crosscheck-mcp 0.2.24 → 0.2.26

package/dist/node-stdio.d.cts

@@ -1,50 +1,9 @@
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
 
-/** A live bridge to a Python crosscheck-agent child. */
-interface BridgeHandle {
-    /** Names of the tools exposed by the Python child (from its
-     *  `tools/list` response). */
-    readonly toolNames: ReadonlySet<string>;
-    /** PID of the spawned Python child process, or `null` if the
-     *  transport hasn't started yet / has already closed. Useful for
-     *  shutdown verification and host-side diagnostics. */
-    readonly pid: number | null;
-    /** Forward a `tools/call` to the Python child and return the result
-     *  envelope verbatim. */
-    callTool(name: string, args: Record<string, unknown>): Promise<{
-        content: {
-            type: string;
-            text: string;
-        }[];
-        isError?: boolean;
-    }>;
-    /** Re-fetch the tool list (in case the child surfaces new tools mid-
-     *  session). Returns the new tool names. */
-    refreshTools(): Promise<ReadonlySet<string>>;
-    /** Tear down the bridge cleanly. Idempotent — repeat calls are no-ops. */
-    close(): Promise<void>;
-}
-
-/** Per-call node-cache config block. Mirrors Python's CFG.node_cache. */
-interface NodeCacheCfg {
-    /** Master enable flag. Defaults to true when the cfg block exists
-     *  in opts; explicitly set false to short-circuit reads + writes. */
-    enabled?: boolean;
-    /** Directory to store cache entries. Relative paths are resolved
-     *  against `repoRoot` when supplied; otherwise the CWD. */
-    dir?: string;
-    /** Stale-by-mtime threshold (seconds). 0 disables TTL eviction. */
-    ttl_seconds?: number;
-    /** Hard cap on the number of JSON entries on disk. 0 disables. */
-    max_entries?: number;
-    /** Hard cap on cumulative file size (bytes). 0 disables. */
-    max_cache_bytes?: number;
-}
-
-interface WorkerToolsCfg {
-    cost_cap_usd?: unknown;
-    cost_cap_mode?: unknown;
+interface PricingDoc {
+    /** `<provider>` -> `<model>` -> ModelRates. */
+    [provider: string]: unknown;
 }
 
 /** sessions row. */
@@ -363,19 +322,6 @@ interface Storage extends StorageRead, StorageWrite {
     close(): Promise<void>;
 }
 
-interface BreakerCfg {
-    max_session_cost_usd?: number;
-    max_session_tokens?: number;
-    max_session_wall_seconds?: number;
-    max_dag_nodes?: number;
-    max_dag_depth?: number;
-}
-
-interface PricingDoc {
-    /** `<provider>` -> `<model>` -> ModelRates. */
-    [provider: string]: unknown;
-}
-
 /** One provider call's token + cost record. Mirrors `Usage.to_dict()`
  *  output exactly. */
 interface Usage {
@@ -451,6 +397,60 @@ interface Provider {
     send(args: SendArgs): Promise<SendResult>;
 }
 
