[chengyongru]

Summary

• add native OAuth 2.0 + PKCE sign-in for eligible xAI Grok subscriptions, with isolated token storage, proactive refresh, and one forced refresh after HTTP 401
• add an xAI Grok Responses provider for grok-4.5; hosted x_search is sent only when /v1/models advertises supportsBackendSearch
• support provider-scoped proxy configuration and bounded, credential-redacted upstream error bodies
• integrate the provider across the registry, factory, CLI, config, WebUI, documentation, and tests
• omit reasoning.effort when reasoningEffort is "none", preventing xAI from rejecting background requests such as chat-title generation
• keep WebUI controls focused on sign-in state and proxy configuration; detailed behavior remains in the documentation

Usage

nanobot provider login xai-grok --set-main

The default model is xai-grok/grok-4.5 with a 500,000-token context window.

Surface	Name
CLI and model prefix	xai-grok
Provider / preset ID	xai_grok
JSON config key	xaiGrok
WebUI label	xAI Grok

Security and failure behavior

• validates OAuth state, issuer, discovered endpoint hosts, and callback origin; uses PKCE and a random loopback callback port
• stores OAuth credentials atomically outside config.json; this integration does not use an xAI API key or X Developer OAuth
• refreshes proactively, retries once after HTTP 401, and redacts credential-shaped fields and bearer values before logging bounded upstream errors
• caches model capabilities for five minutes and fails closed when the catalog cannot be read, leaving hosted X Search disabled

Verification

• focused Python regression: 241 passed, 1 skipped
• focused WebUI regression: 94 passed
• Python lint and WebUI lint passed
• production WebUI build passed
• real Gateway + Playwright check passed for the Models route, xAI Grok naming, provider controls, and reload persistence; old public names were absent

Upstream references

• https://github.com/xai-org/grok-build/blob/3af4d5d39897855bdcc74f23e690024a5dc05573/crates/codegen/xai-grok-shell/src/remote/client.rs
• https://github.com/xai-org/grok-build/blob/3af4d5d39897855bdcc74f23e690024a5dc05573/crates/codegen/xai-grok-agent/src/builder.rs
• https://github.com/xai-org/grok-build/blob/3af4d5d39897855bdcc74f23e690024a5dc05573/crates/codegen/xai-grok-models/default_models.json
• https://docs.x.ai/developers/tools/x-search
• https://docs.x.ai/developers/tools/citations