fix: validate serverless agent model selections

[motatoes]

Summary

• compile exact static useModel() selections into immutable agent artifacts, including literal conditional branches
• reject dynamic model expressions that cannot be enumerated at deployment time
• derive the authoritative registry from the digest-checked artifact at the public edge instead of trusting request metadata
• propagate and expose admitted model/default metadata through the deployment API

Consequential decisions and risks

• Deployment is now the first validation boundary; an invalid exact identifier must not become a runtime downgrade.
• Artifact derivation keeps the public edge authoritative but requires a coordinated managed-runtime rollout.
• Existing artifacts without a registry remain representable as legacy deployments; the runtime PR owns fail-closed dispatch behavior.

Review map

• cli/src/project.ts: static selection discovery and artifact registry
• cli/src/dev.ts, cli/src/api.ts: deployment propagation and response types
• cloudflare-workers/api-edge/src/managed_agents.ts: digest-checked registry extraction and public mapping
• adjacent tests cover literals, conditionals, dynamic rejection, propagation, and malformed artifacts

Verification

• CLI build passed
• 84 CLI tests passed
• 193 API-edge tests passed
• mo-dev deployment response exposed exact Sonnet 5 metadata; an unavailable exact ID was rejected with HTTP 409 invalid_model_selection

Remaining gates

• merge and roll out with the coordination and managed-runtime PRs
• update public availability claims only after the complete slice ships

Related work

• coordination PR: https://github.com/diggerhq/serverless-agents-ws/pull/29
• managed runtime PR: https://github.com/diggerhq/blue/pull/73

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​opencomputer/​cli@​0.7.1 ⏵ 0.7.2	N/A	N/A	N/A	N/A	N/A

View full report