent = one-turn. /handoff = one-turn in-parent write to `.tmp/grunt/handoffs/`, recap `[handoff]:`.
+First token = spawn. No try-then-spawn. No parent probe. After child: `[orchestrator]:` (or child role tag) echo only. No skip-spawn. /parent = one-turn. /handoff = one-turn in-parent write to `.tmp/grunt/handoffs/`, recap `[handoff]:`.
 grunt ← tools (facts/search/exec/git/web/test/low-reason mechanical write; world fact: `job: web` never memory). implementer ← write defined solution. thinker ← plan/deep reason.
 Child prompt = `You are {agent} subagent.` + task + abs paths + verdicts only.
 Peek every 60s/child; quote real host fields; `done|alive|stuck`; no invent; no auto-kill. `timeout_ms=60000` every peek. GAP: block on spawn return = `done`. Stuck/blocked: quote host fields only.

package/.rulesync/rules/overview.md

@@ -13,7 +13,7 @@ All output exclude AI attribution, Co-Authored-By, trailers, generated markers.
 Protocol: `.rulesync/reference/cascade.md`. Do not paste. Do not open first.
 Parent = orchestrator. You do not talk. Spawn wait echo.
 Spawn only grunt|implementer|thinker. Never spawn orchestrator. Children never spawn.
-First token = spawn. No try-then-spawn. No parent probe. After child: `[agent]:` echo only. No skip-spawn. /parent = one-turn. /handoff = one-turn in-parent write to `.tmp/grunt/handoffs/`, recap `[handoff]:`.
+First token = spawn. No try-then-spawn. No parent probe. After child: `[orchestrator]:` (or child role tag) echo only. No skip-spawn. /parent = one-turn. /handoff = one-turn in-parent write to `.tmp/grunt/handoffs/`, recap `[handoff]:`.
 grunt ← tools (facts/search/exec/git/web/test/low-reason mechanical write; world fact: `job: web` never memory). implementer ← write defined solution. thinker ← plan/deep reason.
 Child prompt = `You are {agent} subagent.` + task + abs paths + verdicts only.
 Peek every 60s/child; quote real host fields; `done|alive|stuck`; no invent; no auto-kill. `timeout_ms=60000` every peek. GAP: block on spawn return = `done`. Stuck/blocked: quote host fields only.

package/.rulesync/skills/solo/SKILL.md

@@ -10,7 +10,7 @@ Session mode, not one-turn. Persists until `/cascade` or session end.
 This session: cascade suspended. You are one normal agent.
 
 - Do not spawn. No grunt|implementer|thinker.
-- No `[agent]:` recap. Answer the user directly.
+- No recap tags. Do not recap `[orchestrator]:`. Answer the user directly.
 - No spawn-first rule. No `need:`/`verdict:` grammar.
 - Voice unchanged: `.rulesync/reference/output.md`. `/explain` is still the voice escape.
 

package/.rulesync/subagents/grunt.md

@@ -38,7 +38,7 @@ You CAN run npm/git/bash via `run_terminal_command`. Do NOT wait on MCP. Do NOT
 Run tools. Return output. Never spawn. Never implement complex/feature solutions (implementer agent). Never plan (thinker agent).
 May write simple structural folders/files (scaffold/mkdir/touch/boilerplate only). Not feature solutions.
 Low-reason write: mechanical/repetitive/obvious; volume OK.
-Scratch/tmp → `.tmp/grunt/` only (mkdir as needed). Never `.tmp/` root, `.tmp/plans/`, `.tmp/grunt/handoffs/`, or `.tmp/orchestrator-logs/`. Repo scaffold/mkdir/touch/boilerplate stays in the real tree.
+Scratch/tmp → `{workspaceRoot}/.tmp/grunt/` only (mkdir as needed). Never `.tmp/` root, `.tmp/plans/`, `.tmp/grunt/handoffs/`, or `.tmp/orchestrator-logs/`. Repo scaffold/mkdir/touch/boilerplate stays in the real tree.
 
 `job: search|exec` → first action `node scripts/grunt-job.mjs --job search|exec --query …`; whole reply = stdout.
 `job: test` → grunt-job; `FALLBACK` (exit 2) → LLM tools.

package/.rulesync/subagents/orchestrator.md

@@ -1,6 +1,6 @@
 ---
 name: orchestrator
-description: "Parent spawn supervisor. Always spawn+prompt. Echo [agent]: only. No parent search/write except /parent."
+description: "Parent spawn supervisor. Always spawn+prompt. Echo [orchestrator]: or child role tag only. No parent search/write except /parent."
 targets:
   - claudecode
   - grokcli
@@ -34,7 +34,7 @@ geminicli:
 ---
 Voice: `.rulesync/reference/output.md` — must follow.
 Protocol: `.rulesync/reference/cascade.md` (peek/kill table need:/resume). Do not paste. Do not open first.
-You do not talk. First token = spawn. No try-then-spawn. No parent probe. No skip-spawn. No trivia/cheap. User-visible = `[agent]:` + child output only.
+You do not talk. First token = spawn. No try-then-spawn. No parent probe. No skip-spawn. No trivia/cheap. User-visible = `[orchestrator]:` or child role tag + child output only.
 Spawn only `grunt` | `implementer` | `thinker`. Omit `model`. Isolation `none` unless asked. Never spawn `orchestrator`. Children never spawn.
 grunt ← tools. World fact → grunt `job: web`. Never memory. implementer ← specified solution (not the spec). thinker ← plan/deep reason/spec.
 Child prompt = `You are {agent} subagent.` + task + abs paths + verdicts only.

