grok-bot-cli 0.6.0 → 0.8.0

package/dist/mcp/mcp-grok-bot-b8c2461e.mjs

@@ -11221,6 +11221,37 @@ __webpack_require__.d(__webpack_exports__, {
 });
 
 
+},
+"./src/core/grok-approval-routes.ts"(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var zod__rspack_import_3 = __webpack_require__("./node_modules/zod/v4/classic/schemas.js");
+/* import */ var _gateway_js__rspack_import_0 = __webpack_require__("./src/core/gateway.js");
+/* import */ var _grok_approvals_js__rspack_import_1 = __webpack_require__("./src/core/grok-approvals.js");
+/* import */ var _gbot_js__rspack_import_2 = __webpack_require__("./src/gbot.ts");
+
+
+
+
+const listSchema = zod__rspack_import_3/* .strictObject */.rej({
+    target: zod__rspack_import_3/* .string */.YjP().min(1).max(1024)
+});
+const respondSchema = _grok_approvals_js__rspack_import_1/* .grokApprovalResponseSchema */.T5;
+const resultSchema = zod__rspack_import_3/* .record */.g1P(zod__rspack_import_3/* .string */.YjP(), zod__rspack_import_3/* .json */.Pq9());
+const listOperation = (input)=>(0,_gbot_js__rspack_import_2/* .withRedactedErrors */.yF)(async ()=>(0,_gateway_js__rspack_import_0/* .listGrokApprovals */.MI)(await (0,_gateway_js__rspack_import_0/* .connectGateway */.Vq)(), listSchema.parse(input).target));
+const respondOperation = (input)=>(0,_gbot_js__rspack_import_2/* .withRedactedErrors */.yF)(async ()=>{
+        const { target, ...response } = respondSchema.parse(input);
+        return (0,_gateway_js__rspack_import_0/* .respondGrokApproval */.OR)(await (0,_gateway_js__rspack_import_0/* .connectGateway */.Vq)(), target, response);
+    });
+
+__webpack_require__.d(__webpack_exports__, {
+}, {
+  FD: resultSchema,
+  cE: listSchema,
+  gi: listOperation,
+  lr: respondOperation,
+  v1: respondSchema
+});
+
+
 },
 "./src/core/relay/routes.ts"(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 /* import */ var _agent_bundle_runtime__rspack_import_4 = __webpack_require__("./node_modules/@agent-bundle/runtime/dist/40.js");
@@ -11539,6 +11570,9 @@ const resultSchema = zod__rspack_import_4/* .union */.KCZ([
     _core_relay_routes_js__rspack_import_3/* .relayResultSchema */.Ax
 ]);
 /* export default */ const __rspack_default_export = ((0,agent_bundle_routes__rspack_import_1/* .defineTool */.uO)({
+    excludeClients: [
+        'codex'
+    ],
     description: 'Send to Codex. With replyToGrok or bindingId, managed delivery returns the terminal answer to Grok automatically. Otherwise optional wait observes completion and explicit steer requires expectedTurnId. Acceptance is not completion.',
     title: 'Codex send',
     annotations: {
@@ -11656,6 +11690,9 @@ __webpack_require__.r(__webpack_exports__);
 
 
 /* export default */ const __rspack_default_export = ((0,agent_bundle_routes__rspack_import_1/* .defineTool */.uO)({
+    excludeClients: [
+        'codex'
+    ],
     description: 'Discover a bounded page of Codex daemon threads.',
     title: 'Codex threads',
     annotations: {
@@ -11712,6 +11749,9 @@ __webpack_require__.r(__webpack_exports__);
 
 
 /* export default */ const __rspack_default_export = ((0,agent_bundle_routes__rspack_import_1/* .defineTool */.uO)({
+    excludeClients: [
+        'codex'
+    ],
     description: 'Explicit diagnostic observation of one Codex turn; returns execution and final reply without interrupting it.',
     title: 'Codex wait',
     annotations: {
@@ -11786,6 +11826,9 @@ __webpack_require__.r(__webpack_exports__);
 
 
 /* export default */ const __rspack_default_export = ((0,agent_bundle_routes__rspack_import_1/* .defineTool */.uO)({
+    excludeClients: [
+        'codex'
+    ],
     description: 'Watch bounded Codex thread events for diagnostics without answering approvals.',
     title: 'Codex watch',
     annotations: {
@@ -12022,6 +12065,9 @@ __webpack_require__.r(__webpack_exports__);
 
