@yanlinglabs/winter-provider-catalog 0.0.33 → 0.0.35

package/PROVENANCE.md

@@ -8,7 +8,7 @@ The committed catalog is the merge of two layers, performed by `scripts/provider
 | Layer | Source | Owner | Present |
 | --- | --- | --- | --- |
 | upstream | `generated/upstream-layer.json`, extracted from the pinned OmniRoute tree by `scripts/provider-source-sync.ts` | the extractor | **yes** — 106 providers, 539 models |
-| overlay | `overlay/providers.json` + `overlay/models.json`, hand-authored and reviewed | Winter | yes — 125 providers, 635 models |
+| overlay | `overlay/providers.json` + `overlay/models.json`, hand-authored and reviewed | Winter | yes — 134 providers, 1178 models |
 
 **The overlay always wins.** WS-13 §7: live discovery and upstream extraction never silently
 overwrite `official-doc`/`live-probe` overlay entries, so a conflicting upstream row is dropped in
@@ -123,11 +123,11 @@ and wants to refresh this document by name — not a second gate.
 
 <!-- BEGIN GENERATED: admission-tier census (bun run scripts/provenance-tiers.ts) -->
 
-Generated from `generated/catalog.json` (`v3.8.50+winter.1`, 213 provider rows). Do not edit by hand.
+Generated from `generated/catalog.json` (`v3.8.50+winter.1`, 218 provider rows). Do not edit by hand.
 
 | Tier | Rows | What it means |
 | --- | ---: | --- |
-| **fetched-document** | 86 | a vendor page this repository retrieved and read, on a recorded date |
+| **fetched-document** | 91 | a vendor page this repository retrieved and read, on a recorded date |
 | **pinned-upstream** | 101 | the vendor's own site as the pinned upstream product catalog records it, plus that id's own pinned entry — a real, dated reference, but NOT a page read here |
 | **spec-ruling** | 4 | a ruling in an approved spec (or a user ruling recorded in one) admits the PATH; the row's own details are carried from a reviewed ledger entry — `anthropic`, `azure-ai`, `console`, `oci` |
 | **local** | 12 | a local installation on the operator's own machine — there is no third party to be admitted by — `docker-model-runner`, `lemonade`, `llama-cpp`, `llamafile`, `lm-studio`, `mlx-gemma`, `mlx-qwen`, `ollama-local`, `oobabooga`, `triton`, `vllm`, `xinference` |
@@ -160,6 +160,13 @@ API docs, and `zai-anthropic` cited the mainland product site although the lane
 own Claude-client doc. A citation is a row's entire evidence, so a citation that resolves to nothing
 is a row with no evidence.
 
+**cat34 review (2026-09-28) applied the same rule to four extracted rows whose ENDPOINT is dead**, each
+moved to `blocked` with the probe on the row: `yi` (HTTP 410 `model_service_closed`), `pioneer` (HTTP 410
+`host_retired`, `moved_to` api.fastino.ai — the successor is not re-admitted without its own review),
+`modal` (`api.modal.ai` fails TLS; modal.ai is a parked domain, never Modal's), and `hyperbolic` (its FAQ
+states the serverless inference API is retired). A blocked row has no credential slot and refuses at
+resolution.
+
 **What decision (a) asked for and why it could not be met as written.** The P6.5 plan asked lane X2
 to upgrade five `spec:WS-13 §1` citations (`deepseek`, `openrouter`, `azure-openai`, `bedrock`,
 `vertex`) "to vendor URLs from the audit's citations". The audit's 51 citations cover the OAuth,
@@ -560,6 +567,21 @@ operator created; no document read here enumerates them, and seeding rows would
 somebody else's tenant. A host reaches models with `allowUnlisted` — both rows are
 `liveCatalogAuthority: "unknown"`, which is the door R6-F opens.
 
+**cat34 (2026-09-27) added two per-tenant rows, from fetched vendor pages** (`tier:
+"fetched-document"`, still `review-required` with no live gate). A third, `databricks`, was drafted and
+dropped at review: its documented OpenAI-client route names models `system.ai.<name>`, no page read
+enumerated them, and a per-tenant row with nothing to seed adds nothing `allowUnlisted` does not.
+
+| row | template | model rows |
+| --- | --- | --- |
+| `snowflake-cortex` | `https://<account-identifier>.snowflakecomputing.com/api/v2/cortex/v1` | the Cortex REST API's generally available models (✔ in its availability table), **unpriced**: billing is in AI Credits whose USD price depends on the contract and region |
+| `cloudflare-workers-ai` | `https://api.cloudflare.com/client/v4/accounts/<account-id>/ai/v1` | every text-generation model on the pricing page whose model page is live, **priced** from Cloudflare's own USD-per-1M figures |
+
+The Snowflake and Cloudflare model rows depart from the "no model rows" rule above on purpose, and
+the departure is a controller item: their ids are **platform-defined** (the vendor's own model
+catalog, the same for every account), not deployments an operator names, so a row states what the
+vendor serves rather than what one tenant created.
+
 ## Dialect siblings, and the two keyless rows (P6.5, R6b-5 / WS-13b §8.4)
 
 A provider row carries exactly one `adapterId`, so a vendor that documents **two wire dialects at two

package/README.md

@@ -1,6 +1,6 @@
 # `@yanlinglabs/winter-provider-catalog`
 
-Winter's provider and model catalog as inert, validated DATA: 213 provider rows and 1001 model rows
+Winter's provider and model catalog as inert, validated DATA: 218 provider rows and 1296 model rows
 with their endpoints, auth kinds, pricing evidence, admission tier and provenance, plus the validator
 and the vocabularies the JSON Schema restates.
 

