@nexus-cortex/core 4.51.0 → 4.52.0

package/dist/middleware/permissions/WhitelistPolicy.js

@@ -14,10 +14,10 @@ import { BasePermissionPolicy, PolicyPriority } from './PermissionPolicy.js';
  *
  * @example
  * ```typescript
- * const policy = new WhitelistPolicy(['read_file', 'write_file', 'execute_bash']);
+ * const policy = new WhitelistPolicy(['Read', 'Write', 'Bash']);
  *
  * await policy.evaluate({
- *   toolName: 'read_file',
+ *   toolName: 'Read',
  *   toolInput: {},
  *   sessionId: '123',
  *   timestamp: new Date()

package/dist/middleware/permissions/WorkspaceBoundaryPolicy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"WorkspaceBoundaryPolicy.d.ts","sourceRoot":"","sources":["../../../src/middleware/permissions/WorkspaceBoundaryPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AA2B7D,qBAAa,uBAAwB,SAAQ,oBAAoB;IAC/D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC;;;OAGG;gBACS,YAAY,EAAE,MAAM,EAAE,EAAE,QAAQ,GAAE,MAA0B,EAAE,OAAO,GAAE,OAAc;IAK3F,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAsBvE,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,cAAc;CAUvB"}
+{"version":3,"file":"WorkspaceBoundaryPolicy.d.ts","sourceRoot":"","sources":["../../../src/middleware/permissions/WorkspaceBoundaryPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AA0B7D,qBAAa,uBAAwB,SAAQ,oBAAoB;IAC/D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC;;;OAGG;gBACS,YAAY,EAAE,MAAM,EAAE,EAAE,QAAQ,GAAE,MAA0B,EAAE,OAAO,GAAE,OAAc;IAK3F,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAsBvE,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,cAAc;CAUvB"}

package/dist/middleware/permissions/WorkspaceBoundaryPolicy.js

@@ -31,14 +31,13 @@ const PATH_FIELD_BY_TOOL = {
     Read: ['file_path', 'path'],
     Write: ['file_path', 'path'],
     Edit: ['file_path', 'path'],
-    MultiEdit: ['file_path', 'path'],
+    NotebookEdit: ['notebook_path', 'file_path', 'path'],
     WriteBinary: ['file_path', 'path'],
     Glob: ['path'],
     Grep: ['path'],
-    // Shell/Bash: only the explicit working-directory param is gated here. The
+    // Bash: only the explicit working-directory param is gated here. The
     // command string itself is the BashCommandPolicy's concern, not this one.
     Bash: ['directory'],
-    Shell: ['directory'],
 };
 export class WorkspaceBoundaryPolicy extends BasePermissionPolicy {
     roots;

package/dist/middleware/permissions/WorkspaceBoundaryPolicy.js.map

@@ -1 +1 @@
-{"version":3,"file":"WorkspaceBoundaryPolicy.js","sourceRoot":"","sources":["../../../src/middleware/permissions/WorkspaceBoundaryPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAKlC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D;;;;;;;GAOG;AACH,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,wEAAwE;AACxE,MAAM,kBAAkB,GAA6B;IACnD,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC;IAC5B,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC;IAChC,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,2EAA2E;IAC3E,0EAA0E;IAC1E,IAAI,EAAE,CAAC,WAAW,CAAC;IACnB,KAAK,EAAE,CAAC,WAAW,CAAC;CACrB,CAAC;AAEF,MAAM,OAAO,uBAAwB,SAAQ,oBAAoB;IAC9C,KAAK,CAAW;IAEjC;;;OAGG;IACH,YAAY,YAAsB,EAAE,WAAmB,iBAAiB,EAAE,UAAmB,IAAI;QAC/F,KAAK,CAAC,oBAAoB,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAA0B;QACvC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QAEjD,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QAEjC,MAAM,KAAK,GAAQ,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAElD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAE1D,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAC1F,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAChG,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAEO,aAAa,CAAC,QAAgB;QACpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC7E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,cAAc,CAAC,QAAgB,EAAE,SAAiB,EAAE,QAAgB;QAC1E,OAAO,CACL,yBAAyB,SAAS,gBAAgB,QAAQ,2BAA2B;YACrF,cAAc,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,+DAA+D;YAC1F,2FAA2F;YAC3F,6FAA6F;YAC7F,OAAO,QAAQ,6EAA6E;YAC5F,mGAAmG,CACpG,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"WorkspaceBoundaryPolicy.js","sourceRoot":"","sources":["../../../src/middleware/permissions/WorkspaceBoundaryPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAKlC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D;;;;;;;GAOG;AACH,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,wEAAwE;AACxE,MAAM,kBAAkB,GAA6B;IACnD,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC;IAC5B,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,CAAC,eAAe,EAAE,WAAW,EAAE,MAAM,CAAC;IACpD,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,qEAAqE;IACrE,0EAA0E;IAC1E,IAAI,EAAE,CAAC,WAAW,CAAC;CACpB,CAAC;AAEF,MAAM,OAAO,uBAAwB,SAAQ,oBAAoB;IAC9C,KAAK,CAAW;IAEjC;;;OAGG;IACH,YAAY,YAAsB,EAAE,WAAmB,iBAAiB,EAAE,UAAmB,IAAI;QAC/F,KAAK,CAAC,oBAAoB,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAA0B;QACvC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QAEjD,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QAEjC,MAAM,KAAK,GAAQ,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAElD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAE1D,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAC1F,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAChG,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAEO,aAAa,CAAC,QAAgB;QACpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC7E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,cAAc,CAAC,QAAgB,EAAE,SAAiB,EAAE,QAAgB;QAC1E,OAAO,CACL,yBAAyB,SAAS,gBAAgB,QAAQ,2BAA2B;YACrF,cAAc,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,+DAA+D;YAC1F,2FAA2F;YAC3F,6FAA6F;YAC7F,OAAO,QAAQ,6EAA6E;YAC5F,mGAAmG,CACpG,CAAC;IACJ,CAAC;CACF"}

package/dist/models/ModelConfig.interface.js

@@ -77,7 +77,7 @@ export const EXAMPLE_MODEL_CONFIGS = {
         tools: {
             supported: true,
             adapter: 'ChatCompletionsAPIAdapter',
-            namingConvention: 'PascalCase',
+            namingConvention: 'snake_case',
             maxTools: 128,
             parallelToolCalls: true,
             supportsToolChoice: true,

package/dist/orchestrator/APIClient.d.ts

@@ -18,6 +18,16 @@ export interface APIResponse {
     status: number;
     /** Response headers */
     headers: Record<string, string>;
+    /**
+     * xAI server-advertised effective limits (grok-build parity, 2026-08-01):
+     * parsed from x-grok-context-window / x-grok-max-completion-tokens response
+     * headers on the xAI Messages path. Optional and additive — informational
+     * for budget consumers; nothing in the pipeline requires it.
+     */
+    xaiServerLimits?: {
+        contextWindow?: number;
+        maxCompletionTokens?: number;
+    };
 }
 /**
  * Stream chunk for real-time UI updates

package/dist/orchestrator/APIClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"APIClient.d.ts","sourceRoot":"","sources":["../../src/orchestrator/APIClient.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,uBAAuB,CAAC;AAO/B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAqB5D;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,wCAAwC;IACxC,IAAI,EAAE,GAAG,CAAC;IAEV,uBAAuB;IACvB,MAAM,EAAE,MAAM,CAAC;IAEf,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B,iBAAiB;IACjB,IAAI,EAAE,YAAY,GAAG,qBAAqB,GAAG,qBAAqB,GAAG,oBAAoB,GAAG,eAAe,GAAG,eAAe,GAAG,cAAc,GAAG,mBAAmB,GAAG,aAAa,GAAG,gBAAgB,GAAG,OAAO,GAAG,cAAc,CAAC;IAEnO,qCAAqC;IACrC,IAAI,CAAC,EAAE,GAAG,CAAC;IAEX,mCAAmC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,sCAAsC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,wDAAwD;IACxD,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAE3B,+CAA+C;IAC/C,UAAU,CAAC,EAAE;QACX,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,QAAQ,CAAC,EAAE,GAAG,CAAC;KAChB,CAAC;IAEF,2CAA2C;IAC3C,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,2CAA2C;IAC3C,MAAM,EAAE,cAAc,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAEnD,yDAAyD;IACzD,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;CAC5B;AAED;;;;GAIG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,eAAe,CAAC,CAAY;IACpC,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,YAAY,CAAC,CAAqB;IAC1C,OAAO,CAAC,iBAAiB,CAAC,CAAc;;IAMxC;;;;;;;;OAQG;IACH,OAAO,CAAC,0BAA0B;IA6BlC;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IA8B3B;;;;;;;;;;OAUG;IACG,WAAW,CAAC,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAiD3F;;;;;;;;;OASG;IACH,aAAa,CAAC,