v0.6.20 — grok (11th provider) + kimi-code migration + deep-review hardening

Third provider-expansion + hardening release, shipped through a pre-merge Codex review gate (PRs #5/#6/#7).

Highlights

• grok (11th provider) — xAI Grok Build CLI as a first-class structured provider: json + streaming parsing, structured sessionId (no prose fabrication), grok models zero-cost auth probe, full host wiring (registry / review-flags / sessions / host-command-map / all 4 host adapters), 7 command arg-hints, 3 skills.
• kimi → kimi-code v0.6.0 — migrated to the new CLI contract: -p one-shot (no --yolo/--plan combo), resume-by-id via --session (kimi-code dropped -r), structured session.resume_hint parsing, prompt-only /review.
• deep-review hardening — auth-probe transient failures (timeout/429/network) now stay inconclusive-authenticated across all 10 prior providers (no false logged-out); signal-kill no longer misreads as success; atomic-save reclaims a stale no-pid lock; stream limit-after-drain; job-control double-write/cancel races closed; cmd no longer fabricates a sessionId from prose.

Review gate

Codex reviewed PRs #6/#7 (findings adjudicated against real code — 2 false positives rejected). Codex stalled on PR#5's 1249-line diff, so it was re-reviewed by a Claude 6-dimension adversarial workflow (20 agents, 14 raw findings → 0 survived). Real fixes: grok auth-probe ordering, grok host advertisement gaps, kimi -r→--session, kimi session-parse guard.

Packages

• @bbingz/polycli@0.6.20 (terminal CLI), @bbingz/polycli-opencode@0.6.20, Claude/Codex/Copilot plugin manifests @ 0.6.20.
• @bbingz/polycli-utils@1.0.2 (atomic-save / process / stream fixes); @bbingz/polycli-timing@1.0.1 unchanged.

Verification: npm test 483/483; npm run release:check green (validators + claude plugin validate + publish dry-runs).