@lovrozagar/grunt 0.5.2 → 0.6.0

package/.agents/agents/grunt.md

@@ -1,6 +1,6 @@
 ---
 name: grunt
-description: Tools. Facts/search/exec/git/web/test/low-reason mechanical write. Never feature solution. Never plan/advise. Never spawn.
+description: Isolation worker. Facts only.
 tools:
   - view_file
   - grep_search
@@ -12,26 +12,4 @@ model: flash
 commandExecutionPolicy: eager
 inheritMcp: false
 ---
-Voice: `.rulesync/reference/output.md` — must follow.
-
-Tools (shell/host; and more): read_file, grep, list_dir, run_terminal_command, write, search_replace, web_search, web_fetch. Git. Test runners (vitest, playwright, and similar). Other system tools. Commands of project dependencies. Installing and managing dependencies. Running dev, build, preview, deploys and similar.
-You CAN run npm/git/bash via `run_terminal_command`. Do NOT wait on MCP. Do NOT request MCP for shell. `mcpInheritance: none` means no MCP — use shell/files instead.
-
-Run tools. Return output. Never spawn. Never implement complex/feature solutions (implementer agent). Never plan/advise (thinker agent).
-May write simple structural folders/files (scaffold/mkdir/touch/boilerplate only). Not feature solutions.
-Low-reason write: mechanical/repetitive/obvious; volume OK.
-Scratch/tmp → `{workspaceRoot}/.tmp/grunt/` root files only (mkdir as needed). Never `.tmp/` root. Never persist-owned reserved dirs `plans|handoffs|browser|orchestrator-logs` except owning scripts. No nested `.tmp/grunt/tmp/`. Repo scaffold/mkdir/touch/boilerplate stays in the real tree.
-
-`job: search|exec` → first action `node scripts/grunt-job.mjs --job search|exec --query …`; whole reply = stdout.
-`job: test` → grunt-job; `FALLBACK` (exit 2) → LLM tools.
-`job: web` and messy test → LLM grunt (web_search/web_fetch).
-Live page ≠ `job:web`. Read pasted `.rulesync/skills/browser/SKILL.md`. `.rulesync/reference/browser.md` only if engine/doctor. No `job:browse`.
-Browser → `node scripts/browser.mjs <verb>` (`nav|snap|click|fill|shot|pdf|stop`). Lightpanda default. Never MCP. Never raw Playwright. Never env knobs.
-Isolation/write reply ≤8 lines. Verdict grammar only — no dumps/recap/HTML/JSON/full logs:
-
-```
-verdict: ok|fail|empty
-n: <count>
-- path:line — fact
-Fail: first 3 error lines.
-```
+Return isolation facts (≤8 lines, stash receipt when needed). A browse snap is the payload.

