catherd-cli 1.2.1 → 1.3.0

package/README.md

@@ -6,15 +6,15 @@
  (")(")
 ```
 
-Autopilot builds from your own Claude Code session. Claude plans and verifies, Codex, opencode or
-headless Claude Code workers write the code, and [Jev](https://typesafe.ai) picks the model and effort for each piece
+Autopilot builds from your own Claude Code session. Claude plans and verifies, Codex, opencode, Cursor, Grok Build,
+Antigravity or headless Claude Code workers write the code, and [Jev](https://typesafe.ai) picks the model and effort for each piece
 of work, climbing a ladder only when a cheaper rung falls short.
 
 - **Your harness, as you set it up.** Every role runs in its vendor's own CLI with your config,
   hooks, skills and `AGENTS.md`. Isolation is an opt-in toggle per profile and harness, for when
   you'd rather save the tokens your customizations cost.
 - **Claude roles stay native.** `claude:` rungs run as ordinary Claude Code subagents; Codex,
-  opencode and headless `claude-code:` rungs run through catherd's MCP server.
+  opencode, Cursor, Grok Build, Antigravity and headless `claude-code:` rungs run through catherd's MCP server.
 - **Survives restarts.** Workers are detached processes writing straight to disk, so a dropped
   MCP server never loses a run.
 - **Results come to you.** Roles run side by side while you keep talking to Claude; each one that finishes
@@ -34,6 +34,13 @@ of work, climbing a ladder only when a cheaper rung falls short.
   - [opencode](https://opencode.ai) **v2**, 2.0.16 or newer: `curl -fsSL https://opencode.ai/v2/install | bash`
     (the npm package `opencode-ai` is v1 and is not supported)
   - Claude Code's `claude` CLI 2.1.282 or newer, for headless `claude-code:` rungs
+  - Cursor's CLI, `cursor-agent` 2026.09.28 or newer: `curl https://cursor.com/install -fsS | bash`, then
+    `cursor-agent login` (below)
+  - Grok Build's `grok` 1.0.44 or newer: `curl -fsSL https://x.ai/cli/install.sh | bash`, then `grok login`
+    (below)
+  - Google's Antigravity CLI, `agy` 1.2.13 or newer: `brew install --cask antigravity-cli`, or
+    `curl -fsSL https://antigravity.google/cli/install.sh | bash` (with `~/.local/bin` on PATH), then run `agy` once
+    to sign in (below)
 - Optional: a TypeSafe API key for Jev, in `TYPESAFE_API_KEY` or saved by `catherd init`
 - Optional: a free [Artificial Analysis](https://artificialanalysis.ai) API key for more scores, in
   `ARTIFICIAL_ANALYSIS_API_KEY` or saved by `catherd init`; its numbers are read for you alone and never shipped
@@ -42,6 +49,66 @@ of work, climbing a ladder only when a cheaper rung falls short.
 profile runs its workers on Codex; without Codex, doctor's fix also names how to move those roles to a backend
 you have (`/catherd-setup` in Claude Code, or `catherd profile set roles.<role>.rungs <rung>`).
 
+### Cursor
+
+A Cursor rung names Cursor's own model slug, with the effort as the slug's suffix: `cursor:gpt-6-sol#xhigh` runs
+`gpt-6-sol-xhigh`, and `#default` runs the bare slug (`cursor:composer-2.5#default`). `cursor-agent models` lists
+what your account offers; `catherd catalog refresh` reads it. No profile uses Cursor until you put a rung on it.
+Its Composer and Grok models bill from Cursor's own pool, the other models at API rates after your plan's included
+usage, so a Cursor rung ranks as `metered`.
+
+- **Native** (the default) runs with your login and your Cursor setup. It also loads your Claude Code hooks,
+  skills and plugins, which Cursor reads from `~/.claude`. `workspace-write` runs in Cursor's sandbox under your
+  `~/.cursor/sandbox.json`, which catherd never edits: `catherd doctor` shows which of a worker's checks (the lock
+  dir, temp, loopback, the network, Docker) it allows. `read-only` runs Cursor's ask mode, which asks the model not
+  to write but cannot stop it (`advisory`).
+- **Isolated** (`catherd profile set harness.cursor.isolated true`) needs `CURSOR_API_KEY`, since a login cannot
+  move to another home. catherd runs Cursor under its own HOME with its own `sandbox.json`, which gives a worker
+  catherd's writable roots.
+
+### Grok Build
+
+A Grok rung names grok's model and effort: `grok:grok-4.6#high` runs `grok -m grok-4.6 --effort high`, and
+`#default` passes no effort. `grok models` lists your models but no efforts, so catherd offers Grok Build's `low`
+to `xhigh`; `catherd catalog refresh` reads the list. No profile uses grok until you put a rung on it. A Grok login
+(SuperGrok, X Premium+) bills your subscription and `XAI_API_KEY` bills per token: `catherd doctor` says when a
+profile's `billing.grok` differs from your login. On a usage limit, a Grok rung fails over to the same model on
+Cursor, and a Cursor Grok rung to grok, unless the profile names another stand-in.
+
+- **Native** (the default) runs with your login and your grok setup. It also loads your Claude Code plugins,
+  agents, skills, hooks and permission rules, and your Cursor rules and MCP. `workspace-write` runs in grok's
+  sandbox under catherd's own profile, `catherd-ws`, which lets a worker write the lock dir, temp and the
+  toolchain caches: catherd adds its marked `[profiles.catherd-*]` tables to `~/.grok/sandbox.toml` and leaves the
+  rest of that file alone. `read-only` runs grok's kernel `read-only` profile. On a Mac whose
+  `/var/run/docker.sock` is a link (Docker Desktop, OrbStack, Colima) grok refuses that profile, so catherd gives
+  the role only the read tools instead (`advisory`); `catherd doctor` says which applies. On macOS no grok profile
+  controls the network.
+- **Isolated** (`catherd profile set harness.grok.isolated true`) needs `XAI_API_KEY`: catherd never copies your
+  grok login, whose refresh token rotates. catherd runs grok under its own HOME with its own `sandbox.toml`.
+
+grok keeps a session on the access it started with, so catherd refuses to resume one under another access.
+
+### Antigravity
+
+An Antigravity rung names the model `agy models` lists, without an effort suffix; the effort is agy's `--effort`
+(`low`, `medium`, `high` or `max`), and `#default` passes none: `antigravity:gemini-3.8-flash#low`. No profile uses
+Antigravity until you put a rung on it. catherd never runs `agy -p` while agy is signed out, since agy would open a
+browser and wait; `catherd doctor` says so, with the fix. A Google login draws on your plan's quota (doctor shows
+what is left); `GEMINI_API_KEY` bills the Gemini API project. Gemini rungs fail over between Antigravity and Cursor
+when either runs out, unless your profile names another stand-in.
+
+- **Native** (the default) runs with your Google login and your `~/.gemini` settings, which the Antigravity desktop
+  app shares and catherd never edits. `workspace-write` runs shell commands in agy's sandbox, which reaches the
+  workspace, temp and build caches but no network unless your own `read_url` rules grant it; the file tools are not
+  confined (`advisory`). agy has no read-only mode, so a read-only role (the reviewer, the architect) cannot run on
+  native Antigravity: `profile validate` refuses it.
+- **Isolated** (`catherd profile set harness.antigravity.isolated true`) needs `GEMINI_API_KEY`. catherd runs agy
+  under its own HOME, with its own settings: the Gemini API as the provider, write and command deny rules for
+  read-only roles, and catherd's writable roots and the network for `workspace-write`.
+
+Whether Google's plan terms allow an orchestrator to drive `agy` on a consumer plan is not settled here. The API-key
+route is the one meant for automation; check the terms before you rely on a plan login.
+
 ## Install
 
