xAI Grok CLI (Grok Build)

Synced from monorepo

Synced from monorepo

Changes:

• Report TUI startup at the first interactive frame
• Answer the client before the skills scan and break down startup timing
• Scheduler wakeups ask to fix, delete, or update the scheduled task
• Open the background-task viewer from the jump control even without a scrollback anchor
• Gate project instructions and skills on folder trust
• Jump turns with Shift+J/K like the timeline
• Hold queued follow-ups through waits
• Esc no longer cancels a running turn; it hints at Ctrl+C instead
• Draw the minimal-mode reasoning rail under the diamond, not beside it
• Keep the full URL on every wrapped line of a bare URL in a table cell
• Advertise the 15-second auto-background wait, not the 120-second timeout
• Paint [edit] between [Send now] and [cancel] on queued follow-ups
• Gate monitor-event wakes on the session's own turn flag
• Skill rescan announces only unannounced names and skips identical listings
• Add a multi-folder grok-workspaced daemon alongside the supervised sidecar
• Anchor edit_file diffs to real file line numbers
• Do not treat a permission-denied open of a mode-000 path as a sandbox spoof

Synced from monorepo

Synced from monorepo

Changes:

• Support MCP 2026-07-28 elicitation via multi round-trip requests
• Quieter next-prompt ghost text
• Resolve reasoning-effort selector under the config lock
• Fix smart table highlighting inside /btw
• Hold the stream span open to first token with interior segments
• Drop fake cancel when sending during an auto-wake
• Parent instrumentation timer spans so profiler children nest
• Document 1h get-output wait cap and ACP session/set_config_option
• Add session create sub-phase timers
• Re-inject scheduled loops and live workflows on compaction
• Wait for a spawning child before send fails
• Unfreeze the extensions modal loading spinner
• Advertise bot tool argument schemas
• Support ACP session/set_config_option
• Instrument the worktree lifecycle
• Revert parking credential-less 401s on the uncharged resubmit path when auth recovery is deferred
• Cap get-output waits at 1 hour
• Allowlist setAgentNotificationsEnabled and avatar commands on bot relay
• Ellipsize lone overlong slash command names
• Pin selectable models from signed requirements.toml
• Fix MCP OAuth deadlock on /mcps auth

Synced from monorepo

Synced from monorepo

Changes:

• grok npm: point the bin entry at the installed binary
• grok-shell: cache-first /settings so a warm boot skips the network
• telemetry: record prompt-suggestion fetch outcomes and request ids
• grok-shell: remote prompt-suggestion knobs and session-model default
• Batch safe-point chat insertion
• fix(scheduler): keep dashes in loop task UUIDs
• grok-shell: share one startup settings fetch across the whole boot
• grok-pager: compress Windows CLI builds (zstd/gzip sidecars)
• grok-shell: replace the turn-end usage drain poll with a coordinator notification
• grok-pager: close the workflow modal on X instead of popping the list
• grok-shell: resume when transcript fits the window
• grok-shell: don't cancel live parent-message turns
• grok-shell: move managed config off the startup critical path
• Hooks modal follow-ups: source-level removable flag and non-empty group-collapse seeding
• grok-pager: keep status row stable across send-now
• grok-pager: show humanized error on retry status
• fix(grok): remediate monitored job failures
• grok-shell: report bypass lock as advisory in grok inspect, not enforced

Synced from monorepo

Synced from monorepo

Changes:

• fix(grok-shell): use create/fork Grove gate on new-worktree resume
• fix: deflake cancel/resend PTY + graceful SIGTERM fixture
• security: fix SessionStart hook persistence via config.toml in sandbox that leads to unsandboxed execution
• fix(scheduler): preserve full task UUIDs
• fix(scheduler): stop completed recurring tasks
• grok-hooks: parse PreToolUse additionalContext and defer
• grok-shell: measure session-end teardown as tracing spans
• Separate turn task from cancellation
• Share ordinary human message admission
• Add parent Queue delivery base
• grok-pager: ship the install download compressed (zstd/gzip)
• grok-shell: stop a dropped connection costing a subagent 2s
• grok-mcp: drop comments from the per-server start change
• Fleet observability for turn-level transient retries
• Retry transient sampler failures instead of killing the turn
• Handle the split max_prompt_tokens and max_time_limit incomplete reasons and carry raw_stop_reason
• Collapse slash-command static metadata into a slash_meta! macro
• xai-grok-shell: delete never-wired worktree pool and relocation transaction machinery