package/.agents/agents/orchestrator.md

@@ -1,55 +1,10 @@
 ---
 name: orchestrator
-description: 'Parent spawn supervisor. First token = spawn. Illegal: Read/read_file/Grep/Glob/list_dir/Bash/run_terminal_command. Echo or child role tag only. /solo = session escape. /parent = hook last-ditch.'
-tools: []
-mainAgent: false
-subagent: true
-model: flash
+description: Session agent. Do the work. Spawn grunt only under the hood when isolation is cheaper.
+mainAgent: true
+subagent: false
+model: pro
 commandExecutionPolicy: eager
 inheritMcp: false
 ---
-Voice: `.rulesync/reference/output.md` — cite once; apply every turn.
-en-US unless asked. every output maximal superterse. Fragments OK. Sacrifice grammar; keep meaning. Parent and child. Every turn, not final-only. no mid-turn chat; no narration while Agent runs; user-visible = legal `[role]:` + **one-line** recap. Advise leftover: one empty blank line after recap/body then numbered pick each on own line. Zero user-visible tokens before spawn/peek. In-flight host Stop → only `[orchestrator]: wait grunt`.
-Protocol: `.rulesync/reference/cascade.md` (peek/kill table need:/resume). Do not paste.
-Always-do:
-
-| signal | next |
-|---|---|
-| create/change product files | grunt facts → thinker plan/recap-stop before writes; default thinker unless prompt-is-spec or small/simple → implementer. Thinker recap ≠ spec-ready; advise-stop until pick1/pick2 / `/implement-plan {n}` / explicit implement (=pick1 iff Implement-typed). Never parent Write/Bash/Skill |
-| plan/spec ready + file writes remain | leftover pick1/pick2 / `/implement-plan {n}` / explicit implement (=pick1 iff Implement-typed) only. Implement pick1 = spawn implementer + last [thinker] recap as spec; no `.tmp/grunt/plans`; no write-plan; no implement-plan. Implement pick2 = persist `.tmp/grunt/plans/{n}` then implementer `plan=/abs/...` one-shot skip pause. Write pick1 = `/tmp` persist recap; no implementer. Write pick2 = write-plan persist inspect-pause; remainder `/implement-plan {n}`; no implementer. slash `/write-plan` ≠ leftover 2. `ok`/`yes`/`y`/`continue` ≠ either. Thinker recap alone = recap-stop |
-| tools/facts/git/test/mechanical write | spawn grunt |
-| snippet / cite / "what is X" | spawn grunt `job:web`. URL-in-a-cite ≠ browse |
-| URL / browse / click / fill / snap / live DOM | spawn grunt; child prompt must include abs `.rulesync/skills/browser/SKILL.md` and `.rulesync/reference/browser.md`; Read then `node scripts/browser.mjs`; Lightpanda default; never websearch that page |
-| world fact | spawn grunt `job:web` |
-| write defined solution | spawn implementer; **blocked if advise-class stems present** unless prompt-is-spec / obvious comment-spec false+ |
-| think / plan / advise / recommend / how / why / explain (ask us; not slash `/explain` not one-cmd/last-log/source-token) | spawn thinker; facts=grunt/`need:`; **no implementer this turn**. Repeat how/why/… + last [thinker] still visible + no new input/tools since → no spawn; echo last or /explain. Unsure → thinker |
-| child returned | recap per output.md (echo=report not command). e.g. `[orchestrator]: wrote /abs/a` |
-| child `need:` | parse-need + parallel grunt; `resume_from` + new verdicts; max 3 |
-| ⚠ / validate / sim | spawn implementer with findings; do not recap; spawn; no parent-edit |
-| work remains | spawn; do not stop. Advise recap ≠ leftover writes |
-| children done + no findings | recap; advise-first stop wins. Else stop only if no writes remain and spawn count > 0 when the user asked for a file change |
-| `/parent` | spawn-first; hook last-ditch `parent-escape`; never Read/Bash |
-| `/handoff` | one-turn write `.tmp/grunt/handoffs/`; recap `[handoff]:` |
-| `/tmp` | one-turn write `.tmp/grunt/`; recap `[tmp]:` |
-| `/pickup` | spawn-first; grunt resolve if needed; never parent Read; not a mode |
-| `/write-plan` plan-only | recap; remainder `/implement-plan` (ask) |
-| `/explain` | spawn if facts/work; then human recap of child output; screenshot/visible=context no Read |
-| `/solo` | session escape; stamp spawn-mode-{sid} iff slash≠config; always unlink grunt-off; else spawn-first |
-| `/cascade` | restore cascade; stamp spawn-mode-{sid} iff slash≠config; always unlink grunt-off; spawn-first |
-| `/auto` | session leftover-gate auto; stamp auto-ask-{sid} iff slash≠config; not spawn-escape; not autofix |
-| `/ask` | session leftover-gate ask; stamp auto-ask-{sid} iff slash≠config; not leftover y/n; not pick 3 |
-
-Precedence: slash → obvious fact/false+/reuse → advise-class row → prompt-is-spec → write. Advise-class + write-class → thinker first; implementer only after spec / pick1 / pick2 / `/implement-plan {n}`.
-False+: I think terraform plan /implement-plan /solo source tokens one-cmd how- last-log why.
-Advise leftover: numbered pick each on own line after tagged recap; one empty blank line immediately before leftover 1. (leftover last; not adjacent to recap/body). Always-print typed leftover triple (advise-class final recap only). One verb per recap; never jammed Implement/write. No leftover on `need:` JSON wait-grunt grunt/implementer recaps slash-only turns.
-1. {Implement|Write} with verbal plan
-2. {same verb} with file plan
-3. Tweak
-Type Implement = in-repo product writes. Type Write = persist-only/implementer-nonsense (SCA/advise-only/`/tmp`/inspect-pause). Recap remainder still names the human gate; leftover is not `4. Contact bank`. `/handoff` stays slash not Write pick1. No omit 1/2. No frozen 4. Do not relabel 3. Parent echoes printed leftover. Match number or full leftover label (or unique tail `verbal plan` / `file plan`). Always-do leftover match printed lines; not Skill-name (`2` ≠ write-plan). Implement pick1 = spawn implementer; last [thinker] recap as spec; no `.tmp/grunt/plans`; no write-plan; no implement-plan. Implement pick2 = persist `.tmp/grunt/plans/{n}` then spawn implementer `plan=/abs/...` one-shot skip pause. Write pick1 = `/tmp` persist recap/body under `.tmp/grunt/`; no implementer. Write pick2 = write-plan persist inspect-pause; remainder `/implement-plan {n}`; no implementer this turn. 3 / Tweak → stay advise; extra text = revision notes → thinker; bare 3/Tweak = stop wait notes. Bare `implement`/`implementer` → pick1 iff Implement-typed; else recap “no implementer this remainder”; no spawn. Bare `write` → pick1 iff Write-typed; else not a match. Type-mismatch → that recap no spawn. Alias `Implementer with …` → pick1/pick2 iff Implement-typed. `/write-plan` persist-only inspect-pause; remainder `/implement-plan {n}` (ask); ≠ leftover pick 2. `/implement-plan {n}` disk/file ≠ verbal. `ok`/`yes`/`y`/`continue` ≠ either pick.
-You do not talk. First token = spawn. Illegal tools (never consider never call): Read read_file Grep grep Glob list_dir Bash run_terminal_command view_file grep_search run_command. Not in toolkit. Hook deny = backstop not UX. Next=spawn not retry. Only /solo (stamp spawn-mode-{sid} iff slash≠config; unlink grunt-off) escapes spawn workflow. /explain=voice+post-child recap never parent Read. No try-then-spawn. No parent probe. No skip-spawn. No trivia/cheap. User-visible = legal tag + **one-line** recap; advise leftover numbered pick on following lines after one empty blank line not crammed (echo printed leftover; always-print typed triple). Table = routing; echo = report not command. Siblings still run: `[grunt]:` echo. Facts/search/trees → grunt, never thinker.
-Spawn only `grunt` | `implementer` | `thinker`. Omit `model`. Isolation `none` unless asked. Never spawn `orchestrator`. Children never spawn.
-grunt ← tools. Snippet/cite/"what is X" → grunt `job: web`. URL/browse/click/fill/snap/live DOM → grunt; paste skill+browser.md abs paths; never websearch that page. Never memory. implementer ← specified solution or prompt-is-spec or small/simple; blocked if advise-class. thinker ← think/plan/advise/recommend/how/why/explain (default product change; no implementer this turn).
-Child prompt first sentence only: `You are {agent} subagent.` Then task + abs paths + verdicts only. Browse tags match → prompt must include abs `.rulesync/skills/browser/SKILL.md` and `.rulesync/reference/browser.md`.
-Peek every 60s/child; quote real host fields; `done|alive|stuck`; no invent; no auto-kill. Grok: `get_command_or_subagent_output` `timeout_ms=60000` every peek. Else GAP: block on spawn return = `done`. Stuck/blocked: quote host fields only.
-Child `need:` JSON → parse-need + parallel grunt; one `resume_from` + **new** verdicts only; max 3; no re-send task; no fresh-spawn.
-`/parent` hook last-ditch only. Skills spawn-first. Only `/solo` escapes spawn workflow. `/pickup` spawn-first; grunt resolve if needed; never parent Read; not a mode.
+Follow AGENTS.md. Do the work. Concise complete sentences with natural grammar. Scratch in `.tmp/grunt/`. Browse with `node scripts/browser.mjs`; the rail swaps to Chromium when Lightpanda is blocked. App e2e uses Playwright.

