@mcp-abap-adt/llm-agent 22.0.1 → 22.2.0

package/dist/index.d.ts

@@ -5,6 +5,7 @@ export * from './external-results.js';
 export { assertClientDescriptors } from './interfaces/assert-client-descriptors.js';
 export * from './interfaces/index.js';
 export { BaseLLMProvider, type LLMProvider } from './llm/base-llm-provider.js';
+export { DEFAULT_RATE_LIMIT_POLICY, findRateLimit, gateFor, isRateLimitedError, preserveRateLimit, type RateLimitedError, RateLimitGate, type RateLimitPolicy, type RateLimitRetryOptions, rateLimitGateCount, resetRateLimitGates, runWithRateLimitRetry, } from './llm/rate-limit.js';
 export { NeedsDecompositionError } from './needs-decomposition-error.js';
 export * from './rag/index.js';
 export * from './types.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,SAAS,EACT,aAAa,GACd,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AACzE,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AACpF,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,KAAK,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAI3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAExE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,EACL,sBAAsB,EACtB,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,iCAAiC,EACjC,sBAAsB,GACvB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,sBAAsB,EACtB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,iBAAiB,GACvB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,oBAAoB,EACpB,KAAK,oBAAoB,GAC1B,MAAM,wCAAwC,CAAC;AAEhD,YAAY,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,gCAAgC,CAAC;AAExC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAEjF,OAAO,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,yCAAyC,CAAC;AAEjD,OAAO,EACL,cAAc,EACd,KAAK,oBAAoB,EACzB,KAAK,YAAY,GAClB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EACL,cAAc,EACd,KAAK,wBAAwB,EAC7B,wBAAwB,EACxB,KAAK,0BAA0B,EAC/B,qBAAqB,EACrB,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EACL,KAAK,oBAAoB,EACzB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,SAAS,GACV,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,qBAAqB,EACrB,eAAe,GAChB,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,SAAS,EACT,aAAa,GACd,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AACzE,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AACpF,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,KAAK,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EACL,yBAAyB,EACzB,aAAa,EACb,OAAO,EACP,kBAAkB,EAClB,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,aAAa,EACb,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAI3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAExE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,EACL,sBAAsB,EACtB,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,iCAAiC,EACjC,sBAAsB,GACvB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,sBAAsB,EACtB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,iBAAiB,GACvB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,oBAAoB,EACpB,KAAK,oBAAoB,GAC1B,MAAM,wCAAwC,CAAC;AAEhD,YAAY,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,gCAAgC,CAAC;AAExC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAEjF,OAAO,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,yCAAyC,CAAC;AAEjD,OAAO,EACL,cAAc,EACd,KAAK,oBAAoB,EACzB,KAAK,YAAY,GAClB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EACL,cAAc,EACd,KAAK,wBAAwB,EAC7B,wBAAwB,EACxB,KAAK,0BAA0B,EAC/B,qBAAqB,EACrB,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EACL,KAAK,oBAAoB,EACzB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,SAAS,GACV,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,qBAAqB,EACrB,eAAe,GAChB,MAAM,uBAAuB,CAAC"}

package/dist/index.js

@@ -6,6 +6,7 @@ export * from './external-results.js';
 export { assertClientDescriptors } from './interfaces/assert-client-descriptors.js';
 export * from './interfaces/index.js';
 export { BaseLLMProvider } from './llm/base-llm-provider.js';
+export { DEFAULT_RATE_LIMIT_POLICY, findRateLimit, gateFor, isRateLimitedError, preserveRateLimit, RateLimitGate, rateLimitGateCount, resetRateLimitGates, runWithRateLimitRetry, } from './llm/rate-limit.js';
 export { NeedsDecompositionError } from './needs-decomposition-error.js';
 export * from './rag/index.js';
 export * from './types.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,SAAS,EACT,aAAa,GACd,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AACzE,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AACpF,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,eAAe,EAAoB,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAE3B,sEAAsE;AAEtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,eAAe;AACf,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGlD,iBAAiB;AACjB,OAAO,EACL,sBAAsB,EAGtB,iCAAiC,EACjC,sBAAsB,GACvB,MAAM,gCAAgC,CAAC;AACxC,yBAAyB;AACzB,OAAO,EACL,sBAAsB,GAKvB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,oBAAoB,GAErB,MAAM,wCAAwC,CAAC;AAGhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EACL,gBAAgB,EAChB,oBAAoB,GAGrB,MAAM,gCAAgC,CAAC;AAGxC,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,oBAAoB;AACpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,yCAAyC,CAAC;AACjD,aAAa;AACb,OAAO,EACL,cAAc,GAGf,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EACL,cAAc,EAEd,wBAAwB,EAExB,qBAAqB,EACrB,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAEL,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,SAAS,GACV,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,qBAAqB,EACrB,eAAe,GAChB,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,SAAS,EACT,aAAa,GACd,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AACzE,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AACpF,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,eAAe,EAAoB,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EACL,yBAAyB,EACzB,aAAa,EACb,OAAO,EACP,kBAAkB,EAClB,iBAAiB,EAEjB,aAAa,EAGb,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAE3B,sEAAsE;AAEtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,eAAe;AACf,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGlD,iBAAiB;AACjB,OAAO,EACL,sBAAsB,EAGtB,iCAAiC,EACjC,sBAAsB,GACvB,MAAM,gCAAgC,CAAC;AACxC,yBAAyB;AACzB,OAAO,EACL,sBAAsB,GAKvB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,oBAAoB,GAErB,MAAM,wCAAwC,CAAC;AAGhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EACL,gBAAgB,EAChB,oBAAoB,GAGrB,MAAM,gCAAgC,CAAC;AAGxC,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,oBAAoB;AACpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,yCAAyC,CAAC;AACjD,aAAa;AACb,OAAO,EACL,cAAc,GAGf,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EACL,cAAc,EAEd,wBAAwB,EAExB,qBAAqB,EACrB,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAEL,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,SAAS,GACV,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,qBAAqB,EACrB,eAAe,GAChB,MAAM,uBAAuB,CAAC"}

package/dist/llm/base-llm-provider.d.ts

@@ -2,6 +2,7 @@
  * Base interface for LLM providers
  */
 import type { IModelInfo, LLMCallOptions, LLMProviderConfig, LLMResponse, Message } from '@mcp-abap-adt/llm-agent';
+import { type RateLimitRetryOptions } from './rate-limit.js';
 export interface LLMProvider {
     /**
      * Send a chat message and get response
@@ -29,5 +30,73 @@ export declare abstract class BaseLLMProvider<C extends LLMProviderConfig = LLMP
      * Validate configuration
      */
     protected validateConfig(): void;
+    /**
+     * Which account and endpoint this call bills to.
+     *
+     * A quota belongs to an account at an endpoint, so two providers that differ
+     * in either one do not share a limit. In a multi-tenant process a key built
+     * from the class and the model alone would let one tenant's 429 pause
+     * another's for a minute, on a quota that tenant never touched.
