feat: keep only known providers

Author: razmser

src/models.ts

@@ -31,6 +31,16 @@ const DEFAULT_COST = {
   cache_write: 0,
 };
 
+type Protocol = "openai" | "anthropic";
+
+// Providers we explicitly know how to route. Models from any provider not
+// listed here are skipped. Adding a provider is a one-line change here.
+const PROVIDERS = new Map<string, { protocol: Protocol }>([
+  ["openai", { protocol: "openai" }],
+  ["anthropic", { protocol: "anthropic" }],
+  ["deepseek", { protocol: "anthropic" }],
+]);
+
 type ModelDevEntry = {
   id?: string;
   name?: string;
@@ -97,10 +107,9 @@ export type ConfigModel = {
 
 function buildLookupMap(modelsDevData: ModelsDevData) {
   const byFullId = new Map<string, ModelDevEntry>();
-  const allowedProviders = new Set(["openai", "anthropic", "deepseek"]);
 
   for (const [provider, providerData] of Object.entries(modelsDevData)) {
-    if (!allowedProviders.has(provider) || !providerData?.models) continue;
+    if (!PROVIDERS.has(provider) || !providerData?.models) continue;
     for (const [modelId, entry] of Object.entries(providerData.models)) {
       byFullId.set(`${provider}/${modelId}`, entry);
     }
@@ -156,10 +165,6 @@ export async function fetchHubModels(): Promise<HubResponse> {
   return res.json() as Promise<HubResponse>;
 }
 
-function usesAnthropicApi(provider: string): boolean {
-  return provider === "anthropic" || provider === "deepseek";
-}
-
 export function buildConfigModels(
   modelsDevData: ModelsDevData,
   hubData: HubResponse,
@@ -169,9 +174,10 @@ export function buildConfigModels(
   const warnings: string[] = [];
 
   for (const [provider, providerData] of Object.entries(hubData.providers)) {
-    if (!providerData?.models) continue;
+    const known = PROVIDERS.get(provider);
+    if (!known || !providerData?.models) continue;
 
-    const anthropic = usesAnthropicApi(provider);
+    const anthropic = known.protocol === "anthropic";
 
     for (const [modelId, hubModel] of Object.entries(providerData.models)) {
       const entry = resolveEntry(provider, modelId, byFullId);

test/models.test.ts

@@ -290,36 +290,65 @@ describe("buildConfigModels", () => {
     expect(models["shared-id"].limit.context).toBe(100000);
   });
 
-  it("does not resolve from non-allowed providers in models.dev", () => {
-    const modelsDevData = {
-      "provider-a": {
-        models: {
-          "some-model": {
-            id: "some-model",
-            name: "Should Not Match",
-            cost: { input: 99 },
+  it("skips unknown hub providers silently", () => {
+    const hubData = {
+      providers: {
+        google: {
+          models: {
+            "gemini-3-pro": { display_name: "Gemini 3 Pro" },
           },
         },
       },
     };
 
+    const { models, warnings } = buildConfigModels(MODELS_DEV_FIXTURE, hubData);
+
+    expect(models).toEqual({});
+    expect(warnings).toEqual([]);
+  });
+
+  it("skips providers named like inherited object properties", () => {
     const hubData = {
       providers: {
-        "provider-a": {
+        toString: {
+          models: {
+            "evil-model": { display_name: "Evil Model" },
+          },
+        },
+        constructor: {
           models: {
-            "some-model": { display_name: "Hub Model" },
+            "ctor-model": { display_name: "Ctor Model" },
           },
         },
       },
     };
 
-    const { models, warnings } = buildConfigModels(modelsDevData, hubData);
+    const { models, warnings } = buildConfigModels(MODELS_DEV_FIXTURE, hubData);
 
-    expect(warnings).toEqual([
-      "provider-a/some-model not found in models.dev — using defaults",
-    ]);
-    expect(models["some-model"].name).toBe("Hub Model");
-    expect(models["some-model"].cost.input).toBe(0);
+    expect(models).toEqual({});
+    expect(warnings).toEqual([]);
+  });
+
+  it("registers only known providers when hub mixes known and unknown", () => {
+    const hubData = {
+      providers: {
+        openai: {
+          models: {
+            "gpt-5.4-nano": { display_name: "GPT-5.4 Nano" },
+          },
+        },
+        google: {
+          models: {
+            "gemini-3-pro": { display_name: "Gemini 3 Pro" },
+          },
+        },
+      },
+    };
+
+    const { models, warnings } = buildConfigModels(MODELS_DEV_FIXTURE, hubData);
+
+    expect(Object.keys(models)).toEqual(["gpt-5.4-nano"]);
+    expect(warnings).toEqual([]);
   });
 
   it("uses hub display_name as fallback when models.dev entry has no name", () => {