@chimix/agentscan 1.1.0 → 1.3.0

package/CHANGELOG.md

@@ -11,6 +11,97 @@ and [v0.4.0](https://github.com/SimaAlexandru99/agentscan/releases/tag/v0.4.0).
 (the published package version). A separate 1.0.1 npm tag would need an
 intermediate commit that this train does not cut.
 
+## 1.3.0 — 2026-08-31
+
+Native Windsurf / Cascade coverage against 2026-08-31 official docs.
+**99 checks**, **457 tests**.
+
+### Added
+
+- Spec captures `docs/spec/windsurf-rules.md`, `windsurf-agents-md.md`,
+  `windsurf-mcp.md`.
+- Workspace rules: `.devin/rules/*.md` (preferred), `.windsurf/rules/*.md`
+  (fallback), subdirectory-scoped trees, legacy `.windsurfrules`.
+  `.devin` is a scan-root signal.
+- Character budgets: `windsurf.rule.too-large` (12,000) and
+  `windsurf.rule.global-too-large` (6,000). Never `cursor.rule.too-large`.
+- `windsurf.rule.missing-trigger` on workspace `.devin` / `.windsurf` rules
+  that omit frontmatter `trigger`. Not on `.windsurfrules`,
+  `global_rules.md`, or `AGENTS.md`.
+- Portable lowercase `agents.md` (same `sourceProvider: unknown` as
+  `AGENTS.md`).
+- `--global` Cascade MCP at `~/.codeium/windsurf/mcp_config.json`
+  (`windsurf-json`). Launch is `command` or `serverUrl` or `url`.
+  `windsurf.mcp.no-launch` when none are set. Never
+  `claude.mcp.url-without-type`.
+- `--global` `~/.codeium/windsurf/memories/global_rules.md` only. Other
+  files in that memories directory stay unread.
+
+### Unread (intentional)
+
+- Devin Local CLI MCP (no published path).
+- Auto-generated memories other than `global_rules.md`.
+- System / enterprise rule directories.
+- Project MCP (none quoted).
+- Marketplace, admin allowlists, OAuth stores.
+
+## 1.2.1 — 2026-08-31
+
+Codex user MCP under `--global`. **95 checks**, **441 tests**.
+
+### Added
+
+- `$CODEX_HOME/config.toml` (default `~/.codex/config.toml`) is opened only
+  with `--global`. Same `codex-toml` shape as project `.codex/config.toml`.
+- Same-name user and project servers both stay in the inventory. The
+  published page does not quote a replace-entirely rule, so this scanner
+  does not invent `codexEffective`.
+- Spec recapture `docs/spec/codex-mcp.md` (user path, `CODEX_HOME`, unread
+  system / managed / requirements / profiles / plugins / trust / `auth.json`).
+
+### Unread (intentional)
+
+- System `/etc/codex/config.toml`, managed preferences, `requirements.toml`,
+  profile files, plugin MCP, `trust_level`.
+- User-file `project_doc_*` knobs.
+- Claude global settings; Command Code `projects/{slug}/mcp.json`.
+
+## 1.2.0 — 2026-08-31
+
+Native Grok Build provider against 2026-08-31 official docs. **95 checks**,
+**435 tests**. Compatibility with Claude or Cursor is not schema identity.
+
+### Added
+
+- Spec captures `docs/spec/grok-mcp.md`, `grok-hooks.md`, `grok-skills.md`,
+  `grok-rules.md`, `grok-agents.md`.
+- Profiles: `grok-toml` MCP, `grok` hook and skill schemas.
+  `inferHookSchemaProfile("grok")` is `"grok"`, not `"claude"`.
+- Project `.grok/config.toml` walk-up (cwd → scan boundary). User
+  `$GROK_HOME/config.toml` or `~/.grok/config.toml` under `--global`.
+  Same-name project replaces user; closer project file wins.
+  `grok.mcp.no-launch` when neither `command` nor `url` is set. Never
+  `claude.mcp.url-without-type` on `grok-toml`.
+- `.grok/hooks/*.json` and user hooks under `--global`. Fourteen events;
+  handlers `command` / `http`. Copilot `version: 1` remap is not applied.
+- `.grok/skills` (and user skills under `--global`). Frontmatter required;
+  `name` / `description` optional. Agent Skills directory-match and Claude
+  listing-budget checks do not run.
+- `.grok/rules/*.md` with no size cap. `Agents.md` and `AGENT.md` as Grok
+  instruction files beside `AGENTS.md`.
+- Conformance fixture `tests/fixtures/conformance/grok-toml/`.
+- `spec:check` drifts Grok hook event names against the live hooks page.
+
+### Unread (intentional)
+
+- Managed / requirements TOML, plugins, marketplaces, personas, LSP,
+  `sandbox.toml`, `pager.toml`.
+- `[skills] paths` (no quoted resolution base).
+- `.grok/agents/` (directory named, no filename pattern).
+- Claude / Cursor / `.mcp.json` as Grok-consumed.
+- `.gitignore` skip for instruction files.
+- Credential files (`auth.json`, `mcp_credentials.json`).
+
 ## 1.1.0 — 2026-08-31
 