Synced from monorepo

Synced from monorepo

Changes:

• hooks: run the prompt gate before the chat-state commit
• pager: hold the client-owned local queue after a hook-blocked turn
• hooks: enforce UserPromptSubmit blocks and hold the queue behind a blocked prompt
• hooks: parse UserPromptSubmit block decisions
• chat/gateway: identity stamp and runtime rehydration from chat store
• tools: wake task waits on child exit
• auto-mode: auto-allow mkdir/touch as safe creation
• shell: headless sessions default permission mode to always-allow so they never wedge on prompts
• shell: emit session-start context occupancy metrics
• unify websocket crates on 0.28 to drop a duplicate stack from the TUI build
• pager: fix always-dirty rebuild inputs causing no-op rebuilds
• sandbox: canonicalize socket masks and require bubblewrap on Devbox
• auth: route auth decisions through an AuthBackend trait
• shell: span profiler
• bench: add cross-transport worktree lifecycle sampler
• sampler: salvage length-truncated responses behind a per-request length policy
• TUI: retarget legacy model slugs to grok-4.6
• pager: reconstruct turn-end markers on resume

Synced from monorepo

Synced from monorepo

Changes:

• Keep user-expanded Execute panels open while progress updates
• Default compaction to two-pass mode
• Add a headless session resume page
• Classify headless sessions in the shell
• Emit startup phases as tracing spans
• Reassemble relay-mangled X10 mouse reports instead of typing them as text
• Default chat compaction mode to segments
• Security: trusting a parent directory no longer implicitly trusts every repo cloned under it later
• Make the interactive default permission mode configurable
• Sanitize and quote remote text in the failed-server reminder
• Announce MCP server failures once per episode
• Reduce auto-mode permission friction and harden always-allow scoping
• Enforce exclusive source selection for workflows
• Reuse a linked codebase for session worktrees
• Route session picker results to the requesting picker
• Hide the workflow tool from child agents
• Gate the bubblewrap lockdown helper on enforce mode
• Revert auto as the default permission mode
• Stop print-once from freezing streaming wake-turn replies at their first chunk
• Treat recalled memory context as advisory

Synced from monorepo

Synced from monorepo

Changes:

• Gate concurrent subagent sampling to avoid proxy rate-limit bursts
• Remove the scrollback accent rail on collapsed rows
• Ensure shell history contains commands
• Measure session start and resume latency
• Record startup sub-phase timing in the startup-complete telemetry event
• Measure how long cancel takes to stop a session
• Measure how long input waits when the pager is busy
• Speed up history jobs by avoiding full-tree checkouts
• Keep a running command alive when you send a message
• Do not treat spawning a subagent as a plan-mode file edit
• Draw the status line row in minimal mode

Source-Revision: 437c7c928f3fcd13e9d37a51d887f41d7f84185d

Synced from monorepo

Synced from monorepo

Changes:

• Support a custom marketplace for plugin CTAs via config
• Switch between /minimal and /fullscreen in-process instead of re-executing
• Add heap-allocated bytes and tool result size to performance events
• Split compaction timing around the model call
• Remove dead managed-client refresh helpers keyed by URL
• Pin the startup refresh bound under a held auth lock
• Key MCP merge and discovery by server name, not URL
• Stop startup from waiting on the machine id
• Emit compaction mode and two-pass fields on product analytics events
• Default the hunk tracker to off
• Show plugin-provided agents in the /agents modal
• Address dashboard store review follow-ups
• Load workflows from the remote subagent bundle
• Infer HTTP transport in mcp add for http(s):// URLs
• Feedback image attachments end-to-end (TUI paste → base64 wire → Slack image blocks)
• Up-arrow jumps to queued prompts instead of history
• Suppress the /feedback trace-consent card for team accounts and deployment-key installs
• Honor effort on workflow child agents
• Honor agent_budget on /workflow and JSON workflow runs

Synced from monorepo

Synced from monorepo

Changes:

• Pager: re-run a command status line on a timer via refresh_interval
• Gate /goal verification on objective-named CI oracles
• Default remember_tool_approvals to on
• Permission analytics: granular prompt outcomes and remember-gate state
• Permission prompts: persistent "Never allow" for MCP tools and web-fetch domains
• Compact on model family switch
• Keep the page-flip prompt pin through scroll
• Let sandbox sessions delete loops
• Render emails as mailto links in the pager
• Keep the ask-user tool out of subagents
• Do not delete a sibling worktree registration when removing a worktree
• Interrupt identical tool-call loops earlier, in two tiers
• Keep paused workflows visible
• Docs: Bash allow rules match per-segment, with wrapper peeling
• Delete a scheduled loop from the background-tasks tray
• Adopt sibling auth tokens before the auth lock; bound startup-path refreshes
• GROK_CONNECT_UI_TIMEOUT_SECS override for the startup connect budget
• Status line
• Long-poll the preview-state document with env-driven cadence knobs

