Give your Bots house rules so they don't freeze their computer

What's new (Grok Bot/Cursor portion for the issue)#

No new Grok Bot version is on the changelog (still 0.70.2 from Oct 11), no new Cursor release, and Cursor's status page is All Systems Operational this morning. (confirmed)

House rules for Bots that share a computer (confirmed, staff)#

What happened: on Saturday, Cursor staff member deanrie posted a file "you can give directly to the bots." It tells them to check memory before heavy work, run one heavy job at a time through a shared lock, cap parallel builds and tests, never start virtual machines without approval, and clean up afterward. It came out of one business user's case: their computer froze twice, and before the second freeze "memory was almost completely full," with "nearly 1000 processes running," per deanrie.

Who it's for: anyone whose Bots run builds, tests, installs or browsers. The file says "All Bots share ONE computer with limited memory and CPU."

What to do now: save it as /workspace/RESOURCE_RULES.md and tell each Bot, "From now on, before any heavy task, read and follow /workspace/RESOURCE_RULES.md. Remember this as a lasting rule." If a computer freezes, don't click Update, Recover or Reset.

What to watch: whether frozen computers start recovering on their own, which deanrie says they should.

Staff say Bots can keep using a locked Mac or PC (staff statement)#

Colin said at 7:31 AM ET Saturday: "Since version 0.70.2, Grok Bot desktop no longer stops the local helper when nobody is at the computer. That includes a locked screen, a sleeping display, or the Grok Bot window sitting in the background." The helper is what lets a Bot run commands on your own computer. "The current version, 0.71.2, includes this too." A Windows user replied they "haven't had to reconnect the bot in the last 3 days, not even with the PC locked." We added this as an update to our known issue, which stays open for now: on Oct 13 staff said they couldn't confirm 0.70.2 fixed it, and Colin's post doesn't mention restarts for scheduled jobs. Our read: update to 0.71.2 and test with the screen locked before you drop the workaround. (staff statement; one user confirmation)

Block risky deletes in Cursor's agent (confirmed issue, one report)#

One user reports a Cursor agent in Run Everything mode deleted "Almost the entire D: drive" on Windows when a cmd /c delete's quoting broke. deanrie said "This is an issue we're tracking" and laid out the fix: Allowlist mode without cmd, powershell or pwsh, File-Deletion and External-File Protection, and a beforeShellExecution hook that blocks recursive deletes.

Grok BotHow people are using it#

• Shopping by text. @Teslaconomics posted at 5:52 PM ET Saturday that one message, "Order me the DribbleUp silent ball, best price, shipped to my home," got their Bot to compare prices and check out: "$32.91 total w/ free shipping." Elon Musk quoted it at 10:03 PM ET: "Screenshot of credit card is the easiest way, unless you want to fill out the secure vault data." Our read: the routes the app documents are a Secure Form for checkout card fields (v0.68.1) and paying with X Money or Stripe Link (v0.70.2); a screenshot puts the full card number in your chat. (reported, one user)
• A Bot running a side business. Brian Roemmele wrote at 9:52 PM ET Saturday that a question about encoding video for AI turned into "a full on new venture" their Bot runs, that it "Handles all customers via email," and that "he just brought in $700." (reported, one user; revenue is their claim)
• Errands from the car. Texas Twins Dad said their "favorite use cases are booking appointments and solving taxes," and that through Grok Voice in a Cybertruck "It even pulls up web browser!" Musk quoted it at 9:55 PM ET with "Try out Grok @Bot!" (reported, one user)

