@hilbras/omnihilbras 1.86.0 → 1.87.0

package/dist/index.d.ts

@@ -24,6 +24,7 @@ export * from './providers/deepseek-web/index.js';
 export * from './providers/qwen-web/index.js';
 export * from './providers/gemini-web/index.js';
 export * from './providers/tokenharbor-web/index.js';
+export * from './providers/duckduckgo-web/index.js';
 export * from './core/url.js';
 export * from './core/bounded-map.js';
 export * from './core/provider-slugs.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,wCAAwC,CAAC;AACvD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,uCAAuC,CAAC;AACtD,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kCAAkC,CAAC;AACjD,cAAc,0CAA0C,CAAC;AACzD,cAAc,mCAAmC,CAAC;AAClD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,sCAAsC,CAAC;AACrD,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,wCAAwC,CAAC;AACvD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,uCAAuC,CAAC;AACtD,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kCAAkC,CAAC;AACjD,cAAc,0CAA0C,CAAC;AACzD,cAAc,mCAAmC,CAAC;AAClD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,sCAAsC,CAAC;AACrD,cAAc,qCAAqC,CAAC;AACpD,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC"}

package/dist/index.js

@@ -24,6 +24,7 @@ export * from './providers/deepseek-web/index.js';
 export * from './providers/qwen-web/index.js';
 export * from './providers/gemini-web/index.js';
 export * from './providers/tokenharbor-web/index.js';
+export * from './providers/duckduckgo-web/index.js';
 export * from './core/url.js';
 export * from './core/bounded-map.js';
 export * from './core/provider-slugs.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,wCAAwC,CAAC;AACvD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,uCAAuC,CAAC;AACtD,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kCAAkC,CAAC;AACjD,cAAc,0CAA0C,CAAC;AACzD,cAAc,mCAAmC,CAAC;AAClD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,sCAAsC,CAAC;AACrD,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,wCAAwC,CAAC;AACvD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,uCAAuC,CAAC;AACtD,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kCAAkC,CAAC;AACjD,cAAc,0CAA0C,CAAC;AACzD,cAAc,mCAAmC,CAAC;AAClD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,sCAAsC,CAAC;AACrD,cAAc,qCAAqC,CAAC;AACpD,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC"}

package/dist/providers/cline/index.js

@@ -44,7 +44,7 @@ const defaultRefreshSkewMs = 60_000;
 /** Refreshes in flight, keyed by the login they renew, so adapters that share a login share one renewal. */
 const inFlightRefreshes = new Map();
 /** Reported to Cline as this client's version. */
-const omnihilbrasVersion = '1.86.0';
+const omnihilbrasVersion = '1.87.0';
 /** Cline only accepts WorkOS JWTs with an explicit prefix. */
 export function toClineAccessToken(token) {
     const trimmed = token.trim();

package/dist/providers/duckduckgo-web/index.d.ts

@@ -0,0 +1,264 @@
+import { ProviderError } from '../../core/errors.js';
+import type { ChatChunk, ChatRequest, ChatResponse, CredentialValidation, Model, ProviderAdapter, ProviderCredential, ProviderHealth, ProviderRequestContext } from '../../core/types.js';
+/**
+ * DuckDuckGo AI Chat (`duck.ai`), as a web-cookie provider whose cookie is **optional**.
+ *
+ * ## Why the cookie is optional, and why the card still offers one
+ *
+ * The service is anonymous: `/duckchat/v1/models` answers 200 with no credential at all, and a turn works
+ * without one — measured from this host, twice, before any of this was written. So a pasted cookie is
+ * hardening against rate limits rather than a requirement, and the card says so. Two things follow that the
+ * code has to get right: a credential of `{ type: 'none' }` must be accepted everywhere a cookie is, and a
+ * pasted cookie must never be *claimed* to be verified, because this service does not read it.
+ *
+ * ## The three traps, all measured rather than read
+ *
+ * 1. **The delta arrives in `message`, not `content`.** A reader that checks only `content` returns HTTP 200
+ *    with an **empty answer** — the spike's own first attempt did exactly that, which is why
+ *    `duckDuckGoWebContent` checks both and why the test pins the empty case.
+ * 2. **Free models are `accessTier` on the model itself.** The live catalog marks 6 models free there, and
+ *    only 3 by `reasoningEffortAccess[].accessTier` — a parser keyed on the wrong field silently drops half
+ *    the free lineup. See `freeDuckDuckGoWebModels`.
+ * 3. **The stream opens with `data: [CHAT_TITLE:...]`**, a non-JSON pseudo-event. `parseDuckDuckGoWebDataLine`
+ *    returns `undefined` for it rather than throwing.
+ *
+ * ## What lives where
+ *
+ * Everything here is testable without a network: the cookie parsing, the catalog filter, the stream parsing,
+ * the payload builder, and every refusal. The handshake, the challenge and the request itself are the
+ * driver's, declared here and implemented in the gateway — the same boundary `gemini-web` uses, and required
+ * here too because the challenge solver needs `node:vm`.
+ */
+export declare const DUCKDUCKGO_WEB: {
+    readonly origin: "https://duck.ai";
+    readonly modelsPath: "/duckchat/v1/models";
+    readonly statusPath: "/duckchat/v1/status";
+    readonly chatPath: "/duckchat/v1/chat";
+    readonly homePath: "/";
+    /**
+     * The model a request gets when it names none.
+     *
+     * `gpt-5.4-mini` because it is free **today** — verified against the live catalog — and because it is the
+     * one free id that has been free on every reading. It is not a promise: a catalog read that no longer lists
+     * it free is refused by name rather than routed to something else. See `freeDuckDuckGoWebModels`.
+     */
+    readonly defaultModel: "gpt-5.4-mini";
+    /** The service's own default effort, and the value the successful requests used. */
+    readonly defaultReasoningEffort: "none";
+    readonly statusTimeoutMs: 15000;
+    readonly catalogTimeoutMs: 15000;
+    readonly homeTimeoutMs: 15000;
+    readonly chatTimeoutMs: 60000;
+    readonly userAgent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36";
+};
+export declare const duckduckgoWebProviderId = "duckduckgo-web";
+/**
+ * A pasted cookie in any of the three shapes a browser hands over.