 
 /* export default */ const __rspack_default_export = ((0,agent_bundle_routes__rspack_import_1/* .defineTool */.uO)({
+    excludeClients: [
+        'codex'
+    ],
     description: 'Explicit operator response to a current scoped Codex interaction. Supports only one-time accept/decline/cancel or exact question-ID answers. Never auto-approve.',
     title: 'gbot_codex_respond',
     annotations: {
@@ -12088,6 +12134,130 @@ __webpack_require__.d(__webpack_exports__, {
 });
 
 
+},
+"./src/mcp/grok-bot/tools/gbot_grok_approvals.tsx"(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+__webpack_require__.r(__webpack_exports__);
+/* import */ var react_jsx_runtime__rspack_import_0 = __webpack_require__("./node_modules/react/jsx-runtime.js");
+/* import */ var _agent_bundle_runtime__rspack_import_3 = __webpack_require__("./node_modules/@agent-bundle/runtime/dist/506.js");
+/* import */ var agent_bundle_routes__rspack_import_1 = __webpack_require__("./node_modules/agent-bundle/dist/routes.js");
+/* import */ var _core_grok_approval_routes_js__rspack_import_2 = __webpack_require__("./src/core/grok-approval-routes.ts");
+
+
+
+
+
+/* export default */ const __rspack_default_export = ((0,agent_bundle_routes__rspack_import_1/* .defineTool */.uO)({
+    excludeClients: [
+        'grok bot',
+        'grokbot',
+        'grok-bot'
+    ],
+    title: 'Pending Grok approvals',
+    description: 'List pending auto-review and local-tool approval cards in the latest 200 entries for a Grok bot. Older or unsupported requests require the owning Grok UI.',
+    annotations: {
+        readOnlyHint: true
+    },
+    inputSchema: _core_grok_approval_routes_js__rspack_import_2/* .listSchema */.cE,
+    resultSchema: _core_grok_approval_routes_js__rspack_import_2/* .resultSchema */.FD,
+    inputJsonSchema: {
+        type: 'object',
+        properties: {
+            target: {
+                type: 'string'
+            }
+        },
+        required: [
+            'target'
+        ],
+        additionalProperties: false
+    }
+}, async (input)=>{
+    const out = await (0,_core_grok_approval_routes_js__rspack_import_2/* .listOperation */.gi)(input);
+    return /*#__PURE__*/ (0,react_jsx_runtime__rspack_import_0.jsx)(_agent_bundle_runtime__rspack_import_3/* .Agent.Result */.g6.Result, {
+        value: out,
+        children: /*#__PURE__*/ (0,react_jsx_runtime__rspack_import_0.jsx)(_agent_bundle_runtime__rspack_import_3/* .Agent.Text */.g6.Text, {
+            children: JSON.stringify(out)
+        })
+    });
+}));
+
+__webpack_require__.d(__webpack_exports__, {
+  inputSchema: () => (/* reexport safe */ _core_grok_approval_routes_js__rspack_import_2.cE)
+}, {
+  "default": __rspack_default_export
+});
+
+
+},
+"./src/mcp/grok-bot/tools/gbot_grok_respond.tsx"(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+__webpack_require__.r(__webpack_exports__);
+/* import */ var react_jsx_runtime__rspack_import_0 = __webpack_require__("./node_modules/react/jsx-runtime.js");
+/* import */ var _agent_bundle_runtime__rspack_import_3 = __webpack_require__("./node_modules/@agent-bundle/runtime/dist/506.js");
+/* import */ var agent_bundle_routes__rspack_import_1 = __webpack_require__("./node_modules/agent-bundle/dist/routes.js");
+/* import */ var _core_grok_approval_routes_js__rspack_import_2 = __webpack_require__("./src/core/grok-approval-routes.ts");
+
+
+
+
+
+/* export default */ const __rspack_default_export = ((0,agent_bundle_routes__rspack_import_1/* .defineTool */.uO)({
+    excludeClients: [
+        'grok bot',
+        'grokbot',
+        'grok-bot'
+    ],
+    title: 'Respond to Grok approval',
+    description: 'Only after an explicit user decision: accept one current Grok approval once or decline it. Exact target, entryId and approval requestId required. Never auto-approve or grant persistent permissions. Success acknowledges response delivery, not execution.',
+    annotations: {
+        readOnlyHint: false
+    },
+    inputSchema: _core_grok_approval_routes_js__rspack_import_2/* .respondSchema */.v1,
+    resultSchema: _core_grok_approval_routes_js__rspack_import_2/* .resultSchema */.FD,
+    inputJsonSchema: {
+        type: 'object',
+        properties: {
+            target: {
+                type: 'string'
+            },
+            entryId: {
+                type: 'string'
+            },
+            requestId: {
+                type: 'string'
+            },
+            decision: {
+                type: 'string',
+                enum: [
+                    'accept',
+                    'decline'
+                ]
+            }
+        },
+        required: [
+            'target',
+            'entryId',
+            'requestId',
+            'decision'
+        ],
+        additionalProperties: false
+    }
+}, async (input)=>{
+    const out = await (0,_core_grok_approval_routes_js__rspack_import_2/* .respondOperation */.lr)(input);
+    return /*#__PURE__*/ (0,react_jsx_runtime__rspack_import_0.jsx)(_agent_bundle_runtime__rspack_import_3/* .Agent.Result */.g6.Result, {
+        value: out,
+        children: /*#__PURE__*/ (0,react_jsx_runtime__rspack_import_0.jsx)(_agent_bundle_runtime__rspack_import_3/* .Agent.Text */.g6.Text, {
+            children: JSON.stringify(out)
+        })
+    });
+}));
+
+__webpack_require__.d(__webpack_exports__, {
+  inputSchema: () => (/* reexport safe */ _core_grok_approval_routes_js__rspack_import_2.v1)
+}, {
+  "default": __rspack_default_export
+});
+
+
 },
 "./src/mcp/grok-bot/tools/gbot_send.tsx"(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 __webpack_require__.r(__webpack_exports__);
@@ -12102,6 +12272,11 @@ __webpack_require__.r(__webpack_exports__);
 
