@sema-agent/server 7.87.0 → 7.87.2

package/dist/brain.js

@@ -2,6 +2,7 @@ import { adjudicateModelRoute, createAnthropicBrain, createCircuitBreakerBrain,
 import { normalizeBaseUrl } from "@sema-agent/core";
 import { buildDefaultResilience } from "./config-types.js";
 import { resolveModelApiKey } from "./key-resolver.js";
+import { catalogBrainLane } from "./model-provider.js";
 function isOffDeploymentRoot(baseUrl, config) {
     if (!baseUrl)
         return false;
@@ -74,8 +75,9 @@ export function createBrain(config, deps = {}) {
         if (fallbackModel) {
             const fbOwnApiKey = () => resolveModelApiKey(fallbackModel.name, config.modelApiKeyEnv ?? {}, process.env, config.modelApiKeys ?? {}) ??
                 resolveModelApiKey(degradeTo, config.modelApiKeyEnv ?? {}, process.env, config.modelApiKeys ?? {});
-            const anthropicLaneHop = fallbackModel.provider === "anthropic" && anthropicBrain !== undefined;
-            const fallback = fallbackModel.provider === "anthropic" && anthropicBrain
+            const fallbackLane = catalogBrainLane(fallbackModel.provider);
+            const anthropicLaneHop = fallbackLane === "anthropic" && anthropicBrain !== undefined;
+            const fallback = fallbackLane === "anthropic" && anthropicBrain
                 ?
                     anthropicBrain
                 : createOpenAIBrain({
@@ -141,7 +143,7 @@ export function brainSummary(config) {
             const target = config.degrade?.reactive ? config.models?.[config.degrade.to] : undefined;
             if (!target)
                 return { reactiveDegradeRoutePairing: null, reactiveDegradeRouteRefusal: null };
-            if (target.provider === "anthropic" && config.anthropic) {
+            if (catalogBrainLane(target.provider) === "anthropic" && config.anthropic) {
                 return { reactiveDegradeRoutePairing: "anthropic-lane", reactiveDegradeRouteRefusal: null };
             }
             const declaresOwnCredential = config.modelApiKeyEnv?.[target.name] !== undefined ||

package/dist/capabilities/approvals-push.d.ts

@@ -0,0 +1,47 @@
+/**
+ * S-455 —— `GET /v1/capabilities` 的 `approvalsStreamLive` 位:**本部署的审批推送面带不带 live 事件族**。
+ *
+ * ## 病
+ * S-454(7.87.0)给 `GET /v1/approvals/stream` 接上了**第二条 diff 源** —— `listLivePending`(与
+ * `GET /v1/approvals` 的 `livePending` 同一只读函数),事件另立两词 `live_pending` / `live_resolved`。
+ * 那条源的在场性挂在协调器上:`TOOL_APPROVAL_ENABLED=false` 的部署里 `ToolApprovalCoordinator` 根本不装配
+ * ⇒ 源整个缺席、流的字节与 S-454 之前逐字相同(能力缺席 = 零变化,不是空数组;见 `streamApprovals` 的
+ * `live` 参数注)。
+ *
+ * 于是消费端(client-core 的 approvalsFeed / 运营面板)**判不出自己连的是哪一种**:两形都是一条正常开着、
+ * 正常心跳的 SSE,差别只在「某一类卡永远不会从推面来」。用「等不到帧」去推断能力缺席不是判据 —— 那正是
+ * S-454 立案时那个病的形状(代理静默卡一小时、屏上零提示),只是换到了消费端这一侧。探位就是为了把
+ * 「这台机器会不会推 live 卡」从一次运气变成一次读。
+ *
+ * ## 形(与 `mcpReconnect` / `executionLane` 同族)
+ * 布尔,谓词 = **两项合取**,逐项对着那条腿自己的在场判据写:
+ *  ① **审批底座**(`checkpointStore`)—— `/v1/approvals/*` 与 `/v1/assistant/*` 整域的挂载条件
+ *     (`route-table.ts` 那一行的 `enabled`)。缺席 ⇒ 端点 404,**连流都不存在**;
+ *  ② **live 协调器**(`toolApproval`)—— 第二条 diff 源本人。缺席 ⇒ 端点在、但推面只有 durable park 行。
+ * 两项与路由/腿从**同一批 deps** 推导 ⇒「说 yes 但没有 live 帧」结构上不可能。
+ *
+ * 🔴 **刻意不合并进 `approvals` 或 `toolApproval`**:
+ *  · `approvals` 答的是「这条车道在不在」(它为真而本位为假的部署是**常态**:没开工具审批的那些);
+ *  · `toolApproval` 答的是「活体工具审批 HITL 在不在」,与「那条 SSE 推不推 live 行」不是一回事 ——
+ *    没有 checkpoint 底座的部署上它可以为真而**根本没有这条流**。
+ * 任一位单读都会对一半部署说谎,所以本位是它们的合取、而不是其中之一的别名。
+ *
+ * ⚠️ **位为真只保证这条源在场**,不保证这一次有任何悬挂 ask、也不保证跨副本可见:live 半场是**进程内
+ * 投影**(与 `GET /v1/approvals` 的 `livePending` 逐字同限,非本件引入),durable park 行那一半才是
+ * 跨副本的。消费端据此渲「本机会推 live 卡」,不据此推断「别的副本上的卡也会到我这儿」。
+ */
+import type { ToolApprovalCoordinator } from "../tool-approval.js";
+/**
+ * 部署席 → 消费端窄投影。形照 `projectExecutionLaneCapability`:**只 import 型**,不碰 config.ts / server.ts,
+ * 于是本模块是叶。
+ *
+ * 🔴 `toolApproval` 的形是 `Pick<…, "listLivePending">` 而不是 `unknown`:本位声明的是**那一只读函数**
+ * 在场,而路由层递给 `streamApprovals` 的 `live` 参数是同一个 `Pick` —— 协调器哪天把这只函数改名,
+ * 本文件与那条腿**一起**编译红,不会出现「位还说 true、腿已经没源了」。
+ */
+export declare function projectApprovalsStreamLiveCapability(deps: {
+    /** 审批底座(`/v1/approvals/*` 整域的挂载条件);形取 `unknown` —— 本位只问在场性,不碰店面。 */
+    readonly checkpointStore?: unknown;
+    readonly toolApproval?: Pick<ToolApprovalCoordinator, "listLivePending"> | undefined;
+}): boolean;
+//# sourceMappingURL=approvals-push.d.ts.map

