1.0.1 open-source sync: bounded subagent fan-out, read-only tool signaling, session rename/grok du improvements, and a large reliability pass — with breaking changes to /rewind and managed MCP availability.
Changelog
[changed] /rewind now only truncates conversation history (not files) and asks for confirmation by default.
[changed] Managed MCP servers are only available through the gateway catalog.
[new] Subagent spawning is bounded; wide fan-outs queue instead of exhausting file descriptors.
[new] Tools report whether they only read data, so restricted agents and subagents can stay safer.
[new] Sandbox workspace sessions can limit which bundled skills are advertised via caller config.
[new] grok du shows disk usage under ~/.grok, including worktrees and sessions.
[new] /rename --auto unpins a manual session title so automatic titling resumes.
[changed] Session rename enforces a 100-character limit, ghost-prefills the current title (including from the dashboard), and preserves manual titles across machines.
[changed] /usage, /session-info, and /context open in a tabbed modal instead of appending text to the conversation.
[changed] Video generation from references supports preset voices, single-image input, 1–15 s durations, and 4:3 / 3:4 aspect ratios.
[fix] Sandbox config entries ending in /** grant the parent directory instead of creating a literal ** subdirectory.
[fix] Failed alpha/enterprise updates suggest the matching GROK_CHANNEL reinstall command.
[fix] On Apple Silicon, installs use the native arm64 build even from a Rosetta shell or x86_64 updater.
[fix] Skills that share names with built-in commands appear alongside them in the slash menu with qualified names.
[fix] Notebook permission rules imported from Claude configs are ignored with a warning instead of applying broadly.
[fix] Goal evaluation at round end no longer fails due to timeouts.
[fix] Tool timeouts no longer hang the agent when child processes are stuck in D-state or hold pipes open.
[fix] Home and End move to the start or end of the current logical line even when the prompt is wrapped.
[fix] Worktree sessions show the correct branch in the status bar, keep status across directory switches/resumes, and no longer lose status when opening the dashboard.
[fix] Recaps are written in the same language as the conversation.
[fix] Plugin suggestions no longer flash incorrectly while typing.
[fix] Send Now works during active goals without cancelling the goal.
[fix] Headless sessions wait for MCP servers when using delivery tools.
[fix] Non-interactive sessions (grok -p) no longer fail when the agent asks for user input or plan approval.
[fix] read_file errors for missing skills suggest the correct registered path.
[fix] Session load and creation no longer freeze forever when .envrc evaluation blocks.
[fix] Upgraded installs no longer silently run outdated platform skill instructions.
[fix] Deleting a session stops and waits for running subagents before wiping history.
[fix] Permission and plan-approval notification hooks no longer fire on auto-allowed tools.
[fix] Mid-turn steering via double-Enter or Ctrl+Enter correctly tells the model it arrived while work was in progress.
[fix] Scrollback drag selection no longer gets stuck after the mouse button is released outside VS Code or Cursor terminals.
[fix] Video generation tools show a clear error for ZDR storage requirements instead of failing silently.
[fix] Esc on the cancel-turn panel closes the panel and keeps the current turn running.
[fix] Git status/diff and large git histories no longer drive high CPU, excessive memory use, or unresponsiveness on big repos.
[fix] History search no longer leaks background threads in long sessions with many subagents.
[fix] Resuming large sessions is significantly faster; the UI no longer shows an incomplete transcript while replay is still applying.
Agent & tools
Agent and subagent system prompts use a clearer work_policy (keep requirements in view, match intent, claim only what tools verify, keep comments scoped) and tighter background-task guidance: prefer background execute for long-lived owned commands, bounded waits/snapshots via background-task actions, and monitor for external status changes.
Goal summarizer prompt prefers short complete sentences within the existing length cap.
Slash UX: /rename --auto; tabbed modal for /usage, /session-info, and /context; qualified names when skills collide with built-ins.
Video generation tool surface expanded (voices, single-image input, duration/aspect options) with explicit ZDR storage errors.
Docs
Sandbox docs and shell README clarify that read_only / read_write are literal directory grants; trailing /** (or /*) means the parent directory.
Hooks guide: Notification covers user-attention events; Claude-style finish chimes should match idle_prompt, and permission_prompt fires only when a permission UI is waiting.
Keyboard shortcuts: Esc on the cancel-turn panel keeps the turn (and subagents) running.
Monitoring/usage notes clarify timeout stuck_in vs longest-step messaging and phase_duration.
Under the hood
Product/crate version bump to 1.0.1 (xai-grok-shell, pager, version packages).
Workspace presence/preview and CLI base URL configuration knobs; video model env naming aligned (XAI_VIDEO_MODEL).
Faster/safer child-process wait handling for stuck tool timeouts; sandbox path-grant handling for trailing globs; worktree copy helpers and related reliability coverage.
Upgrade notes
Update automation and habits around /rewind: it no longer rewinds files, only conversation history, and confirms by default.
Point managed MCP usage at the gateway catalog; direct/non-catalog managed server setups are no longer supported.
If you rely on sandbox path grants with trailing /**, confirm they now bind the parent directory as documented.
After upgrade, prefer a fresh install path on Apple Silicon if you previously ran under Rosetta/x86_64 updaters so the native arm64 build is selected.
