@lovrozagar/grunt 0.9.5 → 0.10.0

package/.agents/skills/jev/SKILL.md

@@ -0,0 +1,18 @@
+---
+name: jev
+description: >-
+  Yes/no or named-option decision on text already saved. Run node
+  scripts/jev.mjs --available first. On yes, one decision call. On no, decide
+  yourself and do not mention Jev.
+---
+# jev
+
+Use this when the source text is already saved and the leftover question is a yes/no or a choice among options the research already named. Spec: `.rulesync/reference/jev.md`.
+
+Run `node scripts/jev.mjs --available`. It prints `yes` or `no` and exits 0.
+
+`no`: answer the question yourself. Do not run a decision call. Do not mention Jev, a missing key, or setup.
+
+`yes`: read `.rulesync/reference/jev.md`. Write the passage and one questions file under `.tmp/grunt/jev/`. Run `node scripts/jev.mjs --state <state> --questions <questions>` once. Use the printed label and confidence. A low confidence is the result. Do not call again.
+
+Open research, code, and grunt-job stay with the session. If the decision call exits non-zero, answer from the sources. Do not invent a label.

package/.claude/skills/jev/SKILL.md

@@ -0,0 +1,18 @@
+---
+name: jev
+description: >-
+  Yes/no or named-option decision on text already saved. Run node
+  scripts/jev.mjs --available first. On yes, one decision call. On no, decide
+  yourself and do not mention Jev.
+---
+# jev
+
+Use this when the source text is already saved and the leftover question is a yes/no or a choice among options the research already named. Spec: `.rulesync/reference/jev.md`.
+
+Run `node scripts/jev.mjs --available`. It prints `yes` or `no` and exits 0.
+
+`no`: answer the question yourself. Do not run a decision call. Do not mention Jev, a missing key, or setup.
+
+`yes`: read `.rulesync/reference/jev.md`. Write the passage and one questions file under `.tmp/grunt/jev/`. Run `node scripts/jev.mjs --state <state> --questions <questions>` once. Use the printed label and confidence. A low confidence is the result. Do not call again.
+
+Open research, code, and grunt-job stay with the session. If the decision call exits non-zero, answer from the sources. Do not invent a label.

package/.grok/hooks/orchestrate-parent.js

@@ -22,6 +22,7 @@ import { persistImplementation, isFullImplementationBody, validateImplementation
 import { persistTmp } from "../../scripts/persist-tmp.mjs";
 import { parseNeed } from "../../scripts/parse-need.mjs";
 import { resolveJobCwd, runJob } from "../../scripts/grunt-job.mjs";
+import { otherLines, recordHook } from "../../scripts/board.mjs";
 
 export const ORCHESTRATOR_LOGS_DIR = ".tmp/grunt/orchestrator-logs";
 /** One-release dual-read; drop next release. */
@@ -329,7 +330,14 @@ function userPromptSubmit(data) {
   if (isHostStopBanner(prompt)) return 0;
   unlinkStamp(data, "stop-block");
   applySessionGateSlash(data, prompt);
-  const ctx = effectiveGruntContext(data);
+  let ctx = effectiveGruntContext(data);
+  try {
+    recordHook(data, process.env);
+    const others = otherLines(data, process.env);
+    if (others) ctx = ctx ? `${ctx}\n${others}` : others;
+  } catch {
+    // Board is best-effort. The session receipt still ships.
+  }
   if (!ctx) return 0;
   emit({
     hookSpecificOutput: {

package/.grok/skills/jev/SKILL.md

@@ -0,0 +1,18 @@
+---
+name: jev
+description: >-
+  Yes/no or named-option decision on text already saved. Run node
+  scripts/jev.mjs --available first. On yes, one decision call. On no, decide
+  yourself and do not mention Jev.
+---
+# jev
+
+Use this when the source text is already saved and the leftover question is a yes/no or a choice among options the research already named. Spec: `.rulesync/reference/jev.md`.
+
+Run `node scripts/jev.mjs --available`. It prints `yes` or `no` and exits 0.
+
+`no`: answer the question yourself. Do not run a decision call. Do not mention Jev, a missing key, or setup.
+
+`yes`: read `.rulesync/reference/jev.md`. Write the passage and one questions file under `.tmp/grunt/jev/`. Run `node scripts/jev.mjs --state <state> --questions <questions>` once. Use the printed label and confidence. A low confidence is the result. Do not call again.
+
+Open research, code, and grunt-job stay with the session. If the decision call exits non-zero, answer from the sources. Do not invent a label.

package/.rulesync/reference/INDEX.md

@@ -6,7 +6,7 @@ Protocol stays overview; domain fills this.
 
 ## Skills naming
 
-Reserved (do not reuse in consumer custom skills): `ask` `auto` `browser` `clasp` `commit` `commit-and-push` `commit-push` `commit-push-deploy` `commit-push-release` `explain` `google-workspace` `handoff` `implement-plan` `listen` `pickup` `speak` `su` `tmp` `write-plan`.
+Reserved (do not reuse in consumer custom skills): `ask` `auto` `browser` `clasp` `commit` `commit-and-push` `commit-push` `commit-push-deploy` `commit-push-release` `explain` `google-workspace` `handoff` `implement-plan` `jev` `listen` `pickup` `speak` `su` `tmp` `write-plan`.
 
