@aiwg/cli 2026.9.20 → 2026.9.24

package/dist/src/cli/handlers/help.js

@@ -117,6 +117,8 @@ function displayHelp() {
     helpGroup('EVIDENCE', [
         ['evidence export --output <dir>', 'Package portable activity, report, source, eval, and provenance evidence'],
         ['evidence verify <bundle>', 'Verify every member hash and the bundle checkpoint'],
+        ['effect record|lookup|reconcile', 'Record, look up or reconcile a side effect in the signed effect ledger'],
+        ['effect verify|checkpoint|keys', 'Verify the effect ledger, checkpoint it, or manage its signing key'],
     ]);
     helpGroup('SCAFFOLDING', [
         ['new-bundle <name>', 'Create project-local bundle (--type extension|addon|framework|plugin|provider, --starter skill|rule|agent|minimal, --dry-run)'],

package/dist/src/cli/handlers/index.js

@@ -31,6 +31,7 @@ import { refreshHandler } from './refresh.js';
 import { regenerateHandler, regenerateHandlers } from './regenerate.js';
 import { workspaceContextHandler, workspaceContextHandlers } from './workspace-context.js';
 import { artifactsHandler, artifactsHandlers } from './artifacts.js';
+import { effectHandler, effectHandlers } from './effect.js';
 import { mcHandler, mcHandlers } from './mc.js';
 import { missionHandlers } from './mission.js';
 import { sdlcAccelerateHandler } from './sdlc-accelerate.js';
@@ -83,7 +84,7 @@ newBundleHandler, quickrefHandler, newProjectHandler, sessionHandler, sessionsHa
 // Workspace
 statusHandler, wizardHandler, migrateWorkspaceHandler, rollbackWorkspaceHandler, 
 // Subcommands
-mcpHandler, catalogHandler, modelsHandler, versionsHandler, indexHandler, artifactsHandler, corpusHandler, discoverHandler, showHandler, featuresHandler, skillsHandler, configHandler, opsHandler, storageHandler, activityLogHandler, commandLogHandler, skillUsageHandler, kbHandler, memoryHandler, reflectionsHandler, provenanceHandler, researchStoreHandler, researchQueryHandler, runtimeInfoHandler, agentcardHandler, uhpHandler, 
+mcpHandler, catalogHandler, modelsHandler, versionsHandler, indexHandler, artifactsHandler, effectHandler, corpusHandler, discoverHandler, showHandler, featuresHandler, skillsHandler, configHandler, opsHandler, storageHandler, activityLogHandler, commandLogHandler, skillUsageHandler, kbHandler, memoryHandler, reflectionsHandler, provenanceHandler, researchStoreHandler, researchQueryHandler, runtimeInfoHandler, agentcardHandler, uhpHandler, 
 // Agentic Tools (RLM)
 chunkHandler, fanoutHandler, rlmPrepHandler, rlmSearchHandler, rlmStatusCliHandler, rlmCacheHandler, 
 // Utilities
@@ -119,7 +120,7 @@ repoAccessHandler,
 // Lint
 lintHandler, };
 // Re-export handler arrays
-export { workspaceHandlers, utilityHandlers, scaffoldingHandlers, ralphHandlers, subcommandHandlers, mcHandlers, missionHandlers, teamHandlers, stewardHandlers, regenerateHandlers, workspaceContextHandlers, artifactsHandlers, daemonHandlers, sandboxHandlers, repoAccessHandlers, };
+export { workspaceHandlers, utilityHandlers, scaffoldingHandlers, ralphHandlers, subcommandHandlers, mcHandlers, missionHandlers, teamHandlers, stewardHandlers, regenerateHandlers, workspaceContextHandlers, artifactsHandlers, effectHandlers, daemonHandlers, sandboxHandlers, repoAccessHandlers, };
 /**
  * All registered command handlers
  *
@@ -177,6 +178,7 @@ export const allHandlers = [
     versionsHandler,
     indexHandler,
     artifactsHandler,
+    effectHandler,
     corpusHandler,
     discoverHandler,
     showHandler,

