grok-bot-cli 0.6.0 → 0.8.0

package/dist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "grok-bot-cli",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "description": "CLI and Agent Bundle plugin for Grok Bot agents and groups: create, update, message, inspect threads, and automate cleanup",
   "type": "module",
   "engines": {
@@ -42,12 +42,12 @@
     "agent-bundle"
   ],
   "devDependencies": {
-    "@agent-bundle/runtime": "https://pkg.pr.new/ScriptedAlchemy/agent-bundle/@agent-bundle/runtime@8e55ab832d",
+    "@agent-bundle/runtime": "https://pkg.pr.new/ScriptedAlchemy/agent-bundle/@agent-bundle/runtime@57a9196caf2590ece001799eaeed92613352bc21",
     "@changesets/cli": "3.0.3",
     "@rstest/core": "0.11.12",
     "@types/node": "^24.0.0",
     "@types/react": "^19.2.18",
-    "agent-bundle": "https://pkg.pr.new/ScriptedAlchemy/agent-bundle/agent-bundle@8e55ab832d",
+    "agent-bundle": "https://pkg.pr.new/ScriptedAlchemy/agent-bundle/agent-bundle@57a9196caf2590ece001799eaeed92613352bc21",
     "react": "19.3.0",
     "react-dom": "19.3.0",
     "typescript": "7.0.2",

package/dist/plugin.json

@@ -1 +1 @@
-{"$schema":"https://agent-plugins.org/schemas/1.0.0/plugin.schema.json","author":{"name":"Zack Jackson","url":"https://github.com/ScriptedAlchemy"},"description":"Message Grok Bot from Codex, Claude Code, and Cursor, with managed automatic replies and explicit Codex conversation links.","homepage":"https://github.com/ScriptedAlchemy/grok-bot-cli#readme","keywords":["grok","grok-bot","grokbot","gbot","cursor","ai-agents","automation","terminal","cli","agent-bundle"],"license":"MIT","name":"gbot","repository":"https://github.com/ScriptedAlchemy/grok-bot-cli","version":"0.6.0"}
+{"$schema":"https://agent-plugins.org/schemas/1.0.0/plugin.schema.json","author":{"name":"Zack Jackson","url":"https://github.com/ScriptedAlchemy"},"description":"Message Grok Bot from Codex, Claude Code, and Cursor, with managed automatic replies and explicit Codex conversation links.","homepage":"https://github.com/ScriptedAlchemy/grok-bot-cli#readme","keywords":["grok","grok-bot","grokbot","gbot","cursor","ai-agents","automation","terminal","cli","agent-bundle"],"license":"MIT","name":"gbot","repository":"https://github.com/ScriptedAlchemy/grok-bot-cli","version":"0.8.0"}

package/dist/scripts/gbot-relay.mjs

@@ -56217,10 +56217,10 @@ function listDesktopProcesses(timeoutMs = DESKTOP_PROCESS_LIST_TIMEOUT_MS) {
     const lines = Array.isArray(listProcesses) ? listProcesses : String(listProcesses ?? "").split(/\r?\n/);
     for (const line of lines){
         if (!/app-server/.test(line)) continue;
-        // Desktop's bundled binary, Mac or Windows-style separators with optional .exe.
+        // Desktop's bundled binary only (Mac/Windows separators, optional .exe).
+        // Do NOT match probe shells whose cmdline merely mentions ChatGPT.app +
+        // app-server + codex-app-tools — that false-positives MATCH2 / Scout noise.
         if (/ChatGPT\.app[\\/].*Resources[\\/]codex(\.exe)?(["'\s]|$)/.test(line)) return "private-stdio";
-        // Same app-server line owned by ChatGPT.app carrying the app-tools override.
-        if (/ChatGPT\.app/.test(line) && /(codex_app|mcp_servers\.codex_app|codex-app-tools)/.test(line)) return "private-stdio";
     }
     return "unknown";
 }
@@ -57906,10 +57906,12 @@ function socketStateOf(path) {
 },
 "./src/core/gateway.js"(__unused_rspack___webpack_module__, __webpack_exports__, __webpack_require__) {
 /* import */ var node_crypto__rspack_import_0 = __webpack_require__("node:crypto");
-/* import */ var _headers_js__rspack_import_4 = __webpack_require__("./src/core/headers.js");
+/* import */ var _headers_js__rspack_import_5 = __webpack_require__("./src/core/headers.js");
 /* import */ var _app_session_js__rspack_import_1 = __webpack_require__("./src/core/app-session.js");
 /* import */ var _store_js__rspack_import_2 = __webpack_require__("./src/core/store.js");
 /* import */ var _url_policy_js__rspack_import_3 = __webpack_require__("./src/core/url-policy.js");
+/* import */ var _grok_approvals_js__rspack_import_4 = __webpack_require__("./src/core/grok-approvals.js");
+
 