 Override: same name → one SSOT path (`.rulesync/skills/<name>/`). Re-init / `grunt upgrade` force-refresh overwrites grunt-owned names; consumer extras kept. Maps `origin` badge ≠ content picker.
 
@@ -29,6 +29,7 @@ Upgrade copies the current package trees and product scripts, then deletes cumul
 | google-workspace | local | Google Sheets, Docs, Slides, Calendar, Gmail via node scripts/google-workspace.mjs. |  |  |  |
 | handoff | local | Write a session handoff under .tmp/grunt/handoffs/. Continue with /pickup. |  |  |  |
 | implement-plan | local | Execute remaining leaves in a .tmp/grunt/plans checklist. Skip [x]. |  |  |  |
+| jev | local | Yes/no or named-option decision on text already saved. Run node scripts/jev.mjs --available first. On yes, one decision… |  |  |  |
 | listen | local | Speech-to-text via node scripts/listen.mjs (ffmpeg mic + local whisper.cpp, OpenAI fallback). Input only. |  |  |  |
 | pickup | local | Continue a handoff under .tmp/grunt/handoffs/. |  |  |  |
 | speak | local | Text-to-speech via node scripts/speak.mjs (ElevenLabs or OpenAI). Output only. |  |  |  |
@@ -46,6 +47,7 @@ Upgrade copies the current package trees and product scripts, then deletes cumul
 | .rulesync/reference/google-workspace.md | google-workspace | google-workspace | Create and edit Google Sheets, Docs, Slides, Calendar events, and Gmail from the session. |
 | .rulesync/reference/hooks.md | Hooks | hooks | SessionStart carries only the folder map: Claude / Codex run `../../scripts/session-map.mjs`, which injects the code-on… |
 | .rulesync/reference/implementation-format.md | Implementation format (SSOT) |  | Local session journal for `/implement-plan`. Not a plan, handoff, or git commit. |
+| .rulesync/reference/jev.md | Jev | jev | Closed external decision. The source text is already saved. The question is a yes/no or a named choice. One call. Not o… |
 | .rulesync/reference/law.md | Law |  | Protocol stays overview; domain fills this. |
 | .rulesync/reference/listen.md | Listen | listen | Speech-to-text from the session. Input only. Not TTS. Not a live voice agent. Not MCP. |
 | .rulesync/reference/map.md | Map | map | Cheap outline. Not a file dump. |

package/.rulesync/reference/hooks.md

@@ -6,7 +6,7 @@ tags: [hooks]
 
 SessionStart carries only the folder map: Claude / Codex run `../../scripts/session-map.mjs`, which injects the code-only map from `../../scripts/folder-map.mjs` as `additionalContext` (capped under Claude Code's 10,000-char per-hook `additionalContext` limit, about 2.4k tokens, below the 5k `grunt map` budget; cache-stable, fail-open) and logs `{rows, tokens}` to `.tmp/grunt/sessions/<sid>/map.json`. Inject nothing else at SessionStart. Antigravity has no rulesync sessionStart. Do not register a SessionStart hook on `../../.grok/hooks/orchestrate-parent.json`.
 
-Grok PostToolUse / SessionStart are observe-only — do not attempt output scrub; compress via RTK / spawn / isolation facts only. Do not add PostToolUse scrub hooks. Grok UserPromptSubmit may emit a one-line `sessionGate=auto|ask` plus session receipt (`hookSpecificOutput.additionalContext`). Skip host Stop banners. `/ask` exact-match slash stamps `session-gate-{sid}` to `ask`. `/auto` unlinks. Sid-less: no stamp. Default: `auto`.
+Grok PostToolUse / SessionStart are observe-only — do not attempt output scrub; compress via RTK / spawn / isolation facts only. Do not add PostToolUse scrub hooks. UserPromptSubmit may emit a one-line `sessionGate=auto|ask` plus session receipt, then up to 8 other live lines from `~/.grunt/board/` (`hookSpecificOutput.additionalContext`). The current session's own line is omitted. Skip host Stop banners. `/ask` exact-match slash stamps `session-gate-{sid}` to `ask`. `/auto` unlinks. Sid-less: no stamp. Default: `auto`.
 