package/dist/src/cli/handlers/models.js

@@ -8,9 +8,10 @@ import path from 'node:path';
 import { glob } from 'glob';
 import { load as loadYaml } from 'js-yaml';
 import { compileModelPolicy, validateCanonicalModelPolicy, validateUserProjectModelConfig, } from '../../models/provider-policy.js';
+import { resolveGrokBuildRoleModel } from '../../models/grok-build-models.js';
 const TIERS = new Set(['economy', 'standard', 'premium', 'max-quality']);
 const PROVIDERS = new Set([
-    'antigravity', 'claude', 'codex', 'copilot', 'cursor', 'deepseek-harness', 'factory', 'hermes',
+    'antigravity', 'claude', 'codex', 'copilot', 'cursor', 'deepseek-harness', 'factory', 'grok-build', 'grokbot', 'hermes',
     'opencode', 'openclaw', 'openhuman', 'omp', 'pi', 'warp', 'windsurf',
 ]);
 function parseArgs(args) {
@@ -169,18 +170,25 @@ async function updateJson(file, mutate, dryRun) {
         await atomicWrite(file, content);
     return { file, beforeWrite: value, dryRun };
 }
-async function effectiveCatalog(ctx, target, allowNetwork, parsed) {
+async function effectiveCatalog(ctx, target, allowNetwork, parsed, provider) {
     const { collectProviderInventory } = await import('../../providers/provider-inventory.js');
     const { resolveDynamicModelCatalog } = await import('../../models/model-discovery.js');
     const inventory = await collectProviderInventory(target);
     const aiwgRoot = await fs.access(path.join(ctx.frameworkRoot, 'agentic/code/providers/model-catalog.v1.json'))
         .then(() => ctx.frameworkRoot)
         .catch(() => process.cwd());
+    const nativeDiscoverers = provider === 'grok-build' ? {
+        'grok-build': async () => {
+            const { discoverGrokBuildModels } = await import('../../models/grok-build-models.js');
+            return discoverGrokBuildModels({ cwd: target, env: process.env });
+        },
+    } : undefined;
     return resolveDynamicModelCatalog({
         aiwgRoot,
         inventory,
         allowNetwork,
         forceRefresh: allowNetwork,
+        ...(nativeDiscoverers ? { nativeDiscoverers } : {}),
         ...(flagString(parsed, 'url') ? { remoteUrl: flagString(parsed, 'url') } : {}),
     });
 }
@@ -228,7 +236,7 @@ async function execute(ctx) {
     }
     if (parsed.subcommand === 'sources' || parsed.subcommand === 'refresh') {
         const { diffModelCatalog } = await import('../../models/model-discovery.js');
-        const catalog = await effectiveCatalog(ctx, target, parsed.subcommand === 'refresh', parsed);
+        const catalog = await effectiveCatalog(ctx, target, parsed.subcommand === 'refresh', parsed, provider);
         if (parsed.flags.has('drift')) {
             const staticCatalog = JSON.parse(await fs.readFile(path.join(ctx.frameworkRoot, 'agentic/code/providers/model-catalog.v1.json'), 'utf8'));
             print({ catalog, drift: diffModelCatalog(staticCatalog, catalog) }, json);
@@ -259,15 +267,38 @@ async function execute(ctx) {
         return { exitCode: 0 };
     }
     if (parsed.subcommand === 'audit' || parsed.subcommand === 'resolve') {
-        const catalog = await effectiveCatalog(ctx, target, false, parsed);
+        const catalog = await effectiveCatalog(ctx, target, false, parsed, provider);
         const catalogSource = catalog.discovery?.source ?? 'static';
-        const output = artifacts.map(item => ({
-            ...resolved(item, provider, catalog),
-            catalogSource,
-            catalogFetchedAt: catalog.discovery?.fetchedAt ?? null,
-        }));
+        let roleMappings = {};
+        if (provider === 'grok-build') {
+            try {
+                const projectConfig = JSON.parse(await fs.readFile(path.join(target, 'models.json'), 'utf8'));
+                const candidate = projectConfig?.providers?.['grok-build'];
+                if (candidate && typeof candidate === 'object')
+                    roleMappings = candidate;
+            }
+            catch { /* optional project policy */ }
+        }
+        const output = artifacts.map(item => {
+            const base = {
+                ...resolved(item, provider, catalog),
+                catalogSource,
+                catalogFetchedAt: catalog.discovery?.fetchedAt ?? null,
+            };
+            if (provider !== 'grok-build')
+                return base;
+            const discovery = catalog.discovery?.providers['grok-build'];
+            if (!discovery)
+                return base;
+            const providerResolution = resolveGrokBuildRoleModel(discovery, base.policy.role, roleMappings, flagString(parsed, 'model'));
+            return { ...base,
+                compiled: { ...base.compiled, effectiveModel: providerResolution.model, fields: {},
+                    source: 'inheritance' },
+                providerPolicy: discovery.policy, providerResolution };
+        });
         print(output, json);
-        return { exitCode: output.some(item => item.compiled.diagnostics.some(d => d.severity === 'error')) ? 2 : 0 };
+        return { exitCode: output.some(item => item.compiled.diagnostics.some(d => d.severity === 'error')
+                || ('providerResolution' in item && item.providerResolution?.source === 'unresolved')) ? 2 : 0 };
     }
     if (parsed.subcommand === 'validate') {
         const invalid = artifacts.filter(item => !validateCanonicalModelPolicy({