 ```sh
@@ -93,6 +160,7 @@ In a terminal:
 | `catherd catalog sync [--force] [--unmatched]`                                            | Fetches the public model facts and scores now (below); `--unmatched` lists ids no model matched     |
 | `catherd catalog treat-like <rung> <like>`                                                | Scores an unscored rung as a scored one                                                             |
 | `catherd catalog treat-like --suggest <rung>\|--clear <rung>\|--reset`                    | The three nearest stand-ins for a rung; removes one or every mapping of yours                       |
+| `catherd knowledge show\|add "<line>"\|path [--repo <path>]`                              | The repo's knowledge.md, which new runs read; `add` appends a fact of yours, marked "by hand"       |
 | `catherd lock [--slots N] -- <cmd>`                                                       | Runs a heavy command behind the machine-wide semaphore, in its own session (no /dev/tty)            |
 | `catherd mcp`                                                                             | The MCP server on stdio; the plugin starts it, you never need to                                    |
 | `catherd capture-fixtures [--backend <b>] [--out <dir>]`                                  | Contributors: records sanitized test fixtures from real runs (see CONTRIBUTING.md)                  |
@@ -133,6 +201,9 @@ Run data lives in `~/.local/share/catherd/`, config in `~/.config/catherd/` (bot
 | `TYPESAFE_API_KEY`            | The Jev key, instead of the one `catherd init` saves                                                        |
 | `ARTIFICIAL_ANALYSIS_API_KEY` | An Artificial Analysis key for `catalog sync`, instead of the one `catherd init` saves                      |
 | `CATHERD_NO_SYNC`             | `1`: no automatic sync of the public sources (at MCP server start and in `init`); `catalog sync` still runs |
+| `CURSOR_API_KEY`              | Cursor's API key: logs `cursor-agent` in, and is what an isolated Cursor role runs on                       |
+| `XAI_API_KEY`                 | xAI's API key: logs `grok` in when no Grok login is active, and is what an isolated grok role runs on       |
+| `GEMINI_API_KEY`              | The Gemini API key an isolated Antigravity role runs on (agy reads it only with its Gemini API provider)    |
 | `CATHERD_HOME`                | Puts config and data under `$CATHERD_HOME/config` and `$CATHERD_HOME/data` instead of XDG                   |
 | `CATHERD_LOG`                 | Log level: `off`, `error`, `warn`, `info` (default) or `debug` (what `--verbose` sets)                      |
 | `CATHERD_LOCK_SLOTS`          | `catherd lock`'s slot count when `--slots` is not given (before the profile's `lock.heavy`)                 |

