feat: release AgencyZero on UI 3.2 and WorkTable 1.10 beta

.github/workflows/ci.yml

@@ -96,7 +96,15 @@ jobs:
       - name: Build the AgencyProxy sidecar
         run: scripts/stage-agency-proxy-sidecar.sh
 
-      - run: cargo fmt --all --check
+      - name: Build the WorkTable v2 migration reader
+        run: scripts/stage-wt-v2-reader-sidecar.sh
+
+      # Named per workspace member rather than `--all`, which reaches into any
+      # path dependency and reports another repository's formatting as this
+      # job's failure. Nothing is taken by path from outside the workspace
+      # today, but a local `[patch]` or a temporary override reintroduces that
+      # the moment someone adds one, and the failure reads as ours.
+      - run: cargo fmt --check -p az-gui -p az-core -p az-mcp-proxy -p wt-migrate -p agency-tools
       # Blitz is currently a macOS preview runtime. Enabling every feature on
       # this Linux runner asks it to implement Tauri's GTK-only runtime traits,
       # which is separate portability work rather than Linux CI for AgencyZero.

.github/workflows/qa-panel.yml

@@ -91,6 +91,9 @@ jobs:
       - name: Stage the agency-proxy sidecar
         run: scripts/stage-agency-proxy-sidecar.sh
 
+      - name: Stage the WorkTable v2 migration reader
+        run: scripts/stage-wt-v2-reader-sidecar.sh
+
       # blitz-inspector, NOT blitz-runtime: a blitz-runtime build answers every
       # inspector call with diagnosticsUnavailable, so the run would fail with
       # every check unable to see anything rather than with a real verdict.
@@ -203,7 +206,17 @@ jobs:
         id: full
         if: ${{ github.event_name == 'pull_request' || (github.event_name == 'workflow_dispatch' && inputs.group == '' && inputs.suite != 'focused') }}
         continue-on-error: true
-        timeout-minutes: 3
+        # All 312 checks, one process, on a shared runner. This was 3, which
+        # the suite outgrew rather than regressed into: the run that tripped it
+        # reported `passed: 312, failed: 0` and every contrast audit clean, then
+        # the step timeout killed it at 3m00s. The previous green run finished
+        # in 2m33s, so the margin was 27s and one more group spent it.
+        #
+        # A step timeout is not the per-check budget. `QA_TIMEOUT_SCALE` still
+        # governs whether an individual outcome is allowed to be slow; this
+        # only bounds the wall clock of the whole sweep, so raising it does not
+        # weaken a single assertion.
+        timeout-minutes: 6
         env:
           QA_GROUPS: ''
           QA_TIMEOUT_SCALE: 2

.github/workflows/release-experimental.yml

@@ -93,6 +93,9 @@ jobs:
       - name: Build the AgencyProxy sidecar
         run: scripts/stage-agency-proxy-sidecar.sh
 
+      - name: Build the WorkTable v2 migration reader
+        run: scripts/stage-wt-v2-reader-sidecar.sh
+
       - name: Build experimental bundle
         env:
           TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}

.github/workflows/release.yml

@@ -152,6 +152,9 @@ jobs:
       - name: Build the AgencyProxy sidecar
         run: scripts/stage-agency-proxy-sidecar.sh
 
+      - name: Build the WorkTable v2 migration reader
+        run: scripts/stage-wt-v2-reader-sidecar.sh
+
       # Ad-hoc signed, and nothing here decides that: `signingIdentity: "-"` in
       # tauri.conf.json does. Notarization needs a current Apple Developer
       # Program membership and ours has lapsed.

.gitignore

@@ -14,6 +14,8 @@
 # Built by apps/gui/frontend (rsbuild -> ../dist), served by Tauri.
 /apps/gui/dist
 /apps/gui/binaries/agency-proxy-*
+/apps/gui/binaries/agencyzero-wt-v2-reader-*
+/crates/wt-migrate/v2-reader/Cargo.lock
 node_modules
 /output/pdf/
 /docs/agencyzero-overview.md

AGENTS.md

@@ -41,6 +41,11 @@ hardens into procedure moves here; the reasoning stays in memory.
 