package/dist/src/cli/handlers/ralph.js

@@ -261,7 +261,7 @@ ARGUMENTS:
 OPTIONS:
   -c, --completion <str>  Completion criteria (required)
   --max-iterations <n>    Maximum iterations (default: 5)
-  --model <model>         Claude model (default: claude-sonnet-4-6)
+  --model <model>         Claude model (default: claude-sonnet-5)
   --budget <usd>          Budget per iteration in USD (default: 5.0)
   --timeout <min>         Timeout per iteration in minutes (default: 60)
 

package/dist/src/cli/handlers/sessions.js

@@ -2,7 +2,7 @@ import { existsSync, linkSync, mkdirSync, readFileSync, realpathSync, renameSync
 import { randomUUID } from 'node:crypto';
 import { basename, dirname, isAbsolute, join, resolve, } from 'node:path';
 import { pathToFileURL } from 'node:url';
-import { CLAUDE_ADAPTER_VERSION, ClaudeSessionAdapter, CODEX_ADAPTER_VERSION, CodexSessionAdapter, COPILOT_ADAPTER_VERSION, CopilotSessionAdapter, CURSOR_ADAPTER_VERSION, CursorSessionAdapter, FACTORY_ADAPTER_VERSION, FactorySessionAdapter, HERMES_ADAPTER_VERSION, HermesSessionAdapter, OPENCODE_ADAPTER_VERSION, OpenCodeSessionAdapter, OPENCLAW_ADAPTER_VERSION, OpenClawSessionAdapter, OPENHUMAN_ADAPTER_VERSION, OpenHumanSessionAdapter, GROKBOT_ADAPTER_VERSION, GrokbotSessionAdapter, PI_ADAPTER_VERSION, PiSessionAdapter, DEEPSEEK_HARNESS_ADAPTER_VERSION, DeepSeekHarnessSessionAdapter, OmpSessionAdapter, OMP_ADAPTER_VERSION, WARP_ADAPTER_VERSION, WarpSessionAdapter, DEVIN_DESKTOP_ADAPTER_VERSION, DevinDesktopSessionAdapter, CandidateExtractionService, GENERIC_ADAPTER_VERSION, GenericSessionInterchangeAdapter, IncrementalSessionImporter, ImportLeaseContentionError, FilesystemMemoryDestination, FilesystemPromotionDispositionCoordinator, MemoryPromotionGateway, SESSION_CONTRACT_VERSION, SESSION_PROVIDER_IDS, SessionContractError, SessionRepository, SessionSourceSchema, StructuralCandidateExtractor, resolveMemoryConsumerManifest, assertSessionProviderId, acquireImportLease, defaultDiscoveryManifestPath, discoverWorkspaceHistories, deriveSessionTimeline, importDiscoveryManifest, previewDiscoveryImport, publicDiscoveryManifest, readDiscoveryManifest, redactSourceLocator, sha256, parseTimelineGap, writeDiscoveryManifest, buildSessionExportPlan, reverifySessionExportPlan, buildSessionAiwgFortemiIndexExport, recoverAiwgFortemiIndexFromFullV1Shard, embedAttachmentsInFullV1Shard, recoverEmbeddedAttachments, SESSION_EXPORT_PLAN_SCHEMA_VERSION, } from '../../sessions/index.js';
+import { CLAUDE_ADAPTER_VERSION, ClaudeSessionAdapter, CODEX_ADAPTER_VERSION, CodexSessionAdapter, COPILOT_ADAPTER_VERSION, CopilotSessionAdapter, CURSOR_ADAPTER_VERSION, CursorSessionAdapter, FACTORY_ADAPTER_VERSION, FactorySessionAdapter, HERMES_ADAPTER_VERSION, HermesSessionAdapter, OPENCODE_ADAPTER_VERSION, OpenCodeSessionAdapter, OPENCLAW_ADAPTER_VERSION, OpenClawSessionAdapter, OPENHUMAN_ADAPTER_VERSION, OpenHumanSessionAdapter, GROKBOT_ADAPTER_VERSION, GrokbotSessionAdapter, GROK_BUILD_ADAPTER_VERSION, GROK_BUILD_CLI_EXPORT_LOCATOR_CLASS, GrokBuildSessionAdapter, grokBuildList, grokBuildSearch, grokBuildExport, grokHeadlessSessionIdFromFile, MUSE_ADAPTER_VERSION, MuseSessionAdapter, PI_ADAPTER_VERSION, PiSessionAdapter, DEEPSEEK_HARNESS_ADAPTER_VERSION, DeepSeekHarnessSessionAdapter, OmpSessionAdapter, OMP_ADAPTER_VERSION, WARP_ADAPTER_VERSION, WarpSessionAdapter, DEVIN_DESKTOP_ADAPTER_VERSION, DevinDesktopSessionAdapter, CandidateExtractionService, GENERIC_ADAPTER_VERSION, GenericSessionInterchangeAdapter, IncrementalSessionImporter, ImportLeaseContentionError, FilesystemMemoryDestination, FilesystemPromotionDispositionCoordinator, MemoryPromotionGateway, SESSION_CONTRACT_VERSION, SESSION_PROVIDER_IDS, SessionContractError, SessionRepository, SessionSourceSchema, StructuralCandidateExtractor, resolveMemoryConsumerManifest, assertSessionProviderId, acquireImportLease, defaultDiscoveryManifestPath, discoverWorkspaceHistories, deriveSessionTimeline, importDiscoveryManifest, previewDiscoveryImport, publicDiscoveryManifest, readDiscoveryManifest, redactSourceLocator, sha256, parseTimelineGap, writeDiscoveryManifest, buildSessionExportPlan, reverifySessionExportPlan, buildSessionAiwgFortemiIndexExport, recoverAiwgFortemiIndexFromFullV1Shard, embedAttachmentsInFullV1Shard, recoverEmbeddedAttachments, SESSION_EXPORT_PLAN_SCHEMA_VERSION, } from '../../sessions/index.js';
 const JSON_CONTRACT_VERSION = '1.0.0';
 async function createLineMemoryPromotionDestination(projectRoot, manifestPath) {
     const modulePath = resolve(dirname(manifestPath), 'commands', 'line-memory.mjs');
@@ -28,6 +28,10 @@ Commands:
   sources                         Show all canonical provider dispositions
   discover --workspace <path>     Inventory authorized workspace histories
   import-discovered --workspace <path>  Import the exact saved manifest
+  grok-list --workspace <path>    List Grok Build CLI session IDs for a workspace
+  grok-search <query> --workspace <path>  Search Grok Build CLI session IDs