package/catalog/models.json

@@ -1,10 +1,12 @@
 {
   "schema": 1,
-  "version": "2026-09-25",
+  "version": "2026-10-01",
   "sources": {
     "claude": "https://platform.claude.com/docs/en/models/overview (2026-09-25); efforts https://platform.claude.com/docs/en/build-with-claude/effort; prices https://platform.claude.com/docs/en/about-claude/pricing",
-    "codex": "codex debug models --bundled, Codex CLI 0.157.0 (2026-09-25); prices https://developers.openai.com/api/docs/pricing; plan weights https://learn.chatgpt.com/docs/pricing",
-    "opencode": "opencode models <provider> --verbose on 1.18.32 and the v2 model.list (2026-09-25); https://opencode.ai/docs/zen, https://opencode.ai/docs/go"
+    "codex": "codex debug models --bundled, Codex CLI 0.157.0 (2026-09-25), gpt-6.1-sol from Codex CLI 0.159.2 (2026-10-01); prices https://developers.openai.com/api/docs/pricing; plan weights https://learn.chatgpt.com/docs/pricing",
+    "opencode": "opencode models <provider> --verbose on 1.18.32 and the v2 model.list (2026-09-25); https://opencode.ai/docs/zen, https://opencode.ai/docs/go",
+    "cursor": "cursor-agent models on 2026.09.28-64d2043 (research 2026-09-29 §2.4; ids to confirm in the live kit, docs/dev/live-verification.md §11); prices https://openrouter.ai/api/v1/models and https://models.dev/api.json (2026-09-28)",
+    "antigravity": "agy 1.2.13 docs (models, and slugs such as gemini-3.8-flash-high; research 2026-09-29 §4.5) and the Gemini API's thinking levels; ids and efforts to confirm in the live kit, docs/dev/live-verification.md §13"
   },
   "backends": {
     "codex": {
@@ -40,6 +42,24 @@
         "ultra": "maximum reasoning with automatic task delegation to parallel subagents; never in a default ladder"
       }
     },
+    {
+      "id": "gpt-6.1-sol",
+      "name": "GPT-6.1 Sol",
+      "vendor": "openai",
+      "releaseDate": "2026-09-29",
+      "capabilities": { "toolUse": true, "imageIn": true, "reasoning": true },
+      "price": { "input": 2, "cached": 0.1, "output": 10 },
+      "on": {
+        "codex": {
+          "id": "gpt-6.1-sol",
+          "efforts": ["low", "medium", "high", "xhigh", "max", "ultra"],
+          "context": 272000
+        }
+      },
+      "notes": {
+        "ultra": "maximum reasoning with automatic task delegation to parallel subagents; never in a default ladder"
+      }
+    },
     {
       "id": "gpt-6-sol",
       "name": "GPT-6 Sol",
@@ -58,7 +78,8 @@
           "id": "opencode/gpt-6-sol",
           "efforts": ["none", "low", "medium", "high", "xhigh", "max"],
           "context": 1050000
-        }
+        },
+        "cursor": { "id": "gpt-6-sol", "efforts": ["low", "high", "xhigh"], "context": 200000 }
       },
       "notes": {
         "ultra": "maximum reasoning with automatic task delegation to parallel subagents; never in a default ladder"
@@ -87,7 +108,8 @@
           "id": "opencode-go/gpt-6-luna",
           "efforts": ["none", "low", "medium", "high", "xhigh", "max"],
           "context": 1050000
-        }
+        },
+        "cursor": { "id": "gpt-6-luna", "efforts": ["high"], "context": 200000 }
       }
     },
     {
@@ -205,6 +227,11 @@
           "id": "opencode/claude-opus-5-5",
           "efforts": ["low", "medium", "high", "xhigh", "max"],
           "context": 1000000
+        },
+        "cursor": {
+          "id": "claude-opus-5-5",
+          "efforts": ["low", "medium", "high", "xhigh", "max"],
+          "context": 200000
         }
       },
       "notes": { "effort": "the API default effort is medium" }
@@ -261,6 +288,122 @@
         "opencode": { "id": "opencode/claude-haiku-4-5", "efforts": ["high", "max"], "context": 200000 }
       },
       "notes": { "effort": "no effort parameter in Claude Code: its only rung there is #default" }
+    },
+    {
+      "id": "grok-4-7",
+      "name": "Grok 4.7",
+      "vendor": "xai",
+      "releaseDate": "2026-09-21",
+      "capabilities": { "toolUse": true, "imageIn": true, "reasoning": true },
+      "price": { "input": 2, "cached": 0.5, "output": 6 },
+      "on": {
+        "grok": { "id": "grok-4.7", "efforts": ["low", "medium", "high", "xhigh"], "context": 500000 },
+        "cursor": { "id": "grok-4.7", "efforts": ["low", "medium", "high", "xhigh"], "context": 200000 }
+      },
+      "notes": {
+        "pool": "a Cursor Model in Cursor: billed from Cursor's own pool (research §2.4)",