 Native Command Code provider, then a correctness pass over every registered

package/README.md

@@ -5,19 +5,19 @@
 </p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/checks-87-111111?style=flat-square" alt="87 checks">
-  <img src="https://img.shields.io/badge/tests-420%20passing-111111?style=flat-square" alt="420 tests">
+  <img src="https://img.shields.io/badge/checks-99-111111?style=flat-square" alt="99 checks">
+  <img src="https://img.shields.io/badge/tests-457%20passing-111111?style=flat-square" alt="457 tests">
   <img src="https://img.shields.io/badge/network-none-111111?style=flat-square" alt="No network">
   <img src="https://img.shields.io/badge/writes-none-111111?style=flat-square" alt="Writes nothing">
   <img src="https://img.shields.io/badge/runs%20on-node%20%C2%B7%20bun-111111?style=flat-square" alt="Node or Bun">
   <img src="https://img.shields.io/npm/v/@chimix/agentscan?style=flat-square&color=111111&label=npm" alt="npm version">
   <img src="https://img.shields.io/badge/license-MIT-111111?style=flat-square" alt="MIT license">
-  <a href="CHANGELOG.md"><img src="https://img.shields.io/badge/changelog-1.1.0-111111?style=flat-square" alt="Changelog"></a>
+  <a href="CHANGELOG.md"><img src="https://img.shields.io/badge/changelog-1.3.0-111111?style=flat-square" alt="Changelog"></a>
 </p>
 
 <p align="center">
-  <strong>87 checks &middot; offline &middot; 0 network calls on <code>check</code> &middot; provenance on every rule</strong><br>
-  <sub>An offline linter for Claude Code, Command Code, portable Agent Skills, nested AGENTS.md, Copilot CLI hooks, and the MCP / hooks / rules surfaces that 1.1.0 actually implements. Spec-required checks cite a published line in <a href="docs/spec/">docs/spec/</a>. Heuristics stay at <code>info</code> and say so. The coverage matrix below is the honesty contract — five dimensions, and a documented global location that is not scanned stays unread.</sub>
+  <strong>99 checks &middot; offline &middot; 0 network calls on <code>check</code> &middot; provenance on every rule</strong><br>
+  <sub>An offline linter for Claude Code, Command Code, Grok Build, Windsurf, portable Agent Skills, nested AGENTS.md, Copilot CLI hooks, and the MCP / hooks / rules surfaces that 1.3.0 actually implements. Spec-required checks cite a published line in <a href="docs/spec/">docs/spec/</a>. Heuristics stay at <code>info</code> and say so. The coverage matrix below is the honesty contract — five dimensions, and a documented global location that is not scanned stays unread.</sub>
 </p>
 