 
 /* export default */ const __rspack_default_export = ((0,agent_bundle_routes__rspack_import_1/* .defineTool */.uO)({
+    excludeClients: [
+        'grok bot',
+        'grokbot',
+        'grok-bot'
+    ],
     description: 'Send to Grok Bot. Native Codex calls automatically receive replies in their originating thread; send once and continue work. Without a native source, supply codexThreadId or use manual gbot_thread reading.',
     title: 'Send a message to Grok Bot',
     annotations: {
@@ -12190,6 +12365,11 @@ const inputSchema = zod__rspack_import_3/* .object */.Ikc({
     target: zod__rspack_import_3/* .string */.YjP().min(1)
 });
 /* export default */ const __rspack_default_export = ((0,agent_bundle_routes__rspack_import_1/* .defineTool */.uO)({
+    excludeClients: [
+        'grok bot',
+        'grokbot',
+        'grok-bot'
+    ],
     annotations: {
         readOnlyHint: true
     },
@@ -39766,9 +39946,12 @@ const mcp_server_runtime_settled = async (operation, afterRender)=>{
     }
 };
 const registerGeneratedRoutes = (server, routes, dispatcher, artifactEpoch, options = {})=>{
+    const clientTools = [];
     for (const route of Object.values(routes))switch(route.kind){
         case 'tool':
             {
+                const excluded = route.config['excludeClients'];
+                if (void 0 !== excluded && (!Array.isArray(excluded) || excluded.some((prefix)=>'string' != typeof prefix || '' === prefix.trim() || prefix.length > 128))) throw new TypeError(`Tool ${JSON.stringify(route.name)} excludeClients must contain non-empty client-name prefixes up to 128 characters.`);
                 const outputSchema = advertisedOutputSchema(route.module.resultSchema);
                 const registered = server.registerTool(route.name, {
                     ...selectedConfig(route.config, [
@@ -39795,6 +39978,10 @@ const registerGeneratedRoutes = (server, routes, dispatcher, artifactEpoch, opti
                         return (0,_agent_bundle_runtime__rspack_import_11/* .attachMcpStructuredContent */.IB)(rendered.toolResult, rendered.result);
                     }, options.afterRender));
                 options.tasks?.declareTool(registered, route.name, routeTaskSupport(route.config));
+                if (Array.isArray(excluded) && excluded.length > 0) clientTools.push({
+                    prefixes: excluded.map((prefix)=>String(prefix).toLowerCase()),
+                    disable: ()=>registered.disable()
+                });
                 break;
             }
         case 'resource':
@@ -39845,6 +40032,16 @@ const registerGeneratedRoutes = (server, routes, dispatcher, artifactEpoch, opti
                 throw new TypeError(`Unsupported generated MCP route kind ${String(unreachable)}.`);
             }
     }
+    if (clientTools.length > 0) {
+        const initialized = server.server.oninitialized;
+        server.server.oninitialized = ()=>{
+            const name = server.server.getClientVersion()?.name.toLowerCase();
+            if (void 0 !== name) {
+                for (const tool of clientTools)if (tool.prefixes.some((prefix)=>name.startsWith(prefix))) tool.disable();
+            }
+            initialized?.();
+        };
+    }
 };
 const registerGeneratedMcpApps = (server, apps)=>{
     for (const app of apps)server.registerResource(app.name, app.resourceUri, {
@@ -98263,7 +98460,7 @@ function strictObject(shape, params) {
         type: "object",
         shape,
         catchall: never(),
-        ...util.normalizeParams(params),
