Synced from monorepo

Changes:
- Non-blocking coding-data sharing upsell banner
- Consolidate remediation in Doctor
- Auto mode defers fail-closed gate asks to the classifier
- Coalesce marketplace list fetches
- Allow removing a marketplace source by name
- Contain hung git marketplace sources (timeouts, non-blocking refresh, unbrick modal)
- Label failed workspace RPCs with error_kind
- Drop redundant explicit tonic/prost deps from xai-grok-shell
- Report real exit codes for completed background shells
- Narrow the date-rollover reminder to date-bearing templates
- Wire toolOverrides through the session and agent
- Security: Bash(git:*) allowlist matches whole command chain by prefix
- Split prompt-trigger telemetry and record classifier provenance
- Raise connectors-manager timeout to 60s
- Auto classifier honors recorded approvals for repeat actions
- Apply doctor fixes in the TUI
- Auto-mode classifier timeouts prompt instead of silently denying
- Scope subagent completion drains to the owning session
- Add the toolOverrides wire types
- Set client_identifier=grok-agent-sdk
- Accept both spellings of the workspace-teleport kill switch
- Persist one-shot occurrence journal
- Stop turns that poll the exact same tool call 16x in a row
- Copy compaction checkpoint files when forking sessions
- Auto-focus permission prompt from scrollback
- Esc cancels the running turn in non-vim and minimal modes
- List Ctrl+Z undo and redo in keyboard shortcuts
- Out-of-process macOS mic capture
- Show active auth mode on session-info
- Install the npm binary under $GROK_HOME
- Remove hover/click dead zones between dashboard items
- Route startup warnings to doctor
- Document [feedback.user] author identity config
- Extend bang command timeout
- Close combine-queued edit-hold race
- Integrate relocation recovery
- Expose privacy notice rollout flag
- Break harness discovery ref cycle so connections can idle-evict
- Shift/Alt+Enter inserts newline when editing a queued prompt
- Gate project Claude permissions on folder trust
- Echo response.create.event_id on response.created
- Toast when session creation fails from disk full
- Add shared test process lifecycle
- Enable dynamic workflows by default
- Add relocation transaction state machine
- Add shared test sandbox
- Surface auth failures on model-switch compact
- Persist durable scheduler expiry
- Confirm before removing extensions-modal items
- Re-run compact and prompt after login when compact hit expired auth
- Recap sends hosted tools under backend search

crates/codegen/xai-grok-test-support/src/lib.rs

@@ -6,7 +6,7 @@
     dead_code
 )]
 //! Shared test utilities for grok-build crates: mock inference server, SSE
-//! generators, ACP stdio client, headless runner, env sandbox.
+//! generators, ACP stdio client, headless runner, env/process sandbox.
 //!
 //! Provides:
 //! - [`MockInferenceServer`] — Mock /v1/chat/completions + /v1/responses with request logging
@@ -14,8 +14,10 @@
 //! - [`RawStdioClient`] — raw-wire ACP driver for bytes the typed client can't
 //!   produce (Foundation `\/` methods, string UUID ids)
 //! - [`leader::LeaderStdioClient`] — ACP client that drives `grok agent --leader stdio` (unix)
+//! - [`TestSandbox`] — Own isolated paths, hermetic child env, optional git setup, diagnostics
+//! - [`TestProcess`] — Own detached child lifecycle, process-tree teardown, bounded output tails
 //! - [`run_headless`] — Run `grok -p` against the mock server and capture output
-//! - [`git_workdir`] — Create a temp directory with git repo (forces libgit2 init)
+//! - [`git_workdir`] — Create a git-initialized [`TestSandbox`]
 //! - [`grok_binary`] — Resolve the grok binary path (GROK_BINARY env or cargo_bin)
 //! - [`spawn_counting_server`] — Connection-counting HTTP/1.1 server for wire/pooling tests
 //! - [`uds_proxy::UdsProxy`] — Frame-aware fault-injection proxy for leader IPC sockets (unix)
@@ -38,7 +40,8 @@ mod inference_override;
 #[cfg(unix)]
 pub mod leader;
 pub mod mock_server;
-mod process;
+pub mod process;
+pub mod sandbox;
 pub mod scripted;
 pub mod sse;
 #[cfg(unix)]
@@ -48,9 +51,20 @@ pub use counting_server::spawn_counting_server;
 pub use env::{EnvGuard, git_workdir, grok_binary};
 pub use headless::{
     HeadlessResult, assert_headless_success, assert_no_crashes, run_headless,
-    run_headless_with_cmd, run_headless_with_env, stderr_tail,
+    run_headless_in_sandbox, run_headless_in_sandbox_borrowed,
+    run_headless_in_sandbox_borrowed_with_env, run_headless_in_sandbox_with_env,
+    run_headless_with_env, stderr_tail,
 };
 pub use inference_override::{InferenceEndpoint, InferenceExpectation, InferenceRequestMatcher};
+#[cfg(unix)]
+pub use leader::LeaderFixture;
 pub use mock_server::{
     MockInferenceServer, MockModelEntry, ScriptedResponse, SseEvent, StorageUpload,
 };
+#[cfg(unix)]
+pub use process::process_has_exited_without_reap;
+pub use process::{
+    TestOutput, TestOutputSnapshot, TestProcess, TestProcessConfig, TestProcessState,
+    TestProcessStderr, TestProcessStdout, TestProcessTermination, TestProcessTree, TestStdin,
+};
+pub use sandbox::{TestSandbox, TestSandboxBuilder};