§9 acceptance: grep-zero sweep — every internal x.ai/grok identifier renamed

The PRD's first acceptance gate now holds: grep -RinE '\bx\.ai\b|grok'
crates/ --include='*.rs' → 0 matches (exempt: NOTICE and third-party
license archives, README provenance, and the required 'Based on Grok
Build Open Source' attribution, now sourced from version_attribution.txt).

Wire-visible renames (both sides in this repo, changed in lockstep):
- Auth method id 'grok.com' → 'kimi-code' (AuthMethodKind::KimiCode).
- Every x.ai/* and _x.ai/* ACP ext method and meta key → kigi/* /
  _kigi/* (~200 names; grokShell → kigiShell). Session-file replay keeps
  a read-side alias for the legacy '_x.ai/session/update' method so
  existing updates.jsonl histories load; writes emit only the new name
  (both directions test-pinned).
- Agent types grok-build* → kigi* with a documented legacy-prefix alias
  at resolution time so persisted sessions keep resolving.
- ToolNamespace/BuiltinAgentName GrokBuild* → Kigi* (wire snake_case
  kigi/kigi_concise/kigi_hashline; schema regenerated); grok_build
  implementation dirs renamed to kigi*.
- x-grok-* headers → x-kigi-*, __GROK_* sentinels → __KIGI_*, themes
  grokday/groknight → kigiday/kiginight (old persisted values fall back
  to the default theme), web_fetch allowlist xAI hosts → kimi.com +
  moonshot platforms, changelog CDN → this repo, grok-build changelog
  archives deleted.
- BYOK default endpoint removed: [endpoints] api_base_url is now truly
  optional with NO default — consumers fail fast with the flag name when
  unset (no silent x.ai egress). Mock harnesses inject it explicitly.
- System-prompt identity fixed: 'released by xAI' → 'an unofficial
  community CLI for Kimi' (template + regenerated encrypted form).

Also repaired pre-existing grok-era test debt found by the sweep: the
stale trace_classify default-model pin, the grok-pager UA label test,
pty-harness stale-binary reuse and non-hermetic moonshot routing (a PTY
test could previously reach the real api.moonshot.cn), and the outdated
oauth fixture scope key.

Gates: §9 grep 0; fmt clean; workspace check/clippy 0/0 (-D warnings);
FULL cargo test --workspace: 234 suites, 21,961 passed, 0 failed;
deny advisories ok.

crates/codegen/kigi-tui/tests/pty_e2e/minimal/minimal_cli_screen_mode_does_not_persist.rs

@@ -4,7 +4,7 @@ use crate::common::*;
 
 /// CLI `--minimal` / `--fullscreen` must not write `[ui] screen_mode` to
 /// config.toml. Mode flags are session-scoped; only a manual config.toml edit
-/// should make a mode sticky across plain `grok` launches.
+/// should make a mode sticky across plain `kigi` launches.
 #[tokio::test(flavor = "multi_thread", worker_threads = 2)]
 #[ignore]
 async fn minimal_cli_screen_mode_does_not_persist() {
@@ -51,7 +51,7 @@ async fn minimal_cli_screen_mode_does_not_persist() {
         .wait_for_text(WELCOME_SCREEN_SENTINEL, WELCOME_TIMEOUT)
         .unwrap_or_else(|e| {
             panic!(
-                "plain grok should open fullscreen after --minimal (no sticky write): {e}\nscreen:\n{}",
+                "plain kigi should open fullscreen after --minimal (no sticky write): {e}\nscreen:\n{}",
                 second.screen_contents()
             )
         });

crates/codegen/kigi-tui/tests/pty_e2e/minimal/minimal_new_session_keeps_history_and_resets.rs

@@ -10,13 +10,13 @@ use crate::common::*;
 /// The first turn is genuinely taller than the screen (a fenced code block, not
 /// reflowable prose) so the first welcome card and the turn's head scroll into
 /// *native scrollback* before `/new`. The robust "new session" signal is then
-/// that a *second* welcome card appears (two `Grok Build` banners in
+/// that a *second* welcome card appears (two `Kigi` banners in
 /// scrollback+screen), independent of exactly how content scrolled.
 #[tokio::test(flavor = "multi_thread", worker_threads = 2)]
 #[ignore]
 async fn minimal_new_session_keeps_history_and_resets() {
     /// Substring printed once per minimal welcome card (see `minimal::welcome`).
-    const WELCOME_BANNER: &str = "Grok Build";
+    const WELCOME_BANNER: &str = "Kigi";
 
     let content = ContentController::start().await.expect("start content");
     // Code-block rows (not prose, which markdown-reflows to fit on screen) so

crates/codegen/kigi-tui/tests/pty_e2e/minimal/minimal_slash_switches_from_fullscreen.rs

@@ -88,7 +88,7 @@ async fn minimal_slash_switches_from_fullscreen() {
         "main screen should be cleared on /minimal relaunch; leftover reopen text:\n{screen}"
     );
     assert!(
-        screen.contains("Grok Build") || harness.full_text().contains("Grok Build"),
+        screen.contains("Kigi") || harness.full_text().contains("Kigi"),
         "welcome card should re-anchor at top after /minimal relaunch\nscreen:\n{screen}"
     );
 

crates/codegen/kigi-tui/tests/pty_e2e/minimal/minimal_transcript_pager_restore_no_artifacts.rs

@@ -83,7 +83,7 @@ async fn minimal_transcript_pager_restore_no_artifacts() {
     // transcript temp-file path — the conversation sentinel can't be used as
     // the signal, it is already visible on the live screen. Then quit it.
     harness
-        .wait_for_text("grok-transcript-", Duration::from_secs(20))
+        .wait_for_text("kigi-transcript-", Duration::from_secs(20))
         .expect("less shows the transcript");
     harness.update(Duration::from_millis(300));
     harness.inject_keys(b"q").expect("quit less");