Reproduce, migrate, or audit a Grok CLI stack on a new Mac: install CLIProxyAPI with Homebrew, route Grok CLI through the local OpenAI-compatible endpoint, deploy a private Cloudflare temporary-email Worker, configure grok-register for Cloudflare mail and CPA OIDC export, perform an explicitly authorized registration batch, recover rate-limited CPA exports, and verify the runtime without committing credentials. Use for new-machine setup, disaster recovery, Grok/CPA configuration drift, Cloudflare temp-mail migration, or batch-registration handoff.
Build and safely deploy an exact commit from a Sub2API GitHub fork to an existing Docker Compose server, then converge back to an official tagged image when the release catches up. Use when official Sub2API images lag a fork or main branch, when a custom linux/amd64 or linux/arm64 image must be built and transferred, when an official release now contains the deployed fork commit, when updating only the Sub2API application while preserving PostgreSQL, Redis, data, configuration, backups, health evidence, and a tested rollback path, or when publishing the deployment through a Cloudflare Tunnel and debugging public 502 Bad Gateway errors from a containerized cloudflared.
Codex-only workflow for non-trivial implementation: the current Codex session freezes the plan, delegates scoped execution to a separate Codex CLI process using gpt-5.6-luna at max reasoning, then reviews and verifies the result. Use when Luna should implement a resolved plan without redesigning it. Skip in every non-Codex harness and never let the executor recursively delegate.
Claude Code-only workflow for delegating scoped implementation, bug fixes, tests, CI, or bulk exploration to Codex CLI while Claude owns specification, review, and verification. Skip in Codex and other harnesses; never self-delegate.
Codex-only workflow for non-trivial implementation: the current Codex session freezes the plan, delegates execution to Grok CLI, then reviews and verifies the result. Use when Grok should implement a resolved plan without inventing the architecture. Skip in every non-Codex harness; never launch a nested Codex planner.
Claude Code-only workflow for delegating scoped implementation, exploration, debugging, or alternate-model review to Grok CLI while Claude owns specification, judgment, and verification. Skip in Grok and other harnesses; never self-delegate.
Use when provisioning or auditing a ByteVirt VPS as a no-panel Hysteria2 proxy node: SSH into a fresh Debian 12 server, install the official Hysteria2 systemd service, generate password auth and salamander obfuscation credentials, configure self-signed TLS or a domain certificate, verify UDP reachability, and produce Shadowrocket hy2:// import links.
Use when provisioning a fresh DigitalOcean Ubuntu VPS behind Cloudflare to redeploy the same stack used here: Nginx with Let's Encrypt, an existing web app behind a proxied domain, 3x-ui/Xray VLESS over WebSocket/TLS through Cloudflare orange cloud, public 3x-ui panel via Nginx reverse proxy, and working Shadowrocket subscription links.