3 Commits

Author	SHA1	Message	Date
Nehr	4f6b2a58f8	fix(grok-build): atomic runtime staging + execute-claude archive gate ... Stage create_grok_runtime_root into a sibling .next tree and swap only after preflight so a failed install cannot wipe the live thin root. Re-apply the ARCHIVE_PATH allowlist on the optional --execute-claude spawn path.	2026-07-13 02:03:25 +07:00
Nehr	1480052e77	fix(review): close Grok packaging fail-open paths from code review ... Fail closed on ARCHIVE_PATH allowlist when SPAWN_PATH is missing, require non-empty monorepo root before runtime links, drop default --always-approve, prefer --prompt-file for large Grok benchmark prompts, and make compat-audit refuse theater-green when required bridge skills are absent.	2026-07-13 01:28:13 +07:00
Nehr	13d2f7dcdf	feat(grok-build): full packaging + multi-CLI bridge compatibility ... Make Grok Build a first-class gstack host with complete thin runtime root assets, fixed SETUP path resolution, host-bleed cleanup, and honest multi-CLI bridge packaging. Phase A (packaging): - Expand grok-build runtimeRoot + create_grok_runtime_root (specialists, browse/src, design/dist, make-pdf/dist, extension, scripts) with monorepo realpath healthchecks and fail-closed required links - Fix $HOME$GSTACK_* double-home in browse/design/make-pdf SETUP resolvers - Link connect-chrome → open-gstack-browser on Grok install; export GSTACK_MAKE_PDF in preamble; suppress Claude MODEL_OVERLAY for grok-build - Label /claude as MULTI_CLI_BRIDGE with Step 0 detect Phase B (bridges): - /spec --execute spawns grok --prompt-file (researched flags) on Grok host - GrokAdapter for gstack-model-benchmark --models grok - setup/sync-gbrain Grok success without Claude MCP hard-require - pair-agent remote ngrok install + security + teardown checklist U9: bin/gstack-grok-compat-audit is the DoD gate (packaging + bridge honesty).	2026-07-13 01:19:38 +07:00