xAI Grok CLI (Grok Build)

Synced from monorepo

Synced from monorepo

Changes:

• Report invalid MCP server config instead of failing startup
• Keep completed terminal output when the gateway connection is lost
• Show a duration-only detail view for single-task task output
• Don't let a stale registry turn counter hide local sessions
• Raise the file-descriptor soft limit on Linux and log effective limits at startup
• Stop aborting when HTTP client construction fails
• Make session thread and runtime spawn failures recoverable
• Fix main-prompt paste parity in the question freeform input
• Fire SessionEnd hooks on /exit and headless quit
• Embed the deployment-config signing public key
• Repaint paste-chip background on inline panel inputs
• Security: prevent acceptEdits from auto-approving agent writes into the always-trusted global hook root
• Fix stacked "Worked for" markers so parks render as status and turns close with exactly one marker
• Parse hooks from config files
• Add a remote kill-switch for managed-config signature verification
• Security: fix workspace file-reference resolution bypassing workspace filesystem confinement

Source-Revision: d02693a856a54f1030695b36b91d276e96b30b23

Synced from monorepo

Synced from monorepo

Changes:

• Refresh tool search when the managed MCP catalog is re-fetched
• Prevent duplicate leader process spawn and startup hang from stale leaders
• Document marketplaces, plugins, and organization controls
• Stamp session ID on image generation direct-to-API requests
• Fix auto mode blocked documentation
• Auto mode considers recent user intent
• Expose deploy archive, taken-down, limit, and in-progress reasons on the chat API
• Fail-closed auth refresh contract for shell clients
• Emit a chat-supplied per-session turn index in turn hooks
• Show bash mode chrome in minimal mode
• Add metrics for true-noop and stationarity stops
• Include voice interim text on prompt submit
• Silently end turn on true-noop thrash
• Quiet copy toast when clipboard delivery is confirmed
• Fix session fork truncating at the wrong prompt in rewound sessions
• Make the idle "still running" watcher cue clickable to open the tasks pane
• Default web search model to grok-4.5
• Let plugin subagents inherit parent MCP servers
• Gate no-op end-turn reminder on system reminders
• Add gateway bridge lifecycle telemetry

Synced from monorepo

Synced from monorepo

Changes:

• Workspace server: report /ready as failed with dwell on hub connect failure
• Refresh OIDC token for the Grok agent in the shell
• ACP terminal output recorder
• Cross-platform provider auth commands in the shell
• Default /resume to Grok sessions with a hint for hidden external sessions
• Resume sessions by title with --resume
• Limit app-builder archive size
• Data-driven tag labels for slash commands
• Doctor fixes for tmux
• Custom provider gateways and subprocess environment policy in the shell
• /tutorial — opt-in onboarding tour of Grok Build
• Soft and required CLI version checks in the shell
• Privacy banner env overrides survive live settings updates
• Add remote flag to override the image-edit model
• Return profile fields from auth info even when the access token is expired
• Add edit control on queued prompt rows
• Keep fail-closed policy when clearing orphans with no team
• Setting to disable the Ctrl+Space/F8 voice shortcut
• Pass --raw to pw-record so Linux dictation works on older PipeWire
• Validate git URLs when adding marketplace entries
• Stop shipping stale tool-doc parameter and tool names

Synced from monorepo

Changes:

• Non-blocking coding-data sharing upsell banner
• Consolidate remediation in Doctor
• Auto mode defers fail-closed gate asks to the classifier
• Coalesce marketplace list fetches
• Allow removing a marketplace source by name
• Contain hung git marketplace sources (timeouts, non-blocking refresh, unbrick modal)
• Label failed workspace RPCs with error_kind
• Drop redundant explicit tonic/prost deps from xai-grok-shell
• Report real exit codes for completed background shells
• Narrow the date-rollover reminder to date-bearing templates
• Wire toolOverrides through the session and agent
• Security: Bash(git:*) allowlist matches whole command chain by prefix
• Split prompt-trigger telemetry and record classifier provenance
• Raise connectors-manager timeout to 60s
• Auto classifier honors recorded approvals for repeat actions
• Apply doctor fixes in the TUI
• Auto-mode classifier timeouts prompt instead of silently denying
• Scope subagent completion drains to the owning session
• Add the toolOverrides wire types
• Set client_identifier=grok-agent-sdk
• Accept both spellings of the workspace-teleport kill switch
• Persist one-shot occurrence journal

