catherd-cli 1.2.1 → 1.4.0

package/README.md

@@ -6,19 +6,18 @@
  (")(")
 ```
 
-Autopilot builds from your own Claude Code session. Claude plans and verifies, Codex, opencode or
-headless Claude Code workers write the code, and [Jev](https://typesafe.ai) picks the model and effort for each piece
+Autopilot builds from your own Claude Code or native Codex session. Your profile routes the architect, verifier and workers to their backends; Codex, opencode, Cursor, Grok Build,
+Antigravity or headless Claude Code processes write the code, and [Jev](https://typesafe.ai) picks the model and effort for each piece
 of work, climbing a ladder only when a cheaper rung falls short.
 
 - **Your harness, as you set it up.** Every role runs in its vendor's own CLI with your config,
   hooks, skills and `AGENTS.md`. Isolation is an opt-in toggle per profile and harness, for when
   you'd rather save the tokens your customizations cost.
-- **Claude roles stay native.** `claude:` rungs run as ordinary Claude Code subagents; Codex,
-  opencode and headless `claude-code:` rungs run through catherd's MCP server.
+- **Claude roles stay native on Claude Code.** `claude:` rungs require that host and run as ordinary Claude Code subagents; Codex,
+  opencode, Cursor, Grok Build, Antigravity and headless `claude-code:` rungs run through catherd's MCP server.
 - **Survives restarts.** Workers are detached processes writing straight to disk, so a dropped
   MCP server never loses a run.
-- **Results come to you.** Roles run side by side while you keep talking to Claude; each one that finishes
-  arrives in the session as a message, like a native subagent's notice, and `peek` shows how a run stands.
+- **Results come to you.** Roles run side by side while you keep talking. Claude Code uses its peer inbox; Codex uses queued next input through its existing native server. A busy Codex conversation processes it after the active turn. Queue acceptance and result collection are separate; `peek` shows how a run stands.
 - **A protocol the tools enforce.** Every lane is routed, every brief ends with the reply contract, and a
   milestone lands only after a reviewer and a verifier passed it. Workers can run their own checks (network,
   loopback, Docker, the lock dir); an owner question parks one milestone, not the run.
@@ -28,28 +27,100 @@ of work, climbing a ladder only when a cheaper rung falls short.
 ## Requirements
 
 - [Bun](https://bun.sh) ≥ 1.4
-- [Claude Code](https://claude.com/claude-code) (desktop app or CLI)
+- An orchestration host: [Claude Code](https://claude.com/claude-code), or native [Codex](https://github.com/openai/codex) CLI/Desktop with plugin support and the existing native queue endpoint (installed CLI 0.159.2 verified for packaging; queue support is feature-detected)
 - At least one worker backend, logged in:
   - [Codex CLI](https://github.com/openai/codex) 0.157.0 or newer
   - [opencode](https://opencode.ai) **v2**, 2.0.16 or newer: `curl -fsSL https://opencode.ai/v2/install | bash`
     (the npm package `opencode-ai` is v1 and is not supported)
   - Claude Code's `claude` CLI 2.1.282 or newer, for headless `claude-code:` rungs
+  - Cursor's CLI, `cursor-agent` 2026.09.28 or newer: `curl https://cursor.com/install -fsS | bash`, then
+    `cursor-agent login` (below)
+  - Grok Build's `grok` 1.0.44 or newer: `curl -fsSL https://x.ai/cli/install.sh | bash`, then `grok login`
+    (below)
+  - Google's Antigravity CLI, `agy` 1.2.13 or newer: `brew install --cask antigravity-cli`, or
+    `curl -fsSL https://antigravity.google/cli/install.sh | bash` (with `~/.local/bin` on PATH), then run `agy` once
+    to sign in (below)
 - Optional: a TypeSafe API key for Jev, in `TYPESAFE_API_KEY` or saved by `catherd init`
 - Optional: a free [Artificial Analysis](https://artificialanalysis.ai) API key for more scores, in
   `ARTIFICIAL_ANALYSIS_API_KEY` or saved by `catherd init`; its numbers are read for you alone and never shipped
 
 `catherd doctor` checks each backend's version and login and prints the fix for anything missing. The default
 profile runs its workers on Codex; without Codex, doctor's fix also names how to move those roles to a backend
-you have (`/catherd-setup` in Claude Code, or `catherd profile set roles.<role>.rungs <rung>`).
+you have (`/catherd-setup`, or `catherd profile set roles.<role>.rungs <rung> --host <codex|claude-code>`). Codex-only setup does not require or configure Claude; enabled selected roles and reachable failover decide optional dependencies. Doctor sends nothing by default; `--test-push` is an explicit smoke send from a validated host session.
+
+### Cursor
+
+A Cursor rung names Cursor's own model slug, with the effort as the slug's suffix: `cursor:gpt-6-sol#xhigh` runs
+`gpt-6-sol-xhigh`, and `#default` runs the bare slug (`cursor:composer-2.5#default`). `cursor-agent models` lists
+what your account offers; `catherd catalog refresh` reads it. No profile uses Cursor until you put a rung on it.
+Its Composer and Grok models bill from Cursor's own pool, the other models at API rates after your plan's included
+usage, so a Cursor rung ranks as `metered`.
+
+- **Native** (the default) runs with your login and your Cursor setup. It also loads your Claude Code hooks,
+  skills and plugins, which Cursor reads from `~/.claude`. `workspace-write` runs in Cursor's sandbox under your
+  `~/.cursor/sandbox.json`, which catherd never edits: `catherd doctor` shows which of a worker's checks (the lock
+  dir, temp, loopback, the network, Docker) it allows. `read-only` runs Cursor's ask mode, which asks the model not
+  to write but cannot stop it (`advisory`).
+- **Isolated** (`catherd profile set harness.cursor.isolated true`) needs `CURSOR_API_KEY`, since a login cannot
+  move to another home. catherd runs Cursor under its own HOME with its own `sandbox.json`, which gives a worker
+  catherd's writable roots.
+
+### Grok Build
+
+A Grok rung names grok's model and effort: `grok:grok-4.6#high` runs `grok -m grok-4.6 --effort high`, and
+`#default` passes no effort. `grok models` lists your models but no efforts, so catherd offers Grok Build's `low`
+to `xhigh`; `catherd catalog refresh` reads the list. No profile uses grok until you put a rung on it. A Grok login
+(SuperGrok, X Premium+) bills your subscription and `XAI_API_KEY` bills per token: `catherd doctor` says when a
+profile's `billing.grok` differs from your login. On a usage limit, a Grok rung fails over to the same model on
+Cursor, and a Cursor Grok rung to grok, unless the profile names another stand-in.
+
+- **Native** (the default) runs with your login and your grok setup. It also loads your Claude Code plugins,
+  agents, skills, hooks and permission rules, and your Cursor rules and MCP. `workspace-write` runs in grok's
+  sandbox under catherd's own profile, `catherd-ws`, which lets a worker write the lock dir, temp and the
+  toolchain caches: catherd adds its marked `[profiles.catherd-*]` tables to `~/.grok/sandbox.toml` and leaves the
+  rest of that file alone. `read-only` runs grok's kernel `read-only` profile. On a Mac whose
+  `/var/run/docker.sock` is a link (Docker Desktop, OrbStack, Colima) grok refuses that profile, so catherd gives
+  the role only the read tools instead (`advisory`); `catherd doctor` says which applies. On macOS no grok profile
+  controls the network.
+- **Isolated** (`catherd profile set harness.grok.isolated true`) needs `XAI_API_KEY`: catherd never copies your
+  grok login, whose refresh token rotates. catherd runs grok under its own HOME with its own `sandbox.toml`.
+
+grok keeps a session on the access it started with, so catherd refuses to resume one under another access.
+
+### Antigravity
+
+An Antigravity rung names the model `agy models` lists, without an effort suffix; the effort is agy's `--effort`
+(`low`, `medium`, `high` or `max`), and `#default` passes none: `antigravity:gemini-3.8-flash#low`. No profile uses
+Antigravity until you put a rung on it. catherd never runs `agy -p` while agy is signed out, since agy would open a
+browser and wait; `catherd doctor` says so, with the fix. A Google login draws on your plan's quota (doctor shows
+what is left); `GEMINI_API_KEY` bills the Gemini API project. Gemini rungs fail over between Antigravity and Cursor
+when either runs out, unless your profile names another stand-in.
+
+- **Native** (the default) runs with your Google login and your `~/.gemini` settings, which the Antigravity desktop
+  app shares and catherd never edits. `workspace-write` runs shell commands in agy's sandbox, which reaches the
+  workspace, temp and build caches but no network unless your own `read_url` rules grant it; the file tools are not
+  confined (`advisory`). agy has no read-only mode, so a read-only role (the reviewer, the architect) cannot run on
+  native Antigravity: `profile validate` refuses it.
+- **Isolated** (`catherd profile set harness.antigravity.isolated true`) needs `GEMINI_API_KEY`. catherd runs agy
+  under its own HOME, with its own settings: the Gemini API as the provider, write and command deny rules for
+  read-only roles, and catherd's writable roots and the network for `workspace-write`.
+
+Whether Google's plan terms allow an orchestrator to drive `agy` on a consumer plan is not settled here. The API-key
+route is the one meant for automation; check the terms before you rely on a plan login.
 
 ## Install
 
+The published `v1.3.0` marketplace and global `catherd-cli@1.3.0` remain the stable Claude integration. The native Codex feature in this checkout is unreleased and held pending actual packaged CLI/Desktop/Claude acceptance. A matching version alone does not prove that the feature core ran. Use the [local packaged acceptance procedure](docs/dev/live-verification.md#14-native-codex-packaging-and-completion-acceptance) for this candidate; do not publish or update the remote tag to test it.
+
+### Claude Code
+
 ```sh
 bun add -g catherd-cli
-catherd init
+catherd init --host claude-code
 ```
 
-The npm package is `catherd-cli`; the command it installs is `catherd`. `bunx catherd-cli init` works too: `init`
+The npm package is `catherd-cli`; the command it installs is `catherd`. `bunx catherd-cli init --host claude-code`
+works too (a terminal with no host evidence cannot pick the architect/verifier defaults, so name the host): `init`
 installs the global command at its own version (`--no-global` skips it) and says `installing catherd…` before
 it does, though the first `bunx` resolve itself prints nothing for up to half a minute. `init` asks for the
 optional Jev key and the optional Artificial Analysis key, syncs the public model sources, writes the default
@@ -65,40 +136,76 @@ claude plugin install catherd@catherd
 ```
 