+/** A live bridge to a Python crosscheck-agent child. */
+interface BridgeHandle {
+    /** Names of the tools exposed by the Python child (from its
+     *  `tools/list` response). */
+    readonly toolNames: ReadonlySet<string>;
+    /** PID of the spawned Python child process, or `null` if the
+     *  transport hasn't started yet / has already closed. Useful for
+     *  shutdown verification and host-side diagnostics. */
+    readonly pid: number | null;
+    /** Forward a `tools/call` to the Python child and return the result
+     *  envelope verbatim. */
+    callTool(name: string, args: Record<string, unknown>): Promise<{
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError?: boolean;
+    }>;
+    /** Re-fetch the tool list (in case the child surfaces new tools mid-
+     *  session). Returns the new tool names. */
+    refreshTools(): Promise<ReadonlySet<string>>;
+    /** Tear down the bridge cleanly. Idempotent — repeat calls are no-ops. */
+    close(): Promise<void>;
+}
+
+/** Per-call node-cache config block. Mirrors Python's CFG.node_cache. */
+interface NodeCacheCfg {
+    /** Master enable flag. Defaults to true when the cfg block exists
+     *  in opts; explicitly set false to short-circuit reads + writes. */
+    enabled?: boolean;
+    /** Directory to store cache entries. Relative paths are resolved
+     *  against `repoRoot` when supplied; otherwise the CWD. */
+    dir?: string;
+    /** Stale-by-mtime threshold (seconds). 0 disables TTL eviction. */
+    ttl_seconds?: number;
+    /** Hard cap on the number of JSON entries on disk. 0 disables. */
+    max_entries?: number;
+    /** Hard cap on cumulative file size (bytes). 0 disables. */
+    max_cache_bytes?: number;
+}
+
+interface WorkerToolsCfg {
+    cost_cap_usd?: unknown;
+    cost_cap_mode?: unknown;
+}
+
+interface BreakerCfg {
+    max_session_cost_usd?: number;
+    max_session_tokens?: number;
+    max_session_wall_seconds?: number;
+    max_dag_nodes?: number;
+    max_dag_depth?: number;
+}
+
 interface ConfigPinningConfig {
     /** Pin file location. Repo-relative or absolute. */
     pin_file?: string;

package/dist/node-stdio.d.ts

@@ -1,50 +1,9 @@
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
 
-/** A live bridge to a Python crosscheck-agent child. */
-interface BridgeHandle {
-    /** Names of the tools exposed by the Python child (from its
-     *  `tools/list` response). */
-    readonly toolNames: ReadonlySet<string>;
-    /** PID of the spawned Python child process, or `null` if the
-     *  transport hasn't started yet / has already closed. Useful for
-     *  shutdown verification and host-side diagnostics. */
-    readonly pid: number | null;
-    /** Forward a `tools/call` to the Python child and return the result
-     *  envelope verbatim. */
-    callTool(name: string, args: Record<string, unknown>): Promise<{
-        content: {
-            type: string;
-            text: string;
-        }[];
-        isError?: boolean;
-    }>;
-    /** Re-fetch the tool list (in case the child surfaces new tools mid-
-     *  session). Returns the new tool names. */
-    refreshTools(): Promise<ReadonlySet<string>>;
-    /** Tear down the bridge cleanly. Idempotent — repeat calls are no-ops. */
-    close(): Promise<void>;
-}
-
-/** Per-call node-cache config block. Mirrors Python's CFG.node_cache. */
-interface NodeCacheCfg {
-    /** Master enable flag. Defaults to true when the cfg block exists
-     *  in opts; explicitly set false to short-circuit reads + writes. */
-    enabled?: boolean;
-    /** Directory to store cache entries. Relative paths are resolved
-     *  against `repoRoot` when supplied; otherwise the CWD. */
-    dir?: string;
-    /** Stale-by-mtime threshold (seconds). 0 disables TTL eviction. */
-    ttl_seconds?: number;
-    /** Hard cap on the number of JSON entries on disk. 0 disables. */
-    max_entries?: number;
-    /** Hard cap on cumulative file size (bytes). 0 disables. */
-    max_cache_bytes?: number;
-}
-
-interface WorkerToolsCfg {
-    cost_cap_usd?: unknown;
-    cost_cap_mode?: unknown;
+interface PricingDoc {
+    /** `<provider>` -> `<model>` -> ModelRates. */
+    [provider: string]: unknown;
 }
 
 /** sessions row. */
@@ -363,19 +322,6 @@ interface Storage extends StorageRead, StorageWrite {
     close(): Promise<void>;
 }
 
-interface BreakerCfg {
-    max_session_cost_usd?: number;
-    max_session_tokens?: number;
-    max_session_wall_seconds?: number;
-    max_dag_nodes?: number;
-    max_dag_depth?: number;
-}
-
-interface PricingDoc {
-    /** `<provider>` -> `<model>` -> ModelRates. */
-    [provider: string]: unknown;
-}
-
 /** One provider call's token + cost record. Mirrors `Usage.to_dict()`
  *  output exactly. */
 interface Usage {
@@ -451,6 +397,60 @@ interface Provider {
     send(args: SendArgs): Promise<SendResult>;
 }
 