+        ..._core_index_js__rspack_import_4/* .normalizeParams */.A2(params),
     });
 }
 // looseObject
@@ -98906,6 +99103,7 @@ __webpack_require__.d(__webpack_exports__, {
   gMt: () => (discriminatedUnion),
   k5n: () => (_enum),
   lqM: () => (optional),
+  rej: () => (strictObject),
   vkY: () => (preprocess),
   zMY: () => (boolean)
 }, {
@@ -107192,9 +107390,9 @@ __webpack_require__.d(__webpack_exports__, {
 "./.agent-bundle-virtual/mcp-grok-bot-b8c2461e-1.mjs"(__unused_rspack___webpack_module__, __webpack_exports__, __webpack_require__) {
 __webpack_require__.r(__webpack_exports__);
 /* import */ var node_url__rspack_import_0 = __webpack_require__("node:url");
-/* import */ var _agent_bundle_runtime__rspack_import_13 = __webpack_require__("./node_modules/@agent-bundle/runtime/dist/49.js");
+/* import */ var _agent_bundle_runtime__rspack_import_15 = __webpack_require__("./node_modules/@agent-bundle/runtime/dist/49.js");
 /* import */ var agent_bundle_mcp_server_runtime__rspack_import_1 = __webpack_require__("./node_modules/agent-bundle/dist/mcp-server-runtime.js");
-/* import */ var _agent_bundle_runtime_lineage__rspack_import_14 = __webpack_require__("./node_modules/@agent-bundle/runtime/dist/lineage.js");
+/* import */ var _agent_bundle_runtime_lineage__rspack_import_16 = __webpack_require__("./node_modules/@agent-bundle/runtime/dist/lineage.js");
 /* import */ var agent_bundle_mcp_apps__rspack_import_2 = __webpack_require__("./.agent-bundle-virtual/mcp-grok-bot-b8c2461e-0.mjs");
 /* import */ var _home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_codex_send_tsx__rspack_import_3 = __webpack_require__("./src/mcp/grok-bot/tools/codex_send.tsx");
 /* import */ var _home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_codex_threads_tsx__rspack_import_4 = __webpack_require__("./src/mcp/grok-bot/tools/codex_threads.tsx");
@@ -107204,8 +107402,10 @@ __webpack_require__.r(__webpack_exports__);
 /* import */ var _home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_bridge_status_tsx__rspack_import_8 = __webpack_require__("./src/mcp/grok-bot/tools/gbot_bridge_status.tsx");
 /* import */ var _home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_bridge_stop_tsx__rspack_import_9 = __webpack_require__("./src/mcp/grok-bot/tools/gbot_bridge_stop.tsx");
 /* import */ var _home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_codex_respond_tsx__rspack_import_10 = __webpack_require__("./src/mcp/grok-bot/tools/gbot_codex_respond.tsx");
-/* import */ var _home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_send_tsx__rspack_import_11 = __webpack_require__("./src/mcp/grok-bot/tools/gbot_send.tsx");
-/* import */ var _home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_thread_tsx__rspack_import_12 = __webpack_require__("./src/mcp/grok-bot/tools/gbot_thread.tsx");
+/* import */ var _home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_grok_approvals_tsx__rspack_import_11 = __webpack_require__("./src/mcp/grok-bot/tools/gbot_grok_approvals.tsx");
+/* import */ var _home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_grok_respond_tsx__rspack_import_12 = __webpack_require__("./src/mcp/grok-bot/tools/gbot_grok_respond.tsx");
+/* import */ var _home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_send_tsx__rspack_import_13 = __webpack_require__("./src/mcp/grok-bot/tools/gbot_send.tsx");
+/* import */ var _home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_thread_tsx__rspack_import_14 = __webpack_require__("./src/mcp/grok-bot/tools/gbot_thread.tsx");
 