 In `sessionGate=ask`, parent Stop on `end_turn` blocks unless the recap asks (`?`) or is exactly `[orchestrator]: wait grunt`. Reason: `ask after this step`. Cap 3. `sessionGate=auto` does not Stop-block.
 

package/.rulesync/reference/jev.md

@@ -0,0 +1,56 @@
+---
+tags: [jev]
+---
+
+# Jev
+
+Closed external decision. The source text is already saved. The question is a yes/no or a named choice. One call. Not open research. Not code. Not grunt-job.
+
+## Availability
+
+```
+node scripts/jev.mjs --available
+```
+
+Prints `yes` or `no` and exits 0. No request. No setup line.
+
+`no`: the session answers the question itself. Do not run the decision command. Do not mention Jev, a missing key, or setup.
+
+`yes`: continue below.
+
+A key is `TYPESAFE_API_KEY` or `apiKey` in `~/.grunt/jev.json` (mode 0600). Env wins. Setup, when a person asks for it: `node scripts/setup.mjs jev`. Spec: `.rulesync/reference/setup.md`.
+
+## Decision
+
+Write `.tmp/grunt/jev/<slug>-state.txt` (plain text or a JSON object) and `.tmp/grunt/jev/<slug>-questions.json` (the System One questions map). Put every label for that study in the one map. At most 8 questions. State at most 64000 characters.
+
+```
+node scripts/jev.mjs --state .tmp/grunt/jev/<slug>-state.txt --questions .tmp/grunt/jev/<slug>-questions.json
+```
+
+Yes/no:
+
+```json
+{ "keep": { "type": "noul", "instructions": "Does this passage promise zero retention on the default plan?" } }
+```
+
+Named choice:
+
+```json
+{
+  "endpoint": {
+    "type": "choice",
+    "instructions": "Which endpoint should the app call?",
+    "criteria": {
+      "typesafe": "Vendor host, path, and key",
+      "other": "A different host, path, or key"
+    }
+  }
+}
+```
+
+Model is `jev-1.13.0`. Stdout is at most 8 lines: model, input tokens, then one label line. Exit 0. Use that label and confidence. A low confidence is the result. Do not rephrase and call again.
+
+One request per process. UTC-day ledger `~/.grunt/jev-usage.json` stops at 40 requests or 1000000 input tokens. A 429 or 529 retries once only when `Retry-After` is at most 2 seconds.
+
+Exit 2 means the decision call did not return a label. Answer from the sources. Do not invent a label. Do not print the key or the state.

package/.rulesync/reference/law.md

@@ -4,7 +4,7 @@ Protocol stays overview; domain fills this.
 
 ## Skills naming
 
-Reserved (do not reuse in consumer custom skills): `ask` `auto` `browser` `clasp` `commit` `commit-and-push` `commit-push` `commit-push-deploy` `commit-push-release` `explain` `google-workspace` `handoff` `implement-plan` `listen` `pickup` `speak` `su` `tmp` `write-plan`.
+Reserved (do not reuse in consumer custom skills): `ask` `auto` `browser` `clasp` `commit` `commit-and-push` `commit-push` `commit-push-deploy` `commit-push-release` `explain` `google-workspace` `handoff` `implement-plan` `jev` `listen` `pickup` `speak` `su` `tmp` `write-plan`.
 
 Override: same name → one SSOT path (`.rulesync/skills/<name>/`). Re-init / `grunt upgrade` force-refresh overwrites grunt-owned names; consumer extras kept. Maps `origin` badge ≠ content picker.
 

package/.rulesync/reference/refs-map.md

@@ -10,6 +10,7 @@
 | .rulesync/reference/google-workspace.md | google-workspace | google-workspace | Create and edit Google Sheets, Docs, Slides, Calendar events, and Gmail from the session. |
 | .rulesync/reference/hooks.md | Hooks | hooks | SessionStart carries only the folder map: Claude / Codex run `../../scripts/session-map.mjs`, which injects the code-on… |
 | .rulesync/reference/implementation-format.md | Implementation format (SSOT) |  | Local session journal for `/implement-plan`. Not a plan, handoff, or git commit. |
+| .rulesync/reference/jev.md | Jev | jev | Closed external decision. The source text is already saved. The question is a yes/no or a named choice. One call. Not o… |
 | .rulesync/reference/law.md | Law |  | Protocol stays overview; domain fills this. |
 | .rulesync/reference/listen.md | Listen | listen | Speech-to-text from the session. Input only. Not TTS. Not a live voice agent. Not MCP. |
 | .rulesync/reference/map.md | Map | map | Cheap outline. Not a file dump. |