+  grok-export <id> --workspace <path> --out <dir>  Export one CLI transcript
+  grok-id <file> --format json|streaming-json  Read a headless session ID
   import <file> --source-id <id>  Import a supported provider JSONL source
   list [--limit N] [--cursor N]   List normalized sessions
   timeline [--gap 30m]            Report chronological activity segments
@@ -155,6 +159,28 @@ async function executeCommand(ctx, args) {
         return discoverWorkspace(ctx, args);
     if (command === 'import-discovered')
         return importDiscovered(ctx, args);
+    if (command === 'grok-list' || command === 'grok-search' || command === 'grok-export') {
+        const workspace = resolve(ctx.cwd, requiredValue(args, '--workspace'));
+        const options = { cwd: workspace, binary: args.values.get('--grok-bin') };
+        if (command === 'grok-list') {
+            return ok(command, { sessionIds: await grokBuildList(options, boundedInteger(args.values.get('--limit'), 20, 1, 500, '--limit')) });
+        }
+        if (command === 'grok-search') {
+            return ok(command, { sessionIds: await grokBuildSearch(options, requiredPositional(args, 0, 'query'), boundedInteger(args.values.get('--limit'), 20, 1, 500, '--limit')) });
+        }
+        if (isDryRun(ctx, args)) {
+            return preview(command, { sessionId: requiredPositional(args, 0, 'session ID'), wouldExport: true });
+        }
+        const output = await grokBuildExport(options, requiredPositional(args, 0, 'session ID'), resolve(ctx.cwd, requiredValue(args, '--out')));
+        return ok(command, { source: output, provider: 'grok-build', sourceId: `grok-build-${basename(output, '.md')}` });
+    }
+    if (command === 'grok-id') {
+        const format = args.values.get('--format');
+        if (format !== 'json' && format !== 'streaming-json') {
+            throw new SessionContractError('INVALID_ARGUMENT', '--format must be json or streaming-json');
+        }
+        return ok(command, { sessionId: await grokHeadlessSessionIdFromFile(resolve(ctx.cwd, requiredPositional(args, 0, 'file')), format) });
+    }
     const repository = openRepository(ctx, args);
     try {
         switch (command) {
@@ -656,7 +682,7 @@ async function importSource(ctx, args) {
     if (provider !== 'generic' && provider !== 'claude' && provider !== 'codex'
         && provider !== 'copilot' && provider !== 'cursor' && provider !== 'factory'
         && provider !== 'hermes' && provider !== 'opencode' && provider !== 'openclaw'
-        && provider !== 'openhuman' && provider !== 'grokbot' && provider !== 'pi' && provider !== 'omp' && provider !== 'deepseek-harness' && provider !== 'warp' && provider !== 'devin-desktop') {
+        && provider !== 'openhuman' && provider !== 'grokbot' && provider !== 'grok-build' && provider !== 'muse' && provider !== 'pi' && provider !== 'omp' && provider !== 'deepseek-harness' && provider !== 'warp' && provider !== 'devin-desktop') {
         throw new CliError('UNSUPPORTED_OPERATION', `session import is not implemented for ${provider}`, EXIT.unsupported);
     }
     const sourceId = requiredValue(args, '--source-id');
@@ -673,6 +699,8 @@ async function importSource(ctx, args) {
     const isOpenClaw = provider === 'openclaw';
     const isOpenHuman = provider === 'openhuman';
     const isGrokbot = provider === 'grokbot';
+    const isGrokBuild = provider === 'grok-build';
+    const isMuse = provider === 'muse';
     const isPi = provider === 'pi';
     const isOmp = provider === 'omp';
     const isDsh = provider === 'deepseek-harness';
@@ -698,13 +726,17 @@ async function importSource(ctx, args) {
                                         ? new OpenHumanSessionAdapter()
                                         : isGrokbot
                                             ? new GrokbotSessionAdapter()
-                                            : isPi
-                                                ? new PiSessionAdapter()
-                                                : isWarp
-                                                    ? new WarpSessionAdapter()
-                                                    : isDevinDesktop
-                                                        ? new DevinDesktopSessionAdapter()
-                                                        : new GenericSessionInterchangeAdapter();
+                                            : isGrokBuild
+                                                ? new GrokBuildSessionAdapter()
+                                                : isMuse
+                                                    ? new MuseSessionAdapter()
+                                                    : isPi
+                                                        ? new PiSessionAdapter()
+                                                        : isWarp
+                                                            ? new WarpSessionAdapter()