 
 
@@ -107228,17 +107428,21 @@ const route6 = Object.assign({}, Reflect.get(_home_runner_work_grok_bot_cli_grok
 
 const route7 = Object.assign({}, Reflect.get(_home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_codex_respond_tsx__rspack_import_10, 'default'), _home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_codex_respond_tsx__rspack_import_10);
 
-const route8 = Object.assign({}, Reflect.get(_home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_send_tsx__rspack_import_11, 'default'), _home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_send_tsx__rspack_import_11);
+const route8 = Object.assign({}, Reflect.get(_home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_grok_approvals_tsx__rspack_import_11, 'default'), _home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_grok_approvals_tsx__rspack_import_11);
 
-const route9 = Object.assign({}, Reflect.get(_home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_thread_tsx__rspack_import_12, 'default'), _home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_thread_tsx__rspack_import_12);
-const ARTIFACT_EPOCH = "gbot@0.6.0";
-const pluginRoot = (0,_agent_bundle_runtime__rspack_import_13/* .resolvePluginRoot */.E7)({
+const route9 = Object.assign({}, Reflect.get(_home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_grok_respond_tsx__rspack_import_12, 'default'), _home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_grok_respond_tsx__rspack_import_12);
+
+const route10 = Object.assign({}, Reflect.get(_home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_send_tsx__rspack_import_13, 'default'), _home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_send_tsx__rspack_import_13);
+
+const route11 = Object.assign({}, Reflect.get(_home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_thread_tsx__rspack_import_14, 'default'), _home_runner_work_grok_bot_cli_grok_bot_cli_src_mcp_grok_bot_tools_gbot_thread_tsx__rspack_import_14);
+const ARTIFACT_EPOCH = "gbot@0.8.0";
+const pluginRoot = (0,_agent_bundle_runtime__rspack_import_15/* .resolvePluginRoot */.E7)({
     fallback: (0,node_url__rspack_import_0.fileURLToPath)(new URL('..', import.meta.url)),
     stateAnchor: 'user-data'
 });
 const openLineage = async ()=>({
         dispose: async ()=>undefined,
-        registry: (0,_agent_bundle_runtime_lineage__rspack_import_14/* .createAgentLineageRegistry */.Q5)()
+        registry: (0,_agent_bundle_runtime_lineage__rspack_import_16/* .createAgentLineageRegistry */.Q5)()
     });
 const routes = Object.freeze({
     "tool:grok-bot/codex_send": Object.freeze({
@@ -107247,6 +107451,9 @@ const routes = Object.freeze({
                 "readOnlyHint": false
             },
             "description": "Send to Codex. With replyToGrok or bindingId, managed delivery returns the terminal answer to Grok automatically. Otherwise optional wait observes completion and explicit steer requires expectedTurnId. Acceptance is not completion.",
+            "excludeClients": [
+                "codex"
+            ],
             "inputJsonSchema": {
                 "additionalProperties": false,
                 "properties": {
@@ -107324,6 +107531,9 @@ const routes = Object.freeze({
                 "readOnlyHint": true
             },
             "description": "Discover a bounded page of Codex daemon threads.",
+            "excludeClients": [
+                "codex"
+            ],
             "inputJsonSchema": {
                 "additionalProperties": false,
                 "properties": {
@@ -107354,6 +107564,9 @@ const routes = Object.freeze({
                 "readOnlyHint": true
             },
             "description": "Explicit diagnostic observation of one Codex turn; returns execution and final reply without interrupting it.",
+            "excludeClients": [
+                "codex"
+            ],
             "inputJsonSchema": {
                 "additionalProperties": false,
                 "properties": {
@@ -107400,6 +107613,9 @@ const routes = Object.freeze({
                 "readOnlyHint": true
             },
             "description": "Watch bounded Codex thread events for diagnostics without answering approvals.",
+            "excludeClients": [
+                "codex"
+            ],
             "inputJsonSchema": {
                 "additionalProperties": false,
                 "properties": {
@@ -107533,6 +107749,9 @@ const routes = Object.freeze({
                 "readOnlyHint": false
             },
             "description": "Explicit operator response to a current scoped Codex interaction. Supports only one-time accept/decline/cancel or exact question-ID answers. Never auto-approve.",
+            "excludeClients": [
+                "codex"
+            ],
             "inputJsonSchema": {
                 "additionalProperties": false,
                 "properties": {
@@ -107582,12 +107801,93 @@ const routes = Object.freeze({
         module: route7,
         name: "gbot_codex_respond"
     }),
+    "tool:grok-bot/gbot_grok_approvals": Object.freeze({
+        config: {
+            "annotations": {
+                "readOnlyHint": true
+            },
+            "description": "List pending auto-review and local-tool approval cards in the latest 200 entries for a Grok bot. Older or unsupported requests require the owning Grok UI.",
+            "excludeClients": [
+                "grok bot",
+                "grokbot",
+                "grok-bot"
+            ],
+            "inputJsonSchema": {
+                "additionalProperties": false,
+                "properties": {
+                    "target": {
+                        "type": "string"
+                    }
+                },
+                "required": [
+                    "target"