+        "effort": "grok lists no efforts: Grok Build's effort names, low to xhigh (research §3.4, §5; live-verification §12)"
+      }
+    },
+    {
+      "id": "grok-4-6",
+      "name": "Grok 4.6",
+      "vendor": "xai",
+      "releaseDate": "2026-08-12",
+      "capabilities": { "toolUse": true, "imageIn": true, "reasoning": true },
+      "price": { "input": 2, "cached": 0.5, "output": 6 },
+      "on": {
+        "grok": { "id": "grok-4.6", "efforts": ["low", "medium", "high", "xhigh"], "context": 500000 },
+        "cursor": {
+          "id": "cursor-grok-4.6",
+          "efforts": ["low", "medium", "high", "xhigh"],
+          "context": 200000
+        }
+      },
+      "notes": {
+        "pool": "a Cursor Model in Cursor: billed from Cursor's own pool (research §2.4)",
+        "effort": "grok lists no efforts: Grok Build's effort names, low to xhigh (research §3.4, §5; live-verification §12)"
+      }
+    },
+    {
+      "id": "grok-4-5",
+      "name": "Grok 4.5",
+      "vendor": "xai",
+      "releaseDate": "2026-07-08",
+      "capabilities": { "toolUse": true, "imageIn": true, "reasoning": true },
+      "price": { "input": 2, "cached": 0.3, "output": 6 },
+      "on": {
+        "grok": { "id": "grok-4.5", "efforts": ["low", "medium", "high", "xhigh"], "context": 500000 },
+        "cursor": { "id": "cursor-grok-4.5", "efforts": ["low", "medium", "high"], "context": 200000 }
+      },
+      "notes": {
+        "pool": "a Cursor Model in Cursor: billed from Cursor's own pool (research §2.4)",
+        "effort": "grok lists no efforts: Grok Build's effort names, low to xhigh (research §3.4, §5; live-verification §12)"
+      }
+    },
+    {
+      "id": "composer-2-5",
+      "name": "Composer 2.5",
+      "vendor": "cursor",
+      "capabilities": { "toolUse": true, "imageIn": true, "reasoning": true },
+      "price": { "input": 2, "cached": 0.5, "output": 6 },
+      "on": { "cursor": { "id": "composer-2.5", "efforts": [], "context": 200000 } },
+      "notes": {
+        "price": "no keyless source prices Composer (research §5); Grok 4.7's, the same Cursor pool, stands in",
+        "effort": "no effort: its only rung is #default"
+      }
+    },
+    {
+      "id": "gemini-3-8-flash",
+      "name": "Gemini 3.8 Flash",
+      "vendor": "google",
+      "releaseDate": "2026-09-02",
+      "capabilities": { "toolUse": true, "imageIn": true, "reasoning": true },
+      "price": { "input": 0.75, "cached": 0.075, "output": 3.75 },
+      "on": {
+        "cursor": { "id": "gemini-3.8-flash", "efforts": ["low", "medium", "high"], "context": 200000 },
+        "antigravity": { "id": "gemini-3.8-flash", "efforts": ["low", "medium", "high"], "context": 1048576 }
+      }
+    },
+    {
+      "id": "gemini-3-7-flash",
+      "name": "Gemini 3.7 Flash",
+      "vendor": "google",
+      "releaseDate": "2026-08-13",
+      "capabilities": { "toolUse": true, "imageIn": true, "reasoning": true },
+      "price": { "input": 0.75, "cached": 0.075, "output": 3.75 },
+      "on": {
+        "cursor": { "id": "gemini-3.7-flash", "efforts": ["low", "medium", "high"], "context": 200000 },
+        "antigravity": { "id": "gemini-3.7-flash", "efforts": ["low", "medium", "high"], "context": 1048576 }
+      }
+    },
+    {
+      "id": "gemini-3-6-flash",
+      "name": "Gemini 3.6 Flash",
+      "vendor": "google",
+      "releaseDate": "2026-07-21",
+      "capabilities": { "toolUse": true, "imageIn": true, "reasoning": true },
+      "price": { "input": 0.75, "cached": 0.075, "output": 3.75 },
+      "on": {
+        "cursor": {
+          "id": "gemini-3.6-flash",
+          "efforts": ["minimal", "low", "medium", "high"],
+          "context": 200000
+        },
+        "antigravity": { "id": "gemini-3.6-flash", "efforts": ["low", "medium", "high"], "context": 1048576 }
+      }
+    },
+    {
+      "id": "gemini-3-1-pro",
+      "name": "Gemini 3.1 Pro",
+      "vendor": "google",
+      "releaseDate": "2026-02-19",
+      "capabilities": { "toolUse": true, "imageIn": true, "reasoning": true },
+      "price": { "input": 2, "cached": 0.2, "output": 12 },
+      "on": {
+        "cursor": { "id": "gemini-3.1-pro", "efforts": [], "context": 200000 },
+        "antigravity": { "id": "gemini-3.1-pro", "efforts": ["low", "high"], "context": 1048576 }
+      }
     }
   ]
 }