+     *
+     * The credential is reduced to a short digest: the key is an in-memory map
+     * key and may reach a log line, so it must identify an account without being
+     * the account's secret. Override to add a provider's own account fields
+     * (organization, project, resource group) — never the raw secret.
+     */
+    protected rateLimitScope(): string;
+    /**
+     * Reduce spellings of one endpoint to one key.
+     *
+     * Two callers that reach the same server must land on the same gate, and a
+     * URL has more than one way of naming it: a trailing slash, an upper-case
+     * host, a port that was already the default. Written differently they would
+     * be metered as two quotas and stop coordinating — the same defect as reading
+     * the configured URL instead of the resolved one, one level down.
+     *
+     * The query string is kept verbatim: some endpoints carry a deployment or an
+     * API version there, and merging those would be worse than splitting them.
+     */
+    protected canonicalEndpoint(raw: string): string;
+    /**
+     * The endpoint this provider actually reaches — the RESOLVED one, not the
+     * configured one. A provider left to its default and a provider handed that
+     * same default explicitly talk to the same server and share its limit; read
+     * from the config alone they would look like two quotas and stop
+     * coordinating. Override wherever a default is filled in.
+     */
+    protected quotaEndpoint(): string;
+    /** Available to subclasses building their own scope out of other fields. */
+    protected credentialFingerprint(secret: string | undefined): string;
+    /**
+     * Which quota this call spends. Limits are per model, so the model is in the
+     * key — and it must be the model the CALL uses, not the configured default.
+     * A per-request override spends a different quota: keyed by the default, one
+     * model's 429 would pause another's, and two overrides would share a gate
+     * neither of them belongs to.
+     */
+    protected rateLimitKey(model?: string): string;
+    /** Is this "too many requests" rather than a real failure? */
+    protected isRateLimited(error: unknown): boolean;
+    /**
+     * How long the server asked us to wait.
+     *
+     * `Retry-After` is seconds in the SAP AI Core contract and is usually seconds
+     * elsewhere, but the HTTP spec also allows an HTTP-date, so both are read.
+     */
+    protected retryAfterSeconds(error: unknown): number | undefined;
+    /**
+     * Keep the 429 visible through the provider's own error wrapping.
+     *
+     * Providers rethrow their transport error as a readable one. Call this on the
+     * way out so the consumer still reads a fact, not a substring.
+     */
+    protected preserveRateLimit<E extends Error>(original: unknown, wrapped: E): E;
+    /** Wrap one provider call in the shared policy. */
+    protected withRateLimitRetry<T>(fn: () => Promise<T>, extra?: {
+        /** The model this call actually uses, when it overrides the configured one. */
+        model?: string;
+        signal?: AbortSignal;
+        onRetry?: RateLimitRetryOptions['onRetry'];
+    }): Promise<T>;
 }
 //# sourceMappingURL=base-llm-provider.d.ts.map

package/dist/llm/base-llm-provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base-llm-provider.d.ts","sourceRoot":"","sources":["../../src/llm/base-llm-provider.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,UAAU,EACV,cAAc,EACd,iBAAiB,EACjB,WAAW,EACX,OAAO,EACR,MAAM,yBAAyB,CAAC;AAEjC,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,IAAI,CACF,QAAQ,EAAE,OAAO,EAAE,EACnB,KAAK,CAAC,EAAE,OAAO,EAAE,EACjB,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,WAAW,CAAC,CAAC;IAExB;;OAEG;IACH,UAAU,CACR,QAAQ,EAAE,OAAO,EAAE,EACnB,KAAK,CAAC,EAAE,OAAO,EAAE,EACjB,OAAO,CAAC,EAAE,cAAc,GACvB,aAAa,CAAC,WAAW,CAAC,CAAC;IAE9B;;OAEG;IACH,SAAS,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC;IAE/C;;OAEG;IACH,kBAAkB,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC;CACzD;AAED,8BAAsB,eAAe,CACnC,CAAC,SAAS,iBAAiB,GAAG,iBAAiB,CAC/C,YAAW,WAAW;IAEtB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBAEP,MAAM,EAAE,CAAC;IAIrB,QAAQ,CAAC,IAAI,CACX,QAAQ,EAAE,OAAO,EAAE,EACnB,KAAK,CAAC,EAAE,OAAO,EAAE,EACjB,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,WAAW,CAAC;IAEvB,QAAQ,CAAC,UAAU,CACjB,QAAQ,EAAE,OAAO,EAAE,EACnB,KAAK,CAAC,EAAE,OAAO,EAAE,EACjB,OAAO,CAAC,EAAE,cAAc,GACvB,aAAa,CAAC,WAAW,CAAC;IAE7B;;OAEG;IACH,SAAS,CAAC,cAAc,IAAI,IAAI;CAKjC"}
+{"version":3,"file":"base-llm-provider.d.ts","sourceRoot":"","sources":["../../src/llm/base-llm-provider.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EACV,UAAU,EACV,cAAc,EACd,iBAAiB,EACjB,WAAW,EACX,OAAO,EACR,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAEL,KAAK,qBAAqB,EAE3B,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,IAAI,CACF,QAAQ,EAAE,OAAO,EAAE,EACnB,KAAK,CAAC,EAAE,OAAO,EAAE,EACjB,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,WAAW,CAAC,CAAC;IAExB;;OAEG;IACH,UAAU,CACR,QAAQ,EAAE,OAAO,EAAE,EACnB,KAAK,CAAC,EAAE,OAAO,EAAE,EACjB,OAAO,CAAC,EAAE,cAAc,GACvB,aAAa,CAAC,WAAW,CAAC,CAAC;IAE9B;;OAEG;IACH,SAAS,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC;IAE/C;;OAEG;IACH,kBAAkB,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC;CACzD;AAED,8BAAsB,eAAe,CACnC,CAAC,SAAS,iBAAiB,GAAG,iBAAiB,CAC/C,YAAW,WAAW;IAEtB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBAEP,MAAM,EAAE,CAAC;IAIrB,QAAQ,CAAC,IAAI,CACX,QAAQ,EAAE,OAAO,EAAE,EACnB,KAAK,CAAC,EAAE,OAAO,EAAE,EACjB,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,WAAW,CAAC;IAEvB,QAAQ,CAAC,UAAU,CACjB,QAAQ,EAAE,OAAO,EAAE,EACnB,KAAK,CAAC,EAAE,OAAO,EAAE,EACjB,OAAO,CAAC,EAAE,cAAc,GACvB,aAAa,CAAC,WAAW,CAAC;IAE7B;;OAEG;IACH,SAAS,CAAC,cAAc,IAAI,IAAI;IAchC;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,cAAc,IAAI,MAAM;IAOlC;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAahD;;;;;;OAMG;IACH,SAAS,CAAC,aAAa,IAAI,MAAM;IAIjC,4EAA4E;IAC5E,SAAS,CAAC,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM;IAInE;;;;;;OAMG;IACH,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM;IAM9C,8DAA8D;IAC9D,SAAS,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO;IAIhD;;;;;OAKG;IACH,SAAS,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS;IAU/D;;;;;OAKG;IACH,SAAS,CAAC,iBAAiB,CAAC,CAAC,SAAS,KAAK,EACzC,QAAQ,EAAE,OAAO,EACjB,OAAO,EAAE,CAAC,GACT,CAAC;IAIJ,mDAAmD;IACnD,SAAS,CAAC,kBAAkB,CAAC,CAAC,EAC5B,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,KAAK,CAAC,EAAE;QACN,+EAA+E;QAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,WAAW,CAAC;QACrB,OAAO,CAAC,EAAE,qBAAqB,CAAC,SAAS,CAAC,CAAC;KAC5C,GACA,OAAO,CAAC,CAAC,CAAC;CAUd"}

package/dist/llm/base-llm-provider.js

@@ -1,6 +1,8 @@
 /**
  * Base interface for LLM providers
  */
+import { createHash } from 'node:crypto';
+import { preserveRateLimit, runWithRateLimitRetry, } from './rate-limit.js';
 export class BaseLLMProvider {
     config;
     constructor(config) {
@@ -14,5 +16,163 @@ export class BaseLLMProvider {
             throw new Error('API key is required');
         }
     }
+    // --- Rate limiting (issue #282) -----------------------------------------
+    //
+    // The policy is shared (see `rate-limit.ts`); a provider supplies only the
+    // two facts the policy cannot know. The defaults below read an AxiosError,
+    // which covers every provider here: anthropic and openai use axios directly,
+    // sap-aicore gets one through @sap-ai-sdk, and deepseek and ollama build on
+    // the openai provider. A provider on another transport overrides them.