package/AGENTS.md

@@ -3,7 +3,7 @@ All output exclude AI attribution, Co-Authored-By, trailers, generated markers.
 Protocol: `.rulesync/reference/cascade.md`. Do not paste. Do not open first.
 Parent = orchestrator. You do not talk. Spawn wait echo.
 Spawn only grunt|implementer|thinker. Never spawn orchestrator. Children never spawn.
-First token = spawn. No try-then-spawn. No parent probe. After child: `[agent]:` echo only. No skip-spawn. /parent = one-turn. /handoff = one-turn in-parent write to `.tmp/grunt/handoffs/`, recap `[handoff]:`.
+First token = spawn. No try-then-spawn. No parent probe. After child: `[orchestrator]:` (or child role tag) echo only. No skip-spawn. /parent = one-turn. /handoff = one-turn in-parent write to `.tmp/grunt/handoffs/`, recap `[handoff]:`.
 grunt ← tools (facts/search/exec/git/web/test/low-reason mechanical write; world fact: `job: web` never memory). implementer ← write defined solution. thinker ← plan/deep reason.
 Child prompt = `You are {agent} subagent.` + task + abs paths + verdicts only.
 Peek every 60s/child; quote real host fields; `done|alive|stuck`; no invent; no auto-kill. `timeout_ms=60000` every peek. GAP: block on spawn return = `done`. Stuck/blocked: quote host fields only.

package/CLAUDE.md

@@ -3,7 +3,7 @@ All output exclude AI attribution, Co-Authored-By, trailers, generated markers.
 Protocol: `.rulesync/reference/cascade.md`. Do not paste. Do not open first.
 Parent = this file not `.claude/agents/orchestrator.md`. You do not talk. Spawn wait echo.
 Spawn only grunt|implementer|thinker. Never spawn orchestrator. Children never spawn.
-First token = spawn. No try-then-spawn. No parent probe. After child: `[agent]:` echo only. No skip-spawn. /parent = one-turn. /handoff = one-turn in-parent write to `.tmp/grunt/handoffs/`, recap `[handoff]:`.
+First token = spawn. No try-then-spawn. No parent probe. After child: `[orchestrator]:` (or child role tag) echo only. No skip-spawn. /parent = one-turn. /handoff = one-turn in-parent write to `.tmp/grunt/handoffs/`, recap `[handoff]:`.
 grunt ← tools (facts/search/exec/git/web/test/low-reason mechanical write; world fact: `job: web` never memory). implementer ← write defined solution. thinker ← plan/deep reason.
 Child prompt = `You are {agent} subagent.` + task + abs paths + verdicts only.
 Peek every 60s/child; quote real host fields; `done|alive|stuck`; no invent; no auto-kill. `timeout_ms=60000` every peek. GAP: block on spawn return = `done`. Stuck/blocked: quote host fields only.

package/README.md

@@ -13,8 +13,18 @@ npx @lovrozagar/grunt
 
 Same as `npx @lovrozagar/grunt init`. Merge SoT, `npm install`, `rulesync:generate`, `sync:globals:apply`, `rulesync:check`. Do not `npm test` as a consumer.
 
+`--skip-globals` skips `sync:globals:apply`. Re-init auto-skips globals when `<!-- grunt:begin -->` is in AGENTS.md/CLAUDE.md or `scripts/telemetry.mjs` exists. First init (no sentinel, no telemetry) still applies globals unless flagged.
+
 Contributors to this repo only: local `npm i && npm test`.
 
+# Version bump
+
+```
+npm i -D @lovrozagar/grunt@latest && npx @lovrozagar/grunt init
+```
+
+Owned trees/scripts refresh. Extra `.rulesync` files kept. Patches to grunt-owned files lost. Globals: first init applies; re-init auto-skips (or pass `--skip-globals`).
+
 # GOAL
 
 - synced configs across all 4/5 major cli providers (grok build, claude code, codex, gemini cli, antigravity)! Emit matrix: grok/claude/codex/antigravity (`rulesync generate`) then `emit-mcp-policy` + `emit-gemini` (`GEMINI.md`, `.gemini/agents/{id}/agent.md`; MCP `.gemini/settings.json`) + `emit-agent-shell-tools` (Claude grunt body `Bash`; other hosts `run_terminal_command`). No `-t geminicli`.
@@ -27,7 +37,7 @@ Contributors to this repo only: local `npm i && npm test`.
     context engineering
 - max reasoning and effort where needed and minimal reasoning and effort where not needed
 - agents:
-    - orchestrator (low model, low effort) -> always spawn+prompt; never user-facing tokens except `[agent]:` echo. `/parent` one-turn only; `/handoff` writes `.tmp/grunt/handoffs/{serial}-{slug}-{stamp}.md` and hands the session to a fresh one.
+    - orchestrator (low model, low effort) -> always spawn+prompt; never user-facing tokens except `[orchestrator]:` (or child role tag) echo. `/parent` one-turn only; `/handoff` writes `.tmp/grunt/handoffs/{serial}-{slug}-{stamp}.md` and hands the session to a fresh one.
 - subagents:
     - grunt (low model, low effort) -> tools. facts/search/exec/git/web/test/low-reason mechanical write. never feature solution. never spawn.
     - implementer (medium model, medium effort) -> write already-defined solution. does not plan or invent design. never spawn.