fix: address review findings from PR #475 and #477

packages/core/src/curator.ts

@@ -118,7 +118,7 @@ function filterOps(arr: unknown[]): CuratorOp[] {
         typeof o.category === "string" &&
         typeof o.title === "string" &&
         typeof o.content === "string" &&
-        typeof o.scope === "string"
+        (o.scope === "project" || o.scope === "global")
       );
     }
     if (o.op === "update") {

packages/core/src/embedding.ts

@@ -616,9 +616,10 @@ let remoteFallbackLogged = false;
  * produces 401 errors.
  */
 function looksLikeApiKey(key: string): boolean {
-  // Real API keys are at least 20 characters and don't look like
-  // common placeholders.
-  return key.length >= 20;
+  // Real API keys are at least 20 characters, don't contain whitespace,
+  // and aren't common placeholders.
+  const trimmed = key.trim();
+  return trimmed.length >= 20 && !/\s/.test(trimmed);
 }
 
 /**

packages/gateway/instrument.ts

@@ -87,9 +87,9 @@ if (sentryEnabled && !Sentry.isInitialized()) {
     /LocalProviderUnavailableError/,
     /ECONNRESET\b/,
     /ECONNREFUSED\b/,
-    // Remote embedding fallback with invalid/placeholder API key
-    /Incorrect API key/i,
-    /onnxruntime/i,
+    // Remote embedding fallback with invalid/placeholder API key (OpenAI SDK format)
+    /Incorrect API key provided/i,
+    // ONNX runtime init failures on various platforms
     /Cannot find package 'onnxruntime-node'/,
     /LoadLibrary failed/,
     /Protobuf parsing failed/,

packages/gateway/src/translate/anthropic.ts

@@ -518,6 +518,10 @@ export function parseAnthropicResponseJSON(
             input: block.input,
           });
           break;
+        default:
+          // Preserve unknown block types as text so no data is silently lost
+          content.push({ type: "text", text: JSON.stringify(block) });
+          break;
       }
     }
   }