 
 
@@ -57959,7 +57961,7 @@ function gatewayOverride() {
                 kind: "gateway"
             }),
             gatewayToken: token,
-            gatewayHeaders: (0,_headers_js__rspack_import_4/* .headersFromEnv */.gx)()
+            gatewayHeaders: (0,_headers_js__rspack_import_5/* .headersFromEnv */.gx)()
         };
     }
     return null;
@@ -57980,7 +57982,7 @@ function sessionFromApp() {
             kind: "gateway"
         }),
         gatewayToken: loaded.gatewayToken,
-        gatewayHeaders: (0,_headers_js__rspack_import_4/* .mergeGatewayHeaders */.bQ)((0,_headers_js__rspack_import_4/* .normalizeHeaderMap */.dk)(loaded.headers), (0,_headers_js__rspack_import_4/* .headersFromEnv */.gx)())
+        gatewayHeaders: (0,_headers_js__rspack_import_5/* .mergeGatewayHeaders */.bQ)((0,_headers_js__rspack_import_5/* .normalizeHeaderMap */.dk)(loaded.headers), (0,_headers_js__rspack_import_5/* .headersFromEnv */.gx)())
     };
 }
 function hasGatewayAuth() {
@@ -58040,7 +58042,7 @@ async function ensureSandbox(accessToken, { signal } = {}) {
             method: "POST",
             redirect: "error",
             signal: gatewayDeadline(signal),
-            headers: (0,_headers_js__rspack_import_4/* .ensureSandboxHeaders */._6)(accessToken),
+            headers: (0,_headers_js__rspack_import_5/* .ensureSandboxHeaders */._6)(accessToken),
             body: "{}"
         });
         body = await readJson(res);
@@ -58066,7 +58068,7 @@ async function ensureSandbox(accessToken, { signal } = {}) {
             kind: "gateway"
         }),
         gatewayToken: String(gatewayToken),
-        gatewayHeaders: (0,_headers_js__rspack_import_4/* .mergeGatewayHeaders */.bQ)((0,_headers_js__rspack_import_4/* .headersFromEnsureSandbox */.Ew)(body), (0,_headers_js__rspack_import_4/* .headersFromEnv */.gx)())
+        gatewayHeaders: (0,_headers_js__rspack_import_5/* .mergeGatewayHeaders */.bQ)((0,_headers_js__rspack_import_5/* .headersFromEnsureSandbox */.Ew)(body), (0,_headers_js__rspack_import_5/* .headersFromEnv */.gx)())
     };
 }
 async function connectGateway({ signal } = {}) {
@@ -58096,7 +58098,7 @@ async function gatewayCall(session, method, body = {}, { signal } = {}) {
         method: "POST",
         redirect: "error",
         signal: gatewayDeadline(prompt ? undefined : signal),
-        headers: (0,_headers_js__rspack_import_4/* .requestHeaders */.A1)(session),
+        headers: (0,_headers_js__rspack_import_5/* .requestHeaders */.A1)(session),
         body: JSON.stringify(body)
     };
     assertGatewayActive(signal); // Final synchronous boundary before transmission.
@@ -58363,6 +58365,43 @@ async function getThread(session, ref, rootId) {
         thread: data
     };
 }
+async function listGrokApprovals(session, ref) {
+    const { target, transcript } = await getTranscriptTail(session, ref, 200);
+    if (!Array.isArray(transcript?.entries) || transcript.entries.length > 200) throw new GatewayError("Invalid approval transcript coverage");
+    return {
+        target: {
+            id: target.id,
+            name: target.name
+        },
+        approvals: transcript.entries.map(grokApproval).filter(Boolean),
+        coverage: "Latest 200 transcript entries only; older requests require the owning Grok UI."
+    };
+}
+async function respondGrokApproval(session, ref, input) {
+    const { entryId, requestId, decision } = grokApprovalResponseSchema.parse({
+        ...input,
+        target: ref
+    });
+    const { target, approvals } = await listGrokApprovals(session, ref);
+    const matches = approvals.filter((card)=>card.entryId === entryId && card.requestId === requestId);
+    if (matches.length !== 1) throw new GatewayError("Stale, foreign or unsupported Grok approval; refresh pending requests or use the owning Grok UI");
+    const approval = matches[0];
+    if (decision === "accept" && approval.truncated) throw new GatewayError("Approval details are truncated; acceptance requires the owning Grok UI");
+    const local = approval.type === "local-tool-permission";
+    await gatewayCall(session, local ? "resolveLocalToolPermission" : "resolveAutoReviewApproval", {
+        agentId: target.id,
+        entryId,
+        requestId,
+        resolution: local ? decision === "accept" ? "allow-once" : "deny" : decision === "accept" ? "approved" : "denied"
+    });
+    return {
+        target,
+        entryId,
+        requestId,
+        decision,
+        delivery: "accepted"
+    };
+}
 