package/.agents/skills/ask/SKILL.md

@@ -1,18 +1,11 @@
 ---
 name: ask
-description: >
-  Session leftover-gate. /ask sets leftover-gate ask for this session — leftover
-  triple wait on advise-class recaps. Not leftover y/n. Not pick 3 Tweak. Not
-  spawn-escape. /auto sets auto.
+description: 'Session flag. Finish one step, recap, then ask before the next.'
 ---
-Session leftover-gate, not spawn-escape. Not leftover y/n. Not pick 3 Tweak.
+# ask
 
-Whole-prompt `/ask` only (`/ask foo` no-op). Persists until `/auto` or session end.
+Session flag. Slash `/ask` stamps this session.
 
-Effective leftover-gate: stamp body `auto`|`ask` > `.rulesync/grunt.config.jsonc` `leftoverGate` > `ask`. Fail-closed `ask`.
+Finish one coherent step. Recap what landed. Ask whether to continue. Wait. Do not start the next step in this turn.
 
-Claude/Codex/Grok: `/ask` via submit hook. If slash token equals committed config `leftoverGate`, unlink `.tmp/grunt/orchestrator-logs/auto-ask-{sid}`; else write stamp body `ask`. Requires real sid (never `default`). Agents/Antigravity: instruction-only (this skill body); cannot create stamp via `/ask`; Stop still honors a pre-existing stamp if present. Session-scoped, never global.
-
-Ask: always-print typed leftover triple on advise-class final recap. Write-typed leftover never spawns implementer. Not leftover pick 3.
-
-Not `/solo`. Spawn-first still. Recap tags still.
+`/auto` is the default: keep going; ask only on blockers. Slash `/auto` unlinks the stamp and returns this session to auto.

package/.agents/skills/auto/SKILL.md

@@ -1,18 +1,13 @@
 ---
 name: auto
-description: >
-  Session leftover-gate. /auto sets leftover-gate auto for this session —
-  Implement-typed pick2 chains write-plan persist then implement-plan {n} and
-  skips leftover wait. Not autofix. Not spawn-escape. /ask restores ask.
+description: >-
+  Session flag. Default. Work the task through. Ask on blockers instead of
+  monkey-patching.
 ---
-Session leftover-gate, not spawn-escape. Not autofix. Not leftover y/n.
+# auto
 
-Whole-prompt `/auto` only (`/auto foo` no-op). Persists until `/ask` or session end.
+Session flag. Default. Slash `/auto` unlinks any `/ask` stamp on this session.
 
-Effective leftover-gate: stamp body `auto`|`ask` > `.rulesync/grunt.config.jsonc` `leftoverGate` > `ask`. Fail-closed `ask`.
+Work the task through. Do not stop after each step. When a blocker, missing fact, or real choice appears, stop and ask. Do not monkey-patch around a failure.
 
-Claude/Codex/Grok: `/auto` via submit hook. If slash token equals committed config `leftoverGate`, unlink `.tmp/grunt/orchestrator-logs/auto-ask-{sid}`; else write stamp body `auto`. Requires real sid (never `default`). Agents/Antigravity: instruction-only (this skill body); cannot create stamp via `/auto`; Stop still honors a pre-existing stamp if present. Session-scoped, never global.
-
-effective=auto + Implement-typed: write-plan persist then implement-plan `{n}`; skip leftover triple wait. Write-typed under auto still leftover wait; never spawn implementer.
-
-Not `/solo`. Spawn-first still. Recap tags still.
+`/ask` is the other flag: one step, then ask.

package/.agents/skills/browser/SKILL.md

@@ -1,18 +1,14 @@
 ---
 name: browser
-description: >
-  Live URL/interact → this; not websearch. /browser or browse a URL. Call node
-  scripts/browser.mjs nav|snap|click|fill|shot|pdf|stop. Lightpanda default;
-  snap is the default read. Windows → Chromium. Never MCP. Never env knobs.
-  Never raw Playwright.
+description: Browse via node scripts/browser.mjs (Lightpanda). App e2e uses Playwright.
 ---
 Zero-config. `node scripts/browser.mjs <verb>`.
 
-Verbs: `nav <url>` · `snap` · `click <ref>` · `fill <ref> <text>` · `shot` · `pdf` · `stop` · `doctor` · `ensure`.
+Verbs: `nav <url>` · `snap` · `click <ref>` · `fill <ref> <text>` · `scroll [ref|down|up|N]` · `wait [ms]` · `hover <ref>` · `select <ref> <value>` · `shot` · `pdf` · `stop` · `doctor` · `ensure`.
 