package/.rulesync/reference/setup.md

@@ -13,9 +13,10 @@ node scripts/setup.mjs speak
 node scripts/setup.mjs listen
 node scripts/setup.mjs google-workspace
 node scripts/setup.mjs browser
+node scripts/setup.mjs jev
 ```
 
-TTY: menu with ok/missing. Already ok asks redo (`--redo` skips the ask). Missing bins: print the OS command (never run it), then re-check PATH. Ends with a four-line status. Non-TTY needs flags (keys / `--creds`). Doctor never installs bins; setup never installs bins either.
+TTY: menu with ok/missing. The menu lists enabled packs and always lists browser and jev. A pack is enabled when `.rulesync/grunt.features.jsonc` names it. `node scripts/setup.mjs <pack>` when that pack is off prints how to enable it (`grunt init` or `grunt upgrade`) and exits 1. Already ok asks redo (`--redo` skips the ask). Missing bins: print the OS command (never run it), then re-check PATH. Ends with one status line per listed target. Non-TTY needs flags (keys / `--creds`). Doctor never installs bins; setup never installs bins either.
 
 | target | what it writes | flags |
 | --- | --- | --- |
@@ -23,5 +24,6 @@ TTY: menu with ok/missing. Already ok asks redo (`--redo` skips the ask). Missin
 | listen | same file (`openai` / `listen`) plus `~/.grunt/whisper/` | `--openai-key` `--device` `--skip-download` |
 | google-workspace | Desktop OAuth JSON + tokens under `~/.grunt/` | `--creds PATH` `--account NAME` `--project ID` |
 | browser | nothing (print Lightpanda / Chromium hints; both required except win32 Chromium-only) | |
+| jev | `~/.grunt/jev.json` (`apiKey`, mode 0600). `TYPESAFE_API_KEY` wins when set | `--api-key` |
 
 Do not invent keys. If the session is not a TTY, tell the user to run `grunt setup` in their terminal. This spec is enough. Do not read https://github.com/lovrozagar/grunt#readme unless this file is missing.

package/.rulesync/reference/skills-map.md

@@ -17,6 +17,7 @@
 | google-workspace | local | Google Sheets, Docs, Slides, Calendar, Gmail via node scripts/google-workspace.mjs. |  |  |  |
 | handoff | local | Write a session handoff under .tmp/grunt/handoffs/. Continue with /pickup. |  |  |  |
 | implement-plan | local | Execute remaining leaves in a .tmp/grunt/plans checklist. Skip [x]. |  |  |  |
+| jev | local | Yes/no or named-option decision on text already saved. Run node scripts/jev.mjs --available first. On yes, one decision… |  |  |  |
 | listen | local | Speech-to-text via node scripts/listen.mjs (ffmpeg mic + local whisper.cpp, OpenAI fallback). Input only. |  |  |  |
 | pickup | local | Continue a handoff under .tmp/grunt/handoffs/. |  |  |  |
 | speak | local | Text-to-speech via node scripts/speak.mjs (ElevenLabs or OpenAI). Output only. |  |  |  |

package/.rulesync/skills/jev/SKILL.md

@@ -0,0 +1,15 @@
+---
+name: jev
+description: "Yes/no or named-option decision on text already saved. Run node scripts/jev.mjs --available first. On yes, one decision call. On no, decide yourself and do not mention Jev."
+---
+# jev
+
+Use this when the source text is already saved and the leftover question is a yes/no or a choice among options the research already named. Spec: `.rulesync/reference/jev.md`.
+
+Run `node scripts/jev.mjs --available`. It prints `yes` or `no` and exits 0.
+
+`no`: answer the question yourself. Do not run a decision call. Do not mention Jev, a missing key, or setup.
+
+`yes`: read `.rulesync/reference/jev.md`. Write the passage and one questions file under `.tmp/grunt/jev/`. Run `node scripts/jev.mjs --state <state> --questions <questions>` once. Use the printed label and confidence. A low confidence is the result. Do not call again.
+
+Open research, code, and grunt-job stay with the session. If the decision call exits non-zero, answer from the sources. Do not invent a label.

package/CHANGELOG.md

@@ -7,6 +7,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- `scripts/jev.mjs`: one TypeSafe System One call for an external research decision, with a per-process and UTC-day cap. Key via `node scripts/setup.mjs jev` (`~/.grunt/jev.json`) or `TYPESAFE_API_KEY`. Doctor reports present or absent. `--available` prints `yes` or `no` and exits 0
+- `/jev` skill: a yes/no or named-option decision uses Jev only when `--available` prints `yes`. A missing key is answered by the session, with no setup error
+- Live agent board at `~/.grunt/board/`: one line per running agent (time, provider, model, effort, session, directory, work). A read drops a dead process. SessionStart `additionalContext` stays the folder map. UserPromptSubmit can append up to 8 other live lines.
