@juspay/neurolink 11.0.0 → 11.1.0

package/dist/providers/litellm/client.js

@@ -2,13 +2,14 @@ import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 import { registerRuntimeContextWindow, registerRuntimeOutputCeiling, } from "../../constants/contextWindows.js";
 import { createProxyFetch } from "../../proxy/proxyFetch.js";
 import { AuthenticationError, InvalidModelError, ModelAccessDeniedError, NetworkError, ProviderError, RateLimitError, isModelAccessDeniedMessage, parseAllowedModels, } from "../../types/index.js";
+import { classifyProviderError, DEFAULT_ERROR_RULES, } from "../../utils/errorClassifier.js";
 import { isAbortError } from "../../utils/errorHandling.js";
 import { logger } from "../../utils/logger.js";
 import { redactUrlCredentials } from "../../utils/logSanitize.js";
 import { isGemini25Model as isCanonicalGemini25Model } from "../../utils/modelDetection.js";
 import { calculateCost } from "../../utils/pricing.js";
 import { getProviderModel } from "../../utils/providerConfig.js";
-import { createTimeoutController, TimeoutError } from "../../utils/timeout.js";
+import { createTimeoutController } from "../../utils/timeout.js";
 import { stripTrailingSlash } from "../openaiChatCompletionsClient.js";
 import { OpenAIChatCompletionsProvider } from "../openaiChatCompletionsBase.js";
 const streamTracer = trace.getTracer("neurolink.provider.litellm");
@@ -320,46 +321,60 @@ export class LiteLLMProvider extends OpenAIChatCompletionsProvider {
         };
     }
     formatProviderError(error) {
-        if (error instanceof TimeoutError) {
-            return new NetworkError(`Request timed out: ${error.message}`, this.providerName);
-        }
+        // Curator P1-1: detect "team not allowed to access model" responses and
+        // surface as ModelAccessDeniedError with the allowed_models array parsed
+        // from the body. Must run before classification (not just before the
+        // "API key" rule) because ModelAccessDeniedError's constructor takes an
+        // `{ provider, requestedModel, allowedModels }` options object rather
+        // than the `(message, provider?)` shape ProviderErrorRule expects, so it
+        // can't be expressed as a declarative rule. No realistic overlap with the
+        // timeout/ECONNREFUSED checks below (disjoint wording), so running this
+        // first is behaviorally identical to the original nesting order.
         const errorRecord = error;
-        if (errorRecord?.name === "TimeoutError" ||
-            (typeof errorRecord?.message === "string" &&
-                errorRecord.message.toLowerCase().includes("timeout"))) {
-            return new NetworkError(`Request timed out: ${errorRecord?.message || "Unknown timeout"}`, this.providerName);
-        }
-        if (typeof errorRecord?.message === "string") {
-            if (errorRecord.message.includes("ECONNREFUSED") ||
-                errorRecord.message.includes("Failed to fetch")) {
-                return new NetworkError("LiteLLM proxy server not available. Please start the LiteLLM proxy server at " +
-                    `${process.env.LITELLM_BASE_URL || "http://localhost:4000"}`, this.providerName);
-            }
-            // Curator P1-1: detect "team not allowed to access model" responses and
-            // surface as ModelAccessDeniedError with the allowed_models array parsed
-            // from the body. Must run before the generic "API key" check because
-            // LiteLLM phrases this as a 403 distinct from auth.
-            if (isModelAccessDeniedMessage(errorRecord.message)) {
-                return new ModelAccessDeniedError(errorRecord.message, {
-                    provider: this.providerName,
-                    requestedModel: this.modelName,
-                    allowedModels: parseAllowedModels(errorRecord.message),
-                });
-            }
-            if (errorRecord.message.includes("API_KEY_INVALID") ||
-                errorRecord.message.includes("Invalid API key")) {
-                return new AuthenticationError("Invalid LiteLLM configuration. Please check your LITELLM_API_KEY environment variable.", this.providerName);
-            }
-            if (errorRecord.message.toLowerCase().includes("rate limit")) {
-                return new RateLimitError("LiteLLM rate limit exceeded. Please try again later.", this.providerName);
-            }
-            if (errorRecord.message.toLowerCase().includes("model") &&
-                errorRecord.message.toLowerCase().includes("not found")) {
-                return new InvalidModelError(`Model '${this.modelName}' not available in LiteLLM proxy. ` +
-                    "Please check your LiteLLM configuration and ensure the model is configured.", this.providerName);
-            }
+        if (typeof errorRecord?.message === "string" &&
+            isModelAccessDeniedMessage(errorRecord.message)) {
+            return new ModelAccessDeniedError(errorRecord.message, {
+                provider: this.providerName,
+                requestedModel: this.modelName,
+                allowedModels: parseAllowedModels(errorRecord.message),
+            });
         }
-        return new ProviderError(`LiteLLM error: ${errorRecord?.message || "Unknown error"}`, this.providerName);
+        const rules = [
+            // Duck-typed timeout detection (name === "TimeoutError" OR message
+            // contains "timeout") distinct from the `instanceof TimeoutError` check
+            // classifyProviderError already performs first — preserved because
+            // some rejection paths produce a plain object/Error with that shape
+            // rather than a real TimeoutError instance.
+            {
+                match: (ctx) => ctx.errorName === "TimeoutError" || /timeout/i.test(ctx.message),
+                errorClass: NetworkError,
+                message: (ctx) => `Request timed out: ${ctx.message}`,
+            },
+            {
+                match: (ctx) => /ECONNREFUSED|Failed to fetch/.test(ctx.message),
+                errorClass: NetworkError,
+                message: () => "LiteLLM proxy server not available. Please start the LiteLLM proxy server at " +
+                    `${process.env.LITELLM_BASE_URL || "http://localhost:4000"}`,
+            },
+            {
+                match: (ctx) => /API_KEY_INVALID|Invalid API key/.test(ctx.message),
+                errorClass: AuthenticationError,
+                message: "Invalid LiteLLM configuration. Please check your LITELLM_API_KEY environment variable.",
+            },
+            {
+                match: (ctx) => /rate limit/i.test(ctx.message),
+                errorClass: RateLimitError,
+                message: "LiteLLM rate limit exceeded. Please try again later.",
+            },
+            {
+                match: (ctx) => /model/i.test(ctx.message) && /not found/i.test(ctx.message),
+                errorClass: InvalidModelError,
+                message: () => `Model '${this.modelName}' not available in LiteLLM proxy. ` +
+                    "Please check your LiteLLM configuration and ensure the model is configured.",
+            },
+            ...DEFAULT_ERROR_RULES,
+        ];
+        return classifyProviderError(error, rules, this.providerName, this.modelName);
     }
     /**
      * Get available models from LiteLLM proxy `/v1/models` endpoint.

package/dist/providers/llamaCpp.js

@@ -1,7 +1,7 @@
 import { NetworkError, ProviderError } from "../types/index.js";
+import { classifyProviderError, DEFAULT_ERROR_RULES, } from "../utils/errorClassifier.js";
 import { logger } from "../utils/logger.js";
 import { redactUrlCredentials } from "../utils/logSanitize.js";
-import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
 const LLAMACPP_DEFAULT_BASE_URL = "http://localhost:8080/v1";
 const LLAMACPP_PLACEHOLDER_KEY = "llamacpp";
@@ -52,25 +52,28 @@ export class LlamaCppProvider extends OpenAIChatCompletionsProvider {
         return ["loaded-model"];
     }
     formatProviderError(error) {
-        if (error instanceof TimeoutError) {
-            return new NetworkError(`Request timed out: ${error.message}`, "llamacpp");
-        }
+        // `code`/`cause.code` aren't part of ProviderErrorContext, so they're read
+        // off the raw error here (mirrors ollama's `responseBody` extraction) for
+        // the ECONNREFUSED rule below, which the pre-migration code also checked
+        // via a duck-typed error code in addition to the message text.