 - **snap** = default read (markdown + numbered refs). `click`/`fill` need a prior snap.
-- Lightpanda default. Chromium when `shot`/`pdf`/`trace`, win32, missing Lightpanda, probe-fail once, or paint hosts (figma docs/sheets/slides mail.google earth).
+- Lightpanda default. The rail swaps to Chromium when `shot`/`pdf`/`trace`, win32, missing Lightpanda, probe-fail once, Chromium-first hosts (figma docs/sheets/slides mail.google earth amazon), or a blocked/empty/client-rendered snap. One swap. Do not stop and say you cannot.
 - Session/profile: `.tmp/grunt/browser/`. `stop` reaps; second `stop` ok.
 - Windows: Chromium even if Lightpanda exists.
-- `doctor`/`ensure` → `node scripts/doctor.mjs` or `grunt doctor`. See README Prerequisites.
+- `doctor`/`ensure` → `node scripts/doctor.mjs` or `grunt doctor`. Engine hints: `node scripts/setup.mjs browser`. Do not read a README unless doctor/setup is missing; then https://github.com/lovrozagar/grunt#prerequisites (not the consumer README).
 - No env. No MCP. No raw Playwright. Spec: `.rulesync/reference/browser.md`.

package/.agents/skills/clasp/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: clasp
+description: >-
+  Low-level Apps Script CLI. Prefer /google-workspace for sheet, doc, meeting,
+  mail.
+---
+# clasp
+
+Custom Apps Script in-repo only. Spec: `.rulesync/reference/clasp.md`.
+
+Sheets, Docs, Slides, Calendar, Gmail: `node scripts/google-workspace.mjs` and `.rulesync/reference/google-workspace.md`.

package/.agents/skills/commit/SKILL.md

@@ -8,6 +8,8 @@ Inspect `git status` + `git diff` (staged and unstaged) before the message.
 
 Stage only user intent. Never blind `git add -A` / `git add .`. Split unrelated concerns into multiple commits.
 
+If a unique in-progress file exists under `.tmp/grunt/implementations/`, its `## Files` is the default stage set. Still inspect `git status`.
+
 Message = Conventional Commits **subject only**: `type(scope): subject` (scope optional).
 
 Types: feat fix docs style refactor perf test build ci chore revert.
@@ -18,4 +20,4 @@ NO body. NO footer. NO `Co-Authored-By`. NO `Generated with`. NO 🤖. NO traile
 
 Never git push. Never `git push`. This skill never pushes.
 
-Protocol: `.rulesync/reference/cascade.md`. Do not paste cascade.
+Protocol: `.rulesync/reference/cascade.md`. Do not paste.

package/.agents/skills/commit-push/SKILL.md

@@ -8,6 +8,8 @@ Inspect `git status` + `git diff` (staged and unstaged) before the message.
 
 Stage only user intent. Never blind `git add -A` / `git add .`. Split unrelated concerns into multiple commits.
 
+If a unique in-progress file exists under `.tmp/grunt/implementations/`, its `## Files` is the default stage set. Still inspect `git status`.
+
 Message = Conventional Commits **subject only**: `type(scope): subject` (scope optional).
 
 Types: feat fix docs style refactor perf test build ci chore revert.

package/.agents/skills/commit-push-deploy/SKILL.md

@@ -9,6 +9,8 @@ Inspect `git status` + `git diff` (staged and unstaged) before the message.
 
 Stage only user intent. Never blind `git add -A` / `git add .`. Split unrelated concerns into multiple commits.
 
+If a unique in-progress file exists under `.tmp/grunt/implementations/`, its `## Files` is the default stage set. Still inspect `git status`.
+
 Message = Conventional Commits **subject only**: `type(scope): subject` (scope optional).
 
 Types: feat fix docs style refactor perf test build ci chore revert.

package/.agents/skills/commit-push-release/SKILL.md

@@ -9,6 +9,8 @@ Inspect `git status` + `git diff` (staged and unstaged) before the message.
 
 Stage only user intent. Never blind `git add -A` / `git add .`. Split unrelated concerns into multiple commits.
 
+If a unique in-progress file exists under `.tmp/grunt/implementations/`, its `## Files` is the default stage set. Still inspect `git status`.
+
 Message = Conventional Commits **subject only**: `type(scope): subject` (scope optional).
 
 Types: feat fix docs style refactor perf test build ci chore revert.

package/.agents/skills/explain/SKILL.md

@@ -1,19 +1,13 @@
 ---
 name: explain
-description: >
-  One-off human recap. /explain. First action = spawn grunt|implementer|thinker
-  if facts/work; else recap already-visible text/screenshot only. Never
-  Read/read_file/Grep/Glob/Bash. Not a spawn-escape. Not a mode. Voice escape
-  this reply only then revert.
+description: Longer human recap this reply only.
 ---
-This reply only: explain for a human. Not a mode switch or session flag. After this reply, revert to maximal superterse automatically.
+This reply only: explain for a human. Not a mode switch or session flag. After this reply, revert to output.md.
 
-Still concise. Complete sentences OK. Prioritize clarity over token compression. Do not dump, sprawl, or narrate process.
-Four buckets (completed / in-flight / remainder / blocker). Completed work = past tense. Sentences OK. Omit empty. Natural language; no key tokens.
+Still concise. Complete sentences. Prioritize clarity over token compression. Do not dump, sprawl, or narrate process.
+Four buckets (completed / in-flight / remainder / blocker). Completed work = past tense. Omit empty. Natural language; no key tokens. Longer expansion this reply only — not the only grammar for complete sentences.
 
-en-US unless asked. Keep need:/verdict:/plan grammar when those apply.
+en-US unless asked. Keep need: JSON and plan grammar when those apply.
 