 __webpack_require__.d(__webpack_exports__, {
   LV: () => (sendPrompt),
@@ -58372,6 +58411,66 @@ __webpack_require__.d(__webpack_exports__, {
 });
 
 
+},
+"./src/core/grok-approvals.js"(__unused_rspack___webpack_module__, __webpack_exports__, __webpack_require__) {
+/* import */ var zod__rspack_import_1 = __webpack_require__("./node_modules/zod/v4/classic/schemas.js");
+/* import */ var _url_policy_js__rspack_import_0 = __webpack_require__("./src/core/url-policy.js");
+
+
+const id = zod__rspack_import_1/* .string */.YjP().min(1).max(1024);
+const grokApprovalResponseSchema = zod__rspack_import_1/* .strictObject */.rej({
+    target: id,
+    entryId: id,
+    requestId: id,
+    decision: zod__rspack_import_1/* ["enum"] */.k5n([
+        "accept",
+        "decline"
+    ])
+});
+function grokApproval(entry) {
+    if (entry?.kind !== "send-message") return null;
+    const type = entry.message?.type;
+    const card = type === "auto-review-approval" ? entry.message.approval : type === "local-tool-permission" ? entry.message.ask : null;
+    if (card?.status !== "pending" || !id.safeParse(card.requestId).success || !id.safeParse(entry.id).success) return null;
+    const details = {};
+    let truncated = false;
+    for (const key of [
+        "reason",
+        "command",
+        "summary",
+        "action",
+        "description",
+        "target",
+        "machineId",
+        "surface",
+        "workingDirectory"
+    ]){
+        if (typeof card[key] !== "string") continue;
+        const text = (0,_url_policy_js__rspack_import_0/* .redactSecrets */.fp)(card[key]);
+        truncated ||= text.length > 2048;
+        details[key] = text.slice(0, 2048);
+    }
+    return {
+        entryId: entry.id,
+        requestId: card.requestId,
+        type,
+        ...details,
+        truncated
+    };
+}
+function grokApprovalNotice(entry, target) {
+    const approval = grokApproval(entry);
+    return approval ? `Grok approval pending. Requires an explicit user decision; never approve automatically.\n${JSON.stringify({
+        botTarget: target,
+        ...approval
+    })}\nUse gbot_grok_respond with target=${JSON.stringify(target)}, entryId, requestId and decision accept (once) or decline.${approval.truncated ? " Details are truncated; acceptance requires the owning Grok UI." : ""} A chat reply is not authorization.` : null;
+}
+
+__webpack_require__.d(__webpack_exports__, {
+  xE: () => (grokApprovalNotice)
+});
+
+
 },
 "./src/core/headers.js"(__unused_rspack___webpack_module__, __webpack_exports__, __webpack_require__) {
 function normalizeHeaderMap(obj) {
@@ -59172,8 +59271,10 @@ __webpack_require__.d(__webpack_exports__, {
 
 },
 "./src/core/relay/intake.js"(__unused_rspack___webpack_module__, __webpack_exports__, __webpack_require__) {
-/* import */ var _transcript_js__rspack_import_1 = __webpack_require__("./src/core/transcript.js");
+/* import */ var _transcript_js__rspack_import_2 = __webpack_require__("./src/core/transcript.js");
 /* import */ var _records_js__rspack_import_0 = __webpack_require__("./src/core/relay/records.js");
+/* import */ var _grok_approvals_js__rspack_import_1 = __webpack_require__("./src/core/grok-approvals.js");
+
 
 
 /** Correlate the whole page before atomically recording intake and advancing its checkpoint. */ function createIntake({ state, gateway, clock, newRecord, stoppedBindings }) {
@@ -59185,7 +59286,7 @@ __webpack_require__.d(__webpack_exports__, {
         const page = (0,_records_js__rspack_import_0/* .pageEntries */.ci)(await gateway.tail(targetId));
         await change("targets", {
             id: targetId,
-            cursor: page.length ? (0,_transcript_js__rspack_import_1/* .sourceEntryId */.p2)(page.at(-1)) : null,
+            cursor: page.length ? (0,_transcript_js__rspack_import_2/* .sourceEntryId */.p2)(page.at(-1)) : null,
             baseline: true,
             state: "running",
             reason: null,
@@ -59214,8 +59315,8 @@ __webpack_require__.d(__webpack_exports__, {
             });
             return;
         }
-        const current = page.length ? (0,_transcript_js__rspack_import_1/* .sourceEntryId */.p2)(page.at(-1)) : null;
-        const index = target.cursor === null ? -1 : page.findIndex((e)=>(0,_transcript_js__rspack_import_1/* .sourceEntryId */.p2)(e) === target.cursor);
+        const current = page.length ? (0,_transcript_js__rspack_import_2/* .sourceEntryId */.p2)(page.at(-1)) : null;
+        const index = target.cursor === null ? -1 : page.findIndex((e)=>(0,_transcript_js__rspack_import_2/* .sourceEntryId */.p2)(e) === target.cursor);
         if (target.cursor !== null && index === -1 || target.cursor === null && page.length === 200) {
             await change("targets", {
                 ...target,
@@ -59225,6 +59326,15 @@ __webpack_require__.d(__webpack_exports__, {
             });
             return;
         }
+        const incoming = page.slice(index + 1);
+        if (incoming.some((entry)=>entry.kind === "send-message" && (typeof entry.requestId !== "string" || !entry.requestId))) {
+            await change("targets", {
+                ...target,
+                state: "paused",
+                reason: "invalid-coverage"
+            });
+            return;
+        }
         const local = {
             ...state.read().records
         }, changes = [];
@@ -59254,7 +59364,7 @@ __webpack_require__.d(__webpack_exports__, {
                     ...r,
                     submission: "accepted",
                     requestId: entry.requestId,
-                    messageId: (0,_transcript_js__rspack_import_1/* .sourceEntryId */.p2)(entry),
+                    messageId: (0,_transcript_js__rspack_import_2/* .sourceEntryId */.p2)(entry),
                     reason: null
                 };
                 local[r.id] = next;
@@ -59272,9 +59382,13 @@ __webpack_require__.d(__webpack_exports__, {
                 "unknown",
                 "accepted"
             ].includes(r.submission) && !r.requestId);
-        const incoming = page.slice(index + 1);
         for (const entry of incoming){
             if (entry.kind !== "send-message" || own.has(entry.requestId)) continue;
+            const approvalNotice = (0,_grok_approvals_js__rspack_import_1/* .grokApprovalNotice */.xE)(entry, targetId);
+            if ([
+                "auto-review-approval",
