crosscheck-mcp 0.2.19 → 0.2.21

package/dist/node-stdio.js

@@ -1168,7 +1168,13 @@ var PROVIDER_CAPS = {
     family: "openai_chat",
     system_role: "inline",
     supports_temperature: "model",
-    reasoning_prefixes: ["gpt-5", "o1", "o3", "o4"]
+    // gpt-6 added 2026-09-06: GPT-6 Astra rejects `max_tokens` outright
+    // ("Unsupported parameter ... use max_completion_tokens"), which is a 400,
+    // NOT a model-access failure — so the fallback chain correctly declines to
+    // fire and the provider silently drops out of the panel instead. Reasoning
+    // -class routing is what selects max_completion_tokens and omits
+    // temperature, so the prefix is the fix.
+    reasoning_prefixes: ["gpt-5", "gpt-6", "o1", "o3", "o4"]
   },
   xai: { family: "openai_chat", system_role: "inline", supports_temperature: true },
   mistral: { family: "openai_chat", system_role: "inline", supports_temperature: true },
@@ -1224,12 +1230,20 @@ var ProviderError = class extends Error {
    *  actually fix. Distinct from `transient`: this is never worth
    *  retrying the SAME model, but IS worth trying a different one. */
   modelAccessFailure;
+  /** True for "the key works, the account is out of credit / over a spend
+   *  limit." Rides alongside kind "auth" rather than replacing it, because
+   *  every retry and fallback decision downstream is already tuned to that
+   *  kind — but the two are completely different things to a human, and
+   *  reporting "API key rejected" for an unpaid invoice sends people to
+   *  regenerate a key that was never the problem. */
+  billing;
   constructor(kind, message, opts) {
     super(message);
     this.kind = kind;
     this.status = opts?.status;
     this.transient = opts?.transient ?? defaultTransient(kind);
     this.modelAccessFailure = opts?.modelAccessFailure ?? false;
+    this.billing = opts?.billing ?? false;
     if (opts?.retryAfterS !== void 0) {
       this.retryAfterS = opts.retryAfterS;
     }
@@ -1268,7 +1282,7 @@ function httpFailureToProviderError(provider, status, bodyText, retryAfterS, mod
     return new ProviderError(
       "auth",
       `${provider}: out of credits or billing isn't set up (HTTP ${status}). Your API key is reaching ${provider}, but the account has no usable balance \u2014 add credits / enable billing in your ${provider} console, then retry. Detail: ${detail}`,
-      { status }
+      { status, billing: true }
     );
   }
   if (status === 401 || status === 403) {
@@ -2265,7 +2279,7 @@ import { z } from "zod";
 // src/server-meta.ts
 init_esm_shims();
 var SERVER_NAME = "crosscheck-agent";
-var SERVER_VERSION = true ? "0.2.19" : "0.0.0-dev";
+var SERVER_VERSION = true ? "0.2.21" : "0.0.0-dev";
 