         const errorRecord = error;
-        const message = typeof errorRecord?.message === "string"
-            ? errorRecord.message
-            : "Unknown error";
         const cause = errorRecord?.cause ?? {};
         const code = (errorRecord?.code ?? cause?.code);
-        if (code === "ECONNREFUSED" ||
-            message.includes("ECONNREFUSED") ||
-            message.includes("Failed to fetch") ||
-            message.includes("fetch failed")) {
-            return new NetworkError(`llama.cpp server not reachable at ${redactUrlCredentials(this.config.baseURL)}. ` +
-                "Start it with: ./llama-server -m model.gguf --port 8080", "llamacpp");
-        }
-        if (message.includes("400")) {
-            return new ProviderError("llama.cpp rejected the request. Common cause: model doesn't support tools (start llama-server with --jinja for tool support).", "llamacpp");
-        }
-        return new ProviderError(`llama.cpp error: ${message}`, "llamacpp");
+        const rules = [
+            {
+                match: (ctx) => code === "ECONNREFUSED" ||
+                    /ECONNREFUSED|Failed to fetch|fetch failed/.test(ctx.message),
+                errorClass: NetworkError,
+                message: () => `llama.cpp server not reachable at ${redactUrlCredentials(this.config.baseURL)}. ` +
+                    "Start it with: ./llama-server -m model.gguf --port 8080",
+            },
+            {
+                match: (ctx) => /400/.test(ctx.message),
+                errorClass: ProviderError,
+                message: "llama.cpp rejected the request. Common cause: model doesn't support tools (start llama-server with --jinja for tool support).",
+            },
+            ...DEFAULT_ERROR_RULES,
+        ];
+        return classifyProviderError(error, rules, "llamacpp", this.modelName);
     }
 }

package/dist/providers/lmStudio.js

@@ -1,7 +1,7 @@
-import { InvalidModelError, NetworkError, ProviderError, } from "../types/index.js";
+import { InvalidModelError, NetworkError } from "../types/index.js";
+import { classifyProviderError, DEFAULT_ERROR_RULES, } from "../utils/errorClassifier.js";
 import { logger } from "../utils/logger.js";
 import { redactUrlCredentials } from "../utils/logSanitize.js";
-import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
 const LM_STUDIO_DEFAULT_BASE_URL = "http://localhost:1234/v1";
 const LM_STUDIO_PLACEHOLDER_KEY = "lm-studio";
@@ -47,26 +47,29 @@ export class LMStudioProvider extends OpenAIChatCompletionsProvider {
         return FALLBACK_MODEL;
     }
     formatProviderError(error) {
-        if (error instanceof TimeoutError) {
-            return new NetworkError(`Request timed out: ${error.message}`, "lm-studio");
-        }
+        // `code`/`cause.code` aren't part of ProviderErrorContext, so they're read
+        // off the raw error here (mirrors ollama's `responseBody` extraction) for
+        // the ECONNREFUSED rule below, which the pre-migration code also checked
+        // via a duck-typed error code in addition to the message text.