 Start a new Claude Code session so the plugin, its MCP server and the agent files load, then check with
-`catherd doctor`. Run it once from inside that session too (ask Claude to run `catherd doctor`): its `push` row
-then checks that finished roles can reach the session.
+`catherd doctor --host claude-code`. From inside that session, explicit `catherd doctor --test-push` sends a labeled smoke notice; inspect actual processing separately from transport acceptance.
+
+### Native Codex — after the feature release
+
+These remote commands become feature installation guidance only after the held release is published:
+
+```sh
+bun add -g catherd-cli
+catherd init --host codex
+codex plugin marketplace add 47vigen/catherd
+codex plugin add catherd@catherd
+codex mcp list --json
+```
+
+Restart the Codex host to load the installed shared skills and server. Native CLI accepts `owner/repo[@ref]` and a local marketplace path. The supported marketplace uses `.claude-plugin/marketplace.json` with its plugin subdirectory; the native manifest is `plugin/.codex-plugin/plugin.json`, with `skills: "./skills/"` and `mcpServers: "./.mcp-codex.json"`. Installed native resolution supplies `command: "sh"`, `args: ["./bin/catherd-mcp"]`, `cwd: <installed plugin root>` and `CATHERD_ORCHESTRATION_HOST=codex`. No Claude root macro or synthetic session ID belongs in that declaration. The shared launcher/core remains versioned together with both manifests.
+
+Pass the actual project `repo` to repository-aware MCP profile/setup/catalog calls, because the server cwd is the plugin root. `run_start(repo, ...)` already requires it. Terminal `init` and `doctor` accept `--host codex|claude-code|auto`; selecting a terminal host chooses setup checks without inventing a conversation owner.
 
