# 1.0.64 — 2026-10-19

## Breaking Changes

- **Untrusted folders** run only your organization's managed hooks. User, project, plugin, and agent hooks wait until you trust the folder. Headless sessions treat user hooks as trusted.

## Features

- **Worktree names** typed with `Ctrl+W` keep Unicode letters such as `café`, and a name or ref that starts with `-` is refused.
- **Auto mode** runs a shell command without review only when every command in it matches an allowlist entry; anything else asks first. Permission rules read each word the way bash passes it to the program.
- **`/resume`** loads older sessions when you reach the last row, and shows how many sessions are loaded.
- **Auto mode** runs `make --version`, `cmake --version`, and `just --version` without asking.
- **HTTP connections**, including remote MCP servers, accept gzip, brotli, zstd, and deflate compressed responses.
- **Plugin install suggestions** above the prompt are off when `disable_plugins = true` is set.

## Bug Fixes

- **New worktrees** keep tracked files that match `.gitignore`, and leave out files excluded only by `.git/info/exclude` or `core.excludesFile`.
- **A new session that fails to start** puts what you typed back in the prompt you return to, instead of losing it.
- **Web search** works from a session's first turn, and in subagents, when the search model signs in through an external auth provider.
- **`grok -w`, `grok worktree create`, worktree forks, and subagent worktrees** refuse up front with the sandbox's message when the sandbox profile does not allow creating worktrees.
- **Worktree options** are hidden in `/fork`, `/new`, and the Welcome screen when the sandbox profile does not allow creating worktrees.
- **A worktree name you type** that is already taken is refused instead of getting a numbered suffix, and a name whose folder you deleted by hand can be used again.
- **External OpenTelemetry export** keeps sending logs and metrics when `OTEL_EXPORTER_OTLP_COMPRESSION` is set to `gzip` or `zstd`.
- **`[model.*]` tables** without a context window take the window and API of another table that sends the same model, instead of the 200,000-token fallback.
- **Grok on macOS without a GUI session**, such as over SSH, no longer hangs on its first modifier-key check.
- **Custom models on the Responses API** keep the turn going when a web search call starts without an action.
- **Shell commands** run correctly on zsh when your startup files alias `grep` or replace `run-help`.
- **Voice dictation preview** grows the prompt as you speak and keeps the newest words in view.