         const errorRecord = error;
-        const message = typeof errorRecord?.message === "string"
-            ? errorRecord.message
-            : "Unknown error";
         const cause = errorRecord?.cause ?? {};
         const code = (errorRecord?.code ?? cause?.code);
-        if (code === "ECONNREFUSED" ||
-            message.includes("ECONNREFUSED") ||
-            message.includes("Failed to fetch") ||
-            message.includes("fetch failed")) {
-            return new NetworkError(`LM Studio server not reachable at ${redactUrlCredentials(this.config.baseURL)}. ` +
-                `Open the LM Studio app, load a model, and click "Start Server".`, "lm-studio");
-        }
-        if (message.includes("model_not_found") || message.includes("404")) {
-            return new InvalidModelError(`LM Studio model '${this.modelName}' is not loaded. Load it in the LM Studio app first.`, "lm-studio");
-        }
-        return new ProviderError(`LM Studio error: ${message}`, "lm-studio");
+        const rules = [
+            {
+                match: (ctx) => code === "ECONNREFUSED" ||
+                    /ECONNREFUSED|Failed to fetch|fetch failed/.test(ctx.message),
+                errorClass: NetworkError,
+                message: () => `LM Studio server not reachable at ${redactUrlCredentials(this.config.baseURL)}. ` +
+                    `Open the LM Studio app, load a model, and click "Start Server".`,
+            },
+            {
+                match: (ctx) => /model_not_found|404/.test(ctx.message),
+                errorClass: InvalidModelError,
+                message: () => `LM Studio model '${this.modelName}' is not loaded. Load it in the LM Studio app first.`,
+            },
+            ...DEFAULT_ERROR_RULES,
+        ];
+        return classifyProviderError(error, rules, "lm-studio", this.modelName);
     }
     async validateConfiguration() {
         return this.probeModelsEndpoint(this.config.apiKey && this.config.apiKey !== LM_STUDIO_PLACEHOLDER_KEY

package/dist/providers/mistral.js

@@ -1,9 +1,9 @@
 import { MistralModels } from "../constants/enums.js";
-import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
+import { AuthenticationError } from "../types/index.js";
 import { logger } from "../utils/logger.js";
 import { redactUrlCredentials } from "../utils/logSanitize.js";
+import { classifyProviderError, DEFAULT_ERROR_RULES, } from "../utils/errorClassifier.js";
 import { createMistralConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
-import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
 const MISTRAL_DEFAULT_BASE_URL = "https://api.mistral.ai/v1";
 const getMistralApiKey = () => {
@@ -60,28 +60,16 @@ export class MistralProvider extends OpenAIChatCompletionsProvider {
         return getDefaultMistralModel();
     }
     formatProviderError(error) {
-        if (error instanceof TimeoutError) {
-            return new NetworkError(`Request timed out: ${error.message}`, "mistral");
-        }
-        const errorRecord = error;
-        const message = typeof errorRecord?.message === "string"
-            ? errorRecord.message
-            : "Unknown error";
-        if (message.includes("API_KEY_INVALID") ||
-            message.includes("Invalid API key") ||
-            message.includes("Unauthorized") ||
-            message.includes("401")) {
-            return new AuthenticationError("Invalid Mistral API key. Please check your MISTRAL_API_KEY environment variable.", "mistral");
-        }
-        if (message.includes("rate limit") ||
-            message.includes("Rate limit") ||
-            message.includes("429")) {
-            return new RateLimitError("Mistral rate limit exceeded", "mistral");
-        }
-        if (message.includes("model_not_found") || message.includes("404")) {
-            return new InvalidModelError(`Mistral model '${this.modelName}' not found.`, "mistral");
-        }
-        return new ProviderError(`Mistral error: ${message}`, "mistral");
+        const rules = [
+            {
+                match: (ctx) => ctx.statusCode === 401 ||
+                    /API_KEY_INVALID|Invalid API key|Unauthorized/i.test(ctx.message),
+                errorClass: AuthenticationError,
