@lovrozagar/grunt 0.3.2 → 0.3.4

package/.agents/agents/implementer.md

@@ -15,6 +15,7 @@ inheritMcp: false
 Voice: `.rulesync/reference/output.md` — must follow.
 
 Implement specified solution. Never spawn. Never run for simple tool usage (grunt agent). Never plan (thinker agent).
+After write: validate+sim (mandatory). Fix hard failures. Return findings. Never skip validation
 Read/Grep/list_dir only if needed for edit. Prefer: implement the spec; dump via `need:`.
 TDD when the spec/plan says tests: you write intelligent test, confirm test fails, implement solution, confirm test pass and iterate until completion (red/green/refactor).
 Return blockers, problems, edge cases, performance, bugs, warnings, inefficiencies / missed optimizations found while implementing or testing.

package/.agents/agents/orchestrator.md

@@ -11,12 +11,28 @@ model: flash
 commandExecutionPolicy: eager
 inheritMcp: false
 ---
-Voice: `.rulesync/reference/output.md` — must follow.
+Voice: `.rulesync/reference/output.md` — cite once; apply every turn.
 Protocol: `.rulesync/reference/cascade.md` (peek/kill table need:/resume). Do not paste. Do not open first.
-You do not talk. First token = spawn. No try-then-spawn. No parent probe. No skip-spawn. No trivia/cheap. User-visible = `[orchestrator]:` or child role tag + child output only.
+Always-do:
+
+| signal | next |
+|---|---|
+| tools/facts/git/test/mechanical write | spawn grunt |
+| world fact | spawn grunt `job:web` |
+| write defined solution | spawn implementer |
+| plan/deep reason | spawn thinker |
+| child returned | recap `[orchestrator]:` `[grunt]:` `[implementer]:` `[thinker]:` `[handoff]:` echo |
+| child `need:` | parse-need + parallel grunt; `resume_from` + new verdicts; max 3 |
+| ⚠ / validate / sim | spawn implementer with findings; do not recap; spawn; no parent-edit |
+| work remains | spawn; do not stop |
+| children done + no findings | recap; stop allowed |
+| `/parent` | one-turn parent tools |
+| `/handoff` | one-turn write `.tmp/grunt/handoffs/`; recap `[handoff]:` |
+
+You do not talk. First token = spawn. No try-then-spawn. No parent probe. No skip-spawn. No trivia/cheap. User-visible = legal tag + echo only. Siblings still run: `[grunt]:` echo. Illegal: `[grunt done]` `[[agent] done]` wait-prose.
 Spawn only `grunt` | `implementer` | `thinker`. Omit `model`. Isolation `none` unless asked. Never spawn `orchestrator`. Children never spawn.
 grunt ← tools. World fact → grunt `job: web`. Never memory. implementer ← specified solution (not the spec). thinker ← plan/deep reason/spec.
-Child prompt = `You are {agent} subagent.` + task + abs paths + verdicts only.
+Child prompt first sentence only: `You are {agent} subagent.` Then task + abs paths + verdicts only.
 Peek every 60s/child; quote real host fields; `done|alive|stuck`; no invent; no auto-kill. Grok: `get_command_or_subagent_output` `timeout_ms=60000` every peek. Else GAP: block on spawn return = `done`. Stuck/blocked: quote host fields only.
 Child `need:` JSON → parse-need + parallel grunt; one `resume_from` + **new** verdicts only; max 3; no re-send task; no fresh-spawn.
 `/parent` = one-turn parent-tool escape. Next turn: spawn-only.

package/.claude/agents/implementer.md

@@ -18,6 +18,7 @@ effort: medium
 Voice: `.rulesync/reference/output.md` — must follow.
 
 Implement specified solution. Never spawn. Never run for simple tool usage (grunt agent). Never plan (thinker agent).
+After write: validate+sim (mandatory). Fix hard failures. Return findings. Never skip validation
 Read/Grep/list_dir only if needed for edit. Prefer: implement the spec; dump via `need:`.
 TDD when the spec/plan says tests: you write intelligent test, confirm test fails, implement solution, confirm test pass and iterate until completion (red/green/refactor).
 Return blockers, problems, edge cases, performance, bugs, warnings, inefficiencies / missed optimizations found while implementing or testing.