 ## Use
 
-In Claude Code:
+In either supported host, use the installed shared skills through that host's skill invocation and tool discovery:
 
 - `/catherd <task>` runs a task on autopilot; `/catherd` alone resumes the latest run. While it runs, keep
-  talking: each finished role arrives as a message from catherd, and "how is it going?" gets a `peek`.
+  talking: completion arrives through the host's transport, and "how is it going?" gets a `peek`.
 - `/catherd-setup` tunes your profile in conversation: which models and efforts each role may
   use, cost or speed, isolation, budget and failover.
 
+`route` chooses the backend for every role. Native `claude:` uses Claude Code's `Agent` and `record_agent_run` only on Claude Code; process backends, including Codex architect/verifier, use `dispatch` followed by `result`. Omitted Codex architect/verifier choices are exactly `codex:gpt-6.1-sol#high` / `codex:gpt-6.1-sol#low`; omitted Claude choices retain their existing native defaults. Verify that exact model ID against native catalog discovery and validation; if spelling differs, resolve the mismatch explicitly with the owner, never silently normalize or substitute, and retain high/low efforts. Explicit ladders and materialized profiles are preserved, without silently converting `claude:` to `claude-code:`. To opt into host defaults, review and save the narrow reset:
+
+```sh
+catherd profile reset-host-defaults <profile> --host codex --preview --json > /tmp/catherd-host-defaults-review.json
+# Review the diff, effective defaults, errors and warnings.
+catherd profile reset-host-defaults <profile> --host codex --expect /tmp/catherd-host-defaults-review.json --json
+```
+
+It removes only architect/verifier `rungs` and `defaultRung`; every other setting stays intact. Run profile CLI commands from the project directory and choose the actual profile name. Use `--host claude-code` for Claude defaults.
+
+Completion never uses `await_results` or model polling. Codex sends through `codex queue --remote unix://` to the validated original thread: idle wake and ordered busy follow-up are the native semantics, without Claude's urgent tool-round priority. A receipt proves queue acceptance, not observed generation or collection; unloaded/interrupted hosts may retain input. Only `result` collects the actual stored record. Explicit `peek(run)` adopts the run for the current host/session; `status` and `result` do not. Unknown/conflicting identity never owns or pushes.
+
+Recover unread work with `peek` and `result`. Accepted or ambiguous attempts are not automatically resent. When ambiguity needs a deliberate retry, run from the current owner's validated host session:
+
+```sh
+catherd runs retry-push <run> <name> --event '<exact event ID from peek/status>' --acknowledge-possible-duplicate
+```
+
+This acknowledges possible duplicate native input; an accepted receipt still suppresses a repeat for that owner/event. Without a supported history reconciliation API, retain ambiguity until an explicit decision. Notices preserve all event IDs, including coalesced events; repeated input means idempotent reads, never another dispatch or landing. Stored records and independent reviewer/verifier gates are authoritative. Profile notification moments use an available host facility, without inventing a Codex notification tool or scheduled wake.
+
 In a terminal:
 
