hosts wave: 25 community PRs consolidated + live-verified — 5 new hosts, codex/installer/hook fixes (/grok skill held pending live receipt)

.gitignore

@@ -19,10 +19,15 @@ bin/gstack-global-discover*
 .opencode/
 .slate/
 .cursor/
+.grok/
 .openclaw/
+.pi/
 .hermes/
 .gbrain/
+.agy/
+.vibe/
 .gbrain-source
+.qoder/
 .context/
 extension/.auth.json
 # xterm assets are vendored from npm at build time; not source-of-truth.

README.md

@@ -58,7 +58,7 @@ From inside your repo, paste this. Switches you to team mode, bootstraps the rep
 (cd ~/.claude/skills/gstack && ./setup --team) && ~/.claude/skills/gstack/bin/gstack-team-init required && git add .claude/ CLAUDE.md && git commit -m "require gstack for AI-assisted work"
 ```
 
-No vendored files in your repo, no version drift, no manual upgrades. Every Claude Code session starts with a fast auto-update check (throttled to once/hour, network-failure-safe, completely silent).
+Your project stays small, and everyone gets the same up-to-date version of gstack. If gstack is missing or its safety check cannot run, Claude Code and Copilot stop and explain what to do. If everything is ready, the check stays out of the way and your usual permission questions still appear. Updates happen quietly when a Claude Code session starts, at most once an hour.
 
 Swap `required` for `optional` if you'd rather nudge teammates than block them.
 
@@ -101,7 +101,7 @@ These are conversational skills. Your OpenClaw agent runs them directly via chat
 
 ### Other AI Agents
 
-gstack works on 10 AI coding agents, not just Claude. Setup auto-detects which
+gstack works on 15 AI coding agents, not just Claude. Setup auto-detects which
 agents you have installed:
 
 ```bash
@@ -113,18 +113,41 @@ Or target a specific agent with `./setup --host <name>`:
 
 | Agent | Flag | Skills install to |
 |-------|------|-------------------|
-| OpenAI Codex CLI | `--host codex` | `~/.codex/skills/gstack-*/` |
+| OpenAI Codex CLI | `--host codex` | `~/.agents/skills/gstack-*/` |
 | OpenCode | `--host opencode` | `~/.config/opencode/skills/gstack-*/` |
 | Cursor | `--host cursor` | `~/.cursor/skills/gstack-*/` |
 | Factory Droid | `--host factory` | `~/.factory/skills/gstack-*/` |
 | Slate | `--host slate` | `~/.slate/skills/gstack-*/` |
 | Kiro | `--host kiro` | `~/.kiro/skills/gstack-*/` |
-| Hermes | `--host hermes` | `~/.hermes/skills/gstack-*/` |
+| Hermes | `--host hermes` | Prints integration instructions; `bun run gen:skill-docs --host hermes` writes `.hermes/skills/` |
+| Pi | `--host pi` | Prints integration instructions; `bun run gen:skill-docs --host pi` writes `.pi/skills/` |
+| Antigravity | `--host agy` | Prints integration instructions; `bun run gen:skill-docs --host agy` writes `.agy/skills/` |
+| Mistral Vibe | `--host vibe` | Prints integration instructions; `bun run gen:skill-docs --host vibe` writes `.vibe/skills/` |
 | GBrain (mod) | `--host gbrain` | `~/.gbrain/skills/gstack-*/` |
+| Qoder | `--host qoder` | `~/.qoder/skills/gstack-*/` |
 
 **Want to add support for another agent?** See [docs/ADDING_A_HOST.md](docs/ADDING_A_HOST.md).
 It's one TypeScript config file, zero code changes.
 