 // src/tools/audit.ts
 init_esm_shims();
@@ -2778,7 +2792,9 @@ async function attachUsageBlock(result, answers, opts) {
       purpose: a.usage?.purpose ?? null,
       wall_ms: a.elapsed_ms ?? 0,
       cpu_ms: a.cpu_ms ?? 0,
-      cache_hit: Boolean(a.cache_hit)
+      cache_hit: Boolean(a.cache_hit),
+      ...a.error_kind ? { error_kind: a.error_kind } : {},
+      ...a.error_billing ? { error_billing: true } : {}
     }))
   };
   result["timing"] = timing;
@@ -3087,11 +3103,13 @@ async function askOne(provider, messages, opts) {
     const cpuMs = Math.trunc((cpu.user + cpu.system) / 1e3);
     const kind = e instanceof ProviderError ? e.kind : "other";
     const msg = e instanceof Error ? e.message : String(e);
+    const billing = e instanceof ProviderError && e.billing;
     return {
       provider: provider.name,
       model: provider.model,
       error: msg,
       error_kind: kind,
+      ...billing ? { error_billing: true } : {},
       attempts: 0,
       usage: emptyUsage(provider.name, provider.model, opts.purpose),
       cache_hit: false,
@@ -12770,7 +12788,7 @@ var CHECK_INTERVAL_SECONDS = 3 * 24 * 60 * 60;
 var DEFAULT_PACKAGE = "crosscheck-cli";
 var FETCH_TIMEOUT_MS = 3e3;
 function engineVersion() {
-  return true ? "0.2.19" : "0.0.0-dev";
+  return true ? "0.2.21" : "0.0.0-dev";
 }
 function defaultUpdateCachePath() {
   const base = process.env["CROSSCHECK_DATA_DIR"] || path10.join(os.homedir() || os.tmpdir(), ".crosscheck");
@@ -14785,6 +14803,23 @@ function getConfig2() {
   config = { url, seatId, orgId, seatKey };
   return config;
 }
+function errorClassFor(kind) {
+  switch (kind) {
+    case "auth":
+      return "auth";
+    case "rate_limit":
+      return "rate_limit";
+    case "timeout":
+      return "timeout";
+    case "server":
+      return "server";
+    // network/parse/client/other all mean "we don't know that the key is
+    // bad", and guessing wrong here is what produces a dashboard that cries
+    // wolf. Say unknown.
+    default:
+      return "unknown";
+  }
+}
 function intNonNeg(v) {
   const n = Math.trunc(Number(v));
   return Number.isFinite(n) && n > 0 ? n : 0;
@@ -14792,12 +14827,14 @@ function intNonNeg(v) {
 function usageEventsFromEnvelope(out, toolName) {
   if (!out || typeof out !== "object" || Array.isArray(out)) return [];
   const usage = out["usage"];
-  if (!usage || typeof usage !== "object") return [];
-  const byCall = usage["by_call"];
-  if (!Array.isArray(byCall) || byCall.length === 0) return [];
+  const rawByCall = usage && typeof usage === "object" ? usage["by_call"] : void 0;
+  const byCall = Array.isArray(rawByCall) ? rawByCall : [];
   const timing = out["timing"];
   const timingByCall = timing && typeof timing === "object" ? timing["by_call"] : void 0;
-  const latencies = Array.isArray(timingByCall) ? timingByCall : [];
+  const allTiming = Array.isArray(timingByCall) ? timingByCall : [];
+  const latencies = allTiming.filter(
+    (t) => !t?.["error_kind"]
+  );
   const aligned = latencies.length === byCall.length;
   const pattern = toolToPattern(toolName);
   const events = [];
@@ -14822,6 +14859,28 @@ function usageEventsFromEnvelope(out, toolName) {
       purpose: normalizePurpose(u.purpose)
     });
   }
+  for (const t of allTiming) {
+    const row = t;
+    const kind = row["error_kind"];
+    if (!kind) continue;
+    const provider = providerToSchema(String(row["provider"] ?? ""));
+    if (!provider) continue;
+    events.push({
+      provider,
+      model: String(row["model"] ?? "").slice(0, 128) || "unknown",
+      pattern,
+      // A failure consumed no tokens and cost nothing. Recording it with a
+      // nonzero cost would corrupt the per-feature ledger with money nobody
+      // spent.
+      promptTokens: 0,
+      completionTokens: 0,
+      costUsdEstimate: 0,
+      latencyMs: intNonNeg(row["wall_ms"]),
+      status: "error",
+      errorClass: row["error_billing"] ? "auth" : errorClassFor(String(kind)),
+      purpose: normalizePurpose(row["purpose"])
+    });
+  }
   return events;
 }
 var queue = [];
@@ -14848,6 +14907,10 @@ function enqueue(cfg2, input, runId, fingerprint) {
     costUsdEstimate: input.costUsdEstimate,
     latencyMs: input.latencyMs,
     status: input.status,
+    // Only present on failures. The canonical body renders an absent
+    // errorClass as "", so omitting and sending "" sign identically — but
+    // omitting keeps the JSON honest about what we actually know.
+    ...input.errorClass === void 0 ? {} : { errorClass: input.errorClass },
     runId,
     // Omit entirely (not "") when unknown, so the canonical body stays
     // consistent with what the server reconstructs from the JSON.