crosscheck-mcp 0.2.23 → 0.2.25

package/dist/node-stdio.d.cts

@@ -1,50 +1,9 @@
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
 
-/** A live bridge to a Python crosscheck-agent child. */
-interface BridgeHandle {
-    /** Names of the tools exposed by the Python child (from its
-     *  `tools/list` response). */
-    readonly toolNames: ReadonlySet<string>;
-    /** PID of the spawned Python child process, or `null` if the
-     *  transport hasn't started yet / has already closed. Useful for
-     *  shutdown verification and host-side diagnostics. */
-    readonly pid: number | null;
-    /** Forward a `tools/call` to the Python child and return the result
-     *  envelope verbatim. */
-    callTool(name: string, args: Record<string, unknown>): Promise<{
-        content: {
-            type: string;
-            text: string;
-        }[];
-        isError?: boolean;
-    }>;
-    /** Re-fetch the tool list (in case the child surfaces new tools mid-
-     *  session). Returns the new tool names. */
-    refreshTools(): Promise<ReadonlySet<string>>;
-    /** Tear down the bridge cleanly. Idempotent — repeat calls are no-ops. */
-    close(): Promise<void>;
-}
-
-/** Per-call node-cache config block. Mirrors Python's CFG.node_cache. */
-interface NodeCacheCfg {
-    /** Master enable flag. Defaults to true when the cfg block exists
-     *  in opts; explicitly set false to short-circuit reads + writes. */
-    enabled?: boolean;
-    /** Directory to store cache entries. Relative paths are resolved
-     *  against `repoRoot` when supplied; otherwise the CWD. */
-    dir?: string;
-    /** Stale-by-mtime threshold (seconds). 0 disables TTL eviction. */
-    ttl_seconds?: number;
-    /** Hard cap on the number of JSON entries on disk. 0 disables. */
-    max_entries?: number;
-    /** Hard cap on cumulative file size (bytes). 0 disables. */
-    max_cache_bytes?: number;
-}
-
-interface WorkerToolsCfg {
-    cost_cap_usd?: unknown;
-    cost_cap_mode?: unknown;
+interface PricingDoc {
+    /** `<provider>` -> `<model>` -> ModelRates. */
+    [provider: string]: unknown;
 }
 
 /** sessions row. */
@@ -363,19 +322,6 @@ interface Storage extends StorageRead, StorageWrite {
     close(): Promise<void>;
 }
 
-interface BreakerCfg {
-    max_session_cost_usd?: number;
-    max_session_tokens?: number;
-    max_session_wall_seconds?: number;
-    max_dag_nodes?: number;
-    max_dag_depth?: number;
-}
-
-interface PricingDoc {
-    /** `<provider>` -> `<model>` -> ModelRates. */
-    [provider: string]: unknown;
-}
-
 /** One provider call's token + cost record. Mirrors `Usage.to_dict()`
  *  output exactly. */
 interface Usage {
@@ -451,6 +397,60 @@ interface Provider {
     send(args: SendArgs): Promise<SendResult>;
 }
 