package/dist/capabilities/approvals-push.js

@@ -0,0 +1,4 @@
+export function projectApprovalsStreamLiveCapability(deps) {
+    return deps.checkpointStore !== undefined && deps.toolApproval !== undefined;
+}
+//# sourceMappingURL=approvals-push.js.map

package/dist/config-catalog.js

@@ -4,6 +4,7 @@ import { RESILIENCE_DEFAULTS } from "./config-types.js";
 import { webSearchConfigFromEnv, WEB_SEARCH_PROVIDERS } from "./plugins/web-search.js";
 import { REMOTE_EXEC_PROVIDER_WORDS } from "./execution-lane-caps.js";
 import { CENTER_READ_FACE_LIVE_KEYS } from "./config-center/read-face.js";
+import { MODEL_PROVIDER_WORDS } from "./model-provider.js";
 export const CATALOG_VALUE_TYPES = ["boolean", "number", "string", "enum", "csv", "json", "path", "url", "secret", "opaque"];
 export const CATALOG_TIMINGS = ["hot", "restart", "deploy", "inert"];
 export const CATALOG_DANGER_AXES = ["security", "billing", "data"];
@@ -286,7 +287,7 @@ export const CONFIG_CATALOG = [
     r("MODEL_IDLE_TIMEOUT_MS", "modelPlane", "number", "流中静默看门狗(ms;0=关)", { staticDefault: String(RESILIENCE_DEFAULTS.idleTimeoutMs.value) }),
     r("MODEL_MAX_TOKENS", "modelPlane", "number", "主模型输出上限", { derivedDefaultNote: "缺席 ⇒ min(32000, contextWindow)", resolve: (c) => c.model.maxTokens ?? null, center: cModels("models[].maxTokens") }),
     r("MODEL_PRESENCE_PENALTY", "modelPlane", "number", "presence_penalty 直通"),
-    r("MODEL_PROVIDER", "modelPlane", "string", "主模型 provider(路由选 brain)", { derivedDefaultNote: "缺席:ANTHROPIC base+cred 同在 ⇒ anthropic,否则 gateway", resolve: (c) => c.model.provider, center: cModels("models[].provider") }),
+    r("MODEL_PROVIDER", "modelPlane", "enum", "主模型 provider(路由选 brain;S-461 起是闭集,词表外的值启动期拒启并点名机读码 `config.model_provider_invalid`)", { enumValues: MODEL_PROVIDER_WORDS, derivedDefaultNote: "缺席:ANTHROPIC base+cred 同在 ⇒ anthropic,否则 gateway", resolve: (c) => c.model.provider, center: cModels("models[].provider") }),
     r("MODEL_REASONING", "modelPlane", "boolean", "主模型 reasoning 声明", { staticDefault: "true", resolve: (c) => c.model.reasoning ?? null, center: cModels("models[].reasoning") }),
     r("MODEL_REASONING_EFFORT_LEVELS", "modelPlane", "csv", "openai 端点接受的思考档集(六档子集;高档 clamp-down 不 422;anthropic 腿不铸此键;未知词拒启)", {
         derivedDefaultNote: "缺席 ⇒ 不铸 compat,core 走保守梯(minimal|low|medium|high),xhigh/max 被 clamp 下来",