Grok BotThe digest#

Grok Bot#

• Local tools stuck on "Never": staff found the cause. Colin said at 7:26 AM ET Saturday "The "Never" wasn't coming from your setting. There's an issue on our side where the app sometimes doesn't finish linking your Mac to your account." That's why reinstalls and new machine IDs didn't help. On that account the link finished "right after a privacy choice was saved in your account settings on grok.com." The reporter posted the steps they used: grok.com/dashboard, Settings, Privacy, Edit, save a choice, then restart Grok Bot. That's one user's workaround, not a staff instruction. Another user still has it on 2 Macs; one says it fixed itself the next day. Follow-up to our Oct 16 and Oct 17 items. (confirmed, staff)
• iOS shows bare web addresses instead of link text. Colin said it's a known iOS issue: an emoji or "any other non-standard character (curly quotes, long dashes, accented letters)" before a link makes the app show the address. Links still open the right page, "Windows and Mac aren't affected," and "A fix is ready for an upcoming version of the iOS app." (confirmed, staff)
• AWS plugin fails with "Invalid request parameters." Colin explained the plugin signs requests with the AWS sign-in saved on your Bot's computer, and an expired one breaks it. Fix: ask the Bot to run aws sts get-caller-identity, then aws sso login --use-device-code if it's expired, then restart its MCP servers. "We're seeing the same pattern from other users of this plugin." (confirmed, staff)
• Revoking sessions: the desktop app comes back. deanrie said the phone app appears in Active Sessions as "Grok Bot" with a phone icon, while the desktop app "about every 30 minutes" adds a new "Desktop App" entry. There's "no separate "sign out everywhere" button right now" that covers the desktop app. Close the desktop app before revoking, and allow up to 10 minutes. (confirmed, staff; tracked)
• QuickBooks: staff and changelog don't match. deanrie said QuickBooks likely flags the Bot's cloud browser as automated and pointed to a feature request for a native connector, suggesting a custom MCP server meanwhile. The Oct 11 changelog says "QuickBooks Online is available to connect." Cursor hasn't squared the two. Our read: check Connect Apps for QuickBooks before using the browser. (confirmed, both sources)
• No chat export yet. deanrie confirmed there's no full transcript export "either through an in-app button or by having the bot save it to a file," only copying messages and Copy conversation ID. Vote in the thread if you want it. (confirmed, staff)
• Cloudflare Access MCP servers can work after all. deanrie corrected an earlier answer: cursor:// callbacks can be added "through the Access Applications API." Add cursor://anysphere.cursor-mcp/oauth/callback and https://www.cursor.com/agents/mcp/oauth/callback to the app's allowed URIs. Home Assistant through Nabu Casa still needs a fix on Cursor's side. (confirmed, staff)
• Musk: "around 20 improvements per day." Elon Musk posted at 10:14 PM ET Saturday "Our team makes around around 20 improvements per day to Grok @Bot." No list came with it, and the changelog's last entry is still Oct 11. (reported)
• A SpaceX engineer's Grok Bot talk. Cursor's Compile New York page lists "How I use Grok Bot as an Engineer at SpaceX" by Frances Thai at 11:30 AM on Nov 5. Frances posted Saturday that she'll share her "everyday workflow." The event is free; you apply to attend. (confirmed)

Cursor#

• The runaway CLI session: staff confirm the cause. Follow-up to yesterday's item. Colin said the agent automations commands "aren't available on your account yet," so the CLI read agent automations list as a prompt and started a new agent with that task. Run inside another agent's terminal, each new agent did the same. Fix: manage automations at cursor.com/automations, and in ~/.cursor/cli-config.json set approvalMode to allowlist if it says unrestricted. (confirmed, staff)
• Read-only API keys for spend reports. deanrie said a team admin can make a Team API key with the Read-only scope under Team Settings > API Keys. It reads spend, usage and billing-group data but "can't change members, manage keys, touch model access, or change any settings." Note read:* also covers "the members list and audit logs." (confirmed, staff)
• Task tool workers get one reasoning level per model. Colin said the Task tool offers "whichever level (and Fast setting) is currently selected for that model in your model picker," so switching to Extra High swaps out High. Tracked. (confirmed, staff)
• Why Auto-review skips token-passing commands. Colin said Auto-review "blocks agent commands that read a token and pass it into another command, unless you clearly asked for that step." Approve the card, or run it in your own terminal. (confirmed, staff)
• Teams channel automations not firing. Colin said plain posts only reach Cursor when the app has permission to read that team's channel messages, which is granted inside Teams, so reconnecting on cursor.com "usually won't fix this." A team owner removes and re-adds the Cursor app and accepts the permission prompt. Thread replies only trigger with a "message contains" filter. (confirmed, staff)
• Linux AppImage self-update fixed. Colin said "This should be fixed for all users now." (confirmed, staff)
• macOS 27 update still stalls for some. deanrie repeated the fix for this known issue: allow Cursor under Login Items & Extensions, App Background Activity, clear the ShipIt cache, then Restart to Update, or download from cursor.com/download. (confirmed, staff; recurrence)