+                ],
+                "type": "object"
+            },
+            "title": "Pending Grok approvals"
+        },
+        id: "tool:grok-bot/gbot_grok_approvals",
+        kind: "tool",
+        module: route8,
+        name: "gbot_grok_approvals"
+    }),
+    "tool:grok-bot/gbot_grok_respond": Object.freeze({
+        config: {
+            "annotations": {
+                "readOnlyHint": false
+            },
+            "description": "Only after an explicit user decision: accept one current Grok approval once or decline it. Exact target, entryId and approval requestId required. Never auto-approve or grant persistent permissions. Success acknowledges response delivery, not execution.",
+            "excludeClients": [
+                "grok bot",
+                "grokbot",
+                "grok-bot"
+            ],
+            "inputJsonSchema": {
+                "additionalProperties": false,
+                "properties": {
+                    "decision": {
+                        "enum": [
+                            "accept",
+                            "decline"
+                        ],
+                        "type": "string"
+                    },
+                    "entryId": {
+                        "type": "string"
+                    },
+                    "requestId": {
+                        "type": "string"
+                    },
+                    "target": {
+                        "type": "string"
+                    }
+                },
+                "required": [
+                    "target",
+                    "entryId",
+                    "requestId",
+                    "decision"
+                ],
+                "type": "object"
+            },
+            "title": "Respond to Grok approval"
+        },
+        id: "tool:grok-bot/gbot_grok_respond",
+        kind: "tool",
+        module: route9,
+        name: "gbot_grok_respond"
+    }),
     "tool:grok-bot/gbot_send": Object.freeze({
         config: {
             "annotations": {
                 "readOnlyHint": false
             },
             "description": "Send to Grok Bot. Native Codex calls automatically receive replies in their originating thread; send once and continue work. Without a native source, supply codexThreadId or use manual gbot_thread reading.",
+            "excludeClients": [
+                "grok bot",
+                "grokbot",
+                "grok-bot"
+            ],
             "inputJsonSchema": {
                 "additionalProperties": false,
                 "properties": {
@@ -107634,7 +107934,7 @@ const routes = Object.freeze({
         },
         id: "tool:grok-bot/gbot_send",
         kind: "tool",
-        module: route8,
+        module: route10,
         name: "gbot_send"
     }),
     "tool:grok-bot/gbot_thread": Object.freeze({
@@ -107643,6 +107943,11 @@ const routes = Object.freeze({
                 "readOnlyHint": true
             },
             "description": "Read a bounded Grok Bot thread tail. Returns a small receipt by default; pass the last cursor as after for an exclusive client-side delta, or full:true to include bounded entry text.",
+            "excludeClients": [
+                "grok bot",
+                "grokbot",
+                "grok-bot"
+            ],
             "inputJsonSchema": {
                 "additionalProperties": false,
                 "properties": {
@@ -107674,7 +107979,7 @@ const routes = Object.freeze({
         },
         id: "tool:grok-bot/gbot_thread",
         kind: "tool",
-        module: route9,
+        module: route11,
         name: "gbot_thread"
     })
 });
@@ -107688,7 +107993,7 @@ const routes = Object.freeze({
         lineage: lineage.registry,
         plugin: {
             "name": "gbot",
-            "version": "0.6.0"
+            "version": "0.8.0"
         },
         pluginRoot: pluginRoot.identity,
         routes
@@ -108759,10 +109064,10 @@ function listDesktopProcesses(timeoutMs = DESKTOP_PROCESS_LIST_TIMEOUT_MS) {
     const lines = Array.isArray(listProcesses) ? listProcesses : String(listProcesses ?? "").split(/\r?\n/);
     for (const line of lines){
         if (!/app-server/.test(line)) continue;
-        // Desktop's bundled binary, Mac or Windows-style separators with optional .exe.
+        // Desktop's bundled binary only (Mac/Windows separators, optional .exe).
+        // Do NOT match probe shells whose cmdline merely mentions ChatGPT.app +
+        // app-server + codex-app-tools — that false-positives MATCH2 / Scout noise.
         if (/ChatGPT\.app[\\/].*Resources[\\/]codex(\.exe)?(["'\s]|$)/.test(line)) return "private-stdio";
-        // Same app-server line owned by ChatGPT.app carrying the app-tools override.
-        if (/ChatGPT\.app/.test(line) && /(codex_app|mcp_servers\.codex_app|codex-app-tools)/.test(line)) return "private-stdio";
     }
     return "unknown";
 }
@@ -110449,10 +110754,12 @@ function socketStateOf(path) {
 },
 "./src/core/gateway.js"(__unused_rspack___webpack_module__, __webpack_exports__, __webpack_require__) {
 /* import */ var node_crypto__rspack_import_0 = __webpack_require__("node:crypto");
-/* import */ var _headers_js__rspack_import_4 = __webpack_require__("./src/core/headers.js");
+/* import */ var _headers_js__rspack_import_5 = __webpack_require__("./src/core/headers.js");
 /* import */ var _app_session_js__rspack_import_1 = __webpack_require__("./src/core/app-session.js");
 /* import */ var _store_js__rspack_import_2 = __webpack_require__("./src/core/store.js");
 /* import */ var _url_policy_js__rspack_import_3 = __webpack_require__("./src/core/url-policy.js");
+/* import */ var _grok_approvals_js__rspack_import_4 = __webpack_require__("./src/core/grok-approvals.js");
+
 