package/catalog/scores.json

@@ -3053,6 +3053,30 @@
     "gpt-6-luna#max": {
       "like": "gpt-5.6-luna#max",
       "note": "no Arena agent score is published for GPT-6 Luna; GPT-5.6 Luna at the same effort stands in for agentic and steer (the nearest stand-in, spec 1.2 §6.3)"
+    },
+    "gpt-6.1-sol#low": {
+      "like": "gpt-6-sol#low",
+      "note": "no DeepSWE 1.1 or Arena score is published for GPT-6.1 Sol yet, and its only Terminal-Bench 4.0 value (vals.ai, 55.05 ± 1.82 at max) comes from a harness not comparable with GPT-6 Sol's Artificial Analysis one; the addendum's Broken Search Tool figure (2.08 % failure, https://deploymentsafety.openai.com/gpt-6-1-sol) is left out because a shipped honesty row would become the nearest honesty stand-in for unrelated sparse rungs; GPT-6 Sol at the same effort stands in for every dimension (the nearest stand-in, spec 1.2 §6.3)"
+    },
+    "gpt-6.1-sol#medium": {
+      "like": "gpt-6-sol#medium",
+      "note": "no DeepSWE 1.1 or Arena score is published for GPT-6.1 Sol yet, and its only Terminal-Bench 4.0 value (vals.ai, 55.05 ± 1.82 at max) comes from a harness not comparable with GPT-6 Sol's Artificial Analysis one; the addendum's Broken Search Tool figure (2.08 % failure, https://deploymentsafety.openai.com/gpt-6-1-sol) is left out because a shipped honesty row would become the nearest honesty stand-in for unrelated sparse rungs; GPT-6 Sol at the same effort stands in for every dimension (the nearest stand-in, spec 1.2 §6.3)"
+    },
+    "gpt-6.1-sol#high": {
+      "like": "gpt-6-sol#high",
+      "note": "no DeepSWE 1.1 or Arena score is published for GPT-6.1 Sol yet, and its only Terminal-Bench 4.0 value (vals.ai, 55.05 ± 1.82 at max) comes from a harness not comparable with GPT-6 Sol's Artificial Analysis one; the addendum's Broken Search Tool figure (2.08 % failure, https://deploymentsafety.openai.com/gpt-6-1-sol) is left out because a shipped honesty row would become the nearest honesty stand-in for unrelated sparse rungs; GPT-6 Sol at the same effort stands in for every dimension (the nearest stand-in, spec 1.2 §6.3)"
+    },
+    "gpt-6.1-sol#xhigh": {
+      "like": "gpt-6-sol#xhigh",
+      "note": "no DeepSWE 1.1 or Arena score is published for GPT-6.1 Sol yet, and its only Terminal-Bench 4.0 value (vals.ai, 55.05 ± 1.82 at max) comes from a harness not comparable with GPT-6 Sol's Artificial Analysis one; the addendum's Broken Search Tool figure (2.08 % failure, https://deploymentsafety.openai.com/gpt-6-1-sol) is left out because a shipped honesty row would become the nearest honesty stand-in for unrelated sparse rungs; GPT-6 Sol at the same effort stands in for every dimension (the nearest stand-in, spec 1.2 §6.3)"
+    },
+    "gpt-6.1-sol#max": {
+      "like": "gpt-6-sol#max",
+      "note": "no DeepSWE 1.1 or Arena score is published for GPT-6.1 Sol yet, and its only Terminal-Bench 4.0 value (vals.ai, 55.05 ± 1.82 at max) comes from a harness not comparable with GPT-6 Sol's Artificial Analysis one; the addendum's Broken Search Tool figure (2.08 % failure, https://deploymentsafety.openai.com/gpt-6-1-sol) is left out because a shipped honesty row would become the nearest honesty stand-in for unrelated sparse rungs; GPT-6 Sol at the same effort stands in for every dimension (the nearest stand-in, spec 1.2 §6.3)"
+    },
+    "gpt-6.1-sol#ultra": {
+      "like": "gpt-6-sol#ultra",
+      "note": "no DeepSWE 1.1 or Arena score is published for GPT-6.1 Sol yet, and its only Terminal-Bench 4.0 value (vals.ai, 55.05 ± 1.82 at max) comes from a harness not comparable with GPT-6 Sol's Artificial Analysis one; the addendum's Broken Search Tool figure (2.08 % failure, https://deploymentsafety.openai.com/gpt-6-1-sol) is left out because a shipped honesty row would become the nearest honesty stand-in for unrelated sparse rungs; GPT-6 Sol at the same effort stands in for every dimension (the nearest stand-in, spec 1.2 §6.3)"
     }
   },
   "bars": {

package/catalog/sources.json

@@ -69,10 +69,12 @@
   ],
   "aliases": {
     "claude-4-5-haiku": "claude-haiku-4-5",
-    "claude-haiku-4-5-20251001": "claude-haiku-4-5"
+    "claude-haiku-4-5-20251001": "claude-haiku-4-5",
+    "gemini-3.1-pro-preview": "gemini-3-1-pro"
   },
   "defaultEffort": {
     "gpt-6-astra": "medium",
+    "gpt-6.1-sol": "medium",
     "gpt-6-sol": "medium",
     "gpt-6-luna": "medium",
     "gpt-5.6-sol": "medium",
@@ -82,6 +84,14 @@
     "claude-opus-5-5": "high",
     "claude-sonnet-5-5": "high",
     "claude-sonnet-5": "high",
-    "claude-haiku-4-5": "default"
+    "claude-haiku-4-5": "default",
+    "grok-4-7": "high",
+    "grok-4-6": "high",
+    "grok-4-5": "high",
+    "composer-2-5": "default",
+    "gemini-3-8-flash": "high",
+    "gemini-3-7-flash": "high",
+    "gemini-3-6-flash": "high",
+    "gemini-3-1-pro": "high"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "catherd-cli",
-  "version": "1.2.1",
+  "version": "1.3.0",
   "description": "Herds coding agents: autopilot builds from your own Claude Code session.",
   "keywords": [
     "autopilot",
@@ -40,7 +40,8 @@
     "format": "oxfmt",
     "format:check": "oxfmt --check",
     "tui-frames": "CATHERD_WRITE_FRAMES=1 bun test test/entry/tui/frames.test.tsx",
-    "version-packages": "changeset version && bun scripts/stamp-plugin-version.mjs"
+    "version-packages": "changeset version && bun scripts/stamp-plugin-version.mjs",
+    "release:publish": "npm view catherd-cli@$npm_package_version version >/dev/null 2>&1 || bun test/pack-smoke.ts && changeset publish"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.1",

