[aurorax-neo]

Problem

The Composer chip, model picker, settings panes, and runtime binding lookups used tolerant model-ID matching that could conflate proxy/model with model, borrow another route's metadata, or display a friendly catalog name instead of the configured wire ID.

Changes (36 files, +495 −190)

Identity

• modelWireIdsEqual(): new exact case-insensitive full-ID comparator for configured-model identity.
• Composer: chip label is the raw modelId; list rows show the complete wire ID; selection, binding lookup, and reasoning projection all use the exact comparator.
• Settings: default model, image model, subagent pin, and advanced-pane metadata keyed by provider + complete wire ID.
• Runtime: binding and context-window lookups match the exact stored ID.

Catalog safety

• providerFor() no longer picks the first catalog provider on a shared API URL when no vendor key matches.
• findModel() requires a single unambiguous candidate when no preferred provider resolves.

Image-generation alignment

• imageGenerationBindingAvailable() mirrors the runtime service's exact check.

Default-model readiness

• Empty defaultModelId resolves through the same fallback chain as the runtime.
• A stale image-valued default is shown with its wire ID and an unavailable hint.

Tests

• Desktop JS: 2688/2688 pass. Shared: 1012/1012. Host-runtime: 47/47.
• TypeScript, build, git diff --check, and Biome lint pass.
• New regressions: prefixed/unprefixed coexistence, no cross-borrow, shared-API ambiguity, stale defaults, reasoning projection scope.