Patch release with tighter folder-trust gates for project skills and instructions, a redesigned /feedback flow with Drafts, marketplace plugins for Datadog, Quo, and Supabase, and clearer Vim/dashboard navigation plus workflow pause/stop…
Changelog
[new] Marketplace plugins: datadog (skills datadog-app, ddconfig, MCP datadog-grok), quo (hosted Quo MCP for SMS, contacts, tasks, and call follow-up), and supabase (skills supabase and supabase-postgres-best-practices, plus MCP supabase).
[new]chrome-devtools skill cookie-debugging for cookie, session, and auth debugging via Chrome DevTools MCP.
[new]pstack skills principle-attack-the-premise and principle-test-behavior-not-implementation.
[new]wix skill wix-headless-fast for shipping verified @wix/sdk headless wiring quickly.
[new] Workflow tool can pause or stop a run this session launched (source: pause / stop by run id or display name); journals are kept so runs can still be resumed.
[new]/feedback: bare /feedback opens the form with a Drafts tab for reports saved for later; /feedback <message> sends immediately in any mode and falls back to Drafts if the send fails.
[new] Theme picker: typing filters themes by any of their config names (e.g. /theme transparent).
[new] Telemetry: grok_code.turn.ttft / grok_code.turn.ttfm (time to first token / first assistant text) and grok_code.startup.interactive (process start to first live frame).
[new] Config: memory.mode ("legacy" default, or experimental "v2"). "v2" uses the new persistent-memory path and disables legacy search, flush, and Dream.
[changed] Folder trust now gates startup loading of project instructions (AGENTS.md / project rules) and project skills, not only hooks, MCP, and LSP. Headless startups that need those sources require --trust or a prior grant. Untrusted folders skip project skill and command discovery at startup.
[changed] Enabled plugins require trust before skills, commands, hooks, MCP servers, and LSP servers load. Untrusted plugin agents stay listed with frontmatter only.
[changed] Vim scrollback: H/L move by selected turn; J/K jump to the next/previous turn at the viewport top (same idea as the timeline arrows), instead of hopping assistant responses.
[changed] Esc no longer cancels a running turn. StopCancelled / user-interrupt paths treat Ctrl+C, client stop, and session/cancel as cancels; the bundled pager no longer reports esc as a cancel trigger.
[changed] Hooks UI: slow gate batches surface in the status row (Running pre_tool_use hook…, etc.) after ~300 ms; allow outcomes stay silent; deny and fail-open failures get a single scrollback line.
[changed] Dashboard actions row: with the list focused (Tab), →/← (or l/h in Vim mode) move across New Agent, Open Previous, and the worktree toggle; Enter activates; Esc returns to New Agent.
[changed] Model catalog surfaces grok-4.5 and grok-4.6 (default remains grok-4.6).
[changed] Several marketplace plugins refreshed (chrome-devtools, figma, netlify, pstack, railway, vercel, wix), including description tweaks on railway use-railway and wix wix-base44-connector / wix-manage.
Under the hood
Remote settings/config fetch and cache were reworked into a dedicated remote-config path (prefetch, resolution, settings refresh), separate from the older models-only layout.
Session/background-task and MCP init paths were split out for clearer lifecycle handling; workflow request service and fork-status helpers support pause/stop and background runs.
Prompt-ack handling (including headless) and related timeouts/env knobs support more reliable turn handoff.
Monitoring docs document the new TTFT/TTFM and interactive-startup metrics for operators wiring OpenTelemetry.
Bundled ripgrep override packaging is aligned with the existing musl binary.
Upgrade notes
Untrusted checkouts no longer load project skills, project commands, or AGENTS.md/project instructions at startup until you grant folder trust (--trust, /hooks-trust, or an interactive grant). Review project config before trusting unfamiliar repos.
Plugin installs still need enable + trust for full skill/command/hook/MCP/LSP load; user-dir plugins under ~/.grok/plugins/ remain auto-trusted.
Esc no longer stops an in-flight turn—use Ctrl+C, the on-screen stop control, or dashboard stop.
memory.mode = "v2" is experimental; leave the default ("legacy") unless you intend to try the new path (legacy search/flush/Dream are off under v2).
Refresh the marketplace (grok plugin marketplace update) to pick up Datadog, Quo, Supabase, and the updated plugin revisions.