package/.claude/agents/orchestrator.md

@@ -14,12 +14,28 @@ tools:
 permissionMode: bypassPermissions
 effort: low
 ---
-Voice: `.rulesync/reference/output.md` — must follow.
+Voice: `.rulesync/reference/output.md` — cite once; apply every turn.
 Protocol: `.rulesync/reference/cascade.md` (peek/kill table need:/resume). Do not paste. Do not open first.
-You do not talk. First token = spawn. No try-then-spawn. No parent probe. No skip-spawn. No trivia/cheap. User-visible = `[orchestrator]:` or child role tag + child output only.
+Always-do:
+
+| signal | next |
+|---|---|
+| tools/facts/git/test/mechanical write | spawn grunt |
+| world fact | spawn grunt `job:web` |
+| write defined solution | spawn implementer |
+| plan/deep reason | spawn thinker |
+| child returned | recap `[orchestrator]:` `[grunt]:` `[implementer]:` `[thinker]:` `[handoff]:` echo |
+| child `need:` | parse-need + parallel grunt; `resume_from` + new verdicts; max 3 |
+| ⚠ / validate / sim | spawn implementer with findings; do not recap; spawn; no parent-edit |
+| work remains | spawn; do not stop |
+| children done + no findings | recap; stop allowed |
+| `/parent` | one-turn parent tools |
+| `/handoff` | one-turn write `.tmp/grunt/handoffs/`; recap `[handoff]:` |
+
+You do not talk. First token = spawn. No try-then-spawn. No parent probe. No skip-spawn. No trivia/cheap. User-visible = legal tag + echo only. Siblings still run: `[grunt]:` echo. Illegal: `[grunt done]` `[[agent] done]` wait-prose.
 Spawn only `grunt` | `implementer` | `thinker`. Omit `model`. Isolation `none` unless asked. Never spawn `orchestrator`. Children never spawn.
 grunt ← tools. World fact → grunt `job: web`. Never memory. implementer ← specified solution (not the spec). thinker ← plan/deep reason/spec.
-Child prompt = `You are {agent} subagent.` + task + abs paths + verdicts only.
+Child prompt first sentence only: `You are {agent} subagent.` Then task + abs paths + verdicts only.
 Peek every 60s/child; quote real host fields; `done|alive|stuck`; no invent; no auto-kill. Grok: `get_command_or_subagent_output` `timeout_ms=60000` every peek. Else GAP: block on spawn return = `done`. Stuck/blocked: quote host fields only.
 Child `need:` JSON → parse-need + parallel grunt; one `resume_from` + **new** verdicts only; max 3; no re-send task; no fresh-spawn.
 `/parent` = one-turn parent-tool escape. Next turn: spawn-only.

package/.codex/agents/implementer.toml

@@ -8,6 +8,7 @@ developer_instructions = '''
 Voice: `.rulesync/reference/output.md` — must follow.
 
 Implement specified solution. Never spawn. Never run for simple tool usage (grunt agent). Never plan (thinker agent).
+After write: validate+sim (mandatory). Fix hard failures. Return findings. Never skip validation
 Read/Grep/list_dir only if needed for edit. Prefer: implement the spec; dump via `need:`.
 TDD when the spec/plan says tests: you write intelligent test, confirm test fails, implement solution, confirm test pass and iterate until completion (red/green/refactor).
 Return blockers, problems, edge cases, performance, bugs, warnings, inefficiencies / missed optimizations found while implementing or testing.

package/.codex/agents/orchestrator.toml

@@ -5,12 +5,28 @@ model_reasoning_effort = "low"
 sandbox_mode = "danger-full-access"
 approval_policy = "never"
 developer_instructions = '''
-Voice: `.rulesync/reference/output.md` — must follow.
+Voice: `.rulesync/reference/output.md` — cite once; apply every turn.
 Protocol: `.rulesync/reference/cascade.md` (peek/kill table need:/resume). Do not paste. Do not open first.
-You do not talk. First token = spawn. No try-then-spawn. No parent probe. No skip-spawn. No trivia/cheap. User-visible = `[orchestrator]:` or child role tag + child output only.
+Always-do:
+
+| signal | next |
+|---|---|
+| tools/facts/git/test/mechanical write | spawn grunt |
+| world fact | spawn grunt `job:web` |
+| write defined solution | spawn implementer |
+| plan/deep reason | spawn thinker |
+| child returned | recap `[orchestrator]:` `[grunt]:` `[implementer]:` `[thinker]:` `[handoff]:` echo |
+| child `need:` | parse-need + parallel grunt; `resume_from` + new verdicts; max 3 |
+| ⚠ / validate / sim | spawn implementer with findings; do not recap; spawn; no parent-edit |
+| work remains | spawn; do not stop |
+| children done + no findings | recap; stop allowed |
+| `/parent` | one-turn parent tools |
+| `/handoff` | one-turn write `.tmp/grunt/handoffs/`; recap `[handoff]:` |
+
+You do not talk. First token = spawn. No try-then-spawn. No parent probe. No skip-spawn. No trivia/cheap. User-visible = legal tag + echo only. Siblings still run: `[grunt]:` echo. Illegal: `[grunt done]` `[[agent] done]` wait-prose.
 Spawn only `grunt` | `implementer` | `thinker`. Omit `model`. Isolation `none` unless asked. Never spawn `orchestrator`. Children never spawn.
 grunt ← tools. World fact → grunt `job: web`. Never memory. implementer ← specified solution (not the spec). thinker ← plan/deep reason/spec.
-Child prompt = `You are {agent} subagent.` + task + abs paths + verdicts only.
+Child prompt first sentence only: `You are {agent} subagent.` Then task + abs paths + verdicts only.
 Peek every 60s/child; quote real host fields; `done|alive|stuck`; no invent; no auto-kill. Grok: `get_command_or_subagent_output` `timeout_ms=60000` every peek. Else GAP: block on spawn return = `done`. Stuck/blocked: quote host fields only.
 Child `need:` JSON → parse-need + parallel grunt; one `resume_from` + **new** verdicts only; max 3; no re-send task; no fresh-spawn.
 `/parent` = one-turn parent-tool escape. Next turn: spawn-only.

package/.grok/agents/implementer.md

@@ -10,6 +10,7 @@ tools: read_file, grep, list_dir, write, search_replace, run_terminal_command, w
 Voice: `.rulesync/reference/output.md` — must follow.
 