-This skill is the only one-off escape from superterse.
-Always-why advise recap ≠ `/explain`. `/explain` = expansion not the why path.
-Freeform how/why/explain is not this skill (thinker unless cheap false+). Slash `/explain` only.
-Not a spawn-workflow escape. Only `/solo` is. Legal tools this skill: spawn only then text. Illegal (never consider): Read read_file Grep Glob Bash list_dir. Screenshot/image is already in the prompt — do not Read a path. Recap AFTER children or from visible context. No children + no work → text only still no Read.
+Always-why advise recap ≠ `/explain`. `/explain` = longer expansion not the why path.
+Freeform how/why/explain is not this skill. Slash `/explain` only.

package/.agents/skills/google-workspace/SKILL.md

@@ -0,0 +1,13 @@
+---
+name: google-workspace
+description: >-
+  Google Sheets, Docs, Slides, Calendar, Gmail via node
+  scripts/google-workspace.mjs.
+---
+# google-workspace
+
+When the user wants a Google sheet, doc, slide, meeting, or mail, run `node scripts/google-workspace.mjs`. Spec: `.rulesync/reference/google-workspace.md`. If Calendar/Gmail/sheet set fail or login is missing, tell them to run `node scripts/setup.mjs google-workspace` (TTY) for the handheld walk. Do not share creds. Do not invent OAuth JSON. Do not ask them to write Apps Script.
+
+`whoami` · `scopes` · `accounts` · `login` · `sheet create|set|get|append|clear` · `doc create|append` · `drive list` · `slide create` · `meeting create [--attendees a@b,c@d]` · `mail send|list`. `--account NAME` for a second Google user on this machine.
+
+Auth: `node scripts/setup.mjs google-workspace` then `login` as needed. Two Google users on one machine: `--account NAME`. Creds stay in `~/.grunt/` (or `~/.grunt/workspace/NAME/`). Do not share OAuth JSON or tokens. Doctor: `node scripts/doctor.mjs` reports google-workspace as optional (`oauth` `tokens` `adc` `clasprc`; no secrets). `clasprc` is Drive-only. Spec: `.rulesync/reference/google-workspace.md` `.rulesync/reference/setup.md`.

package/.agents/skills/handoff/SKILL.md

@@ -1,13 +1,10 @@
 ---
 name: handoff
-description: >
-  Parent writes a session handoff under .tmp/grunt/handoffs/ and tells the user
-  to continue in a fresh session. Use for /handoff, "context is getting long",
-  "hand this off", "start a new session". Not a plan, not a design doc.
+description: Write a session handoff under .tmp/grunt/handoffs/. Continue with /pickup.
 ---
 # handoff
 
-One turn, in-parent. Parent authors from its own transcript — no child sees this session, so **do not spawn**. Write once, report path, stop.
+One turn. Author from this session. Write once, report path, stop.
 
 ## Invocation
 
@@ -59,7 +56,7 @@ Facts only. Absolute paths. No transcript paste, no dump, no secrets/tokens.
 
 Line 1 of the body: `HANDOFF_NAME: <3-6 word name>`, then the body only.
 
-Parent `write`s under `.tmp/grunt/handoffs/` (any filename in that dir). Grok `orchestrate-parent.js` runs `scripts/persist-handoff.mjs`: serial/slug from `HANDOFF_NAME:` / heading, injects frontmatter, rewrites path + content. Invalid handoff or a write outside that dir is denied — fix the body, do not retry elsewhere.
+Write under `.tmp/grunt/handoffs/` (any filename in that dir). Grok `orchestrate-parent.js` runs `scripts/persist-handoff.mjs`: serial/slug from `HANDOFF_NAME:` / heading, injects frontmatter, rewrites path + content. Invalid handoff or a write outside that dir is denied — fix the body, do not retry elsewhere.
 
 Host without that hook: name the file per **Path** yourself, or pipe the body to `node scripts/persist-handoff.mjs --workspace {repo}` and use its `path`.
 
@@ -67,19 +64,18 @@ Host without that hook: name the file per **Path** yourself, or pipe the body to
 
 ```
 [handoff]: serial={int} path=.tmp/grunt/handoffs/{serial}-{slug}-{stamp}.md
-next: start a new session; `/pickup {serial}` (equiv: spawn grunt|implementer with abs path={that file})
+next: start a new session; `/pickup {serial}`
 ```
 
 Do not dump the handoff body.
 
 ## Picking one up
 
-`/pickup {serial}` owns pickup (equiv: spawn grunt|implementer with abs path). Parent never Read. Child sets `status: resumed`, work `Next` leaves in order, flip only the box. All `[x]` → `status: done`. Do not re-plan; a stale leaf → `/write-plan` a follow-up.
+`/pickup {serial}` owns pickup. Load the file, set `status: resumed`, work `Next` leaves in order, flip only the box. All `[x]` → `status: done`. Do not re-plan; a stale leaf → `/write-plan` a follow-up.
 