+                                                            : isDevinDesktop
+                                                                ? new DevinDesktopSessionAdapter()
+                                                                : new GenericSessionInterchangeAdapter();
     const locatorClass = isDsh ? 'deepseek-harness-session-v2-jsonl' : isOmp ? 'omp-session-v3-jsonl' : isClaude
         ? claudeLocatorClass(input)
         : isCodex
@@ -725,13 +757,17 @@ async function importSource(ctx, args) {
                                         ? 'openhuman-enriched-jsonl'
                                         : isGrokbot
                                             ? 'manual-export'
-                                            : isPi
-                                                ? 'pi-session-v3-jsonl'
-                                                : isWarp
-                                                    ? 'warp-markdown-export'
-                                                    : isDevinDesktop
-                                                        ? 'devin-desktop-cascade-hook-jsonl'
-                                                        : 'manual-export';
+                                            : isGrokBuild
+                                                ? GROK_BUILD_CLI_EXPORT_LOCATOR_CLASS
+                                                : isMuse
+                                                    ? 'manual-export'
+                                                    : isPi
+                                                        ? 'pi-session-v3-jsonl'
+                                                        : isWarp
+                                                            ? 'warp-markdown-export'
+                                                            : isDevinDesktop
+                                                                ? 'devin-desktop-cascade-hook-jsonl'
+                                                                : 'manual-export';
     const selectedSource = {
         provider, locator: input, locatorClass, sourceId,
         authorizedScope: { workspaceId, allowedRoots: [dirname(input)] },
@@ -759,11 +795,15 @@ async function importSource(ctx, args) {
                                             ? 'schema-1-session-raw-enriched'
                                             : isGrokbot
                                                 ? 'manual-interchange'
-                                                : isWarp
-                                                    ? 'manual-lossy-markdown-export'
-                                                    : isDevinDesktop
-                                                        ? 'opt-in-cascade-transcript-hook'
-                                                        : 'manual-interchange',
+                                                : isGrokBuild
+                                                    ? 'documented-cli-markdown-export'
+                                                    : isMuse
+                                                        ? 'muse-export-trajectory-v1'
+                                                        : isWarp
+                                                            ? 'manual-lossy-markdown-export'
+                                                            : isDevinDesktop
+                                                                ? 'opt-in-cascade-transcript-hook'
+                                                                : 'manual-interchange',
         locatorClass, redactedLocator: redactSourceLocator(input),
         adapterVersion: isDsh ? DEEPSEEK_HARNESS_ADAPTER_VERSION : isOmp ? OMP_ADAPTER_VERSION : isClaude
             ? CLAUDE_ADAPTER_VERSION
@@ -785,16 +825,20 @@ async function importSource(ctx, args) {
                                             ? OPENHUMAN_ADAPTER_VERSION
                                             : isGrokbot
                                                 ? GROKBOT_ADAPTER_VERSION
-                                                : isWarp
-                                                    ? WARP_ADAPTER_VERSION
-                                                    : isDevinDesktop
-                                                        ? DEVIN_DESKTOP_ADAPTER_VERSION
-                                                        : GENERIC_ADAPTER_VERSION,
+                                                : isGrokBuild
+                                                    ? GROK_BUILD_ADAPTER_VERSION
+                                                    : isMuse
+                                                        ? MUSE_ADAPTER_VERSION
+                                                        : isWarp
+                                                            ? WARP_ADAPTER_VERSION
+                                                            : isDevinDesktop
+                                                                ? DEVIN_DESKTOP_ADAPTER_VERSION