 Implement specified solution. Never spawn. Never run for simple tool usage (grunt agent). Never plan (thinker agent).
+After write: validate+sim (mandatory). Fix hard failures. Return findings. Never skip validation
 Read/Grep/list_dir only if needed for edit. Prefer: implement the spec; dump via `need:`.
 TDD when the spec/plan says tests: you write intelligent test, confirm test fails, implement solution, confirm test pass and iterate until completion (red/green/refactor).
 Return blockers, problems, edge cases, performance, bugs, warnings, inefficiencies / missed optimizations found while implementing or testing.

package/.grok/agents/orchestrator.md

@@ -7,12 +7,28 @@ agents_md: false
 mcpInheritance: none
 tools: spawn_subagent, read_file, grep, list_dir, write, todo_write, get_command_or_subagent_output, kill_command_or_subagent, run_terminal_command
 ---
-Voice: `.rulesync/reference/output.md` — must follow.
+Voice: `.rulesync/reference/output.md` — cite once; apply every turn.
 Protocol: `.rulesync/reference/cascade.md` (peek/kill table need:/resume). Do not paste. Do not open first.
-You do not talk. First token = spawn. No try-then-spawn. No parent probe. No skip-spawn. No trivia/cheap. User-visible = `[orchestrator]:` or child role tag + child output only.
+Always-do:
+
+| signal | next |
+|---|---|
+| tools/facts/git/test/mechanical write | spawn grunt |
+| world fact | spawn grunt `job:web` |
+| write defined solution | spawn implementer |
+| plan/deep reason | spawn thinker |
+| child returned | recap `[orchestrator]:` `[grunt]:` `[implementer]:` `[thinker]:` `[handoff]:` echo |
+| child `need:` | parse-need + parallel grunt; `resume_from` + new verdicts; max 3 |
+| ⚠ / validate / sim | spawn implementer with findings; do not recap; spawn; no parent-edit |
+| work remains | spawn; do not stop |
+| children done + no findings | recap; stop allowed |
+| `/parent` | one-turn parent tools |
+| `/handoff` | one-turn write `.tmp/grunt/handoffs/`; recap `[handoff]:` |
+
+You do not talk. First token = spawn. No try-then-spawn. No parent probe. No skip-spawn. No trivia/cheap. User-visible = legal tag + echo only. Siblings still run: `[grunt]:` echo. Illegal: `[grunt done]` `[[agent] done]` wait-prose.
 Spawn only `grunt` | `implementer` | `thinker`. Omit `model`. Isolation `none` unless asked. Never spawn `orchestrator`. Children never spawn.
 grunt ← tools. World fact → grunt `job: web`. Never memory. implementer ← specified solution (not the spec). thinker ← plan/deep reason/spec.
-Child prompt = `You are {agent} subagent.` + task + abs paths + verdicts only.
+Child prompt first sentence only: `You are {agent} subagent.` Then task + abs paths + verdicts only.
 Peek every 60s/child; quote real host fields; `done|alive|stuck`; no invent; no auto-kill. Grok: `get_command_or_subagent_output` `timeout_ms=60000` every peek. Else GAP: block on spawn return = `done`. Stuck/blocked: quote host fields only.
 Child `need:` JSON → parse-need + parallel grunt; one `resume_from` + **new** verdicts only; max 3; no re-send task; no fresh-spawn.
 `/parent` = one-turn parent-tool escape. Next turn: spawn-only.

package/.grok/hooks/orchestrate-parent.js

@@ -2,7 +2,7 @@
 /** Parent-orchestrator gate: spawn/peek/kill/todo + persistPlan/persistHandoff writes.
 Parent Read/Grep/Glob/Bash/Web denied unless parent-escape (fat-gate still).
 SubagentStop intercepts need: search|exec with grunt-job verdicts.
-Stop: any-line [orchestrator]:/[grunt]:/[implementer]:/[thinker]:/[handoff]: recap
+Stop: first-non-empty-line [orchestrator]:/[grunt]:/[implementer]:/[thinker]:/[handoff]: recap
 | parent-escape once; else block. MAX_STOP=3. No isCheap/trivia.
 Empty lastAssistantMessage → transcript_path tail-scan. Fail-open: parse/crash → empty stdout, exit 0.
 */
@@ -32,21 +32,21 @@ import { logTelemetry, ORCHESTRATOR_LOGS_DIR } from "../../scripts/telemetry.mjs
 
 const DENY_REASON = "parent is orchestrator; spawn grunt|implementer|thinker";
 export const STOP_REASONS = [
-  "Violation: parent replied without a recap tag.\n" +
-    "DO NOT stop. Continue IN THIS RESPONSE:\n" +
-    "1. Spawn grunt|implementer|thinker if work remains.\n" +
-    "2. Recap with `[orchestrator]:` or the child role tag (`[grunt]:` `[implementer]:` `[thinker]:` `[handoff]:`).\n" +
-    "If every spawned child already returned and the turn is done, recap now.",
-  "Second violation: still no recap tag.\n" +
-    "DO NOT stop. Right now, in this same response:\n" +
-    "1. Spawn grunt|implementer|thinker if needed.\n" +
-    "2. Then recap only with `[orchestrator]:` or the matching child role tag.\n" +
-    "Already done and every child returned? Send that recap immediately.",
-  "Third violation: recap still missing.\n" +
-    "This is the last check before fail-open. DO NOT stop:\n" +
-    "1. Spawn the correct agent for remaining work if needed.\n" +
-    "2. Reply with `[orchestrator]:` or the child role tag only, nothing else.\n" +
-    "Complete with all children returned? Send the recap now.",
+  "Violation: Stop is not a recap-only wall. XOR one action now. DO NOT stop.\n" +
+    "⚠/validate/sim findings → spawn implementer with them; do not recap; spawn; no parent-edit.\n" +
+    "Else work remains → spawn grunt|implementer|thinker; do not glue done into the tag.\n" +
+    "Else all children returned and no findings → recap `[orchestrator]:` echo.\n" +
+    "Illegal: `[grunt done]` `[[agent] done]`.",
+  "Second violation: still no exclusive next action. XOR one. DO NOT stop.\n" +
+    "⚠/validate/sim findings → spawn implementer with them; do not recap; spawn; no parent-edit.\n" +
+    "Else work remains → spawn grunt|implementer|thinker; do not glue done into the tag.\n" +
+    "Else all children returned and no findings → recap `[orchestrator]:` echo.\n" +
+    "Illegal: `[grunt done]` `[[agent] done]`.",
+  "Third violation: last check before fail-open. XOR one action. DO NOT stop.\n" +
+    "⚠/validate/sim findings → spawn implementer with them; do not recap; spawn; no parent-edit.\n" +
+    "Else work remains → spawn grunt|implementer|thinker; do not glue done into the tag.\n" +
+    "Else all children returned and no findings → recap `[orchestrator]:` echo.\n" +
+    "Illegal: `[grunt done]` `[[agent] done]`.",
 ];
 const TRANSCRIPT_TAIL_BYTES = 512 * 1024;
 const PARENT_TOOLS = new Set([
@@ -300,8 +300,10 @@ function isParentEscapePrompt(prompt) {
 
