Grok Build 0.2.108

• [new] grok doctor — run a read-only terminal and configuration report from the shell without starting the TUI. Covers terminal/multiplexer detection, color level, available themes, clipboard preflight, issues, recommendations, and probes that could not run. Use --json for machine-readable output (safe to pipe; color detection does not rely on stdout). Exits successfully when a report is produced, even if it lists issues. Completions for bash, zsh, fish, elvish, and PowerShell include the new subcommand. Inside a session, /terminal-setup (and /terminal-check / /terminal-info) still provide the interactive path with live runtime evidence.
• [new] External editor for the minimal-mode composer — Ctrl+G opens the current draft in an external editor without sending it ($VISUAL, then $EDITOR, then vi; values may include quoted arguments). Saving replaces the draft; an empty file clears it. New /edit-prompt opens an empty editor draft (minimal mode only). When the terminal reserves Ctrl+G, use Edit Prompt in External Editor from the command palette to keep the existing text; drafts with pasted/file/image chips stay in the composer so attachments are not flattened.
• [new] Per-model auth providers — define named credential helpers under [auth_provider.<name>] and point a model at them with auth_provider = "...". Intended for gateways and proxies with rotating bearer tokens while keeping normal xAI login for other models. Helpers follow the same stdout contract as auth_provider_command (bare token or JSON), cache tokens in memory per provider, support TTL/JWT/expires_in, refresh handback env vars, and optional token_ttl_secs / timeout_secs. Literal api_key/env_key on a model still win; provider-backed models are BYOK and never fall back to the session token. Provider tables are honored only from trusted config layers (not project .grok/config.toml).
• [fix] Shell deny-rule coverage for inline scripts — Read and Edit deny rules that already apply to paths touched by shell commands now also cover literal inline scripts passed to bash, sh, dash, zsh, or ksh with -c (symlink-resolving shell-level check unchanged).

Upgrade notes

No migration required. To diagnose terminal setup from CI or a plain shell, run grok doctor or grok doctor --json. For rotating third-party model credentials, add an [auth_provider.*] table in trusted config and set auth_provider on the model.