Implement

Read masterplan.md (risk record first) and refresh the plan with sh .agents/tools/plan-refresh.sh. See records/references/pieces.md. Run maintain/scripts/upgrade-check.py from the project root and keep only its exit code. Exit 1 means /maintain must finish the update; say so and carry on.

In Codex, on unable to get password from user, run the installed setup skill's templates/foundation/codex-github-check.py with python3 and --message. Give its sentence and stop. Do not retry or sign in.

Choose work

A ready repair comes first. Otherwise take the only free ready piece. If several are ready, show them and their blockers, then ask which to take. Unattended, take the lowest-numbered.