+/** A live bridge to a Python crosscheck-agent child. */
+interface BridgeHandle {
+    /** Names of the tools exposed by the Python child (from its
+     *  `tools/list` response). */
+    readonly toolNames: ReadonlySet<string>;
+    /** PID of the spawned Python child process, or `null` if the
+     *  transport hasn't started yet / has already closed. Useful for
+     *  shutdown verification and host-side diagnostics. */
+    readonly pid: number | null;
+    /** Forward a `tools/call` to the Python child and return the result
+     *  envelope verbatim. */
+    callTool(name: string, args: Record<string, unknown>): Promise<{
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError?: boolean;
+    }>;
+    /** Re-fetch the tool list (in case the child surfaces new tools mid-
+     *  session). Returns the new tool names. */
+    refreshTools(): Promise<ReadonlySet<string>>;
+    /** Tear down the bridge cleanly. Idempotent — repeat calls are no-ops. */
+    close(): Promise<void>;
+}
+
+/** Per-call node-cache config block. Mirrors Python's CFG.node_cache. */
+interface NodeCacheCfg {
+    /** Master enable flag. Defaults to true when the cfg block exists
+     *  in opts; explicitly set false to short-circuit reads + writes. */
+    enabled?: boolean;
+    /** Directory to store cache entries. Relative paths are resolved
+     *  against `repoRoot` when supplied; otherwise the CWD. */
+    dir?: string;
+    /** Stale-by-mtime threshold (seconds). 0 disables TTL eviction. */
+    ttl_seconds?: number;
+    /** Hard cap on the number of JSON entries on disk. 0 disables. */
+    max_entries?: number;
+    /** Hard cap on cumulative file size (bytes). 0 disables. */
+    max_cache_bytes?: number;
+}
+
+interface WorkerToolsCfg {
+    cost_cap_usd?: unknown;
+    cost_cap_mode?: unknown;
+}
+
+interface BreakerCfg {
+    max_session_cost_usd?: number;
+    max_session_tokens?: number;
+    max_session_wall_seconds?: number;
+    max_dag_nodes?: number;
+    max_dag_depth?: number;
+}
+
 interface ConfigPinningConfig {
     /** Pin file location. Repo-relative or absolute. */
     pin_file?: string;

package/dist/node-stdio.js

@@ -1062,7 +1062,12 @@ function loadPricing(path16) {
 function modelPricing(pricing, provider, model) {
   const block = pricing[provider];
   if (!block || typeof block !== "object" || Array.isArray(block)) return null;
-  const entry = block[model];
+  const table = block;
+  let entry = table[model];
+  if (!entry || typeof entry !== "object" || Array.isArray(entry)) {
+    const best = Object.keys(table).filter((k) => model.startsWith(k)).sort((a, b) => b.length - a.length)[0];
+    entry = best !== void 0 ? table[best] : void 0;
+  }
   if (!entry || typeof entry !== "object" || Array.isArray(entry)) return null;
   const e = entry;
   return {
@@ -1490,6 +1495,14 @@ async function acquireRateLimit(provider, deps) {
 // src/providers/anthropic.ts
 var ANTHROPIC_API_URL = "https://api.anthropic.com/v1/messages";
 var ANTHROPIC_VERSION_HEADER = "2023-06-01";
+var ADAPTIVE_THINKING_PREFIXES = [
+  "claude-fable-5",
+  "claude-opus-5-5"
+];
+function rejectsDisabledThinking(model) {
+  const m = model.toLowerCase();
+  return ADAPTIVE_THINKING_PREFIXES.some((p) => m.startsWith(p));
+}
 var ANTHROPIC_STRUCTURED_TOOL_NAME = "structured_output";
 function applyPromptCaching(body, env = process.env) {
   const flag = (env["CROSSCHECK_ANTHROPIC_PROMPT_CACHE"] ?? "").trim();
@@ -1534,7 +1547,7 @@ function buildAnthropicRequest(opts) {
   }
   applyPromptCaching(body);
   if (isReasoningModel("anthropic", opts.model)) {
-    if (opts.model.toLowerCase().startsWith("claude-fable-5")) {
+    if (rejectsDisabledThinking(opts.model)) {
       body.thinking = { type: "adaptive" };
       body.output_config = { effort: "low" };
     } else {
@@ -2056,7 +2069,7 @@ async function sendOpenAICompatible(args) {
 
