Synced from monorepo

Synced from monorepo

Changes:
- Workspace server: report `/ready` as failed with dwell on hub connect failure
- Refresh OIDC token for the Grok agent in the shell
- ACP terminal output recorder
- Cross-platform provider auth commands in the shell
- Default `/resume` to Grok sessions with a hint for hidden external sessions
- Resume sessions by title with `--resume`
- Limit app-builder archive size
- Data-driven tag labels for slash commands
- Doctor fixes for tmux
- Custom provider gateways and subprocess environment policy in the shell
- `/tutorial` — opt-in onboarding tour of Grok Build
- Soft and required CLI version checks in the shell
- Privacy banner env overrides survive live settings updates
- Add remote flag to override the image-edit model
- Return profile fields from auth info even when the access token is expired
- Add edit control on queued prompt rows
- Keep fail-closed policy when clearing orphans with no team
- Setting to disable the Ctrl+Space/F8 voice shortcut
- Pass `--raw` to pw-record so Linux dictation works on older PipeWire
- Validate git URLs when adding marketplace entries
- Stop shipping stale tool-doc parameter and tool names
- Re-point dashboard attach after `/fork` only when the parent was attached
- Surface Grok Computer media-generation results as file-path chunks
- Clear web background-task tray on kill and keep the task description
- Show privacy upsell banner in agent view until acted on
- Add tools-server client callback surface
- Protect persistent global hook sources

Source-Revision: 95d84f443eddcbed6cbfd6eed22e2eafe6b3939d

crates/common/xai-circuit-breaker/src/lib.rs

@@ -24,3 +24,5 @@ pub use observer::{NoopObserver, Observer};
 pub use registry::CircuitBreakerRegistry;
 pub use retry_policy::{Disposition, RetryPolicy};
 pub use state::{BreakerOpen, BreakerState, Outcome};
+
+// The crate's public surface is the re-exports above.

crates/common/xai-test-utils/src/git.rs

@@ -30,6 +30,15 @@ pub fn ensure_hermetic_git_on_path() {
                 // SAFETY: called once via `Once` before any child processes are spawned.
                 unsafe {
                     std::env::set_var("PATH", format!("{}:{}", bin_dir.display(), current_path));
+                    // git-minimal spawns subcommands (`git stash` → `git
+                    // update-index`) through its exec path, which is baked to
+                    // a build-machine prefix. Helpers live next to the binary,
+                    // so point the exec path there. Skip the host-fallback
+                    // wrapper (`git-host-fallback.sh`): host git must keep its
+                    // own exec path.
+                    if git_path.file_name().is_some_and(|name| name == "git") {
+                        std::env::set_var("GIT_EXEC_PATH", bin_dir);
+                    }
                 }
             }
         }