package/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "catherd",
-  "version": "1.2.1",
+  "version": "1.3.0",
   "description": "Herds coding agents: Claude plans and verifies, Codex, opencode or headless Claude Code workers write the code, and Jev picks the model and effort for each piece.",
   "author": {
     "name": "47vigen",

package/plugin/bin/catherd-mcp

@@ -1,7 +1,7 @@
 #!/bin/sh
 # catherd's MCP launcher (spec 1.1 §12): the plugin's .mcp.json runs it. The release stamps VERSION
 # (scripts/stamp-plugin-version.mjs), so the plugin always starts the server it was released with.
-VERSION="1.2.1"
+VERSION="1.3.0"
 
 # a global catherd at this version (catherd init installs one): start it, no resolve at all
 if command -v catherd >/dev/null 2>&1 && [ "$(catherd --version 2>/dev/null)" = "$VERSION" ]; then

package/plugin/skills/catherd/SKILL.md

@@ -23,7 +23,7 @@ Your job:
 
 The catherd server keeps `state.md` true: it rewrites it on every dispatch, climb and landing.
 
-**Your first call is `status()`.** Its `version` must be the one this plugin pins, `catherd-cli@1.2.1`. If it differs, stop and tell the user to restart Claude Code so the plugin and its server match.
+**Your first call is `status()`.** Its `version` must be the one this plugin pins, `catherd-cli@1.3.0`. If it differs, stop and tell the user to restart Claude Code so the plugin and its server match.
 
 **You never edit product files.** Every line of code, tests or docs comes from a role, including a one-line fix.
 
@@ -65,7 +65,7 @@ The catherd MCP tools ship with this plugin. They appear as `mcp__plugin_catherd
 - `E_ADMIT_DUPLICATE`: that role name is already running. It reports through a catherd message when it finishes; `peek(run, name)` shows it now, and `cancel` stops it.
 - `E_ADMIT_RUNG`: the rung is not on that role's ladder, it is a `claude:` rung, or the profile turns the role off. Use the rung `route` returned; run a `claude:` rung as its agent; skip a role that is off.
 - `E_RUN_BUDGET`: the run's budget is spent (a soft cap: roles already running finish). Pause, report and push.
-- `E_BACKEND_MISSING`, `E_BACKEND_NOT_LOGGED_IN`, `E_BACKEND_TOO_OLD`: tell the user the `fix`, word for word, then pause.
+- `E_BACKEND_MISSING`, `E_BACKEND_NOT_LOGGED_IN`, `E_BACKEND_TOO_OLD`, `E_BACKEND_CANNOT_RUN`: tell the user the `fix`, word for word, then pause.
 - `E_LANE_INVALID`: a lane file's `Kind:` or `Difficulty:` is missing or not one the catalog knows. Fix the header (the `fix` lists the values), or have the architect fix it, then call again.
 - `E_LAND_GATE`: the milestone has no reviewer record or no verifier verdict since its lanes started, it is parked, or its `skip` does not hold. Run what the message names, then land again.
 - `E_CLIMB_DESIGN`: the evidence points at the plan, not the rung. Send it to the architect (an `ask` finding, then an architect delta), not up the ladder.
@@ -274,7 +274,7 @@ The brief is the `brief` text you pass to `dispatch` (catherd writes it to the d
 4. For a worker:
    - "Read `<R>/lanes/Mx.Ly.md`": decisions, signatures, data shapes;
    - its fast check (targeted tests, lint and type check), to run until it passes;
-   - "Run the full suite only if this brief says so", and "Wrap any full build or full test suite in `bunx catherd-cli@1.2.1 lock -- <command>`": other lanes share the machine.
+   - "Run the full suite only if this brief says so", and "Wrap any full build or full test suite in `bunx catherd-cli@1.3.0 lock -- <command>`": other lanes share the machine.
 5. For a reviewer: the A-lines and the changed files, with new files read in full. It reports every finding as `BLOCKER|BUG|NIT file:line — problem — fix`, covering:
    - unmet A-lines and edge cases;
    - code or abstractions nobody needs;

package/plugin/skills/catherd-setup/SKILL.md

@@ -21,7 +21,7 @@ You tune the user's catherd profile in conversation. A profile says, per role, w
 Ask these, one at a time, each with its recommended answer:
 