+                "local-tool-permission"
+            ].includes(entry.message?.type) && !approvalNotice) continue;
             const parent = requests.get(entry.requestId);
             // Without nonce coverage, unsolicited classification could echo a return or misroute a reply.
             if (!parent && unresolved) {
@@ -59302,14 +59416,14 @@ __webpack_require__.d(__webpack_exports__, {
                 ]);
                 return;
             }
-            const sourceId = (0,_transcript_js__rspack_import_1/* .sourceEntryId */.p2)(entry), id = "inbound:" + (0,_records_js__rspack_import_0/* .hash */.tW)([
+            const sourceId = (0,_transcript_js__rspack_import_2/* .sourceEntryId */.p2)(entry), id = "inbound:" + (0,_records_js__rspack_import_0/* .hash */.tW)([
                 targetId,
                 sourceId
             ]);
             if (local[id]) continue;
             let body;
             try {
-                body = (0,_records_js__rspack_import_0/* .messageText */.Lo)((0,_transcript_js__rspack_import_1/* .entryText */.u0)(entry));
+                body = (0,_records_js__rspack_import_0/* .messageText */.Lo)(approvalNotice ?? (0,_transcript_js__rspack_import_2/* .entryText */.u0)(entry));
             } catch  {
                 await change("targets", {
                     ...target,
@@ -59318,7 +59432,7 @@ __webpack_require__.d(__webpack_exports__, {
                 });
                 return;
             }
-            const text = `[Grok sender ${targetId}; message ${sourceId}]\n${parent ? "Reply to a tracked request. Your next final answer is not returned automatically." : "Linked conversation. Your corresponding final answer returns automatically to Grok."}\n\n${body}`;
+            const text = `[Grok sender ${targetId}; message ${sourceId}]\n${approvalNotice ? "Approval notice. Your next final answer is not returned automatically." : parent ? "Reply to a tracked request. Your next final answer is not returned automatically." : "Linked conversation. Your corresponding final answer returns automatically to Grok."}\n\n${body}`;
             if (Buffer.byteLength(text) > (/* inlined export .MAX_TEXT */65536)) {
                 await change("targets", {
                     ...target,
@@ -59332,7 +59446,7 @@ __webpack_require__.d(__webpack_exports__, {
                     sourceId
                 ],
                 parentId: parent?.id,
-                returnToGrok: !parent,
+                returnToGrok: !parent && !approvalNotice,
                 correlationId: parent?.correlationId,
                 hop: parent ? parent.hop + 1 : 0,
                 maxHops: parent?.maxHops
@@ -59649,7 +59763,10 @@ function relayProfile(env = process.env) {
         "GROK_BOT_ALLOW_LOCAL_GATEWAY",
         "GROK_BOT_ALLOW_ANY_GATEWAY",
         "GROK_BOT_TEST",
-        "NODE_ENV"
+        "NODE_ENV",
+        // Secret Service credentials depend on the caller's desktop session.
+        "DBUS_SESSION_BUS_ADDRESS",
+        "DISPLAY"
     ];
     return digest(JSON.stringify([
         (0,node_path__rspack_import_2.resolve)((0,_codex_bridge_js__rspack_import_3/* .codexSocketPath */.ql)(env)),
@@ -59719,7 +59836,6 @@ function pageEntries(payload) {
         _state_js__rspack_import_2/* .relayId.parse */.pT.parse(id);
         if (ids.has(id) || typeof e.kind !== "string" || !e.kind) throw new Error("Invalid transcript coverage");
         ids.add(id);
-        if (e.kind === "send-message" && (typeof e.requestId !== "string" || !e.requestId)) throw new Error("Message coverage lacks requestId");
     }
     return page;
 }
@@ -60834,7 +60950,7 @@ __webpack_require__.d(__webpack_exports__, {
 