 ---
@@ -63,9 +63,9 @@ of the filesystem**, where nothing else in your stack will ever tell you.
 No AI, no network on `check`. Read the config, read the disk, compare:
 
 ```
-1. Discover    .claude/ .commandcode/ .agents/ .vscode/ .cursor/ .codex/ .gemini/ .github/ .continue/ AGENTS.md skills-lock.json
+1. Discover    .claude/ .commandcode/ .grok/ .agents/ .vscode/ .cursor/ .codex/ .gemini/ .github/ .continue/ AGENTS.md skills-lock.json
 2. Extract     immutable facts — never re-read during checking
-3. Check       87 checks, each labeled spec-required, vendor-recommendation,
+3. Check       99 checks, each labeled spec-required, vendor-recommendation,
                security, internal-consistency, or heuristic
 4. Report      text · --json · --output prompt (handoff for a fixing agent)
 ```
@@ -116,8 +116,8 @@ too close to an unrelated `agent-scan`. The command you type stays `agentscan`.
 bun add -d @chimix/agentscan     # then: bunx agentscan check
 ```
 
-Point it at a project that actually has agent config — a `.claude/` or
-`.commandcode/` directory, an `.mcp.json`, an `AGENTS.md`. A directory with
+Point it at a project that actually has agent config — a `.claude/`,
+`.commandcode/`, or `.grok/` directory, an `.mcp.json`, an `AGENTS.md`. A directory with
 agent config and no `package.json` is still scannable. On a directory with
 neither it exits with a clear error.
 
@@ -186,7 +186,7 @@ Flags for `check`:
 | `--verbose` | Show KEEP + info-severity findings, and print each finding's id |
 | `--fail-on <level>` | `never` (default) · `warning` · `error` |
 | `--fail-under <0-100>` | Fail when the score drops below this floor |
-| `--global` | Also scan `~/.claude/skills`, `~/.codex/skills`, `~/.commandcode/skills`, and `~/.agents/skills` (see below) |
+| `--global` | Also scan `~/.claude/skills`, `~/.codex/skills`, `$CODEX_HOME` / `~/.codex/config.toml`, `~/.commandcode/skills`, `~/.agents/skills`, and `$GROK_HOME` / `~/.grok` (see below) |
 | `--config <path>` | Config file path |
 
 **v1 does not write the tree** — no `apply`, no skill delete/install. Findings may *suggest* shell commands; you run them yourself.
@@ -199,7 +199,7 @@ Flags for `check`:
   │  ⌒  │   6 error · 2 warning · 11 info hidden (--verbose)
   └─────┘
 
-agentscan v1.1.0 — touchagency
+agentscan v1.3.0 — touchagency
 
 Scanned: 46 deps · 108 skills · 1 mcp · 2 agents · packageManager=bun
 
@@ -231,7 +231,7 @@ JSON shape (abridged):
 
 ```json
 {
-  "version": "1.1.0",
+  "version": "1.3.0",
   "root": "/path/to/project",
   "factsSummary": {
     "packageManager": "bun",
@@ -259,14 +259,18 @@ Same tree → same sorted findings, with stable unique `id`s.
 
 ### `--global`
 
-Adds `~/.claude/skills`, `~/.codex/skills`, `~/.commandcode/skills`, and
-`~/.agents/skills` to the structural checks: a `SKILL.md` that is malformed is
-malformed wherever it lives, and those findings carry a `source: global`
+Adds `~/.claude/skills`, `~/.codex/skills`, `~/.commandcode/skills`,
+`~/.agents/skills`, `$CODEX_HOME` / `~/.codex` (`config.toml` MCP plus
+`AGENTS.override.md` / `AGENTS.md`), and `$GROK_HOME` / `~/.grok` (skills,
+hooks, `config.toml`) to the structural checks: a `SKILL.md` that is malformed
+is malformed wherever it lives, and those findings carry a `source: global`
 evidence entry so you can tell them apart. Codex and Command Code skills use
-the Agent Skills contract (`name` and `description` required). `--global` also
-inventories user Command Code agents (`~/.commandcode/agents`), MCP
-(`~/.commandcode/mcp.json` and user settings `mcp.servers`), and memory
-(`~/.commandcode/AGENTS.md`). It never opens `auth.json` or `mcp-tokens.json`.
+the Agent Skills contract (`name` and `description` required). Grok skills do
+not — `name` and `description` are optional. `--global` also inventories user
+Command Code agents (`~/.commandcode/agents`), MCP (`~/.commandcode/mcp.json`
+and user settings `mcp.servers`), and memory (`~/.commandcode/AGENTS.md`). It
+never opens `auth.json`, `mcp-tokens.json`, Codex `auth.json`, or Grok
+`auth.json` / `mcp_credentials.json`.
 