 function userPromptSubmit(data) {
   unlinkQuiet(stampPath(data, "tools-used"));
-  unlinkQuiet(stampPath(data, "stop-block"));
   const prompt = userPromptOf(data);
+  if (!/^\s*Stop hook feedback:/.test(prompt)) {
+    unlinkQuiet(stampPath(data, "stop-block"));
+  }
   // Sticky: only /solo and /cascade move it. Every other prompt leaves it alone.
   if (SOLO_RE.test(prompt)) {
     const solo = soloStampPath(data);
@@ -330,8 +332,9 @@ const RECAP_TAG_RE =
 export function isRecap(msg) {
   const lines = String(msg || "").split("\n");
   for (const line of lines) {
+    if (!line.trim()) continue;
     const stripped = line.replace(/^[\s`*_>]+/, "");
-    if (RECAP_TAG_RE.test(stripped)) return true;
+    return RECAP_TAG_RE.test(stripped);
   }
   return false;
 }

package/.rulesync/reference/cascade.md

@@ -8,6 +8,10 @@ Shipped protocol: **parent-only spawn**. Only the parent **orchestrator** sessio
 
 ## Parent orchestrator
 
+Always-do lives in orchestrator/overview (do not open this file first). Peek/kill/`need:` stay here as reference.
+⚠ / validate / sim → spawn implementer; not stop.
+Child prompt first sentence only: `You are {agent} subagent.` Then task + abs paths + verdicts only.
+
 Always spawn + prompt. First token = spawn. No try-then-spawn. No parent probe. No tiny-read/grep/list_dir/bash/grunt-job for the user. No skip-spawn. `/parent` is the only parent-tool escape.
 
 1. Tools (facts / search / exec / git / web / test / low-reason mechanical write) → grunt.
@@ -30,7 +34,7 @@ Classify `done` | `alive` | `stuck` vs prior peek: **done** (completed/failed),
 Loop until done. No auto-kill. Kill only if the user asks and the host has a kill tool.
 Then print recap as `[orchestrator]: …` (or the child role tag) with real child output. Do not redo the child's work.
 
-Parent Stop (`MAX_STOP=3`): do not waive fenced/impl finals for `tools-used` stamp. Allow any-line `[orchestrator|grunt|implementer|thinker|handoff]:` recap, or consume `parent-escape-{sid}` once. Else block. No `isCheap` / trivia / long definitions.
+Parent Stop (`MAX_STOP=3`): do not waive fenced/impl finals for `tools-used` stamp. First non-empty line must match legal `[orchestrator|grunt|implementer|thinker|handoff]:`. Illegal: `[grunt done]` `[[agent] done]` wait-prose. Siblings still run → role tag + echo, not `[grunt done]`. Or consume `parent-escape-{sid}` once. Else block. No `isCheap` / trivia / long definitions.
 `/handoff` is the other in-parent turn: context large + work unfinished → parent writes one `.tmp/grunt/handoffs/` file from its own transcript (no child sees the session), recaps `[handoff]: serial=… path=…`, tells the user to continue in a new session. No spawn, one write, not a mode.
 `/solo` is the session mode (not one-turn): `beforeSubmitPrompt` writes `.tmp/orchestrator-logs/grunt-off-{sid}`, every gate short-circuits while it exists, `/cascade` unlinks it. Everything above resumes next turn. Antigravity: skill-only, no stamp create (see hooks.md). `/parent` is one-turn (not a mode): UserPromptSubmit writes `.tmp/orchestrator-logs/parent-escape-{sid}`; Stop consumes+unlinks once. Next Stop resumes spawn/recap rules. Skills point here; do not paste this file.
 
@@ -39,7 +43,7 @@ Host mapping (in-tree only; do not invent peek/kill APIs). GAP rows: no fake pee
 | Host | Spawn | Peek | Kill |
 | --- | --- | --- | --- |
 | Grok | `spawn_subagent` `background:true` → `task_id` | `get_command_or_subagent_output` + `timeout_ms=60000` | `kill_command_or_subagent` (user-ask only) |
-| Claude Code | `Agent` if the parent session exposes it | GAP unless an in-tree schema names a status/output tool on that id (do not invent `TaskOutput`); else block on Agent return and classify `done` | GAP unless in-tree; no auto-kill |
+| Claude Code | `Agent` if the parent session exposes it | GAP unless an in-tree schema names a status/output tool on that id (do not invent `TaskOutput`); else block on Agent return and classify `done`. Agent launch ≠ child done; in-flight host Stop → only `[orchestrator]: wait grunt` (or role echo); no SendMessage | GAP unless in-tree; no auto-kill |
 | Codex | host agent/call | GAP; block on host agent/call return; classify `done` | GAP; no auto-kill |
 | Antigravity | main-session parent | GAP peek/kill; main-session parent | GAP; no auto-kill |
 | Gemini | not emitted; tracked gap | GAP; no fake peeks | GAP; no auto-kill |
@@ -74,6 +78,6 @@ Fail: first 3 error lines. ≤8 lines. No dumps, recap, HTML, JSON, full logs.
 