 Run what you build before calling it done. **If you can't run it, say so.**
 
+- **Do not introduce Node.js, npm, npx, pnpm, Yarn or Deno.** The existing
+  frontend uses Bun; keep its install and script paths on Bun. New repository
+  tooling and harnesses are Rust binaries or plain shell around repository
+  binaries, not JavaScript runtime scripts.
+
 - Compare against the base branch: a pre-existing failure is not yours, and saying so
   requires checking.
 - A suspiciously fast build was cached. Force a rebuild when the rebuild is the point.
@@ -109,6 +114,10 @@ paraphrases were how the old checkbox contract created near-duplicates. Full con
   mock (`bun run dev`, port 3010) and is drivable by roles and labels:
   [`docs/ui-verification.md`](docs/ui-verification.md). Otherwise build, test, and ask the
   owner to look.
+- **Native OS file dialogs are outside the control tree.** If a flow needs a
+  real folder or file pick, ask the owner to operate the panel, then inspect
+  the in-app result. Typed-path checks are a different control. Guide:
+  [`docs/debugging.md`](docs/debugging.md#native-os-file-dialogs).
 - **Never touch the running System instance**, its process, files or data directory. The
   store is single-writer. Use the Dev instance (`tauri.dev.conf.json`).
   **Check before you decide it is closed, and check by the right name.** The binary is

Cargo.toml

@@ -7,9 +7,10 @@ members = [
     "crates/wt-migrate",
     "crates/agency-tools",
 ]
+exclude = ["crates/wt-migrate/v2-reader"]
 
 [workspace.package]
-version = "0.8.50"
+version = "0.8.64"
 edition = "2024"
 publish = false
 
@@ -26,7 +27,7 @@ agency-proxy-protocol = "^0.1.8"
 # The GUI and both storage tools compile the same schema against one resolved
 # WorkTable package. A workspace dependency prevents their compatible ranges
 # from drifting into separate copies without freezing the selected patch.
-worktable = "^1.0.0-beta"
+worktable = "1.10.0-beta1"
 
 # Heavy deps are declared per-crate on purpose: only apps/gui pulls in the
 # Tauri stack, so agent/proxy builds never trigger a webview toolchain build.

apps/gui/Cargo.toml

@@ -23,6 +23,7 @@ experimental = ["dep:agent-experimental"]
 # workspace both already take tauri this way, and neither needs that flag.
 webview-runtime = ["tauri/wry"]
 blitz-runtime = [
+    "dep:blitz-control-protocol",
     "dep:blitz-dom",
     "dep:blitz-script",
     "dep:brotli",
@@ -63,7 +64,7 @@ tauri-build = { version = "2", features = [] }
 [dependencies]
 # Carries the store forward when a column changes; see crates/wt-migrate.
 wt-migrate = { path = "../../crates/wt-migrate" }
-agent-abstraction = "0.4.19"
+agent-abstraction = "0.4.21"
 agency-proxy-client.workspace = true
 agency-proxy-protocol.workspace = true
 agent-experimental = { version = "^0.1.3", default-features = false, optional = true }
@@ -80,18 +81,23 @@ az-core.workspace = true
 worktable.workspace = true
 # The `worktable!` macro emits code that names these by bare path rather than
 # through a re-export, so a consumer of the macro has to declare them too.
-# Versions match worktable 1.0 beta's own, since a mismatch produces errors that name
+# Versions match WorkTable 1.9's own, since a mismatch produces errors that name
 # the wrong crate.
 eyre = "0.6"
 rkyv = { version = "0.8.9", features = ["uuid-1"] }
 derive_more = { version = "2.0.1", features = ["from", "error", "display", "debug", "into"] }
 futures = "0.3"
+nagoya = "^0.1"
 backon = { version = "1.6.0", default-features = false }
 libc = "0.2"
 dirs = "6"
 uuid = "1"
 chrono = { version = "0.4", default-features = false, features = ["clock", "serde", "std"] }
-tokio = { version = "1", features = ["process", "rt-multi-thread", "time"] }
+# Tauri owns the live GUI runtime and exposes Tokio-native tasks. AgencyProxy's
+# Unix sockets plus git/gh child processes also require Tokio's concrete I/O
+# types, so this compatibility boundary remains direct and declares every API
+# this crate calls instead of borrowing transitive features.
+tokio = { version = "1", features = ["fs", "io-util", "net", "process", "rt-multi-thread", "signal", "sync", "time"] }
 # Default features are off; see `webview-runtime` for why.
 tauri = { version = "2", default-features = false, features = ["macos-private-api", "compression"] }
 # `macos-private-api` must match the `tauri` dependency above. Tauri's
@@ -101,7 +107,8 @@ tauri = { version = "2", default-features = false, features = ["macos-private-ap
 # 0.1.0 the runtime's own feature forwards to `tauri` and `tauri-runtime`, so
 # naming it here agrees with that rather than being the only thing holding the
 # two sides together.
-tauri-runtime-blitz = { version = "^0.3", optional = true, features = ["macos-private-api"] }
+tauri-runtime-blitz = { version = "^0.4", optional = true, features = ["macos-private-api"] }
+blitz-control-protocol = { version = "^0.5", optional = true }
 #
 # The engine by version, not by branch. Same move `chuzz` made, for the same
 # reasons its manifest records.
@@ -114,15 +121,14 @@ tauri-runtime-blitz = { version = "^0.3", optional = true, features = ["macos-pr
 # resolved anyrender from crates.io at 0.12.0, and the build stopped at
 # "failed to select a version".
 #
-# A caret is what was meant. `cargo update` moves it, `Cargo.lock` records what
-# was resolved, and anything else asking for the same range gets the same crate
-# rather than a second copy of the engine - which is the failure that reads as
-# `expected ScriptDocument, found ScriptDocument` with both types naming one
-# file. Working against a local checkout stays possible through the `[patch]`
-# entries in `.cargo/config.toml`, so the default exercises what a release
-# actually resolves.
-blitz-dom = { package = "ps-blitz-dom", version = "^0.3", features = ["system-fonts", "parallel-construct"], optional = true }
-blitz-script = { package = "ps-blitz-script", version = "^0.3", features = ["system-fonts"], optional = true }
+# A caret is what was meant. Every lockless build resolves the compatible family
+# afresh, and anything else asking for the same range gets the same crate rather
+# than a second copy of the engine. Two incompatible families produce the failure
+# that reads as `expected ScriptDocument, found ScriptDocument` with both types
+# naming one file. Local renderer work uses `.cargo/local-renderer.toml` through
+# `scripts/local-renderer.sh`, so the default exercises the published graph.
+blitz-dom = { package = "ps-blitz-dom", version = "^0.4", features = ["system-fonts", "parallel-construct"], optional = true }
+blitz-script = { package = "ps-blitz-script", version = "^0.4", features = ["system-fonts"], optional = true }
 brotli = { version = "8.0.4", default-features = false, features = ["std"], optional = true }
 url = { version = "2.5.8", optional = true }
 tauri-plugin-updater = "2"

