Skip to content

feat: Grok Bridge — pair QM agents to a personal Grok Bot - #1149

Open
divo12 wants to merge 5 commits into
yc-software:mainfrom
divo12:feat/grok-bridge-architecture
Open

divo12 wants to merge 5 commits into
yc-software:mainfrom
divo12:feat/grok-bridge-architecture

Conversation

@divo12

@divo12 divo12 commented Sep 12, 2026 •

Copy link
Copy Markdown

Summary

  • Adds a flag-gated Grok Bridge (grok_bridge, default off → 404) so a named QM agent like Sara can run on a consenting owner's personal Grok Bot computer and post labeled results back into the originating room. Grok Bot stays per-user; QM stays the multiplayer surface.
  • Data plane is qm-grok-bridge/v1 over HTTP: pair → owner consent → inbound webhook URL+key → dispatch a job envelope → Bot POSTs seq events to a job-scoped callback. Callback tokens are hashed at rest; queued jobs reject a guessable bearer; guests cannot pair or dispatch.

Walkthrough

grok-bridge.mp4

Monday #pipeline-review: Maya asks Sara. Sara runs on Divyansh's Grok Bot and the watch list comes back labeled Sara · via Divyansh's Grok Bot.

How it works

  1. Enable grok_bridge on the org.
  2. POST /v1/grok-bridge/pairings → owner POST .../decide → POST .../inbound with the Grok Bot webhook routine URL + key.
  3. POST /v1/grok-bridge/jobs POSTs qm-grok-bridge/v1 to that webhook. A 200 means the run started, not finished.
  4. The Bot POSTs events to /v1/grok-bridge/jobs/:id/events with the job bearer. QM projects agent · via {owner}'s Grok Bot into the session.

CUA is installer-only (find/create QM · Sara, paste the reply skill). It must never click Always allow. After pairing, jobs do not go through GUI scraping.

Test plan

  • node --experimental-test-module-mocks --test test/grok-bridge.test.ts test/grok-bridge-routes.test.ts (Node ≥24)
  • npm run lint and npm run typecheck
  • Composer opened Grok Bot.app (v0.30.0). Live webhook still needs the owner to paste the routine URL + key.
  • Enable grok_bridge on a real QM, pair Sara to a consenting owner, dispatch from a shared session, confirm the labeled transcript line
  • Confirm flag-off still 404s every /v1/grok-bridge/* route, including the public events callback
  • Confirm guests cannot pair or dispatch; owner must be a member of the origin session

divo12 and others added 5 commits September 13, 2026 02:32
Keep QM as the team room and Grok Bot as a consenting owner's computer,
bridged by a versioned HTTP protocol instead of GUI scraping.

Co-authored-by: Cursor <cursoragent@cursor.com>
Ship the flag-gated HTTP data plane so a room can dispatch to Sara on a personal Grok computer and project labeled results, without making Grok Bot multiplayer.

Co-authored-by: Cursor <cursoragent@cursor.com>
The walkthrough video belongs on the PR as playable media, not as tracked source.

Co-authored-by: Cursor <cursoragent@cursor.com>
Keep the existing adrs/ directory tracked; only the local Grok Bridge note stays untracked.

Co-authored-by: Cursor <cursoragent@cursor.com>
…e service facade

Keep GrokBridge as the deep interface so HTTP and wiring still call createGrokBridge.

Co-authored-by: Cursor <cursoragent@cursor.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant