From 10b795c9ce12d71ab8bf7f72d8341089876a18d1 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Tue, 15 Sep 2026 03:15:06 +0000 Subject: [PATCH] Release packages --- .changeset/codex-bridge.md | 5 ----- .changeset/codex-cli-hardening.md | 5 ----- .changeset/gateway-url-allowlist.md | 5 ----- .changeset/local-thread-history.md | 5 ----- .changeset/potato-p1-bridge.md | 5 ----- .changeset/quiet-groups-validate.md | 5 ----- .changeset/strip-c0-thread-list.md | 5 ----- .changeset/thread-send-message-text.md | 5 ----- .changeset/windows-app-session.md | 5 ----- CHANGELOG.md | 17 +++++++++++++++++ package.json | 2 +- 11 files changed, 18 insertions(+), 46 deletions(-) delete mode 100644 .changeset/codex-bridge.md delete mode 100644 .changeset/codex-cli-hardening.md delete mode 100644 .changeset/gateway-url-allowlist.md delete mode 100644 .changeset/local-thread-history.md delete mode 100644 .changeset/potato-p1-bridge.md delete mode 100644 .changeset/quiet-groups-validate.md delete mode 100644 .changeset/strip-c0-thread-list.md delete mode 100644 .changeset/thread-send-message-text.md delete mode 100644 .changeset/windows-app-session.md diff --git a/.changeset/codex-bridge.md b/.changeset/codex-bridge.md deleted file mode 100644 index b847a74..0000000 --- a/.changeset/codex-bridge.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"grok-bot-cli": minor ---- - -Add `gbot codex status`, `gbot codex list-threads [--limit N]`, and `gbot codex send `: attach to the local Codex app-server daemon socket (`$CODEX_HOME/app-server-control/app-server-control.sock`) with a built-in WebSocket client, list threads, and start a turn with documented JSON-RPC (`thread/resume` + `turn/start`). Reports an absent socket (no daemon or ChatGPT Desktop private mode), unknown threads, threads owned by another client, and refuses server approval requests instead of approving them. Method names are pinned to Codex 0.154.0. diff --git a/.changeset/codex-cli-hardening.md b/.changeset/codex-cli-hardening.md deleted file mode 100644 index 1d479e4..0000000 --- a/.changeset/codex-cli-hardening.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"grok-bot-cli": patch ---- - -Parse global `gbot` flags only before the command so `gbot codex send` keeps `--json` / `--dir` inside the message; refuse native Windows for `gbot codex` with a clear error; strip terminal controls from thread listings; run unit tests through `scripts/run-unit-tests.mjs` so Windows and Node 18 work without shell globs. diff --git a/.changeset/gateway-url-allowlist.md b/.changeset/gateway-url-allowlist.md deleted file mode 100644 index 8d346da..0000000 --- a/.changeset/gateway-url-allowlist.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"grok-bot-cli": patch ---- - -Send the gateway bearer only to `https` hosts on `*.cursor.sh`, `*.cursor.com`, or `*.cursorvm.com`, and the EnsureSandBox / Cursor access token only to `*.cursor.sh` / `*.cursor.com`; refuse cross-origin fetch redirects; redact Authorization (any scheme), Cookie, and named token fields from error output. `GROK_BOT_ALLOW_LOCAL_GATEWAY=1` admits loopback gateways and `GROK_BOT_ALLOW_ANY_GATEWAY=1` disables the host check; both warn once on stderr. diff --git a/.changeset/local-thread-history.md b/.changeset/local-thread-history.md deleted file mode 100644 index af2e324..0000000 --- a/.changeset/local-thread-history.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"grok-bot-cli": patch ---- - -Add opt-in local JSONL thread history (`GROK_BOT_HISTORY=on`) with offline `gbot history` search. diff --git a/.changeset/potato-p1-bridge.md b/.changeset/potato-p1-bridge.md deleted file mode 100644 index cc149a3..0000000 --- a/.changeset/potato-p1-bridge.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"grok-bot-cli": patch ---- - -P1 bridge follow-ups: preserve send receipts with rejected/accepted/unknown delivery states (Codex `CodexSendError` keeps thread/turn IDs, gateway `sendPrompt` returns `delivery` + `messageId` and marks post-write loss unknown); bound the Codex WebSocket transport (idempotent close settling pending requests, socket destroy on every failure, exact handshake validation, fragmentation/UTF-8/opcode handling, header/frame/message/buffer budgets); make `gbot_thread` bounded without losing replies (truncation metadata, `full` bounded full-read in tool and `--full` in CLI, safe string normalization, 1–200 limit consistency, gateway deadline and response-byte cap). diff --git a/.changeset/quiet-groups-validate.md b/.changeset/quiet-groups-validate.md deleted file mode 100644 index 7087e51..0000000 --- a/.changeset/quiet-groups-validate.