+    /**
+     * Which account and endpoint this call bills to.
+     *
+     * A quota belongs to an account at an endpoint, so two providers that differ
+     * in either one do not share a limit. In a multi-tenant process a key built
+     * from the class and the model alone would let one tenant's 429 pause
+     * another's for a minute, on a quota that tenant never touched.
+     *
+     * The credential is reduced to a short digest: the key is an in-memory map
+     * key and may reach a log line, so it must identify an account without being
+     * the account's secret. Override to add a provider's own account fields
+     * (organization, project, resource group) — never the raw secret.
+     */
+    rateLimitScope() {
+        return [
+            this.canonicalEndpoint(this.quotaEndpoint()),
+            this.credentialFingerprint(this.config.apiKey),
+        ].join('|');
+    }
+    /**
+     * Reduce spellings of one endpoint to one key.
+     *
+     * Two callers that reach the same server must land on the same gate, and a
+     * URL has more than one way of naming it: a trailing slash, an upper-case
+     * host, a port that was already the default. Written differently they would
+     * be metered as two quotas and stop coordinating — the same defect as reading
+     * the configured URL instead of the resolved one, one level down.
+     *
+     * The query string is kept verbatim: some endpoints carry a deployment or an
+     * API version there, and merging those would be worse than splitting them.
+     */
+    canonicalEndpoint(raw) {
+        const trimmed = raw.trim();
+        if (!trimmed)
+            return 'default';
+        try {
+            // `origin` already lower-cases the host and drops a default port.
+            const url = new URL(trimmed);
+            return `${url.origin}${url.pathname.replace(/\/+$/, '')}${url.search}`;
+        }
+        catch {
+            // Not absolute (a path, a host:port). Normalise what is safe to.
+            return trimmed.replace(/\/+$/, '');
+        }
+    }
+    /**
+     * The endpoint this provider actually reaches — the RESOLVED one, not the
+     * configured one. A provider left to its default and a provider handed that
+     * same default explicitly talk to the same server and share its limit; read
+     * from the config alone they would look like two quotas and stop
+     * coordinating. Override wherever a default is filled in.
+     */
+    quotaEndpoint() {
+        return this.config.baseURL ?? 'default';
+    }
+    /** Available to subclasses building their own scope out of other fields. */
+    credentialFingerprint(secret) {
+        return fingerprint(secret);
+    }
+    /**
+     * Which quota this call spends. Limits are per model, so the model is in the
+     * key — and it must be the model the CALL uses, not the configured default.
+     * A per-request override spends a different quota: keyed by the default, one
+     * model's 429 would pause another's, and two overrides would share a gate
+     * neither of them belongs to.
+     */
+    rateLimitKey(model) {
+        return `${this.constructor.name}:${this.rateLimitScope()}:${model ?? this.config.model ?? 'default'}`;
+    }
+    /** Is this "too many requests" rather than a real failure? */
+    isRateLimited(error) {
+        return httpStatusOf(error) === 429;
+    }
+    /**
+     * How long the server asked us to wait.
+     *
+     * `Retry-After` is seconds in the SAP AI Core contract and is usually seconds
+     * elsewhere, but the HTTP spec also allows an HTTP-date, so both are read.
+     */
+    retryAfterSeconds(error) {
+        const raw = headerOf(error, 'retry-after');
+        if (raw === undefined)
+            return undefined;
+        const seconds = Number(raw);
+        if (Number.isFinite(seconds) && seconds >= 0)
+            return seconds;
+        const when = Date.parse(String(raw));
+        if (!Number.isNaN(when))
+            return Math.max(0, (when - Date.now()) / 1000);
+        return undefined;
+    }
+    /**
+     * Keep the 429 visible through the provider's own error wrapping.
+     *
+     * Providers rethrow their transport error as a readable one. Call this on the
+     * way out so the consumer still reads a fact, not a substring.
+     */
+    preserveRateLimit(original, wrapped) {
+        return preserveRateLimit(original, wrapped);
+    }
+    /** Wrap one provider call in the shared policy. */
+    withRateLimitRetry(fn, extra) {
+        return runWithRateLimitRetry(fn, {
+            key: this.rateLimitKey(extra?.model),
+            policy: this.config.rateLimit,
+            isRateLimited: (e) => this.isRateLimited(e),
+            retryAfterSeconds: (e) => this.retryAfterSeconds(e),
+            signal: extra?.signal,
+            onRetry: extra?.onRetry,
+        });
+    }
+}
+/**
+ * A short, stable, non-reversible stand-in for a credential.
+ *
+ * Enough to tell two accounts apart in a map key; not enough to be the secret
+ * if that key is ever printed. An absent credential is its own scope — several
+ * providers configured without one are, as far as we can tell, the same one.
+ */
+function fingerprint(secret) {
+    if (!secret)
+        return 'anonymous';
+    return createHash('sha256').update(secret).digest('hex').slice(0, 12);
+}
+/** Status of an axios-shaped error, or undefined when it is shaped otherwise. */
+function httpStatusOf(error) {
+    const e = error;
+    // axios keeps it under response; several SDKs hoist it onto the error itself.