+/** A live bridge to a Python crosscheck-agent child. */
+interface BridgeHandle {
+    /** Names of the tools exposed by the Python child (from its
+     *  `tools/list` response). */
+    readonly toolNames: ReadonlySet<string>;
+    /** PID of the spawned Python child process, or `null` if the
+     *  transport hasn't started yet / has already closed. Useful for
+     *  shutdown verification and host-side diagnostics. */
+    readonly pid: number | null;
+    /** Forward a `tools/call` to the Python child and return the result
+     *  envelope verbatim. */
+    callTool(name: string, args: Record<string, unknown>): Promise<{
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError?: boolean;
+    }>;
+    /** Re-fetch the tool list (in case the child surfaces new tools mid-
+     *  session). Returns the new tool names. */
+    refreshTools(): Promise<ReadonlySet<string>>;
+    /** Tear down the bridge cleanly. Idempotent — repeat calls are no-ops. */
+    close(): Promise<void>;
+}
+
+/** Per-call node-cache config block. Mirrors Python's CFG.node_cache. */
+interface NodeCacheCfg {
+    /** Master enable flag. Defaults to true when the cfg block exists
+     *  in opts; explicitly set false to short-circuit reads + writes. */
+    enabled?: boolean;
+    /** Directory to store cache entries. Relative paths are resolved
+     *  against `repoRoot` when supplied; otherwise the CWD. */
+    dir?: string;
+    /** Stale-by-mtime threshold (seconds). 0 disables TTL eviction. */
+    ttl_seconds?: number;
+    /** Hard cap on the number of JSON entries on disk. 0 disables. */
+    max_entries?: number;
+    /** Hard cap on cumulative file size (bytes). 0 disables. */
+    max_cache_bytes?: number;
+}
+
+interface WorkerToolsCfg {
+    cost_cap_usd?: unknown;
+    cost_cap_mode?: unknown;
+}
+
+interface BreakerCfg {
+    max_session_cost_usd?: number;
+    max_session_tokens?: number;
+    max_session_wall_seconds?: number;
+    max_dag_nodes?: number;
+    max_dag_depth?: number;
+}
+
 interface ConfigPinningConfig {
     /** Pin file location. Repo-relative or absolute. */
     pin_file?: string;

package/dist/node-stdio.d.ts

@@ -1,50 +1,9 @@
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
 
-/** A live bridge to a Python crosscheck-agent child. */
-interface BridgeHandle {
-    /** Names of the tools exposed by the Python child (from its
-     *  `tools/list` response). */
-    readonly toolNames: ReadonlySet<string>;
-    /** PID of the spawned Python child process, or `null` if the
-     *  transport hasn't started yet / has already closed. Useful for
-     *  shutdown verification and host-side diagnostics. */
-    readonly pid: number | null;
-    /** Forward a `tools/call` to the Python child and return the result
-     *  envelope verbatim. */
-    callTool(name: string, args: Record<string, unknown>): Promise<{
-        content: {
-            type: string;
-            text: string;
-        }[];
-        isError?: boolean;
-    }>;
-    /** Re-fetch the tool list (in case the child surfaces new tools mid-
-     *  session). Returns the new tool names. */
-    refreshTools(): Promise<ReadonlySet<string>>;
-    /** Tear down the bridge cleanly. Idempotent — repeat calls are no-ops. */
-    close(): Promise<void>;
-}
-
-/** Per-call node-cache config block. Mirrors Python's CFG.node_cache. */
-interface NodeCacheCfg {
-    /** Master enable flag. Defaults to true when the cfg block exists
-     *  in opts; explicitly set false to short-circuit reads + writes. */
-    enabled?: boolean;
-    /** Directory to store cache entries. Relative paths are resolved
-     *  against `repoRoot` when supplied; otherwise the CWD. */
-    dir?: string;
-    /** Stale-by-mtime threshold (seconds). 0 disables TTL eviction. */
-    ttl_seconds?: number;
-    /** Hard cap on the number of JSON entries on disk. 0 disables. */
-    max_entries?: number;
-    /** Hard cap on cumulative file size (bytes). 0 disables. */
-    max_cache_bytes?: number;
-}
-
-interface WorkerToolsCfg {
-    cost_cap_usd?: unknown;
-    cost_cap_mode?: unknown;
+interface PricingDoc {
+    /** `<provider>` -> `<model>` -> ModelRates. */
+    [provider: string]: unknown;
 }
 
 /** sessions row. */
@@ -363,19 +322,6 @@ interface Storage extends StorageRead, StorageWrite {
     close(): Promise<void>;
 }
 
-interface BreakerCfg {
-    max_session_cost_usd?: number;
-    max_session_tokens?: number;
-    max_session_wall_seconds?: number;
-    max_dag_nodes?: number;
-    max_dag_depth?: number;
-}
-
-interface PricingDoc {
-    /** `<provider>` -> `<model>` -> ModelRates. */
-    [provider: string]: unknown;
-}
-
 /** One provider call's token + cost record. Mirrors `Usage.to_dict()`
  *  output exactly. */
 interface Usage {
@@ -451,6 +397,60 @@ interface Provider {
     send(args: SendArgs): Promise<SendResult>;
 }
 
