grok-bot-cli 0.3.0 → 0.4.0

package/dist/mcp.json

@@ -0,0 +1 @@
+{"$schema":"https://agent-plugins.org/schemas/1.0.0/mcp.schema.json","mcpServers":{"grok-bot":{"args":["mcp/mcp-grok-bot-b8c2461e.mjs"],"command":"node","cwd":"${PLUGIN_ROOT}","env":{"AGENT_BUNDLE_PLUGIN_ROOT":"${PLUGIN_ROOT}"},"type":"stdio"}}}

package/dist/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "grok-bot-cli",
+  "version": "0.4.0",
+  "description": "CLI and Agent Bundle plugin for Grok Bot agents and groups: create, update, message, inspect threads, and automate cleanup",
+  "type": "module",
+  "engines": {
+    "node": ">=22.19.0"
+  },
+  "scripts": {
+    "build": "agent-bundle build",
+    "changeset": "changeset",
+    "check": "npm run validate && npm run build && npm run validate:artifact && npm run typecheck && npm test",
+    "gbot": "node dist/bin/gbot.mjs",
+    "release": "changeset publish",
+    "test": "npm run test:unit && npm run test:routes",
+    "test:routes": "rstest --config rstest.route-unit.config.ts",
+    "test:unit": "node scripts/run-unit-tests.mjs",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "validate": "agent-bundle validate",
+    "validate:artifact": "agent-bundle validate --artifact artifact"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ScriptedAlchemy/grok-bot-cli.git"
+  },
+  "homepage": "https://github.com/ScriptedAlchemy/grok-bot-cli#readme",
+  "bugs": {
+    "url": "https://github.com/ScriptedAlchemy/grok-bot-cli/issues"
+  },
+  "author": "Zack Jackson (https://github.com/ScriptedAlchemy)",
+  "license": "MIT",
+  "keywords": [
+    "grok",
+    "grok-bot",
+    "grokbot",
+    "gbot",
+    "cursor",
+    "ai-agents",
+    "automation",
+    "terminal",
+    "cli",
+    "agent-bundle"
+  ],
+  "devDependencies": {
+    "@agent-bundle/runtime": "https://pkg.pr.new/ScriptedAlchemy/agent-bundle/@agent-bundle/runtime@8e55ab832d",
+    "@changesets/cli": "3.0.3",
+    "@rstest/core": "0.11.12",
+    "@types/node": "^22.18.0",
+    "@types/react": "^19.2.18",
+    "agent-bundle": "https://pkg.pr.new/ScriptedAlchemy/agent-bundle/agent-bundle@8e55ab832d",
+    "react": "19.3.0",
+    "react-dom": "19.3.0",
+    "typescript": "7.0.2",
+    "zod": "4.6.5"
+  },
+  "bin": {
+    "gbot": "./bin/gbot.mjs",
+    "gbot-install": "./bin/gbot-install.js"
+  }
+}

package/dist/plugin.json

@@ -0,0 +1 @@
+{"$schema":"https://agent-plugins.org/schemas/1.0.0/plugin.schema.json","author":{"name":"Zack Jackson","url":"https://github.com/ScriptedAlchemy"},"description":"Message Grok Bot bots and groups and read their threads from Codex, Claude Code, and Cursor.","homepage":"https://github.com/ScriptedAlchemy/grok-bot-cli#readme","keywords":["grok","grok-bot","grokbot","gbot","cursor","ai-agents","automation","terminal","cli","agent-bundle"],"license":"MIT","name":"gbot","repository":"https://github.com/ScriptedAlchemy/grok-bot-cli","version":"0.4.0"}

package/dist/skills/talk-to-grok-bot/SKILL.md

@@ -0,0 +1,37 @@
+---
+name: talk-to-grok-bot
+description: Send or read a Grok Bot thread via gbot_send/gbot_thread. Use when handing off to a named bot/group or posting a status note agents watch — not for work you can finish yourself.
+---
+# Talk to Grok Bot
+
+MCP tools on the `grok-bot` server use the same gateway as the `gbot` CLI.
+
+## When to load this
+
+- The repo or task names a bot as owner, or you need a decision only that thread holds.
+- You want a short status note in a shared group other agents watch.
+
+Do not ping a bot for work you can finish yourself. Replies are asynchronous — never block a turn waiting.
+
+## How
+
+1. `gbot_send` with `target` (name or id) and `message` (first line: who you are + what you need).
+2. Later, call `gbot_thread` with the same `target` (`limit` defaults to 40). The default receipt has only `summary`, `cursor`, `entryCount`, and `gapReset`; it never includes entries.
+3. Poll with the previous `cursor` as `after`. This is exclusive and client-side: `entryCount: 0` means no change.
+4. Pass `full: true` only when entry bodies are needed inline; it adds bounded `entries` to structured content, not to `Agent.Text`. If `gapReset` is true, repeat the same call with `full: true` to inspect the bounded reset snapshot.
+
+Bot replies are `send-message` entries; yours are `message` with `role: user`.
+
+List targets with `gbot bots list` / `gbot groups list` when the name is ambiguous.
+
+## CLI automation
+
+The bundled `gbot` and `gbot-install` executables require Node.js 22.19.0 or newer.
+For `gbot send`, `gbot codex status`, and `gbot codex send` with `--json`, read the result
+document from stdout and branch on its `exitCode`, `mode`, `reason`, and `delivery`.
+Framework argument/schema errors use stderr and exit 2. `--json` is reserved before
+`--`; put `--` before flag-like message text.
+
+## Auth
+
+Same order as `gbot`: explicit `GROK_BOT_GATEWAY_*`, else Grok Bot app session, else `CURSOR_ACCESS_TOKEN`. `gbot doctor` shows which source is present.

