@theokit/sdk 4.13.0 → 4.13.1

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 4.13.1
+
+### Patch Changes
+
+- M44 adversarial-review fixes for the model catalog: (B1) the provider registry + model-info index now live on `globalThis` via `Symbol.for` so every bundle copy (`dist/index.js`, `dist/models.js` — tsup bundles entries separately) shares the SAME state — previously `refreshModelCatalog` from `@theokit/sdk/models` patched a bundle-local index invisible to capability/pricing lookups and saw an empty registry (a published-artifact-only defect the src-level tests could not catch); (H2) a live models-dev patch is now a per-field MERGE that preserves theokit extension fields (`cache_control`, overlay `structured_output`) instead of a wholesale replace that wiped them; (H3) the runtime refresh gained the models.dev↔theokit id mapping (google↔google-gemini, zai↔zhipu, togetherai↔together, fireworks-ai↔fireworks, amazon-bedrock↔bedrock, google-vertex↔vertex) resolving against catalog entries (id + aliases) with a WARN for skipped unknowns — Google/Z.AI/Together/Fireworks now actually refresh; (M4) `refreshModelCatalog` self-initializes provider registration so the `/models` subpath works standalone; (M5) pricing provenance is honest post-refresh (`catalog-models-dev` vs `catalog-vendored`); (M6) the anthropic builtin defaults (opus-4-7 / sonnet-4-6 / haiku-4-5) now carry `cache_control: true` in the vendored catalog; (L8) the models-dev cache honors `THEOKIT_HOME`; (L9) a missing/corrupt vendored catalog degrades with WARN instead of throwing from `resolveModelCapabilities`, cache patch errors never delete a valid cache, and refresh never rejects; (L10) the pricing step-5 fallback also tries the date-stripped id; (L11) falsy `THEOKIT_DISABLE_MODELS_FETCH` values (`0`/`false`/empty) no longer disable the fetch.
+
 ## 4.13.0
 
 ### Minor Changes

package/dist/cron.cjs

@@ -10539,8 +10539,17 @@ var catalogModelSchema = zod.z.object({
 }).loose();
 
 // src/internal/providers/registry.ts
-var REGISTRY = /* @__PURE__ */ new Map();
-var ALIASES = /* @__PURE__ */ new Map();
+function globalSingleton(key, create) {
+  const g = globalThis;
+  const sym = Symbol.for(key);
+  if (g[sym] === void 0) g[sym] = create();
+  return g[sym];
+}
+var REGISTRY = globalSingleton(
+  "theokit-sdk.providers.registry",
+  () => /* @__PURE__ */ new Map()
+);
+var ALIASES = globalSingleton("theokit-sdk.providers.aliases", () => /* @__PURE__ */ new Map());
 function registerProvider(profile) {
   if (REGISTRY.has(profile.name)) {
     process.stderr.write(`[theokit-sdk] Provider "${profile.name}" overridden by user plugin.
@@ -10565,18 +10574,43 @@ function getProviderProfile(name) {
 
 // src/internal/providers/catalog-loader.ts
 var __dirname_resolved = path.dirname(url.fileURLToPath((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cron.cjs', document.baseURI).href))));
-var modelInfoIndex = /* @__PURE__ */ new Map();
+function globalSingleton2(key, create) {
+  const g = globalThis;
+  const sym = Symbol.for(key);
+  if (g[sym] === void 0) g[sym] = create();
+  return g[sym];
+}
+var modelInfoIndex = globalSingleton2(
+  "theokit-sdk.providers.model-info-index",
+  () => /* @__PURE__ */ new Map()
+);
+var patchedModelKeys = globalSingleton2(
+  "theokit-sdk.providers.model-info-patched",
+  () => /* @__PURE__ */ new Set()
+);
+var indexState = globalSingleton2("theokit-sdk.providers.model-info-loaded", () => ({
+  loaded: false
+}));
 function getCatalogModelInfo(key) {
   ensureModelIndexLoaded();
   return modelInfoIndex.get(key);
 }
-var _modelIndexLoaded = false;
+function isPatchedModelKey(key) {
+  return patchedModelKeys.has(key);
+}
 function ensureModelIndexLoaded() {
-  if (_modelIndexLoaded) return;
-  _modelIndexLoaded = true;
-  const catalog = loadProviderCatalog();
-  for (const entry of Object.values(catalog)) {
-    indexEntryModels(entry);
+  if (indexState.loaded) return;
+  indexState.loaded = true;
+  try {
+    const catalog = loadProviderCatalog();
+    for (const entry of Object.values(catalog)) {
+      indexEntryModels(entry);
+    }
+  } catch (err) {
+    process.stderr.write(
+      `[theokit-sdk] WARN: provider catalog unavailable (${err.message}) \u2014 per-model data disabled
+`
+    );
   }
 }
 function indexEntryModels(entry) {
@@ -10829,8 +10863,10 @@ function getPricingEntry(opts) {
   return void 0;
 }
 function catalogCostFallback(provider, cleanedModel) {
-  const keys = [`${provider}/${cleanedModel}`, cleanedModel];
-  for (const key of keys) {
+  const stripped = stripDateSuffix(cleanedModel);
+  const candidates = [`${provider}/${cleanedModel}`, cleanedModel];
+  if (stripped !== cleanedModel) candidates.push(`${provider}/${stripped}`, stripped);
+  for (const key of candidates) {
     const info = getCatalogModelInfo(key);
     const cost = info?.cost;
     if (cost === void 0) continue;
@@ -10842,7 +10878,8 @@ function catalogCostFallback(provider, cleanedModel) {
       outputCostPerMillion: cost.output,
       ...cost.cache_read !== void 0 ? { cacheReadCostPerMillion: cost.cache_read } : {},
       ...cost.cache_write !== void 0 ? { cacheWriteCostPerMillion: cost.cache_write } : {},
-      pricingVersion: "catalog-vendored"
+      // M44 M5 fix — honest provenance: a key patched by the LIVE models-dev source is not "vendored".
+      pricingVersion: isPatchedModelKey(key) ? "catalog-models-dev" : "catalog-vendored"
     };
   }
   return void 0;