apps/gui/build.rs

@@ -170,6 +170,10 @@ fn strip_unused_frameworks() {
 }
 
 fn main() {
+    println!(
+        "cargo:rustc-env=AZ_BUILD_TARGET={}",
+        std::env::var("TARGET").expect("Cargo supplies TARGET")
+    );
     strip_unused_frameworks();
     stamp_build();
     if std::env::var_os("CARGO_FEATURE_BLITZ_RUNTIME").is_some() {

apps/gui/frontend/package.json

@@ -5,6 +5,7 @@
   "type": "module",
   "private": true,
   "overrides": {
+    "@solidjs/signals": "2.0.0-rc.4",
     "babel-preset-solid": "^2.0.0-rc.0"
   },
   "scripts": {
@@ -23,14 +24,14 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@pathscale/ui": "^2.11.6",
-    "@solidjs/web": "next",
+    "@pathscale/ui": "^3.2.3",
+    "@solidjs/web": "2.0.0-rc.4",
     "@tauri-apps/api": "^2.1.1",
     "clsx": "^2.1.1",
     "popmotion": "^11.0.5",
     "promptsyntax": "^0.1.0",
-    "solid-js": "next",
-    "solid-layouts": "^0.2.1",
+    "solid-js": "2.0.0-rc.4",
+    "solid-layouts": "^0.2.4",
     "tailwind-merge": "^3.6.0"
   },
   "devDependencies": {

apps/gui/frontend/src/api/fixtures.ts

@@ -418,6 +418,23 @@ export const AGENT_STATUS: AgentStatus[] = [
     },
     checkedAt: ago(2 * 60_000),
   },
+  {
+    agent: "grok",
+    state: "connected",
+    version: "1.0.30",
+    minVersion: "1.0.30",
+    caps: ["fork", "thread id"],
+    capabilities: {
+      session: true,
+      fork: true,
+      events: true,
+      nativeSystem: true,
+      commands: true,
+      liveFollowUp: true,
+      approvals: true,
+    },
+    checkedAt: ago(2 * 60_000),
+  },
 ];
 
