xAI Grok CLI (Grok Build)

Synced from monorepo

Synced from monorepo

Changes:

• Retry Cloudflare 52x and other 5xx sampling errors
• Show non-200 API errors as clean TUI banners
• Sandbox: provision plan, durable metadata, and repos manifest types
• Refresh shell leader docs to match current code
• Let any queued item move up and down
• Toast when session-only modals open from the dashboard
• Pin markdown palette to ANSI16 hues
• Fix /resume search missing sessions loadable via --resume
• Only paint auto recap when the CLI is idle
• Collapse long bash permission bodies behind Ctrl-F
• Full-script permission showcase
• Contextualize Auto-mode security findings
• Always emit mouse/paste resets at teardown
• Keep plain queued prompts visible
• Mouse copy never drops a wide (CJK) grapheme at a selection boundary
• Show disabled MCP stubs only when re-enableable
• Keep syntax styles on wrapped diff lines
• Improve per-turn dashboard summary prompt (reply substance)
• Report the mode the session is actually in
• Dashboard exit/quit quits the CLI
• A send-now never silently destroys an earlier queued message
• Reflow narrow markdown tables in-cell
• Honor highlighted slash command on Enter

Synced from monorepo

Synced from monorepo

Changes:

• Add shortcut_used telemetry for Ctrl+L actions
• Clarify dashboard overlay prev/next shortcut hint
• Fix authentication token suffix handling
• Add ACP session/resume and session/close
• Cap live workflow subagents at 16 per run
• Allow model switch during plan approval
• Render consistent model names in settings
• Preserve errno across signal callbacks
• Extract MCP images before output truncation
• Stop sandbox from refusing to start when deny globs walk a large workspace
• Stream the fork copy so large sessions fork in bounded memory
• Replay file-mention input chunks as user attachment links

Source-Revision: d6937fe255dce4133c3d000a50f9cb94de12f06f

Synced from monorepo

Synced from monorepo

Changes:

• grok-shell: send an expired external-provider credential to the sign-in flow, not a 401 loop
• pager: clickable ▲ jumps to the top of the response being read
• grok-shell: keep a large task log from making the completion message too long
• Plan viewer scrollbar: widen grab zone to the border column; fix striped thumb in Terminal.app
• pager: poll the tmux probe teardown grace instead of sleeping it
• security: vendor-compat MCP kill switch is now actually enforced when reported as on
• grok-shell: restore session eviction when a leader client disconnects
• Bump rust-toolchain to 1.93.0
• workspace: lexical-normalize permission path patterns before glob matching
• pager: reject garbage Enter in the /resume picker
• pager: show Mermaid affordances in plan mode preview
• pager: drop manage-account link from /session-info
• workspace: auto-approve read-only git queries; defer write floor to auto classifier
• Add free-form pattern editor to the "Always allow" command prompt
• grok-shell: fix /btw caching
• pager: Tab walks answers in the ask_user_question card
• External-provider auth refresh: single 7s attempt instead of 3×5s

Synced from monorepo

Synced from monorepo

Changes:

• Release a shell session's resources in one drop
• Make the tools blocking-wait cap client-configurable and self-describing
• Recognize API "exceeds budget" errors as context overflow
• Retry /btw on model overload
• Carry running background tasks and subagents across compaction
• Require round-trip time for SDK liveness checks
• Background-subagent completion reminders with a selectable delivery surface
• Make a PTY shell reap itself until it reaches the registry
• Recover the OS error code from a TLS-phase connection reset
• Consume the attached-client signal and report why idle is withheld
• Treat .grok/sandbox.toml edits as protected so auto mode prompts before writing
• Surface history/search in the Ctrl+. cheatsheet and keep it working in history view
• Delete sessions from the dashboard and welcome list
• Release a session's activity record when the session ends
• Stop charging auth-retry budget for fail-closed 401s; reset it across suspends
• Scope skills watches on project vendor roots
• Make [stop] cancel in-flight compaction
• Make the leader soak measure the leader, not its harness

Synced from monorepo

Synced from monorepo

Changes:

• Temporarily disable session share link creation in the TUI
• Do not approve plan on empty Enter from the revise prompt
• Expose chat product Skills via ACP available_commands_update
• Return immediately from a blocking wait on an already-completed ACP task
• Split headless pager module for clearer structure
• Stop git worktree prune from removing user registrations on resume
• Use compaction sampler tokenizer for item token counts
• Opt-in extra root CAs via GROK_EXTRA_CA_BUNDLE
• Cancel all session subagents when the user stops
• Let the session persistence actor exit when its session ends
• Make fullscreen terminal resize much cheaper on long sessions
• Report honestly from kill_task when an ACP task does not exist
• Hide /usage for external-auth deployments
• Forward the history-load trailer’s computer_reason to the client
• Remove ineffective no-op tool reminder
• Declare slash-command screen-mode support in one place
• Keep settings enum picker on the committed value until Enter
• Reap a PTY’s full process tree
• Stream tool calls from headless mode over ACP

Synced from monorepo

Synced from monorepo

Changes:

• Cache growing transcripts on the messages backend
• Tell the model when a wait was clamped instead of re-inviting it
• Stop the stationarity nudge from claiming results are identical
• Deliver the stationarity nudge after the tool result
• Run auth provider commands through the platform shell (fixes Windows)
• Keep monitor tool stdout short and prescriptive
• Use UUIDs for analytics event insert IDs
• Stop crashing at startup when the host runs out of threads
• Delete the current session from within the session
• Add project forking-settings toggle (backend and deploy-time control)
• Reap a session’s bash and background commands when it closes
• Reap a session’s hook child processes when it closes
• Track coding-data consent decisions
• Fail open the access gate to stop false CLI paywalls
• Ship Agent Dashboard user guide
• Enable doom-loop recovery by default
• Kill agent children and the idle inhibitor when the parent process dies
• Fix multi-process credential wipe and orphaned session log writers

Source-Revision: 6372e41d828b8a6ee82c29e01a69e27ec895cca9

Synced from monorepo

Synced from monorepo

Changes:

• Workspace server: surface preview-proxy metrics through the hub metric pump
• Shell: reclaim a session’s retained state in one entry
• Shell: reclaim a session’s resident state in one entry
• Pager: withhold key event types from Alacritty builds that double keys
• Tools: cancel a session’s subagents when it closes
• Pager: keep the whole plan in scrollback and separate reasoning from output in minimal mode
• Pager: probe terminal version over DA2 and include it with feedback
• SuperGrok Plus: identity, CLI, and analytics tier surfaces
• Shell: inherit the session process scope into subagents
• Pager: build @-file-search matcher lazily on first use
• Tools: fix description and output contradictions in tool definitions
• Workspace: degrade @-file-search instead of aborting on thread exhaustion
• Tools: reap a session’s LSP servers when it closes
• Tools: fix contradictions and defects in tool descriptions, schemas, and harness pools
• MCP: reap stdio MCP children on session close
• Shell: reuse spawn-time skill discovery for session telemetry

Synced from monorepo

Synced from monorepo

Changes:

• Report invalid MCP server config instead of failing startup
• Keep completed terminal output when the gateway connection is lost
• Show a duration-only detail view for single-task task output
• Don't let a stale registry turn counter hide local sessions
• Raise the file-descriptor soft limit on Linux and log effective limits at startup
• Stop aborting when HTTP client construction fails
• Make session thread and runtime spawn failures recoverable
• Fix main-prompt paste parity in the question freeform input
• Fire SessionEnd hooks on /exit and headless quit
• Embed the deployment-config signing public key
• Repaint paste-chip background on inline panel inputs
• Security: prevent acceptEdits from auto-approving agent writes into the always-trusted global hook root
• Fix stacked "Worked for" markers so parks render as status and turns close with exactly one marker
• Parse hooks from config files
• Add a remote kill-switch for managed-config signature verification
• Security: fix workspace file-reference resolution bypassing workspace filesystem confinement

Source-Revision: d02693a856a54f1030695b36b91d276e96b30b23

Synced from monorepo

Synced from monorepo

Changes:

• Refresh tool search when the managed MCP catalog is re-fetched
• Prevent duplicate leader process spawn and startup hang from stale leaders
• Document marketplaces, plugins, and organization controls
• Stamp session ID on image generation direct-to-API requests
• Fix auto mode blocked documentation
• Auto mode considers recent user intent
• Expose deploy archive, taken-down, limit, and in-progress reasons on the chat API
• Fail-closed auth refresh contract for shell clients
• Emit a chat-supplied per-session turn index in turn hooks
• Show bash mode chrome in minimal mode
• Add metrics for true-noop and stationarity stops
• Include voice interim text on prompt submit
• Silently end turn on true-noop thrash
• Quiet copy toast when clipboard delivery is confirmed
• Fix session fork truncating at the wrong prompt in rewound sessions
• Make the idle "still running" watcher cue clickable to open the tasks pane
• Default web search model to grok-4.5
• Let plugin subagents inherit parent MCP servers
• Gate no-op end-turn reminder on system reminders
• Add gateway bridge lifecycle telemetry

Synced from monorepo

Synced from monorepo

Changes:

• Workspace server: report /ready as failed with dwell on hub connect failure
• Refresh OIDC token for the Grok agent in the shell
• ACP terminal output recorder
• Cross-platform provider auth commands in the shell
• Default /resume to Grok sessions with a hint for hidden external sessions
• Resume sessions by title with --resume
• Limit app-builder archive size
• Data-driven tag labels for slash commands
• Doctor fixes for tmux
• Custom provider gateways and subprocess environment policy in the shell
• /tutorial — opt-in onboarding tour of Grok Build
• Soft and required CLI version checks in the shell
• Privacy banner env overrides survive live settings updates
• Add remote flag to override the image-edit model
• Return profile fields from auth info even when the access token is expired
• Add edit control on queued prompt rows
• Keep fail-closed policy when clearing orphans with no team
• Setting to disable the Ctrl+Space/F8 voice shortcut
• Pass --raw to pw-record so Linux dictation works on older PipeWire
• Validate git URLs when adding marketplace entries
• Stop shipping stale tool-doc parameter and tool names

Synced from monorepo

Changes:

• Non-blocking coding-data sharing upsell banner
• Consolidate remediation in Doctor
• Auto mode defers fail-closed gate asks to the classifier
• Coalesce marketplace list fetches
• Allow removing a marketplace source by name
• Contain hung git marketplace sources (timeouts, non-blocking refresh, unbrick modal)
• Label failed workspace RPCs with error_kind
• Drop redundant explicit tonic/prost deps from xai-grok-shell
• Report real exit codes for completed background shells
• Narrow the date-rollover reminder to date-bearing templates
• Wire toolOverrides through the session and agent
• Security: Bash(git:*) allowlist matches whole command chain by prefix
• Split prompt-trigger telemetry and record classifier provenance
• Raise connectors-manager timeout to 60s
• Auto classifier honors recorded approvals for repeat actions
• Apply doctor fixes in the TUI
• Auto-mode classifier timeouts prompt instead of silently denying
• Scope subagent completion drains to the owning session
• Add the toolOverrides wire types
• Set client_identifier=grok-agent-sdk
• Accept both spellings of the workspace-teleport kill switch
• Persist one-shot occurrence journal

Synced from monorepo

Synced from monorepo

Changes:

• Shell: accept target response id on rewind execute
• Shell: stamp response id on chat user message chunks
• Worktree: optional rebuild and stale git registration cleanup in auto-GC
• Worktree: kind-aware auto-GC TTLs and config knobs
• Worktree: macOS process CWD scan and Unix PID liveness for GC guards
• Worktree: automatic throttled GC on startup (Linux age-based; non-Linux dead-only)
• Pager: add [ui].combine_queued_prompts to batch queued follow-ups
• Shell: stop overwriting user skills
• Tools: read markdown in skills/ directories untruncated
• /usage shows per-session token and dollar usage in the TUI
• Security: prompt on environment-dumping ps variants
• Security: always-safe kubectl no longer runs arbitrary kubeconfig credential plugins without permission
• Tools: make scheduler deletion durable
• Shell: add relocation storage primitives
• Shell: give side model calls their own conversation ids
• Fix five workflow-runtime bugs (budget, pause, cancel, reconnect)
• Security: peel env -S / --split-string operands in the Bash permission gate (managed deny/ask)
• Pager: expose doctor in the TUI