+### Pi
+
+[Pi](https://pi.dev) implements the [Agent Skills standard](https://agentskills.io/specification)
+end-to-end, so every gstack skill works out of the box once the skills directory
+is configured. `./setup --host pi` prints these instructions; the install itself
+is two commands:
+
+```bash
+git clone --single-branch --depth 1 https://github.com/garrytan/gstack.git ~/gstack
+cd ~/gstack && bun run gen:skill-docs --host pi
+mkdir -p ~/.pi/agent/skills && ln -snf "$(pwd)"/.pi/skills/gstack* ~/.pi/agent/skills/
+```
+
+Skills land at `~/.pi/agent/skills/gstack-*/`. For project-local skills (trusted
+project), pi also discovers `.pi/skills/`. Pi loads skill descriptions at startup
+and lazy-loads the full `SKILL.md` on demand, matching Claude Code's behavior.
+
+Invoke a skill with `/skill:<name>` (e.g. `/skill:review`, `/skill:ship`).
+
 ## See it work
 
 ```
@@ -356,10 +379,11 @@ rm -rf ~/.claude/skills/gstack
 rm -rf ~/.gstack
 
 # 5. Remove integrations (skip any you never installed)
-rm -rf ~/.codex/skills/gstack* 2>/dev/null
+rm -rf ~/.agents/skills/gstack* ~/.codex/skills/gstack* 2>/dev/null
 rm -rf ~/.factory/skills/gstack* 2>/dev/null
 rm -rf ~/.kiro/skills/gstack* 2>/dev/null
 rm -rf ~/.openclaw/skills/gstack* 2>/dev/null
+rm -rf ~/.qoder/skills/gstack* 2>/dev/null
 
 # 6. Remove temp files
 rm -f /tmp/gstack-* 2>/dev/null
@@ -466,7 +490,7 @@ Data is stored in [Supabase](https://supabase.com) (open source Firebase alterna
 
 **Want namespaced commands?** `cd ~/.claude/skills/gstack && ./setup --prefix` — switches from `/qa` to `/gstack-qa`. Useful if you run other skill packs alongside gstack.
 
-**Codex says "Skipped loading skill(s) due to invalid SKILL.md"?** Your Codex skill descriptions are stale. Fix: `cd ~/.codex/skills/gstack && git pull && ./setup --host codex` — or for repo-local installs: `cd "$(readlink -f .agents/skills/gstack)" && git pull && ./setup --host codex`
+**Codex says "Skipped loading skill(s) due to invalid SKILL.md"?** Your Codex skill descriptions are stale. Fix: `cd ~/.agents/skills/gstack && git pull && ./setup --host codex` — or for repo-local installs: `cd "$(readlink -f .agents/skills/gstack)" && git pull && ./setup --host codex`
 
 **Windows users:** gstack works on Windows 11 via Git Bash or WSL. Node.js is required in addition to Bun — Bun has a known bug with Playwright's pipe transport on Windows ([bun#4253](https://github.com/oven-sh/bun/issues/4253)). The browse server automatically falls back to Node.js. Make sure both `bun` and `node` are on your PATH.
 

TODOS.md

@@ -2,6 +2,55 @@
 
 ## NEXT PRIORITY
 
+### P2: Grok Build full-compat follow-ups (after `feat/grok-build-host`)
+
+**What:** Finish / harden the Grok-native packaging work landed on
+`feat/grok-build-host` (runtime root, SETUP path fix, host-bleed cleanup,
+bridges, `bin/gstack-grok-compat-audit`, section pointers for token ceiling).
+These are the remaining product/ship items — not blockers for local Grok use.
+
+**Context (landed on branch):**
+- U1–U3 packaging + U4–U7 bridges + U9 audit gate
+- Setup host-scoping (no always-on Codex `.agents/` regen / Claude plan-tune
+  prompt on `--host grok-build`)
+- Option A: Grok carved skills use STOP-Read section pointers
+  (`~/.grok/skills/gstack-*/sections/`) — `/ship` always-loaded ~20k tokens
+  (was ~45k)
+
+**Follow-ups to track:**
+
+1. **Upstream PR** — open/update PR against `garrytan/gstack` for
+   `feat/grok-build-host` (VERSION/CHANGELOG/title deferred until local DoD
+   green on main merge path).
+2. **U4 behavioral smoke** — if claiming `/spec --execute` COMPATIBLE (not
+   file-only), record multi-turn tool-use / cwd isolation / fail-closed auth
+   smoke or fixture; flag-string greps alone are not enough.
+3. **Section pointers for other external hosts (optional)** — Codex ship is
+   still monolith ~39k (near soft ceiling). Reuse
+   `hostUsesSectionPointers` for Codex/Cursor/Factory when package paths are
+   portable (Codex: `.agents/skills/gstack-*` or global
+   `~/.codex/skills/gstack-*`).
+4. **R10 / U8 optional `gstack-codex`** — only if product wants suite
+   completeness; keep bare `/codex` = OpenAI plugin; deny bare `codex` alias
+   on Grok install (partial deny already in `link_grok_skill_dirs`).
+5. **Gbrain Grok MCP stretch** — optional `~/.grok/config.toml` gbrain stanza
+   (absolute path, TOML RMW, atomic write + backup; non-interactive refuse
+   overwrite without `--force`). Success path remains CLI + AGENTS.md.
+6. **Audit harness productization** — keep `bin/gstack-grok-compat-audit` as
+   long-lived multi-host CI later, or document as branch/DoD gate only
+   (open question from plan ce-doc-review).
+7. **Name collision note** — document `/review` vs compound-engineering
+   `code-review` routing in `~/.grok/AGENTS.md` (do not delete CE skill).
+
+**Why:** Branch is implementation-ready for local Grok; these items close
+honesty gaps, upstream ship, and optional suite completeness without
+reopening Phase A packaging.
+
+**Depends on / blocked by:** Nothing for local use. Upstream PR waits on
+clean validation + VERSION/CHANGELOG if that is the release process.
+
+---
+
 ### P1: #1882 — portable skill-install prefix (non-`gstack` install dirs break silently)
 
 **What:** Every generated SKILL.md hardcodes the literal `~/.claude/skills/gstack/...`