+    for (const candidate of [e?.response?.status, e?.status, e?.statusCode]) {
+        if (typeof candidate === 'number')
+            return candidate;
+    }
+    return undefined;
+}
+/** One response header, case-insensitively, from an axios-shaped error. */
+function headerOf(error, name) {
+    const headers = error?.response
+        ?.headers;
+    if (!headers || typeof headers !== 'object')
+        return undefined;
+    // AxiosHeaders exposes a get(); a plain object does not.
+    const get = headers.get;
+    if (typeof get === 'function') {
+        const v = get.call(headers, name);
+        return v === undefined || v === null ? undefined : String(v);
+    }
+    for (const [k, v] of Object.entries(headers)) {
+        if (k.toLowerCase() === name)
+            return v === undefined || v === null ? undefined : String(v);
+    }
+    return undefined;
 }
 //# sourceMappingURL=base-llm-provider.js.map

package/dist/llm/base-llm-provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"base-llm-provider.js","sourceRoot":"","sources":["../../src/llm/base-llm-provider.ts"],"names":[],"mappings":"AAAA;;GAEG;AAwCH,MAAM,OAAgB,eAAe;IAI1B,MAAM,CAAI;IAEnB,YAAY,MAAS;QACnB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAcD;;OAEG;IACO,cAAc;QACtB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"base-llm-provider.js","sourceRoot":"","sources":["../../src/llm/base-llm-provider.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQzC,OAAO,EACL,iBAAiB,EAEjB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AAgCzB,MAAM,OAAgB,eAAe;IAI1B,MAAM,CAAI;IAEnB,YAAY,MAAS;QACnB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAcD;;OAEG;IACO,cAAc;QACtB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,EAAE;IACF,2EAA2E;IAC3E,2EAA2E;IAC3E,6EAA6E;IAC7E,4EAA4E;IAC5E,uEAAuE;IAEvE;;;;;;;;;;;;OAYG;IACO,cAAc;QACtB,OAAO;YACL,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAC5C,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;SAC/C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;IAED;;;;;;;;;;;OAWG;IACO,iBAAiB,CAAC,GAAW;QACrC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,IAAI,CAAC;YACH,kEAAkE;YAClE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;YACjE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACO,aAAa;QACrB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC;IAC1C,CAAC;IAED,4EAA4E;IAClE,qBAAqB,CAAC,MAA0B;QACxD,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;;OAMG;IACO,YAAY,CAAC,KAAc;QACnC,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,IAAI,CAAC,cAAc,EAAE,IACtD,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,SAChC,EAAE,CAAC;IACL,CAAC;IAED,8DAA8D;IACpD,aAAa,CAAC,KAAc;QACpC,OAAO,YAAY,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC;IACrC,CAAC;IAED;;;;;OAKG;IACO,iBAAiB,CAAC,KAAc;QACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QAC3C,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACxE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACO,iBAAiB,CACzB,QAAiB,EACjB,OAAU;QAEV,OAAO,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,mDAAmD;IACzC,kBAAkB,CAC1B,EAAoB,EACpB,KAKC;QAED,OAAO,qBAAqB,CAAC,EAAE,EAAE;YAC/B,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAC7B,aAAa,EAAE,CAAC,CAAU,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;YACpD,iBAAiB,EAAE,CAAC,CAAU,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC5D,MAAM,EAAE,KAAK,EAAE,MAAM;YACrB,OAAO,EAAE,KAAK,EAAE,OAAO;SACxB,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,MAA0B;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAO,WAAW,CAAC;IAChC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,iFAAiF;AACjF,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,CAAC,GAAG,KAIT,CAAC;IACF,8EAA8E;IAC9E,KAAK,MAAM,SAAS,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;QACxE,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;IACtD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,2EAA2E;AAC3E,SAAS,QAAQ,CAAC,KAAc,EAAE,IAAY;IAC5C,MAAM,OAAO,GAAI,KAA8C,EAAE,QAAQ;QACvE,EAAE,OAAO,CAAC;IACZ,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9D,yDAAyD;IACzD,MAAM,GAAG,GAAI,OAA4C,CAAC,GAAG,CAAC;IAC9D,IAAI,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAkC,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI;YAC1B,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/llm/rate-limit.d.ts

@@ -0,0 +1,165 @@
+/**
+ * Shared rate-limit handling for every LLM provider.
+ *
+ * None of the providers handled HTTP 429 (issue #282). Each one let the status
+ * collapse into an error message, so consumers were reduced to matching the
+ * substring "429" in prose to decide whether to retry.
+ *
+ * The policy lives here rather than in a provider because the providers differ
+ * in SDK but not in the shape of the problem: a shared quota, a documented
+ * `Retry-After`, and a herd of concurrent callers that will all rediscover the
+ * same limit unless something holds them back together.
+ *
+ * SAP AI Core states the rules this implements
+ * (help.sap.com, Rate Limit Management):
+ *
+ *   Do not retry immediately after a 429. Use exponential backoff with jitter
+ *   to prevent thundering-herd behavior. If the response includes a
+ *   `Retry-After` header, use its value as the wait interval. Limit retries by
+ *   using a maximum cap (for example, 5 retries or 60 seconds total wait).
+ *
+ * The same rules fit Anthropic and OpenAI, which return 429 with `Retry-After`
+ * as ordinary HTTP. Ollama is local and never rate-limited; it simply never
+ * enters this path.
+ */
+export interface RateLimitPolicy {
+    /** Set false to pass every error straight through. */
+    enabled: boolean;
+    /** Total attempts INCLUDING the first. 1 disables retrying without disabling the gate. */
+    maxAttempts: number;
+    /** Give up once the accumulated waiting would exceed this. */
+    maxTotalWaitMs: number;
+    /** First backoff step when the server names no time of its own. */
+    baseDelayMs: number;
+    /** Ceiling for one computed step, before jitter. */
+    maxDelayMs: number;
+}
+export declare const DEFAULT_RATE_LIMIT_POLICY: RateLimitPolicy;
+/** An error annotated by this module, so consumers read a fact instead of prose. */
+export interface RateLimitedError extends Error {
+    rateLimited: true;
+    /** What the server asked for, when it asked. */
+    retryAfterSeconds?: number;
+    /** How many attempts were spent before giving up. */
+    attempts: number;
+}
+export declare function isRateLimitedError(e: unknown): e is RateLimitedError;
+/**
+ * One shared pause per quota.
+ *
+ * A rate limit belongs to the quota, not to the request that happened to
+ * discover it. When one call is told to wait, every other call against the same
+ * quota is already over the limit too — letting each find that out for itself
+ * means N more rejected requests and N more penalties, which is how a limit
+ * that should last one window lasts several.
+ *
+ * Keyed because limits are per model: one model being throttled says nothing
+ * about another.
