@lovrozagar/grunt 0.4.1 → 0.4.2

package/.grok/hooks/orchestrate-parent.js

@@ -17,11 +17,9 @@ import {
 import {
   denyResponse,
   fatHookOutput,
-  fileSizeBytes,
   isWorkspaceGruntJob,
   isParentOrchestrator,
   processFatTools,
-  resolveReadPath,
   rewriteGruntScratchPath,
   subagentTypeOf,
 } from "../../scripts/gate-fat-tools.mjs";
@@ -29,8 +27,8 @@ import { persistPlan } from "../../scripts/persist-plan.mjs";
 import { persistHandoff } from "../../scripts/persist-handoff.mjs";
 import { parseNeed } from "../../scripts/parse-need.mjs";
 import { resolveJobCwd, runJob } from "../../scripts/grunt-job.mjs";
-import { logTelemetry, ORCHESTRATOR_LOGS_DIR } from "../../scripts/telemetry.mjs";
 
+export const ORCHESTRATOR_LOGS_DIR = ".tmp/orchestrator-logs";
 export const DENY_REASON =
   "First action=spawn implementer|grunt|thinker. Deny expected. Only /solo this session escapes.";
 export const STOP_REASONS = [
@@ -70,7 +68,6 @@ const PARENT_SKILLS = new Set([
   "write-plan",
   "implement-plan",
 ]);
-const READ_TOOLS = new Set(["readfile", "read"]);
 const INTERCEPT_JOBS = new Set(["search", "exec"]);
 const MAX_STOP = 3;
 const MAX_INTERCEPT = 3;
@@ -104,7 +101,6 @@ function preToolUse(data) {
   const toolKey = eventKey(toolName);
   let toolInput = data.toolInput;
   if (toolInput == null) toolInput = data.tool_input;
-  logPreTool(data, toolKey, toolInput);
 
   const sub = subagentTypeOf(data);
   if (sub || !isParentOrchestrator(data)) {
@@ -173,30 +169,6 @@ function hasParentEscape(data) {
   return Boolean(p && fs.existsSync(p));
 }
 
-function logPreTool(data, toolKey, toolInput) {
-  const fields = {};
-  if (SPAWN_TOOLS.has(toolKey) && toolInput && typeof toolInput === "object") {
-    fields.spawnType = String(
-      toolInput.subagent_type || toolInput.subagentType || "",
-    );
-    const rf = toolInput.resume_from ?? toolInput.resumeFrom;
-    fields.resumeFromCount =
-      rf == null || rf === "" ? 0 : Array.isArray(rf) ? rf.length : 1;
-  }
-  if (READ_TOOLS.has(toolKey) && toolInput && typeof toolInput === "object") {
-    const raw =
-      toolInput.target_file ||
-      toolInput.file_path ||
-      toolInput.targetFile ||
-      toolInput.filePath ||
-      "";
-    fields.fileSizeBytes = fileSizeBytes(resolveReadPath(raw, data));
-  }
-  if (Object.keys(fields).length) {
-    logTelemetry("pretool", fields, workspaceRootOf(data));
-  }
-}
-
 function emitFat(data) {
   const fat = fatHookOutput(processFatTools(data));
   if (!fat) return null;
@@ -481,22 +453,11 @@ export function lastAssistantFromTranscript(filePath) {
   }
 }
 
-function logParentStop(data, fields) {
-  logTelemetry("parent-stop", fields, workspaceRootOf(data));
-}
-
 function stop(data) {
   if (data.subagentType || data.subagent_type) {
     return interceptNeed(data, "Stop");
   }
   if (data.stopHookActive || data.stop_hook_active) {
-    logParentStop(data, {
-      recap: false,
-      recapSource: "none",
-      attempt: 0,
-      failOpen: true,
-      stopHookActive: true,
-    });
     return 0;
   }
   const reason = String(data.reason || "");
@@ -512,28 +473,16 @@ function stop(data) {
   }
 
   const payloadMsg = payloadAssistantMessage(data);
-  let recapSource = "none";
-  let msg = "";
-  if (payloadMsg) {
-    msg = payloadMsg;
-    recapSource = "payload";
-  } else {
+  let msg = payloadMsg;
+  if (!msg) {
     const tp = data.transcript_path || data.transcriptPath || "";
     msg = lastAssistantFromTranscript(tp);
-    if (msg) recapSource = "transcript";
   }
 
   const waitFirst = firstNonEmptyStripped(msg) === WAIT_GRUNT;
   if (waitFirst && !isWaitGruntExact(msg)) {
     // fall through to block — leftover lines not allowed on mid-turn wait
   } else if (isRecap(msg)) {
-    logParentStop(data, {
-      recap: true,
-      recapSource,
-      attempt: 0,
-      failOpen: false,
-      stopHookActive: false,
-    });
     return 0;
   }
 
@@ -544,26 +493,12 @@ function stop(data) {
     if (!Number.isFinite(n) || n < 0) n = 0;
   }
   if (n >= MAX_STOP) {
-    logParentStop(data, {
-      recap: false,
-      recapSource,
-      attempt: n,
-      failOpen: true,
-      stopHookActive: false,
-    });
     return 0;
   }
   if (stopStamp) {
     fs.mkdirSync(path.dirname(stopStamp), { recursive: true });
     fs.writeFileSync(stopStamp, String(n + 1));
   }
-  logParentStop(data, {
-    recap: false,
-    recapSource,
-    attempt: n + 1,
-    failOpen: false,
-    stopHookActive: false,
-  });
   const reasonText = STOP_REASONS[Math.min(n, STOP_REASONS.length - 1)];
   emit({ decision: "block", reason: reasonText });
   return 0;
@@ -572,30 +507,18 @@ function stop(data) {
 function interceptNeed(data, hookEventName) {
   const ws = workspaceRootOf(data);
   if (data.stopHookActive || data.stop_hook_active) {
-    logTelemetry(
-      "stop",
-      { parseOk: false, intercept: "none" },
-      ws,
-    );
     return 0;
   }
   const msg = data.lastAssistantMessage || data.last_assistant_message || "";
   const parsed = parseNeed(msg);
   if (!parsed.ok) {
-    logTelemetry("stop", { parseOk: false, intercept: "none" }, ws);
     return 0;
   }
   const jobs = parsed.jobs;
-  const names = jobs.map((j) => j.job);
   if (
     jobs.length > 4 ||
     !jobs.every((j) => INTERCEPT_JOBS.has(j.job))
   ) {
-    logTelemetry(
-      "stop",
-      { parseOk: true, jobs: names, intercept: "none" },
-      ws,
-    );
     return 0;
   }
 