 ## Rules
 
-- No spawn. One write. `/handoff` is not a mode.
-- Never parent Read/Bash. Write handoffs dir only.
-- Handoff ≠ plan: no Steps/Verify phases, no `.tmp/grunt/plans/` write.
+- One write. `/handoff` is not a mode.
+- Handoff ≠ plan: no Steps/Verify phases, no `.tmp/grunt/plans/` write. Handoff ≠ implementation journal.
 - Never rewrite or renumber an existing handoff; new session = new serial.
 - Protocol: `.rulesync/reference/cascade.md`. Do not paste it here.

package/.agents/skills/implement-plan/SKILL.md

@@ -1,117 +1,13 @@
 ---
 name: implement-plan
-description: >
-  Implementer executes a local .tmp/grunt/plans checklist: continue, resume, or
-  pick among plans. Empty /implement-plan resumes a unique in-progress or starts
-  a unique ready plan; else lists and needs serial. Marks [x], skips completed
-  leaves. Not /implement review-loop, not /execute-plan PR DAG, not /pickup, not
-  /run-plan.
+description: 'Execute remaining leaves in a .tmp/grunt/plans checklist. Skip [x].'
 ---
 # implement-plan
 
-Parent: spawn grunt to list/validate `.tmp/grunt/plans/` when the target is unknown or empty-arg; then spawn implementer with abs plan path + `{repo}/.rulesync/reference/plan-format.md` + first open leaf. Recap from implementer output only. No parent Read/Grep/Bash. Agent-agnostic (grunt then implementer). Not `/pickup` (handoffs only). Not `/run-plan`. Not `/execute-plan` (PR DAG).
+You execute the plan in this session. Skip `[x]`. Start at the first open leaf. Flip only the box after each leaf. When a phase's children are `[x]`, mark the phase `[x]`. Frontmatter `in-progress` then `done`.
 
-Format SSOT: `.rulesync/reference/plan-format.md`.
+Arg `{n|path}` picks that file. Empty arg: unique in-progress, else unique ready, else list serials.
 
-## Invocation
+Format: `.rulesync/reference/plan-format.md`. Write-allowlist = paths listed in the plan. Run Verify leaves. Do not skip a test leaf. Do not flip a behavior leaf `[x]` until its test ran. Fat dumps go through `node scripts/grunt-job.mjs`.
 
-`/implement-plan`
-`/implement-plan {serial|path}`
-
-Todos: `resolve` → `implement` → `verify`. One serial per run. Partial progress is ok; re-run continues. Skip `[x]`. Remaining leaves only.
-
-## Resolve
-
-Arg = `$ARGUMENTS` stripped. Listing/validate: spawn grunt (`job:search|exec`) on `.tmp/grunt/plans/`. Do not parent Read/Grep/Bash.
-
-Eligible auto = valid plan-format checkbox grammar (`N [ ]` / `N.M [ ]`; not `- [ ]`; not `1. [ ]`). Invalid grammar: exclude from auto. Drop `done` (all `[x]` or FM `status: done`) from auto. Never silent latest. Never auto-pick among many.
-
-**In-progress:** some `[x]` and remaining `[ ]`, or FM `status: in-progress` with open leaves.
-
-**Ready / none started:** FM `ready` or all boxes `[ ]`.
-
-**Blocked + open:** list/tag `blocked`; empty-arg never auto-runs. Explicit `{n|path}` still runs (skip `[x]`).
-
-### Empty arg (`/implement-plan`)
-
-Grunt lists/validates `.tmp/grunt/plans/*.md`. Then:
-
-| condition | action |
-|---|---|
-| exactly 1 in-progress | resume it (implementer; skip `[x]`; start first open leaf) |
-| exactly 1 plan total, none started (ready / all open) | start it |
-| 0 plans (dir missing / no files) | blocker; remainder `/write-plan` |
-| N>1 in-progress | list those (`serial name status first-open-leaf`); `need serial`. No silent latest |
-| 0 in-progress, N>1 eligible (ready / blocked-open) | list eligible (`serial name status first-open-leaf`; tag `blocked`); `need serial` |
-| only `done` / only invalid | blocker; remainder `/write-plan` |
-
-Unique in-progress wins even if other ready/done files exist. Invalid grammar does not count toward unique-auto and is omitted from auto lists.
-
-### Arg `{n|path}`
-
-That file only; skip `[x]`; remaining leaves. Write-plan remainder stays `/implement-plan {n}` (that serial). Never auto-pick among many.
-
-| input | action |
-|---|---|
-| int (`1`, `0001`) | files whose leading number == that int |
-| `{serial}-slug` or `*.md` or path | that file if under `.tmp/grunt/plans/` |
-| slug only (`add-auth`) | unique match `*-{slug}-*.md` or `*-{slug}.md` |
-| `.tmp/grunt/plans` missing / no files | `no plans. /write-plan first` stop |
-| 0 matches | `no plan serial={n}. have: {list}` stop |
-| >1 matches | `ambiguous: {paths}` stop |
-| all boxes already `[x]` / `status: done` | `[implementer]: already done path=...` **no implementer spawn** |
-
-Lookup: integer equality so `1` matches canonical `1-foo-20260826T143000Z.md` and legacy `1-foo.md`. `0001-foo.md` may still resolve if an old padded file exists. Normalize to abs path + int serial.
-
-If prefetch needed: spawn grunt `job:search|exec`. Do not `resume_from` for dumps already listed in the plan leaves. Do not add a repo-wide explore. Then spawn implementer.
-
-## Spawn implementer
-
-`subagent_type: implementer`, `background: true`, omit `model`, `isolation: none`, `description: "implement plan {serial}"`.
-
-Prompt:
-
-```
-You are implementer subagent. Do not spawn.
-
-Read {abs}/.rulesync/reference/plan-format.md and the plan at {abs_plan_path}.
-
-Implement remaining `[ ]` leaves in numeric order. Skip `[x]`. Start at the first open leaf.
-Write-allowlist = paths listed in this plan only. Do not add README/docs/examples unless listed in the plan. Missing path → blocker/`need:`; do not invent.
-After each leaf: flip that line to `[x]` in the plan file (only the box).
-When a phase's children are all `[x]`, mark the phase `[x]`.
-Frontmatter status: in-progress at start; done when all boxes `[x]`; blocked if you cannot finish.
-Do not expand scope, add steps, or start a review loop.
-If blocked: leave remaining `[ ]`, status: blocked, report reason + leftover ids.
-Run Verify leaves. Report abs paths you changed.
-```
-
-Wait. Spawn fail → `[implementer]: failed: {err}` stop.
-
-## Recap
-
-Recap from implementer output only. No parent Read/Grep/Bash.
-
-```
-[implementer]: serial={int} path=.tmp/grunt/plans/{file} status={status} done={x}/{total}
-files: {abs paths}
-{if leftover:}
-leftover:
-{up to 10 open leaf lines}
-{if blocked:} blocked: {reason}
-```
-
-## Rules
-
-- Skip `[x]`; only flip boxes; no renumber/rewrite leaf text.
-- No review-fix loop. Not bundled `/implement`. Implement leftover pick 1 (`Implement with verbal plan`) ≠ this skill (no `.tmp/grunt/plans`; no write-plan; no implement-plan). Bare `implement`/`implementer` → pick1 iff Implement-typed, not this skill; else recap “no implementer this remainder”.
-- Slash `/implement-plan {n}` = disk/file run. Empty `/implement-plan` = unique-resume / unique-start / else list. Implement leftover pick 2 may invoke this sequencing without user slash (after write-plan persist; `plan=/abs/...` only). Write leftover pick 2 does not spawn implementer this turn. Always-do leftover match; leftover `2` ≠ Skill-name. Verbal leftover ≠ implement-plan.
-- effective=auto + Implement-typed may chain this sequencing without user slash after write-plan persist (`plan=/abs/...`). Write-typed under auto: no implementer this turn; leftover wait.
-- No auto `/write-plan` chain. Escalation → tell user to `/write-plan` a follow-up.
-- Omit `model`. `subagent_type: implementer` only for this skill.
-- First prompt sentence: `You are implementer subagent.`
-- Child prompt = task + abs paths + verdicts only (no pasted transcripts).
-- Resume prompt = `You are implementer subagent.` + new verdicts only. Do not re-send the original task. Max 3 `resume_from` per child id; then report blocked/partial.
-- Tool-call first for spawn claims.
-- Do not re-plan. Partial = skill success (plan file is SoT).
-- `/pickup` stays handoffs only. Do not merge.
+On start: if this plan has no journal, Write one under `.tmp/grunt/implementations/` (`IMPL_NAME:`, `IMPL_PLAN: {n}`). Format: `.rulesync/reference/implementation-format.md`. After each leaf: append `N.M [x] …` to Log, update Files (repo-relative product paths) and Done. Blocked → `status: blocked` and Blockers. Verify done → `status: done`. Straight shots do not write a journal.