+                message: "Invalid Mistral API key. Please check your MISTRAL_API_KEY environment variable.",
+            },
+            ...DEFAULT_ERROR_RULES,
+        ];
+        return classifyProviderError(error, rules, "mistral", this.modelName);
     }
     // ===========================================================================
     // Optional hooks

package/dist/providers/nvidiaNim/client.js

@@ -1,9 +1,9 @@
 import { NvidiaNimModels } from "../../constants/enums.js";
-import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../../types/index.js";
+import { AuthenticationError, InvalidModelError, ProviderError, RateLimitError, } from "../../types/index.js";
+import { classifyProviderError, DEFAULT_ERROR_RULES, } from "../../utils/errorClassifier.js";
 import { logger } from "../../utils/logger.js";
 import { redactUrlCredentials } from "../../utils/logSanitize.js";
 import { createNvidiaNimConfig, getProviderModel, validateApiKey, } from "../../utils/providerConfig.js";
-import { TimeoutError } from "../../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "../openaiChatCompletionsBase.js";
 /**
  * Decide whether a NIM 400 response body is a rejection of the named
@@ -237,38 +237,41 @@ export class NvidiaNimProvider extends OpenAIChatCompletionsProvider {
         return JSON.parse(serialized);
     }
     formatProviderError(error) {
-        if (error instanceof TimeoutError) {
-            return new NetworkError(`Request timed out: ${error.message}`, "nvidia-nim");
-        }
-        const errorRecord = error;
-        const message = typeof errorRecord?.message === "string"
-            ? errorRecord.message
-            : "Unknown error";
-        // NIM canonically returns HTTP 401/Unauthorized for invalid API keys,
-        // but its OpenAI-compatible gateway sometimes surfaces a bare 400 +
-        // "Bad Request" with no body details for both malformed-credentials
-        // and bad-parameter cases. Because the two are indistinguishable from
-        // the message alone, we DON'T promote bare 400/Bad Request to "invalid
-        // key" here — that would mis-classify legitimate parameter errors
-        // (e.g. unsupported `reasoning_budget`, unsupported `chat_template`)
-        // as auth failures. Tests that probe the auth path (K1) detect
-        // "bad request" / "400" themselves; tests that probe parameter retry
-        // (K5) need the original "Bad Request" message to surface.
-        if (message.includes("Invalid API key") ||
-            message.includes("401") ||
-            message.includes("Unauthorized")) {
-            return new AuthenticationError("Invalid NVIDIA NIM API key. Get one at https://build.nvidia.com/settings/api-keys", "nvidia-nim");
-        }
-        if (message.includes("rate limit") || message.includes("429")) {
-            return new RateLimitError("NVIDIA NIM rate limit exceeded", "nvidia-nim");
-        }
-        if (message.includes("404") || message.includes("model_not_found")) {
-            return new InvalidModelError(`NVIDIA NIM model '${this.modelName}' not available. Browse the catalog at https://build.nvidia.com/models`, "nvidia-nim");
-        }
-        if (message.includes("quota") || message.includes("403")) {
-            return new ProviderError("NVIDIA NIM quota exceeded for your account", "nvidia-nim");
-        }
-        return new ProviderError(`NVIDIA NIM error: ${message}`, "nvidia-nim");
+        const rules = [
+            // NIM canonically returns HTTP 401/Unauthorized for invalid API keys,
+            // but its OpenAI-compatible gateway sometimes surfaces a bare 400 +
+            // "Bad Request" with no body details for both malformed-credentials
+            // and bad-parameter cases. Because the two are indistinguishable from
+            // the message alone, bare 400/"Bad Request" is deliberately NOT
+            // promoted to "invalid key" here — that would mis-classify legitimate
+            // parameter errors (e.g. unsupported `reasoning_budget`, unsupported
+            // `chat_template`) as auth failures. Tests that probe the auth path
+            // (K1) detect "bad request" / "400" themselves; tests that probe
+            // parameter retry (K5) need the original "Bad Request" message to
+            // surface.
