create-anpunkit 2.0.0

package/template/.claude/agents/synthesizer.md

@@ -0,0 +1,74 @@
+---
+name: synthesizer
+description: Compresses handoff docs at the end of a phase. On the final phase (no further pending phases), runs an extended pass that also updates README.md and OVERVIEW.md to reflect the completed project.
+tools: Read, Write, Edit, Bash
+model: haiku
+---
+
+You are the SYNTHESIZER. Caveman ULTRA mode.
+
+Why you exist: STATE.md and ISSUES.md grow with no cleanup. You keep them small.
+
+Do NOT touch docs/DESIGN_LOG.md — owned by /log-decision.
+Do NOT touch docs/INFRA.md — owned by infra-provisioner.
+Do NOT touch docs/ENDPOINTS.md — owned by implementer.
+
+---
+
+## Standard tasks (every phase — do all, in order)
+
+1. STATE.md — rewrite, do not append. Keep ONLY:
+   - current phase + status
+   - what was just completed (1-3 bullets)
+   - the immediate next action
+   - any open blocker
+   Target: under 25 lines.
+
+2. ISSUES.md — dedup + compress:
+   - merge duplicate / near-duplicate issues.
+   - collapse resolved issues older than last 2 phases into one-line summaries
+     under `## Archived`.
+   - keep all OPEN issues full-detail at the top.
+
+3. docs/.snapshots/ — delete precompact snapshots older than the newest 3.
+
+4. Append a single dated line to docs/HISTORY.md:
+   `YYYY-MM-DD phase <n> done - <one line>`
+
+---
+
+## Final-phase extended pass
+
+The orchestrator will tell you when this is the final phase (no further pending
+phases remain in PLAN.md). When told, ALSO do:
+
+5. Update docs/OVERVIEW.md — append a "## Final state" section:
+```
+
+## Final state
+
+Completed: <YYYY-MM-DD>
+Phases: <count> code phases + Phase 0 infra
+Deployed URL: <from docs/INFRA.md “Deployed base URL”>
+All phases: done
+
+```
+6. Update README.md (the project-level README, not the anpunkit README) — if a
+project README exists at the repo root, update or append:
+- Current status: "Production — deployed at <URL>"
+- Brief description of what was built (from OVERVIEW.md summary)
+- Link to docs/ENDPOINTS.md for the API surface
+If no project README exists, note this in the return and skip.
+
+Return format:
+```
+
+SYNTHESIZED
+
+- STATE.md: <old line count> -> <new>
+- ISSUES.md: <old> -> <new>, merged <k>, archived <m>
+- snapshots pruned: <count>
+- final pass: <yes — OVERVIEW.md + README.md updated | no>
+- safe to /clear: yes
+
+```

package/template/.claude/agents/test-author.md

@@ -0,0 +1,71 @@
+---
+name: test-author
+description: Writes tests for a phase WITHOUT reading the implementation logic. On TDD phases, writes the suite BEFORE logic exists (RED-first). Tests behavior from the plan's acceptance spec only.
+tools: Read, Grep, Glob, Write, Bash
+model: opus
+---
+
+You are the TEST-AUTHOR. Caveman ULTRA mode. You write UNBIASED tests.
+
+## RED-FIRST (TDD phases)
+
+On a TDD phase you are dispatched BEFORE any logic exists — only interface stubs
+are present. You read the stub signatures (allowed) and the acceptance spec, and
+write the REAL API suite (+ mock) against them. Because there is no logic body to
+peek at, your blindness is STRUCTURAL, not honor-system.
+
+- The suite MUST collect/import cleanly AND FAIL (assertion failure or
+  NotImplemented). That is the RED gate.
+- A test that PASSES on bare stubs is wrong — the spec is trivial or the test is
+  broken. Fix the test; NEVER ship green-on-stubs.
+- Cannot tell what to assert from the spec? Return UNDERSPEC (do not invent a
+  contract).
+
+## Blind constraint (all phases)
+
+- You may read: docs/PLAN.md (acceptance + slice), public interface signatures /
+  stubs, test framework config.
+- You must NOT read implementation LOGIC bodies. Do not open source files for
+  their internals.
+- Cannot tell what to test without reading the logic? Return UNDERSPEC.
+
+## TWO SUITES — write BOTH
+
+1. MOCK suite — fast, no external dependency. Mocks ONLY the external boundary.
+2. REAL API suite — real HTTP against running backend + real Azure services.
+   No mocks on the external boundary. Code/API-level — not browser E2E.
+
+## Test placement (regression layout)
+
+- Public-contract / ENDPOINTS-surface tests -> `tests/regression/` (the
+  cross-phase corpus). A regression test must NOT depend on phase-local fixtures.
+- Phase-local tests -> `tests/phase-<n>/`.
+- mock vs real is a fixture/env FLAG on the SAME test, not duplicated files.
+
+## Rules
+
+- Test observable behavior from `acceptance`. Cover happy path + edge + failure.
+- Run both suites. Report honestly. Never edit a test to make it pass.
+- FAILURE CLASSIFICATION for every real-suite failure:
+  - LOGIC FAIL: code's behavior is wrong.
+  - SERVICE UNAVAILABLE: outage / rate limit / auth / network — not our code.
+
+PHASE GATE: your part = REAL API suite passing AND the accumulated mock regression
+corpus staying green. For frontend phases, e2e-runner adds the browser gate on
+top. Green mock alone CANNOT close a phase.
+
+RETURN:
+```
+
+TESTS WRITTEN: phase <n>
+
+- red-first: <yes (TDD) | n/a (non-TDD)>
+- files: <mock suite files> | <real suite files>  (note regression vs phase-local)
+- RED gate: <COLLECTS+FAILS as required | passed-on-stubs=BAD | n/a>
+- mock result: <X pass / Y fail>
+- real API result: <X pass / Y fail>
+- failures: <behavior, expected vs actual, + LOGIC FAIL or SERVICE UNAVAILABLE>
+- external service hit: <name / none>
+- PHASE GATE: PASS | FAIL | BLOCKED (service unavailable)
+
+```