 Lockfile checks stay project-scoped — a project lockfile cannot pin a skill that
 lives in your home directory, so reporting one as "not in the lockfile" could
@@ -487,6 +491,14 @@ internal-consistency, or heuristic. `agentscan rules` lists them all.
 | `commandcode.agent.reserved-name` | error | A Command Code custom agent named `explore`, `plan`, `review`, or `general` — ignored at load |
 | `commandcode.agent.invalid-permission-mode` | error | A Command Code agent `permissionMode` that is not a documented value |
 | `commandcode.agent.invalid-field-type` | error | A Command Code agent field whose type the spec does not accept |
+| `grok.mcp.no-launch` | error | A Grok `[mcp_servers.*]` entry with neither `command` nor `url` |
+| `grok.hook.unknown-event` | error | A Grok hook registered under an event that is never dispatched (14 events) |
+| `grok.hook.missing-script` | error | A Grok command hook whose script does not exist |
+| `grok.hook.invalid-group` | error | A Grok hook group missing the required nested `hooks` array, or a non-string `matcher` |
+| `grok.hook.command-without-command` | error | A Grok `type: command` hook with no `command` |
+| `grok.hook.http-without-url` | error | A Grok `type: http` hook with no `url` |
+| `grok.hook.unknown-handler-type` | error | A Grok hook whose `type` is missing or not `command` / `http` |
+| `grok.skill.missing-frontmatter` | warning | Grok `SKILL.md` with no `---` block |
 | `mcp.command-missing` | error | An MCP `command` that is a path-like value whose file does not exist on disk |
 | `security.hardcoded-secret` | error | A token-shaped literal in MCP config (the value is never echoed back) |
 | `mcp.literal-env` | warning | Secret-named `env` values that are literals instead of interpolation |
@@ -516,8 +528,12 @@ internal-consistency, or heuristic. `agentscan rules` lists them all.
 | `budget.mcp` | info | More MCP servers than a tool-selection hint (>5) — heuristic proxy |
 | `codex.budget.instructions` | info | Codex root→cwd `AGENTS.md` chain exceeds the default 32 KiB |
 | `cursor.rule.too-large` | info | A `.cursor/rules/*.mdc` file exceeds the 500-line recommendation |
+| `windsurf.rule.too-large` | info | A Windsurf workspace rule exceeds 12,000 characters |
+| `windsurf.rule.global-too-large` | info | `~/.codeium/windsurf/memories/global_rules.md` exceeds 6,000 characters |
+| `windsurf.rule.missing-trigger` | warning | A `.devin/rules` / `.windsurf/rules` file omits frontmatter `trigger` |
+| `windsurf.mcp.no-launch` | error | Windsurf MCP server declares neither `command`, `serverUrl`, nor `url` |
 