+ *
+ * Bare value, a full `Cookie:` header line, or a JSON export. Returns `undefined` when the paste carries
+ * nothing, so the caller can tell "the user pasted junk" from "there is no cookie", which are different
+ * answers: the first is a mistake to report, the second is this provider's normal case.
+ */
+export declare function normalizeDuckDuckGoWebCookie(value: string): string | undefined;
+/**
+ * The `Cookie` header for a credential, or `undefined` when there is none to send.
+ *
+ * `{ type: 'none' }` is the **normal** case for this provider, not a missing value: it is what the connect
+ * route stores when the user pastes nothing, and the request goes out without a `Cookie` header. Every other
+ * web-cookie adapter in this repository refuses that credential, so this is the one place the difference is
+ * visible.
+ */
+export declare function duckDuckGoWebCookieHeader(credential: ProviderCredential | undefined): string | undefined;
+export type DuckDuckGoWebModel = {
+    id: string;
+    displayName: string;
+};
+type UnknownRecord = Record<string, unknown>;
+/**
+ * The models the live catalog offers on a **free** tier.
+ *
+ * **The field is `accessTier` on the model itself**, and that is a measurement rather than a reading. Against
+ * the live catalog on 2026-10-17:
+ *
+ * ```
+ * free by model.accessTier                      : 6  (gpt-6-luna, gpt-5.4-mini, claude-haiku-4-5,
+ *                                                    mistral-small-2603, tinfoil/gpt-oss-120b, tinfoil/gemma4-31b)
+ * free by reasoningEffortAccess[].accessTier    : 3  (gpt-5.4-mini, claude-haiku-4-5, tinfoil/gpt-oss-120b)
+ * ```
+ *
+ * Reading the nested field looks more precise and is simply wrong: it describes which *effort levels* an
+ * account tier may select, not whether the model is served. A parser keyed on it silently drops half the
+ * free lineup, which is why the first test in `duckduckgo-web.test.js` asserts both numbers.
+ *
+ * The list is read per request rather than pinned, because the lineup rotates — `gpt-6-luna` had appeared and
+ * three of the source's hardcoded "free" ids no longer were, inside a week.
+ */
+export declare function freeDuckDuckGoWebModels(catalog: unknown): DuckDuckGoWebModel[];
+export declare function duckDuckGoWebModelIds(catalog: unknown): string[];
+/**
+ * One `data:` line, or `undefined` for everything that is not answer text.
+ *
+ * Non-JSON lines are dropped rather than thrown on: the stream opens with `data: [CHAT_TITLE:...]` before any
+ * JSON arrives, and `[DONE]` terminates it. Both are normal, and a parser that threw on them would fail every
+ * turn at the first byte.
+ */
+export declare function parseDuckDuckGoWebDataLine(line: string): UnknownRecord | undefined;
+/**
+ * The text of one event, from `content` **or** `message`.
+ *
+ * This is trap 1, and it is the difference between an answer and a 200 with nothing in it. The live service
+ * sends `{"action":"success","message":"..."}` and then a run of `{"message":"..."}` frames; `content` never
+ * appears. A reader that looked only for `content` — which is what every other provider here sends — would
+ * return an empty string and report success.
+ */
+export declare function duckDuckGoWebContent(event: UnknownRecord | undefined): string;
+/** An RSA public key, as the service expects it inside `durableStream`. */
+export type DuckDuckGoWebPublicKey = {
+    kty: string;
+    n?: string;
+    e?: string;
+    alg: string;
+    ext: boolean;
+    key_ops: string[];
+    use: string;
+};
+/**
+ * The request body.
+ *
+ * `publicKey` is a **parameter**, not generated here, and that is a hard boundary rather than a preference:
+ * generating an RSA key pair needs `node:crypto`, and this module is reachable from the SDK barrel, which the
+ * dashboard imports. `tests/sdk-browser-safety.test.js` fails if anything reachable from that barrel imports a
+ * Node builtin — the 1.42.0 blank page — so the gateway generates the key and passes it in.
+ *
+ * `reasoningEffort` is always sent. The working implementation records it as **required**, with a 400
+ * `ERR_BAD_REQUEST` when omitted, verified live on its side. Not re-measured here, because proving it costs a
+ * chat POST against a rate-limited endpoint, and the requests that succeeded all sent it.
+ */
+export declare function buildDuckDuckGoWebPayload(input: {
+    model: string;
+    messages: readonly {
+        role: string;
+        content: string;
+    }[];
+    publicKey: DuckDuckGoWebPublicKey;
+    conversationId: string;
+    messageId: string;
+    reasoningEffort?: string;
+}): UnknownRecord;
+/**
+ * A refusal with a **kind**, so the adapter decides retryability and the driver only reports what happened.
+ *
+ * The alternative — throwing `ProviderError` from the driver — would put routing policy in the gateway, and
+ * the alternative this file avoids most deliberately is classifying by *message*: `ERR_CHALLENGE` and
+ * `ERR_BN_LIMIT` arrive in the same JSON shape and, per the working implementation's own measurement, the
+ * service maps both to the same user-facing message token. A regex over prose cannot tell them apart; a field
+ * can.