-| Command                                                                                   | What it does                                                                                        |
-| ----------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------- |
-| `catherd`                                                                                 | The dashboard: Status, Profiles and Runs (below)                                                    |
-| `catherd init [--no-input] [--no-global] [--profile <p>]`                                 | First-run setup; installs the global `catherd` at its own version unless `--no-global`              |
-| `catherd doctor [--json]`                                                                 | Readiness report, one row per check with its fix; exits 3 when not ready                            |
-| `catherd profile list\|show\|use [--repo]\|new [--from <p>]\|copy\|rm\|diff\|validate`    | Profiles; `use --repo` binds one to the repo you are in                                             |
-| `catherd profile use --repo --clear`                                                      | Unbinds the repo you are in; it runs on the active profile again                                    |
-| `catherd profile set <path> <value> [--profile <p>]`                                      | One field, e.g. `roles.verifier.access read-only`, `roles.worker.network false`, `budget.usd 20`    |
-| `catherd status [run]`, `catherd watch [--once] [--interval <s>]`                         | Where runs stand, grouped by the Claude Code session that drove them                                |
-| `catherd runs list [--repo <path>]\|show <id> [--debug [--name <n>]]\|cancel <id> <name>` | Past runs, by session; `--debug` adds exit.json and the stderr and event tails, `--name` one role's |
-| `catherd catalog refresh\|list [--backend <b>] [--role <r>] [--text <t>] [--scored]`      | The models catherd can place, filtered                                                              |
-| `catherd catalog sync [--force] [--unmatched]`                                            | Fetches the public model facts and scores now (below); `--unmatched` lists ids no model matched     |
-| `catherd catalog treat-like <rung> <like>`                                                | Scores an unscored rung as a scored one                                                             |
-| `catherd catalog treat-like --suggest <rung>\|--clear <rung>\|--reset`                    | The three nearest stand-ins for a rung; removes one or every mapping of yours                       |
-| `catherd lock [--slots N] -- <cmd>`                                                       | Runs a heavy command behind the machine-wide semaphore, in its own session (no /dev/tty)            |
-| `catherd mcp`                                                                             | The MCP server on stdio; the plugin starts it, you never need to                                    |
-| `catherd capture-fixtures [--backend <b>] [--out <dir>]`                                  | Contributors: records sanitized test fixtures from real runs (see CONTRIBUTING.md)                  |
+| Command                                                                                     | What it does                                                                                        |
+| ------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------- |
+| `catherd`                                                                                   | The dashboard: Status, Profiles and Runs (below)                                                    |
+| `catherd init [--host codex\|claude-code\|auto] [--no-input] [--no-global] [--profile <p>]` | First-run setup; installs the global `catherd` at its own version unless `--no-global`              |
+| `catherd doctor [--host codex\|claude-code\|auto] [--test-push] [--json]`                   | Readiness and capability report; no send unless explicit smoke; exits 3 when not ready              |
+| `catherd profile list\|show\|use [--repo]\|new [--from <p>]\|copy\|rm\|diff\|validate`      | Profiles; `use --repo` binds one to the repo you are in                                             |
+| `catherd profile use --repo --clear`                                                        | Unbinds the repo you are in; it runs on the active profile again                                    |
+| `catherd profile set <path> <value> [--profile <p>]`                                        | One field, e.g. `roles.verifier.access read-only`, `roles.worker.network false`, `budget.usd 20`    |
+| `catherd status [run]`, `catherd watch [--once] [--interval <s>]`                           | Where runs stand, grouped by host and session; read-only ownership                                  |
+| `catherd runs list [--repo <path>]\|show <id> [--debug [--name <n>]]\|cancel <id> <name>`   | Past runs, by session; `--debug` adds exit.json and the stderr and event tails, `--name` one role's |
+| `catherd catalog refresh\|list [--backend <b>] [--role <r>] [--text <t>] [--scored]`        | The models catherd can place, filtered                                                              |
+| `catherd catalog sync [--force] [--unmatched]`                                              | Fetches the public model facts and scores now (below); `--unmatched` lists ids no model matched     |
+| `catherd catalog treat-like <rung> <like>`                                                  | Scores an unscored rung as a scored one                                                             |
+| `catherd catalog treat-like --suggest <rung>\|--clear <rung>\|--reset`                      | The three nearest stand-ins for a rung; removes one or every mapping of yours                       |
+| `catherd knowledge show\|add "<line>"\|path [--repo <path>]`                                | The repo's knowledge.md, which new runs read; `add` appends a fact of yours, marked "by hand"       |
+| `catherd lock [--slots N] -- <cmd>`                                                         | Runs a heavy command behind the machine-wide semaphore, in its own session (no /dev/tty)            |
+| `catherd mcp`                                                                               | The MCP server on stdio; the plugin starts it, you never need to                                    |
+| `catherd capture-fixtures [--backend <b>] [--out <dir>]`                                    | Contributors: records sanitized test fixtures from real runs (see CONTRIBUTING.md)                  |
 
 A profile command without a profile name (`show`, `set`, `diff`, `validate`), like the MCP profile tools, acts
-on the profile the repo you are in runs on: the one bound to it, else the active one. Run them as
+on the profile the repo you are in runs on: the one bound to it, else the active one. Pass `repo` explicitly to MCP tools; profile CLI commands accept `--host` for effective defaults. Run them as
 `bunx catherd-cli <command>` when catherd is not installed globally. Every read command takes `--json`; a bare `catherd runs` is `catherd runs list`. Exit codes: 0 ok, 1 error, 2 usage, 3 not ready, 130 interrupted; an error prints
 `error E_CODE: message` and a `fix:` line. `--verbose` (or `CATHERD_LOG=debug`) logs more to
 `~/.local/share/catherd/logs/`, kept for 7 days with secrets redacted. The dashboard takes `--plain` (ASCII, no colour)
@@ -106,7 +213,7 @@ and `--reduced-motion`; `doctor` and `init` take `--plain` for ASCII glyphs too.
 
