scalemax 0.1.35 → 0.1.36

package/dist/configure/models.js

@@ -16,6 +16,23 @@ const preferredOpenAi = [
     'gpt-5.4-mini',
     'gpt-5.3-codex',
     'codex-auto-review',
+    // Gemini / Grok / Qwen ride the same OpenAI-compatible route, so they are
+    // ranked in the same list. Ordering across families is harmless: a key is
+    // scoped to ONE family, so filterModelsForScope has already reduced the
+    // candidates to that family before this runs. Listing them means each family
+    // picks its own flagship rather than whatever the catalog happened to return
+    // first — preferredFrom's fallback made it work, but arbitrarily.
+    'gemini-3-pro-preview',
+    'gemini-3.1-pro-preview',
+    'gemini-3.6-flash',
+    'gemini-3.5-flash',
+    'gemini-3-flash-preview',
+    'gemini-3.1-flash-lite-preview',
+    'gemini-2.5-flash',
+    'gemini-2.5-flash-lite',
+    'grok-4.5',
+    'qwen3.7-plus',
+    'qwen3.6-plus',
     'glm-5.2',
     'deepseek-v4-flash'
 ];

package/dist/types/client.d.ts

@@ -1,5 +1,5 @@
 export type ClientId = 'codex' | 'cursor' | 'roo-code' | 'cline' | 'continue' | 'trae-solo' | 'claude' | 'opencode' | 'openclaw' | 'hermes' | 'cherry-studio' | 'api-code';
-export type ProviderScope = 'openai' | 'anthropic' | 'both' | 'deepseek-v4-flash' | 'glm-5.2';
+export type ProviderScope = 'openai' | 'anthropic' | 'both' | 'gemini' | 'grok' | 'qwen' | 'deepseek-v4-flash' | 'glm-5.2';
 export interface ClientDefinition {
     id: ClientId;
     name: string;

package/dist/utils/api.d.ts

@@ -1,6 +1,6 @@
 export declare const DEEPSEEK_V4_FLASH_SCOPE: "deepseek-v4-flash";
 export declare const GLM_5_2_SCOPE: "glm-5.2";
-export type ProviderScope = 'openai' | 'anthropic' | 'both' | typeof DEEPSEEK_V4_FLASH_SCOPE | typeof GLM_5_2_SCOPE;
+export type ProviderScope = 'openai' | 'anthropic' | 'both' | 'gemini' | 'grok' | 'qwen' | typeof DEEPSEEK_V4_FLASH_SCOPE | typeof GLM_5_2_SCOPE;
 export interface ModelInfo {
     id: string;
     object?: string;

package/dist/utils/api.js

@@ -3,6 +3,18 @@ import { redactApiKey, sanitizeApiKey } from './apiKey.js';
 import { scaleMaxFetch } from './network.js';
 export const DEEPSEEK_V4_FLASH_SCOPE = 'deepseek-v4-flash';
 export const GLM_5_2_SCOPE = 'glm-5.2';
+/**
+ * Provider FAMILIES sold as their own scope. Each reaches only its own models;
+ * `both` deliberately does not inherit them, matching the gateway.
+ */
+const FAMILY_SCOPES = ['gemini', 'grok', 'qwen'];
+function isFamilyScope(scope) {
+    return FAMILY_SCOPES.includes(scope);
+}
+/** The family a model belongs to, from the catalog's own owned_by/provider. */
+function modelFamily(model) {
+    return String(model.provider || model.owned_by || '').trim().toLowerCase();
+}
 // Keep only aliases that are no longer offered. Direct GPT-5.6 Sol is an
 // active Codex model and must remain available to all generated clients.
 export const RETIRED_MODEL_IDS = new Set(['fable-5-ultra']);
@@ -41,6 +53,18 @@ export function filterModelsForScope(models, scope) {
             return scope === exactScope;
         if (scope === DEEPSEEK_V4_FLASH_SCOPE || scope === GLM_5_2_SCOPE)
             return false;
+        // A family scope reaches ONLY its own family. This must be an allowlist:
+        // the old final line fell through to `!isAnthropicModel(model)` for any
+        // unrecognised scope, so a gemini key was offered every non-Anthropic model
+        // — GPT, Codex, Grok, Qwen — and `scalemax setup` wrote a client profile
+        // whose every model 403s at the gateway.
+        if (isFamilyScope(scope))
+            return modelFamily(model) === scope;
+        // Conversely, a family model must not leak into the broad scopes: an
+        // openai/both key cannot call them (the gateway prices those families
+        // separately), so offering them here would be the same lie in reverse.
+        if (FAMILY_SCOPES.includes(modelFamily(model)))
+            return false;
         return scope === 'both' || (scope === 'anthropic' ? isAnthropicModel(model) : !isAnthropicModel(model));
     });
 }

package/dist/utils/fs.js

@@ -7,7 +7,15 @@ export async function exists(p) { return fs.pathExists(p); }
 export async function syncParentDirectory(directory, platform = process.platform) {
     // Windows does not support fsync on directory handles and commonly returns EPERM.
     // The file itself is still fsynced before the atomic rename on every platform.
-    if (platform === 'win32')
+    //
+    // BOTH the injected platform and the REAL host are checked. The parameter
+    // exists so a test can simulate another OS's config layout, but fsync on a
+    // directory handle is a property of the machine actually running, not of the
+    // OS being simulated — so simulating linux on a Windows host made 49 tests
+    // fail with EPERM on a syscall that host can never support. Guarding on the
+    // host too costs Linux nothing: there process.platform is not 'win32', so the
+    // durability fsync still runs exactly as before.
+    if (platform === 'win32' || process.platform === 'win32')
         return;
     const dir = await fsp.open(directory, 'r');
     try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "scalemax",
-  "version": "0.1.35",
+  "version": "0.1.36",
   "description": "Universal ScaleMax installer for AI coding clients",
   "type": "module",
   "bin": {