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"grok-bot-cli": patch ---- - -Validate group membership in gateway mode before sending mutations: deduplicate member references, enforce one to six bot members, reject nested groups, and reject bots as group targets. diff --git a/.changeset/strip-c0-thread-list.md b/.changeset/strip-c0-thread-list.md deleted file mode 100644 index be340e4..0000000 --- a/.changeset/strip-c0-thread-list.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"grok-bot-cli": patch ---- - -Strip C0/C1 controls (including CR, backspace, and BEL) from `gbot codex list-threads` text output, not only ESC sequences. diff --git a/.changeset/thread-send-message-text.md b/.changeset/thread-send-message-text.md deleted file mode 100644 index f89ab06..0000000 --- a/.changeset/thread-send-message-text.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"grok-bot-cli": patch ---- - -Fix `gbot thread` so bot replies (`send-message` entries) show their text instead of empty lines, by sharing transcript parsing with the grok-bot plugin. diff --git a/.changeset/windows-app-session.md b/.changeset/windows-app-session.md deleted file mode 100644 index e4c96d6..0000000 --- a/.changeset/windows-app-session.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"grok-bot-cli": patch ---- - -Use the signed-in Grok Bot app session on Windows (`%APPDATA%\\Grok Bot`, DPAPI Safe Storage). diff --git a/CHANGELOG.md b/CHANGELOG.md index bc86f5f..79e9315 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,22 @@ # grok-bot-cli +## 0.3.0 + +### Minor Changes + +- 82badce: Add `gbot codex status`, `gbot codex list-threads [--limit N]`, and `gbot codex send `: attach to the local Codex app-server daemon socket (`$CODEX_HOME/app-server-control/app-server-control.sock`) with a built-in WebSocket client, list threads, and start a turn with documented JSON-RPC (`thread/resume` + `turn/start`). Reports an absent socket (no daemon or ChatGPT Desktop private mode), unknown threads, threads owned by another client, and refuses server approval requests instead of approving them. Method names are pinned to Codex 0.154.0. + +### Patch Changes + +- 93cb28e: Parse global `gbot` flags only before the command so `gbot codex send` keeps `--json` / `--dir` inside the message; refuse native Windows for `gbot codex` with a clear error; strip terminal controls from thread listings; run unit tests through `scripts/run-unit-tests.mjs` so Windows and Node 18 work without shell globs. +- ef6ce79: Send the gateway bearer only to `https` hosts on `*.cursor.sh`, `*.cursor.com`, or `*.cursorvm.com`, and the EnsureSandBox / Cursor access token only to `*.cursor.sh` / `*.cursor.com`; refuse cross-origin fetch redirects; redact Authorization (any scheme), Cookie, and named token fields from error output. `GROK_BOT_ALLOW_LOCAL_GATEWAY=1` admits loopback gateways and `GROK_BOT_ALLOW_ANY_GATEWAY=1` disables the host check; both warn once on stderr. +- d59fa95: Add opt-in local JSONL thread history (`GROK_BOT_HISTORY=on`) with offline `gbot history` search. +- a7415d7: P1 bridge follow-ups: preserve send receipts with rejected/accepted/unknown delivery states (Codex `CodexSendError` keeps thread/turn IDs, gateway `sendPrompt` returns `delivery` + `messageId` and marks post-write loss unknown); bound the Codex WebSocket transport (idempotent close settling pending requests, socket destroy on every failure, exact handshake validation, fragmentation/UTF-8/opcode handling, header/frame/message/buffer budgets); make `gbot_thread` bounded without losing replies (truncation metadata, `full` bounded full-read in tool and `--full` in CLI, safe string normalization, 1–200 limit consistency, gateway deadline and response-byte cap). +- 9b034ce: Validate group membership in gateway mode before sending mutations: deduplicate member references, enforce one to six bot members, reject nested groups, and reject bots as group targets. +- ab70a00: Strip C0/C1 controls (including CR, backspace, and BEL) from `gbot codex list-threads` text output, not only ESC sequences. +- 93cb28e: Fix `gbot thread` so bot replies (`send-message` entries) show their text instead of empty lines, by sharing transcript parsing with the grok-bot plugin. +- 3fe1287: Use the signed-in Grok Bot app session on Windows (`%APPDATA%\\Grok Bot`, DPAPI Safe Storage). + ## 0.2.3 ### Patch Changes diff --git a/package.json b/package.json index 74b3783..0fe2b32 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "grok-bot-cli", - "version": "0.2.3", + "version": "0.3.0", "description": "CLI for Grok Bot agents and groups: create, update, message, inspect threads, and automate cleanup", "type": "module", "bin": {