@@ -606,11 +529,6 @@ function interceptNeed(data, hookEventName) {
     if (!Number.isFinite(n) || n < 0) n = 0;
   }
   if (n >= MAX_INTERCEPT) {
-    logTelemetry(
-      "stop",
-      { parseOk: true, jobs: names, intercept: "none" },
-      ws,
-    );
     return 0;
   }
 
@@ -635,16 +553,6 @@ function interceptNeed(data, hookEventName) {
       result = { fallback: true, text: "FALLBACK\n" };
     }
     if (!result || result.fallback) {
-      logTelemetry(
-        "stop",
-        {
-          parseOk: true,
-          jobs: names,
-          intercept: "FALLBACK",
-          query: job.query,
-        },
-        ws,
-      );
       return 0;
     }
     parts.push(String(result.text || "").trimEnd());
@@ -654,11 +562,6 @@ function interceptNeed(data, hookEventName) {
     fs.writeFileSync(interceptStamp, String(n + 1));
   }
   const reason = parts.join("\n");
-  logTelemetry(
-    "stop",
-    { parseOk: true, jobs: names, intercept: "grunt-job" },
-    ws,
-  );
   emit({
     decision: "block",
     hookSpecificOutput: {

package/.rulesync/reference/hooks.md

@@ -4,17 +4,17 @@ tags: [hooks]
 
 # Hooks
 
-SessionStart: keep empty (token baseline). Do not inject context. Do not register a SessionStart hook on `orchestrate-parent.json`.
+SessionStart: keep empty (token baseline). Do not inject context. Do not register a SessionStart hook on `../../.grok/hooks/orchestrate-parent.json`.
 
 Grok PostToolUse / UserPromptSubmit / SessionStart are observe-only — do not attempt output scrub; compress via RTK / spawn / isolation verdict only. Do not add PostToolUse scrub hooks.
 
-Claude / Codex / Antigravity PreToolUse still run `scripts/scrub-spawn-prompt.mjs` and `scripts/gate-fat-tools.mjs`. Grok does not — spawn/fat rewrite is `orchestrate-parent.js` only. RTK stays `rtk.json`.
+Claude / Codex / Antigravity PreToolUse still run `../../scripts/scrub-spawn-prompt.mjs` and `../../scripts/gate-fat-tools.mjs`. Grok does not — spawn/fat rewrite is `../../.grok/hooks/orchestrate-parent.js` only. RTK stays `../../.grok/hooks/rtk.json`.
 
-Parent Read|Write|Edit|Bash|Skill deny unless `/solo` (session) or `/parent` last-ditch stamp. Grok PreToolUse has no matcher (Read included). Skills spawn-first; do not instruct parent Read/Bash. `.tmp/plans/` and `.tmp/grunt/handoffs/` Write still persist. Parent Bash still allowed for workspace `grunt-job.mjs` `--job search|exec`. Children with a type skip parent-deny (fat-only). Skill allowlist without escape: `parent|explain|solo|cascade|handoff|pickup|write-plan|implement-plan`. Deny reason: `First action=spawn implementer|grunt|thinker. Deny expected. Only /solo this session escapes.`. Parent `end_turn` is tagged recap (advise leftover numbered pick on own lines after) or `[orchestrator]: wait grunt`. Mid-turn stays exactly `[orchestrator]: wait grunt`.
+Parent Read|Write|Edit|Bash|Skill deny unless `/solo` (session) or `/parent` last-ditch stamp. Grok PreToolUse has no matcher (Read included). Skills spawn-first; do not instruct parent Read/Bash. `.tmp/plans/` and `.tmp/grunt/handoffs/` Write still persist. Parent Bash still allowed for workspace `../../scripts/grunt-job.mjs` `--job search|exec`. Children with a type skip parent-deny (fat-only). Skill allowlist without escape: `parent|explain|solo|cascade|handoff|pickup|write-plan|implement-plan`. Deny reason: `First action=spawn implementer|grunt|thinker. Deny expected. Only /solo this session escapes.`. Parent `end_turn` is tagged recap (advise leftover numbered pick on own lines after) or `[orchestrator]: wait grunt`. Mid-turn stays exactly `[orchestrator]: wait grunt`.
 
 Parent `run_terminal_command` is deny-by-default except `node` (optional leading `rtk`) invoking `{workspace}/scripts/grunt-job.mjs` with `--job search|exec` and `--query`. Optional `--path` `--glob` (repeatable) `--cwd`. Not `web|test`, not other scripts. META strips `--query` value first so `|` inside query is allowed; pipes/`&&` outside query still deny. Never `cd &&`. Exec shell-meta in query is grunt-job FALLBACK (exit 2), not a parent-bash allow. Unknown flags → FALLBACK.
 