package/package.json

@@ -1,20 +1,29 @@
 {
   "name": "grok-bot-cli",
-  "version": "0.3.0",
-  "description": "CLI for Grok Bot agents and groups: create, update, message, inspect threads, and automate cleanup",
+  "version": "0.4.0",
+  "description": "CLI and Agent Bundle plugin for Grok Bot agents and groups: create, update, message, inspect threads, and automate cleanup",
   "type": "module",
   "bin": {
-    "gbot": "src/cli.js",
-    "grok-bot": "src/cli.js"
+    "gbot": "./dist/bin/gbot.mjs",
+    "gbot-install": "./dist/bin/gbot-install.js",
+    "grok-bot": "./dist/bin/gbot.mjs"
   },
   "engines": {
-    "node": ">=18"
+    "node": ">=22.19.0"
   },
   "scripts": {
+    "build": "agent-bundle build",
     "changeset": "changeset",
-    "gbot": "node src/cli.js",
+    "check": "npm run validate && npm run build && npm run validate:artifact && npm run typecheck && npm test",
+    "gbot": "node dist/bin/gbot.mjs",
+    "prepack": "agent-bundle prepack",
     "release": "changeset publish",
-    "test": "node scripts/run-unit-tests.mjs"
+    "test": "npm run test:unit && npm run test:routes",
+    "test:routes": "rstest --config rstest.route-unit.config.ts",
+    "test:unit": "node scripts/run-unit-tests.mjs",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "validate": "agent-bundle validate",
+    "validate:artifact": "agent-bundle validate --artifact artifact"
   },
   "repository": {
     "type": "git",
@@ -35,14 +44,25 @@
     "ai-agents",
     "automation",
     "terminal",
-    "cli"
+    "cli",
+    "agent-bundle"
   ],
   "files": [
-    "src",
+    "dist",
     "README.md",
+    "CHANGELOG.md",
     "LICENSE"
   ],
   "devDependencies": {
-    "@changesets/cli": "3.0.3"
+    "@agent-bundle/runtime": "https://pkg.pr.new/ScriptedAlchemy/agent-bundle/@agent-bundle/runtime@8e55ab832d",
+    "@changesets/cli": "3.0.3",
+    "@rstest/core": "0.11.12",
+    "@types/node": "^22.18.0",
+    "@types/react": "^19.2.18",
+    "agent-bundle": "https://pkg.pr.new/ScriptedAlchemy/agent-bundle/agent-bundle@8e55ab832d",
+    "react": "19.3.0",
+    "react-dom": "19.3.0",
+    "typescript": "7.0.2",
+    "zod": "4.6.5"
   }
 }