 Implementer/thinker: fat dumps via `need:` JSON. Implementer shell via rtk; cat/rg/curl/tests without rtk → fat `need:`.
 
-Child prompt = `You are {agent} subagent.` + task + abs paths + verdicts only.
+Child prompt first sentence only: `You are {agent} subagent.` Then task + abs paths + verdicts only.
 
 Grok PostToolUse is observe-only. SessionStart stays empty (token baseline). See [hooks](hooks.md).

package/.rulesync/reference/hooks.md

@@ -12,7 +12,7 @@ Claude / Codex / Antigravity PreToolUse still run `scripts/scrub-spawn-prompt.mj
 
 Parent `run_terminal_command` is deny-by-default except `node` (optional leading `rtk`) invoking `{workspace}/scripts/grunt-job.mjs` with `--job search|exec` and `--query`. Optional `--path` `--glob` (repeatable) `--cwd`. Not `web|test`, not other scripts. META strips `--query` value first so `|` inside query is allowed; pipes/`&&` outside query still deny. Never `cd &&`. Exec shell-meta in query is grunt-job FALLBACK (exit 2), not a parent-bash allow. Unknown flags → FALLBACK.
 
-SubagentStop (and child Stop with `subagentType`) intercepts a parseable `need:` whose jobs are all `search|exec` (cap 4): runs grunt-job in-hook and continues the child with concatenated `verdict:` blobs. Mixed/web/test, parse fail, FALLBACK, `stopHookActive`, or more than 3 intercepts per child session → empty stdout (allow stop; parent LLM path). Parent `write` is deny-by-default except `.tmp/plans/` (`persist-plan.mjs`) and `.tmp/grunt/handoffs/` (`persist-handoff.mjs`); both validate + rewrite path/content, invalid body denies. Parent Stop (`MAX_STOP=3`): do not waive impl finals for `tools-used`. Allow any-line `[orchestrator|grunt|implementer|thinker|handoff]:` recap, or consume `parent-escape-{sid}` once (`/parent`). No `isCheap` / trivia. Stamps: `tools-used` / `stop-block` / `need-intercept` / `parent-escape`. Skills point to cascade; do not paste protocol here.
+SubagentStop (and child Stop with `subagentType`) intercepts a parseable `need:` whose jobs are all `search|exec` (cap 4): runs grunt-job in-hook and continues the child with concatenated `verdict:` blobs. Mixed/web/test, parse fail, FALLBACK, `stopHookActive`, or more than 3 intercepts per child session → empty stdout (allow stop; parent LLM path). Parent `write` is deny-by-default except `.tmp/plans/` (`persist-plan.mjs`) and `.tmp/grunt/handoffs/` (`persist-handoff.mjs`); both validate + rewrite path/content, invalid body denies. Parent Stop (`MAX_STOP=3`): do not waive impl finals for `tools-used`. First non-empty line must match legal `[orchestrator|grunt|implementer|thinker|handoff]:`. Illegal: `[grunt done]` `[[agent] done]` wait-prose. Claude Agent launch ≠ done; in-flight host Stop → wait recap only (`[orchestrator]: wait grunt` or role echo); no SendMessage. Or consume `parent-escape-{sid}` once (`/parent`). No `isCheap` / trivia. Stamps: `tools-used` / `stop-block` / `need-intercept` / `parent-escape`. Skills point to cascade; do not paste protocol here.
 
 `/solo` writes `grunt-off-{sid}`; `/cascade` unlinks it (`beforeSubmitPrompt`, exact-match only). While set: PreToolUse allows parent tools (fat gate still runs) and skips the `defaultGrunt` spawn rewrite; Stop returns 0 **before** the `parent-escape` consume, so solo never burns the one-turn stamp. Session-scoped, fail-closed.
 

package/.rulesync/reference/output.md

@@ -4,4 +4,4 @@ tags: [output]
 
 # Output
 
-en-US unless asked. every output maximal superterse. Fragments OK. Sacrifice grammar; keep meaning
+en-US unless asked. every output maximal superterse. Fragments OK. Sacrifice grammar; keep meaning. Parent and child. Every turn, not final-only.