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW,GAAG,iBAAiB;IAqCpF;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IAqB7B;;;;;OAKG;YACW,eAAe;IAmB7B;;;;;;;OAOG;YACW,wBAAwB;IAoHtC;;;;;;;OAOG;IACH,OAAO,CAAC,yBAAyB;IAmCjC;;OAEG;YACW,kBAAkB;IAyHhC;;;;OAIG;IACH,OAAO,CAAC,6BAA6B;IAgDrC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,2BAA2B;IAkGnC;;;;OAIG;IACH,OAAO,CAAC,yBAAyB;IAqCjC;;;;;OAKG;YACW,sBAAsB;IAoBpC;;;;;;;;;OASG;YACW,cAAc;IAoE5B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,qCAAqC;IAuD7C;;;;;OAKG;YACW,gBAAgB;IAuJ9B;;;;;OAKG;YACW,sBAAsB;IAgDpC;;;OAGG;YACW,uBAAuB;IAgErC;;;;;;OAMG;YACW,sBAAsB;IA+CpC;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IA0pBzB;;;;;;OAMG;IACH,OAAO,CAAC,wBAAwB;IA2LhC;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IAiU1B;;;;;;OAMG;IACH,OAAO,CAAC,wBAAwB;IA6DhC;;;OAGG;IACH,OAAO,CAAC,yBAAyB;IAgPjC;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAyDxB;;;OAGG;YACW,aAAa;IA6E3B;;;;;;;;;OASG;IACH,OAAO,CAAC,eAAe;CA2SxB"}
+{"version":3,"file":"APIClient.d.ts","sourceRoot":"","sources":["../../src/orchestrator/APIClient.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,uBAAuB,CAAC;AAO/B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAqB5D;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,wCAAwC;IACxC,IAAI,EAAE,GAAG,CAAC;IAEV,uBAAuB;IACvB,MAAM,EAAE,MAAM,CAAC;IAEf,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEhC;;;;;OAKG;IACH,eAAe,CAAC,EAAE;QAChB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;CACH;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B,iBAAiB;IACjB,IAAI,EAAE,YAAY,GAAG,qBAAqB,GAAG,qBAAqB,GAAG,oBAAoB,GAAG,eAAe,GAAG,eAAe,GAAG,cAAc,GAAG,mBAAmB,GAAG,aAAa,GAAG,gBAAgB,GAAG,OAAO,GAAG,cAAc,CAAC;IAEnO,qCAAqC;IACrC,IAAI,CAAC,EAAE,GAAG,CAAC;IAEX,mCAAmC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,sCAAsC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,wDAAwD;IACxD,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAE3B,+CAA+C;IAC/C,UAAU,CAAC,EAAE;QACX,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,QAAQ,CAAC,EAAE,GAAG,CAAC;KAChB,CAAC;IAEF,2CAA2C;IAC3C,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,2CAA2C;IAC3C,MAAM,EAAE,cAAc,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAEnD,yDAAyD;IACzD,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;CAC5B;AAED;;;;GAIG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,eAAe,CAAC,CAAY;IACpC,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,YAAY,CAAC,CAAqB;IAC1C,OAAO,CAAC,iBAAiB,CAAC,CAAc;;IAMxC;;;;;;;;OAQG;IACH,OAAO,CAAC,0BAA0B;IA6BlC;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IA8B3B;;;;;;;;;;OAUG;IACG,WAAW,CAAC,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAiD3F;;;;;;;;;OASG;IACH,aAAa,CAAC,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW,GAAG,iBAAiB;IAqCpF;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IAqB7B;;;;;OAKG;YACW,eAAe;IAmB7B;;;;;;;OAOG;YACW,wBAAwB;IAoHtC;;;;;;;OAOG;IACH,OAAO,CAAC,yBAAyB;IAmCjC;;OAEG;YACW,kBAAkB;IA0JhC;;;;OAIG;IACH,OAAO,CAAC,6BAA6B;IAgDrC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,2BAA2B;IAkGnC;;;;OAIG;IACH,OAAO,CAAC,yBAAyB;IAqCjC;;;;;OAKG;YACW,sBAAsB;IAoBpC;;;;;;;;;OASG;YACW,cAAc;IAoE5B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,qCAAqC;IAuD7C;;;;;OAKG;YACW,gBAAgB;IA0K9B;;;;;OAKG;YACW,sBAAsB;IAgDpC;;;OAGG;YACW,uBAAuB;IAgErC;;;;;;OAMG;YACW,sBAAsB;IA+CpC;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAoqBzB;;;;;;OAMG;IACH,OAAO,CAAC,wBAAwB;IA2LhC;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IAgV1B;;;;;;OAMG;IACH,OAAO,CAAC,wBAAwB;IA6DhC;;;OAGG;IACH,OAAO,CAAC,yBAAyB;IAgPjC;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAyDxB;;;OAGG;YACW,aAAa;IA6E3B;;;;;;;;;OASG;IACH,OAAO,CAAC,eAAe;CA2SxB"}

package/dist/orchestrator/APIClient.js

@@ -481,6 +481,17 @@ export class APIClient {
         if (request.conversationId) {
             headers['x-grok-conv-id'] = request.conversationId;
         }
+        // grok-build parity (2026-08-01, operator-approved): per-request id for
+        // server-side tracing/dedup — mirrors grok-build's GrokRequestHeaders
+        // (x-grok-req-id alongside x-grok-conv-id). Additive; request content,
+        // thinking round-trip, and cache keying are untouched.