package/template/.claude/anpunkit-manifest.json

@@ -0,0 +1,256 @@
+{
+  "version": "2.0.0",
+  "files": [
+    {
+      "path": "AGENTS.md",
+      "sha256": "638d0c19fbc614e162d83b8b5e315c9f38180eaec8d8a88c825d36d6d9ec416b"
+    },
+    {
+      "path": "CLAUDE.md",
+      "sha256": "e9d84381044c68d1b7289708de20bc6d2202eca3f39a2f63e7824a36fa18e299"
+    },
+    {
+      "path": "README.md",
+      "sha256": "56a76a3fefacbf5ffc37d5b1f43748a628e0e4a8142ce2d6058957f8a22781a0"
+    },
+    {
+      "path": ".gitattributes",
+      "sha256": "51ca20efd556b51644b3fd938cd07ff86a17170edd09f7c9caf718911a56b0a2"
+    },
+    {
+      "path": "setup.sh",
+      "sha256": "6e833255c4aeb5f7824db3fe332535f8f0816a0cbf79a0f8f16ee07b606753cf"
+    },
+    {
+      "path": ".claude/agents/debugger.md",
+      "sha256": "4ddc97252275db82356489061b87b71ac39bd9e4cc7a47d0501132c7c7024a52"
+    },
+    {
+      "path": ".claude/agents/e2e-runner.md",
+      "sha256": "9d1f1134092abc28a23a3e48a2fda3aa74b7644267692edad464498e776445f7"
+    },
+    {
+      "path": ".claude/agents/implementer.md",
+      "sha256": "9c2d5e166bac94bfff31a775766094a4275c5a8d1da9bae7823e824f5c307fe6"
+    },
+    {
+      "path": ".claude/agents/infra-provisioner.md",
+      "sha256": "56fa8dd1a6bc526a8d73f71b8e0b5980aec71ca6610070f222cbb77d348c66fb"
+    },
+    {
+      "path": ".claude/agents/planner.md",
+      "sha256": "3ba23521d9f1190a16402ad900d90932519517711fc3ec783eee21ff920a0042"
+    },
+    {
+      "path": ".claude/agents/researcher.md",
+      "sha256": "01b25384b6b6743c60e79e1cc9a2997895c86a6b509375b527a1aa8b70be4306"
+    },
+    {
+      "path": ".claude/agents/synthesizer.md",
+      "sha256": "d17de592a3c83f2439ff9be68337d04c9d4933aa2193c68372005a85a2fdec95"
+    },
+    {
+      "path": ".claude/agents/test-author.md",
+      "sha256": "9af796a9d8e7302847e57fb61e484d0e3f26325586ebbb7e1a79ba20ead1057b"
+    },
+    {
+      "path": ".claude/hooks/cursor-session-start.sh",
+      "sha256": "504aa12b63508c6926cda28da14fa8951234d49d4b4318da83eecd6f115402e3"
+    },
+    {
+      "path": ".claude/hooks/pre-compact.sh",
+      "sha256": "6767551a1eddd09efe01cdb09e3e687165ef204588bf01b4a05836f22b5e2527"
+    },
+    {
+      "path": ".claude/hooks/session-start.sh",
+      "sha256": "9cfce17a40cebf3bc518f37b33b4fad2c47f43b5913fec03b98e96e1d232bc94"
+    },
+    {
+      "path": ".claude/hooks/subagent-stop.sh",
+      "sha256": "fd4b48484db0511e6b78ff659213ebb826e3082e37c98d67dbcb09f159c3e318"
+    },
+    {
+      "path": ".claude/skills/caveman/SKILL.md",
+      "sha256": "62c1522b986679f75e574d7f04c939405df6fc200723d67a255b36d960d9880c"
+    },
+    {
+      "path": ".claude/skills/grill-me/SKILL.md",
+      "sha256": "1cf60d6ce350314e794033ae0773303b54fd1557c3f7ffecfc64dd788fdd4edc"
+    },
+    {
+      "path": ".claude/skills/karpathy-guidelines/SKILL.md",
+      "sha256": "5423139b03a976713348ed4badd5de65e64fbf04d997e7b692917b1d0baddc3b"
+    },
+    {
+      "path": "commands.src/infra.md",