+- `google-workspace`, `listen`, `speak`, and `clasp` are opt-in. Init and upgrade ask with a multiselect that starts clear. `--packs` selects them without a TTY (`none` selects nothing). A repo with no `.rulesync/grunt.features.jsonc` drops those copies on the next init or upgrade. The npm package still ships them. Browser stays installed. Setup lists enabled packs and always lists browser and jev. Doctor always reports jev, and reports the other four only when that pack is enabled.
+
 ### Fixed
 
 - `grunt upgrade` keeps extra `##` sections in shared reference docs such as `law.md`, so consumer INDEX content survives the copy

package/README.md

@@ -64,6 +64,7 @@ Exit 1 if any required missing; 0 if all required ok. Optional tools are reporte
 | ffmpeg | no | mic capture for `/listen` · mac `brew install ffmpeg` · linux `sudo apt install ffmpeg` · win `winget install Gyan.FFmpeg` |
 | whisper-cli | no | local STT for `/listen` · mac `brew install whisper-cpp` · first listen downloads `ggml-base.en.bin` · setup in `.rulesync/reference/listen.md` |
 | listen | no | `node scripts/listen.mjs` · STT input · `grunt setup` / `node scripts/setup.mjs listen` · local whisper.cpp then OpenAI Whisper |
+| jev | no | `node scripts/jev.mjs --state FILE --questions FILE` · one closed external research decision · `grunt setup` / `node scripts/setup.mjs jev` · `TYPESAFE_API_KEY` or `~/.grunt/jev.json` · local cap, one request per process |
 
 Rulesync schema doctor is separate: `grunt:rulesync:doctor` (or SoT `rulesync:doctor`).
 
@@ -83,7 +84,7 @@ Rulesync schema doctor is separate: `grunt:rulesync:doctor` (or SoT `rulesync:do
 - `sync-globals` → run `grunt:sync:globals` (dry-run); `--apply` → `grunt:sync:globals:apply`
 - `purge-mcps` → run `grunt:purge:global-mcps` (dry-run); `--apply` → `grunt:purge:global-mcps:apply`
 - `doctor` → run `grunt:doctor` (`grunt doctor` / `node scripts/doctor.mjs` stay). Rulesync schema: `grunt:rulesync:doctor`
-- `setup` → run `grunt:setup` (`node scripts/setup.mjs`) — handheld speak / listen / google-workspace / browser. TTY walks each; flags for non-TTY keys/`--creds`
+- `setup` → run `grunt:setup` (`node scripts/setup.mjs`). The menu lists enabled packs and always lists browser and jev. Flags for non-TTY keys/`--creds`
 - `upgrade` → install the latest grunt as a devDependency and re-run with it, then the same merge as init for an already-inited repo: copy owned trees/scripts, prune retired grunt-owned names, print reserved skill names
 - `map [dir]` → code-only folder map (`scripts/folder-map.mjs`); no package manager needed. See [Folder map](#folder-map)
 - `help`
@@ -97,6 +98,7 @@ Rulesync schema doctor is separate: `grunt:rulesync:doctor` (or SoT `rulesync:do
 - `--apply` — write for `sync-globals` / `purge-mcps`
 - `--host <id>` — `sync-globals --host <id>`
 - `--pm <name>` — `npm` | `yarn` | `pnpm` | `bun`
+- `--packs <list>` — `google-workspace`, `listen`, `speak`, `clasp`, comma-separated, or `none`
 
 ## Init
 
@@ -110,6 +112,7 @@ Rulesync schema doctor is separate: `grunt:rulesync:doctor` (or SoT `rulesync:do
 - First init (no sentinel) applies globals unless flagged
 - Owned trees/scripts refresh; extra `.rulesync` files kept; patches to grunt-owned files lost
 - `cp` cannot delete dest extras. Init/upgrade then prune: retired skills `parent` `solo` `cascade`, agents `implementer` `thinker` (plus `.grok/roles/{implementer,thinker}.toml` and `.gemini/agents/{name}/`), scripts `telemetry.mjs` `grunt-config.mjs`, paths `.grok/parent.md` `.grok/skills/shared` `.rulesync/grunt.config.jsonc` plus local overlay and example, and reserved skill dirs this package no longer ships. Consumer extras stay.
+- Optional packs `google-workspace`, `listen`, `speak`, and `clasp` start off. A TTY init or upgrade asks with a multiselect that starts clear. A saved `.rulesync/grunt.features.jsonc` is pre-checked. `--packs` answers without a TTY (`none` selects nothing). No features file means those four are not copied, and the next init or upgrade removes copies an older grunt installed. The npm package still contains them. Browser and the other core skills stay. The four names stay reserved. The features file is written only after an answer.
 - Breaking: consumer scripts are `grunt:<SoT-key>` (`grunt:rulesync:generate`, `grunt:doctor`). Re-init migrates `package.json` (owned unprefixed keys + suffixes; `npm|yarn|pnpm|bun run` refs in other dest scripts). CI/husky/`run rulesync:*` / `run doctor` must switch. No aliases. SoT repo scripts stay unprefixed (`rulesync:generate`).
 
 ## Version bump
@@ -125,7 +128,7 @@ bunx grunt upgrade
 
 `upgrade` checks the registry (`npm_config_registry`, else npmjs) for the latest `@lovrozagar/grunt`. When it is newer than the running copy, `upgrade` adds it as a devDependency with the detected package manager (`-w` at a pnpm workspace root), then re-runs the same command with the installed bin so the merge uses the new package. Offline or a failed check prints one warning and upgrades with the running version. `--no-self-update` skips the check. The grunt repo itself and local builds newer than the registry never self-update.
 