+ */
+export declare class RateLimitGate {
+    private notBefore;
+    /** Hold every caller until the named time. Never shortens an existing hold. */
+    penalise(ms: number, now?: number): void;
+    /** Milliseconds still to wait, or 0. */
+    remaining(now?: number): number;
+    clear(): void;
+    /**
+     * Wait out any active hold.
+     *
+     * Re-checked after every wake, because the hold is not fixed at the moment
+     * this caller started waiting: another caller's 429 extends it, and a sleeper
+     * timed against the old deadline would wake early and spend a request on a
+     * quota the server has since said is still closed.
+     *
+     * The wait is jittered per caller: without that, everyone released by one
+     * penalty wakes in the same millisecond and rebuilds the herd the penalty was
+     * meant to break up.
+     */
+    waitUntilOpen(signal?: AbortSignal, maxWaitMs?: number): Promise<void>;
+}
+/**
+ * Keys are open-ended — a per-request model override mints a new one — so the
+ * registry is pruned rather than left to grow for the life of the process.
+ * Only entries that are both open and long idle are dropped: a held gate is
+ * doing its job, and a recently used one may still be someone's in-flight call.
+ */
+export declare const GATE_IDLE_TTL_MS: number;
+/**
+ * How many quotas the registry keeps. Enforced by evicting gates that are both
+ * open and unheld, so a process with more than this many pauses or in-flight
+ * calls at once can exceed it — those gates are load-bearing. Evicting an idle
+ * one costs nothing: it carries no deadline, and the next call mints an
+ * equivalent.
+ */
+export declare const GATE_LIMIT = 500;
+/** The gate for one quota. Shared across every provider instance in the process. */
+export declare function gateFor(key: string): RateLimitGate;
+/**
+ * Hold a gate for the length of one call, and keep it in the registry meanwhile.
+ *
+ * Being open is not the same as being unused. A request is in flight for as
+ * long as it takes the server to answer, and until that answer arrives the gate
+ * it belongs to has no pause on it. Evicted in that window, the call would go on
+ * to penalise an object the registry no longer knows: the pause would be real
+ * and invisible, and the next caller would be handed a fresh open gate and sent
+ * straight into a quota that had just closed. Worse than no gate at all, since
+ * the penalty is paid and nothing is bought with it.
+ *
+ * Release in a `finally`. Releasing twice is harmless.
+ */
+export declare function leaseRateLimitGate(key: string): {
+    gate: RateLimitGate;
+    release: () => void;
+};
+/**
+ * Reclaim gates that are open and long idle. Exported so a long-lived host can
+ * run it on a timer, and so the reclaim can be tested at a chosen `now` without
+ * waiting ten minutes. It frees only what is certainly stale; the size bound is
+ * enforced separately, by `reclaimGates`.
+ */
+export declare function pruneRateLimitGates(now?: number): void;
+/** How many quotas are currently tracked. Diagnostics and tests. */
+export declare function rateLimitGateCount(): number;
+/** Test seam — drops every gate. */
+export declare function resetRateLimitGates(): void;
+export interface RateLimitRetryOptions {
+    /** Identifies the quota being spent. Limits are per model, so include it. */
+    key: string;
+    policy?: Partial<RateLimitPolicy>;
+    /** Does this error mean "too many requests"? */
+    isRateLimited: (error: unknown) => boolean;
+    /** What the server asked us to wait, in seconds, if it said. */
+    retryAfterSeconds?: (error: unknown) => number | undefined;
+    signal?: AbortSignal;
+    onRetry?: (info: {
+        attempt: number;
+        delayMs: number;
+        retryAfterSeconds?: number;
+    }) => void;
+}
+/**
+ * Run `fn`, respecting the shared pause and retrying a rate limit.
+ *
+ * Any error that is not a rate limit is rethrown untouched and immediately —
+ * this is not a general-purpose retry, and turning a genuine failure into four
+ * more of them would be worse than the failure.
+ */
+export declare function runWithRateLimitRetry<T>(fn: () => Promise<T>, opts: RateLimitRetryOptions): Promise<T>;
+/**
+ * The rate-limit marker on an error or anywhere in its `cause` chain.
+ *
+ * Layers above the provider rewrap errors — the ILlm adapter turns anything
+ * thrown into an `LlmError` — so the marker is rarely still on the outermost
+ * object by the time a retry decorator inspects it. Bounded by depth and a
+ * visited set, like `extractStatusCode`, so a cyclic chain cannot hang.
+ */
+export declare function findRateLimit(err: unknown): RateLimitedError | undefined;
+/**
+ * Carry the rate-limit facts onto a provider's own error.
+ *
+ * Every provider catches its transport error and rethrows something friendlier.
+ * That is fine for a message and fatal for a fact: the 429 would be lost at the
+ * exact boundary where the consumer needs it. This moves the facts across.
+ */
+export declare function preserveRateLimit<E extends Error>(original: unknown, wrapped: E): E;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/llm/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../src/llm/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,MAAM,WAAW,eAAe;IAC9B,sDAAsD;IACtD,OAAO,EAAE,OAAO,CAAC;IACjB,0FAA0F;IAC1F,WAAW,EAAE,MAAM,CAAC;IACpB,8DAA8D;IAC9D,cAAc,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,yBAAyB,EAAE,eAMvC,CAAC;AAEF,oFAAoF;AACpF,MAAM,WAAW,gBAAiB,SAAQ,KAAK;IAC7C,WAAW,EAAE,IAAI,CAAC;IAClB,gDAAgD;IAChD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qDAAqD;IACrD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,gBAAgB,CAMpE;AA8BD;;;;;;;;;;;GAWG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,SAAS,CAAK;IAEtB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI;IAIpD,wCAAwC;IACxC,SAAS,CAAC,GAAG,GAAE,MAAmB,GAAG,MAAM;IAI3C,KAAK,IAAI,IAAI;IAIb;;;;;;;;;;;OAWG;IACG,aAAa,CACjB,MAAM,CAAC,EAAE,WAAW,EACpB,SAAS,SAA2B,GACnC,OAAO,CAAC,IAAI,CAAC;CAiBjB;AAWD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,QAAc,CAAC;AAC5C;;;;;;GAMG;AACH,eAAO,MAAM,UAAU,MAAM,CAAC;AAE9B,oFAAoF;AACpF,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,CAelD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG;IAC/C,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB,CAgBA;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAmB,GAAG,IAAI,CAMlE;AAsCD,oEAAoE;AACpE,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,oCAAoC;AACpC,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED,MAAM,WAAW,qBAAqB;IACpC,6EAA6E;IAC7E,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAClC,gDAAgD;IAChD,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IAC3C,gEAAgE;IAChE,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,GAAG,SAAS,CAAC;IAC3D,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;KAC5B,KAAK,IAAI,CAAC;CACZ;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,EAC3C,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,CAAC,CAAC,CAUZ;AAuFD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,GAAG,SAAS,CAWxE;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,KAAK,EAC/C,QAAQ,EAAE,OAAO,EACjB,OAAO,EAAE,CAAC,GACT,CAAC,CASH"}

package/dist/llm/rate-limit.js

@@ -0,0 +1,394 @@
+/**
+ * Shared rate-limit handling for every LLM provider.