 Model facts and scores also come from public sources: models.dev, OpenRouter, LiteLLM, Arena (LMArena), Vectara's
 hallucination leaderboard and Epoch AI, plus Artificial Analysis when you give `catherd init` a free key. The MCP
-server syncs them in the background when a Claude Code session starts (each source at most every 12 hours, never
+server syncs them in the background when a host session starts (each source at most every 12 hours, never
 delaying the session), `init` syncs them, and `catherd catalog sync` (or the `catalog_sync` tool) does it on demand.
 Each answer is kept in `~/.local/share/catherd/sources/`; a source that fails keeps its last good answer, and with no
 network and no sync at all catherd routes on the scores it ships. Those are the keyless sources' values, refreshed
@@ -133,6 +240,9 @@ Run data lives in `~/.local/share/catherd/`, config in `~/.config/catherd/` (bot
 | `TYPESAFE_API_KEY`            | The Jev key, instead of the one `catherd init` saves                                                        |
 | `ARTIFICIAL_ANALYSIS_API_KEY` | An Artificial Analysis key for `catalog sync`, instead of the one `catherd init` saves                      |
 | `CATHERD_NO_SYNC`             | `1`: no automatic sync of the public sources (at MCP server start and in `init`); `catalog sync` still runs |
+| `CURSOR_API_KEY`              | Cursor's API key: logs `cursor-agent` in, and is what an isolated Cursor role runs on                       |
+| `XAI_API_KEY`                 | xAI's API key: logs `grok` in when no Grok login is active, and is what an isolated grok role runs on       |
+| `GEMINI_API_KEY`              | The Gemini API key an isolated Antigravity role runs on (agy reads it only with its Gemini API provider)    |
 | `CATHERD_HOME`                | Puts config and data under `$CATHERD_HOME/config` and `$CATHERD_HOME/data` instead of XDG                   |
 | `CATHERD_LOG`                 | Log level: `off`, `error`, `warn`, `info` (default) or `debug` (what `--verbose` sets)                      |
 | `CATHERD_LOCK_SLOTS`          | `catherd lock`'s slot count when `--slots` is not given (before the profile's `lock.heavy`)                 |
@@ -148,7 +258,7 @@ tests (CONTRIBUTING.md has the rest).
 
 `catherd` opens three tabs: **1 Status** (every check with its fix; `y` copies the fix, `r` checks again),
 **2 Profiles** (one tree per profile: roles with their access, default rung, models and efforts, then routing,
-harness, budget, failover, timeouts and notify) and **3 Runs** (the Claude Code sessions that drove your runs, newest
+harness, budget, failover, timeouts and notify) and **3 Runs** (the host sessions that drove your runs, newest
 first; a session opens on its runs, their milestones and every role with its rung, status, time and last event, live
 ones first; a milestone opens on its digest (what landed, lanes and climbs, reviewer and verifier, tokens); a role
 opens on its brief, reply and record; the open screen redraws as run files change; `esc` goes back,
@@ -207,8 +317,8 @@ Code session. The details are in [MIGRATION.md](MIGRATION.md).
 
 ## Contributing
 
-See [CONTRIBUTING.md](CONTRIBUTING.md). CI runs the checks on Linux and macOS, on Bun 1.4.0 and the latest Bun;
-what CI cannot run is in [`docs/dev/live-verification.md`](docs/dev/live-verification.md). Report security issues
+See [CONTRIBUTING.md](CONTRIBUTING.md). This feature's checks and acceptance are local, with release held; do not request or re-enable CI for it. The documented historical CI matrix uses Linux/macOS and Bun 1.4.0/latest;
+live verification is in [`docs/dev/live-verification.md`](docs/dev/live-verification.md). Report security issues
 privately, as [SECURITY.md](SECURITY.md) describes. Everyone taking part follows the
 [Code of Conduct](CODE_OF_CONDUCT.md).
 

