Synced from monorepo

Synced from monorepo

Changes:
- Workspace server: report `/ready` as failed with dwell on hub connect failure
- Refresh OIDC token for the Grok agent in the shell
- ACP terminal output recorder
- Cross-platform provider auth commands in the shell
- Default `/resume` to Grok sessions with a hint for hidden external sessions
- Resume sessions by title with `--resume`
- Limit app-builder archive size
- Data-driven tag labels for slash commands
- Doctor fixes for tmux
- Custom provider gateways and subprocess environment policy in the shell
- `/tutorial` — opt-in onboarding tour of Grok Build
- Soft and required CLI version checks in the shell
- Privacy banner env overrides survive live settings updates
- Add remote flag to override the image-edit model
- Return profile fields from auth info even when the access token is expired
- Add edit control on queued prompt rows
- Keep fail-closed policy when clearing orphans with no team
- Setting to disable the Ctrl+Space/F8 voice shortcut
- Pass `--raw` to pw-record so Linux dictation works on older PipeWire
- Validate git URLs when adding marketplace entries
- Stop shipping stale tool-doc parameter and tool names
- Re-point dashboard attach after `/fork` only when the parent was attached
- Surface Grok Computer media-generation results as file-path chunks
- Clear web background-task tray on kill and keep the task description
- Show privacy upsell banner in agent view until acted on
- Add tools-server client callback surface
- Protect persistent global hook sources

Source-Revision: 95d84f443eddcbed6cbfd6eed22e2eafe6b3939d

crates/codegen/xai-grok-pager-pty-harness/src/flows.rs

@@ -78,6 +78,16 @@ pub fn inference_request_count(content: &ContentController) -> usize {
 /// `default_coding_data_retention_opt_out()`. The mock server accepts any
 /// bearer. Pair with [`oauth_credential_ops`].
 pub fn seed_fake_oauth(content: &ContentController, user: &str) {
+    seed_fake_oauth_with_opt_out(content, user, false);
+}
+
+/// Like [`seed_fake_oauth`], but with `coding_data_retention_opt_out: true` —
+/// the auth-side precondition for the coding-data privacy upsell banner.
+pub fn seed_fake_oauth_coding_data_opted_out(content: &ContentController, user: &str) {
+    seed_fake_oauth_with_opt_out(content, user, true);
+}
+
+fn seed_fake_oauth_with_opt_out(content: &ContentController, user: &str, opted_out: bool) {
     let grok_home = content.home().join(".grok");
     std::fs::create_dir_all(&grok_home).expect("create temp .grok");
     std::fs::write(
@@ -94,7 +104,7 @@ pub fn seed_fake_oauth(content: &ContentController, user: &str) {
     "refresh_token": "pty-test-refresh-token",
     "oidc_issuer": "https://auth.x.ai",
     "oidc_client_id": "b1a00492-073a-47ea-816f-4c329264a828",
-    "coding_data_retention_opt_out": false
+    "coding_data_retention_opt_out": {opted_out}
   }}
 }}"#
         ),

crates/codegen/xai-grok-pager-pty-harness/src/lib.rs

@@ -41,8 +41,9 @@ pub use content::{
 };
 pub use env::pager_binary;
 pub use flows::{
-    inference_request_count, oauth_credential_ops, seed_fake_oauth, submit_turn,
-    wait_for_labels_absent, wait_for_model_via_new_sessions,
+    inference_request_count, oauth_credential_ops, seed_fake_oauth,
+    seed_fake_oauth_coding_data_opted_out, submit_turn, wait_for_labels_absent,
+    wait_for_model_via_new_sessions,
 };
 pub use host_clipboard::HostClipboardTextGuard;
 pub use leader::LeaderCluster;