xAI Grok CLI (Grok Build)

Synced from monorepo

Changes:

• Gate session-lifecycle heap steady state with a dhat soak
• Unbreak merge lifecycle e2e after default model → grok-4.5
• Scan home-scope rules dirs at <root>/rules
• Complete text-input paste and terminal parity
• Gate project roles and personas
• Use canonical editing in dialogs
• Use canonical editing in search bars
• Reject ambiguous MCP tool IDs
• Harden Git operands for plugins
• Simplify queue drain API
• Pass RFC 9207 iss through MCP OAuth token exchange
• Show leader roster when local agents map is empty
• Use canonical editing in Persona views
• Remove marketplace default-skills auto-install and purge old installs
• Use canonical editing in extension forms
• Add canonical dashboard text editing
• Use canonical editing in settings
• Add /summarize as a /recap alias
• Restore previous agent when exiting dashboard
• Use tool_choice auto for compaction
• Settings toggle for snap-prompt-to-top on send
• Update default models to grok-4.5
• Source login shell once for local bash (env + alias/function snapshot)
• Template hardcoded param names in server-native tool descriptions
• Fix System-Reminder XML tag injection in CLAUDE.md via agents_md

Synced from monorepo

Changes:

• Classify clipboard delivery confidence
• Add durable session update append
• Scope the xAI session bearer to first-party memory embedding endpoints
• Persist subagent outputs to disk and bound long-lived agent state
• Add MiniSweAgent:bash for mini-swe-agent parity
• Revert taking local sessions off the persistent shell
• Contextual tip recommending grok wrap on SSH sessions
• Voice STT bearer from model BYOK env_key/api_key
• Define exact website policies for sandbox
• Gate unsafe shell environments
• Shared pin hoist; single require_sha gate for marketplace plugins
• Server-signed is-managed claim (closes sidecar-removal downgrade)
• Optional require_sha pin for remote plugin installs
• Show session title and last exchange in the exit resume hint
• Gate shell output redirects
• Warn when fail_closed is present but not a boolean
• Add canonical text editing core (ratatui-textarea)
• Keep execution state out of goal scratch
• Add acknowledged persistence primitives
• Inherit child network restrictions in sandbox
• Fail closed when hook matchers fail to recompile
• Add MCP setup preferences for plugin MCPs
• Gate sourced shell scripts

Synced from monorepo

Changes:

• grok-shell: request workspaces:read/write OAuth2 scopes
• security: fix SSRF bypass via HTTP redirect in hook runner
• fix(grok-build): enterprise STT WSS URL + API-key voice bearer
• Harden identity-change purge and sync-marker invariants
• sandbox + workspace-server: delete the legacy ready-file arm
• Show billing URL when browser cannot open
• fix(pager): show folder-trust UI in minimal mode
• fix(pager): drain task_backgrounded before no-wait headless exit
• grok-agent-sdk: stop SDK-spawned agents from staging self-updates they can never adopt
• Split settings_modal into directory module
• Delegate VS Code SSH file links
• grok-shell: release the workspace session binding when a session is removed
• keep skills reachable when their name collides with a client builtin
• Preserve semantic link targets