+ */
+export declare class DuckDuckGoWebError extends Error {
+    readonly kind: 'challenge' | 'quota' | 'rate-limit' | 'unavailable' | 'bad-request';
+    readonly overrideCode?: string | undefined;
+    constructor(kind: 'challenge' | 'quota' | 'rate-limit' | 'unavailable' | 'bad-request', message: string, overrideCode?: string | undefined);
+}
+export type DuckDuckGoWebDriver = {
+    /** Whether this host can solve the challenge at all. A `vm` is always present on Node, so this is honest. */
+    available: () => Promise<{
+        ok: true;
+    } | {
+        ok: false;
+        reason: string;
+    }>;
+    /** The live catalog, unfiltered — the adapter decides what is free. */
+    catalog: (input: {
+        timeoutMs?: number;
+        signal?: AbortSignal;
+    }) => Promise<unknown>;
+    /** The handshake, reported as facts: whether a challenge was served and how long solving took. */
+    status: (input: {
+        timeoutMs?: number;
+        signal?: AbortSignal;
+    }) => Promise<{
+        challengeServed: boolean;
+        solvedMs: number;
+    }>;
+    /** One turn. `cookieHeader` is `undefined` when the connection holds `{ type: 'none' }`. */
+    ask: (input: {
+        cookieHeader?: string;
+        model: string;
+        messages: readonly {
+            role: string;
+            content: string;
+        }[];
+        timeoutMs: number;
+        signal?: AbortSignal;
+    }) => Promise<{
+        text: string;
+        model: string;
+    }>;
+};
+export type DuckDuckGoWebAdapterOptions = {
+    driver: DuckDuckGoWebDriver;
+    id?: string;
+    now?: () => number;
+};
+export declare class DuckDuckGoWebAdapter implements ProviderAdapter {
+    readonly id: string;
+    readonly name = "Duck.ai";
+    /**
+     * Streaming is not implemented and saying otherwise would be false: this adapter reads the service's SSE
+     * and hands back the assembled answer, so no token arrives "over time" as far as a caller is concerned.
+     */
+    readonly capabilities: {
+        readonly chat: true;
+        readonly streaming: false;
+        readonly models: true;
+    };
+    private readonly driver;
+    constructor(options: DuckDuckGoWebAdapterOptions);
+    listModels(): Promise<Model[]>;
+    /**
+     * A credential is valid when it is absent, or when it looks like a cookie header.
+     *
+     * `{ type: 'none' }` returning `valid` is the whole point of this provider — and it is why the *check* the
+     * dashboard runs is the handshake rather than this method. Nothing here contacts the service, so it cannot
+     * claim a cookie works; it can only refuse one that is malformed.
+     */
+    validateCredential(credential: ProviderCredential | undefined): Promise<CredentialValidation>;
+    /**
+     * The refusal worth making before a request is spent.
+     *
+     * An unknown or no-longer-free model is refused by name rather than sent: the service answers those with a
+     * 400 or a 429, and each attempt costs the address's anonymous-chat quota. This checks the *live* catalog,
+     * so a model that stopped being free fails here with the reason rather than at the service.
+     */
+    private refuseUnsupported;
+    chat(request: ChatRequest, context?: ProviderRequestContext): Promise<ChatResponse>;
+    /** There is no stream. The whole answer is yielded once, honestly, rather than pretending. */
+    streamChat(request: ChatRequest, context?: ProviderRequestContext): AsyncIterable<ChatChunk>;
+    /**
+     * A credential check, and it says so.
+     *
+     * `verified: 'credential'` rather than `'inference'`: this reads whether the *endpoint answers and serves a
+     * solvable challenge*, which is not the same claim as "a model can answer". Same distinction the whole
+     * repository settled on in 1.40.0, and the reason the card's label is "Credential check".
+     */
+    healthCheck(context?: ProviderRequestContext): Promise<ProviderHealth>;
+}
+/**
+ * A driver failure as a provider error.
+ *
+ * The classification is a **field**, not a pattern, because the service's own errors cannot be told apart by
+ * their text: `ERR_CHALLENGE` and `ERR_BN_LIMIT` share a message token, and reading that token as prose would
+ * classify a per-address quota as an expired challenge.
+ *
+ * - **`challenge`** — the challenge expired or was refused. Measured: a `418 ERR_CHALLENGE` appeared 43 s
+ *   after a successful turn, and the byte-identical request succeeded 4.9 min later. So this is *not* retryable
+ *   in a loop; it is "wait". The working implementation retried once with a fresh challenge, which spends a
+ *   second call against the quota that just refused it.
+ * - **`quota`** — `ERR_BN_LIMIT`. Not retryable, not the credential's fault, and it is about this address.
+ * - **`rate-limit`** — `ERR_RATE_LIMIT`, the one the service marks retryable itself.
+ * - **`bad-request`** — the request was malformed (a model that is not free, a missing field). Not retryable.
+ * - **`unavailable`** — anything else, including a transport failure.
+ */
+export declare function normalizeDuckDuckGoWebError(error: unknown, providerId: string): ProviderError;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/providers/duckduckgo-web/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/providers/duckduckgo-web/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,EACV,SAAS,EACT,WAAW,EACX,YAAY,EACZ,oBAAoB,EAEpB,KAAK,EACL,eAAe,EACf,kBAAkB,EAClB,cAAc,EACd,sBAAsB,EACvB,MAAM,qBAAqB,CAAC;AAE7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,eAAO,MAAM,cAAc;;;;;;IAMzB;;;;;;OAMG;;IAEH,oFAAoF;;;;;;;CAO5E,CAAC;AAEX,eAAO,MAAM,uBAAuB,mBAAmB,CAAC;AAMxD;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CA4B9E;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,kBAAkB,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAIxG;AAMD,MAAM,MAAM,kBAAkB,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAErE,KAAK,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAI7C;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,kBAAkB,EAAE,CAa9E;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,CAEhE;AAMD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAUlF;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,CAK7E;AAMD,2EAA2E;AAC3E,MAAM,MAAM,sBAAsB,GAAG;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,OAAO,CAAC;IACb,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvD,SAAS,EAAE,sBAAsB,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,aAAa,CAehB;AAMD;;;;;;;;GAQG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAEzC,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,GAAG,YAAY,GAAG,aAAa,GAAG,aAAa;IAEnF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM;gBAFrB,IAAI,EAAE,WAAW,GAAG,OAAO,GAAG,YAAY,GAAG,aAAa,GAAG,aAAa,EACnF,OAAO,EAAE,MAAM,EACN,YAAY,CAAC,EAAE,MAAM,YAAA;CAKjC;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,6GAA6G;IAC7G,SAAS,EAAE,MAAM,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvE,uEAAuE;IACvE,OAAO,EAAE,CAAC,KAAK,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACnF,kGAAkG;IAClG,MAAM,EAAE,CAAC,KAAK,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,eAAe,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzH,4FAA4F;IAC5F,GAAG,EAAE,CAAC,KAAK,EAAE;QACX,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,SAAS;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QACvD,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,KAAK,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChD,CAAC;AAMF,MAAM,MAAM,2BAA2B,GAAG;IACxC,MAAM,EAAE,mBAAmB,CAAC;IAC5B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,CAAC;AAEF,qBAAa,oBAAqB,YAAW,eAAe;IAC1D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,aAAa;IAC1B;;;OAGG;IACH,QAAQ,CAAC,YAAY;;;;MAA2D;IAEhF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;gBAEjC,OAAO,EAAE,2BAA2B;IAK1C,UAAU,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;IASpC;;;;;;OAMG;IACG,kBAAkB,CAAC,UAAU,EAAE,kBAAkB,GAAG,SAAS,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAkBnG;;;;;;OAMG;YACW,iBAAiB;IA4BzB,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,YAAY,CAAC;IA0B7F,8FAA8F;IACvF,UAAU,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,GAAE,sBAA2B,GAAG,aAAa,CAAC,SAAS,CAAC;IAWvG;;;;;;OAMG;IACG,WAAW,CAAC,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,cAAc,CAAC;CAsBjF;AAcD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,aAAa,CA2B7F"}

package/dist/providers/duckduckgo-web/index.js

@@ -0,0 +1,438 @@
+import { ProviderError } from '../../core/errors.js';
+/**
+ * DuckDuckGo AI Chat (`duck.ai`), as a web-cookie provider whose cookie is **optional**.