 },
 "./package.json"(module) {
-module.exports = {"rE":"0.6.0"}
+module.exports = {"rE":"0.8.0"}
 
 },
 

package/dist/skills/talk-to-grok-bot/SKILL.md

@@ -44,6 +44,16 @@ change session permissions, or respond to an unsupported interaction; use its ow
 
 Bot replies are `send-message` entries; yours are `message` with `role: user`.
 
+Grok-origin approvals are separate from Codex interactions. `gbot_grok_approvals`
+(CLI: `gbot approvals list TARGET`) lists pending auto-review and local-tool cards in
+the latest 200 entries. Linked/tracked routes forward new pending cards as notices;
+their chat answers never authorize an action. After an explicit user decision, use
+`gbot_grok_respond` (CLI: `gbot approvals respond --target TARGET --entry-id ID
+--request-id ID --decision accept|decline`). Copy the exact IDs from the current
+card. Accept grants once; persistent grants are unavailable. Responses recheck the
+card before sending; delivery success does not prove execution. Older cards,
+cookie/payment approvals and other unsupported requests require the owning Grok UI.
+
 List targets with `gbot bots list` / `gbot groups list` when the name is ambiguous.
 
 ## CLI automation
@@ -99,3 +109,11 @@ Managed Codex return routes reject `expectedTurnId` and legacy `replyTo`/`envelo
 options before submission; use plain `codex_send` for a caller-selected turn guard.
 An explicit Grok target supplied with `bindingId` must resolve to the binding's
 recipient. A mismatch fails instead of selecting one destination silently.
+
+## Host tool inventory
+
+Codex MCP clients receive Grok messaging and approval tools; truthfully identified
+Grok Bot clients receive Codex messaging and approval tools. Bridge start/status/stop
+remain shared. Cursor and unknown clients retain both sets. Filtering uses negotiated
+client-name prefixes and does not provide authorization. A Grok runtime identifying
+itself as Cursor needs its native MCP identity corrected before this filter applies.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "grok-bot-cli",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "description": "CLI and Agent Bundle plugin for Grok Bot agents and groups: create, update, message, inspect threads, and automate cleanup",
   "type": "module",
   "bin": {
@@ -54,12 +54,12 @@
     "LICENSE"
   ],
   "devDependencies": {
-    "@agent-bundle/runtime": "https://pkg.pr.new/ScriptedAlchemy/agent-bundle/@agent-bundle/runtime@8e55ab832d",
+    "@agent-bundle/runtime": "https://pkg.pr.new/ScriptedAlchemy/agent-bundle/@agent-bundle/runtime@57a9196caf2590ece001799eaeed92613352bc21",
     "@changesets/cli": "3.0.3",
     "@rstest/core": "0.11.12",
     "@types/node": "^24.0.0",
     "@types/react": "^19.2.18",
-    "agent-bundle": "https://pkg.pr.new/ScriptedAlchemy/agent-bundle/agent-bundle@8e55ab832d",
+    "agent-bundle": "https://pkg.pr.new/ScriptedAlchemy/agent-bundle/agent-bundle@57a9196caf2590ece001799eaeed92613352bc21",
     "react": "19.3.0",
     "react-dom": "19.3.0",
     "typescript": "7.0.2",