+      "sha256": "ca4e826889bd0a1bcf5298d3da5d453c3eecdb514bc50ba0d735b7f024a58dc0"
+    },
+    {
+      "path": "commands.src/log-decision.md",
+      "sha256": "90c1bd5d6e625730e0b735eefc521239a8e1f547e8f1a0e8d2b8d96ca95612ed"
+    },
+    {
+      "path": "commands.src/log-issue.md",
+      "sha256": "359967180b5dde14f36cfabda0b0a2bc8bbb17580da557805879ab4e50eabeca"
+    },
+    {
+      "path": "commands.src/overview.md",
+      "sha256": "522a091e3e0513dbc15d7f856aca77e18ff70304ac3689f312a3f578e9f3e684"
+    },
+    {
+      "path": "commands.src/phase.md",
+      "sha256": "6cd48c2bbc87e01175594682d22cd7cf652cee84790b8a5677fd4d774679d6f3"
+    },
+    {
+      "path": "commands.src/quick.md",
+      "sha256": "6517eefcc1c6458d441ebea1db736d7070abf6531a7e96c55ae00b90a0763313"
+    },
+    {
+      "path": "commands.src/replan.md",
+      "sha256": "0a599f7c223a8c82cf3f3296ed5d60e5feb97396960e959190d5872f51a602a2"
+    },
+    {
+      "path": "commands.src/store-wisdom.md",
+      "sha256": "960bf4e281d30a451298b5a34c4052cc65be5bc0e9f4a7a91140c7915a2dd362"
+    },
+    {
+      "path": "commands.src/synthesize.md",
+      "sha256": "db4a19ff627eb22fbc1f78d1e8e2c98d73ab05fdd780afe0ca62b7ce9885c21c"
+    },
+    {
+      "path": "commands.src/unstuck.md",
+      "sha256": "a675a648af299074240d3b7b4aa7ca39d41fdfc44520352c67f0895d5c5c1102"
+    },
+    {
+      "path": ".claude/commands/infra.md",
+      "sha256": "ca4e826889bd0a1bcf5298d3da5d453c3eecdb514bc50ba0d735b7f024a58dc0"
+    },
+    {
+      "path": ".claude/commands/log-decision.md",
+      "sha256": "90c1bd5d6e625730e0b735eefc521239a8e1f547e8f1a0e8d2b8d96ca95612ed"
+    },
+    {
+      "path": ".claude/commands/log-issue.md",
+      "sha256": "359967180b5dde14f36cfabda0b0a2bc8bbb17580da557805879ab4e50eabeca"
+    },
+    {
+      "path": ".claude/commands/overview.md",
+      "sha256": "522a091e3e0513dbc15d7f856aca77e18ff70304ac3689f312a3f578e9f3e684"
+    },
+    {
+      "path": ".claude/commands/phase.md",
+      "sha256": "6cd48c2bbc87e01175594682d22cd7cf652cee84790b8a5677fd4d774679d6f3"
+    },
+    {
+      "path": ".claude/commands/quick.md",
+      "sha256": "6517eefcc1c6458d441ebea1db736d7070abf6531a7e96c55ae00b90a0763313"
+    },
+    {
+      "path": ".claude/commands/replan.md",
+      "sha256": "0a599f7c223a8c82cf3f3296ed5d60e5feb97396960e959190d5872f51a602a2"
+    },
+    {
+      "path": ".claude/commands/store-wisdom.md",
+      "sha256": "960bf4e281d30a451298b5a34c4052cc65be5bc0e9f4a7a91140c7915a2dd362"
+    },
+    {
+      "path": ".claude/commands/synthesize.md",
+      "sha256": "db4a19ff627eb22fbc1f78d1e8e2c98d73ab05fdd780afe0ca62b7ce9885c21c"
+    },
+    {
+      "path": ".claude/commands/unstuck.md",
+      "sha256": "a675a648af299074240d3b7b4aa7ca39d41fdfc44520352c67f0895d5c5c1102"
+    },
+    {
+      "path": ".cursor/commands/infra.md",
+      "sha256": "24a6290a0905e744cc3d0adaf6f0d385b859e99eb8326367b6d55c7bcd66d559"
+    },
+    {
+      "path": ".cursor/commands/log-decision.md",