+                                                                : GENERIC_ADAPTER_VERSION,
         sourceSchemaVersion: probe.sourceSchemaVersion,
-        disposition: isWarp || isGrokbot
+        disposition: isWarp || isGrokbot || isMuse
             ? 'manual-only'
             : isClaude || isCodex || isCopilot || isCursor || isFactory || isHermes
-                || isOpenCode || isOpenClaw || isOpenHuman || isDevinDesktop || isOmp || isDsh || isPi
+                || isOpenCode || isOpenClaw || isOpenHuman || isGrokBuild || isDevinDesktop || isOmp || isDsh || isPi
                 ? 'implemented' : 'manual-only',
         operationalState: probe.operationalState,
         consistency: probe.consistency, authorizedAt: new Date().toISOString(),
@@ -818,14 +862,18 @@ async function importSource(ctx, args) {
                                             ? { 'native.openhuman': {} }
                                             : isGrokbot
                                                 ? { 'native.grokbot': {} }
-                                                : isWarp
-                                                    ? { 'native.warp': {} }
-                                                    : isDevinDesktop
-                                                        ? { 'native.devin-desktop': {
-                                                                product: 'Devin Desktop',
-                                                                compatibilityProviderId: 'windsurf',
-                                                            } }
-                                                        : { 'native.generic': {} },
+                                                : isGrokBuild
+                                                    ? { 'native.grok-build': { acquisition: 'grok-cli-export-markdown' } }
+                                                    : isMuse
+                                                        ? { 'native.muse': {} }
+                                                        : isWarp
+                                                            ? { 'native.warp': {} }
+                                                            : isDevinDesktop
+                                                                ? { 'native.devin-desktop': {
+                                                                        product: 'Devin Desktop',
+                                                                        compatibilityProviderId: 'windsurf',
+                                                                    } }
+                                                                : { 'native.generic': {} },
     });
     if (isDryRun(ctx, args)) {
         return preview('import', { source, wouldInspect: true, wouldPersist: false });
@@ -1375,6 +1423,34 @@ function providerDisposition(provider) {
             },
         };
     }
+    if (provider === 'grok-build') {
+        return {
+            provider, disposition: 'implemented', operationalState: 'available',
+            supportedOperations: ['inspect', 'stream'],
+            acquisitionModes: ['manual-export'],
+            reasonCode: 'CLI_EXPORT_REQUIRED',
+            remediation: 'Run `grok sessions list`, then `grok export <session-id> <session-id>.md` and import the explicitly authorized Markdown file.',
+            evidence: {
+                adapterVersion: GROK_BUILD_ADAPTER_VERSION,
+                verifiedAt: '2026-09-21',
+                documentation: 'https://docs.x.ai/build/features/sessions',
+            },
+        };
+    }
+    if (provider === 'muse') {
+        return {
+            provider, disposition: 'manual-only', operationalState: 'available',
+            supportedOperations: ['inspect', 'stream'],
+            acquisitionModes: ['manual-export'],
+            reasonCode: 'MANUAL_SOURCE_SELECTION_REQUIRED',
+            remediation: 'Run `muse export --session <id-or-session.jsonl>` and explicitly select the trajectory JSON; sessions live under $XDG_DATA_HOME/muse/sessions, but that native log format is internal, so auto-discover is unsupported.',
+            evidence: {
+                adapterVersion: MUSE_ADAPTER_VERSION,
+                verifiedAt: '2026-09-24',
+                documentation: 'docs/providers/muse-sessions.md',
+            },
+        };
+    }
     if (provider === 'warp') {
         return {
             provider, disposition: 'manual-only', operationalState: 'available',
@@ -1487,7 +1563,7 @@ function parseArgs(argv) {
         '--inactivity-threshold',
         '--control-events',
         '--session', '--status', '--actor', '--group-by',
-        '--out', '--plan', '--input', '--shard-name', '--max-attachment-bytes',
+        '--out', '--plan', '--input', '--shard-name', '--max-attachment-bytes', '--format', '--grok-bin',
     ]);
     let command;
     for (let index = 0; index < argv.length; index += 1) {