+ *
+ * ## Why the cookie is optional, and why the card still offers one
+ *
+ * The service is anonymous: `/duckchat/v1/models` answers 200 with no credential at all, and a turn works
+ * without one — measured from this host, twice, before any of this was written. So a pasted cookie is
+ * hardening against rate limits rather than a requirement, and the card says so. Two things follow that the
+ * code has to get right: a credential of `{ type: 'none' }` must be accepted everywhere a cookie is, and a
+ * pasted cookie must never be *claimed* to be verified, because this service does not read it.
+ *
+ * ## The three traps, all measured rather than read
+ *
+ * 1. **The delta arrives in `message`, not `content`.** A reader that checks only `content` returns HTTP 200
+ *    with an **empty answer** — the spike's own first attempt did exactly that, which is why
+ *    `duckDuckGoWebContent` checks both and why the test pins the empty case.
+ * 2. **Free models are `accessTier` on the model itself.** The live catalog marks 6 models free there, and
+ *    only 3 by `reasoningEffortAccess[].accessTier` — a parser keyed on the wrong field silently drops half
+ *    the free lineup. See `freeDuckDuckGoWebModels`.
+ * 3. **The stream opens with `data: [CHAT_TITLE:...]`**, a non-JSON pseudo-event. `parseDuckDuckGoWebDataLine`
+ *    returns `undefined` for it rather than throwing.
+ *
+ * ## What lives where
+ *
+ * Everything here is testable without a network: the cookie parsing, the catalog filter, the stream parsing,
+ * the payload builder, and every refusal. The handshake, the challenge and the request itself are the
+ * driver's, declared here and implemented in the gateway — the same boundary `gemini-web` uses, and required
+ * here too because the challenge solver needs `node:vm`.
+ */
+export const DUCKDUCKGO_WEB = {
+    origin: 'https://duck.ai',
+    modelsPath: '/duckchat/v1/models',
+    statusPath: '/duckchat/v1/status',
+    chatPath: '/duckchat/v1/chat',
+    homePath: '/',
+    /**
+     * The model a request gets when it names none.
+     *
+     * `gpt-5.4-mini` because it is free **today** — verified against the live catalog — and because it is the
+     * one free id that has been free on every reading. It is not a promise: a catalog read that no longer lists
+     * it free is refused by name rather than routed to something else. See `freeDuckDuckGoWebModels`.
+     */
+    defaultModel: 'gpt-5.4-mini',
+    /** The service's own default effort, and the value the successful requests used. */
+    defaultReasoningEffort: 'none',
+    statusTimeoutMs: 15_000,
+    catalogTimeoutMs: 15_000,
+    homeTimeoutMs: 15_000,
+    chatTimeoutMs: 60_000,
+    userAgent: 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36',
+};
+export const duckduckgoWebProviderId = 'duckduckgo-web';
+/* ------------------------------------------------------------------ *
+ * The cookie, which may legitimately be absent
+ * ------------------------------------------------------------------ */
+/**
+ * A pasted cookie in any of the three shapes a browser hands over.
+ *
+ * Bare value, a full `Cookie:` header line, or a JSON export. Returns `undefined` when the paste carries
+ * nothing, so the caller can tell "the user pasted junk" from "there is no cookie", which are different
+ * answers: the first is a mistake to report, the second is this provider's normal case.
+ */
+export function normalizeDuckDuckGoWebCookie(value) {
+    const text = value.trim();
+    if (!text)
+        return undefined;
+    if (text.startsWith('{') || text.startsWith('[')) {
+        try {
+            const parsed = JSON.parse(text);
+            const entries = Array.isArray(parsed)
+                ? parsed
+                : typeof parsed === 'object' && parsed !== null && Array.isArray(parsed.cookies)
+                    ? (parsed.cookies)
+                    : [];
+            const pairs = entries
+                .map((entry) => {
+                const cookie = entry;
+                return typeof cookie?.name === 'string' && typeof cookie?.value === 'string' ? `${cookie.name}=${cookie.value}` : undefined;
+            })
+                .filter((pair) => pair !== undefined);
+            return pairs.length > 0 ? pairs.join('; ') : undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    const withoutPrefix = text.replace(/^cookie:\s*/i, '');
+    // A header line is `a=1; b=2`; a bare value is whatever was copied out of the devtools cell. Both are
+    // accepted, because both are what people paste, and neither can be validated beyond "looks like a token".