+      "sha256": "3a4ea21091306d2cf1d24595318c4a0bb15e9fd4283d5fb96fc26f2749f26f73"
+    },
+    {
+      "path": ".cursor/commands/log-issue.md",
+      "sha256": "abf7199d735f7c994c628711e5aabd661a0656f13ac5723f0a8ffc2f048ad027"
+    },
+    {
+      "path": ".cursor/commands/overview.md",
+      "sha256": "33710e166d3fb4e9894df709708cd5dec997dfd7fb293931e3f9212567ee06cf"
+    },
+    {
+      "path": ".cursor/commands/phase.md",
+      "sha256": "759d2d5946a9c05ade60dd5e8e47d8d94b7ab6b923be214eb5f5a9979ea6e94e"
+    },
+    {
+      "path": ".cursor/commands/quick.md",
+      "sha256": "771060033625e721b6a96f774aee4131e65ac2b0c481180004dfa8b8cef5d563"
+    },
+    {
+      "path": ".cursor/commands/replan.md",
+      "sha256": "36b47315ba813702f71530402a6ffa7c4c404bbc946c0cda571ead61ddc28874"
+    },
+    {
+      "path": ".cursor/commands/store-wisdom.md",
+      "sha256": "95d553ed835888c36b5ff188844e76c3d8c3695654904ab1284766574938c26c"
+    },
+    {
+      "path": ".cursor/commands/synthesize.md",
+      "sha256": "128067091a83934b7cc0c071713c7936cb4905cbcdd57831cecaac5301a20950"
+    },
+    {
+      "path": ".cursor/commands/unstuck.md",
+      "sha256": "d076cc6307af467f79ea41a934c1e14f2a08b01db93e80e912ab77ebd464f7be"
+    },
+    {
+      "path": ".cursor/rules/anpunkit.md",
+      "sha256": "f7ebf7b8a7d8cb6ad7cef55e06f7d36477cf0859b6f974dbb07059e81838a939"
+    },
+    {
+      "path": "playwright.config.ts",
+      "sha256": "32091109fa51b085ddf562d2896de9b25b69fb6302461bb06212078892cb994a"
+    },
+    {
+      "path": "e2e/global-setup.ts",
+      "sha256": "f9fd377d45bad7925e7645b94f5a839ee5a781f51b5ad9f1b3a8011d527f3317"
+    },
+    {
+      "path": "docker-compose.test.yml",
+      "sha256": "03d3d89354769abcfb2abb42540b4fd9d2bfcc382f62815822db9c910c01d9f7"
+    },
+    {
+      "path": "scripts/e2e-stack.sh",
+      "sha256": "98a6ab95e19e3b560887f6c7e935a1947fe59d5cf881f0da8286db66580a7ce4"
+    },
+    {
+      "path": "scripts/auth-setup.sh",
+      "sha256": "bb30646047a83bf857bf0ffc8cef0560f2ddf012d48a19185407f10740d8fa43"
+    },
+    {
+      "path": "scripts/regression.sh",
+      "sha256": "711bf59c9a1aa66846e1efd4a2127476edd8d92010207807e11e4080d430006e"
+    },
+    {
+      "path": "create-anpunkit/package.json",
+      "sha256": "a0cdb99a170ef7f4dc9f0aecc85e8d4c8fde3038d2b176366b17078deee09d09"
+    },
+    {
+      "path": "create-anpunkit/bin/cli.js",
+      "sha256": "3c12a18a3831c40ddb3633072a26e5f8be28954fe8d058388d7220d13cf4568e"
+    },
+    {
+      "path": "create-anpunkit/build.sh",
+      "sha256": "01fb6d1bb8866db54b0942d341b43e3f0ef96b97f7904909d77393fec49dbb58"
+    },
+    {
+      "path": "create-anpunkit/README.md",
+      "sha256": "3c20b14f5959053e460ae830e81b16f0ab063e882637c32fa70ef4dec58727d1"
+    }
+  ],
+  "hybrid": [
+    ".claude/settings.json",
+    ".cursor/hooks.json",
+    ".gitignore",
+    "docs/DESIGN_LOG.md"
+  ],
+  "generated_from": "commands.src/ -> .claude/commands/ + .cursor/commands/"
+}

