crosscheck-mcp 0.2.12 → 0.2.14

package/dist/node-stdio.cjs

@@ -1266,8 +1266,21 @@ function isCreditsFailure(status, bodyText) {
   }
   return false;
 }
-function httpFailureToProviderError(provider, status, bodyText, retryAfterS) {
+var MODEL_ACCESS_RE = /model_not_found|does not have access to model|does not exist|model[\s_]not[\s_]found|invalid model|unknown model|unsupported model/i;
+function isModelAccessFailure(status, bodyText) {
+  if (status < 400 || status >= 500) return false;
+  return MODEL_ACCESS_RE.test(bodyText);
+}
+function httpFailureToProviderError(provider, status, bodyText, retryAfterS, model) {
   const detail = bodyText.slice(0, 512);
+  if (isModelAccessFailure(status, bodyText)) {
+    const modelRef = model ? `"${model}"` : "the configured model";
+    return new ProviderError(
+      "client",
+      `${provider}: your account/project doesn't have access to ${modelRef} (HTTP ${status}). This is a model-access problem, not a key problem \u2014 your ${provider} API key is fine, ${modelRef} just isn't enabled for this account/project. Fix: run \`crosscheck models set ${provider} <a-model-you-have-access-to>\` (or set ${provider.toUpperCase()}_MODEL in your .env until that's available). Detail: ${detail}`,
+      { status }
+    );
+  }
   if (isCreditsFailure(status, bodyText)) {
     return new ProviderError(
       "auth",
@@ -1605,7 +1618,7 @@ async function sendAnthropic(args) {
       return { text, attempts: 1, usage: applyPricing(usage, args.pricing) };
     }
     const bodyText = await respLike.text().catch(() => "");
-    throw httpFailureToProviderError("anthropic", status, bodyText, parseRetryAfter(respLike));
+    throw httpFailureToProviderError("anthropic", status, bodyText, parseRetryAfter(respLike), args.model);
   };
   await acquireRateLimit("anthropic", args.signal ? { signal: args.signal } : void 0);
   return sendWithRetry(attemptOnce, resolveRetryConfig(), args.signal);
@@ -1784,7 +1797,7 @@ async function sendGemini(args) {
       return { text, attempts: 1, usage: applyPricing2(usage, args.pricing) };
     }
     const bodyText = await respLike.text().catch(() => "");
-    throw httpFailureToProviderError("gemini", status, bodyText, parseRetryAfter(respLike));
+    throw httpFailureToProviderError("gemini", status, bodyText, parseRetryAfter(respLike), args.model);
   };
   await acquireRateLimit("gemini", args.signal ? { signal: args.signal } : void 0);
   return sendWithRetry(attemptOnce, resolveRetryConfig(), args.signal);
@@ -1958,7 +1971,7 @@ async function sendOpenAICompatible(args) {
       return { text, attempts: 1, usage: applyPricing3(usage, args.pricing) };
     }
     const bodyText = await respLike.text().catch(() => "");
-    throw httpFailureToProviderError(args.provider, status, bodyText, parseRetryAfter(respLike));
+    throw httpFailureToProviderError(args.provider, status, bodyText, parseRetryAfter(respLike), args.model);
   };
   await acquireRateLimit(args.provider, args.signal ? { signal: args.signal } : void 0);
   return sendWithRetry(attemptOnce, resolveRetryConfig(), args.signal);
@@ -1967,7 +1980,10 @@ async function sendOpenAICompatible(args) {
 // src/providers/registry.ts
 var DEFAULT_MODELS = {
   anthropic: "claude-opus-5",
-  openai: "gpt-5.5",
+  // gpt-5.5 is not enabled on every OpenAI account/project (some are still
+  // capped at gpt-5) — gpt-5 is the safer, more broadly available default
+  // until a user/org explicitly opts into 5.5 via `crosscheck models set`.
+  openai: "gpt-5",
   xai: "grok-4-latest",
   mistral: "mistral-large-latest",
   groq: "llama-3.3-70b-versatile",
@@ -1976,6 +1992,28 @@ var DEFAULT_MODELS = {
   kimi: "kimi-k3",
   qwen: "qwen3.8-max"
 };
+var MODEL_ENV_VARS = {
+  anthropic: "ANTHROPIC_MODEL",
+  openai: "OPENAI_MODEL",
+  xai: "XAI_MODEL",
+  mistral: "MISTRAL_MODEL",
+  groq: "GROQ_MODEL",
+  deepseek: "DEEPSEEK_MODEL",
+  gemini: "GEMINI_MODEL",
+  kimi: "KIMI_MODEL",
+  qwen: "QWEN_MODEL"
+};
+function detectStalePins(env) {
+  const out = [];
+  for (const [provider, envVar] of Object.entries(MODEL_ENV_VARS)) {
+    const pinned = env[envVar];
+    const current = DEFAULT_MODELS[provider];
+    if (pinned && current && pinned !== current) {
+      out.push({ provider, envVar, pinned, current });
+    }
+  }
+  return out;
+}
 function buildProviders(opts) {
   const out = {};
   const anthropicKey = opts.env["ANTHROPIC_API_KEY"];
@@ -2191,7 +2229,7 @@ var import_zod = require("zod");
 // src/server-meta.ts
 init_cjs_shims();
 var SERVER_NAME = "crosscheck-agent";
-var SERVER_VERSION = true ? "0.2.12" : "0.0.0-dev";
+var SERVER_VERSION = true ? "0.2.14" : "0.0.0-dev";
 
 // src/tools/audit.ts
 init_cjs_shims();
@@ -12485,7 +12523,7 @@ var CHECK_INTERVAL_SECONDS = 3 * 24 * 60 * 60;
 var DEFAULT_PACKAGE = "crosscheck-cli";
 var FETCH_TIMEOUT_MS = 3e3;
 function engineVersion() {
-  return true ? "0.2.12" : "0.0.0-dev";
+  return true ? "0.2.14" : "0.0.0-dev";
 }
 function defaultUpdateCachePath() {
   const base = process.env["CROSSCHECK_DATA_DIR"] || import_node_path13.default.join(import_node_os2.default.homedir() || import_node_os2.default.tmpdir(), ".crosscheck");
@@ -14779,6 +14817,13 @@ async function main() {
   if (Object.keys(providers).length > 0) {
     process.stderr.write(
       `crosscheck-agent: native providers loaded: ${Object.keys(providers).sort().join(", ")}
+`
+    );
+  }
+  for (const stale of detectStalePins(process.env)) {
+    if (!(stale.provider in providers)) continue;
+    process.stderr.write(
+      `crosscheck-agent: ${stale.provider} is pinned to "${stale.pinned}" via ${stale.envVar}, but the current default is "${stale.current}". If that wasn't intentional, update or remove ${stale.envVar} in your .env.
 `
     );
   }