+            {
+                match: (ctx) => /Invalid API key|401|Unauthorized/.test(ctx.message),
+                errorClass: AuthenticationError,
+                message: "Invalid NVIDIA NIM API key. Get one at https://build.nvidia.com/settings/api-keys",
+            },
+            {
+                match: (ctx) => /rate limit|429/.test(ctx.message),
+                errorClass: RateLimitError,
+                message: "NVIDIA NIM rate limit exceeded",
+            },
+            {
+                match: (ctx) => /404|model_not_found/.test(ctx.message),
+                errorClass: InvalidModelError,
+                message: () => `NVIDIA NIM model '${this.modelName}' not available. Browse the catalog at https://build.nvidia.com/models`,
+            },
+            {
+                match: (ctx) => /quota|403/.test(ctx.message),
+                errorClass: ProviderError,
+                message: "NVIDIA NIM quota exceeded for your account",
+            },
+            ...DEFAULT_ERROR_RULES,
+        ];
+        return classifyProviderError(error, rules, "nvidia-nim", this.modelName);
     }
     async validateConfiguration() {
         return (typeof this.config.apiKey === "string" &&

package/dist/providers/ollama/client.js

@@ -1,6 +1,7 @@
 import { modelConfig } from "../../core/modelConfiguration.js";
 import { createProxyFetch } from "../../proxy/proxyFetch.js";
 import { InvalidModelError, NetworkError, ProviderError, } from "../../types/index.js";
+import { classifyProviderError, DEFAULT_ERROR_RULES, } from "../../utils/errorClassifier.js";
 import { logger } from "../../utils/logger.js";
 import { redactUrlCredentials } from "../../utils/logSanitize.js";
 import { createTimeoutController, parseTimeout, TimeoutError, } from "../../utils/timeout.js";
@@ -81,47 +82,61 @@ export class OllamaProvider extends OpenAIChatCompletionsProvider {
     }
     formatProviderError(error) {
         if (error instanceof TimeoutError) {
+            // Custom message (not classifyProviderError's built-in "Request timed
+            // out: ..." default). TimeoutError is handled unconditionally inside
+            // classifyProviderError ahead of any rule table, so this quirk can only
+            // be preserved via a pre-delegate intercept (same pattern used for
+            // groq's TimeoutError override).
             return new NetworkError(`Ollama request timed out. The model may be loading or the request is too large.`, "ollama");
         }
+        // `responseBody` isn't part of ProviderErrorContext, so it's read off the
+        // raw error here (mirrors openAI's `errorType` extraction) for the
+        // missing-model / 404 rules below, which match against message+body
+        // combined exactly as the pre-migration code did.
         const errorRecord = error;
-        const message = typeof errorRecord?.message === "string"
-            ? errorRecord.message
-            : "Unknown error";
-        const cause = errorRecord?.cause ?? {};
-        const code = (errorRecord?.code ?? cause?.code);
-        if (code === "ECONNREFUSED" ||
-            message.includes("ECONNREFUSED") ||
-            message.includes("Failed to fetch") ||
-            message.includes("fetch failed")) {
-            return new NetworkError(`Cannot connect to Ollama at ${redactUrlCredentials(this.config.baseURL)}. ` +
-                `Install Ollama (https://ollama.com), start it with 'ollama serve', then try again.`, "ollama");
-        }
-        // The base client (buildAPIError) attaches statusCode + responseBody to
-        // HTTP failures. Distinguish a genuine missing-model error (give 'ollama
-        // pull' guidance) from a bare endpoint-mismatch 404 (wrong base URL / not
-        // the OpenAI-compatible /v1 surface) so the advice is actionable. Match on
-        // wording, not a bare "404" substring, to avoid misclassifying unrelated
-        // messages that merely contain those digits.