-SubagentStop (and child Stop with `subagentType`) intercepts a parseable `need:` whose jobs are all `search|exec` (cap 4): runs grunt-job in-hook and continues the child with concatenated `verdict:` blobs. Mixed/web/test, parse fail, FALLBACK, `stopHookActive`, or more than 3 intercepts per child session → empty stdout (allow stop; parent LLM path). Parent `write` is deny-by-default except `.tmp/plans/` (`persist-plan.mjs`) and `.tmp/grunt/handoffs/` (`persist-handoff.mjs`); both validate + rewrite path/content, invalid body denies. Parent Stop (`MAX_STOP=3`): do not waive impl finals for `tools-used`. Parent `end_turn` is tagged recap (advise leftover numbered pick on own lines after) or `[orchestrator]: wait grunt`. Mid-turn stays exactly `[orchestrator]: wait grunt`. First non-empty line must match legal `[orchestrator|grunt|implementer|thinker|handoff]:`. Claude Agent launch ≠ done; in-flight host Stop → wait recap `[orchestrator]: wait grunt` only; no SendMessage. Or consume `parent-escape-{sid}` once (`/parent` last-ditch, not “use parent tools”). No `isCheap` / trivia. Stamps: `tools-used` / `stop-block` / `need-intercept` / `parent-escape`. Skills point to cascade; do not paste protocol here.
+SubagentStop (and child Stop with `subagentType`) intercepts a parseable `need:` whose jobs are all `search|exec` (cap 4): runs grunt-job in-hook and continues the child with concatenated `verdict:` blobs. Mixed/web/test, parse fail, FALLBACK, `stopHookActive`, or more than 3 intercepts per child session → empty stdout (allow stop; parent LLM path). Parent `write` is deny-by-default except `.tmp/plans/` (`../../scripts/persist-plan.mjs`) and `.tmp/grunt/handoffs/` (`../../scripts/persist-handoff.mjs`); both validate + rewrite path/content, invalid body denies. Parent Stop (`MAX_STOP=3`): do not waive impl finals for `tools-used`. Parent `end_turn` is tagged recap (advise leftover numbered pick on own lines after) or `[orchestrator]: wait grunt`. Mid-turn stays exactly `[orchestrator]: wait grunt`. First non-empty line must match legal `[orchestrator|grunt|implementer|thinker|handoff]:`. Claude Agent launch ≠ done; in-flight host Stop → wait recap `[orchestrator]: wait grunt` only; no SendMessage. Or consume `parent-escape-{sid}` once (`/parent` last-ditch, not “use parent tools”). No `isCheap` / trivia. Stamps: `tools-used` / `stop-block` / `need-intercept` / `parent-escape`. Skills point to cascade; do not paste protocol here.
 
 `/solo` writes `grunt-off-{sid}`; `/cascade` unlinks it (`beforeSubmitPrompt`, exact-match only). While set: PreToolUse allows parent tools (fat gate still runs) and skips the `defaultGrunt` spawn rewrite; Stop returns 0 **before** the `parent-escape` consume, so solo never burns the one-turn stamp. Session-scoped, fail-closed.
 

package/.rulesync/reference/map.md

@@ -21,7 +21,7 @@ Cheap outline. Not a file dump.
 - Default output: `.rulesync/reference/output.md` (overview.md → AGENTS.md; also agent bodies + CLAUDE.md, not auto-injected)
 
 ## Grok hand files
-- `.grok/hooks/orchestrate-parent.js` + `orchestrate-parent.json` — parent spawn/fat/stop/plan-write / SubagentStop intercept
+- `.grok/hooks/orchestrate-parent.js` + `.grok/hooks/orchestrate-parent.json` — parent spawn/fat/stop/plan-write / SubagentStop intercept
 - `.grok/hooks/rtk.json` — RTK
 - `.grok/skills/{write-plan,implement-plan,shared}/` — hand-only (no rulesync SSOT); point to cascade, do not paste
 - `.grok/skills/{parent,explain,handoff,pickup,solo,cascade,commit,commit-and-push,commit-push,commit-push-deploy,commit-push-release}/` — generated from `.rulesync/skills/`; do not hand-edit
@@ -45,12 +45,11 @@ Cheap outline. Not a file dump.
 - `scripts/emit-mcp-policy.mjs` — emit project MCP deny-default from `.rulesync/mcp-policy.jsonc` (not `rulesync -f mcp`); owns `.gemini/settings.json` `mcpServers` (merge extra keys)
 - `scripts/emit-gemini.mjs` — `GEMINI.md` (`@AGENTS.md`) + `.gemini/agents/{id}/agent.md` from `.rulesync/subagents` (not `rulesync -t geminicli`); no prune; does not touch settings
 - `scripts/emit-agent-shell-tools.mjs` — after rulesync subagents: rewrite `.claude/agents/grunt.md` body `Bash`; grok/codex/gemini/generic keep `run_terminal_command`
-- `scripts/telemetry.mjs` — append-only `.tmp/orchestrator-logs/telemetry.ndjson` from hooks / grunt-job CLI; fail-open; never stdout
 - `scripts/browser.mjs` — session browser rail `nav|snap|click|fill|shot|pdf|stop`; Lightpanda default; Chromium on verb/OS/probe/paint-host/one-escalate; `.tmp/grunt/browser/`
 
 ## Tmp
 - `.tmp/plans/` — persist-plan / parent / implementer
-- `.tmp/orchestrator-logs/` — hooks + grunt-job telemetry (shared; not grunt scratch)
+- `.tmp/orchestrator-logs/` — parent stamps (shared; not grunt scratch)
 - `.tmp/grunt/` — grunt scratch/tmp only
 - `.tmp/grunt/browser/` — browser session/profile/shot/pdf (not MCP)
 - `.tmp/grunt/handoffs/` — persist-handoff / `/handoff`; own serial counter (not plan serials)

package/.rulesync/rules/CLAUDE.md

@@ -36,7 +36,7 @@ Advise finals: numbered pick each on own line after tagged recap:
 1. Implement
 2. Tweak
 Slash `/implement-plan` + explicit implement = Implement. `ok`/`yes`/`y`/`continue` ≠ implement after conversational advise.
-Parent = this file not `.claude/agents/orchestrator.md`. You do not talk. Spawn wait echo.
+Parent = orchestrator (this file). You do not talk. Spawn wait echo.
 Spawn only grunt|implementer|thinker. Never spawn orchestrator. Children never spawn.
 You do not talk. First token = spawn. Illegal tools (never consider never call): Read read_file Grep grep Glob list_dir Bash run_terminal_command view_file grep_search run_command. Not in toolkit. Hook deny = backstop not UX. Next=spawn not retry. Only /solo (stamp grunt-off-{sid} this session) escapes spawn workflow. /explain=voice+post-child recap never parent Read. No try-then-spawn. No parent probe. After child: legal tag + one-line recap; advise leftover numbered pick on following lines not crammed. Echo = report not command. Siblings still run: `[grunt]:` echo. No skip-spawn. /handoff = one-turn in-parent write to `.tmp/grunt/handoffs/`; recap `[handoff]:`. `/pickup` spawn-first; grunt resolve if needed; never parent Read; not a mode.
 `/parent` hook last-ditch only. Skills spawn-first. Only `/solo` escapes spawn workflow.