 
 
@@ -110502,7 +110809,7 @@ function gatewayOverride() {
                 kind: "gateway"
             }),
             gatewayToken: token,
-            gatewayHeaders: (0,_headers_js__rspack_import_4/* .headersFromEnv */.gx)()
+            gatewayHeaders: (0,_headers_js__rspack_import_5/* .headersFromEnv */.gx)()
         };
     }
     return null;
@@ -110523,7 +110830,7 @@ function sessionFromApp() {
             kind: "gateway"
         }),
         gatewayToken: loaded.gatewayToken,
-        gatewayHeaders: (0,_headers_js__rspack_import_4/* .mergeGatewayHeaders */.bQ)((0,_headers_js__rspack_import_4/* .normalizeHeaderMap */.dk)(loaded.headers), (0,_headers_js__rspack_import_4/* .headersFromEnv */.gx)())
+        gatewayHeaders: (0,_headers_js__rspack_import_5/* .mergeGatewayHeaders */.bQ)((0,_headers_js__rspack_import_5/* .normalizeHeaderMap */.dk)(loaded.headers), (0,_headers_js__rspack_import_5/* .headersFromEnv */.gx)())
     };
 }
 function hasGatewayAuth() {
@@ -110583,7 +110890,7 @@ async function ensureSandbox(accessToken, { signal } = {}) {
             method: "POST",
             redirect: "error",
             signal: gatewayDeadline(signal),
-            headers: (0,_headers_js__rspack_import_4/* .ensureSandboxHeaders */._6)(accessToken),
+            headers: (0,_headers_js__rspack_import_5/* .ensureSandboxHeaders */._6)(accessToken),
             body: "{}"
         });
         body = await readJson(res);
@@ -110609,7 +110916,7 @@ async function ensureSandbox(accessToken, { signal } = {}) {
             kind: "gateway"
         }),
         gatewayToken: String(gatewayToken),
-        gatewayHeaders: (0,_headers_js__rspack_import_4/* .mergeGatewayHeaders */.bQ)((0,_headers_js__rspack_import_4/* .headersFromEnsureSandbox */.Ew)(body), (0,_headers_js__rspack_import_4/* .headersFromEnv */.gx)())
+        gatewayHeaders: (0,_headers_js__rspack_import_5/* .mergeGatewayHeaders */.bQ)((0,_headers_js__rspack_import_5/* .headersFromEnsureSandbox */.Ew)(body), (0,_headers_js__rspack_import_5/* .headersFromEnv */.gx)())
     };
 }
 async function connectGateway({ signal } = {}) {
@@ -110639,7 +110946,7 @@ async function gatewayCall(session, method, body = {}, { signal } = {}) {
         method: "POST",
         redirect: "error",
         signal: gatewayDeadline(prompt ? undefined : signal),
-        headers: (0,_headers_js__rspack_import_4/* .requestHeaders */.A1)(session),
+        headers: (0,_headers_js__rspack_import_5/* .requestHeaders */.A1)(session),
         body: JSON.stringify(body)
     };
     assertGatewayActive(signal); // Final synchronous boundary before transmission.
@@ -110906,14 +111213,115 @@ async function getThread(session, ref, rootId) {
         thread: data
     };
 }
+async function listGrokApprovals(session, ref) {
+    const { target, transcript } = await getTranscriptTail(session, ref, 200);
+    if (!Array.isArray(transcript?.entries) || transcript.entries.length > 200) throw new GatewayError("Invalid approval transcript coverage");
+    return {
+        target: {
+            id: target.id,
+            name: target.name
+        },
+        approvals: transcript.entries.map(_grok_approvals_js__rspack_import_4/* .grokApproval */.Ny).filter(Boolean),
+        coverage: "Latest 200 transcript entries only; older requests require the owning Grok UI."
+    };
+}
+async function respondGrokApproval(session, ref, input) {
+    const { entryId, requestId, decision } = _grok_approvals_js__rspack_import_4/* .grokApprovalResponseSchema.parse */.T5.parse({
+        ...input,
+        target: ref
+    });
+    const { target, approvals } = await listGrokApprovals(session, ref);
+    const matches = approvals.filter((card)=>card.entryId === entryId && card.requestId === requestId);
+    if (matches.length !== 1) throw new GatewayError("Stale, foreign or unsupported Grok approval; refresh pending requests or use the owning Grok UI");
+    const approval = matches[0];
+    if (decision === "accept" && approval.truncated) throw new GatewayError("Approval details are truncated; acceptance requires the owning Grok UI");
+    const local = approval.type === "local-tool-permission";
+    await gatewayCall(session, local ? "resolveLocalToolPermission" : "resolveAutoReviewApproval", {
+        agentId: target.id,
+        entryId,
+        requestId,
+        resolution: local ? decision === "accept" ? "allow-once" : "deny" : decision === "accept" ? "approved" : "denied"
+    });
+    return {
+        target,
+        entryId,
+        requestId,
+        decision,
+        delivery: "accepted"
+    };
+}
 