package/dist/families.d.ts

@@ -63,6 +63,9 @@ export declare function modelFamilyOf(catalog: WinterCatalog, providerId: string
 export declare function isSlotServableRow(row: {
     status: string;
     endpoints: readonly string[];
-}): boolean;
+    providerId?: string;
+}, blockedProviderIds?: ReadonlySet<string>): boolean;
+/** The ids of every provider whose `risk.class` is `blocked` -- the second argument `isSlotServableRow` takes. */
+export declare function blockedProviderIdsOf(catalog: Pick<WinterCatalog, "providers">): Set<string>;
 /** Candidate rows for a slot (WS-13c §4 step 1). The SAME predicate `validateCatalog` refuses a slot on. */
 export declare function rowsForCanonicalId(catalog: WinterCatalog, canonicalModelId: string): WinterModelDescriptor[];

package/dist/families.js

@@ -12,8 +12,9 @@ import {
   familyOfModelKey2,
   modelFamilyOf2,
   isSlotServableRow2,
+  blockedProviderIdsOf2,
   rowsForCanonicalId2
-} from "./index-kmd3gebk.js";
+} from "./index-gpcka8pe.js";
 export {
   CLAUDE_FAMILY_ID2 as CLAUDE_FAMILY_ID,
   CLAUDE_RESERVED_SLOT_NAMES2 as CLAUDE_RESERVED_SLOT_NAMES,
@@ -21,6 +22,7 @@ export {
   FAMILY_ID_RE2 as FAMILY_ID_RE,
   OTHER_FAMILY_ID2 as OTHER_FAMILY_ID,
   SLOT_NAME_RE2 as SLOT_NAME_RE,
+  blockedProviderIdsOf2 as blockedProviderIdsOf,
   canonicalModelIdOf2 as canonicalModelIdOf,
   familyIdOf2 as familyIdOf,
   familyOfModelKey2 as familyOfModelKey,

package/dist/{index-kmd3gebk.js → index-gpcka8pe.js}

@@ -88,11 +88,17 @@ function modelFamilyOf2(catalog, providerId, modelKey) {
   const row = catalog.models.find((m) => m.key === modelKey) ?? catalog.models.find((m) => m.key === `${providerId}/${modelKey}`);
   return row?.modelFamily;
 }
-function isSlotServableRow2(row) {
+function isSlotServableRow2(row, blockedProviderIds = new Set) {
+  if (row.providerId !== undefined && blockedProviderIds.has(row.providerId))
+    return false;
   return row.status !== "blocked" && row.status !== "deprecated" && (row.endpoints.includes("chat") || row.endpoints.includes("responses"));
 }
+function blockedProviderIdsOf2(catalog) {
+  return new Set(catalog.providers.filter((p) => p.risk.class === "blocked").map((p) => p.id));
+}
 function rowsForCanonicalId2(catalog, canonicalModelId) {
-  return catalog.models.filter((m) => m.canonicalModelId === canonicalModelId && isSlotServableRow2(m));
+  const blocked = blockedProviderIdsOf2(catalog);
+  return catalog.models.filter((m) => m.canonicalModelId === canonicalModelId && isSlotServableRow2(m, blocked));
 }
 
-export { SLOT_NAME_RE2, FAMILY_ID_RE2, CLAUDE_FAMILY_ID2, OTHER_FAMILY_ID2, CLAUDE_RESERVED_SLOT_NAMES2, CURRENCY_RE2, canonicalModelIdOf2, familyIdOf2, stampFamilyFields2, resolveSlotName2, familyOfModelKey2, modelFamilyOf2, isSlotServableRow2, rowsForCanonicalId2 };
+export { SLOT_NAME_RE2, FAMILY_ID_RE2, CLAUDE_FAMILY_ID2, OTHER_FAMILY_ID2, CLAUDE_RESERVED_SLOT_NAMES2, CURRENCY_RE2, canonicalModelIdOf2, familyIdOf2, stampFamilyFields2, resolveSlotName2, familyOfModelKey2, modelFamilyOf2, isSlotServableRow2, blockedProviderIdsOf2, rowsForCanonicalId2 };

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export type { CapabilityEvidence, CatalogValidationResult, EvidenceConfidence, EvidenceSource, FamilySlot, ModelFamilyDescriptor, ModelPricing, ModelStatus, ProviderAuthKind, ProviderProtocol, ReasoningCapabilities, SlotBasis, SlotStatus, ToolCalling, WinterCatalog, WinterModelDescriptor, WinterProviderDescriptor, } from "./types.js";
 export { CATALOG_VOCABULARIES, scanForSecrets, validateCatalog } from "./validate.js";
-export { CLAUDE_FAMILY_ID, CLAUDE_RESERVED_SLOT_NAMES, CURRENCY_RE, FAMILY_ID_RE, OTHER_FAMILY_ID, SLOT_NAME_RE, canonicalModelIdOf, familyIdOf, familyOfModelKey, isSlotServableRow, modelFamilyOf, resolveSlotName, rowsForCanonicalId, stampFamilyFields, } from "./families.js";
+export { CLAUDE_FAMILY_ID, CLAUDE_RESERVED_SLOT_NAMES, CURRENCY_RE, FAMILY_ID_RE, OTHER_FAMILY_ID, SLOT_NAME_RE, canonicalModelIdOf, familyIdOf, familyOfModelKey, blockedProviderIdsOf, isSlotServableRow, modelFamilyOf, resolveSlotName, rowsForCanonicalId, stampFamilyFields, } from "./families.js";
 export type { SlotNameResolution } from "./families.js";
 export { CATALOG_TAG_RENAMES } from "./tag-renames.js";
 import type { WinterCatalog } from "./types.js";