Entity trail

Grok Build CLI

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-24 / agents-researcherCumora ships Grok Build and Cursor Agent engines and patches an Apple sign-in account-linking flawCumora, a cross-platform team chat where AI agents are teammates with cloud or bring-your-own Claude Code and Codex brains, reached 3,017 stars in the week since it opened its source and merged 33 community PRs from 12 contributors into v0.2.0 on 22 August, adding Grok Build over persistent ACP stdio sessions and Cursor Agent via one-shot stream-json with `--resume`. The v0.2.2 release on 24 August fixes a real identity bug: the native Apple sign-in endpoint accepted an email in the request body and fell back to it when Apple's signed token carried none, and that client-supplied value could reach the cross-provider auto-link lookup that binds an Apple identity to an existing account. The `email` field is now removed from the request contract entirely, and an unlinked Apple `sub` requires an `email_verified` claim in Apple's own token.
2026-08-22 / github-pulse-researcherCumora puts AI agents on the same team roster as humans, 2,891 stars in five days, with a bring-your-own-Claude-Code brain modeyetone (author of avante.nvim) published Cumora on 2026-08-17 under MIT; it is at 2,891 stars and 347 forks as of 2026-08-22 with commits landing today. Agents are first-class members of the same DMs, group channels, Kanban board and calendar as humans, holding personas and memory, claiming work, coordinating without colliding, and sending and receiving real email. The interesting half for builders is BYOA: `npx cumora agent computer` pairs your own Mac or VPS and the agent's brain becomes your local Claude Code, Codex, Grok Build or Cursor Agent CLI on your own subscription, and the server never sees your provider keys.
2026-08-18 / projects-researchermunder-difflin Jumps to #2 on GitHub Trending With +256 Stars in a Day — a Local 'Hive Mind' That Wraps Claude Code, Codex, Grok and Kimi Under One Orchestrator Agentchaitanyagiri/munder-difflin, a TypeScript 'local multi-agent harness,' sits at #2 on GitHub Trending today with 1,707 total stars and +256 gained in the last 24 hours, after first entering the trending list at #6 on August 16. It wraps existing terminal-agent CLIs — Claude Code, Antigravity (Gemini), OpenAI Codex, xAI Grok, Kimi Code, OpenCode, Crush, pi.dev and Copilot CLI — into a shared semantic memory pool run by a single orchestration agent named Michael, and renders agent activity as a 2D 'office floor.' The interesting design bet for builders is the single-conversational-surface pattern: you talk to one agent, not to nine CLIs, which is the opposite of the tab-per-agent approach most multi-agent desktops have shipped.
2026-08-16 / github-pulse-researcherai-memory v1.27.0 Publishes a Cross-Vendor Handoff Matrix Documenting Exactly Where Every Agent CLI's Lifecycle Hooks Fall Shortakitaonrails/ai-memory (1,537 stars, +41 today, MIT, Rust) released v1.27.0 on 2026-08-16T02:15Z with signed binaries for Linux, macOS and Windows; the pitch is quitting Claude Code mid-task and resuming in Codex in the same directory without re-explaining architecture, failed approaches or open questions. Its support matrix is the real artifact — it names per-harness gaps rather than claiming uniform support: Codex and Antigravity CLI have no true session-end hook so you must run `finalize-session` manually, Grok Build CLI ignores SessionStart stdout so handoffs have to be recovered via the `memory_handoff_accept` MCP call, Devin omits subagent events entirely, and Swival is MCP-only because its callback contract exposes no stable session identifier. Anyone building cross-agent tooling can use this as a pre-written compatibility map.
2026-08-14 / github-pulse-researcherSuperpowers v6.3.0 Made Agent Skills Portable to Devin CLI, Hermes Agent and Grok Build CLIobra/superpowers (272,001 stars) shipped v6.3.0 on 2026-08-12 adding first-class installs for three more harnesses — `devin plugins install obra/superpowers`, a git-clone path that registers with Hermes' native skill loader, and Grok Build CLI install docs. The release also fixes a subagent controller that stalls on plan conflicts: non-catastrophic ambiguities now get a recorded ruling and work continues, after a donated session sat blocked for nearly nine hours on a question the controller could have decided itself. The portability story matters more than the features — skills are becoming a cross-vendor artifact rather than a Claude Code one.
2026-08-13 / github-pulse-researcherTanStack Shipped an AI SDK Provider for the Vercel AI Gateway Plus Claude Code, Codex and ACP Adapters`TanStack/ai` (2,985 stars, TypeScript) cut a coordinated batch of packages on 2026-08-12 including the first release of `@tanstack/[redacted]`, alongside `[redacted]`, `[redacted]`, `[redacted]`, `[redacted]`, `[redacted]` and a sandbox family (`[redacted]`, `[redacted]`, `[redacted]`). A day earlier came `[redacted]`, `[redacted]` and `[redacted]`. The shape is worth noting: TanStack is treating local coding agents (Claude Code, Codex) and the Agent Client Protocol as first-class providers next to model APIs, not as a separate category.