+        headers['x-grok-req-id'] = uuidv4();
+        // Opt-in server-side doom-loop detection (grok-build sampler parity).
+        // OFF by default; when XAI_DOOM_LOOP_CHECK=true the server may flag
+        // reasoning loops (e.g. tail_repetition triggers) which we surface below.
+        if (process.env.XAI_DOOM_LOOP_CHECK === 'true') {
+            headers['x-grok-doom-loop-check'] = 'true';
+        }
         const httpResponse = await fetch(modelConfig.api.endpoint, {
             method: 'POST',
             headers,
@@ -491,6 +502,25 @@ export class APIClient {
             throw new Error(`XAI Messages API error (${httpResponse.status}): ${errorText}`);
         }
         const data = await httpResponse.json();
+        // grok-build parity: xAI advertises the effective serving limits on
+        // response headers; parse and surface (informational, additive).
+        const xaiCtxHeader = httpResponse.headers.get('x-grok-context-window');
+        const xaiMaxOutHeader = httpResponse.headers.get('x-grok-max-completion-tokens');
+        const xaiServerLimits = (xaiCtxHeader || xaiMaxOutHeader)
+            ? {
+                ...(xaiCtxHeader && Number.isFinite(Number(xaiCtxHeader)) ? { contextWindow: Number(xaiCtxHeader) } : {}),
+                ...(xaiMaxOutHeader && Number.isFinite(Number(xaiMaxOutHeader)) ? { maxCompletionTokens: Number(xaiMaxOutHeader) } : {}),
+            }
+            : undefined;
+        if (xaiServerLimits && process.env.DEBUG === 'true') {
+            console.log(`[APIClient XAI] Server-advertised limits: ${JSON.stringify(xaiServerLimits)}`);
+        }
+        // Opt-in doom-loop detection surface: if the server flagged a reasoning
+        // loop on this terminal response, warn loudly. Pass-through only — the
+        // response content is not modified and normal parsing proceeds.
+        if (data?.doom_loop_check) {
+            console.warn(`[APIClient XAI] Server doom-loop check flagged: ${JSON.stringify(data.doom_loop_check).slice(0, 300)}`);
+        }
         // Post-process: extract <thinking> tags from text content into separate thinking blocks
         // grok-4-1-fast-reasoning embeds thinking in text as <thinking>...</thinking> tags
         if (data.content && Array.isArray(data.content)) {
@@ -499,7 +529,8 @@ export class APIClient {
         return {
             data,
             status: httpResponse.status,
-            headers: Object.fromEntries(httpResponse.headers.entries())
+            headers: Object.fromEntries(httpResponse.headers.entries()),
+            ...(xaiServerLimits && { xaiServerLimits })
         };
     }
     /**
@@ -894,6 +925,15 @@ export class APIClient {
             // Deferred until we can investigate: possibly needs to be paired with
             // different content-block wiring in ResponsesAPIAdapter, or only applied
             // when we've explicitly asked for reasoning via the `reasoning` param.
+            //
+            // 2026-08-01 root-cause analysis (grok-build comparison): that include is
+            // half of the STATELESS ZDR state model (store:false + full-input replay
+            // of the encrypted blobs, grok-build's default) and must never be mixed
+            // with the server-stored chaining we run here (store:true +
+            // previous_response_id + input slicing) — the regression above is the
+            // empirical proof. Full design + implementation recipe for a proper
+            // opt-in ZDR mode: "DESIGN NOTE — stateless ZDR mode" in
+            // ResponsesAPIAdapter.ts (adapters/).