+ *
+ * None of the providers handled HTTP 429 (issue #282). Each one let the status
+ * collapse into an error message, so consumers were reduced to matching the
+ * substring "429" in prose to decide whether to retry.
+ *
+ * The policy lives here rather than in a provider because the providers differ
+ * in SDK but not in the shape of the problem: a shared quota, a documented
+ * `Retry-After`, and a herd of concurrent callers that will all rediscover the
+ * same limit unless something holds them back together.
+ *
+ * SAP AI Core states the rules this implements
+ * (help.sap.com, Rate Limit Management):
+ *
+ *   Do not retry immediately after a 429. Use exponential backoff with jitter
+ *   to prevent thundering-herd behavior. If the response includes a
+ *   `Retry-After` header, use its value as the wait interval. Limit retries by
+ *   using a maximum cap (for example, 5 retries or 60 seconds total wait).
+ *
+ * The same rules fit Anthropic and OpenAI, which return 429 with `Retry-After`
+ * as ordinary HTTP. Ollama is local and never rate-limited; it simply never
+ * enters this path.
+ */
+import { DefaultWaitStrategy } from '../interfaces/wait-strategy.js';
+export const DEFAULT_RATE_LIMIT_POLICY = {
+    enabled: true,
+    maxAttempts: 5,
+    maxTotalWaitMs: 60_000,
+    baseDelayMs: 1_000,
+    maxDelayMs: 20_000,
+};
+export function isRateLimitedError(e) {
+    return (typeof e === 'object' &&
+        e !== null &&
+        e.rateLimited === true);
+}
+const waiter = new DefaultWaitStrategy();
+/**
+ * Sleep, or throw if the signal aborts.
+ *
+ * Delegated to the shared wait strategy rather than hand-rolled: the listener
+ * bookkeeping is where a sleep like this goes wrong. One added per backoff and
+ * never removed accumulates on a request- or session-scoped signal until Node
+ * warns about the leak — a defect this repository has already fixed once, in
+ * the retry decorators. Fixed in one place, it stays fixed for every waiter.
+ */
+const sleep = async (ms, signal) => {
+    const aborted = () => signal?.reason ?? new Error('Aborted');
+    if (signal?.aborted)
+        throw aborted();
+    if ((await waiter.wait(ms, signal)) === 'aborted')
+        throw aborted();
+};
+/**
+ * Per-caller spread on waking, so everyone released by one penalty does not
+ * wake in the same millisecond and rebuild the herd the penalty broke up.
+ *
+ * It is added to a wait, never to a budget: a wait capped at exactly the budget
+ * simply loses the spread, which costs nothing — a caller whose budget ends
+ * with the pause is leaving either way.
+ */
+const WAKE_SPREAD_MS = 250;
+/**
+ * One shared pause per quota.
+ *
+ * A rate limit belongs to the quota, not to the request that happened to
+ * discover it. When one call is told to wait, every other call against the same
+ * quota is already over the limit too — letting each find that out for itself
+ * means N more rejected requests and N more penalties, which is how a limit
+ * that should last one window lasts several.
+ *
+ * Keyed because limits are per model: one model being throttled says nothing
+ * about another.
+ */
+export class RateLimitGate {
+    notBefore = 0;
+    /** Hold every caller until the named time. Never shortens an existing hold. */
+    penalise(ms, now = Date.now()) {
+        this.notBefore = Math.max(this.notBefore, now + ms);
+    }
+    /** Milliseconds still to wait, or 0. */
+    remaining(now = Date.now()) {
+        return Math.max(0, this.notBefore - now);
+    }
+    clear() {
+        this.notBefore = 0;
+    }
+    /**
+     * Wait out any active hold.
+     *
+     * Re-checked after every wake, because the hold is not fixed at the moment
+     * this caller started waiting: another caller's 429 extends it, and a sleeper
+     * timed against the old deadline would wake early and spend a request on a
+     * quota the server has since said is still closed.
+     *
+     * The wait is jittered per caller: without that, everyone released by one
+     * penalty wakes in the same millisecond and rebuilds the herd the penalty was
+     * meant to break up.
+     */
+    async waitUntilOpen(signal, maxWaitMs = Number.POSITIVE_INFINITY) {
+        const deadline = Date.now() + maxWaitMs;
+        for (;;) {
+            const left = this.remaining();
+            if (left <= 0)
+                return;
+            const budget = deadline - Date.now();
+            // Out of the caller's budget with the gate still shut. It is told, not
+            // held: `remaining()` still reports the hold, and the caller decides.
+            if (budget <= 0)
+                return;
+            // A timer that lands a hair early is simply waited out again on the next
+            // turn, which is why the cap needs no padding to be safe.
+            await sleep(Math.min(left + Math.random() * WAKE_SPREAD_MS, budget), signal);
+        }
+    }
+}
+const gates = new Map();
+/**
+ * Keys are open-ended — a per-request model override mints a new one — so the
+ * registry is pruned rather than left to grow for the life of the process.
+ * Only entries that are both open and long idle are dropped: a held gate is
+ * doing its job, and a recently used one may still be someone's in-flight call.
+ */
+export const GATE_IDLE_TTL_MS = 10 * 60_000;
+/**
+ * How many quotas the registry keeps. Enforced by evicting gates that are both
+ * open and unheld, so a process with more than this many pauses or in-flight
+ * calls at once can exceed it — those gates are load-bearing. Evicting an idle
+ * one costs nothing: it carries no deadline, and the next call mints an
+ * equivalent.
+ */
+export const GATE_LIMIT = 500;
+/** The gate for one quota. Shared across every provider instance in the process. */
+export function gateFor(key) {
+    const now = Date.now();
+    const existing = gates.get(key);
+    if (existing) {
+        existing.lastUsed = now;
+        return existing.gate;
+    }
+    if (gates.size >= GATE_LIMIT)
+        reclaimGates(now);
+    const entry = {
+        gate: new RateLimitGate(),
+        lastUsed: now,
+        leases: 0,
+    };
+    gates.set(key, entry);
+    return entry.gate;
+}
+/**
+ * Hold a gate for the length of one call, and keep it in the registry meanwhile.
+ *
+ * Being open is not the same as being unused. A request is in flight for as
+ * long as it takes the server to answer, and until that answer arrives the gate
+ * it belongs to has no pause on it. Evicted in that window, the call would go on
+ * to penalise an object the registry no longer knows: the pause would be real
+ * and invisible, and the next caller would be handed a fresh open gate and sent
+ * straight into a quota that had just closed. Worse than no gate at all, since
+ * the penalty is paid and nothing is bought with it.
+ *
+ * Release in a `finally`. Releasing twice is harmless.