package/.rulesync/rules/overview.md

@@ -41,7 +41,7 @@ Advise finals: numbered pick each on own line after tagged recap:
 1. Implement
 2. Tweak
 Slash `/implement-plan` + explicit implement = Implement. `ok`/`yes`/`y`/`continue` ≠ implement after conversational advise.
-Parent = orchestrator. You do not talk. Spawn wait echo.
+Parent = orchestrator (this file). You do not talk. Spawn wait echo.
 Spawn only grunt|implementer|thinker. Never spawn orchestrator. Children never spawn.
 You do not talk. First token = spawn. Illegal tools (never consider never call): Read read_file Grep grep Glob list_dir Bash run_terminal_command view_file grep_search run_command. Not in toolkit. Hook deny = backstop not UX. Next=spawn not retry. Only /solo (stamp grunt-off-{sid} this session) escapes spawn workflow. /explain=voice+post-child recap never parent Read. No try-then-spawn. No parent probe. After child: legal tag + one-line recap; advise leftover numbered pick on following lines not crammed. Echo = report not command. Siblings still run: `[grunt]:` echo. No skip-spawn. /handoff = one-turn in-parent write to `.tmp/grunt/handoffs/`; recap `[handoff]:`. `/pickup` spawn-first; grunt resolve if needed; never parent Read; not a mode.
 `/parent` hook last-ditch only. Skills spawn-first. Only `/solo` escapes spawn workflow.

package/AGENTS.md

@@ -32,7 +32,7 @@ Advise finals: numbered pick each on own line after tagged recap:
 1. Implement
 2. Tweak
 Slash `/implement-plan` + explicit implement = Implement. `ok`/`yes`/`y`/`continue` ≠ implement after conversational advise.
-Parent = orchestrator. You do not talk. Spawn wait echo.
+Parent = orchestrator (this file). You do not talk. Spawn wait echo.
 Spawn only grunt|implementer|thinker. Never spawn orchestrator. Children never spawn.
 You do not talk. First token = spawn. Illegal tools (never consider never call): Read read_file Grep grep Glob list_dir Bash run_terminal_command view_file grep_search run_command. Not in toolkit. Hook deny = backstop not UX. Next=spawn not retry. Only /solo (stamp grunt-off-{sid} this session) escapes spawn workflow. /explain=voice+post-child recap never parent Read. No try-then-spawn. No parent probe. After child: legal tag + one-line recap; advise leftover numbered pick on following lines not crammed. Echo = report not command. Siblings still run: `[grunt]:` echo. No skip-spawn. /handoff = one-turn in-parent write to `.tmp/grunt/handoffs/`; recap `[handoff]:`. `/pickup` spawn-first; grunt resolve if needed; never parent Read; not a mode.
 `/parent` hook last-ditch only. Skills spawn-first. Only `/solo` escapes spawn workflow.