+/** A live bridge to a Python crosscheck-agent child. */
+interface BridgeHandle {
+    /** Names of the tools exposed by the Python child (from its
+     *  `tools/list` response). */
+    readonly toolNames: ReadonlySet<string>;
+    /** PID of the spawned Python child process, or `null` if the
+     *  transport hasn't started yet / has already closed. Useful for
+     *  shutdown verification and host-side diagnostics. */
+    readonly pid: number | null;
+    /** Forward a `tools/call` to the Python child and return the result
+     *  envelope verbatim. */
+    callTool(name: string, args: Record<string, unknown>): Promise<{
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError?: boolean;
+    }>;
+    /** Re-fetch the tool list (in case the child surfaces new tools mid-
+     *  session). Returns the new tool names. */
+    refreshTools(): Promise<ReadonlySet<string>>;
+    /** Tear down the bridge cleanly. Idempotent — repeat calls are no-ops. */
+    close(): Promise<void>;
+}
+
+/** Per-call node-cache config block. Mirrors Python's CFG.node_cache. */
+interface NodeCacheCfg {
+    /** Master enable flag. Defaults to true when the cfg block exists
+     *  in opts; explicitly set false to short-circuit reads + writes. */
+    enabled?: boolean;
+    /** Directory to store cache entries. Relative paths are resolved
+     *  against `repoRoot` when supplied; otherwise the CWD. */
+    dir?: string;
+    /** Stale-by-mtime threshold (seconds). 0 disables TTL eviction. */
+    ttl_seconds?: number;
+    /** Hard cap on the number of JSON entries on disk. 0 disables. */
+    max_entries?: number;
+    /** Hard cap on cumulative file size (bytes). 0 disables. */
+    max_cache_bytes?: number;
+}
+
+interface WorkerToolsCfg {
+    cost_cap_usd?: unknown;
+    cost_cap_mode?: unknown;
+}
+
+interface BreakerCfg {
+    max_session_cost_usd?: number;
+    max_session_tokens?: number;
+    max_session_wall_seconds?: number;
+    max_dag_nodes?: number;
+    max_dag_depth?: number;
+}
+
 interface ConfigPinningConfig {
     /** Pin file location. Repo-relative or absolute. */
     pin_file?: string;

