§9 acceptance: grep-zero sweep — every internal x.ai/grok identifier renamed

The PRD's first acceptance gate now holds: grep -RinE '\bx\.ai\b|grok'
crates/ --include='*.rs' → 0 matches (exempt: NOTICE and third-party
license archives, README provenance, and the required 'Based on Grok
Build Open Source' attribution, now sourced from version_attribution.txt).

Wire-visible renames (both sides in this repo, changed in lockstep):
- Auth method id 'grok.com' → 'kimi-code' (AuthMethodKind::KimiCode).
- Every x.ai/* and _x.ai/* ACP ext method and meta key → kigi/* /
  _kigi/* (~200 names; grokShell → kigiShell). Session-file replay keeps
  a read-side alias for the legacy '_x.ai/session/update' method so
  existing updates.jsonl histories load; writes emit only the new name
  (both directions test-pinned).
- Agent types grok-build* → kigi* with a documented legacy-prefix alias
  at resolution time so persisted sessions keep resolving.
- ToolNamespace/BuiltinAgentName GrokBuild* → Kigi* (wire snake_case
  kigi/kigi_concise/kigi_hashline; schema regenerated); grok_build
  implementation dirs renamed to kigi*.
- x-grok-* headers → x-kigi-*, __GROK_* sentinels → __KIGI_*, themes
  grokday/groknight → kigiday/kiginight (old persisted values fall back
  to the default theme), web_fetch allowlist xAI hosts → kimi.com +
  moonshot platforms, changelog CDN → this repo, grok-build changelog
  archives deleted.
- BYOK default endpoint removed: [endpoints] api_base_url is now truly
  optional with NO default — consumers fail fast with the flag name when
  unset (no silent x.ai egress). Mock harnesses inject it explicitly.
- System-prompt identity fixed: 'released by xAI' → 'an unofficial
  community CLI for Kimi' (template + regenerated encrypted form).

Also repaired pre-existing grok-era test debt found by the sweep: the
stale trace_classify default-model pin, the grok-pager UA label test,
pty-harness stale-binary reuse and non-hermetic moonshot routing (a PTY
test could previously reach the real api.moonshot.cn), and the outdated
oauth fixture scope key.

Gates: §9 grep 0; fmt clean; workspace check/clippy 0/0 (-D warnings);
FULL cargo test --workspace: 234 suites, 21,961 passed, 0 failed;
deny advisories ok.

crates/codegen/kigi-shell/src/agent/session_config.rs

@@ -25,7 +25,7 @@ pub struct SessionConfigOption {
 
 #[derive(Debug, Clone, Serialize)]
 #[serde(rename_all = "camelCase")]
-pub struct GrokSessionDetail {
+pub struct KigiSessionDetail {
     pub session_id: String,
     pub kind: String,
     pub cwd: String,
@@ -34,7 +34,7 @@ pub struct GrokSessionDetail {
     pub title: Option<String>,
 }
 
-impl GrokSessionDetail {
+impl KigiSessionDetail {
     pub fn build(
         session_id: String,
         cwd: String,
@@ -124,11 +124,8 @@ mod tests {
 
     #[test]
     fn options_have_one_selected_model_and_a_mode_per_effort() {
-        let models = [
-            model("grok-build", "Grok Build"),
-            model("grok-4.5", "Grok 4.5"),
-        ];
-        let current = acp::ModelId::from("grok-build");
+        let models = [model("kigi", "Kigi"), model("kigi-4.5", "Kigi 4.5")];
+        let current = acp::ModelId::from("kigi");
         let opts = build_session_config_options(
             &models,
             &current,
@@ -140,7 +137,7 @@ mod tests {
         assert_eq!(model_opts.len(), 2);
         let selected_models: Vec<_> = model_opts.iter().filter(|o| o.selected).collect();
         assert_eq!(selected_models.len(), 1);
-        assert_eq!(selected_models[0].id, "grok-build");
+        assert_eq!(selected_models[0].id, "kigi");
 
         let mode_opts: Vec<_> = opts.iter().filter(|o| o.category == "mode").collect();
         assert_eq!(mode_opts.len(), SELECTABLE_REASONING_EFFORTS.len());
@@ -153,8 +150,8 @@ mod tests {
     #[test]
     fn none_effort_is_not_a_user_selectable_mode() {
         assert!(!SELECTABLE_REASONING_EFFORTS.contains(&ReasoningEffort::None));
-        let models = [model("grok-build", "Grok Build")];
-        let current = acp::ModelId::from("grok-build");
+        let models = [model("kigi", "Kigi")];
+        let current = acp::ModelId::from("kigi");
         let opts = build_session_config_options(
             &models,
             &current,
@@ -168,8 +165,8 @@ mod tests {
 
     #[test]
     fn no_mode_options_when_model_lacks_effort_support() {
-        let models = [model("grok-build", "Grok Build")];
-        let current = acp::ModelId::from("grok-build");
+        let models = [model("kigi", "Kigi")];
+        let current = acp::ModelId::from("kigi");
         let opts = build_session_config_options(&models, &current, &[], None);
         assert_eq!(opts.len(), 1);
         assert!(opts.iter().all(|o| o.category == "model"));
@@ -177,42 +174,42 @@ mod tests {
 
     #[test]
     fn model_label_falls_back_to_id_when_name_empty() {
-        let models = [model("grok-build", "")];
-        let current = acp::ModelId::from("grok-build");
+        let models = [model("kigi", "")];
+        let current = acp::ModelId::from("kigi");
         let opts = build_session_config_options(&models, &current, &[], None);
-        assert_eq!(opts[0].label, "grok-build");
+        assert_eq!(opts[0].label, "kigi");
     }
 
     #[test]
     fn session_config_option_serializes_camel_case() {
         let opt = SessionConfigOption {
-            id: "grok-build".to_string(),
+            id: "kigi".to_string(),
             category: "model".to_string(),
-            label: "Grok Build".to_string(),
+            label: "Kigi".to_string(),
             description: None,
             selected: true,
         };
         let v = serde_json::to_value(&opt).expect("serialize");
-        assert_eq!(v["id"], "grok-build");
+        assert_eq!(v["id"], "kigi");
         assert_eq!(v["category"], "model");
-        assert_eq!(v["label"], "Grok Build");
+        assert_eq!(v["label"], "Kigi");
         assert_eq!(v["selected"], true);
         assert!(v.get("description").is_none());
     }
 
     #[test]
-    fn grok_session_detail_serializes_camel_case() {
-        let detail = GrokSessionDetail::build(
+    fn kigi_session_detail_serializes_camel_case() {
+        let detail = KigiSessionDetail::build(
             "sess-1".to_string(),
             "/Users/me/xai".to_string(),
-            "grok-build".to_string(),
+            "kigi".to_string(),
             None,
         );
         let v = serde_json::to_value(&detail).expect("serialize");
         assert_eq!(v["sessionId"], "sess-1");
         assert_eq!(v["kind"], "build");
         assert_eq!(v["cwd"], "/Users/me/xai");
-        assert_eq!(v["currentModelId"], "grok-build");
+        assert_eq!(v["currentModelId"], "kigi");
         assert!(v.get("title").is_none());
     }
 }