v1.0.0 — first stable release

First stable release of grok-plugin-cc.

No code changes from v0.9.13. The plugin has been hardened through 13 rounds of multi-LLM /grok:aggregate-review against the v0.9.x line.

What's included

20 slash commands wrapping the official xAI Grok CLI:

• /grok:ask, /grok:research, /grok:rescue
• /grok:review, /grok:adversarial-review, /grok:aggregate-review
• /grok:imagine, /grok:imagine-video
• /grok:best-of, /grok:models
• /grok:worktree, /grok:sessions, /grok:memory, /grok:mcp
• /grok:inspect, /grok:status, /grok:result, /grok:cancel, /grok:purge
• /grok:setup

Security baseline

• Env scrubbing allowlist for the spawned grok child
• ANSI escape sanitization (4 KiB pending-escape cap)
• TOCTOU/symlink defenses on job state reads (O_NOFOLLOW, fstat, 0700 chmod chain, realpath-on-fd, root-only safe-boundary check)
• POSIX -- terminator for literal positionals
• Refusal of unknown flag-like positionals by default
• Capability-probe gating for worktree/continue/resume/memory flags so older grok CLIs degrade cleanly
• Prompt-injection defenses for reviewer-style commands

Stability promise

v1.x will not break any of the 20 command surfaces. Internal helpers may continue to evolve.

Tests

339 tests (334 passing + 5 real-grok integration smoke tests skipped by default; opt-in via GROK_INTEGRATION_TEST=1).

See CHANGELOG.md for the full v0.9.x → v1.0.0 history.