Synced from monorepo

Synced from monorepo

Changes:

• Shell: accept target response id on rewind execute
• Shell: stamp response id on chat user message chunks
• Worktree: optional rebuild and stale git registration cleanup in auto-GC
• Worktree: kind-aware auto-GC TTLs and config knobs
• Worktree: macOS process CWD scan and Unix PID liveness for GC guards
• Worktree: automatic throttled GC on startup (Linux age-based; non-Linux dead-only)
• Pager: add [ui].combine_queued_prompts to batch queued follow-ups
• Shell: stop overwriting user skills
• Tools: read markdown in skills/ directories untruncated
• /usage shows per-session token and dollar usage in the TUI
• Security: prompt on environment-dumping ps variants
• Security: always-safe kubectl no longer runs arbitrary kubeconfig credential plugins without permission
• Tools: make scheduler deletion durable
• Shell: add relocation storage primitives
• Shell: give side model calls their own conversation ids
• Fix five workflow-runtime bugs (budget, pause, cancel, reconnect)
• Security: peel env -S / --split-string operands in the Bash permission gate (managed deny/ask)
• Pager: expose doctor in the TUI

Synced from monorepo

Changes:

• Gate session-lifecycle heap steady state with a dhat soak
• Unbreak merge lifecycle e2e after default model → grok-4.5
• Scan home-scope rules dirs at <root>/rules
• Complete text-input paste and terminal parity
• Gate project roles and personas
• Use canonical editing in dialogs
• Use canonical editing in search bars
• Reject ambiguous MCP tool IDs
• Harden Git operands for plugins
• Simplify queue drain API
• Pass RFC 9207 iss through MCP OAuth token exchange
• Show leader roster when local agents map is empty
• Use canonical editing in Persona views
• Remove marketplace default-skills auto-install and purge old installs
• Use canonical editing in extension forms
• Add canonical dashboard text editing
• Use canonical editing in settings
• Add /summarize as a /recap alias
• Restore previous agent when exiting dashboard
• Use tool_choice auto for compaction
• Settings toggle for snap-prompt-to-top on send
• Update default models to grok-4.5
• Source login shell once for local bash (env + alias/function snapshot)
• Template hardcoded param names in server-native tool descriptions
• Fix System-Reminder XML tag injection in CLAUDE.md via agents_md

Synced from monorepo

Changes:

• Classify clipboard delivery confidence
• Add durable session update append
• Scope the xAI session bearer to first-party memory embedding endpoints
• Persist subagent outputs to disk and bound long-lived agent state
• Add MiniSweAgent:bash for mini-swe-agent parity
• Revert taking local sessions off the persistent shell
• Contextual tip recommending grok wrap on SSH sessions
• Voice STT bearer from model BYOK env_key/api_key
• Define exact website policies for sandbox
• Gate unsafe shell environments
• Shared pin hoist; single require_sha gate for marketplace plugins
• Server-signed is-managed claim (closes sidecar-removal downgrade)
• Optional require_sha pin for remote plugin installs
• Show session title and last exchange in the exit resume hint
• Gate shell output redirects
• Warn when fail_closed is present but not a boolean
• Add canonical text editing core (ratatui-textarea)
• Keep execution state out of goal scratch
• Add acknowledged persistence primitives
• Inherit child network restrictions in sandbox
• Fail closed when hook matchers fail to recompile
• Add MCP setup preferences for plugin MCPs
• Gate sourced shell scripts

Synced from monorepo

Changes:

• grok-shell: request workspaces:read/write OAuth2 scopes
• security: fix SSRF bypass via HTTP redirect in hook runner
• fix(grok-build): enterprise STT WSS URL + API-key voice bearer
• Harden identity-change purge and sync-marker invariants
• sandbox + workspace-server: delete the legacy ready-file arm
• Show billing URL when browser cannot open
• fix(pager): show folder-trust UI in minimal mode
• fix(pager): drain task_backgrounded before no-wait headless exit
• grok-agent-sdk: stop SDK-spawned agents from staging self-updates they can never adopt
• Split settings_modal into directory module
• Delegate VS Code SSH file links
• grok-shell: release the workspace session binding when a session is removed
• keep skills reachable when their name collides with a client builtin
• Preserve semantic link targets