+    return withoutPrefix.includes('=') ? withoutPrefix : undefined;
+}
+/**
+ * The `Cookie` header for a credential, or `undefined` when there is none to send.
+ *
+ * `{ type: 'none' }` is the **normal** case for this provider, not a missing value: it is what the connect
+ * route stores when the user pastes nothing, and the request goes out without a `Cookie` header. Every other
+ * web-cookie adapter in this repository refuses that credential, so this is the one place the difference is
+ * visible.
+ */
+export function duckDuckGoWebCookieHeader(credential) {
+    if (!credential || credential.type === 'none')
+        return undefined;
+    if (credential.type !== 'api-key')
+        return undefined;
+    return normalizeDuckDuckGoWebCookie(credential.value);
+}
+const isRecord = (value) => typeof value === 'object' && value !== null;
+/**
+ * The models the live catalog offers on a **free** tier.
+ *
+ * **The field is `accessTier` on the model itself**, and that is a measurement rather than a reading. Against
+ * the live catalog on 2026-10-17:
+ *
+ * ```
+ * free by model.accessTier                      : 6  (gpt-6-luna, gpt-5.4-mini, claude-haiku-4-5,
+ *                                                    mistral-small-2603, tinfoil/gpt-oss-120b, tinfoil/gemma4-31b)
+ * free by reasoningEffortAccess[].accessTier    : 3  (gpt-5.4-mini, claude-haiku-4-5, tinfoil/gpt-oss-120b)
+ * ```
+ *
+ * Reading the nested field looks more precise and is simply wrong: it describes which *effort levels* an
+ * account tier may select, not whether the model is served. A parser keyed on it silently drops half the
+ * free lineup, which is why the first test in `duckduckgo-web.test.js` asserts both numbers.
+ *
+ * The list is read per request rather than pinned, because the lineup rotates — `gpt-6-luna` had appeared and
+ * three of the source's hardcoded "free" ids no longer were, inside a week.
+ */
+export function freeDuckDuckGoWebModels(catalog) {
+    if (!isRecord(catalog) || !Array.isArray(catalog.models))
+        return [];
+    return catalog.models
+        .filter((entry) => isRecord(entry))
+        .filter((entry) => {
+        const tiers = Array.isArray(entry.accessTier) ? entry.accessTier : [];
+        return tiers.some((tier) => typeof tier === 'string' && tier.toLowerCase() === 'free');
+    })
+        .map((entry) => ({
+        id: String(entry.id ?? ''),
+        displayName: String(entry.modelName ?? entry.name ?? entry.id ?? ''),
+    }))
+        .filter((model) => model.id.length > 0);
+}
+export function duckDuckGoWebModelIds(catalog) {
+    return freeDuckDuckGoWebModels(catalog).map((model) => model.id);
+}
+/* ------------------------------------------------------------------ *
+ * Reading the answer out of the stream
+ * ------------------------------------------------------------------ */
+/**
+ * One `data:` line, or `undefined` for everything that is not answer text.
+ *
+ * Non-JSON lines are dropped rather than thrown on: the stream opens with `data: [CHAT_TITLE:...]` before any
+ * JSON arrives, and `[DONE]` terminates it. Both are normal, and a parser that threw on them would fail every
+ * turn at the first byte.
+ */
+export function parseDuckDuckGoWebDataLine(line) {
+    if (!line.startsWith('data: '))
+        return undefined;
+    const data = line.slice('data: '.length).trim();
+    if (!data || data === '[DONE]')
+        return undefined;
+    try {
+        const parsed = JSON.parse(data);
+        return isRecord(parsed) ? parsed : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * The text of one event, from `content` **or** `message`.
+ *
+ * This is trap 1, and it is the difference between an answer and a 200 with nothing in it. The live service
+ * sends `{"action":"success","message":"..."}` and then a run of `{"message":"..."}` frames; `content` never
+ * appears. A reader that looked only for `content` — which is what every other provider here sends — would
+ * return an empty string and report success.
+ */
+export function duckDuckGoWebContent(event) {
+    if (!event)
+        return '';
+    if (typeof event.content === 'string')
+        return event.content;
+    if (typeof event.message === 'string')
+        return event.message;
+    return '';
+}
+/**
+ * The request body.
+ *
+ * `publicKey` is a **parameter**, not generated here, and that is a hard boundary rather than a preference:
+ * generating an RSA key pair needs `node:crypto`, and this module is reachable from the SDK barrel, which the
+ * dashboard imports. `tests/sdk-browser-safety.test.js` fails if anything reachable from that barrel imports a
+ * Node builtin — the 1.42.0 blank page — so the gateway generates the key and passes it in.
+ *
+ * `reasoningEffort` is always sent. The working implementation records it as **required**, with a 400
+ * `ERR_BAD_REQUEST` when omitted, verified live on its side. Not re-measured here, because proving it costs a
+ * chat POST against a rate-limited endpoint, and the requests that succeeded all sent it.
+ */
+export function buildDuckDuckGoWebPayload(input) {
+    return {
+        model: input.model,
+        metadata: {
+            // Every tool off: this gateway is a chat surface, and a search tool that fired on its own would be a
+            // request the caller did not ask for.
+            toolChoice: { NewsSearch: false, VideosSearch: false, LocalSearch: false, WeatherForecast: false },
+        },
+        messages: input.messages.map((message) => ({ role: message.role, content: message.content })),
+        canUseTools: true,
+        reasoningEffort: input.reasoningEffort ?? DUCKDUCKGO_WEB.defaultReasoningEffort,
+        canUseApproxLocation: null,
+        canDelegateImageGeneration: null,
+        durableStream: { messageId: input.messageId, conversationId: input.conversationId, publicKey: input.publicKey },
+    };
+}
+/* ------------------------------------------------------------------ *
+ * The driver, as the adapter sees it
+ * ------------------------------------------------------------------ */
+/**
+ * A refusal with a **kind**, so the adapter decides retryability and the driver only reports what happened.