-`upgrade` is init plus a reserved-names print. Same merge, prune, and globals-skip rules as Init. New skills/scripts appear because they are in the package copy list. Dropped grunt-owned files disappear only if they are on the retired lists (or a reserved skill this package no longer ships). Do not expect a blind dest-dir mirror-delete; that would wipe consumer extras.
+`upgrade` is init plus a reserved-names print. Same merge, prune, and globals-skip rules as Init. New skills/scripts appear because they are in the package copy list. Optional packs are the exception: they are copied only when selected, and removed when they are not. Dropped grunt-owned files disappear only if they are on the retired lists, are an unselected optional pack, or are a reserved skill this package no longer ships. Do not expect a blind dest-dir mirror-delete; that would wipe consumer extras.
 
 ## Agents
 
@@ -148,7 +151,9 @@ Lightpanda-first session CLI: `node scripts/browser.mjs`. Zero MCP. Zero env kno
 
 Present under `.claude` / `.rulesync` / `.agents` / `.grok` (`rulesync -f skills` mirrors SSOT):
 
-- `ask` `auto` `browser` `clasp` `commit` `commit-and-push` (1-release alias → `commit-push`) `commit-push` `commit-push-deploy` `commit-push-release` `explain` `google-workspace` `handoff` `implement-plan` `listen` `pickup` `speak` `su` `tmp` `write-plan`
+- `ask` `auto` `browser` `clasp` `commit` `commit-and-push` (1-release alias → `commit-push`) `commit-push` `commit-push-deploy` `commit-push-release` `explain` `google-workspace` `handoff` `implement-plan` `jev` `listen` `pickup` `speak` `su` `tmp` `write-plan`
+
+`google-workspace`, `listen`, `speak`, and `clasp` are copied into a consumer only when that pack is selected. The names stay reserved.
 
 `/auto` (default) keeps going and asks on blockers. `/ask` finishes one step, recaps, then asks. `/auto` returns the session to auto.
 
@@ -182,7 +187,7 @@ Emit writes other-CLI trees from `.rulesync` for the **next** process of that CL
 
 ### Folder map
 
-Claude and Codex get a folder map at SessionStart (`scripts/session-map.mjs`), so agents skip `ls`/`find` loops. Agents run `node scripts/folder-map.mjs <dir>` (same as `grunt map <dir>`) for depth. Grok and Antigravity get the `AGENTS.md` line only. The injected map stays under Claude Code's 10,000-character per-hook `additionalContext` limit (about 2.4k tokens); past it, Claude keeps only a 2KB preview inline. `grunt map` itself uses the full `budget`.
+Claude and Codex get a folder map at SessionStart (`scripts/session-map.mjs`), so agents skip `ls`/`find` loops. Agents run `node scripts/folder-map.mjs <dir>` (same as `grunt map <dir>`) for depth. Grok and Antigravity get the `AGENTS.md` line only. The injected map stays under Claude Code's 10,000-character per-hook `additionalContext` limit (about 2.4k tokens); past it, Claude keeps only a 2KB preview inline. `grunt map` itself uses the full `budget`. SessionStart `additionalContext` stays that map.
 
 - Folders only, never files. Source: `git ls-files --cached --others --exclude-standard`, so gitignored paths never show
 - A folder shows when it or a descendant holds a code file (`codeExt`) and no path segment is a dot dir or in `skip`
@@ -203,11 +208,17 @@ Optional `.rulesync/grunt.map.jsonc` (missing or invalid → defaults):
 | `include` | `[]` | globs always shown (`*` one segment, `**` any) |
 | `exclude` | `[]` | globs never shown |
 
+### Agent board
+
+One live line per running agent, stored in `~/.grunt/board/` (one file per session, this machine). The line is time, provider, model, effort, session id, directory, and current work. A missing model or effort is `-`. A read deletes a line whose process is gone, so quit, crash, and OOM drop off at the next read.
+
+Claude and Codex write the row at SessionStart. `additionalContext` stays the folder map. Every UserPromptSubmit refreshes the row and may append up to 8 other live lines. Grok writes on the prompt. Antigravity runs `node scripts/board.mjs set --work` when the work changes and `node scripts/board.mjs` to read.
+
 ### Secrets (machine)
 
 Not git. Not `sync-globals`.
 
-First-hand: `grunt setup` (TTY). Per target: `node scripts/setup.mjs speak|listen|google-workspace|browser`. Spec: `.rulesync/reference/setup.md`.
+First-hand: `grunt setup` (TTY). The menu lists enabled packs and always lists browser and jev. Per target: `node scripts/setup.mjs speak|listen|google-workspace|browser`. Spec: `.rulesync/reference/setup.md`.
 