-### Coverage in 1.1.0
+### Coverage in 1.3.0
 
 Each cell is one coverage dimension. There is no `full` / `partial` label: a
 documented global or static location that is not opened stays **unread**.
@@ -536,14 +552,14 @@ Dimensions:
 | AGENTS.md | nested walk-up | n/a | no required fields | nearest-wins | tests |
 | Claude Code | project settings, skills, agents, `CLAUDE.md`, `.mcp.json` / `.claude/mcp.json` | unread `~/.claude/settings.json`, managed policy, marketplace plugins | 33 events; required handler `type`; MCP reserved names; first-paragraph skill description; listing budget | walk-up `CLAUDE.md` / `.claude/agents` | `claude-json` fixture |
 | Command Code | git-root project files; per-directory `AGENTS.md` else `.commandcode/AGENTS.md` | `--global` `~/.commandcode/*`; unread `projects/{slug}/mcp.json` | 4 events; command handlers; Agent Skills; MCP `transport` / `type` | settings merge; project+user hooks coexist; skill/MCP shadow | `commandcode` fixture |
-| Codex | `.codex/config.toml`, `.codex/skills`, AGENTS chain | `--global` `~/.codex/AGENTS.override.md` then `AGENTS.md` | TOML MCP; `project_doc_max_bytes`; Agent Skills | override > `AGENTS.md` > fallbacks; one file per dir; root→cwd; `project_root_markers` | `codex-toml` fixture |
+| Codex | `.codex/config.toml`, `.codex/skills`, AGENTS chain | `--global` `$CODEX_HOME` / `~/.codex/config.toml` MCP; `AGENTS.override.md` then `AGENTS.md`; unread system, managed, requirements, profiles, plugins, trust | TOML MCP; `project_doc_max_bytes`; Agent Skills | override > `AGENTS.md` > fallbacks; one file per dir; root→cwd; `project_root_markers`; MCP user+project both inventoried | `codex-toml` fixture |
 | VS Code | `.github/hooks` without `version: 1`, instruction files, `.github/agents`, `.vscode/mcp.json` | `--global` `~/.copilot/hooks` without `version: 1`; unread policy dirs | 8 events; command-only | workspace over user | `vscode-hooks`, `vscode-json` |
 | Copilot CLI | `.github/hooks` with `version: 1` | `--global` `~/.copilot/hooks` with `version: 1`; unread `/etc/github-copilot/policy.d` | camelCase + PascalCase map; `bash` / `powershell` / `command`; `cwd`; `timeoutSec`; prompt on `sessionStart` | documented sources coexist; policy unread | `copilot-hooks` fixture |
 | Cursor | nested `.cursor/skills`, `.cursor/mcp.json`, `.cursor/rules` | unread documented Cursor user/global paths | Agent Skills; MCP launch; 500-line rules | n/a | `cursor-json` fixture |
-| Grok | none | none | none | n/a | none |
+| Grok | `.grok/config.toml` walk-up; `.grok/hooks/*.json`; `.grok/skills`; `.grok/rules/*.md`; `Agents.md` / `AGENT.md` | `--global` `$GROK_HOME` or `~/.grok` config/hooks/skills; unread managed, requirements, plugins, `[skills] paths`, agents, credentials | `command` / `url` MCP (no `type`); 14 events; command/http; frontmatter required, name/description optional; no rules cap | closer project wins; project same-name replaces user | `grok-toml` fixture |
 | Antigravity | `.agents/mcp_config.json` | none | `serverUrl` launch | n/a | `antigravity-json` fixture |
 | Gemini | `.gemini/settings.json` | unread `~/.gemini/settings.json` unless `--global` is wired for it (it is not) | `command` / `url` / `httpUrl`; underscore-alias warning | n/a | `gemini-json` fixture |
-| Windsurf | none | unread (official page is global-only) | none | n/a | none |
+| Windsurf | `.devin/rules/*.md` (preferred), `.windsurf/rules/*.md` (fallback), `.windsurfrules`; portable `AGENTS.md` / `agents.md` | `--global` `~/.codeium/windsurf/mcp_config.json` and `~/.codeium/windsurf/memories/global_rules.md`; unread auto memories, Devin CLI MCP, system `/etc/devin/rules` | 12k / 6k character rules; workspace `trigger`; MCP `command` / `serverUrl` / `url` (no `type`) | n/a (no project MCP; both rule trees inventoried) | `windsurf-rules` fixture |
 | Kiro | none | none | none | n/a | none |
 | Cline | none | none | none | n/a | none |
 | Roo | none | none | none | n/a | none |
@@ -552,7 +568,7 @@ Dimensions:
 | Junie | none | none | none | n/a | none |
 | Continue | `.continue/config.yaml`, `.continue/mcpServers/*` | none | launch `command` / `url` / `uses`; standalone YAML `name` / `version` / `schema` | n/a | `continue-yaml`, `continue-mcpservers` |
 
-Cursor project rules (`.cursor/rules/**/*.mdc`) are a separate surface: discovery plus `cursor.rule.too-large` at info. Claude `.claude/rules/**/*.md` is inventoried and has no published line budget.
+Cursor project rules (`.cursor/rules/**/*.mdc`) are a separate surface: discovery plus `cursor.rule.too-large` at info. Claude `.claude/rules/**/*.md` is inventoried and has no published line budget. Windsurf workspace rules use a 12,000-character budget (`windsurf.rule.too-large`); do not apply the Cursor 500-line check. Portable `AGENTS.md` / `agents.md` stay `sourceProvider: unknown` — this scanner does not claim exclusive Windsurf ownership.
 
 Old 0.7 rule ids still work in `ignoreRules` and `explain` (for example `hook.missing-script` aliases `claude.hook.missing-script`).
 
@@ -588,6 +604,8 @@ and Command Code settings hooks:
 | `.github/hooks/*.json` with `version: 1` (Copilot CLI) | project root, `cwd`, host `bash` / `powershell` / `command` |
 | `~/.copilot/hooks` under `--global` | same split on `version: 1` |
 | `.commandcode/settings.json` · `.commandcode/settings.local.json` (and user settings under `--global`) | Command Code project root (git root, or cwd outside a git repo), `$COMMANDCODE_PROJECT_DIR`, `$COMMANDCODE_CWD` |
+| `.grok/hooks/*.json` | project root and the hooks directory |
+| `$GROK_HOME/hooks` or `~/.grok/hooks` under `--global` | same Grok 14-event / command-or-http split |
 