package/src/app-session.js

@@ -1,249 +0,0 @@
-import crypto from "node:crypto";
-import { execFileSync } from "node:child_process";
-import { existsSync, readFileSync } from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-
-// Chromium OSCrypt: "v10" = fixed password (macOS: the Keychain password; Linux: "peanuts"),
-// "v11" = Linux Secret Service password. macOS stretches with 1003 PBKDF2 rounds, Linux with 1.
-// Windows v10 uses AES-256-GCM with a DPAPI-wrapped key from Local State (not PBKDF2).
-const SAFE_STORAGE_PREFIX_V10 = "v10";
-const SAFE_STORAGE_PREFIX_V11 = "v11";
-const SAFE_STORAGE_PREFIX_V10_BUF = Buffer.from(SAFE_STORAGE_PREFIX_V10);
-const LINUX_BASIC_TEXT_PASSWORD = "peanuts";
-const SUPPORTED_PLATFORMS = new Set(["darwin", "linux", "win32"]);
-
-export class GrokBotGatewaySessionError extends Error {
-  constructor(code, message) {
-    super(message);
-    this.name = "GrokBotGatewaySessionError";
-    this.code = code;
-  }
-}
-
-function encryptedPayload(wrapped) {
-  if (wrapped.version != null && wrapped.version !== 1 && wrapped.version !== 2) {
-    throw new GrokBotGatewaySessionError(
-      "UNSUPPORTED_VERSION",
-      `Unsupported Grok Bot gateway descriptor version ${wrapped.version}.`,
-    );
-  }
-  let encrypted;
-  if (wrapped.version === 2) {
-    const entries = Object.values(wrapped.entries ?? {});
-    if (entries.length === 0) {
-      throw new GrokBotGatewaySessionError(
-        "EMPTY_ENTRIES",
-        "Grok Bot gateway descriptor has no saved gateway entries.",
-      );
-    }
-    if (entries.length > 1) {
-      throw new GrokBotGatewaySessionError(
-        "AMBIGUOUS_ENTRIES",
-        "Grok Bot gateway descriptor has multiple saved gateway entries and no active entry selection.",
-      );
-    }
-    encrypted = entries[0]?.encrypted;
-  } else {
-    encrypted = wrapped.encrypted;
-  }
-  if (typeof encrypted !== "string" || !encrypted) {
-    throw new GrokBotGatewaySessionError(
-      "MISSING_ENCRYPTED_PAYLOAD",
-      "Grok Bot gateway descriptor is missing an encrypted payload.",
-    );
-  }
-  return encrypted;
-}
-
-function safeStorageKey(password, platform) {
-  const iterations = platform === "linux" ? 1 : 1003;
-  return crypto.pbkdf2Sync(password, "saltysalt", iterations, 16, "sha1");
-}
-
-export function decryptSafeStorageString(encryptedBase64, password, platform = "darwin") {
-  const encrypted = Buffer.from(encryptedBase64, "base64");
-  const prefix = encrypted.subarray(0, 3).toString("latin1");
-  const linuxBasicText = platform === "linux" && prefix === SAFE_STORAGE_PREFIX_V10;
-  const keyring = prefix === SAFE_STORAGE_PREFIX_V10 || (platform === "linux" && prefix === SAFE_STORAGE_PREFIX_V11);
-  if (!keyring) {
-    throw new Error("Unsupported Grok Bot Safe Storage format.");
-  }
-
-  const key = safeStorageKey(linuxBasicText ? LINUX_BASIC_TEXT_PASSWORD : password, platform);
-  const decipher = crypto.createDecipheriv(
-    "aes-128-cbc",
-    key,
-    Buffer.alloc(16, 32),
-  );
-  return Buffer.concat([
-    decipher.update(encrypted.subarray(3)),
-    decipher.final(),
-  ]).toString("utf8");
-}
-
-// Windows Chromium Safe Storage: "v10" + 12-byte nonce + AES-256-GCM ciphertext + 16-byte tag.
-export function decryptWindowsSafeStorageString(encryptedBase64, key) {
-  const encrypted = Buffer.from(encryptedBase64, "base64");
-  if (!encrypted.subarray(0, 3).equals(SAFE_STORAGE_PREFIX_V10_BUF)) {
-    throw new Error("Unsupported Grok Bot Safe Storage format.");
-  }
-
-  const decipher = crypto.createDecipheriv(
-    "aes-256-gcm",
-    key,
-    encrypted.subarray(3, 15),
-  );
-  decipher.setAuthTag(encrypted.subarray(-16));
-  return Buffer.concat([
-    decipher.update(encrypted.subarray(15, -16)),
-    decipher.final(),
-  ]).toString("utf8");
-}
-
-function grokBotAppDataPath(home, platform, env = {}) {
-  if (platform === "win32") {
-    const appData = env.APPDATA || join(home, "AppData/Roaming");
-    return join(appData, "Grok Bot");
-  }
-  if (platform === "linux") {
-    const configHome = env.XDG_CONFIG_HOME || join(home, ".config");
-    return join(configHome, "Grok Bot");
-  }
-  return join(home, "Library/Application Support/Grok Bot");
-}
-
-export function grokBotGatewayDescriptorPath(home = homedir(), platform = process.platform, env = process.env) {
-  return join(grokBotAppDataPath(home, platform, env), "gateway-descriptor.json");