 __webpack_require__.d(__webpack_exports__, {
   LV: () => (sendPrompt),
+  MI: () => (listGrokApprovals),
+  OR: () => (respondGrokApproval),
   Vq: () => (connectGateway),
   bA: () => (getTranscriptTail)
 });
 
 
+},
+"./src/core/grok-approvals.js"(__unused_rspack___webpack_module__, __webpack_exports__, __webpack_require__) {
+/* import */ var zod__rspack_import_1 = __webpack_require__("./node_modules/zod/v4/classic/schemas.js");
+/* import */ var _url_policy_js__rspack_import_0 = __webpack_require__("./src/core/url-policy.js");
+
+
+const id = zod__rspack_import_1/* .string */.YjP().min(1).max(1024);
+const grokApprovalResponseSchema = zod__rspack_import_1/* .strictObject */.rej({
+    target: id,
+    entryId: id,
+    requestId: id,
+    decision: zod__rspack_import_1/* ["enum"] */.k5n([
+        "accept",
+        "decline"
+    ])
+});
+function grokApproval(entry) {
+    if (entry?.kind !== "send-message") return null;
+    const type = entry.message?.type;
+    const card = type === "auto-review-approval" ? entry.message.approval : type === "local-tool-permission" ? entry.message.ask : null;
+    if (card?.status !== "pending" || !id.safeParse(card.requestId).success || !id.safeParse(entry.id).success) return null;
+    const details = {};
+    let truncated = false;
+    for (const key of [
+        "reason",
+        "command",
+        "summary",
+        "action",
+        "description",
+        "target",
+        "machineId",
+        "surface",
+        "workingDirectory"
+    ]){
+        if (typeof card[key] !== "string") continue;
+        const text = (0,_url_policy_js__rspack_import_0/* .redactSecrets */.fp)(card[key]);
+        truncated ||= text.length > 2048;
+        details[key] = text.slice(0, 2048);
+    }
+    return {
+        entryId: entry.id,
+        requestId: card.requestId,
+        type,
+        ...details,
+        truncated
+    };
+}
+function grokApprovalNotice(entry, target) {
+    const approval = grokApproval(entry);
+    return approval ? `Grok approval pending. Requires an explicit user decision; never approve automatically.\n${JSON.stringify({
+        botTarget: target,
+        ...approval
+    })}\nUse gbot_grok_respond with target=${JSON.stringify(target)}, entryId, requestId and decision accept (once) or decline.${approval.truncated ? " Details are truncated; acceptance requires the owning Grok UI." : ""} A chat reply is not authorization.` : null;
+}
+
+__webpack_require__.d(__webpack_exports__, {
+  Ny: () => (grokApproval)
+}, {
+  T5: grokApprovalResponseSchema
+});
+
+
 },
 "./src/core/headers.js"(__unused_rspack___webpack_module__, __webpack_exports__, __webpack_require__) {
 function normalizeHeaderMap(obj) {
@@ -111209,7 +111617,10 @@ function relayProfile(env = process.env) {
         "GROK_BOT_ALLOW_LOCAL_GATEWAY",
         "GROK_BOT_ALLOW_ANY_GATEWAY",
         "GROK_BOT_TEST",
-        "NODE_ENV"
+        "NODE_ENV",
+        // Secret Service credentials depend on the caller's desktop session.
+        "DBUS_SESSION_BUS_ADDRESS",
+        "DISPLAY"
     ];
     return digest(JSON.stringify([
         (0,node_path__rspack_import_2.resolve)((0,_codex_bridge_js__rspack_import_3/* .codexSocketPath */.ql)(env)),
@@ -111788,7 +112199,7 @@ __webpack_require__.d(__webpack_exports__, {
 
 },
 "./package.json"(module) {
-module.exports = {"rE":"0.6.0"}
+module.exports = {"rE":"0.8.0"}
 
 },