@volter/twin-xai 0.1.0 → 0.1.1

package/dist/src/xai-device-auth-ui.js

@@ -1,6 +1,7 @@
 // Server half of xAI's Grok Build device-authorization UI. This is protocol UI, not an
 // invented dashboard: it is served on the OAuth paths and coupled directly to the pending
 // device authorization projected from the Twin kernel.
+import { worldNow } from '@volter/world-core';
 import { createElement } from 'react';
 import { renderToStaticMarkup } from 'react-dom/server';
 import { DeviceConsentPage, DeviceDonePage, DeviceEntryPage, XAI_DEVICE_PERMISSIONS, } from "../client/xai-device-auth.js";
@@ -33,7 +34,7 @@ export function xaiDeviceAuthView(userCode, root, error, nowAt) {
     const normalized = userCode.trim().toUpperCase().replace(/[^A-Z0-9-]/gu, '');
     const state = inspectXaiTwinDeviceAuthorization(normalized, root);
     let status = typeof state?.status === 'string' ? state.status : 'unknown';
-    if (state?.expiresAt && Date.parse(String(state.expiresAt)) <= Date.parse(nowAt ?? new Date().toISOString()) && status === 'pending')
+    if (state?.expiresAt && Date.parse(String(state.expiresAt)) <= Date.parse(nowAt ?? worldNow()) && status === 'pending')
         status = 'expired';
     const supported = new Set(['pending', 'approved', 'denied', 'connected', 'expired', 'unknown']);
     const scopes = new Set(String(state?.scope ?? '').split(/\s+/u).filter(Boolean));

package/dist/src/xai-oauth.js

@@ -1,11 +1,11 @@
-import { applyTwinWrite, applyTwinWriteAtomic, projectResources } from '@volter/world-core';
+import { applyTwinWrite, applyTwinWriteAtomic, projectResources, worldNow } from '@volter/world-core';
 const SERVICE = 'xai';
 const ACCOUNT_ID = 'acct_twin_grok';
 const DEFAULT_SCOPE = 'openid profile email offline_access grok-cli:access api:access conversations:read conversations:write workspaces:read workspaces:write';
 const ACCESS_TTL_SECONDS = 3_600;
 const DEVICE_TTL_SECONDS = 900;
 function at(occurredAt) {
-    return new Date(occurredAt ?? new Date().toISOString());
+    return new Date(occurredAt ?? worldNow());
 }
 /** FNV-1a over the seed, widened by re-hashing with a round counter until `n` hex chars exist. */
 function stableHex(seed, n) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/twin-xai",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Local xAI (Grok) twin — a faithful, stateful local API plus the Grok Build device-OAuth browser surface. The model is stubbed (deterministic) and Live Search citations are labeled stubs, while the OAuth/account/usage world and API protocol envelopes remain coherent and vendor-shaped. Built on @volter/world-core.",
   "keywords": [
     "twin",
@@ -56,10 +56,10 @@
     "react-dom": "^19.2.7"
   },
   "peerDependencies": {
-    "@volter/world-core": "2.0.0"
+    "@volter/world-core": "2.0.1"
   },
   "devDependencies": {
-    "@volter/world-core": "2.0.0",
+    "@volter/world-core": "2.0.1",
     "@volter/world-tooling": "0.1.0",
     "@ai-sdk/xai": "^3.0.111",
     "ai": "^6.0.0",

package/src/xai-device-auth-ui.ts

@@ -1,6 +1,7 @@
 // Server half of xAI's Grok Build device-authorization UI. This is protocol UI, not an
 // invented dashboard: it is served on the OAuth paths and coupled directly to the pending
 // device authorization projected from the Twin kernel.
+import { worldNow } from '@volter/world-core';
 import { createElement } from 'react';
 import { renderToStaticMarkup } from 'react-dom/server';
 import {
@@ -46,7 +47,7 @@ export function xaiDeviceAuthView(userCode: string, root?: string, error?: strin
   const normalized = userCode.trim().toUpperCase().replace(/[^A-Z0-9-]/gu, '');
   const state = inspectXaiTwinDeviceAuthorization(normalized, root);
   let status = typeof state?.status === 'string' ? state.status : 'unknown';
-  if (state?.expiresAt && Date.parse(String(state.expiresAt)) <= Date.parse(nowAt ?? new Date().toISOString()) && status === 'pending') status = 'expired';
+  if (state?.expiresAt && Date.parse(String(state.expiresAt)) <= Date.parse(nowAt ?? worldNow()) && status === 'pending') status = 'expired';
   const supported = new Set<XaiDeviceAuthView['status']>(['pending', 'approved', 'denied', 'connected', 'expired', 'unknown']);
   const scopes = new Set(String(state?.scope ?? '').split(/\s+/u).filter(Boolean));
   const permissions = XAI_DEVICE_PERMISSIONS.filter((_, index) => [

package/src/xai-oauth.ts

@@ -1,4 +1,4 @@
-import { applyTwinWrite, applyTwinWriteAtomic, projectResources, type TwinResource } from '@volter/world-core';
+import { applyTwinWrite, applyTwinWriteAtomic, projectResources, type TwinResource, worldNow } from '@volter/world-core';
 
 const SERVICE = 'xai';
 const ACCOUNT_ID = 'acct_twin_grok';
@@ -9,7 +9,7 @@ const DEVICE_TTL_SECONDS = 900;
 export type XaiOauthResult = { status: number; body: Record<string, unknown> };
 
 function at(occurredAt?: string): Date {
-  return new Date(occurredAt ?? new Date().toISOString());
+  return new Date(occurredAt ?? worldNow());
 }
 
 /** FNV-1a over the seed, widened by re-hashing with a round counter until `n` hex chars exist. */