package/dist/config-invariants.d.ts

@@ -28,9 +28,9 @@ import type { ServiceConfigFlat } from "./config-types.js";
  */
 export declare const LIVENESS_HEARTBEAT_MS = 30000;
 /** 闭集:新增一条不变量必须在这里加词(拼错 = 编译红,而不是运行期悄悄不判)。 */
-export type CrossInvariantId = "run-stale-heartbeat" | "bind-posture" | "bake-runner-credential" | "direct-door-anchors" | "operator-principals-required" | "bake-operator-principals" | "sensitive-write-patterns" | "leader-host-lane" | "leader-durable-store" | "device-durable-store" | "device-durable-approval";
+export type CrossInvariantId = "run-stale-heartbeat" | "bind-posture" | "bake-runner-credential" | "direct-door-anchors" | "operator-principals-required" | "bake-operator-principals" | "sensitive-write-patterns" | "leader-host-lane" | "leader-durable-store" | "device-durable-store" | "device-durable-approval" | "model-provider-word";
 /** 表读的键集(取自平铺配置型 ⇒ 键名/类型永不与真配置漂)。 */
-export type CrossInvariantView = Readonly<Pick<ServiceConfigFlat, "runStaleSec" | "authToken" | "authTokens" | "allowUnauthedWrites" | "imageBakes" | "directApprovalDoor" | "durableApproval" | "approvalHmacKeys" | "principalJwtPubkeys" | "principalJwtIss" | "principalJwtAud" | "requirePrincipal" | "operatorPrincipals" | "sensitiveWritePatterns" | "leaderEnabled" | "remoteExec" | "dbBackend" | "tidb" | "pg">>;
+export type CrossInvariantView = Readonly<Pick<ServiceConfigFlat, "runStaleSec" | "authToken" | "authTokens" | "allowUnauthedWrites" | "imageBakes" | "directApprovalDoor" | "durableApproval" | "approvalHmacKeys" | "principalJwtPubkeys" | "principalJwtIss" | "principalJwtAud" | "requirePrincipal" | "operatorPrincipals" | "sensitiveWritePatterns" | "leaderEnabled" | "remoteExec" | "dbBackend" | "tidb" | "pg" | "envModel">>;
 export interface CrossInvariantInput {
     /** 现役配置(boot 期 = 候选自身)。 */
     readonly live: CrossInvariantView;

package/dist/config-invariants.js

@@ -1,4 +1,5 @@
 import { assertGuardPatternsUsable } from "./deployment-governance.js";
+import { modelProviderRefusal } from "./model-provider.js";
 export const LIVENESS_HEARTBEAT_MS = 30_000;
 const anyServiceAuth = (v) => Boolean(v.authToken) || Object.keys(v.authTokens ?? {}).length > 0;
 const mustNarrowBind = (v) => Boolean(v.allowUnauthedWrites) && !anyServiceAuth(v);
@@ -129,6 +130,13 @@ export const CONFIG_CROSS_INVARIANTS = [
             ? "REMOTE_EXEC=device without DURABLE_APPROVAL=true has no park exit for an approval that outlives the device's offline window"
             : undefined,
     },
+    {
+        id: "model-provider-word",
+        keys: ["envModel"],
+        restartReason: "model-provider",
+        bootAnchor: { file: "src/config.ts", marker: "CROSS-INVARIANT:model-provider-word" },
+        check: ({ next }) => (next.envModel.provider === undefined ? undefined : modelProviderRefusal(next.envModel.provider)),
+    },
 ];
 export function crossInvariant(id) {
     const inv = CONFIG_CROSS_INVARIANTS.find((i) => i.id === id);