+ *
+ * The alternative — throwing `ProviderError` from the driver — would put routing policy in the gateway, and
+ * the alternative this file avoids most deliberately is classifying by *message*: `ERR_CHALLENGE` and
+ * `ERR_BN_LIMIT` arrive in the same JSON shape and, per the working implementation's own measurement, the
+ * service maps both to the same user-facing message token. A regex over prose cannot tell them apart; a field
+ * can.
+ */
+export class DuckDuckGoWebError extends Error {
+    kind;
+    overrideCode;
+    constructor(kind, message, overrideCode) {
+        super(message);
+        this.kind = kind;
+        this.overrideCode = overrideCode;
+        this.name = 'DuckDuckGoWebError';
+    }
+}
+export class DuckDuckGoWebAdapter {
+    id;
+    name = 'Duck.ai';
+    /**
+     * Streaming is not implemented and saying otherwise would be false: this adapter reads the service's SSE
+     * and hands back the assembled answer, so no token arrives "over time" as far as a caller is concerned.
+     */
+    capabilities = { chat: true, streaming: false, models: true };
+    driver;
+    constructor(options) {
+        this.driver = options.driver;
+        this.id = options.id ?? duckduckgoWebProviderId;
+    }
+    async listModels() {
+        const catalog = await this.driver.catalog({ timeoutMs: DUCKDUCKGO_WEB.catalogTimeoutMs });
+        return freeDuckDuckGoWebModels(catalog).map((model) => ({
+            id: model.id,
+            displayName: `${model.displayName} (free tier)`,
+            providerId: this.id,
+        }));
+    }
+    /**
+     * A credential is valid when it is absent, or when it looks like a cookie header.
+     *
+     * `{ type: 'none' }` returning `valid` is the whole point of this provider — and it is why the *check* the
+     * dashboard runs is the handshake rather than this method. Nothing here contacts the service, so it cannot
+     * claim a cookie works; it can only refuse one that is malformed.
+     */
+    async validateCredential(credential) {
+        if (!credential || credential.type === 'none')
+            return { status: 'valid', checkedAt: new Date().toISOString() };
+        if (credential.type !== 'api-key') {
+            throw new ProviderError('AUTHENTICATION_FAILED', 'Duck.ai takes no credential of that kind.', {
+                providerId: this.id,
+                publicMessage: 'Paste a duck.ai cookie, or leave it empty: this provider needs no credential.',
+            });
+        }
+        const parsed = normalizeDuckDuckGoWebCookie(credential.value);
+        if (!parsed) {
+            throw new ProviderError('AUTHENTICATION_FAILED', 'The pasted Duck.ai cookie could not be read.', {
+                providerId: this.id,
+                publicMessage: 'That does not look like a cookie. Paste the whole `Cookie:` line from duck.ai, or leave the field empty — no cookie is required.',
+            });
+        }
+        return { status: 'valid', checkedAt: new Date().toISOString() };
+    }
+    /**
+     * The refusal worth making before a request is spent.
+     *
+     * An unknown or no-longer-free model is refused by name rather than sent: the service answers those with a
+     * 400 or a 429, and each attempt costs the address's anonymous-chat quota. This checks the *live* catalog,
+     * so a model that stopped being free fails here with the reason rather than at the service.
+     */
+    async refuseUnsupported(request, signal) {
+        const requested = request.model || DUCKDUCKGO_WEB.defaultModel;
+        if (request.toolChoice === 'required') {
+            throw new ProviderError('NOT_SUPPORTED', 'Duck.ai cannot be told to force a tool call.', {
+                providerId: this.id,
+                publicMessage: 'Duck.ai answers in prose and has no way to force a tool call. Send `tool_choice: "auto"` or omit it.',
+            });
+        }
+        let free = [];
+        try {
+            free = freeDuckDuckGoWebModels(await this.driver.catalog({ timeoutMs: DUCKDUCKGO_WEB.catalogTimeoutMs, ...(signal ? { signal } : {}) }));
+        }
+        catch {
+            // A catalog that cannot be read is not a reason to refuse a turn: the service decides, and a named
+            // refusal here would be about this gateway rather than about the request.
+            return requested;
+        }
+        if (free.length === 0)
+            return requested;
+        if (free.some((model) => model.id === requested))
+            return requested;
+        const known = free.map((model) => model.id).join(', ');
+        throw new ProviderError('NOT_SUPPORTED', `Duck.ai does not offer ${requested} on its free tier.`, {
+            providerId: this.id,
+            publicMessage: `Duck.ai serves ${known} free. ${requested} is not free on this account, and a request for it would be refused by the service.`,
+        });
+    }
+    async chat(request, context = {}) {
+        const model = await this.refuseUnsupported(request, context.signal);
+        const cookieHeader = duckDuckGoWebCookieHeader(context.credential);
+        const createdAt = new Date().toISOString();
+        try {
+            const { text, model: answered } = await this.driver.ask({
+                ...(cookieHeader ? { cookieHeader } : {}),
+                model,
+                messages: request.messages.map((message) => ({ role: message.role, content: messageText(message.content) })),
+                timeoutMs: DUCKDUCKGO_WEB.chatTimeoutMs,
+                ...(context.signal ? { signal: context.signal } : {}),
+            });
+            return {
+                id: `duckduckgo-web-${Date.parse(createdAt)}`,
+                providerId: this.id,
+                model: answered || model,
+                createdAt,
+                message: { role: 'assistant', content: text },
+                finishReason: 'stop',
+            };
+        }
+        catch (error) {
+            throw normalizeDuckDuckGoWebError(error, this.id);
+        }
+    }
+    /** There is no stream. The whole answer is yielded once, honestly, rather than pretending. */
+    async *streamChat(request, context = {}) {
+        const response = await this.chat(request, context);
+        yield {
+            id: response.id,
+            providerId: response.providerId,
+            model: response.model,
+            delta: { role: 'assistant', content: messageText(response.message.content) },
+            finishReason: response.finishReason,
+        };
+    }
+    /**
+     * A credential check, and it says so.