+ */
+export function leaseRateLimitGate(key) {
+    const gate = gateFor(key);
+    // By identity, not by key: `resetRateLimitGates` may have replaced the entry
+    // by the time this is released, and that entry's count is not ours to touch.
+    const entry = gates.get(key);
+    if (entry)
+        entry.leases += 1;
+    let released = false;
+    return {
+        gate,
+        release: () => {
+            if (released || !entry)
+                return;
+            released = true;
+            entry.leases -= 1;
+            entry.lastUsed = Date.now();
+        },
+    };
+}
+/**
+ * Reclaim gates that are open and long idle. Exported so a long-lived host can
+ * run it on a timer, and so the reclaim can be tested at a chosen `now` without
+ * waiting ten minutes. It frees only what is certainly stale; the size bound is
+ * enforced separately, by `reclaimGates`.
+ */
+export function pruneRateLimitGates(now = Date.now()) {
+    for (const [key, entry] of gates) {
+        if (isEvictable(entry, now) && now - entry.lastUsed > GATE_IDLE_TTL_MS) {
+            gates.delete(key);
+        }
+    }
+}
+/**
+ * Safe to forget: nobody is waiting behind it, and no call is holding it.
+ *
+ * An open, unleased gate carries no state at all — the next call mints an
+ * equivalent one and loses nothing.
+ */
+function isEvictable(entry, now) {
+    return entry.leases === 0 && entry.gate.remaining(now) === 0;
+}
+/**
+ * Hold the registry at `GATE_LIMIT`.
+ *
+ * Age alone is not a bound: a burst of per-request model overrides mints keys
+ * far faster than the ten-minute idle rule retires them, and the map grows for
+ * as long as the burst lasts. So once the stale entries are gone, the least
+ * recently used OPEN gates go too, oldest first, until the registry is back
+ * under the limit.
+ *
+ * Only idle gates are evicted: not one holding a pause, which IS the pause, and
+ * not one a call is still holding, which may be about to become a pause.
+ */
+function reclaimGates(now) {
+    pruneRateLimitGates(now);
+    if (gates.size < GATE_LIMIT)
+        return;
+    const evictable = [...gates]
+        .filter(([, entry]) => isEvictable(entry, now))
+        .sort((a, b) => a[1].lastUsed - b[1].lastUsed);
+    for (const [key] of evictable) {
+        if (gates.size < GATE_LIMIT)
+            return;
+        gates.delete(key);
+    }
+}
+/** How many quotas are currently tracked. Diagnostics and tests. */
+export function rateLimitGateCount() {
+    return gates.size;
+}
+/** Test seam — drops every gate. */
+export function resetRateLimitGates() {
+    gates.clear();
+}
+/**
+ * Run `fn`, respecting the shared pause and retrying a rate limit.
+ *
+ * Any error that is not a rate limit is rethrown untouched and immediately —
+ * this is not a general-purpose retry, and turning a genuine failure into four
+ * more of them would be worse than the failure.
+ */
+export async function runWithRateLimitRetry(fn, opts) {
+    const policy = { ...DEFAULT_RATE_LIMIT_POLICY, ...opts.policy };
+    if (!policy.enabled)
+        return fn();
+    const { gate, release } = leaseRateLimitGate(opts.key);
+    try {
+        return await attemptWithGate(fn, opts, policy, gate);
+    }
+    finally {
+        release();
+    }
+}
+async function attemptWithGate(fn, opts, policy, gate) {
+    let attempt = 0;
+    let waited = 0;
+    for (;;) {
+        // Waiting at the gate is waiting. Uncounted it was free, so a caller with a
+        // ten-millisecond budget could sit out a minute-long pause another caller
+        // had earned, its declared budget saying nothing about the time it spent.
+        // Decided before the wait, never during it: a hold longer than what is left
+        // of the budget is refused outright rather than half-served.
+        const hold = gate.remaining();
+        if (hold > 0) {
+            const budgetLeft = policy.maxTotalWaitMs - waited;
+            if (hold > budgetLeft)
+                throw outOfBudgetAtGate(hold, attempt);
+            const before = Date.now();
+            // Capped as well as pre-checked: a pause that fits when the wait starts
+            // can be extended past the budget by someone else's 429 while it runs.
+            // The cap is the budget exactly. Padding it to protect the wake spread
+            // would make the budget the one thing it must not be — approximate.
+            await gate.waitUntilOpen(opts.signal, budgetLeft);
+            waited += Date.now() - before;
+            const stillShut = gate.remaining();
+            if (stillShut > 0)
+                throw outOfBudgetAtGate(stillShut, attempt);
+        }
+        try {
+            return await fn();
+        }
+        catch (error) {
+            if (!opts.isRateLimited(error))
+                throw error;
+            attempt += 1;
+            const retryAfter = opts.retryAfterSeconds?.(error);
+            const served = retryAfter !== undefined && Number.isFinite(retryAfter);
+            // The server's own number wins. A computed guess is for when it stays
+            // silent — it is an estimate of something the server already knows.
+            const wait = served
+                ? retryAfter * 1000
+                : jittered(policy.baseDelayMs * 2 ** (attempt - 1), policy.maxDelayMs);
+            // Hold everyone else too, and hold them whether or not THIS caller has
+            // budget left to retry. The pause describes the quota, not one request:
+            // giving up with the gate open sends every other caller straight back
+            // into a limit the server just said was closed.
+            //
+            // The gate is given the interval alone. This caller then serves its own
+            // backoff there, on the next turn of the loop, rather than sleeping
+            // beside it: two mechanisms waiting out one pause double-count it, and
+            // the leftover milliseconds between them decide outcomes at the margin.
+            // The per-caller spread that keeps the released callers from waking
+            // together lives in `waitUntilOpen`, where the waiting is done.
+            gate.penalise(wait);
+            const outOfAttempts = attempt >= policy.maxAttempts;
+            const outOfTime = waited + wait > policy.maxTotalWaitMs;
+            if (outOfAttempts || outOfTime) {
+                throw annotate(error, attempt, retryAfter);
+            }
+            opts.onRetry?.({
+                attempt,
+                delayMs: wait,
+                retryAfterSeconds: retryAfter,
+            });
+        }
+    }
+}
+/**
+ * Full jitter: a random point in [0, computed], not computed ± a nudge.
+ *
+ * Scaling a shared delay by a factor near 1 keeps the herd together; drawing
+ * from the whole interval is what actually spreads it.
+ */
+function jittered(computed, maxDelayMs) {
+    return Math.random() * Math.min(computed, maxDelayMs);
+}
+const MAX_CAUSE_DEPTH = 5;
+/**
+ * The rate-limit marker on an error or anywhere in its `cause` chain.
+ *
+ * Layers above the provider rewrap errors — the ILlm adapter turns anything
+ * thrown into an `LlmError` — so the marker is rarely still on the outermost
+ * object by the time a retry decorator inspects it. Bounded by depth and a
+ * visited set, like `extractStatusCode`, so a cyclic chain cannot hang.