package/catalog/models.json

@@ -1,10 +1,12 @@
 {
   "schema": 1,
-  "version": "2026-09-25",
+  "version": "2026-10-01",
   "sources": {
     "claude": "https://platform.claude.com/docs/en/models/overview (2026-09-25); efforts https://platform.claude.com/docs/en/build-with-claude/effort; prices https://platform.claude.com/docs/en/about-claude/pricing",
-    "codex": "codex debug models --bundled, Codex CLI 0.157.0 (2026-09-25); prices https://developers.openai.com/api/docs/pricing; plan weights https://learn.chatgpt.com/docs/pricing",
-    "opencode": "opencode models <provider> --verbose on 1.18.32 and the v2 model.list (2026-09-25); https://opencode.ai/docs/zen, https://opencode.ai/docs/go"
+    "codex": "codex debug models --bundled, Codex CLI 0.157.0 (2026-09-25), gpt-6.1-sol from Codex CLI 0.159.2 (2026-10-01); prices https://developers.openai.com/api/docs/pricing; plan weights https://learn.chatgpt.com/docs/pricing",
+    "opencode": "opencode models <provider> --verbose on 1.18.32 and the v2 model.list (2026-09-25); https://opencode.ai/docs/zen, https://opencode.ai/docs/go",
+    "cursor": "cursor-agent models on 2026.09.28-64d2043 (research 2026-09-29 §2.4; ids to confirm in the live kit, docs/dev/live-verification.md §11); prices https://openrouter.ai/api/v1/models and https://models.dev/api.json (2026-09-28)",
+    "antigravity": "agy 1.2.13 docs (models, and slugs such as gemini-3.8-flash-high; research 2026-09-29 §4.5) and the Gemini API's thinking levels; ids and efforts to confirm in the live kit, docs/dev/live-verification.md §13"
   },
   "backends": {
     "codex": {
@@ -40,6 +42,24 @@
         "ultra": "maximum reasoning with automatic task delegation to parallel subagents; never in a default ladder"
       }
     },
+    {
+      "id": "gpt-6.1-sol",
+      "name": "GPT-6.1 Sol",
+      "vendor": "openai",
+      "releaseDate": "2026-09-29",
+      "capabilities": { "toolUse": true, "imageIn": true, "reasoning": true },
+      "price": { "input": 2, "cached": 0.1, "output": 10 },
+      "on": {
+        "codex": {
+          "id": "gpt-6.1-sol",
+          "efforts": ["low", "medium", "high", "xhigh", "max", "ultra"],
+          "context": 272000
+        }
+      },
+      "notes": {
+        "ultra": "maximum reasoning with automatic task delegation to parallel subagents; never in a default ladder"
+      }
+    },
     {
       "id": "gpt-6-sol",
       "name": "GPT-6 Sol",
@@ -58,7 +78,8 @@
           "id": "opencode/gpt-6-sol",
           "efforts": ["none", "low", "medium", "high", "xhigh", "max"],
           "context": 1050000
-        }
+        },
+        "cursor": { "id": "gpt-6-sol", "efforts": ["low", "high", "xhigh"], "context": 200000 }
       },
       "notes": {
         "ultra": "maximum reasoning with automatic task delegation to parallel subagents; never in a default ladder"
@@ -87,7 +108,8 @@
           "id": "opencode-go/gpt-6-luna",
           "efforts": ["none", "low", "medium", "high", "xhigh", "max"],
           "context": 1050000
-        }
+        },
+        "cursor": { "id": "gpt-6-luna", "efforts": ["high"], "context": 200000 }
       }
     },
     {
@@ -205,6 +227,11 @@
           "id": "opencode/claude-opus-5-5",
           "efforts": ["low", "medium", "high", "xhigh", "max"],
           "context": 1000000
+        },
+        "cursor": {
+          "id": "claude-opus-5-5",
+          "efforts": ["low", "medium", "high", "xhigh", "max"],
+          "context": 200000
         }
       },
       "notes": { "effort": "the API default effort is medium" }
@@ -261,6 +288,122 @@
         "opencode": { "id": "opencode/claude-haiku-4-5", "efforts": ["high", "max"], "context": 200000 }
       },
       "notes": { "effort": "no effort parameter in Claude Code: its only rung there is #default" }
+    },
+    {
+      "id": "grok-4-7",
+      "name": "Grok 4.7",
+      "vendor": "xai",
+      "releaseDate": "2026-09-21",
+      "capabilities": { "toolUse": true, "imageIn": true, "reasoning": true },
+      "price": { "input": 2, "cached": 0.5, "output": 6 },
+      "on": {
+        "grok": { "id": "grok-4.7", "efforts": ["low", "medium", "high", "xhigh"], "context": 500000 },
+        "cursor": { "id": "grok-4.7", "efforts": ["low", "medium", "high", "xhigh"], "context": 200000 }
+      },
+      "notes": {
+        "pool": "a Cursor Model in Cursor: billed from Cursor's own pool (research §2.4)",
+        "effort": "grok lists no efforts: Grok Build's effort names, low to xhigh (research §3.4, §5; live-verification §12)"
+      }
+    },
+    {
+      "id": "grok-4-6",
+      "name": "Grok 4.6",
+      "vendor": "xai",
+      "releaseDate": "2026-08-12",
+      "capabilities": { "toolUse": true, "imageIn": true, "reasoning": true },
+      "price": { "input": 2, "cached": 0.5, "output": 6 },
+      "on": {
+        "grok": { "id": "grok-4.6", "efforts": ["low", "medium", "high", "xhigh"], "context": 500000 },
+        "cursor": {
+          "id": "cursor-grok-4.6",
+          "efforts": ["low", "medium", "high", "xhigh"],
+          "context": 200000
+        }
+      },
+      "notes": {
+        "pool": "a Cursor Model in Cursor: billed from Cursor's own pool (research §2.4)",
+        "effort": "grok lists no efforts: Grok Build's effort names, low to xhigh (research §3.4, §5; live-verification §12)"
+      }
+    },
+    {
+      "id": "grok-4-5",
+      "name": "Grok 4.5",
+      "vendor": "xai",
+      "releaseDate": "2026-07-08",
+      "capabilities": { "toolUse": true, "imageIn": true, "reasoning": true },
+      "price": { "input": 2, "cached": 0.3, "output": 6 },
+      "on": {
+        "grok": { "id": "grok-4.5", "efforts": ["low", "medium", "high", "xhigh"], "context": 500000 },
+        "cursor": { "id": "cursor-grok-4.5", "efforts": ["low", "medium", "high"], "context": 200000 }
+      },
+      "notes": {
+        "pool": "a Cursor Model in Cursor: billed from Cursor's own pool (research §2.4)",
+        "effort": "grok lists no efforts: Grok Build's effort names, low to xhigh (research §3.4, §5; live-verification §12)"
+      }
+    },
+    {
+      "id": "composer-2-5",
+      "name": "Composer 2.5",
+      "vendor": "cursor",
+      "capabilities": { "toolUse": true, "imageIn": true, "reasoning": true },
+      "price": { "input": 2, "cached": 0.5, "output": 6 },
+      "on": { "cursor": { "id": "composer-2.5", "efforts": [], "context": 200000 } },
+      "notes": {
+        "price": "no keyless source prices Composer (research §5); Grok 4.7's, the same Cursor pool, stands in",
+        "effort": "no effort: its only rung is #default"
+      }
+    },
+    {
+      "id": "gemini-3-8-flash",
+      "name": "Gemini 3.8 Flash",
+      "vendor": "google",
+      "releaseDate": "2026-09-02",
+      "capabilities": { "toolUse": true, "imageIn": true, "reasoning": true },
+      "price": { "input": 0.75, "cached": 0.075, "output": 3.75 },
+      "on": {
+        "cursor": { "id": "gemini-3.8-flash", "efforts": ["low", "medium", "high"], "context": 200000 },
+        "antigravity": { "id": "gemini-3.8-flash", "efforts": ["low", "medium", "high"], "context": 1048576 }
+      }
+    },
+    {
+      "id": "gemini-3-7-flash",
+      "name": "Gemini 3.7 Flash",
+      "vendor": "google",
+      "releaseDate": "2026-08-13",
+      "capabilities": { "toolUse": true, "imageIn": true, "reasoning": true },
+      "price": { "input": 0.75, "cached": 0.075, "output": 3.75 },
+      "on": {
+        "cursor": { "id": "gemini-3.7-flash", "efforts": ["low", "medium", "high"], "context": 200000 },
+        "antigravity": { "id": "gemini-3.7-flash", "efforts": ["low", "medium", "high"], "context": 1048576 }
+      }
+    },
+    {
+      "id": "gemini-3-6-flash",
+      "name": "Gemini 3.6 Flash",
+      "vendor": "google",
+      "releaseDate": "2026-07-21",
+      "capabilities": { "toolUse": true, "imageIn": true, "reasoning": true },
+      "price": { "input": 0.75, "cached": 0.075, "output": 3.75 },
+      "on": {
+        "cursor": {
+          "id": "gemini-3.6-flash",
+          "efforts": ["minimal", "low", "medium", "high"],
+          "context": 200000
+        },
+        "antigravity": { "id": "gemini-3.6-flash", "efforts": ["low", "medium", "high"], "context": 1048576 }
+      }
+    },
+    {
+      "id": "gemini-3-1-pro",
+      "name": "Gemini 3.1 Pro",
+      "vendor": "google",
+      "releaseDate": "2026-02-19",
+      "capabilities": { "toolUse": true, "imageIn": true, "reasoning": true },
+      "price": { "input": 2, "cached": 0.2, "output": 12 },
+      "on": {
+        "cursor": { "id": "gemini-3.1-pro", "efforts": [], "context": 200000 },
+        "antigravity": { "id": "gemini-3.1-pro", "efforts": ["low", "high"], "context": 1048576 }
+      }
     }
   ]
 }