+     *
+     * `verified: 'credential'` rather than `'inference'`: this reads whether the *endpoint answers and serves a
+     * solvable challenge*, which is not the same claim as "a model can answer". Same distinction the whole
+     * repository settled on in 1.40.0, and the reason the card's label is "Credential check".
+     */
+    async healthCheck(context = {}) {
+        const checkedAt = new Date().toISOString();
+        try {
+            await this.validateCredential(context.credential);
+            const driver = await this.driver.available();
+            if (!driver.ok)
+                return { status: 'unavailable', verified: 'credential', checkedAt };
+            const status = await this.driver.status({ timeoutMs: DUCKDUCKGO_WEB.statusTimeoutMs, ...(context.signal ? { signal: context.signal } : {}) });
+            if (!status.challengeServed) {
+                // `message` rather than an `errorCode`: `ProviderHealth` declares no code field, and inventing one
+                // would be a value no consumer can read. The sentence is the part a person needs.
+                return { status: 'degraded', verified: 'credential', checkedAt, message: 'Duck.ai answered without serving an anti-bot challenge.' };
+            }
+            return { status: 'healthy', verified: 'credential', checkedAt, latencyMs: status.solvedMs };
+        }
+        catch (error) {
+            return {
+                status: 'unavailable',
+                verified: 'credential',
+                checkedAt,
+                message: error instanceof Error ? error.message : 'Duck.ai could not be reached.',
+            };
+        }
+    }
+}
+function messageText(content) {
+    if (typeof content === 'string')
+        return content;
+    if (!Array.isArray(content))
+        return '';
+    return content
+        .map((part) => {
+        if (typeof part === 'string')
+            return part;
+        if (part && typeof part === 'object' && 'text' in part && typeof part.text === 'string')
+            return part.text;
+        return '';
+    })
+        .join('');
+}
+/**
+ * A driver failure as a provider error.
+ *
+ * The classification is a **field**, not a pattern, because the service's own errors cannot be told apart by
+ * their text: `ERR_CHALLENGE` and `ERR_BN_LIMIT` share a message token, and reading that token as prose would
+ * classify a per-address quota as an expired challenge.
+ *
+ * - **`challenge`** — the challenge expired or was refused. Measured: a `418 ERR_CHALLENGE` appeared 43 s
+ *   after a successful turn, and the byte-identical request succeeded 4.9 min later. So this is *not* retryable
+ *   in a loop; it is "wait". The working implementation retried once with a fresh challenge, which spends a
+ *   second call against the quota that just refused it.
+ * - **`quota`** — `ERR_BN_LIMIT`. Not retryable, not the credential's fault, and it is about this address.
+ * - **`rate-limit`** — `ERR_RATE_LIMIT`, the one the service marks retryable itself.
+ * - **`bad-request`** — the request was malformed (a model that is not free, a missing field). Not retryable.
+ * - **`unavailable`** — anything else, including a transport failure.
+ */
+export function normalizeDuckDuckGoWebError(error, providerId) {
+    if (error instanceof ProviderError)
+        return error;
+    const kind = error instanceof DuckDuckGoWebError ? error.kind : 'unavailable';
+    const detail = error instanceof Error ? error.message : String(error);
+    const override = error instanceof DuckDuckGoWebError && error.overrideCode ? ` (overrideCode ${error.overrideCode})` : '';
+    const publicByKind = {
+        challenge: 'Duck.ai refused the request at its anti-bot check. That usually means too many requests from this address in a short window — waiting a few minutes is the fix, not retrying, and not re-pasting a cookie.',
+        quota: 'Duck.ai is refusing this address rather than this request. A pasted cookie can help and is optional; a request from a different address may work immediately.',
+        'rate-limit': 'Duck.ai is rate limiting this address. Retrying later is the fix.',
+        'bad-request': 'Duck.ai refused the request as malformed. See the message for which field.',
+        unavailable: 'Duck.ai could not be reached. If this is a network problem on the gateway host it will work again on its own; if it keeps happening, the service may have changed.',
+    };
+    const code = kind === 'rate-limit' || kind === 'unavailable' ? 'PROVIDER_REQUEST_FAILED' : kind === 'bad-request' ? 'INVALID_REQUEST' : 'PROVIDER_UNAVAILABLE';
+    return new ProviderError(code, `Duck.ai could not complete the turn: ${detail}${override}`, {
+        providerId,
+        // Only the kind the service itself marks retryable is retried. Everything else would spend quota to be
+        // refused again, which is what turns a short wait into a longer one.
