Patch release 0.2.103: safer remote plugin installs (commit pins and an optional require_sha policy), stronger SSH/clipboard and grok wrap behavior, expanded bundled Office skills plus new game-asset skills, and clearer defaults for tele…
Changelog
[new] Remote plugins can be pinned to an exact commit with user/repo@<commit-sha> (verified after fetch). Operators can require that every remote install and update use a full commit sha via [marketplace] require_sha = true or GROK_MARKETPLACE_REQUIRE_SHA=1 (tighten-only; either switch enables the policy and neither turns it off). Unpinned remotes, marketplace installs without a published sha, and updates of branch-tracking installs are refused when the policy is on.
[new] Bundled game-asset skills: game-asset-core, game-animation-frames, game-character-consistency, game-tilesets, and game-ui-icons for game art and UI asset workflows.
[new]grok wrap resets local terminal modes on exit when a wrapped remote command dies mid-session (mouse reporting, alternate screen, and similar modes), so a dropped SSH or container session no longer leaves the local terminal spraying escape codes.
[new] When Grok starts over SSH without already running under grok wrap, a one-time contextual tip recommends grok wrap ssh <host>. Disable with ssh_wrap = false under [ui.contextual_hints] in ~/.grok/config.toml, or via /settings → Show contextual hints → SSH wrap.
[new] Over SSH on unknown outer terminals, clipboard delivery is reported as unverified; if paste fails, reconnect with grok wrap or use /minimal.
[changed]/terminal-setup (and /terminal-check / /terminal-info) shows a compact Clipboard status table instead of a looser routes list; Wayland data-control status is reported as data-control on when applicable.
[changed] Docx and pptx skills are shipped as expanded bundled skills, with additional document inspection/editing helpers (convert, inspect, section listing, text/field replace, render, and related scripts) and richer pptx creation/editing guidance and templates.
[removed] The standalone xlsx skill is no longer shipped with the install.
[changed] Docs for OAuth MCP credentials note that tokens are stored under ~/.grok/mcp_credentials.json as local plaintext with owner-only permissions (0600 on Unix) and recommend full-disk encryption on the host.
[changed] Memory embedding.model defaults to unset, which disables embeddings until you configure a model; dimensions and other memory knobs are unchanged.
[changed] Public source builds ship with no telemetry defaults (events_url, events_api_key, and mixpanel_token unset; mixpanel_enabled false). Nothing is sent unless you set config or env values (or bake defaults in at build time — see below).
[changed] Project license is Apache License 2.0 (see the repository root LICENSE).
Under the hood
Bundled content is repackaged under the unified bundled skills/manifest layout (manifest version public-2026-07-17-r2), including the Office and game skill trees above.
Session observability posts richer per-session signals and per-turn deltas (latency, tool outcomes, edit/LOC deltas, doom-loop recovery counters, and related fields), and can upload traces when telemetry is enabled.
Optional compile-time telemetry defaults via GROK_TELEMETRY_BUILD_EVENTS_URL, GROK_TELEMETRY_BUILD_EVENTS_API_KEY, and GROK_TELEMETRY_BUILD_MIXPANEL_TOKEN (a Mixpanel token baked this way also enables Mixpanel by default). Runtime config and env still override build-time values.
Responses API calls may include top_p alongside existing sampling knobs.
Upgrade notes
If you rely on vector memory search, set embedding.model (and related embedding options) explicitly — embeddings are off when the model is unset.
Environments that want hard commit pins for every remote plugin should set [marketplace] require_sha = true or GROK_MARKETPLACE_REQUIRE_SHA=1. Publish sha entries in marketplace plugin-index.json for catalog installs; vendored plugins inside a marketplace source still follow the marketplace source’s own pin.
Workflows that used the bundled xlsx skill need another path for spreadsheet work; docx/pptx remain available as bundled skills.
Prefer grok wrap for SSH (and similar remote TUI) sessions when local clipboard or clean terminal restore matters; the SSH wrap hint can be turned off as above if you do not want the tip.