 | | where |
 | --- | --- |
@@ -216,7 +227,7 @@ First-hand: `grunt setup` (TTY). Per target: `node scripts/setup.mjs speak|liste
 | Listen extras | `WHISPER_MODEL` `LISTEN_DEVICE` `LISTEN_STT` `SPEAK_PROVIDER` — optional |
 | Google Workspace | OAuth under `~/.grunt/` |
 
-`~/.grunt/speak.json` chmod 600. Env wins over that file. Copy the file or export env on another machine. Doctor reports optional google-workspace / speak / ffmpeg / whisper-cli.
+`~/.grunt/speak.json` chmod 600. Env wins over that file. Copy the file or export env on another machine. Doctor always reports gh and jev. It reports google-workspace, speak, ffmpeg, and whisper-cli when that pack is enabled.
 
 `sync-globals` is host CLI globals (MCP and friends), not API keys.
 
@@ -332,6 +343,7 @@ The session agent runs `node scripts/grunt-job.mjs --job search|exec|slice|fetch
 | `scrub-spawn-prompt` / `parse-need` / `grunt-job` | yes | **local** | Hooks and scripts. Isolation facts are grunt-job output, not a model hop. |
 | emit / generate / init | yes (this repo / install) | **local** | Writes other-CLI configs. Not a runtime line to those CLIs. |
 | WebSearch / web_fetch | tool from host | **remote-not-LLM** | Network search/fetch. Not a second Model API box. Snippet/cite/"what is X"/world fact: grunt `job: web`. Live URL/DOM: grunt browser rail, not this box. |
+| `jev` | yes | **remote-not-LLM** | `node scripts/jev.mjs --state FILE --questions FILE`. One System One decision about external source text. Not the host Model API. Not grunt-job. |
 | MCP | policy deny | n/a | Denied by policy in-tree. Do not draw as a main path. |
 | Model API | **no** (one box outside) | AI-server | This host’s vendor SDK only. Parent and child **turns** complete here. Spawn omits model; frontmatter on `.rulesync/subagents/*.md` picks the model. |
 | Other CLIs | no (not this process) | emit/config only | Same protocol files emitted elsewhere. No hop, no shared peek. |
@@ -384,7 +396,7 @@ Repo-relative (repository root):
 
 ## Layout
 
-Published (`package.json` `files`): `bin/grunt.js` `cli` `scripts/check-globals.mjs` `scripts/emit-agent-shell-tools.mjs` `scripts/emit-gemini.mjs` `scripts/emit-maps.mjs` `scripts/guarded-md.mjs` `scripts/guarded-roots.mjs` `scripts/emit-mcp-policy.mjs` `scripts/gate-fat-tools.mjs` `scripts/hooks-union.mjs` `scripts/pipeline.mjs` `scripts/grunt-job.mjs` `scripts/parse-need.mjs` `scripts/persist-handoff.mjs` `scripts/persist-implementation.mjs` `scripts/persist-tmp.mjs` `scripts/persist-plan.mjs` `scripts/purge-global-mcps.mjs` `scripts/scrub-spawn-prompt.mjs` `scripts/scrub-text-lib.mjs` `scripts/sync-global-settings.mjs` `scripts/browser.mjs` `scripts/speak.mjs` `scripts/listen.mjs` `scripts/google-workspace.mjs` `scripts/interactive.mjs` `scripts/prompt.mjs` `scripts/setup.mjs` `scripts/doctor.mjs` `scripts/skill-conflicts.mjs` `scripts/scrub-text` `.rulesync` `.grok` `.codex` `.claude` `.agents` `AGENTS.md` `CLAUDE.md` `.mcp.json` `README.md` `LICENSE` `CHANGELOG.md`
+Published (`package.json` `files`): `bin/grunt.js` `cli` `scripts/check-globals.mjs` `scripts/emit-agent-shell-tools.mjs` `scripts/emit-gemini.mjs` `scripts/emit-maps.mjs` `scripts/guarded-md.mjs` `scripts/guarded-roots.mjs` `scripts/emit-mcp-policy.mjs` `scripts/gate-fat-tools.mjs` `scripts/hooks-union.mjs` `scripts/pipeline.mjs` `scripts/grunt-job.mjs` `scripts/parse-need.mjs` `scripts/persist-handoff.mjs` `scripts/persist-implementation.mjs` `scripts/persist-tmp.mjs` `scripts/persist-plan.mjs` `scripts/purge-global-mcps.mjs` `scripts/scrub-spawn-prompt.mjs` `scripts/scrub-text-lib.mjs` `scripts/sync-global-settings.mjs` `scripts/board.mjs` `scripts/browser.mjs` `scripts/feature-packs.mjs` `scripts/speak.mjs` `scripts/listen.mjs` `scripts/jev.mjs` `scripts/google-workspace.mjs` `scripts/interactive.mjs` `scripts/prompt.mjs` `scripts/setup.mjs` `scripts/doctor.mjs` `scripts/skill-conflicts.mjs` `scripts/scrub-text` `.rulesync` `.grok` `.codex` `.claude` `.agents` `AGENTS.md` `CLAUDE.md` `.mcp.json` `README.md` `LICENSE` `CHANGELOG.md`
 
 No `scripts/*.test.ts` `scripts/fixtures/` `docs/` `coverage/` `vitest.config.ts` in `files`. `cli` dir ships whole (includes `cli/*.test.ts`).
 

package/cli/grunt.mjs

@@ -3,7 +3,7 @@ import { readFileSync } from "node:fs"
 import path from "node:path"
 import { fileURLToPath } from "node:url"
 import { destAlreadyInited, init, RESERVED_SKILLS, toGruntScriptName } from "./init.mjs"
-import { confirm, isInteractive, select, spinner } from "./prompt.mjs"
+import { confirm, isInteractive, multiselect, select, spinner } from "./prompt.mjs"
 import { selfUpdate } from "./self-update.mjs"
 import {
   PACKAGE_MANAGER_ASK,
@@ -14,6 +14,7 @@ import {
   runScriptArgs,
 } from "../scripts/package-manager.mjs"