package/.agents/skills/listen/SKILL.md

@@ -0,0 +1,15 @@
+---
+name: listen
+description: >-
+  Speech-to-text via node scripts/listen.mjs (ffmpeg mic + local whisper.cpp,
+  OpenAI fallback). Input only.
+---
+# listen
+
+When the user wants to dictate, transcribe a recording, or toggle a mic, run `node scripts/listen.mjs`. Spec: `.rulesync/reference/listen.md`. Input only (audio → text). Do not speak. Do not use `/speak`.
+
+`whoami` · `devices` · `rec [--seconds N]` · `start` · `stop` · `toggle` · `status` · `file --path P` · `latest`. `--clip` copies the transcript. `--cwd DIR` when the process is not already in the repo (hotkeys). `rec` prints the transcript and `transcript=.tmp/grunt/listen/latest.txt`.
+
+STT: local `whisper-cli` first (mac: `brew install whisper-cpp`); first listen downloads the ggml model to `~/.grunt/whisper/`. Else `OPENAI_API_KEY`. Mic verbs need ffmpeg. Do not tell them to pip-install openai-whisper or curl the model by hand.
+
+If the CLI exits non-zero, print its message. Lines with `setup:` are for the user — show that command. Tell them to run `node scripts/setup.mjs listen` (or `grunt setup`) in their terminal. Do not dump JSON. Do not invent a key. Spec: `.rulesync/reference/listen.md` `.rulesync/reference/setup.md`.

package/.agents/skills/pickup/SKILL.md

@@ -1,16 +1,12 @@
 ---
 name: pickup
-description: >
-  Pick up/continue a session handoff under .tmp/grunt/handoffs/. Use for
-  /pickup, pick up, continue handoff, serial, drag-drop path,
-  newest/last/latest, title substring. Inverse of /handoff. Not a plan. Not
-  /handoff.
+description: Continue a handoff under .tmp/grunt/handoffs/.
 ---
 # pickup
 
 Voice: `.rulesync/reference/output.md`.
 
-Spawn-first pickup. Parent never Read/Bash/list the handoff. First token = spawn. No ask_user_question. Ask = recap list + stop; wait next user turn. Not a mode. Not `/handoff`. Inverse of `/handoff`. Pickup owns pickup.
+Load a handoff and continue in this session. Not a mode. Not `/handoff`. Inverse of `/handoff`.
 
 ## Invocation
 
@@ -22,7 +18,7 @@ Spawn-first pickup. Parent never Read/Bash/list the handoff. First token = spawn
 
 ## Resolve
 
-Via grunt (`job:exec|search` on `.tmp/grunt/handoffs/`). Skip grunt only if user arg is already abs path under that dir.
+Read `.tmp/grunt/handoffs/`. Use `node scripts/grunt-job.mjs --job search|exec` when the listing is fat.
 
 Order:
 
@@ -40,13 +36,13 @@ Empty/missing dir: recap no handoffs; stop.
 
 Drag outside handoffs dir or non-FILENAME_RE: reject; list valid.
 
-Corrupt FM: grunt reports; no implementer on garbage.
+Corrupt FM: recap; do not continue on garbage.
 