package/dist/config.js

@@ -17,6 +17,7 @@ import { readFaceForPosture } from "./read-face-posture.js";
 import { THINKING_LEVELS, THINKING_FORMATS, buildModelCompat, isThinkingFormat, isThinkingTier } from "./model-compat.js";
 import {} from "./posture-source.js";
 import { CONTROL_AND_BIDI_STRIP_RE } from "./text-bidi.js";
+import { modelProviderRefusal } from "./model-provider.js";
 export { RETENTION_MODES, MEMORY_CONSOLIDATION_MIN_INTERVAL_SEC } from "./config-types.js";
 function csv(name) {
     return (process.env[name] ?? "")
@@ -776,6 +777,12 @@ function parseModelDomain() {
             "that made every external deployment fail far from the cause (gateway 400)");
     }
     const explicitProvider = process.env.MODEL_PROVIDER;
+    if (explicitProvider !== undefined && explicitProvider !== "") {
+        const refusal = modelProviderRefusal(explicitProvider);
+        if (refusal !== undefined) {
+            throw new Error(refusal);
+        }
+    }
     const inferredAnthropicBaseUrl = firstSetEnv("ANTHROPIC_BASE_URL");
     const inferredAnthropicCred = firstSetEnv("ANTHROPIC_API_KEY", "ANTHROPIC_AUTH_TOKEN");
     const provider = (() => {

package/dist/fleet/fleet-bus.d.ts

@@ -74,7 +74,6 @@ export interface FleetTaskRow {
     startedAt?: number;
     elapsedMs?: number;
     tokens?: number;
-    queuedCount?: number;
     awaitingPlanApproval?: boolean;
     /** core 1.262.0: the child's most recent tool intent as one
      *  human line ("Bash npm test") — from the bg sink tick's `currentAction` (core's only attachment point

package/dist/http/routes/capabilities.js

@@ -14,6 +14,7 @@ import { projectWriteProtectionCapability } from "../../write-protection.js";
 import { projectSqlEngineCapability } from "../../sql-engine-posture.js";
 import { projectWebSearchCapability } from "../../plugins/web-search.js";
 import { projectExecutionLaneCapability } from "../../capabilities/execution-lane.js";
+import { projectApprovalsStreamLiveCapability } from "../../capabilities/approvals-push.js";
 import { workflowModelAllowlistFor, selfOrchestrationDenial } from "../../task-workflow.js";
 import { centerEntitlementSourceWired } from "../../runtime-caps-resolver.js";
 import { judgeAutoModeArming } from "../../auto-mode-face.js";
@@ -138,6 +139,7 @@ export async function handleCapabilities(req, res, match, ctx) {
                 mcpElicitation: Boolean(deps.elicitation),
                 askUserQuestion: Boolean(deps.question),
                 toolApproval: Boolean(deps.toolApproval),
+                approvalsStreamLive: projectApprovalsStreamLiveCapability(deps),
                 streamApproval: resolveStreamApprovalGate({
                     toolApprovalEnabled: Boolean(deps.toolApproval),
                     streamApprovalEnabled: deps.config.streamApproval?.enabled === true,

package/dist/http/routes/fleet.js

@@ -40,7 +40,7 @@ function streamFleet(req, res, bus, callerScope, callerSession = null, completio
         const visW = (r) => (callerScope === null || r.scope === callerScope) && sessionOk(r.sessionId);
         const SCOPED_TASK_KEY_DISPOSITION = {
             id: "keep", parentId: "keep", parentToolCallId: "keep", workflowRunId: "keep", status: "keep",
-            startedAt: "keep", elapsedMs: "keep", tokens: "keep", queuedCount: "keep",
+            startedAt: "keep", elapsedMs: "keep", tokens: "keep",
             awaitingPlanApproval: "keep", toolUses: "keep", usage: "keep", resumable: "keep", sourceLane: "keep",
             cycleSeq: "keep", retiredBy: "keep",
             name: "rewrite", scope: "strip", sessionId: "strip",
@@ -61,7 +61,6 @@ function streamFleet(req, res, bus, callerScope, callerSession = null, completio
                     ...(rest.startedAt !== undefined ? { startedAt: rest.startedAt } : {}),
                     ...(rest.elapsedMs !== undefined ? { elapsedMs: rest.elapsedMs } : {}),
                     ...(rest.tokens !== undefined ? { tokens: rest.tokens } : {}),
-                    ...(rest.queuedCount !== undefined ? { queuedCount: rest.queuedCount } : {}),
                     ...(rest.awaitingPlanApproval !== undefined ? { awaitingPlanApproval: rest.awaitingPlanApproval } : {}),
                     ...(rest.toolUses !== undefined ? { toolUses: rest.toolUses } : {}),
                     ...(rest.usage !== undefined ? { usage: rest.usage } : {}),