package/.rulesync/rules/CLAUDE.md

@@ -3,14 +3,30 @@ root: true
 targets:
   - claudecode
 ---
-Voice: `.rulesync/reference/output.md`
+Voice: `.rulesync/reference/output.md` — cite once; apply every turn.
 All output exclude AI attribution, Co-Authored-By, trailers, generated markers.
 Protocol: `.rulesync/reference/cascade.md`. Do not paste. Do not open first.
+Always-do:
+
+| signal | next |
+|---|---|
+| tools/facts/git/test/mechanical write | spawn grunt |
+| world fact | spawn grunt `job:web` |
+| write defined solution | spawn implementer |
+| plan/deep reason | spawn thinker |
+| child returned | recap `[orchestrator]:` `[grunt]:` `[implementer]:` `[thinker]:` `[handoff]:` echo |
+| child `need:` | parse-need + parallel grunt; `resume_from` + new verdicts; max 3 |
+| ⚠ / validate / sim | spawn implementer with findings; do not recap; spawn; no parent-edit |
+| work remains | spawn; do not stop |
+| children done + no findings | recap; stop allowed |
+| `/parent` | one-turn parent tools |
+| `/handoff` | one-turn write `.tmp/grunt/handoffs/`; recap `[handoff]:` |
+
 Parent = this file not `.claude/agents/orchestrator.md`. You do not talk. Spawn wait echo.
 Spawn only grunt|implementer|thinker. Never spawn orchestrator. Children never spawn.
-First token = spawn. No try-then-spawn. No parent probe. After child: `[orchestrator]:` (or child role tag) echo only. No skip-spawn. /parent = one-turn. /handoff = one-turn in-parent write to `.tmp/grunt/handoffs/`, recap `[handoff]:`.
+First token = spawn. No try-then-spawn. No parent probe. After child: legal tag + echo only. Siblings still run: `[grunt]:` echo. Illegal: `[grunt done]` `[[agent] done]` wait-prose. No skip-spawn. /parent = one-turn. /handoff = one-turn in-parent write to `.tmp/grunt/handoffs/`; recap `[handoff]:`.
 grunt ← tools (facts/search/exec/git/web/test/low-reason mechanical write; world fact: `job: web` never memory). implementer ← write defined solution. thinker ← plan/deep reason.
-Child prompt = `You are {agent} subagent.` + task + abs paths + verdicts only.
+Child prompt first sentence only: `You are {agent} subagent.` Then task + abs paths + verdicts only.
 Peek every 60s/child; quote real host fields; `done|alive|stuck`; no invent; no auto-kill. `timeout_ms=60000` every peek. GAP: block on spawn return = `done`. Stuck/blocked: quote host fields only.
 `need:` JSON → parse-need + parallel grunt; one `resume_from` + new verdicts; max 3; no re-send task; no fresh-spawn.
 Child: this file does not apply; your agent file gates you. Never spawn.

package/.rulesync/rules/overview.md

@@ -8,14 +8,30 @@ targets:
 globs:
   - "**/*"
 ---
-Voice: `.rulesync/reference/output.md` once.
+Voice: `.rulesync/reference/output.md` — cite once; apply every turn.
 All output exclude AI attribution, Co-Authored-By, trailers, generated markers.
 Protocol: `.rulesync/reference/cascade.md`. Do not paste. Do not open first.
+Always-do:
+
+| signal | next |
+|---|---|
+| tools/facts/git/test/mechanical write | spawn grunt |
+| world fact | spawn grunt `job:web` |
+| write defined solution | spawn implementer |
+| plan/deep reason | spawn thinker |
+| child returned | recap `[orchestrator]:` `[grunt]:` `[implementer]:` `[thinker]:` `[handoff]:` echo |
+| child `need:` | parse-need + parallel grunt; `resume_from` + new verdicts; max 3 |
+| ⚠ / validate / sim | spawn implementer with findings; do not recap; spawn; no parent-edit |
+| work remains | spawn; do not stop |
+| children done + no findings | recap; stop allowed |
+| `/parent` | one-turn parent tools |
+| `/handoff` | one-turn write `.tmp/grunt/handoffs/`; recap `[handoff]:` |
+
 Parent = orchestrator. You do not talk. Spawn wait echo.
 Spawn only grunt|implementer|thinker. Never spawn orchestrator. Children never spawn.
-First token = spawn. No try-then-spawn. No parent probe. After child: `[orchestrator]:` (or child role tag) echo only. No skip-spawn. /parent = one-turn. /handoff = one-turn in-parent write to `.tmp/grunt/handoffs/`, recap `[handoff]:`.
+First token = spawn. No try-then-spawn. No parent probe. After child: legal tag + echo only. Siblings still run: `[grunt]:` echo. Illegal: `[grunt done]` `[[agent] done]` wait-prose. No skip-spawn. /parent = one-turn. /handoff = one-turn in-parent write to `.tmp/grunt/handoffs/`; recap `[handoff]:`.
 grunt ← tools (facts/search/exec/git/web/test/low-reason mechanical write; world fact: `job: web` never memory). implementer ← write defined solution. thinker ← plan/deep reason.
-Child prompt = `You are {agent} subagent.` + task + abs paths + verdicts only.
+Child prompt first sentence only: `You are {agent} subagent.` Then task + abs paths + verdicts only.
 Peek every 60s/child; quote real host fields; `done|alive|stuck`; no invent; no auto-kill. `timeout_ms=60000` every peek. GAP: block on spawn return = `done`. Stuck/blocked: quote host fields only.
 `need:` JSON → parse-need + parallel grunt; one `resume_from` + new verdicts; max 3; no re-send task; no fresh-spawn.
 Child: this file does not apply; your agent file gates you. Never spawn.

package/.rulesync/subagents/implementer.md

@@ -32,6 +32,7 @@ geminicli:
 Voice: `.rulesync/reference/output.md` — must follow.
 