 1. **Their order of speed, cost and quality.** Recommend cost first, the default `objective`: catherd climbs a rung when a cheap one cannot do the work, so the lanes that need speed get it anyway, and the reviewer and the verifier hold quality either way.
-2. **The subscriptions they hold:** a ChatGPT plan (Codex), a Claude plan, OpenCode Go, Zen credit or API keys. They set `billing` per key (`codex`, `claude`, `claude-code`, `opencode-go`, `opencode`): `chatgpt-plan`, `claude-plan`, `subscription` or `metered`. Recommend leaning on subscriptions before metered spend, and on Claude last among the workers, since it spends the same quota as this conversation.
+2. **The subscriptions they hold:** a ChatGPT plan (Codex), a Claude plan, OpenCode Go, Zen credit or API keys. They set `billing` per key (`codex`, `claude`, `claude-code`, `opencode-go`, `opencode`, `cursor`, `grok`, `antigravity`): `chatgpt-plan`, `claude-plan`, `subscription` or `metered`. Recommend leaning on subscriptions before metered spend, and on Claude last among the workers, since it spends the same quota as this conversation.
 3. **The kind of work they orchestrate:** front-end screens, back-end services, terminal and ops work, docs. Recommend from their own runs when `runs_summary` has any.
 
 ## 2. Read the facts before proposing
@@ -59,7 +59,7 @@ Each proposal has three parts: the change, a worked example from their facts, an
 
 **Budget and timeouts.** `budget` (`minutes`, `tokens`, `usd`) is a soft cap: from 80 % routing starts at the cheapest rung that clears the bar, and at 100 % no new role starts. `timeouts.idleMin` (15) stops a role that has gone quiet, `timeouts.wallMin` (90) one that runs too long. `preflight.confirm: true` makes `preflight` show its commands for the user to approve first.
 
-**Harness isolation.** For each harness they use (`codex`, `claude-code`, `opencode`), offer `harness.<name>.isolated` with its harness line from `runs_summary` (Codex has none: it reports no per-request input, so say there is no figure for it instead of offering one) and this tradeoff: "native keeps your hooks, skills and AGENTS.md; isolated saves ~N tokens per run, but the role loses them." Recommend native. When they have no isolated runs yet, the number is the median first-turn input of their native runs: say that isolation would save some part of it, not all of it. When there are no runs at all, say there is no number yet, and recommend native until there is.
+**Harness isolation.** For each harness they use (`codex`, `claude-code`, `opencode`, `cursor`, `grok`, `antigravity`), offer `harness.<name>.isolated` with its harness line from `runs_summary` (Codex has none: it reports no per-request input, so say there is no figure for it instead of offering one) and this tradeoff: "native keeps your hooks, skills and AGENTS.md; isolated saves ~N tokens per run, but the role loses them." Recommend native. When they have no isolated runs yet, the number is the median first-turn input of their native runs: say that isolation would save some part of it, not all of it. When there are no runs at all, say there is no number yet, and recommend native until there is.
 
 ## 4. Write it
 
@@ -70,6 +70,6 @@ Each proposal has three parts: the change, a worked example from their facts, an
 
 ## 5. Say what applies when
 
-- Codex, claude-code and opencode changes, access and isolation included, apply at the next dispatch, even in a run already under way.
+- Codex, claude-code, opencode, Cursor, grok and Antigravity changes, access and isolation included, apply at the next dispatch, even in a run already under way. Isolating Cursor needs `CURSOR_API_KEY` in the environment catherd runs in, isolating grok `XAI_API_KEY`, and isolating Antigravity `GEMINI_API_KEY`; `profile_validate` refuses each without. A read-only role (reviewer, architect, researcher) can run on Antigravity only isolated: agy has no read-only mode.
 - An agent listed in `newSessionNeededFor` applies from the next Claude Code session: Claude Code reads agent files when a session starts. Other Claude changes apply now.
 - Editing a profile that is not the active one writes its agent files but links none; they apply once it becomes active (`catherd profile use <name>`), or in a repo it is bound to (`catherd profile use <name> --repo`).

package/src/adapters/access.ts

@@ -1,25 +1,35 @@
 import { existsSync, mkdtempSync, realpathSync, rmSync } from "node:fs";
 import { homedir, tmpdir } from "node:os";
 import { join } from "node:path";
-import { locksDir } from "../infra/paths.ts";
+import { configDir, dataDir, locksDir } from "../infra/paths.ts";
 import type { AccessShell } from "./backend.ts";
 import { runCli } from "./cli.ts";
 
 /** How long one access probe may run: an HTTPS fetch through a slow proxy included. */
 export const probeShell = { timeoutMs: 20_000 };
 
+/** `argv` as one POSIX shell command line: each piece single-quoted, an embedded `'` as `'\''`. */
+export const shellLine = (argv: string[]): string =>
+  argv.map((a) => `'${a.replaceAll("'", "'\\''")}'`).join(" ");
+
 /**
  * A probe shell from a fresh scratch dir: `prefix` is the argv before `sh -c <script> _ <args…>` (empty for
- * a backend whose worker shell runs unsandboxed).
+ * a backend whose worker shell runs unsandboxed). `oneLine`: the runner joins its args with spaces and runs
+ * them in a shell, so `sh -c …` goes after `prefix` as one quoted command line.
  */
-export function scratchShell(how: string, prefix: string[]): AccessShell {
+export function scratchShell(how: string, prefix: string[], o: { oneLine?: boolean } = {}): AccessShell {
   const cwd = mkdtempSync(join(realTmpdir(), "catherd-probe-"));
   const [bin, ...rest] = prefix.length ? prefix : ["sh"];
   const sh = prefix.length ? ["sh"] : [];
   return {
     how,
-    run: (script, args) =>
-      runCli(bin as string, [...rest, ...sh, "-c", script, "_", ...args], { ...probeShell, cwd }),
+    run: (script, args) => {
+      const cmd = [...sh, "-c", script, "_", ...args];
+      return runCli(bin as string, [...rest, ...(o.oneLine ? [shellLine(cmd)] : cmd)], {
+        ...probeShell,
+        cwd,
+      });
+    },
     close: () => rmSync(cwd, { recursive: true, force: true }),
   };
 }
@@ -63,6 +73,23 @@ const effectiveCaches = (query: ToolQuery): string[] =>
     ? (asked ??= [...query("go", ["env", "GOCACHE", "GOMODCACHE"]), ...query("pnpm", ["store", "path"])])
     : [...query("go", ["env", "GOCACHE", "GOMODCACHE"]), ...query("pnpm", ["store", "path"])];
 
