[StephenSHorton]

Rock 1.0 is a Go binary. The same harness sits behind the Charm TUI, rock -p, rock acp, and rock serve.

Jev (or the labeled offline policy, when no key is set) picks the model, one skill, whether the loop is stuck, when to compact, whether a call is destructive, what kind of subagent to spawn, and whether a grep hit is worth keeping. Yolo skips asks. It does not skip the destructive gate. Plan mode blocks edits and every shell command, because redirections are not inspected. rock inspect says that permissions are not a sandbox.

Suzuri stays the host. rock fork prints OSC 7880 with a session id and brand=rock. Rock accepts --resume, --session-id, a prompt after --, and ROCK_SESSION_TITLE. The host allowlist is StephenSHorton/suzuri#84: basename rock is allowed, and that launch sets ROCK_SESSION_TITLE instead of the Grok env. The tested file is also in contrib/suzuri-rock-osc.patch.

The public page lives in site/. Basalt ground, a copper vein. GitHub Actions publishes it once the repo’s Pages source is GitHub Actions. The app token cannot create that Pages site.

No model key still runs. The offline provider answers, and the gates stay local. rock setup writes config and does not store API keys.

go test ./...
go build -o rock ./cmd/rock
./rock inspect
./rock -p "Say hello in one sentence"

  

[StephenSHorton]

Closing: this work landed on main through #4 (squash 46737ec), which was stacked on this branch and included all of it plus the cleanup.