 /**
@@ -488,6 +505,23 @@ export const MODEL_CATALOGUE: AgentModels[] = [
       pinned("gpt-5.4-mini", "GPT-5.4-Mini", "Small, fast, cost-efficient model.", TO_XHIGH),
     ],
   },
+  {
+    agent: "grok",
+    source: "cli",
+    checked: "2026-09-13",
+    against: "grok 1.0.30",
+    discovered: false,
+    models: [
+      pinned(
+        "grok-4.6",
+        "Grok 4.6",
+        "Default Grok Build model",
+        ["minimal", "low", "medium", "high", "xhigh"],
+        true,
+      ),
+      pinned("grok-4.5", "Grok 4.5", "", ["minimal", "low", "medium", "high", "xhigh"]),
+    ],
+  },
   {
     agent: "copilot",
     source: "picker",
@@ -591,6 +625,7 @@ export const SETTINGS: GlobalSettings = {
       default: "gpt-5.6-sol",
     },
     copilot: { enabled: ["auto"], default: "auto" },
+    grok: { enabled: ["grok-4.6", "grok-4.5"], default: "grok-4.6" },
   },
   defaultPermission: "read_only",
   defaultEffort: "high",

apps/gui/frontend/src/api/mock.ts

@@ -92,7 +92,7 @@ function deepMerge<T>(target: T, patch: DeepPartial<T>): T {
   return out;
 }
 
-const MODERATOR_AGENTS = ["claude", "codex", "copilot"] as const;
+const MODERATOR_AGENTS = ["claude", "codex", "copilot", "grok"] as const;
 
 /** Mirror Rust's backwards-compatible moderator model normalization. */
 function normalizeModeratorModel(settings: GlobalSettings): string {
@@ -900,7 +900,7 @@ export function createMockApi(): AgencyZeroApi {
      */
     listQuota: () =>
       settle({
-        agents: (["claude", "codex", "copilot"] as const).map((agent) => ({
+        agents: (["claude", "codex", "copilot", "grok"] as const).map((agent) => ({
           agent,
           supported: false,
           windows: [],

apps/gui/frontend/src/components/PillMenu.tsx

@@ -72,7 +72,11 @@ export function PillMenu<T extends string>(props: PillMenuProps<T>): JSX.Element
       <Dropdown.Menu
         id={`${props.id}--menu`}
         align="start"
-        class="min-w-[190px] rounded-xl border border-az-hairline bg-base-100 p-1 shadow-[0_18px_40px_rgba(0,0,0,.5)]"
+        // The native retained renderer appended another shadow paint whenever
+        // pointer feedback invalidated this hoisted fixed subtree. The menu
+        // grew darker on every visit even though its DOM stayed flat. Its
+        // opaque fill and border already separate it from the composer.
+        class="min-w-[190px] rounded-xl border border-az-hairline bg-base-100 p-1"
       >
         <For each={props.options}>
           {(option) => (

apps/gui/frontend/src/features/analytics/AnalyticsTab.tsx

@@ -4,10 +4,12 @@ import { createMemo, createSignal, For, onSettled, Show } from "solid-js";
 import { Button } from "~/components/Button";
 import { Icon } from "~/components/Icon";
 import { duration } from "~/lib/format";
+import { AGENT_LABELS } from "~/lib/labels";
 import { whileMounted } from "~/lib/live";
 import { tx } from "~/stores/i18n";
 import { useWorkspace } from "~/stores/workspace";
 import type {
+  Agent,
   UsageAgentValue,
   UsageAnalytics,
   UsageDay,
@@ -237,11 +239,7 @@ function AgentValue(props: { agents: UsageAgentValue[] }): JSX.Element {
               <div class="rounded-lg border border-az-hairline px-3 py-2.5">
                 <div class="flex items-baseline justify-between gap-2">
                   <span class="font-semibold text-az-strong text-ui-label">
-                    {agent.agent === "codex"
-                      ? "Codex"
-                      : agent.agent === "claude"
-                        ? "Claude"
-                        : agent.agent}
+                    {AGENT_LABELS[agent.agent as Agent] ?? agent.agent}
                   </span>
                   <span class="font-mono text-primary text-ui-label">
                     {agent.costPerCompletedItem === null
@@ -283,7 +281,9 @@ function SessionBreakdown(props: { sessions: UsageSession[] }): JSX.Element {
               <div class="rounded-lg border border-az-hairline px-3 py-2.5">
                 <div class="flex items-baseline gap-2 text-ui-detail">
                   <span class="min-w-0 flex-1 truncate text-az-strong">{session.projectName}</span>
-                  <span class="font-mono text-az-muted text-ui-caption-sm">{session.agent}</span>
+                  <span class="font-mono text-az-muted text-ui-caption-sm">
+                    {AGENT_LABELS[session.agent as Agent] ?? session.agent}
+                  </span>
                   <span class="font-mono text-az-title text-ui-caption">
                     {dollars(session.costUsd)}
                   </span>