package/CHANGELOG.md

@@ -0,0 +1,187 @@
+# Changelog
+
+All notable changes to this project are documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [0.4.2] - 2026-08-31
+
+### Added
+
+- Keep a Changelog history in `CHANGELOG.md` (this file); publish it via `package.json` `files`
+- `scripts/guarded-roots.test.ts` for generate/check/watch snapshot-remerge
+- README host-support GAP table (Grok/Claude/Codex/Antigravity/Gemini spawn-peek-kill; no invented peek/kill APIs)
+- scrub-text tests for remaining mid-intent phrases and blank/ws/fence helpers
+- init tests: sentinel auto-skip without a telemetry file; `.grok/hooks/orchestrate-parent.js` means inited, not auto-skip
+
+### Changed
+
+- Parent SoT: `Parent = orchestrator (this file)` in `AGENTS.md` / `CLAUDE.md` / rulesync rules
+- `.rulesync/reference/hooks.md` and `map.md`: repo-relative hook/script paths; drop `scripts/telemetry.mjs` from the map
+- README package version `0.4.2`; re-init sentinels no longer mention telemetry; Grok-only `write-plan` `implement-plan` `shared` noted as hand files (not rulesync SSOT); published `files` list documents `guarded-roots.mjs` + `CHANGELOG.md` and drops telemetry
+- `cli/init.mjs`: drop `telemetry.mjs` from `PRODUCT_SCRIPTS`; `shouldAutoSkipGlobals` no longer treats `scripts/telemetry.mjs` as a sentinel
+- `scripts/grunt-job.mjs` and `.grok/hooks/orchestrate-parent.js`: strip `logTelemetry`; `ORCHESTRATOR_LOGS_DIR` inlined on the hook
+- Tests drop NDJSON telemetry assertions (`cli/init.test.ts`, `scripts/orchestrate-parent.test.ts`, `scripts/gate-fat-tools.test.ts`)
+
+### Removed
+
+- Product telemetry: `scripts/telemetry.mjs` (append-only `.tmp/orchestrator-logs/telemetry.ndjson` from hooks / grunt-job; fail-open)
+- Telemetry as a re-init / globals auto-skip sentinel
+- `scripts/telemetry.mjs` from the published `files` list (`scripts/telemetry.test.ts` already absent)
+
+## [0.4.1] - 2026-08-31
+
+### Added
+
+- Init snapshot/remerge of guarded roots `AGENTS.md` `CLAUDE.md` `GEMINI.md` around generate/check/watch
+- Orchestrator advise-first Implement picks; `ok` / `yes` / `continue` ≠ implement after conversational advise
+
+## [0.4.0] - 2026-08-31
+
+### Added
+
+- Lightpanda-first session browser rail `nav|snap|click|fill|shot|pdf|stop` plus unified doctor
+- Browser skill shipped to host trees
+- `/pickup` spawn-first handoff counterpart (not a mode)
+
+## [0.3.11] - 2026-08-28
+
+### Added
+
+- Prompt-is-spec implementer write allowlist (gate)
+
+## [0.3.10] - 2026-08-28
+
+### Added
+
+- `commit-push` release and deploy skills
+
+### Changed
+
+- README rewritten as a full product guide
+
+### Removed
+
+- Architecture Excalidraw diagram
+
+## [0.3.9] - 2026-08-28
+
+### Changed
+
+- Clack CLI prompts
+
+### Fixed
+
+- Orchestrator spawn-first deny Read; clarify `DENY_REASON`
+
+## [0.3.8] - 2026-08-27
+
+### Added
+
+- `/cascade` exit-solo skill
+
+## [0.3.7] - 2026-08-27
+
+### Fixed
+
+- Consumer hook permissions deny without `Write(platform)`
+
+## [0.3.6] - 2026-08-27
+
+### Fixed
+
+- Deny parent Write; voice Stop
+
+## [0.3.5] - 2026-08-27
+
+### Fixed
+
+- Hook `package.json` `"type": "module"` so Stop ESM loads
+- Positive-only Stop; thinker offload
+
+## [0.3.4] - 2026-08-27
+
+### Fixed
+
+- Recap tags; stop-block reset
+
+## [0.3.3] - 2026-08-27
+
+### Added
+
+- Stop walls with always-do XOR map
+
+## [0.3.2] - 2026-08-27
+
+### Added
+
+- `--skip-globals` and smarter init merge
+
+## [0.3.1] - 2026-08-27
+
+### Added
+
+- CI publish `@lovrozagar/grunt` to GitHub Packages
+
+### Fixed
+
+- Stop recap, spawn cap, scratch rewrite
+
+## [0.3.0] - 2026-08-27
+
+### Added
+
+- Skills: `handoff`, `solo`, `commit`, `commit-and-push`, `explain`, `parent` (rulesync + host trees)
+- Larger init pipeline: `emit-gemini`, `emit-agent-shell-tools`, `emit-mcp-policy`, `hooks-union`, `persist-handoff`
+- Gemini CLI agent shells + settings emit
+- Orchestrate-parent expansion; host `hooks.json`
+
+### Changed
+
+- Cascade/map/rules sync; package `0.3.0`
+
+## [0.2.0] - 2026-08-27
+
+### Added
+
+- Agents context
+
+### Changed
+
+- Slim agent prompts; max permissions
+
+## [0.1.0] - 2026-08-26
+
+First published tag. No `v0.0.x`.
+
+### Added
+
+- `@lovrozagar/grunt` npm package: deep-merge rulesync trees, product scripts, and generate pipeline into a consumer repo (`npx @lovrozagar/grunt` / `init`)
+- Host emit matrix: Grok, Claude Code, Codex, Antigravity; Gemini CLI tracked as a generate gap
+- Agents: orchestrator (parent) plus grunt / implementer / thinker
+- Product scripts including `grunt-job`, persist-plan, emit-mcp-policy, gate-fat-tools, scrub-spawn-prompt, scrub-text, check-globals, sync-global-settings, purge-global-mcps, and `scripts/telemetry.mjs` NDJSON (present from the first commit)
+- Skills: `explain`, `parent`, `terse`; Grok-only `write-plan` / `implement-plan`
+- GitHub Actions CI and npm `0.1.0` release
+
+### Fixed
+
+- Terse and spawn rules
+
+[0.4.2]: https://github.com/lovrozagar/grunt/compare/v0.4.1...v0.4.2
+[0.4.1]: https://github.com/lovrozagar/grunt/compare/v0.4.0...v0.4.1
+[0.4.0]: https://github.com/lovrozagar/grunt/compare/v0.3.11...v0.4.0
+[0.3.11]: https://github.com/lovrozagar/grunt/compare/v0.3.10...v0.3.11
+[0.3.10]: https://github.com/lovrozagar/grunt/compare/v0.3.9...v0.3.10
+[0.3.9]: https://github.com/lovrozagar/grunt/compare/v0.3.8...v0.3.9
+[0.3.8]: https://github.com/lovrozagar/grunt/compare/v0.3.7...v0.3.8
+[0.3.7]: https://github.com/lovrozagar/grunt/compare/v0.3.6...v0.3.7
+[0.3.6]: https://github.com/lovrozagar/grunt/compare/v0.3.5...v0.3.6
+[0.3.5]: https://github.com/lovrozagar/grunt/compare/v0.3.4...v0.3.5
+[0.3.4]: https://github.com/lovrozagar/grunt/compare/v0.3.3...v0.3.4
+[0.3.3]: https://github.com/lovrozagar/grunt/compare/v0.3.2...v0.3.3
+[0.3.2]: https://github.com/lovrozagar/grunt/compare/v0.3.1...v0.3.2
+[0.3.1]: https://github.com/lovrozagar/grunt/compare/v0.3.0...v0.3.1
+[0.3.0]: https://github.com/lovrozagar/grunt/compare/v0.2.0...v0.3.0
+[0.2.0]: https://github.com/lovrozagar/grunt/compare/v0.1.0...v0.2.0
+[0.1.0]: https://github.com/lovrozagar/grunt/releases/tag/v0.1.0

package/CLAUDE.md

@@ -32,7 +32,7 @@ Advise finals: numbered pick each on own line after tagged recap:
 1. Implement
 2. Tweak
 Slash `/implement-plan` + explicit implement = Implement. `ok`/`yes`/`y`/`continue` ≠ implement after conversational advise.
-Parent = this file not `.claude/agents/orchestrator.md`. You do not talk. Spawn wait echo.
+Parent = orchestrator (this file). You do not talk. Spawn wait echo.
 Spawn only grunt|implementer|thinker. Never spawn orchestrator. Children never spawn.
 You do not talk. First token = spawn. Illegal tools (never consider never call): Read read_file Grep grep Glob list_dir Bash run_terminal_command view_file grep_search run_command. Not in toolkit. Hook deny = backstop not UX. Next=spawn not retry. Only /solo (stamp grunt-off-{sid} this session) escapes spawn workflow. /explain=voice+post-child recap never parent Read. No try-then-spawn. No parent probe. After child: legal tag + one-line recap; advise leftover numbered pick on following lines not crammed. Echo = report not command. Siblings still run: `[grunt]:` echo. No skip-spawn. /handoff = one-turn in-parent write to `.tmp/grunt/handoffs/`; recap `[handoff]:`. `/pickup` spawn-first; grunt resolve if needed; never parent Read; not a mode.
 `/parent` hook last-ditch only. Skills spawn-first. Only `/solo` escapes spawn workflow.