-        const statusCode = typeof errorRecord?.statusCode === "number"
-            ? errorRecord.statusCode
-            : undefined;
         const responseBody = typeof errorRecord?.responseBody === "string"
             ? errorRecord.responseBody
             : "";
-        const haystack = `${message} ${responseBody}`.toLowerCase();
-        const looksLikeMissingModel = haystack.includes("model_not_found") ||
-            (haystack.includes("model") && haystack.includes("not found"));
-        if (looksLikeMissingModel) {
-            return new InvalidModelError(`Ollama model '${this.modelName}' is not available locally. ` +
-                `Pull it first with 'ollama pull ${this.modelName}' (or try '${FALLBACK_OLLAMA_MODEL}'); ` +
-                `list installed models with 'ollama list'.`, "ollama");
-        }
-        if (statusCode === 404 || haystack.includes("status 404")) {
-            return new ProviderError(`Ollama returned HTTP 404 from ${redactUrlCredentials(this.config.baseURL)}. ` +
-                `Verify the base URL serves the OpenAI-compatible /v1 API and that the ` +
-                `model is installed ('ollama list').`, "ollama");
-        }
-        return new ProviderError(`Ollama error: ${message}`, "ollama");
+        const cause = errorRecord?.cause ?? {};
+        const code = (errorRecord?.code ?? cause?.code);
+        const rules = [
+            {
+                match: (ctx) => code === "ECONNREFUSED" ||
+                    /ECONNREFUSED|Failed to fetch|fetch failed/.test(ctx.message),
+                errorClass: NetworkError,
+                message: () => `Cannot connect to Ollama at ${redactUrlCredentials(this.config.baseURL)}. ` +
+                    `Install Ollama (https://ollama.com), start it with 'ollama serve', then try again.`,
+            },
+            // The base client (buildAPIError) attaches statusCode + responseBody to
+            // HTTP failures. Distinguish a genuine missing-model error (give 'ollama
+            // pull' guidance) from a bare endpoint-mismatch 404 (wrong base URL / not
+            // the OpenAI-compatible /v1 surface) so the advice is actionable. Match
+            // on wording, not a bare "404" substring, to avoid misclassifying
+            // unrelated messages that merely contain those digits.
+            {
+                match: (ctx) => {
+                    const haystack = `${ctx.message} ${responseBody}`.toLowerCase();
+                    return (haystack.includes("model_not_found") ||
+                        (haystack.includes("model") && haystack.includes("not found")));
+                },
+                errorClass: InvalidModelError,
+                message: () => `Ollama model '${this.modelName}' is not available locally. ` +
+                    `Pull it first with 'ollama pull ${this.modelName}' (or try '${FALLBACK_OLLAMA_MODEL}'); ` +
+                    `list installed models with 'ollama list'.`,
+            },
+            {
+                match: (ctx) => {
+                    const haystack = `${ctx.message} ${responseBody}`.toLowerCase();
+                    return ctx.statusCode === 404 || haystack.includes("status 404");
+                },
+                errorClass: ProviderError,
+                message: () => `Ollama returned HTTP 404 from ${redactUrlCredentials(this.config.baseURL)}. ` +
+                    `Verify the base URL serves the OpenAI-compatible /v1 API and that the ` +
+                    `model is installed ('ollama list').`,
+            },
+            ...DEFAULT_ERROR_RULES,
+        ];
+        return classifyProviderError(error, rules, "ollama", this.modelName);
     }
     // ===========================================================================
     // Optional hooks — Ollama-specific behaviour

package/dist/providers/openAI/client.js

@@ -1,14 +1,15 @@
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 import { AIProviderName as AIProviderNameEnum } from "../../constants/enums.js";
 import { createProxyFetch } from "../../proxy/proxyFetch.js";
-import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../../types/index.js";
+import { AuthenticationError, InvalidModelError, ProviderError, RateLimitError, } from "../../types/index.js";
 import { logger } from "../../utils/logger.js";
 import { redactUrlCredentials } from "../../utils/logSanitize.js";
 import { calculateCost } from "../../utils/pricing.js";
+import { classifyProviderError, DEFAULT_ERROR_RULES, } from "../../utils/errorClassifier.js";
 import { createOpenAIConfig, getProviderModel, validateApiKey, } from "../../utils/providerConfig.js";
 import { MAX_IMAGE_BYTES, readBoundedBuffer } from "../../utils/sizeGuard.js";
 import { assertSafeUrl } from "../../utils/ssrfGuard.js";
-import { createTimeoutController, TimeoutError } from "../../utils/timeout.js";
+import { createTimeoutController } from "../../utils/timeout.js";
 import { stripTrailingSlash } from "../openaiChatCompletionsClient.js";
 import { OpenAIChatCompletionsProvider } from "../openaiChatCompletionsBase.js";
 const OPENAI_DEFAULT_BASE_URL = "https://api.openai.com/v1";
@@ -89,48 +90,44 @@ export class OpenAIProvider extends OpenAIChatCompletionsProvider {
         return getOpenAIModel();
     }
     formatProviderError(error) {
-        if (error instanceof TimeoutError) {
-            return new NetworkError(error.message, this.providerName);
-        }
+        // `type` isn't part of `ProviderErrorContext` (it's an OpenAI-specific
+        // error-body field), so it's read directly off the raw error here and
+        // captured by the rule closures below.