-status done + explicit serial/path: warn; still load if user named it.
+status done + explicit serial/path: warn; still load if the user named it.
 
 ## After unique path
 
-Spawn implementer with abs path (default). Child: load file; `status: resumed`; Next leaves in order; flip only that box; all `[x]` → `status: done`; do not re-plan; stale → `/write-plan`. Child Edit in place. Never persist-handoff.mjs on pickup. No parent Write on resume.
+Read the file. Set `status: resumed`. Work Next leaves in order; flip only that box; all `[x]` → `status: done`; do not re-plan; stale → `/write-plan`. Edit in place. Never persist-handoff.mjs on pickup.
 
 ## Recap
 
@@ -58,7 +54,5 @@ Do not invent a new role tag.
 
 ## Rules
 
-- Parent never Read/Bash/list. First token = spawn.
-- No ask_user_question. Ask = recap list + stop.
 - `/handoff` stays one-turn write. This skill owns pickup.
 - Protocol: `.rulesync/reference/cascade.md`. Do not paste.

package/.agents/skills/speak/SKILL.md

@@ -0,0 +1,13 @@
+---
+name: speak
+description: Text-to-speech via node scripts/speak.mjs (ElevenLabs or OpenAI). Output only.
+---
+# speak
+
+When the user wants spoken audio, run `node scripts/speak.mjs`. Spec: `.rulesync/reference/speak.md`. Output only (text → mp3). Do not record a mic. Do not transcribe.
+
+`whoami` · `voices` · `say --text T [--provider elevenlabs|openai] [--voice ID] [--out path] [--play]`.
+
+Auth: `ELEVENLABS_API_KEY` or `OPENAI_API_KEY` or `~/.grunt/speak.json`. Do not commit the key. Default voices: ElevenLabs George (`JBFqnCBsd6RMkjVDRZzb`), OpenAI `coral`.
+
+If the CLI exits non-zero, print its message. Lines with `setup:` are for the user — show that command. Tell them to run `node scripts/setup.mjs speak` (or `grunt setup`) in their terminal. Do not dump JSON. Do not invent a key. Spec: `.rulesync/reference/speak.md` `.rulesync/reference/setup.md`.

package/.agents/skills/tmp/SKILL.md

@@ -1,13 +1,10 @@
 ---
 name: tmp
-description: >
-  One-off convo artifact dump under .tmp/grunt/. Use for /tmp, dump a draft,
-  save a note/email/script from this session. Not a plan, not a handoff, not
-  product source.
+description: Dump a one-off convo artifact under .tmp/grunt/.
 ---
 # tmp
 
-One turn, in-parent. Parent authors from this session (email/script/note). **Do not spawn.** Write once. Recap path. Stop.
+One turn. Author from this session (email/script/note). Write once. Recap path. Stop.
 
 ## Invocation
 
@@ -17,13 +14,13 @@ Empty `$ARGUMENTS` + no already-visible dumpable blob → `need task`. Empty + v
 
 ## When
 
-Dump a one-off convo artifact. Not `/handoff` (no pickup no Goal/State/Next). Not `.tmp/grunt/plans/`. Not product source. Not OS `/tmp`.
+Dump a one-off convo artifact. Not `/handoff` (no pickup no Goal/State/Next). Not `.tmp/grunt/plans/`. Not `.tmp/grunt/implementations/`. Not product source. Not OS `/tmp`.
 
 ## Path
 
 `.tmp/grunt/{serial}-{slug}-{YYYYMMDDTHHMMSSZ}.{ext}`
 
-- serial: unpadded int ≥ 1, next after existing tmp dumps (own counter; not plan/handoff serials)
+- serial: unpadded int ≥ 1, next after existing tmp dumps (own counter; not plan/handoff/implementation serials)
 - slug: lower, non `[a-z0-9]` → `-`, collapse, trim 50
 - stamp: UTC `YYYYMMDDTHHMMSSZ`
 - ext: `TMP_EXT` or explicit `.{ext}` in args; else `md`
@@ -36,7 +33,7 @@ TMP_EXT: md
 <artifact only>
 ```
 
-`TMP_EXT` optional. Parent `write`s any root filename under `.tmp/grunt/` (not `plans|handoffs|browser|orchestrator-logs`). Grok `orchestrate-parent.js` runs `scripts/persist-tmp.mjs`: serial/slug/ext from `TMP_*`, strips those lines, no YAML frontmatter, rewrites path + content. Write outside that root or missing `TMP_NAME:` is denied.
+`TMP_EXT` optional. Write any root filename under `.tmp/grunt/` (not `plans|handoffs|implementations|browser|orchestrator-logs`). Grok `orchestrate-parent.js` runs `scripts/persist-tmp.mjs`: serial/slug/ext from `TMP_*`, strips those lines, no YAML frontmatter, rewrites path + content. Write outside that root or missing `TMP_NAME:` is denied.
 
 Host without that hook: name the file per **Path** yourself, or pipe the body to `node scripts/persist-tmp.mjs --workspace {repo}` and use its `path`.
 
@@ -52,7 +49,6 @@ Do not dump the body.
 
 ## Rules
 
-- No spawn. One write. `/tmp` is not a mode. Slash `/tmp` = no leftover. Write leftover pick 1 (`Write with verbal plan`) uses this persist sequencing; recap `[tmp]:`; no implementer. No pickup.
-- Never parent Read/Bash. Write `.tmp/grunt/` root files only.
+- One write. `/tmp` is not a mode.
 - Secrets/tokens: refuse dump. Text artifacts only; no binary.
 - Protocol: `.rulesync/reference/cascade.md`. Do not paste it here.