@bivy/bivy 0.16.25-staging.43 → 0.16.25-staging.44

package/bin/agent-manifest.json

@@ -191,7 +191,7 @@
       "hidden": false,
       "supportTier": "supported",
       "certification": "release-tested",
-      "testedVersion": "1.0.0",
+      "testedVersion": "1.0.41",
       "headlessFlags": [
         "--always-approve",
         "-p",

package/dist/agents/profiles.js

@@ -356,8 +356,11 @@ export const AGENT_PROFILES = {
         behaviors: { preflight: "grok", prepare: "grok-auth", nativeSessions: "grok" },
         command: "grok",
         packageName: "grok (curl -fsSL https://x.ai/cli/install.sh | bash)",
+        // Supported tier: Grok runs on the governed ACP path by default (per-tool
+        // Approve/Deny + native resume + live model state), the same bar Pi, Claude
+        // Code, Codex, and OpenCode clear. See `acp` below for the version fallback.
         supportTier: "supported",
-        testedVersion: "1.0.0",
+        testedVersion: "1.0.41",
         authOwner: "mixed",
         blurb: "xAI's official Grok coding agent (Grok CLI) — SuperGrok/X subscription or API key.",
         // Official CLI: `grok -p "<prompt>"` (alias `--single`) runs one headless
@@ -414,6 +417,16 @@ export const AGENT_PROFILES = {
         // continued turn keeps the chosen effort. Override with BIVY_GROK_THINKING.
         thinking: { levels: ["low", "medium", "high", "xhigh"], default: "high", template: ["--reasoning-effort", "{level}"], insertAt: 0 },
         promptMode: "argv",
+        // `grok agent stdio` ("Run the agent over stdio") is a full ACP server
+        // (protocolVersion 1: session/new, session/prompt, session/request_permission,
+        // loadSession resume, live model state) — the governed ProtocolRuntime path
+        // that supersedes the `--always-approve` pipe above with real per-tool
+        // Approve/Deny. Validated against grok 1.0.41, so it is ON by default
+        // (`preferred`) — gated on the binary actually describing the `agent`
+        // subcommand ("Run Grok without the interactive UI" in `grok --help`), so an
+        // older CLI falls back to the pipe path rather than opening a dead session.
+        // Force the pipe path back with BIVY_GROK_ACP=0.
+        acp: { args: ["agent", "stdio"], helpToken: "without the interactive ui", preferred: true },
         install: {
             kind: "curl",
             display: "curl -fsSL https://x.ai/cli/install.sh | bash",

package/dist/certification/generated.js

@@ -7,5 +7,6 @@ export const CERTIFICATION_MATRIX = {
         { id: "codex-approvals", status: "active", executionMode: "protocol", pinnedVersion: "0.156.1", capabilities: ["toolInterception", "modelSelection", "resume"] },
         { id: "pi", status: "active", executionMode: "protocol", pinnedVersion: "0.87.1", capabilities: ["toolInterception", "modelSelection", "resume"] },
         { id: "opencode", status: "active", executionMode: "protocol", pinnedVersion: "1.18.32", capabilities: ["toolInterception", "modelSelection", "resume"] },
+        { id: "grok", status: "active", executionMode: "protocol", pinnedVersion: "1.0.41", capabilities: ["toolInterception", "modelSelection", "resume"] },
     ]
 };

package/dist/runtime/index.js

@@ -695,6 +695,19 @@ function acpRuntimeOptions(opts) {
         // ACP handshake doesn't carry them); a bare ACP agent has none.
         ...(slashCommands ? { slashCommands } : {}),
         ...(opts.credsDir ? { credentials: createCredentialStore(opts.credsDir) } : {}),
+        // Declared credential behaviors apply to the governed path exactly as they do
+        // to the pipe path: the preflight surfaces a clear no-credential error before
+        // the shim spawns, and Grok's prepare materializes `auth.json` from Bivy's
+        // vault (pinning GROK_HOME) so `grok agent stdio` starts authenticated.
+        ...(opts.behaviors?.preflight ? { preflight: PREFLIGHT_BEHAVIORS[opts.behaviors.preflight] } : {}),
+        ...(opts.behaviors?.prepare === "grok-auth" && opts.credsDir
+            ? {
+                prepare: async () => {
+                    const home = await ensureGrokAuth(opts.credsDir);
+                    return home ? { GROK_HOME: home } : {};
+                },
+            }
+            : {}),
         // OpenCode's own store is SQLite under $XDG_DATA_HOME, so an ACP-promoted
         // opencode can both read a resumed session's transcript back for history
         // preload (loadHistory), drop it on delete (deleteHistory), and — the fork

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bivy/bivy",
-  "version": "0.16.25-staging.43",
+  "version": "0.16.25-staging.44",
   "type": "module",
   "license": "AGPL-3.0-only",
   "description": "Run coding agents on machines you own. Open-source, self-hostable agent workspace.",