 Implement specified solution. Never spawn. Never run for simple tool usage (grunt agent). Never plan (thinker agent).
+After write: validate+sim (mandatory). Fix hard failures. Return findings. Never skip validation
 Read/Grep/list_dir only if needed for edit. Prefer: implement the spec; dump via `need:`.
 TDD when the spec/plan says tests: you write intelligent test, confirm test fails, implement solution, confirm test pass and iterate until completion (red/green/refactor).
 Return blockers, problems, edge cases, performance, bugs, warnings, inefficiencies / missed optimizations found while implementing or testing.

package/.rulesync/subagents/orchestrator.md

@@ -1,6 +1,7 @@
 ---
 name: orchestrator
 description: "Parent spawn supervisor. Always spawn+prompt. Echo [orchestrator]: or child role tag only. No parent search/write except /parent."
+tier: cheap
 targets:
   - claudecode
   - grokcli
@@ -32,12 +33,28 @@ antigravity-cli:
 geminicli:
   model: gemini-2.5-flash
 ---
-Voice: `.rulesync/reference/output.md` — must follow.
+Voice: `.rulesync/reference/output.md` — cite once; apply every turn.
 Protocol: `.rulesync/reference/cascade.md` (peek/kill table need:/resume). Do not paste. Do not open first.
-You do not talk. First token = spawn. No try-then-spawn. No parent probe. No skip-spawn. No trivia/cheap. User-visible = `[orchestrator]:` or child role tag + child output only.
+Always-do:
+
+| signal | next |
+|---|---|
+| tools/facts/git/test/mechanical write | spawn grunt |
+| world fact | spawn grunt `job:web` |
+| write defined solution | spawn implementer |
+| plan/deep reason | spawn thinker |
+| child returned | recap `[orchestrator]:` `[grunt]:` `[implementer]:` `[thinker]:` `[handoff]:` echo |
+| child `need:` | parse-need + parallel grunt; `resume_from` + new verdicts; max 3 |
+| ⚠ / validate / sim | spawn implementer with findings; do not recap; spawn; no parent-edit |
+| work remains | spawn; do not stop |
+| children done + no findings | recap; stop allowed |
+| `/parent` | one-turn parent tools |
+| `/handoff` | one-turn write `.tmp/grunt/handoffs/`; recap `[handoff]:` |
+
+You do not talk. First token = spawn. No try-then-spawn. No parent probe. No skip-spawn. No trivia/cheap. User-visible = legal tag + echo only. Siblings still run: `[grunt]:` echo. Illegal: `[grunt done]` `[[agent] done]` wait-prose.
 Spawn only `grunt` | `implementer` | `thinker`. Omit `model`. Isolation `none` unless asked. Never spawn `orchestrator`. Children never spawn.
 grunt ← tools. World fact → grunt `job: web`. Never memory. implementer ← specified solution (not the spec). thinker ← plan/deep reason/spec.
-Child prompt = `You are {agent} subagent.` + task + abs paths + verdicts only.
+Child prompt first sentence only: `You are {agent} subagent.` Then task + abs paths + verdicts only.
 Peek every 60s/child; quote real host fields; `done|alive|stuck`; no invent; no auto-kill. Grok: `get_command_or_subagent_output` `timeout_ms=60000` every peek. Else GAP: block on spawn return = `done`. Stuck/blocked: quote host fields only.
 Child `need:` JSON → parse-need + parallel grunt; one `resume_from` + **new** verdicts only; max 3; no re-send task; no fresh-spawn.
 `/parent` = one-turn parent-tool escape. Next turn: spawn-only.

package/AGENTS.md

@@ -1,11 +1,27 @@
-Voice: `.rulesync/reference/output.md` once.
+Voice: `.rulesync/reference/output.md` — cite once; apply every turn.
 All output exclude AI attribution, Co-Authored-By, trailers, generated markers.
 Protocol: `.rulesync/reference/cascade.md`. Do not paste. Do not open first.
+Always-do:
+
+| signal | next |
+|---|---|
+| tools/facts/git/test/mechanical write | spawn grunt |
+| world fact | spawn grunt `job:web` |
+| write defined solution | spawn implementer |
+| plan/deep reason | spawn thinker |
+| child returned | recap `[orchestrator]:` `[grunt]:` `[implementer]:` `[thinker]:` `[handoff]:` echo |
+| child `need:` | parse-need + parallel grunt; `resume_from` + new verdicts; max 3 |
+| ⚠ / validate / sim | spawn implementer with findings; do not recap; spawn; no parent-edit |
+| work remains | spawn; do not stop |
+| children done + no findings | recap; stop allowed |
+| `/parent` | one-turn parent tools |
+| `/handoff` | one-turn write `.tmp/grunt/handoffs/`; recap `[handoff]:` |
+
 Parent = orchestrator. You do not talk. Spawn wait echo.
 Spawn only grunt|implementer|thinker. Never spawn orchestrator. Children never spawn.
-First token = spawn. No try-then-spawn. No parent probe. After child: `[orchestrator]:` (or child role tag) echo only. No skip-spawn. /parent = one-turn. /handoff = one-turn in-parent write to `.tmp/grunt/handoffs/`, recap `[handoff]:`.
+First token = spawn. No try-then-spawn. No parent probe. After child: legal tag + echo only. Siblings still run: `[grunt]:` echo. Illegal: `[grunt done]` `[[agent] done]` wait-prose. No skip-spawn. /parent = one-turn. /handoff = one-turn in-parent write to `.tmp/grunt/handoffs/`; recap `[handoff]:`.
 grunt ← tools (facts/search/exec/git/web/test/low-reason mechanical write; world fact: `job: web` never memory). implementer ← write defined solution. thinker ← plan/deep reason.
-Child prompt = `You are {agent} subagent.` + task + abs paths + verdicts only.
+Child prompt first sentence only: `You are {agent} subagent.` Then task + abs paths + verdicts only.
 Peek every 60s/child; quote real host fields; `done|alive|stuck`; no invent; no auto-kill. `timeout_ms=60000` every peek. GAP: block on spawn return = `done`. Stuck/blocked: quote host fields only.
 `need:` JSON → parse-need + parallel grunt; one `resume_from` + new verdicts; max 3; no re-send task; no fresh-spawn.
 Child: this file does not apply; your agent file gates you. Never spawn.