-}
-
-function sessionEnv({ env = process.env, appData } = {}) {
-  // Windows tests pass appData directly; empty string clears APPDATA to exercise the home fallback.
-  if (appData !== undefined) return { ...env, APPDATA: appData };
-  return env;
-}
-
-export function hasGrokBotGatewaySession({
-  platform = process.platform,
-  home = homedir(),
-  env = process.env,
-  appData,
-} = {}) {
-  return (
-    SUPPORTED_PLATFORMS.has(platform) &&
-    existsSync(grokBotGatewayDescriptorPath(home, platform, sessionEnv({ env, appData })))
-  );
-}
-
-function readKeychainPassword(platform = process.platform) {
-  if (platform === "linux") {
-    return execFileSync(
-      "secret-tool",
-      ["lookup", "xdg:schema", "chrome_libsecret_os_crypt_password_v2", "application", "Grok Bot"],
-      { encoding: "utf8" },
-    ).trimEnd();
-  }
-  return execFileSync(
-    "/usr/bin/security",
-    ["find-generic-password", "-w", "-s", "Grok Bot Safe Storage"],
-    { encoding: "utf8" },
-  ).trimEnd();
-}
-
-function unprotectWithDpapi(blob) {
-  const script =
-    "Add-Type -AssemblyName System.Security; " +
-    "$blob = [Convert]::FromBase64String([Console]::In.ReadToEnd().Trim()); " +
-    "[Convert]::ToBase64String([Security.Cryptography.ProtectedData]::Unprotect($blob, $null, 'CurrentUser'))";
-  const out = execFileSync(
-    join(
-      process.env.SystemRoot ?? "C:\\Windows",
-      "System32/WindowsPowerShell/v1.0/powershell.exe",
-    ),
-    ["-NoProfile", "-NonInteractive", "-Command", script],
-    { input: blob.toString("base64"), encoding: "utf8" },
-  );
-  return Buffer.from(out.trim(), "base64");
-}
-
-function readWindowsSafeStorageKey(home, env, unprotectData) {
-  const path = join(grokBotAppDataPath(home, "win32", env), "Local State");
-  const encryptedKey = existsSync(path)
-    ? JSON.parse(readFileSync(path, "utf8")).os_crypt?.encrypted_key
-    : null;
-  const blob = Buffer.from(
-    typeof encryptedKey === "string" ? encryptedKey : "",
-    "base64",
-  );
-  if (blob.subarray(0, 5).toString("latin1") !== "DPAPI") {
-    throw new GrokBotGatewaySessionError(
-      "MISSING_SAFE_STORAGE_KEY",
-      "Grok Bot Local State has no Safe Storage key.",
-    );
-  }
-  return unprotectData(blob.subarray(5));
-}
-
-export function loadGrokBotGatewaySession({
-  platform = process.platform,
-  home = homedir(),
-  env = process.env,
-  appData,
-  getKeychainPassword = readKeychainPassword,
-  unprotectData = unprotectWithDpapi,
-} = {}) {
-  if (!SUPPORTED_PLATFORMS.has(platform)) return null;
-
-  const effectiveEnv = sessionEnv({ env, appData });
-  const path = grokBotGatewayDescriptorPath(home, platform, effectiveEnv);
-  if (!existsSync(path)) return null;
-
-  const wrapped = JSON.parse(readFileSync(path, "utf8"));
-  const encrypted = encryptedPayload(wrapped);
-  let clear;
-  if (platform === "win32") {
-    clear = decryptWindowsSafeStorageString(
-      encrypted,
-      readWindowsSafeStorageKey(home, effectiveEnv, unprotectData),
-    );
-  } else {
-    const prefix = Buffer.from(encrypted, "base64").subarray(0, 3).toString("latin1");
-    // Linux v10 is the keyring-less basic_text backend; no secret store to ask.
-    const needsKeychain = !(platform === "linux" && prefix === SAFE_STORAGE_PREFIX_V10);
-    clear = decryptSafeStorageString(
-      encrypted,
-      needsKeychain ? getKeychainPassword(platform) : LINUX_BASIC_TEXT_PASSWORD,
-      platform,
-    );
-  }
-  const descriptor = JSON.parse(clear);
-  if (!descriptor.baseUrl || !descriptor.token) {
-    throw new GrokBotGatewaySessionError(
-      "INCOMPLETE_DESCRIPTOR",
-      "Decrypted Grok Bot gateway descriptor is incomplete.",
-    );
-  }
-
-  return {
-    gatewayUrl: String(descriptor.baseUrl).replace(/\/$/, ""),
-    gatewayToken: String(descriptor.token),
-    headers: descriptor.headers ?? {},
-  };
-}
-
-export function inspectGrokBotGatewaySession(options = {}) {
-  if (!hasGrokBotGatewaySession(options)) {
-    return { present: false, usable: false };
-  }
-  try {
-    loadGrokBotGatewaySession(options);
-    return { present: true, usable: true };
-  } catch (error) {
-    return {
-      present: true,
-      usable: false,
-      code: error instanceof GrokBotGatewaySessionError ? error.code : "UNUSABLE_SESSION",
-      error: error instanceof Error ? error.message : String(error),
-    };
-  }
-}