         const errorObj = error;
-        const message = errorObj?.message && typeof errorObj.message === "string"
-            ? errorObj.message
-            : "Unknown error";
         const errorType = errorObj?.type && typeof errorObj.type === "string"
             ? errorObj.type
             : undefined;
-        const statusCode = typeof errorObj?.status === "number"
-            ? errorObj.status
-            : typeof errorObj?.statusCode === "number"
-                ? errorObj.statusCode
-                : undefined;
-        // Curator P1-1 / Reviewer Finding #4: only the explicit auth markers
-        // map to AuthenticationError. Earlier we treated every
-        // `invalid_request_error` as an auth failure — that's OpenAI's catch-all
-        // for any bad request (unsupported parameter, malformed JSON, etc.) and
-        // mislabelled them as "invalid API key". Use credential-specific
-        // signals only.
-        if (message.includes("API_KEY_INVALID") ||
-            message.includes("Invalid API key") ||
-            message.includes("Incorrect API key") ||
-            message.includes("invalid_api_key") ||
-            errorType === "invalid_api_key" ||
-            statusCode === 401) {
-            return new AuthenticationError(message.includes("Incorrect API key") ||
-                message.includes("Invalid API key")
-                ? message
-                : "Invalid OpenAI API key. Please check your OPENAI_API_KEY environment variable.", this.providerName);
-        }
-        if (message.includes("rate limit") ||
-            errorType === "rate_limit_error" ||
-            statusCode === 429) {
-            return new RateLimitError("OpenAI rate limit exceeded. Please try again later.", this.providerName);
-        }
-        if (message.includes("model_not_found")) {
-            return new InvalidModelError(`Model not found: ${this.modelName}`, this.providerName);
-        }
-        // Generic provider error
-        return new ProviderError(`OpenAI error: ${message}`, this.providerName);
+        const rules = [
+            // Curator P1-1 / Reviewer Finding #4: only the explicit auth markers
+            // map to AuthenticationError. Earlier we treated every
+            // `invalid_request_error` as an auth failure — that's OpenAI's
+            // catch-all for any bad request (unsupported parameter, malformed
+            // JSON, etc.) and mislabelled them as "invalid API key". Use
+            // credential-specific signals only.
+            {
+                match: (ctx) => ctx.statusCode === 401 ||
+                    errorType === "invalid_api_key" ||
+                    /API_KEY_INVALID|Invalid API key|Incorrect API key|invalid_api_key/i.test(ctx.message),
+                errorClass: AuthenticationError,
+                message: (ctx) => /Incorrect API key|Invalid API key/i.test(ctx.message)
+                    ? ctx.message
+                    : "Invalid OpenAI API key. Please check your OPENAI_API_KEY environment variable.",
+            },
+            {
+                match: (ctx) => ctx.statusCode === 429 ||
+                    errorType === "rate_limit_error" ||
+                    /rate limit/i.test(ctx.message),
+                errorClass: RateLimitError,
+                message: "OpenAI rate limit exceeded. Please try again later.",
+            },
+            {
+                match: (ctx) => /model_not_found/i.test(ctx.message),
+                errorClass: InvalidModelError,
+                message: (ctx) => `Model not found: ${ctx.modelName}`,
+            },
+            ...DEFAULT_ERROR_RULES,
+        ];
+        return classifyProviderError(error, rules, this.providerName, this.modelName);
     }
     // ===========================================================================
     // Optional hook overrides