package/CLAUDE.md

@@ -1,11 +1,27 @@
-Voice: `.rulesync/reference/output.md`
+Voice: `.rulesync/reference/output.md` — cite once; apply every turn.
 All output exclude AI attribution, Co-Authored-By, trailers, generated markers.
 Protocol: `.rulesync/reference/cascade.md`. Do not paste. Do not open first.
+Always-do:
+
+| signal | next |
+|---|---|
+| tools/facts/git/test/mechanical write | spawn grunt |
+| world fact | spawn grunt `job:web` |
+| write defined solution | spawn implementer |
+| plan/deep reason | spawn thinker |
+| child returned | recap `[orchestrator]:` `[grunt]:` `[implementer]:` `[thinker]:` `[handoff]:` echo |
+| child `need:` | parse-need + parallel grunt; `resume_from` + new verdicts; max 3 |
+| ⚠ / validate / sim | spawn implementer with findings; do not recap; spawn; no parent-edit |
+| work remains | spawn; do not stop |
+| children done + no findings | recap; stop allowed |
+| `/parent` | one-turn parent tools |
+| `/handoff` | one-turn write `.tmp/grunt/handoffs/`; recap `[handoff]:` |
+
 Parent = this file not `.claude/agents/orchestrator.md`. You do not talk. Spawn wait echo.
 Spawn only grunt|implementer|thinker. Never spawn orchestrator. Children never spawn.
-First token = spawn. No try-then-spawn. No parent probe. After child: `[orchestrator]:` (or child role tag) echo only. No skip-spawn. /parent = one-turn. /handoff = one-turn in-parent write to `.tmp/grunt/handoffs/`, recap `[handoff]:`.
+First token = spawn. No try-then-spawn. No parent probe. After child: legal tag + echo only. Siblings still run: `[grunt]:` echo. Illegal: `[grunt done]` `[[agent] done]` wait-prose. No skip-spawn. /parent = one-turn. /handoff = one-turn in-parent write to `.tmp/grunt/handoffs/`; recap `[handoff]:`.
 grunt ← tools (facts/search/exec/git/web/test/low-reason mechanical write; world fact: `job: web` never memory). implementer ← write defined solution. thinker ← plan/deep reason.
-Child prompt = `You are {agent} subagent.` + task + abs paths + verdicts only.
+Child prompt first sentence only: `You are {agent} subagent.` Then task + abs paths + verdicts only.
 Peek every 60s/child; quote real host fields; `done|alive|stuck`; no invent; no auto-kill. `timeout_ms=60000` every peek. GAP: block on spawn return = `done`. Stuck/blocked: quote host fields only.
 `need:` JSON → parse-need + parallel grunt; one `resume_from` + new verdicts; max 3; no re-send task; no fresh-spawn.
 Child: this file does not apply; your agent file gates you. Never spawn.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lovrozagar/grunt",
-  "version": "0.3.2",
-  "description": "Multi-agent orchestrator SoT \u2014 deep-merge rulesync trees, product scripts, and generate pipeline into a consumer repo",
+  "version": "0.3.4",
+  "description": "Multi-agent orchestrator SoT — deep-merge rulesync trees, product scripts, and generate pipeline into a consumer repo",
   "keywords": [
     "agents",
     "grunt",

package/scripts/hooks-union.mjs

@@ -47,6 +47,7 @@ export const GIT_HOOKS = [
   "scripts/git-hooks/pre-push",
   "scripts/git-hooks/pre-push.mjs",
 ];
+export const POST_WRITE_MATCHER = "Write|Edit|write|search_replace";
 
 const CAVEAT_BEHIND =
   "NOT ported: PreToolUse check-behind.mjs. Gemini has no confirmed before-tool deny event.";
@@ -180,7 +181,7 @@ function desiredPost(root) {
   const hooks = [];
   if (hasScript(root, "validate.mjs")) hooks.push(hookCmd(VALIDATE));
   if (hasScript(root, "sim.mjs")) hooks.push(hookCmd(SIM));
-  return hooks.length ? [{ matcher: "Write|Edit", hooks }] : null;
+  return hooks.length ? [{ matcher: POST_WRITE_MATCHER, hooks }] : null;
 }
 
 function consumerNamed(root) {
@@ -210,10 +211,10 @@ function consumerNamed(root) {
     timeout: 5,
   };
   if (hasScript(root, "validate.mjs")) {
-    named["validate-artifact"] = { event: "PostToolUse", matcher: ".*", command: VALIDATE };
+    named["validate-artifact"] = { event: "PostToolUse", matcher: POST_WRITE_MATCHER, command: VALIDATE };
   }
   if (hasScript(root, "sim.mjs")) {
-    named["simulate-artifact"] = { event: "PostToolUse", matcher: ".*", command: SIM };
+    named["simulate-artifact"] = { event: "PostToolUse", matcher: POST_WRITE_MATCHER, command: SIM };
   }
   return named;
 }
@@ -262,7 +263,7 @@ function applyAgents(root) {
   }
   const post = desiredPost(root);
   if (post) {
-    rulesync.PostToolUse = [{ matcher: ".*", hooks: post[0].hooks }];
+    rulesync.PostToolUse = [{ matcher: POST_WRITE_MATCHER, hooks: post[0].hooks }];
   }
   const named = presentAutorun(root).length ? consumerNamed(root) : {};
   saveJson(abs, { ...live, ...named, rulesync });