package/dist/model-provider.d.ts

@@ -0,0 +1,77 @@
+/**
+ * S-461 —— **模型 provider 词表的唯一属主**(闭集 + 路由腿的穷举判词 + 域外拒因)。
+ *
+ * ## 病
+ * `MODEL_PROVIDER` 此前收**任意字符串**(`config.ts` 里就是一句 `process.env.MODEL_PROVIDER`),而消费它的
+ * 只有一处「非 anthropic 即 gateway」的二分。于是最自然的误填 —— 把**厂商名**写成 provider,
+ * `MODEL_PROVIDER=deepseek` —— 起得来、静默走网关栈(实测改前读数:`model.provider="deepseek"`、
+ * `api="openai-completions"`)。运维以为自己点了一条专用路线,拿到的是默认腿,而读数上没有任何异常。
+ * 这与 [ref] 件⑤ / S-188 的三根模型线路旋钮是**同一条族律**([ref] A 档:坏值拒启,不静默折默认)。
+ *
+ * ## 词源:取不到型,就取那句自述 + 一格钉
+ * 词表的上游属主是 `@sema-agent/settings-schema` 的 `ModelEntry.provider`。它的 zod 形是
+ * `z.string().min(1).default("gateway")` —— **没有可取的型**(与 `RemoteExecProvider` / `WebSearchProvider`
+ * 那两张能取型的表不同),但它的 JSDoc 逐字写着三词与各自的腿:
+ *   > Routes the brain in the service (createRoutingBrain by provider): "gateway"/"vllm" → OpenAI brain,
+ *   > "anthropic" → Anthropic brain.
+ * 于是本仓建闭集常量,并由 `test/config-coverage-model-plane.test.ts` 的 S-461 ④ 格**钉住它与那句自述同集**
+ * (读的是装载的那份 dist,不手抄第二份词表)。上游哪天把词表写进 zod enum,那一格会告诉我们该改成取型。
+ *
+ * ## 三条腿各自的边界(刻意分开写)
+ *  · {@link isModelProvider} / {@link modelProviderRefusal} —— **env 面**的闭集判据与拒因。它管的是
+ *    `MODEL_PROVIDER`(以及缺省推断产出的那个词),执法点在 `config.ts` 的模型面装配 + `config-invariants.ts`
+ *    的 `model-provider-word` 条(热路径同判,不是第二份判据);
+ *  · {@link modelBrainLane} —— **穷举 switch**([ref]:词表是闭集,加一词不补臂 = 编译红);
+ *  · {@link catalogBrainLane} —— **目录词**那一侧。见它自己的头注:目录条目的 provider **不过** boot 闸,
+ *    所以那里必须有一条「认不出」的臂,而那条臂是**既有语义的书面化**,不是本批新开的兜底。
+ */
+/**
+ * `MODEL_PROVIDER` 的闭集。**声明序 = 语义序**:两条 OpenAI 兼容腿在前,Anthropic 腿在后
+ * (与上游那句自述的行文同序,方便逐字对读)。
+ */
+export declare const MODEL_PROVIDER_WORDS: readonly ["gateway", "vllm", "anthropic"];
+/** 闭集成员型。加一词 ⇒ {@link modelBrainLane} 的穷举 switch 当场编译红。 */
+export type ModelProvider = (typeof MODEL_PROVIDER_WORDS)[number];
+/** 这个词在闭集里吗(`undefined` / 空串一律 false —— 「未设」不是一个 provider,由调用点自己折缺省)。 */
+export declare function isModelProvider(word: string | undefined): word is ModelProvider;
+/**
+ * 域外值的**拒因**(`undefined` = 这个词合法)。
+ *
+ * 🔴 **机读码 `config.model_provider_invalid` 逐字在句子里**(clay 令 2026-09-18):拒启原话是运维与壳
+ * 唯一拿得到的东西,一句纯散文只能靠人读。码的拼法随 `config.<键名蛇形>_invalid` 既有族
+ * (`config.retention_policy_invalid` / `config.execution_env_home_dir_invalid` / `config.placement_root_invalid`),
+ * 方括号形与本仓既有那一处(`plugins/remote-env-device.ts`)逐字同形。**出现位置**:boot 期 `loadConfig()`
+ * 抛出的 Error.message ⇒ 进程以非零退出,这句话落在 **stderr 首屏**(未捕获异常的栈首行)。
+ *
+ * 拒因三件齐:**码** + **违例值**(照原样带引号,前后空格/大小写一眼可见) + **闭集三词**。
+ */
+export declare function modelProviderRefusal(word: string): string | undefined;
+/** 一只 provider 词走哪条 brain 腿。闭集 ⇒ 两个值,没有第三种。 */
+export type ModelBrainLane = "anthropic" | "gateway";
+/**
+ * **穷举判词**([ref]:词表是闭集,加一词而不补臂是 COMPILE 错,不是运行期漏判)。
+ *
+ * `"vllm"` 与 `"gateway"` 同腿**不是**兜底,是上游那句自述的逐字转写(两者都是 OpenAI 兼容端点,
+ * 差别在部署形而不在协议);它们哪天要分家,分的是这张表,而不是某个调用点的 `if`。
+ */
+export declare function modelBrainLane(provider: ModelProvider): ModelBrainLane;
+/**
+ * **目录条目**(`config.models[*].provider`)那一侧的判词。
+ *
+ * 🔴 为什么它与 {@link modelBrainLane} 不是同一只函数:两者的**输入保证不同**。
+ *  · `MODEL_PROVIDER` 走 boot 闸(域外拒启)⇒ 到达 {@link modelBrainLane} 的恒是闭集词;
+ *  · **目录条目**来自 settings-schema 的 `z.string()`,可以从 config-center **热应用**进来 —— 那条路上
+ *    没有、也不该有「拒启」这回事(一次热发布不能让在跑的副本死),所以这里必然存在一条「认不出」的臂。
+ *
+ * 🔴 那条臂**就是今天的语义,本批一个字节都没改**([ref]「不可避免的运行期 miss 臂必须说出来」):
+ * core 的 `createRoutingBrain({anthropic}, {fallback: gatewayStack})` 本身就把一切非 `anthropic` 的词
+ * 路由到网关栈(`brain.ts` 顶注那句 "everything else → the local gateway stack (also the fallback for an
+ * unrecognized provider)" 是它的原话)。本函数做的只是把那句散文变成**一个有名字的判词**,于是
+ * 「目录里写了个没人认识的 provider」这件事在代码里有一处可指的坐标,而不是散在两个 `=== "anthropic"` 里。
+ *
+ * ⚠️ **未闭环**(S-461 收车档登记):目录词今天仍然**无声**地落进网关腿。要让它也响亮,需要的是一条
+ * **热路径上的**告警/拒收(config-center 应用期逐条校验 + 运维可读的拒因),那是另一件事、另一台车 ——
+ * 在这里加一个 throw 会让一次热发布打死在跑的副本,方向反了。
+ */
+export declare function catalogBrainLane(provider: string | undefined): ModelBrainLane;
+//# sourceMappingURL=model-provider.d.ts.map