         }
         // Set extracted system context as instructions (enables provider-side caching)
         // XAI does NOT support the `instructions` parameter — skip for XAI provider.
@@ -934,12 +974,22 @@ export class APIClient {
         // Bearer auth — standard Responses API transport auth.
         // OpenAI's own Responses API still uses the SDK (R20-proven, unaffected).
         if (isXAI) {
+            // grok-build parity (2026-08-02): x-grok-req-id (per-request trace/dedup)
+            // + opt-in doom-loop check on the Responses path too — the Messages path
+            // already carries these. conv-id sticky routing is handled on Responses
+            // via the `prompt_cache_key` body field (set above), so no conv-id header
+            // here. Additive; body / reasoning round-trip untouched.
+            const xaiRespHeaders = {
+                'Content-Type': 'application/json',
+                'Authorization': `Bearer ${apiKey}`,
+                'x-grok-req-id': uuidv4(),
+            };
+            if (process.env.XAI_DOOM_LOOP_CHECK === 'true') {
+                xaiRespHeaders['x-grok-doom-loop-check'] = 'true';
+            }
             const httpResponse = await fetch(modelConfig.api.endpoint, {
                 method: 'POST',
-                headers: {
-                    'Content-Type': 'application/json',
-                    'Authorization': `Bearer ${apiKey}`,
-                },
+                headers: xaiRespHeaders,
                 body: JSON.stringify(responsesRequest),
             });
             if (!httpResponse.ok) {
@@ -1482,6 +1532,16 @@ export class APIClient {
             if (request.conversationId) {
                 xaiDefaultHeaders['x-grok-conv-id'] = request.conversationId;
             }
+            // grok-build parity (2026-08-01, operator-approved): per-request id +
+            // opt-in server-side doom-loop detection header, mirroring the
+            // non-streaming path. Additive headers only — the SDK stream event
+            // handling below is untouched. NOTE: server doom_loop_check SSE events
+            // are NOT consumable on this path (the Anthropic SDK drops unknown
+            // event names); detection surfacing is non-streaming only for now.
+            xaiDefaultHeaders['x-grok-req-id'] = uuidv4();
+            if (process.env.XAI_DOOM_LOOP_CHECK === 'true') {
+                xaiDefaultHeaders['x-grok-doom-loop-check'] = 'true';
+            }
             const xaiClient = new Anthropic({
                 apiKey,
                 baseURL: modelConfig.api.endpoint.replace('/v1/messages', ''), // Strip path, keep base
@@ -1955,7 +2015,20 @@ export class APIClient {
             // Import OpenAI SDK dynamically — set baseURL from model config endpoint
             const OpenAI = (await import('openai')).default;
             const streamBaseURL = modelConfig.api.endpoint.replace(/\/(messages|responses)$/, '');
-            const client = new OpenAI({ apiKey, baseURL: streamBaseURL });
+            // grok-build parity (2026-08-02): x-grok-req-id + opt-in doom-loop check
+            // on the streaming Responses path (SDK carries them via defaultHeaders).
+            // conv-id sticky routing rides prompt_cache_key in the body (set above).
+            const xaiRespStreamHeaders = isXAI
+                ? {
+                    'x-grok-req-id': uuidv4(),
+                    ...(process.env.XAI_DOOM_LOOP_CHECK === 'true' ? { 'x-grok-doom-loop-check': 'true' } : {}),
+                }
+                : {};
+            const client = new OpenAI({
+                apiKey,
+                baseURL: streamBaseURL,
+                ...(Object.keys(xaiRespStreamHeaders).length > 0 && { defaultHeaders: xaiRespStreamHeaders }),
+            });
             // Create streaming request
             // Use modelConfig.modelId if available (for alias models like gpt-5.1-reasoning -> gpt-5.1)
             const actualModelId = modelConfig.modelId || request.modelId;
@@ -1975,6 +2048,8 @@ export class APIClient {
             // `prompt_cache_key` routes same-session requests to same server for cache hits.
             // NOTE: `include: ["reasoning.encrypted_content"]` triggered empty-output regression —
             // see sendResponsesAPI comment for details. Not sending it for now.
+            // It belongs to the stateless-ZDR state model, not to chaining: full
+            // recipe in "DESIGN NOTE — stateless ZDR mode" (ResponsesAPIAdapter.ts).
             if (isXAI) {
                 responsesRequest.store = true;
                 if (request.conversationId) {