package/README.md

@@ -32,7 +32,7 @@ npx @lovrozagar/grunt
 
 - Same as `npx @lovrozagar/grunt init` when no command
 - Do not `npm test` as a consumer
-- Package: `@lovrozagar/grunt` `0.3.9` MIT · https://github.com/lovrozagar/grunt
+- Package: `@lovrozagar/grunt` `0.4.2` MIT · https://github.com/lovrozagar/grunt
 
 ## Prerequisites
 
@@ -87,8 +87,8 @@ Rulesync schema doctor is separate: `npm run rulesync:doctor`.
 
 - Merge SoT `npm install` `rulesync:generate` `sync:globals:apply` `rulesync:check`
 - `--skip-globals` skips apply
-- Re-init auto-skips globals when `<!-- grunt:begin -->` in `AGENTS.md`/`CLAUDE.md` **or** `scripts/telemetry.mjs` exists
-- First init (no sentinel no telemetry) applies globals unless flagged
+- Re-init auto-skips globals when `<!-- grunt:begin -->` in `AGENTS.md`/`CLAUDE.md`
+- First init (no sentinel) applies globals unless flagged
 - Owned trees/scripts refresh; extra `.rulesync` files kept; patches to grunt-owned files lost
 
 ## Version bump
@@ -120,10 +120,13 @@ Lightpanda-first session CLI: `node scripts/browser.mjs nav|snap|click|fill|shot
 
 ## Skills
 
-Present under `.claude` / `.rulesync` / `.agents`:
+Present under `.claude` / `.rulesync` / `.agents` (`rulesync -f skills` mirrors SSOT):
 
 - `browser` `cascade` `commit` `commit-and-push` `commit-push` `commit-push-deploy` `commit-push-release` `explain` `handoff` `pickup` `parent` `solo`
-- Grok-only: `write-plan` `implement-plan` (`/write-plan` plan-only → `next: /implement-plan`; advise unlock = pick **1. Implement**, not `ok`/`yes`/`go`; slash `/implement-plan` still valid alias)
+
+Grok-only (hand files under `.grok/skills/`; no `.rulesync/skills` SSOT; not mirrored):
+
+- `write-plan` `implement-plan` `shared` (`/write-plan` plan-only → `next: /implement-plan`; advise unlock = pick **1. Implement**, not `ok`/`yes`/`go`; slash `/implement-plan` still valid alias)
 
 ## Generate
 
@@ -141,7 +144,7 @@ Emit writes other-CLI trees from `.rulesync` for the **next** process of that CL
 ## Config
 
 - SoT merge into consumer repo; existing configs kept where not grunt-owned
-- Globals: first init apply; re-init auto-skip (sentinel / telemetry) or `--skip-globals`
+- Globals: first init apply; re-init auto-skip (sentinel) or `--skip-globals`
 - `sync-globals` / `purge-mcps`: dry-run default; `--apply` writes
 - Hosts: grok claude codex gemini antigravity
 
@@ -155,6 +158,18 @@ Draw **one** CLI host bubble. That bubble is **this** session’s CLI: Grok Buil
 
 User-visible conversation attaches only to the parent. Children never talk to the user. Children never spawn.
 
+### Host support (GAP)
+
+Not feature-parity across hosts. In-tree mapping only; do not invent peek/kill APIs. GAP rows: no fake peeks, no auto-kill; block on spawn return and classify `done`.
+
+| Host | Spawn | Peek | Kill |
+| --- | --- | --- | --- |
+| Grok | `spawn_subagent` `background:true` → `task_id` | `get_command_or_subagent_output` + `timeout_ms=60000` | `kill_command_or_subagent` (user-ask only) |
+| Claude Code | `Agent` if the parent session exposes it | GAP unless an in-tree schema names a status/output tool on that id (do not invent `TaskOutput`); else block on Agent return and classify `done`. Agent launch ≠ child done; in-flight host Stop → only `[orchestrator]: wait grunt`; no SendMessage | GAP unless in-tree; no auto-kill |
+| Codex | host agent/call | GAP; block on host agent/call return; classify `done` | GAP; no auto-kill |
+| Antigravity | main-session parent | GAP peek/kill; main-session parent | GAP; no auto-kill |
+| Gemini | not emitted; tracked gap | GAP; no fake peeks | GAP; no auto-kill |
+
 ### Nested diagram
 
 Same topology as the session recap; every legal edge labeled.
@@ -318,15 +333,17 @@ Repo-relative (repository root):
 