Source-Revision: 7d67deacbeb1c1093fdb4f9bcbfab2630e18a6aa

Synced from monorepo

Synced from monorepo

Changes:

• Clone straight into a projected worktree
• Expand $CLAUDE_PROJECT_DIR before Windows PowerShell hook spawn
• Drop spawn-time capability_mode for subagents
• Fix Imagine zero-data-retention messaging
• Unblock queued messages and queue edits during goal mode
• Add shell completion directory accounting
• Add remaining shell intent codecs
• Add shell registration intent codecs
• Add shell recovery codecs
• Add shell completion codecs
• Add shell attempt journal accounting
• Add shell rewind reference codecs
• Add strict shell attempt record decoder
• Browser-style shift-extended selection in the textarea
• Fix video API zero-data-retention storage errors
• Forward MCP protocol icons on MCP list responses
• Record consent acceptances server-side, verified against what was served

Source-Revision: 9dccd1f00ec13332134a37750b64c047b14dc120

Synced from monorepo

Synced from monorepo

Changes:

• Add memory rollout telemetry
• Preserve agent message anchors
• Preserve typed input provenance
• Add typed input queue policy
• Block sessions behind a consent notice until it is accepted
• Carry a consent notice in remote settings and record the answer locally
• Fix TTS decode window span export under concurrent decode
• Add automatic worktree garbage collection with a fail-closed safety gate
• Restrict login to a team via GROK_FORCE_LOGIN_TEAM_ID environment override
• Add optional model_family to the model catalog schema
• Cap parallel media-generation tool calls (image ≤8, video ≤4)
• Deny unwrap/expect/panic on session resource-release paths
• Revert authentication straddle hardening
• Refresh session auto title early and show recap/last-turn on resume
• Fix still-streaming replies freezing when thinking interleaves

Source-Revision: 84ae1223e57a5048afb570d74d45c051fa604982

Synced from monorepo

Synced from monorepo

Changes:

• Pass reasoning effort via _meta.reasoningEffort on session/new and session/load
• Unicode bidi reordering for Arabic and Persian in the TUI
• Add GROK_CONFIG / GROK_CONFIG_PATH env override for config location
• Warn on a non-numeric port behind a bracketed IPv6 allow entry
• Always send x-grok-client-mode so usage can split interactive vs headless
• Make merge-build CI reliability-first and Windows e2e blocking
• Name first-party writing tools in the preparing spinner
• Remove the queue badge from the status bar
• Fix list-pane out-of-bounds panic on scroll after an empty rebuild
• Harden managed MCP allow and deny URL and name matching
• Accept and forward computer_sessions[].git_source in the gateway
• Remove the todo badge from the status bar
• Hook-denied turns report blocked by a hook, not cancelled by user
• Spawn tools from a cached null descriptor instead of the /dev/null path
• Resolve agent home directories via the standard home-dir lookup
• Raise doom-loop max threshold default to 64
• Don't panic when grok inspect stdout is a closed pipe
• Consolidate Grok home resolution in a shared crate

Synced from monorepo

Synced from monorepo

Changes:

• Resolve client filesystem operations against the bound session's working directory
• Surface image capabilities on conversation metadata
• Resolve Grok home from USERPROFILE on Windows
• Preserve plan-mode prompt drafts across approval
• Make grok-4.6 the bundled default model
• Bound toolOverrides echo so session creation cannot hang on a wedged actor
• Open free-tier upgrade CTA on Apple Terminal Ctrl+O
• Add SuperGrok Plus to free-usage upsell
• Hooks: support updatedInput on PreToolUse
• Run pager commands typed into a queued-row edit
• Tell hooks when the user stops a turn
• Surface silent scheduled-task expiry in the transcript with a typed removal reason
• Send queued messages immediately via interject
• Drag-select to copy on /session-info
• Preserve late subagent lifecycle events
• Default text selection to word select; triple-click selects paragraph
• Let hosts turn off the session-search index
• Add web_search allowed/excluded domain configuration

Source-Revision: e6a67a5408288c98380cd13f3b1fe1fbc01c9f1f