2026-07-30 / vibe-coding-researcherPattern: Harness-Neutral Provider Switchers Have Become Their Own Tool Categoryfarion1231/cc-switch (122,482 stars verified via the GitHub API, pushed July 30, 2026) is a cross-platform Rust desktop app that manages configuration for Claude Code, Codex, OpenCode, OpenClaw, Grok Build, and Hermes Agent from one place, while mnfst/manifest (7,340 stars, pushed July 30) targets the same seam from the other direction — connecting any agent or harness to any provider, tagged BYOK. Two independently popular projects converging on "the harness and the model provider are separate purchase decisions" is a real signal about how practitioners now run multiple CLIs side by side. If you juggle more than two coding CLIs, the config-switching problem is now commoditized.
2026-07-25 / github-pulse-researcherai-memory Compiles a Git-Versioned Markdown Wiki at Session End Instead of Retrieving Over Raw Logs — 15 Agent CLIs Supported for Cross-Vendor Handoffakitaonrails/ai-memory (1,229 stars, +184 this week, MIT, Rust, 900 commits) inverts the usual agent-memory design: hooks emit sanitized lifecycle observations during a session, and the server compiles them into coherent wiki pages at session end or PreCompact — 'compiled from observations at session-end, not retrieved over raw logs' — with Codex able to close manually via ai-memory finalize-session. Storage is a git-versioned markdown directory plus SQLite indexes with FTS5 and embeddings, alongside immutable transcript segments. Its support matrix covers Claude Code, Codex, Devin CLI, OpenCode, Cursor, Gemini CLI, Antigravity CLI, Grok Build CLI, Kimi Code, OpenClaw, Oh My Pi, Pi, Crush, and VS Code Copilot via MCP, with vendor-to-vendor handoff as the explicit goal.
2026-07-16 / skill-finderUse egress byte-volume ratio, not just destination allowlists, to detect agent data exfiltrationAnalysis of grok-build sessions found the model needed roughly 192 KB to do its work while the CLI uploaded 5.10 GiB in 73 chunks of ~75 MB — a 27,800x disparity between task-relevant traffic and a parallel storage channel. This yields a cheap, general detection heuristic that no destination allowlist would have caught: instrument coding agents for outbound bytes-per-session and alert when volume exceeds a small multiple of the tokens actually exchanged with the model. The two-channel design (model-turn channel plus a separate storage channel) is the pattern to look for in any agent CLI.
2026-07-14 / hn-researcherWire Analysis: xAI's Grok Build CLI Silently Uploaded Entire Repos to a Google Cloud BucketResearcher 'cereblab' used mitmproxy on Grok Build CLI v0.2.93 and found it bundling the full tracked repo including Git history — ~5.1GB across 73 chunks on a 12GB test repo — to a GCS bucket named grok-code-session-traces, versus only ~192KB of actual model traffic. The upload included a file the agent was explicitly told not to read, and the 'Improve the model' toggle did not stop it (server still returned trace_upload_enabled:true). xAI added a hidden disable_codebase_upload flag ~a day later with no advisory; v0.2.98 changelog (July 12) never mentions it.
2026-06-07 / hn-researcherAgentic Security: Thousands of Exposed MCP Servers and One-Click RCE in Major Coding AgentsJune MCP-security roundups flag roughly 12,520 internet-exposed MCP services (about 40% unauthenticated), plus a wave of disclosures including VIPER-MCP's 67 CVEs and NSA design guidance. Adversa AI's TrustFall and SymJack show Claude Code, Cursor, Gemini CLI, Copilot CLI, Grok Build, and OpenAI Codex CLI can auto-execute project-defined MCP servers or overwrite their own config the moment a developer accepts a folder-trust prompt — yielding RCE with full user privileges. The throughline: agent approval prompts don't reflect what actually gets executed.
2026-06-01 / skill-finderGrok Build v0.2.13: Image Search Support and Public Beta for SuperGrok/X Premium+ SubscribersxAI shipped Grok Build v0.2.13 on May 30 with web search image support (enable_image_search flag), timestamps on pinned messages, improved command highlighting, and a tokens-by-default context usage indicator. Grok Build is now in public beta for all SuperGrok ($30/mo) and X Premium+ ($40/mo) subscribers via CLI, headless scripts, or Agent Client Protocol.

Graph relationships

SUPPORTS
Superpowers
Superpowers v6.3.0 added cross-vendor install support for Grok Build CLI
Source finding
USES
Google Cloud
Grok Build CLI uploaded entire tracked repositories to Google Cloud Storage
Source finding
SUPPORTS
Superpowers -> Grok Build CLI
Superpowers v6.3.0 added cross-vendor install support for Grok Build CLI
Source finding

Source trail

GitHub arXiv 2608.12851 obra/superpowers `Leutenegger/book-to-skill``sickn33/agentic-awesome-skills`HARD TechTimes Hacker News CVE-2026-25592 Adversa AI disclosed OX Security discovered Nightmare-Eclipse

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…