package/template/.claude/commands/infra.md

@@ -0,0 +1,62 @@
+---
+description: Provision or verify Azure infrastructure. Generates Bicep, shows what-if diff for your review, applies only after your approval, writes docs/INFRA.md and .env.test.
+argument-hint: [provision | verify | update <what changed> | regenerate-env]
+---
+
+Caveman ULTRA mode. You are the ORCHESTRATOR.
+
+Action: $ARGUMENTS (default: "provision" if INFRA.md missing, "verify" if present)
+
+---
+
+## PRE-FLIGHT
+
+1. Check `az account show` — if it fails, STOP.
+   Tell me: "Run `scripts/auth-setup.sh` first."
+
+2. Determine mode from $ARGUMENTS or default logic.
+
+---
+
+## PROVISION / UPDATE flow
+
+1. Dispatch `infra-provisioner` with the mode.
+
+2. It returns WHAT-IF READY. Show me:
+   - resource list with SKUs and costs
+   - total monthly cost estimate
+   - what-if detail file path
+   Then ask:
+   > "Review docs/research/infra-whatif-<timestamp>.md. Type 'go' to apply,
+   >  or describe changes to make first."
+   WAIT. Do not proceed until I say "go".
+
+3. On "go": pass APPROVED to `infra-provisioner`.
+
+4. On "make changes": dispatch UPDATE with feedback. Loop to step 2.
+
+5. On APPLIED: tell me INFRA.md ✓, .env.test ✓, and any manual steps remaining.
+
+---
+
+## VERIFY flow
+
+1. Check INFRA.md exists. If missing: tell me to run `/infra provision` first.
+2. Dispatch `infra-provisioner` VERIFY mode.
+3. Return drift report.
+
+---
+
+## REGENERATE-ENV flow
+
+1. Check INFRA.md exists.
+2. Dispatch `infra-provisioner` REGENERATE-ENV.
+3. Confirm .env.test rewritten.
+
+---
+
+## Notes
+
+- /infra never touches PLAN.md, STATE.md, ISSUES.md, or DESIGN_LOG.md.
+- Infra errors are AZURE UNAVAILABLE or CONFIG ERROR — do NOT route to debugger.
+- If UNDERSPEC: list missing decisions, ask me to fill them, re-dispatch.

package/template/.claude/commands/log-decision.md

@@ -0,0 +1,34 @@
+---
+description: Record an architectural decision in docs/DESIGN_LOG.md. Use only when the kit's structure changes.
+argument-hint: [what changed]
+---
+
+Caveman ULTRA mode.
+
+Append an architectural decision to docs/DESIGN_LOG.md. Change: $ARGUMENTS
+
+WHEN this applies — the change is ARCHITECTURAL:
+- new / removed / renamed agent, hook, or command
+- changed workflow rule (escalation, phase gate, test layering)
+- design decision where alternatives were weighed
+
+WHEN it does NOT apply:
+- code changes, features, phase progress -> HISTORY.md
+- bugs + fixes -> ISSUES.md
+- infra changes -> INFRA.md
+
+Steps:
+1. Read docs/DESIGN_LOG.md.
+2. Append a dated line to `## 0. Changelog`, newest first.
+3. If alternatives were weighed, ALSO append a full entry to §5:
+```
+
+### 5.x <decision title>
+
+Options: <a, b, c>. **Chosen: <x>.** <why it won.>
+
+```
+4. If agent/hook/command/file added or removed, update the file inventory (§6).
+5. NEVER rewrite or delete existing entries — append only.
+
+Confirm back in 2-3 lines: what was logged and where.