 ## Layout
 
-Published (`package.json` `files`): `bin/grunt.js` `cli` `scripts/check-globals.mjs` `scripts/emit-agent-shell-tools.mjs` `scripts/emit-gemini.mjs` `scripts/emit-mcp-policy.mjs` `scripts/gate-fat-tools.mjs` `scripts/hooks-union.mjs` `scripts/grunt-job.mjs` `scripts/parse-need.mjs` `scripts/persist-handoff.mjs` `scripts/persist-plan.mjs` `scripts/purge-global-mcps.mjs` `scripts/scrub-spawn-prompt.mjs` `scripts/scrub-text-lib.mjs` `scripts/sync-global-settings.mjs` `scripts/telemetry.mjs` `scripts/browser.mjs` `scripts/doctor.mjs` `scripts/scrub-text` `.rulesync` `.grok` `.codex` `.claude` `.agents` `AGENTS.md` `CLAUDE.md` `.mcp.json` `README.md` `LICENSE`
+Published (`package.json` `files`): `bin/grunt.js` `cli` `scripts/check-globals.mjs` `scripts/emit-agent-shell-tools.mjs` `scripts/emit-gemini.mjs` `scripts/guarded-roots.mjs` `scripts/emit-mcp-policy.mjs` `scripts/gate-fat-tools.mjs` `scripts/hooks-union.mjs` `scripts/grunt-job.mjs` `scripts/parse-need.mjs` `scripts/persist-handoff.mjs` `scripts/persist-plan.mjs` `scripts/purge-global-mcps.mjs` `scripts/scrub-spawn-prompt.mjs` `scripts/scrub-text-lib.mjs` `scripts/sync-global-settings.mjs` `scripts/browser.mjs` `scripts/doctor.mjs` `scripts/scrub-text` `.rulesync` `.grok` `.codex` `.claude` `.agents` `AGENTS.md` `CLAUDE.md` `.mcp.json` `README.md` `LICENSE` `CHANGELOG.md`
+
+No `scripts/*.test.ts` `scripts/fixtures/` `docs/` `coverage/` `vitest.config.ts` in `files`. `cli` dir ships whole (includes `cli/*.test.ts`).
 
-No `scripts/*.test.ts` `scripts/fixtures/` `docs/` `coverage/` `vitest.config.ts` in `files`.
+Not packed: `GEMINI.md` `.gemini/` — `emit-gemini.mjs` writes them on `generate` / `init` (`GEMINI.md` → `@AGENTS.md`). Not in `files`.
 
-Repo root (also): `coverage/` `.gemini/` — no `src/` no `CONTRIBUTING` no `docs/`
+Repo root (also): `coverage/` `.gemini/` `GEMINI.md` — no `src/` no `CONTRIBUTING` no `docs/`
 
 - `bin/grunt.js` — CLI bin
 - `cli/grunt.mjs` — commands
-- `scripts/` — generate emits `telemetry.mjs` (re-init sentinel) `scrub-text`
+- `scripts/` — init copies product scripts (`grunt-job.mjs` `scrub-text` …). Re-init sentinels: `.grok/hooks/orchestrate-parent.js` `.rulesync` `<!-- grunt:begin -->`
 - `.rulesync/` — SoT (subagents skills reference)
 - `.claude/` `.grok/` `.codex/` `.agents/` `.gemini/` — host emit
 - `coverage/` — vitest local not published

package/cli/init.mjs

@@ -21,7 +21,6 @@ const PRODUCT_SCRIPTS = [
   "scrub-spawn-prompt.mjs",
   "scrub-text-lib.mjs",
   "sync-global-settings.mjs",
-  "telemetry.mjs",
   "browser.mjs",
   "doctor.mjs",
   "scrub-text",
@@ -74,14 +73,13 @@ function destHasGruntSentinel(dest) {
 
 export function destAlreadyInited(dest) {
   return (
-    fs.existsSync(path.join(dest, "scripts", "telemetry.mjs")) ||
     fs.existsSync(path.join(dest, ".grok", "hooks", "orchestrate-parent.js")) ||
     fs.existsSync(path.join(dest, ".rulesync"))
   )
 }
 
 export function shouldAutoSkipGlobals(dest) {
-  return destHasGruntSentinel(dest) || fs.existsSync(path.join(dest, "scripts", "telemetry.mjs"))
+  return destHasGruntSentinel(dest)
 }
 
 function detectNewline(text) {

package/cli/init.test.ts

@@ -56,7 +56,6 @@ const PRODUCT_FILES = [
   "scrub-spawn-prompt.mjs",
   "scrub-text-lib.mjs",
   "sync-global-settings.mjs",
-  "telemetry.mjs",
   "browser.mjs",
   "doctor.mjs",
 ];
@@ -1003,8 +1002,8 @@ describe("init", () => {
     expect(pkg.name).toBe("fixture-pkg");
     expect(fs.existsSync(path.join(pkgRoot, ".tmp"))).toBe(true);
     expect(fs.readFileSync(path.join(pkgRoot, ".gitignore"), "utf8")).toBe(".tmp/\n");
-    expect(fs.readFileSync(path.join(pkgRoot, "scripts", "telemetry.mjs"), "utf8")).toBe(
-      "telemetry.mjs",
+    expect(fs.readFileSync(path.join(pkgRoot, "scripts", "grunt-job.mjs"), "utf8")).toBe(
+      "grunt-job.mjs",
     );
     // self-skip: markdown/settings stay exactly as-is, no sentinel wrap
     expect(fs.readFileSync(path.join(pkgRoot, "CLAUDE.md"), "utf8")).toBe("CLAUDE.md content");
@@ -1124,11 +1123,13 @@ describe("init", () => {
     ]);
   });
 
-  it("applyGlobals true still applies when telemetry auto-skip would fire", () => {
+  it("applyGlobals true still applies when sentinel auto-skip would fire", () => {
     const pkgRoot = stubPkgRoot();
     const dest = tmp("grunt-force-globals-");
-    fs.mkdirSync(path.join(dest, "scripts"), { recursive: true });
-    fs.writeFileSync(path.join(dest, "scripts", "telemetry.mjs"), "existing");
+    fs.writeFileSync(
+      path.join(dest, "AGENTS.md"),
+      "<!-- grunt:begin -->\nold\n<!-- grunt:end -->\n",
+    );
     const exec = vi.fn();
     init(dest, { pkgRoot, execFileSync: exec, applyGlobals: true });
     expect(exec.mock.calls.map((c) => c[1])).toEqual([
@@ -1139,20 +1140,6 @@ describe("init", () => {
     ]);
   });
 