package/dist/node-stdio.js

@@ -1282,7 +1282,7 @@ init_esm_shims();
 var CREDIT_RE = /insufficient|no\s+credit|credits?|billing|quota|payment\s*required|exceeded your current quota|not\s+enough|fund|no active subscription|spend limit/i;
 function isCreditsFailure(status, bodyText) {
   if (status === 402) return true;
-  if (status === 401 || status === 403 || status === 429 || status === 400) {
+  if (status === 401 || status === 403 || status === 400) {
     return CREDIT_RE.test(bodyText);
   }
   return false;
@@ -1319,7 +1319,7 @@ function httpFailureToProviderError(provider, status, bodyText, retryAfterS, mod
   if (status === 429) {
     return new ProviderError(
       "rate_limit",
-      `${provider}: rate limited (HTTP 429). Detail: ${detail}`,
+      `${provider}: rate limited (HTTP 429) \u2014 retrying with backoff. Note that some providers word a rate limit as a balance problem; check your balance before topping up. Detail: ${detail}`,
       { status, ...retryAfterS !== void 0 ? { retryAfterS } : {} }
     );
   }
@@ -2109,10 +2109,20 @@ function fallbackModelsFor(env, provider) {
   if (pinned && pinned !== DEFAULT_MODELS[provider]) return [];
   return DEFAULT_FALLBACKS[provider] ?? [];
 }
+var DEFAULT_EXCLUDED_PROVIDERS = ["mistral", "groq"];
+function excludedProviders(env) {
+  const parse = (v) => (v ?? "").split(",").map((x) => x.trim().toLowerCase()).filter((x) => x !== "");
+  const excluded = new Set(
+    parse(env["CROSSCHECK_EXCLUDE_PROVIDERS"]).length > 0 ? parse(env["CROSSCHECK_EXCLUDE_PROVIDERS"]) : DEFAULT_EXCLUDED_PROVIDERS
+  );
+  for (const name of parse(env["CROSSCHECK_ENABLE_PROVIDERS"])) excluded.delete(name);
+  return excluded;
+}
 function buildProviders(opts) {
   const out = {};
+  const excluded = excludedProviders(opts.env);
   const anthropicKey = opts.env["ANTHROPIC_API_KEY"];
-  if (anthropicKey) {
+  if (anthropicKey && !excluded.has("anthropic")) {
     const model = opts.env["ANTHROPIC_MODEL"] ?? DEFAULT_MODELS.anthropic;
     out["anthropic"] = makeAnthropicProvider(model, anthropicKey, opts, fallbackModelsFor(opts.env, "anthropic"));
   }
@@ -2128,11 +2138,12 @@ function buildProviders(opts) {
   for (const s of openAiCompatSpec) {
     const apiKey = opts.env[s.keyEnv];
     if (!apiKey) continue;
+    if (excluded.has(s.name)) continue;
     const model = opts.env[s.modelEnv] ?? s.defaultModel;
     out[s.name] = makeOpenAICompatibleProvider(s.name, model, apiKey, opts, fallbackModelsFor(opts.env, s.name));
   }
   const geminiKey = opts.env["GEMINI_API_KEY"];
-  if (geminiKey) {
+  if (geminiKey && !excluded.has("gemini")) {
     const model = opts.env["GEMINI_MODEL"] ?? DEFAULT_MODELS.gemini;
     out["gemini"] = makeGeminiProvider(model, geminiKey, opts, fallbackModelsFor(opts.env, "gemini"));
   }
@@ -2331,7 +2342,7 @@ import { z } from "zod";
 // src/server-meta.ts
 init_esm_shims();
 var SERVER_NAME = "crosscheck-agent";
-var SERVER_VERSION = true ? "0.2.23" : "0.0.0-dev";
+var SERVER_VERSION = true ? "0.2.25" : "0.0.0-dev";
 
 // src/tools/audit.ts
 init_esm_shims();
@@ -6114,11 +6125,20 @@ ${ctxBody}` });
     });
   };
   const onAnswer = opts.onAnswer;
-  const workerCall = onAnswer ? async (p) => {
+  const onPanelistStart = opts.onPanelistStart;
+  const workerCall = onAnswer || onPanelistStart ? async (p) => {
+    if (onPanelistStart) {
+      try {
+        onPanelistStart(p.name, p.model);
+      } catch {
+      }
+    }
     const answer = await dispatchOne(p);
-    try {
-      onAnswer(answer, p.name);
-    } catch {
+    if (onAnswer) {
+      try {
+        onAnswer(answer, p.name);
+      } catch {
+      }
     }
     return answer;
   } : dispatchOne;
@@ -10447,6 +10467,12 @@ ${prior.body}` });
       content: `This is round ${rnd} of ${maxRounds}. Reply for this round.`
     });
     for (const p of selected) {
+      if (opts.onPanelistStart) {
+        try {
+          opts.onPanelistStart(p.name, p.model, rnd);
+        } catch {
+        }
+      }
       const entry = await callPanelist(p, roundMessages);
       const withRound = { ...entry, round: rnd };
       transcript.push(withRound);
@@ -12910,7 +12936,7 @@ var CHECK_INTERVAL_SECONDS = 3 * 24 * 60 * 60;
 var DEFAULT_PACKAGE = "crosscheck-cli";
 var FETCH_TIMEOUT_MS = 3e3;
 function engineVersion() {
-  return true ? "0.2.23" : "0.0.0-dev";
+  return true ? "0.2.25" : "0.0.0-dev";
 }
 function defaultUpdateCachePath() {
   const base = process.env["CROSSCHECK_DATA_DIR"] || path10.join(os.homedir() || os.tmpdir(), ".crosscheck");