package/dist/src/cli/handlers/subcommands.js

@@ -24,6 +24,7 @@ import { getProjectDir } from "../../config/aiwg-config.js";
 import { formatDeployedWorkspaceSignalPlan, readWorkspaceSignalPlan } from "../workspace-signals.js";
 import * as path from "node:path";
 import * as fsSync from "node:fs";
+import { pathToFileURL } from "node:url";
 /** Generate or deploy the canonical project quickref. */
 export const quickrefHandler = {
     id: 'quickref',
@@ -713,6 +714,36 @@ export const removeHandler = {
         if (ctx.args.includes('--user') || isScopeUser(ctx.args)) {
             return await removeUserScopeDeploy(ctx.args);
         }
+        if (firstRemovePositional(ctx.args) === 'grok-build') {
+            const providerParse = parseRemoveProvider(ctx.args);
+            if (providerParse.provider !== 'grok-build' || providerParse.error) {
+                return { exitCode: 1, message: 'Use aiwg remove grok-build --provider grok-build [--dry-run] for reviewed project-scope removal.' };
+            }
+            const frameworkRoot = await getFrameworkRoot();
+            const { uninstall } = (await import(pathToFileURL(path.join(frameworkRoot, 'tools/agents/providers/grok-build.mjs')).href));
+            const { readAiwgConfig, writeAiwgConfig } = await import('../../config/aiwg-config.js');
+            const target = getProjectDir({ cwd: ctx.cwd }, ctx.args);
+            const dryRun = ctx.args.includes('--dry-run');
+            const report = uninstall(target, { dryRun, srcRoot: frameworkRoot });
+            if (!dryRun && report.skipped.length === 0) {
+                const config = await readAiwgConfig(target);
+                if (config) {
+                    for (const [name, entry] of Object.entries(config.installed ?? {})) {
+                        delete entry.deployedTo?.['grok-build'];
+                        if (Object.keys(entry.deployedTo ?? {}).length === 0)
+                            delete config.installed[name];
+                    }
+                    await writeAiwgConfig(target, config);
+                }
+            }
+            const lines = [
+                `${dryRun ? 'Would remove' : 'Removed'} ${dryRun ? report.planned.length : report.removed.length} unchanged AIWG-owned Grok Build artifact(s).`,
+                ...report.planned.map(relative => `  ${relative}`),
+                ...report.skipped.map(relative => `  Preserved modified or unverifiable: ${relative}`),
+                'Operator-owned Grok content and shared context files are preserved.',
+            ];
+            return { exitCode: report.skipped.length ? 1 : 0, message: lines.join('\n') };
+        }
         // #1037 — Project-local-aware remove. If the first positional arg matches
         // a project-local entry in `installed`, route to the new handler.
         // Otherwise fall through to the existing plugin-uninstaller flow.