+        retryable: kind === 'rate-limit' || kind === 'unavailable',
+        publicMessage: publicByKind[kind],
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/providers/duckduckgo-web/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/providers/duckduckgo-web/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAcrD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,MAAM,EAAE,iBAAiB;IACzB,UAAU,EAAE,qBAAqB;IACjC,UAAU,EAAE,qBAAqB;IACjC,QAAQ,EAAE,mBAAmB;IAC7B,QAAQ,EAAE,GAAG;IACb;;;;;;OAMG;IACH,YAAY,EAAE,cAAc;IAC5B,oFAAoF;IACpF,sBAAsB,EAAE,MAAM;IAC9B,eAAe,EAAE,MAAM;IACvB,gBAAgB,EAAE,MAAM;IACxB,aAAa,EAAE,MAAM;IACrB,aAAa,EAAE,MAAM;IACrB,SAAS,EAAE,uGAAuG;CAC1G,CAAC;AAEX,MAAM,CAAC,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AAExD;;wEAEwE;AAExE;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAAC,KAAa;IACxD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAE5B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;YAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBACnC,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAE,MAAgC,CAAC,OAAO,CAAC;oBACzG,CAAC,CAAC,CAAE,MAAiC,CAAC,OAAO,CAAC;oBAC9C,CAAC,CAAC,EAAE,CAAC;YACT,MAAM,KAAK,GAAG,OAAO;iBAClB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBACb,MAAM,MAAM,GAAG,KAA4C,CAAC;gBAC5D,OAAO,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9H,CAAC,CAAC;iBACD,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;YACxD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACvD,sGAAsG;IACtG,0GAA0G;IAC1G,OAAO,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,UAA0C;IAClF,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IAChE,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,4BAA4B,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAUD,MAAM,QAAQ,GAAG,CAAC,KAAc,EAA0B,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AAEzG;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAgB;IACtD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACpE,OAAO,OAAO,CAAC,MAAM;SAClB,MAAM,CAAC,CAAC,KAAK,EAA0B,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;SAC1D,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QAChB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC;IACzF,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACf,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;KACrE,CAAC,CAAC;SACF,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO,uBAAuB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACnE,CAAC;AAED;;wEAEwE;AAExE;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAY;IACrD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC3C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAgC;IACnE,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IAC5D,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IAC5D,OAAO,EAAE,CAAC;AACZ,CAAC;AAiBD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAOzC;IACC,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE;YACR,qGAAqG;YACrG,sCAAsC;YACtC,UAAU,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE;SACnG;QACD,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7F,WAAW,EAAE,IAAI;QACjB,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,cAAc,CAAC,sBAAsB;QAC/E,oBAAoB,EAAE,IAAI;QAC1B,0BAA0B,EAAE,IAAI;QAChC,aAAa,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;KAChH,CAAC;AACJ,CAAC;AAED;;wEAEwE;AAExE;;;;;;;;GAQG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEhC;IAEA;IAHX,YACW,IAA0E,EACnF,OAAe,EACN,YAAqB;QAE9B,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,SAAI,GAAJ,IAAI,CAAsE;QAE1E,iBAAY,GAAZ,YAAY,CAAS;QAG9B,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AA6BD,MAAM,OAAO,oBAAoB;IACtB,EAAE,CAAS;IACX,IAAI,GAAG,SAAS,CAAC;IAC1B;;;OAGG;IACM,YAAY,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAW,CAAC;IAE/D,MAAM,CAAsB;IAE7C,YAAY,OAAoC;QAC9C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,uBAAuB,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC1F,OAAO,uBAAuB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACtD,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,WAAW,EAAE,GAAG,KAAK,CAAC,WAAW,cAAc;YAC/C,UAAU,EAAE,IAAI,CAAC,EAAE;SACpB,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,kBAAkB,CAAC,UAA0C;QACjE,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/G,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,2CAA2C,EAAE;gBAC5F,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,aAAa,EAAE,+EAA+E;aAC/F,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,4BAA4B,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,8CAA8C,EAAE;gBAC/F,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,aAAa,EAAE,kIAAkI;aAClJ,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAClE,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,iBAAiB,CAAC,OAAoB,EAAE,MAAoB;QACxE,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC,YAAY,CAAC;QAC/D,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YACtC,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,8CAA8C,EAAE;gBACvF,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,aAAa,EAAE,sGAAsG;aACtH,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,GAAyB,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,IAAI,GAAG,uBAAuB,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3I,CAAC;QAAC,MAAM,CAAC;YACP,mGAAmG;YACnG,0EAA0E;YAC1E,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACxC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAEnE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,0BAA0B,SAAS,oBAAoB,EAAE;YAChG,UAAU,EAAE,IAAI,CAAC,EAAE;YACnB,aAAa,EAAE,kBAAkB,KAAK,UAAU,SAAS,qFAAqF;SAC/I,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAoB,EAAE,UAAkC,EAAE;QACnE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,YAAY,GAAG,yBAAyB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE3C,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;gBACtD,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,KAAK;gBACL,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC5G,SAAS,EAAE,cAAc,CAAC,aAAa;gBACvC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtD,CAAC,CAAC;YACH,OAAO;gBACL,EAAE,EAAE,kBAAkB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;gBAC7C,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,KAAK,EAAE,QAAQ,IAAI,KAAK;gBACxB,SAAS;gBACT,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE;gBAC7C,YAAY,EAAE,MAAM;aACrB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,2BAA2B,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,8FAA8F;IAC9F,KAAK,CAAC,CAAC,UAAU,CAAC,OAAoB,EAAE,UAAkC,EAAE;QAC1E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM;YACJ,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YAC5E,YAAY,EAAE,QAAQ,CAAC,YAAY;SACpC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CAAC,UAAkC,EAAE;QACpD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;YACpF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9I,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;gBAC5B,mGAAmG;gBACnG,kFAAkF;gBAClF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,yDAAyD,EAAE,CAAC;YACvI,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC9F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,MAAM,EAAE,aAAa;gBACrB,QAAQ,EAAE,YAAY;gBACtB,SAAS;gBACT,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B;aAClF,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,SAAS,WAAW,CAAC,OAAuB;IAC1C,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1C,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC;QAC1G,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAAc,EAAE,UAAkB;IAC5E,IAAI,KAAK,YAAY,aAAa;QAAE,OAAO,KAAK,CAAC;IAEjD,MAAM,IAAI,GAAG,KAAK,YAAY,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;IAC9E,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,KAAK,YAAY,kBAAkB,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAE1H,MAAM,YAAY,GAA+C;QAC/D,SAAS,EACP,4MAA4M;QAC9M,KAAK,EACH,+JAA+J;QACjK,YAAY,EAAE,mEAAmE;QACjF,aAAa,EAAE,4EAA4E;QAC3F,WAAW,EACT,oKAAoK;KACvK,CAAC;IAEF,MAAM,IAAI,GAAG,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,sBAAsB,CAAC;IAE/J,OAAO,IAAI,aAAa,CAAC,IAAI,EAAE,wCAAwC,MAAM,GAAG,QAAQ,EAAE,EAAE;QAC1F,UAAU;QACV,uGAAuG;QACvG,qEAAqE;QACrE,SAAS,EAAE,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,aAAa;QAC1D,aAAa,EAAE,YAAY,CAAC,IAAI,CAAC;KAClC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hilbras/omnihilbras",
-  "version": "1.86.0",
+  "version": "1.87.0",
   "description": "Typed provider SDK for the OmniHilbras gateway: normalized chat, streaming, model listing, and capability contracts for OpenAI, Anthropic, Gemini, and OpenAI-compatible providers.",
   "license": "MIT",
   "author": "Hilbras",