package/catalog/scores.json

@@ -3053,6 +3053,30 @@
     "gpt-6-luna#max": {
       "like": "gpt-5.6-luna#max",
       "note": "no Arena agent score is published for GPT-6 Luna; GPT-5.6 Luna at the same effort stands in for agentic and steer (the nearest stand-in, spec 1.2 §6.3)"
+    },
+    "gpt-6.1-sol#low": {
+      "like": "gpt-6-sol#low",
+      "note": "no DeepSWE 1.1 or Arena score is published for GPT-6.1 Sol yet, and its only Terminal-Bench 4.0 value (vals.ai, 55.05 ± 1.82 at max) comes from a harness not comparable with GPT-6 Sol's Artificial Analysis one; the addendum's Broken Search Tool figure (2.08 % failure, https://deploymentsafety.openai.com/gpt-6-1-sol) is left out because a shipped honesty row would become the nearest honesty stand-in for unrelated sparse rungs; GPT-6 Sol at the same effort stands in for every dimension (the nearest stand-in, spec 1.2 §6.3)"
+    },
+    "gpt-6.1-sol#medium": {
+      "like": "gpt-6-sol#medium",
+      "note": "no DeepSWE 1.1 or Arena score is published for GPT-6.1 Sol yet, and its only Terminal-Bench 4.0 value (vals.ai, 55.05 ± 1.82 at max) comes from a harness not comparable with GPT-6 Sol's Artificial Analysis one; the addendum's Broken Search Tool figure (2.08 % failure, https://deploymentsafety.openai.com/gpt-6-1-sol) is left out because a shipped honesty row would become the nearest honesty stand-in for unrelated sparse rungs; GPT-6 Sol at the same effort stands in for every dimension (the nearest stand-in, spec 1.2 §6.3)"
+    },
+    "gpt-6.1-sol#high": {
+      "like": "gpt-6-sol#high",
+      "note": "no DeepSWE 1.1 or Arena score is published for GPT-6.1 Sol yet, and its only Terminal-Bench 4.0 value (vals.ai, 55.05 ± 1.82 at max) comes from a harness not comparable with GPT-6 Sol's Artificial Analysis one; the addendum's Broken Search Tool figure (2.08 % failure, https://deploymentsafety.openai.com/gpt-6-1-sol) is left out because a shipped honesty row would become the nearest honesty stand-in for unrelated sparse rungs; GPT-6 Sol at the same effort stands in for every dimension (the nearest stand-in, spec 1.2 §6.3)"
+    },
+    "gpt-6.1-sol#xhigh": {
+      "like": "gpt-6-sol#xhigh",
+      "note": "no DeepSWE 1.1 or Arena score is published for GPT-6.1 Sol yet, and its only Terminal-Bench 4.0 value (vals.ai, 55.05 ± 1.82 at max) comes from a harness not comparable with GPT-6 Sol's Artificial Analysis one; the addendum's Broken Search Tool figure (2.08 % failure, https://deploymentsafety.openai.com/gpt-6-1-sol) is left out because a shipped honesty row would become the nearest honesty stand-in for unrelated sparse rungs; GPT-6 Sol at the same effort stands in for every dimension (the nearest stand-in, spec 1.2 §6.3)"
+    },
+    "gpt-6.1-sol#max": {
+      "like": "gpt-6-sol#max",
+      "note": "no DeepSWE 1.1 or Arena score is published for GPT-6.1 Sol yet, and its only Terminal-Bench 4.0 value (vals.ai, 55.05 ± 1.82 at max) comes from a harness not comparable with GPT-6 Sol's Artificial Analysis one; the addendum's Broken Search Tool figure (2.08 % failure, https://deploymentsafety.openai.com/gpt-6-1-sol) is left out because a shipped honesty row would become the nearest honesty stand-in for unrelated sparse rungs; GPT-6 Sol at the same effort stands in for every dimension (the nearest stand-in, spec 1.2 §6.3)"
+    },
+    "gpt-6.1-sol#ultra": {
+      "like": "gpt-6-sol#ultra",
+      "note": "no DeepSWE 1.1 or Arena score is published for GPT-6.1 Sol yet, and its only Terminal-Bench 4.0 value (vals.ai, 55.05 ± 1.82 at max) comes from a harness not comparable with GPT-6 Sol's Artificial Analysis one; the addendum's Broken Search Tool figure (2.08 % failure, https://deploymentsafety.openai.com/gpt-6-1-sol) is left out because a shipped honesty row would become the nearest honesty stand-in for unrelated sparse rungs; GPT-6 Sol at the same effort stands in for every dimension (the nearest stand-in, spec 1.2 §6.3)"
     }
   },
   "bars": {