package/dist/src/cli/handlers/use.js

@@ -179,9 +179,9 @@ async function loadDeployModelsConfig(frameworkRoot) {
     }
     return {
         shorthand: {
-            opus: 'claude-opus-4-6',
-            sonnet: 'claude-sonnet-4-6',
-            haiku: 'claude-haiku-4-5-20251001',
+            opus: 'claude-opus-5',
+            sonnet: 'claude-sonnet-5',
+            haiku: 'claude-haiku-4-5',
             inherit: 'inherit',
         },
         claude_shorthand: { opus: 'opus', sonnet: 'sonnet', haiku: 'haiku', inherit: 'inherit' },
@@ -249,6 +249,27 @@ function resolveFrameworkDir(framework) {
  * aiwg-dev is contributor-only tooling — not for end users.
  */
 export const USE_ALL_DISALLOW = new Set(['aiwg-dev']);
+/**
+ * Whether an addon's manifest keeps it out of bulk deploys (#2641).
+ *
+ * `devOnly` marks contributor tooling; `explicitInstall` marks an addon that is
+ * deployed only when named, such as `aiwg use decision-engine`. Both match
+ * `discoverAddons()` in tools/agents/providers/base.mjs, which applies the same
+ * rule to framework-mode deploys.
+ *
+ * `autoInstall: false` is deliberately NOT an exclusion signal: most addons
+ * declare it (and the extension manifest schema defaults to it), so honoring
+ * it would drop most addons from `all` for existing users.
+ */
+async function isExplicitOnlyAddon(addonDir) {
+    try {
+        const manifest = JSON.parse(await fs.readFile(path.join(addonDir, 'manifest.json'), 'utf8'));
+        return manifest?.devOnly === true || manifest?.explicitInstall === true;
+    }
+    catch {
+        return false;
+    }
+}
 /** Full-framework setup requires the corpus omitted by the lightweight CLI. */
 async function bundledSetupPrerequisiteMessage(frameworkRoot) {
     let packageName;
@@ -280,14 +301,15 @@ async function bundledSetupPrerequisiteMessage(frameworkRoot) {
     ].join('\n');
 }
 /**
- * Discover all addon names from the filesystem, minus the disallow list.
+ * Discover all addon names from the filesystem, minus the disallow list and
+ * addons whose manifest restricts them to explicit installs.
  */
 export async function getAllAddons(frameworkRoot) {
     const addonsDir = path.join(frameworkRoot, 'agentic/code/addons');
     const entries = await fs.readdir(addonsDir, { withFileTypes: true });
-    return entries
-        .filter(e => e.isDirectory() && !USE_ALL_DISALLOW.has(e.name))
-        .map(e => e.name);
+    const candidates = entries.filter(e => e.isDirectory() && !USE_ALL_DISALLOW.has(e.name));
+    const excluded = await Promise.all(candidates.map(e => isExplicitOnlyAddon(path.join(addonsDir, e.name))));
+    return candidates.filter((_, index) => !excluded[index]).map(e => e.name);
 }
 /**
  * Extensions excluded from `aiwg use all` deployment.
@@ -338,7 +360,8 @@ export function extensionPath(frameworkRoot, name) {
 /**
  * Check whether a given addon name exists on disk.
  * The USE_ALL_DISALLOW list does NOT block explicit single-addon installs —
- * contributors can still run `aiwg use aiwg-dev` directly.
+ * contributors can still run `aiwg use aiwg-dev`, and operators
+ * `aiwg use decision-engine` (an explicitInstall addon), directly.
  */
 /** Resolve canonical addon folder name from user-supplied alias. */
 function resolveAddonFolderName(name) {
@@ -3338,6 +3361,17 @@ export class UseHandler {
                     };
                 }
             }
+            if (provider === 'muse') {
+                // #226 — fail closed: never let --scope user proceed with unusable
+                // XDG metadata (the mirror would silently land nothing at user scope).
+                const { resolveMuseXdgSkillsDir, museXdgSkillsDirRemediation } = await import('../../providers/muse-paths.js');
+                if (!resolveMuseXdgSkillsDir()) {
+                    return {
+                        exitCode: 1,
+                        message: museXdgSkillsDirRemediation(),
+                    };
+                }
+            }
         }
         // Pre-deployment collision check (skip in dry-run — nothing is written)
         if (!dryRun) {
@@ -3767,6 +3801,9 @@ export class UseHandler {
                 }
             }
             catch (err) {
+                if (provider === 'grok-build') {
+                    return { exitCode: 1, message: `--scope user mirror failed: ${err instanceof Error ? err.message : String(err)}` };
+                }
                 ui.warn(`--scope user mirror failed: ${err instanceof Error ? err.message : String(err)}`);
             }
         }
@@ -3825,7 +3862,7 @@ export class UseHandler {
                 }
                 else {
                     // Cross-provider providers per ADR-3 §7 (no-op if their dir not present)
-                    const bridgeProviders = ['codex', 'copilot', 'factory', 'hermes'];
+                    const bridgeProviders = ['codex', 'copilot', 'factory', 'grok-build', 'hermes'];
                     const results = await bridgeAll(sources, bridgeProviders, {
                         projectPath: target,
                         dryRun,

package/dist/src/cli/handlers/utilities.js

@@ -509,6 +509,16 @@ export const doctorHandler = {
         // Run core doctor diagnostics
         const result = await runner.run('tools/cli/doctor.mjs', ctx.args, { cwd: ctx.cwd });
         let agentSkillsFailure = false;
+        try {
+            const { inspectGrokBuildNative } = await import('../../mcp/grok-build-config.mjs');
+            const native = await inspectGrokBuildNative({ projectDir: ctx.cwd || process.cwd() });
+            console.log(`\n── Grok Build native extensions ──\n  MCP: ${native.mcp}\n  Hooks: ${native.hooks}`);
+            for (const diagnostic of native.diagnostics)
+                console.log(`  ⚠ ${diagnostic}`);
+        }
+        catch (error) {
+            console.log(`\n── Grok Build native extensions ──\n  ⚠ unable to audit: ${error instanceof Error ? error.message : String(error)}`);
+        }
         try {
             const { buildAgentSkillsDoctorSection } = await import('../../skills/doctor.js');
             const section = buildAgentSkillsDoctorSection(ctx.cwd || process.cwd());

package/dist/src/cli/handlers/workspace.js

@@ -55,9 +55,11 @@ export const statusHandler = {
                 provider: statusFlagValue(ctx.args, '--provider'),
                 bundle: statusFlagValue(ctx.args, '--bundle'),
             });
+            const { inspectGrokBuildNative } = await import('../../mcp/grok-build-config.mjs');
+            const grokBuildNative = await inspectGrokBuildNative({ projectDir: projectRoot });
             return {
                 exitCode: probe.status === 'needs-repair' ? 1 : 0,
-                message: JSON.stringify(probe, null, 2),
+                message: JSON.stringify({ ...probe, grokBuildNative }, null, 2),
                 rawOutput: true,
             };
         }