 // src/providers/registry.ts
 var DEFAULT_MODELS = {
-  anthropic: "claude-opus-5",
+  anthropic: "claude-opus-5-5",
   openai: "gpt-5.6-sol",
   xai: "grok-4-latest",
   mistral: "mistral-large-latest",
@@ -2073,7 +2086,12 @@ var DEFAULT_FALLBACKS = {
   // about.
   openai: ["gpt-5"],
   // 3.8 Flash is recent enough that some projects won't have it yet.
-  gemini: ["gemini-3.1-pro-preview"]
+  gemini: ["gemini-3.1-pro-preview"],
+  // Opus 5.5 is new enough that an account could still be waiting on it.
+  // Opus 5 is the same family one step back — and this chain is consulted
+  // ONLY for a model-access failure, never for a bad key or a rate limit,
+  // so it can't quietly downgrade anyone who simply hit a 429.
+  anthropic: ["claude-opus-5"]
 };
 var MODEL_ENV_VARS = {
   anthropic: "ANTHROPIC_MODEL",
@@ -2342,7 +2360,7 @@ import { z } from "zod";
 // src/server-meta.ts
 init_esm_shims();
 var SERVER_NAME = "crosscheck-agent";
-var SERVER_VERSION = true ? "0.2.24" : "0.0.0-dev";
+var SERVER_VERSION = true ? "0.2.26" : "0.0.0-dev";
 
 // src/tools/audit.ts
 init_esm_shims();
@@ -6125,11 +6143,20 @@ ${ctxBody}` });
     });
   };
   const onAnswer = opts.onAnswer;
-  const workerCall = onAnswer ? async (p) => {
+  const onPanelistStart = opts.onPanelistStart;
+  const workerCall = onAnswer || onPanelistStart ? async (p) => {
+    if (onPanelistStart) {
+      try {
+        onPanelistStart(p.name, p.model);
+      } catch {
+      }
+    }
     const answer = await dispatchOne(p);
-    try {
-      onAnswer(answer, p.name);
-    } catch {
+    if (onAnswer) {
+      try {
+        onAnswer(answer, p.name);
+      } catch {
+      }
     }
     return answer;
   } : dispatchOne;
@@ -10458,6 +10485,12 @@ ${prior.body}` });
       content: `This is round ${rnd} of ${maxRounds}. Reply for this round.`
     });
     for (const p of selected) {
+      if (opts.onPanelistStart) {
+        try {
+          opts.onPanelistStart(p.name, p.model, rnd);
+        } catch {
+        }
+      }
       const entry = await callPanelist(p, roundMessages);
       const withRound = { ...entry, round: rnd };
       transcript.push(withRound);
@@ -12921,7 +12954,7 @@ var CHECK_INTERVAL_SECONDS = 3 * 24 * 60 * 60;
 var DEFAULT_PACKAGE = "crosscheck-cli";
 var FETCH_TIMEOUT_MS = 3e3;
 function engineVersion() {
-  return true ? "0.2.24" : "0.0.0-dev";
+  return true ? "0.2.26" : "0.0.0-dev";
 }
 function defaultUpdateCachePath() {
   const base = process.env["CROSSCHECK_DATA_DIR"] || path10.join(os.homedir() || os.tmpdir(), ".crosscheck");