+/** Each toolchain cache's env variable and its value: the env's, else the tool's default under `home`. */
+function cacheVars(env: Record<string, string | undefined>, home: string): Record<string, string> {
+  const mac = process.platform === "darwin";
+  const cache = env.XDG_CACHE_HOME || join(home, ".cache");
+  const data = env.XDG_DATA_HOME || join(home, ".local", "share");
+  const gopath = (env.GOPATH || join(home, "go")).split(":")[0] as string;
+  return {
+    GOCACHE: env.GOCACHE || (mac ? join(home, "Library", "Caches", "go-build") : join(cache, "go-build")),
+    GOMODCACHE: env.GOMODCACHE || join(gopath, "pkg", "mod"),
+    npm_config_store_dir:
+      env.npm_config_store_dir ||
+      (mac ? join(home, "Library", "pnpm", "store") : join(data, "pnpm", "store")),
+    BUN_INSTALL_CACHE_DIR: env.BUN_INSTALL_CACHE_DIR || join(home, ".bun", "install", "cache"),
+    npm_config_cache: env.npm_config_cache || join(home, ".npm"),
+  };
+}
+
 /**
  * The toolchain caches a worker's checks write, where they exist: Go's build and module caches and the pnpm store
  * (as the tools themselves report them, else their defaults), Bun's install cache and npm's cache. Without them a
@@ -73,21 +100,31 @@ export function toolchainCaches(
   home = env.HOME || homedir(),
   query: ToolQuery = queryTool,
 ): string[] {
-  const mac = process.platform === "darwin";
-  const cache = env.XDG_CACHE_HOME || join(home, ".cache");
-  const data = env.XDG_DATA_HOME || join(home, ".local", "share");
-  const gopath = (env.GOPATH || join(home, "go")).split(":")[0] as string;
-  const paths = [
-    ...effectiveCaches(query),
-    env.GOCACHE || (mac ? join(home, "Library", "Caches", "go-build") : join(cache, "go-build")),
-    env.GOMODCACHE || join(gopath, "pkg", "mod"),
-    env.npm_config_store_dir || (mac ? join(home, "Library", "pnpm", "store") : join(data, "pnpm", "store")),
-    env.BUN_INSTALL_CACHE_DIR || join(home, ".bun", "install", "cache"),
-    env.npm_config_cache || join(home, ".npm"),
-  ];
+  const paths = [...effectiveCaches(query), ...Object.values(cacheVars(env, home))];
   return [...new Set(paths.filter((p) => existsSync(p)).map(realOr))];
 }
 
+/**
+ * Spec 1.3 §4.4: the env of an isolated worker whose CLI is isolated by a HOME of catherd's (Cursor reads
+ * `~/.claude` whatever its own config dir says). catherd's own config and data stay put, so a `catherd lock`
+ * in the worker takes the same lock dir, and so do the toolchain caches `writableRoots` grants, which would
+ * otherwise start cold under the new HOME, where no sandbox lets the worker write.
+ * ponytail: only these caches follow; other dotfiles (~/.npmrc, ~/.gitconfig, ~/.cargo) stay behind.
+ */
+export function movedHomeEnv(
+  home: string,
+  env: Record<string, string | undefined> = process.env,
+  realHome = env.HOME || homedir(),
+): Record<string, string> {
+  return {
+    HOME: home,
+    CATHERD_CONFIG_DIR: configDir(),
+    CATHERD_DATA_DIR: dataDir(),
+    GOPATH: env.GOPATH || join(realHome, "go"),
+    ...cacheVars(env, realHome),
+  };
+}
+
 /**
  * The directories a workspace-write worker writes besides the repo: the heavy-lock dir, the temp dir and the
  * toolchain caches that exist, real paths.

package/src/adapters/all.ts

@@ -1,8 +1,14 @@
+import { antigravityAdapter } from "./antigravity/index.ts";
 import { claudeCodeAdapter } from "./claude-code/index.ts";
 import { codexAdapter } from "./codex/index.ts";
+import { cursorAdapter } from "./cursor/index.ts";
+import { grokAdapter } from "./grok/index.ts";
 import { opencodeAdapter } from "./opencode/index.ts";
 import { registerAdapter } from "./registry.ts";
 
 registerAdapter(codexAdapter);
 registerAdapter(claudeCodeAdapter);
 registerAdapter(opencodeAdapter);
+registerAdapter(cursorAdapter);
+registerAdapter(grokAdapter);
+registerAdapter(antigravityAdapter);