package/catalog/sources.json

@@ -69,10 +69,12 @@
   ],
   "aliases": {
     "claude-4-5-haiku": "claude-haiku-4-5",
-    "claude-haiku-4-5-20251001": "claude-haiku-4-5"
+    "claude-haiku-4-5-20251001": "claude-haiku-4-5",
+    "gemini-3.1-pro-preview": "gemini-3-1-pro"
   },
   "defaultEffort": {
     "gpt-6-astra": "medium",
+    "gpt-6.1-sol": "medium",
     "gpt-6-sol": "medium",
     "gpt-6-luna": "medium",
     "gpt-5.6-sol": "medium",
@@ -82,6 +84,14 @@
     "claude-opus-5-5": "high",
     "claude-sonnet-5-5": "high",
     "claude-sonnet-5": "high",
-    "claude-haiku-4-5": "default"
+    "claude-haiku-4-5": "default",
+    "grok-4-7": "high",
+    "grok-4-6": "high",
+    "grok-4-5": "high",
+    "composer-2-5": "default",
+    "gemini-3-8-flash": "high",
+    "gemini-3-7-flash": "high",
+    "gemini-3-6-flash": "high",
+    "gemini-3-1-pro": "high"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "catherd-cli",
-  "version": "1.2.1",
+  "version": "1.4.0",
   "description": "Herds coding agents: autopilot builds from your own Claude Code session.",
   "keywords": [
     "autopilot",
@@ -40,7 +40,8 @@
     "format": "oxfmt",
     "format:check": "oxfmt --check",
     "tui-frames": "CATHERD_WRITE_FRAMES=1 bun test test/entry/tui/frames.test.tsx",
-    "version-packages": "changeset version && bun scripts/stamp-plugin-version.mjs"
+    "version-packages": "changeset version && bun scripts/stamp-plugin-version.mjs",
+    "release:publish": "npm view catherd-cli@$npm_package_version version >/dev/null 2>&1 || bun test/pack-smoke.ts && changeset publish"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.1",

package/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "catherd",
-  "version": "1.2.1",
+  "version": "1.4.0",
   "description": "Herds coding agents: Claude plans and verifies, Codex, opencode or headless Claude Code workers write the code, and Jev picks the model and effort for each piece.",
   "author": {
     "name": "47vigen",

package/plugin/.codex-plugin/plugin.json

@@ -0,0 +1,11 @@
+{
+  "name": "catherd",
+  "version": "1.4.0",
+  "description": "Shared catherd orchestration, profiles and durable role results through the versioned MCP core.",
+  "author": { "name": "47vigen", "url": "https://github.com/47vigen" },
+  "homepage": "https://github.com/47vigen/catherd",
+  "repository": "https://github.com/47vigen/catherd",
+  "license": "MIT",
+  "skills": "./skills/",
+  "mcpServers": "./.mcp-codex.json"
+}

package/plugin/.mcp-codex.json

@@ -0,0 +1,10 @@
+{
+  "mcpServers": {
+    "catherd": {
+      "command": "sh",
+      "args": ["./bin/catherd-mcp"],
+      "cwd": ".",
+      "env": { "CATHERD_ORCHESTRATION_HOST": "codex" }
+    }
+  }
+}

package/plugin/bin/catherd-mcp

@@ -1,7 +1,7 @@
 #!/bin/sh
 # catherd's MCP launcher (spec 1.1 §12): the plugin's .mcp.json runs it. The release stamps VERSION
 # (scripts/stamp-plugin-version.mjs), so the plugin always starts the server it was released with.
-VERSION="1.2.1"
+VERSION="1.4.0"
 
 # a global catherd at this version (catherd init installs one): start it, no resolve at all
 if command -v catherd >/dev/null 2>&1 && [ "$(catherd --version 2>/dev/null)" = "$VERSION" ]; then