package/template/.claude/commands/log-issue.md

@@ -0,0 +1,28 @@
+---
+description: Log an error to docs/ISSUES.md with root cause + solution, in the canonical format.
+argument-hint: [short error description]
+---
+
+Caveman ULTRA mode.
+
+Append an entry to docs/ISSUES.md. Error: $ARGUMENTS
+
+Canonical format:
+```
+
+### <short error title — searchable, literal error keywords>
+
+- [x] open      (or “- [x] resolved”)
+- symptom: <what was observed>
+- root cause: <the REAL underlying cause>
+- solution: <exact fix, or “pending”>
+- failed attempts: <approaches that did NOT work>
+
+```
+Rules:
+- title must contain literal error keywords -> grep finds it.
+- root cause is the real cause, not "the line threw an error".
+- always fill "failed attempts" — stops repeated dead ends.
+- open issues go at the TOP; resolved below; archived oldest at bottom.
+
+Confirm the entry back in 2 lines.

package/template/.claude/commands/overview.md

@@ -0,0 +1,106 @@
+---
+description: Bootstrap a new project. Runs design-research, double grill, and planning. Run once per project.
+---
+
+Caveman ULTRA mode.
+
+Recommended: run from plan mode (Shift+Tab). Planning agents are read-only by
+tool grant; plan mode adds a read-only gate on the main session too. Optional.
+
+Goal: stand up a fresh project workspace with a well-grounded plan.
+
+---
+
+## Steps
+
+### Round 1 — Initial grill
+
+1. Run the `grill-me` skill to interrogate me. Goal: understand initial scope.
+   Cover: project purpose, success criteria, external services, Azure services
+   needed (type + sizing), region, deployment target (Azure or local for E2E),
+   known constraints, unknowns.
+   Do not stop early. Do not write OVERVIEW.md yet.
+
+Store the round-1 answers as working context — do NOT write OVERVIEW.md yet.
+
+---
+
+### Design research
+
+2. Extract DESIGN TOPICS from the round-1 answers. These are things we need
+   to verify before planning:
+   - Each external service mentioned: what does it support at the relevant tier?
+     Quotas, rate limits, known gaps?
+   - Azure services: any sizing or SKU constraints relevant to the use case?
+   - Auth patterns: any MSAL/Entra constraints for this scenario?
+   - Any other architectural assumption in the round-1 answers worth verifying.
+
+3. Dispatch `researcher` in DESIGN mode with the DESIGN TOPICS list.
+   It returns a terse summary + file paths. Read the design-<slug>.md files
+   only if needed.
+
+---
+
+### Round 2 — Research-informed re-grill
+
+4. Run `grill-me` again — a second focused pass. Seed it with:
+   - The round-1 answers (already established — do not re-ask these)
+   - The design-research key findings and new questions raised
+
+   The re-grill asks whatever it needs to build complete understanding. It is
+   not limited to "gaps from research" — research context makes new questions
+   relevant even if it found no blockers. Do not re-ask what round 1 already
+   established clearly.
+
+---
+
+### Write OVERVIEW.md
+
+5. Write docs/OVERVIEW.md from the COMBINED output of round-1 + design-research
+   + round-2. Include:
+   - Project purpose and success criteria
+   - Scope and constraints (informed by research findings)
+   - External services with confirmed capabilities/limits
+   - "Azure services" section: every service with expected SKU
+   - Deployment target (azure-deployed or local-docker for E2E)
+   - Known risks / open questions (if any remain)
+
+   OVERVIEW.md is written HERE — after the re-grill, not before.
+
+---
+
+### Plan
+
+6. Hand OVERVIEW.md + design-research findings to the `planner` subagent.
+   PLAN.md MUST:
+   - Start with Phase 0 (infra setup) as the first entry (always).
+   - End with a final code phase that contains the deploy task block.
+
+7. Create docs/STATE.md:
+```
+
+# STATE
+
+phase: 0 (pending)
+completed: project bootstrapped — design research done, double grill done
+next: run /infra to provision Azure infrastructure
+blocker: none
+
+```
+8. Create docs/ISSUES.md with header `# Issues` and `## Archived` section.
+
+9. Create empty docs/HISTORY.md.
+
+10. Create docs/INFRA.md from the template (populated by /infra).
+
+11. Create docs/ENDPOINTS.md:
+ ```
+ # Endpoints — <project name>
+ > Maintained by implementer. Updated each phase.
+ > Base URL: (populated after deployment phase)
+ ```
+
+Then stop and show me PLAN.md for approval before any phase starts.
+
+Remind me: "Run `/infra` next to provision the Azure environment (Phase 0)
+before starting Phase 1."