# Upstream scan report — grok (xAI Grok CLI)

- Date: 2026-06-03
- Executable: `grok`
- Package: —
- Release channel: vendor
- Repo: —
- Install docs: https://docs.x.ai/build/overview

## Mechanical source of truth

Flags, output modes, session/resume rules, permission modes, and env contracts are defined and enforced ONLY by `src/upstream-contracts.ts` (`UPSTREAM_CLI_CONTRACTS.grok`). This report is advisory; it never changes validation behaviour.

- Contract flags tracked: **39**
- Conformance fixtures: **13**
- Watched categories: `flags`, `permission-modes`, `session-resume`, `sandbox`, `output-formats`

## Tracked sources

| Source | Status | Bytes | SHA-256 (12) |
| ------ | ------ | ----- | ------------ |
| https://docs.x.ai/developers/release-notes.md | 200 OK | 10700 | ece115528941 |

## Findings

- No findings. (Default offline scan is advisory-only.)

## Next actions

1. If a watched category changed upstream, update the relevant flag/enum in `src/upstream-contracts.ts` and add/adjust a conformance fixture.
2. Mirror any `sourceUrls` / `watchCategories` change into `provider-sources.dag.toml`.
3. Re-run `npm run upstream:contracts` to confirm fixtures + TOML-sync pass.