package/dist/model-provider.js

@@ -0,0 +1,26 @@
+export const MODEL_PROVIDER_WORDS = ["gateway", "vllm", "anthropic"];
+export function isModelProvider(word) {
+    return word !== undefined && MODEL_PROVIDER_WORDS.includes(word);
+}
+export function modelProviderRefusal(word) {
+    if (isModelProvider(word))
+        return undefined;
+    return (`env MODEL_PROVIDER="${word}" is not a known model provider [config.model_provider_invalid] — ` +
+        `valid: ${MODEL_PROVIDER_WORDS.join(" | ")}. ` +
+        "An unknown word used to start FINE and silently route to the gateway stack (a vendor name like " +
+        '"deepseek" in this slot is the natural mis-fill), so the operator got the default leg while believing ' +
+        "they had pinned a dedicated one — nothing in the readings showed it (#210 A 档:坏值拒启,不静默折默认).");
+}
+export function modelBrainLane(provider) {
+    switch (provider) {
+        case "anthropic":
+            return "anthropic";
+        case "gateway":
+        case "vllm":
+            return "gateway";
+    }
+}
+export function catalogBrainLane(provider) {
+    return isModelProvider(provider) ? modelBrainLane(provider) : "gateway";
+}
+//# sourceMappingURL=model-provider.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.87.0",
+  "version": "7.87.2",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -54,7 +54,7 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "7.23.0",
+    "@sema-agent/core": "7.23.1",
     "@sema-agent/settings-schema": "2.1.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",