-  it("auto-skip globals when telemetry.mjs exists", () => {
-    const pkgRoot = stubPkgRoot();
-    const dest = tmp("grunt-auto-tel-");
-    fs.mkdirSync(path.join(dest, "scripts"), { recursive: true });
-    fs.writeFileSync(path.join(dest, "scripts", "telemetry.mjs"), "existing");
-    const exec = vi.fn();
-    init(dest, { pkgRoot, execFileSync: exec });
-    expect(exec.mock.calls.map((c) => c[1])).toEqual([
-      ["install"],
-      ["run", "rulesync:generate"],
-      ["run", "rulesync:check"],
-    ]);
-  });
-
   it("auto-skip globals when AGENTS.md already has a grunt sentinel", () => {
     const pkgRoot = stubPkgRoot();
     const dest = tmp("grunt-auto-sent-");
@@ -1174,8 +1161,7 @@ describe("init", () => {
     const dest = tmp("grunt-rerun-nosent-");
     fs.writeFileSync(path.join(dest, "CLAUDE.md"), "hand-written consumer doc\n");
     fs.writeFileSync(path.join(dest, "AGENTS.md"), "hand-written consumer doc\n");
-    fs.mkdirSync(path.join(dest, "scripts"), { recursive: true });
-    fs.writeFileSync(path.join(dest, "scripts", "telemetry.mjs"), "existing");
+    fs.mkdirSync(path.join(dest, ".rulesync"), { recursive: true });
     fs.writeFileSync(path.join(dest, "CLAUDE.grunt.md"), "stale side");
     const exec = vi.fn();
     init(dest, { pkgRoot, execFileSync: exec });
@@ -1292,6 +1278,14 @@ describe("destAlreadyInited / shouldAutoSkipGlobals", () => {
     expect(shouldAutoSkipGlobals(dest)).toBe(false);
   });
 
+  it(".grok/hooks/orchestrate-parent.js means inited, not auto-skip", () => {
+    const dest = tmp("inspect-hook-");
+    fs.mkdirSync(path.join(dest, ".grok", "hooks"), { recursive: true });
+    fs.writeFileSync(path.join(dest, ".grok", "hooks", "orchestrate-parent.js"), "");
+    expect(destAlreadyInited(dest)).toBe(true);
+    expect(shouldAutoSkipGlobals(dest)).toBe(false);
+  });
+
   it("sentinel auto-skips globals", () => {
     const dest = tmp("inspect-sent-");
     fs.writeFileSync(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lovrozagar/grunt",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "description": "Multi-agent orchestrator SoT — deep-merge rulesync trees, product scripts, and generate pipeline into a consumer repo",
   "keywords": [
     "agents",
@@ -39,7 +39,6 @@
     "scripts/scrub-spawn-prompt.mjs",
     "scripts/scrub-text-lib.mjs",
     "scripts/sync-global-settings.mjs",
-    "scripts/telemetry.mjs",
     "scripts/browser.mjs",
     "scripts/doctor.mjs",
     "scripts/scrub-text",
@@ -52,7 +51,8 @@
     "CLAUDE.md",
     ".mcp.json",
     "README.md",
-    "LICENSE"
+    "LICENSE",
+    "CHANGELOG.md"
   ],
   "type": "module",
   "publishConfig": {

package/scripts/grunt-job.mjs

@@ -4,7 +4,6 @@ import { spawnSync } from "node:child_process";
 import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
-import { logTelemetry } from "./telemetry.mjs";
 
 export const FALLBACK = "FALLBACK";
 export const SHELL_META = /[|&;`$(){}<>\n\r]/;
@@ -443,14 +442,12 @@ function main() {
   try {
     const parsed = parseArgv(process.argv.slice(2));
     if (parsed.unknown) {
-      logTelemetry("grunt-job", { fallback: true, query: parsed.query }, process.cwd());
       process.stdout.write(FALLBACK + "\n");
       return 2;
     }
     const ws = process.cwd();
     const cwd = parsed.cwd ? resolveJobCwd(parsed.cwd, ws) : ws;
     if (!cwd) {
-      logTelemetry("grunt-job", { fallback: true, query: parsed.query }, ws);
       process.stdout.write(FALLBACK + "\n");
       return 2;
     }
@@ -461,15 +458,9 @@ function main() {
       path: parsed.path,
       glob: parsed.glob,
     });
-    logTelemetry(
-      "grunt-job",
-      { job: parsed.job, fallback: Boolean(result.fallback), query: parsed.query },
-      ws,
-    );
     process.stdout.write(result.text);
     return result.code;
   } catch {
-    logTelemetry("grunt-job", { fallback: true }, process.cwd());
     process.stdout.write(FALLBACK + "\n");
     return 2;
   }

package/scripts/telemetry.mjs

@@ -1,38 +0,0 @@
-#!/usr/bin/env node
-/** Append-only hook sidecar. Never throws. Never writes stdout. */
-import fs from "node:fs";
-import path from "node:path";
-
-const QUERY_MAX = 120;
-
-export const ORCHESTRATOR_LOGS_DIR = ".tmp/orchestrator-logs";
-
-export function telemetryPath(workspaceRoot) {
-  const root =
-    workspaceRoot ||
-    process.env.GROK_WORKSPACE_ROOT ||
-    process.cwd();
-  return path.join(root, ORCHESTRATOR_LOGS_DIR, "telemetry.ndjson");
-}
-
-function truncateQuery(q) {
-  const s = String(q ?? "");
-  if (s.length <= QUERY_MAX) return s;
-  return s.slice(0, QUERY_MAX);
-}
-
-export function logTelemetry(event, fields, workspaceRoot) {
-  try {
-    const rec = { ts: Date.now(), event: String(event || "") };
-    const src = fields && typeof fields === "object" ? fields : {};
-    for (const [k, v] of Object.entries(src)) {
-      if (k === "query" && v != null) rec.query = truncateQuery(v);
-      else rec[k] = v;
-    }
-    const dest = telemetryPath(workspaceRoot);
-    fs.mkdirSync(path.dirname(dest), { recursive: true });
-    fs.appendFileSync(dest, JSON.stringify(rec) + "\n");
-  } catch {
-    // fail-open
-  }
-}