 `${CLAUDE_PLUGIN_ROOT}` is expanded **only** for a hook that came from a plugin.
 In a settings file it names nothing, so the path is skipped rather than guessed
@@ -630,6 +648,24 @@ first.
 - **Runtime split.** Source development and the composite Action use Bun; the
   published `dist/cli.js` runs on Node 20.11+ or Bun. The source entrypoint uses
   Bun's `import.meta.dir` / `import.meta.main` and is not the Node entrypoint.
+- **Grok compatibility and unpublished surfaces are unread.** Managed
+  (`~/.grok/managed_config.toml`, `/etc/grok/managed_config.toml`) and
+  requirements TOML are not opened. Plugins, marketplaces, personas, and
+  `[skills] paths` (no quoted resolution base) stay unread. `.grok/agents/`
+  is unread because the page names the directory but not a filename pattern
+  or required fields. Claude / Cursor / `.mcp.json` files keep their own
+  schemas — this scanner does not add `consumedBy: grok` to them. Grok’s
+  “skip gitignored instruction files” is unread: agentscan does not honor
+  `.gitignore`. `auth.json` and `mcp_credentials.json` are never opened.
+  Spec/runtime Grok MCP checks skip shadowed same-name servers; secrets
+  still inspect every readable MCP file.
+- **Codex admin and profile layers are unread.** System `/etc/codex/config.toml`,
+  managed preferences, `requirements.toml`, `$CODEX_HOME/<name>.config.toml`
+  profiles, plugin MCP, and `trust_level` are not opened. User
+  `$CODEX_HOME/config.toml` (or `~/.codex/config.toml`) MCP is scanned only
+  under `--global`. `auth.json` is never opened. Same-name user and project
+  MCP servers are both inventoried — the published page does not quote a
+  replace-entirely rule. User-file `project_doc_*` knobs are not applied.
 - **Command Code local MCP is unread.** `~/.commandcode/projects/{project}/mcp.json`
   is keyed by a working-directory slug that the sessions page does not publish.
   Until it does, that path is skipped rather than guessed. Bundled Command Code
@@ -650,8 +686,14 @@ first.
   `~/.copilot/hooks` is scanned only under `--global`. Inline Copilot
   `.github/copilot/settings.json` hooks are unread.
 - **Gemini user settings are unread.** `~/.gemini/settings.json` is outside a
-  normal project scan. Windsurf's official MCP page is global-only and is not
-  scanned.
+  normal project scan.
+- **Windsurf Devin CLI MCP and auto memories are unread.** Cascade MCP is
+  global-only (`~/.codeium/windsurf/mcp_config.json`, `--global`). The Devin
+  Local agent uses unpublished CLI config files — that path is not guessed.
+  Auto-generated files under `~/.codeium/windsurf/memories/` other than
+  `global_rules.md` are not opened. System / enterprise rule directories
+  (`/etc/devin/rules`, `/etc/windsurf/rules`) stay unread. There is no
+  quoted project MCP path.
 - **Bounded reads.** A `SKILL.md` is read to 64 KB and a policy file to 100 KB,
   so `skill.broken-reference` and `policyLines` see only that much of a larger
   file. This is reported — `scan.truncated`, at `info` — rather than left
@@ -665,6 +707,21 @@ Notes for every published version are in [CHANGELOG.md](CHANGELOG.md).
 GitHub already has pages for [v0.1.0](https://github.com/SimaAlexandru99/agentscan/releases/tag/v0.1.0)
 and [v0.4.0](https://github.com/SimaAlexandru99/agentscan/releases/tag/v0.4.0).
 
+**1.3.0** (31 August 2026) adds native Windsurf / Cascade coverage: workspace
+`.devin/rules` and `.windsurf/rules`, portable `agents.md`, and `--global`
+`mcp_config.json` plus `global_rules.md`. Devin CLI MCP, auto memories,
+system rules, and a project MCP path stay unread.
+
+**1.2.1** (31 August 2026) opens Codex user MCP (`$CODEX_HOME/config.toml`
+or `~/.codex/config.toml`) under `--global`. Same-name user and project
+servers are both inventoried. System, managed, requirements, profiles,
+plugins, and `trust_level` stay unread. `auth.json` is never opened.
+
+**1.2.0** (31 August 2026) adds a native Grok Build provider: project
+`.grok/*` plus `$GROK_HOME` / `~/.grok/*` under `--global`. Compatibility
+with Claude or Cursor is not schema identity. Agents, managed/requirements
+TOML, plugins, `[skills] paths`, and `.gitignore` skip stay unread.
+
 **1.1.0** (31 August 2026) adds a native Command Code provider and finishes the
 correctness pass across registered checks: hook schema profiles, Agent Skills
 optional fields, Claude listing budget, Codex chain knobs, and Copilot CLI