 import { mapCommand } from "../scripts/folder-map.mjs"
+import { PACK_OPTIONS, parsePacksFlag, selectedPacks } from "../scripts/feature-packs.mjs"
 
 const PKG_ROOT = path.join(path.dirname(fileURLToPath(import.meta.url)), "..")
 
@@ -28,7 +29,7 @@ Commands:
   sync-globals  run grunt:sync:globals (dry-run; --apply to write)
   purge-mcps    run grunt:purge:global-mcps (dry-run; --apply to write)
   doctor        run grunt:doctor
-  setup         run grunt:setup — handheld keys/OAuth (speak, listen, google-workspace, browser)
+  setup         run grunt:setup — handheld keys/OAuth (speak, listen, google-workspace, browser, jev)
   upgrade       Self-update to the latest grunt, then re-init: copy owned files, prune retired names, print reserved skills
   map [dir]     Code-only folder map (git-tracked, no files); dir for depth
   help          Show this help
@@ -42,6 +43,7 @@ Flags:
   --apply            Write for sync-globals / purge-mcps
   --host <id>        sync-globals host
   --pm <name>        npm | yarn | pnpm | bun (else lockfile, then how grunt was launched, then ask)
+  --packs <list>     Optional packs: google-workspace,listen,speak,clasp or none
 `
 
 const MENU_OPTIONS = [
@@ -94,6 +96,8 @@ export function parseArgv(argv) {
   let hostError = false
   let pm
   let pmError = false
+  let packs
+  let packsError = false
   const positionals = []
   for (let i = 0; i < argv.length; i++) {
     const a = argv[i]
@@ -141,6 +145,28 @@ export function parseArgv(argv) {
       else pm = pm.toLowerCase()
       continue
     }
+    if (a === "--packs") {
+      const v = argv[i + 1]
+      if (v == null || String(v).startsWith("--")) {
+        packsError = true
+        continue
+      }
+      try {
+        packs = parsePacksFlag(v)
+      } catch {
+        packsError = true
+      }
+      i += 1
+      continue
+    }
+    if (typeof a === "string" && a.startsWith("--packs=")) {
+      try {
+        packs = parsePacksFlag(a.slice("--packs=".length))
+      } catch {
+        packsError = true
+      }
+      continue
+    }
     positionals.push(a)
   }
   return {
@@ -153,6 +179,8 @@ export function parseArgv(argv) {
     hostError,
     pm,
     pmError,
+    packs,
+    packsError,
   }
 }
 
@@ -184,9 +212,29 @@ export async function resolveCliPackageManager({ cwd, env, override, interactive
   return null
 }
 
-async function runInit(cwd, { skipGlobals, interactive, packageManager }) {
+async function askPacks(cwd) {
+  return await multiselect({
+    message: "Optional packs",
+    options: PACK_OPTIONS,
+    initialValues: selectedPacks(cwd),
+    required: false,
+  })
+}
+
+function initOpts(base, packs) {
+  if (packs === undefined) return base
+  return { ...base, packs }
+}
+
+async function runInit(cwd, { skipGlobals, interactive, packageManager, packs, packsOnly = false }) {
+  let selected = packs
+  if (packsOnly) {
+    if (selected === undefined && interactive) selected = await askPacks(cwd)
+    init(cwd, initOpts({ skipGlobals, packageManager }, selected))
+    return
+  }
   if (!interactive) {
-    init(cwd, { skipGlobals, packageManager })
+    init(cwd, initOpts({ skipGlobals, packageManager }, selected))
     return
   }
   if (destAlreadyInited(cwd)) {
@@ -196,16 +244,17 @@ async function runInit(cwd, { skipGlobals, interactive, packageManager }) {
     })
     if (!again) return
   }
+  if (selected === undefined) selected = await askPacks(cwd)
   const applyGlobals = await confirm({
     message: APPLY_GLOBALS_CONFIRM,
     initialValue: !skipGlobals,
   })
-  init(cwd, {
+  init(cwd, initOpts({
     skipGlobals: !applyGlobals,
     applyGlobals,
     onPhase: bindSpinner(),
     packageManager,
-  })
+  }, selected))
 }
 
 async function dispatch(cmd, flags, interactive, pm) {
@@ -222,6 +271,7 @@ async function dispatch(cmd, flags, interactive, pm) {
       skipGlobals: flags.skipGlobals,
       interactive: interactive && (!cmd || cmd === "init"),
       packageManager: pm,
+      packs: flags.packs,
     })
     return
   }
@@ -270,8 +320,10 @@ async function dispatch(cmd, flags, interactive, pm) {
     }
     await runInit(process.cwd(), {
       skipGlobals: flags.skipGlobals,
-      interactive: false,
+      interactive,
+      packsOnly: true,
       packageManager: pm,
+      packs: flags.packs,
     })
     process.stdout.write(`reserved: ${RESERVED_SKILLS.join(" ")}\n`)
     return
@@ -286,7 +338,7 @@ function commandNeedsPackageManager(cmd) {
 
 export async function start() {
   const flags = parseArgv(process.argv.slice(2))
-  if (flags.hostError || flags.pmError) {
+  if (flags.hostError || flags.pmError || flags.packsError) {
     process.stdout.write(USAGE)
     process.exitCode = 1
     return