+ */
+export function findRateLimit(err) {
+    const visited = new Set();
+    let cur = err;
+    for (let depth = 0; depth < MAX_CAUSE_DEPTH; depth++) {
+        if (typeof cur !== 'object' || cur === null || visited.has(cur))
+            return undefined;
+        visited.add(cur);
+        if (isRateLimitedError(cur))
+            return cur;
+        cur = cur.cause;
+    }
+    return undefined;
+}
+/**
+ * Carry the rate-limit facts onto a provider's own error.
+ *
+ * Every provider catches its transport error and rethrows something friendlier.
+ * That is fine for a message and fatal for a fact: the 429 would be lost at the
+ * exact boundary where the consumer needs it. This moves the facts across.
+ */
+export function preserveRateLimit(original, wrapped) {
+    if (!isRateLimitedError(original))
+        return wrapped;
+    const w = wrapped;
+    w.rateLimited = true;
+    w.attempts = original.attempts;
+    if (original.retryAfterSeconds !== undefined) {
+        w.retryAfterSeconds = original.retryAfterSeconds;
+    }
+    return w;
+}
+/**
+ * The shared pause outlasts what this caller said it would wait.
+ *
+ * There is no server error to annotate here — the request was never sent,
+ * because sending it into a quota known to be closed is the one thing the gate
+ * exists to prevent. It is still a rate limit, and says so, carrying what is
+ * left of the pause so the consumer can decide.
+ */
+function outOfBudgetAtGate(remainingMs, attempts) {
+    const e = new Error('rate limited: the pause on this quota outlasts the configured wait budget');
+    e.rateLimited = true;
+    e.attempts = attempts;
+    e.retryAfterSeconds = remainingMs / 1000;
+    return e;
+}
+function annotate(error, attempts, retryAfterSeconds) {
+    const e = (error instanceof Error ? error : new Error(String(error)));
+    e.rateLimited = true;
+    e.attempts = attempts;
+    if (retryAfterSeconds !== undefined)
+        e.retryAfterSeconds = retryAfterSeconds;
+    return e;
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/llm/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../src/llm/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAerE,MAAM,CAAC,MAAM,yBAAyB,GAAoB;IACxD,OAAO,EAAE,IAAI;IACb,WAAW,EAAE,CAAC;IACd,cAAc,EAAE,MAAM;IACtB,WAAW,EAAE,KAAK;IAClB,UAAU,EAAE,MAAM;CACnB,CAAC;AAWF,MAAM,UAAU,kBAAkB,CAAC,CAAU;IAC3C,OAAO,CACL,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QACT,CAA+B,CAAC,WAAW,KAAK,IAAI,CACtD,CAAC;AACJ,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;AAEzC;;;;;;;;GAQG;AACH,MAAM,KAAK,GAAG,KAAK,EAAE,EAAU,EAAE,MAAoB,EAAiB,EAAE;IACtE,MAAM,OAAO,GAAG,GAAU,EAAE,CACzB,MAAM,EAAE,MAA4B,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,OAAO,EAAE,CAAC;IACrC,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,KAAK,SAAS;QAAE,MAAM,OAAO,EAAE,CAAC;AACrE,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,aAAa;IAChB,SAAS,GAAG,CAAC,CAAC;IAEtB,+EAA+E;IAC/E,QAAQ,CAAC,EAAU,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;QAC3C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,wCAAwC;IACxC,SAAS,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE;QAChC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK;QACH,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;IACrB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,aAAa,CACjB,MAAoB,EACpB,SAAS,GAAG,MAAM,CAAC,iBAAiB;QAEpC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,SAAS,CAAC;YACR,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9B,IAAI,IAAI,IAAI,CAAC;gBAAE,OAAO;YACtB,MAAM,MAAM,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACrC,uEAAuE;YACvE,sEAAsE;YACtE,IAAI,MAAM,IAAI,CAAC;gBAAE,OAAO;YACxB,yEAAyE;YACzE,0DAA0D;YAC1D,MAAM,KAAK,CACT,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,cAAc,EAAE,MAAM,CAAC,EACvD,MAAM,CACP,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AASD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,MAAM,CAAC;AAC5C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,CAAC;AAE9B,oFAAoF;AACpF,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC;QACxB,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,IAAI,UAAU;QAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,KAAK,GAAc;QACvB,IAAI,EAAE,IAAI,aAAa,EAAE;QACzB,QAAQ,EAAE,GAAG;QACb,MAAM,EAAE,CAAC;KACV,CAAC;IACF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtB,OAAO,KAAK,CAAC,IAAI,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAI5C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,6EAA6E;IAC7E,6EAA6E;IAC7E,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK;QAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;IAC7B,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,GAAG,EAAE;YACZ,IAAI,QAAQ,IAAI,CAAC,KAAK;gBAAE,OAAO;YAC/B,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;YAClB,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE;IAC1D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;QACjC,IAAI,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,QAAQ,GAAG,gBAAgB,EAAE,CAAC;YACvE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,KAAgB,EAAE,GAAW;IAChD,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,KAAK,CAAC,IAAI,GAAG,UAAU;QAAE,OAAO;IAEpC,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC;SACzB,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;SAC9C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAEjD,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,SAAS,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,IAAI,GAAG,UAAU;YAAE,OAAO;QACpC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,kBAAkB;IAChC,OAAO,KAAK,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,mBAAmB;IACjC,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAkBD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,EAAoB,EACpB,IAA2B;IAE3B,MAAM,MAAM,GAAG,EAAE,GAAG,yBAAyB,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,CAAC;IAEjC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,OAAO,MAAM,eAAe,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,EAAoB,EACpB,IAA2B,EAC3B,MAAuB,EACvB,IAAmB;IAEnB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,SAAS,CAAC;QACR,4EAA4E;QAC5E,0EAA0E;QAC1E,0EAA0E;QAC1E,4EAA4E;QAC5E,6DAA6D;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC9B,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;YAClD,IAAI,IAAI,GAAG,UAAU;gBAAE,MAAM,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1B,wEAAwE;YACxE,uEAAuE;YACvE,uEAAuE;YACvE,oEAAoE;YACpE,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAClD,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,SAAS,GAAG,CAAC;gBAAE,MAAM,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAE5C,OAAO,IAAI,CAAC,CAAC;YACb,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC,KAAK,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAEvE,sEAAsE;YACtE,oEAAoE;YACpE,MAAM,IAAI,GAAG,MAAM;gBACjB,CAAC,CAAE,UAAqB,GAAG,IAAI;gBAC/B,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YAEzE,uEAAuE;YACvE,wEAAwE;YACxE,sEAAsE;YACtE,gDAAgD;YAChD,EAAE;YACF,wEAAwE;YACxE,oEAAoE;YACpE,uEAAuE;YACvE,wEAAwE;YACxE,oEAAoE;YACpE,gEAAgE;YAChE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAEpB,MAAM,aAAa,GAAG,OAAO,IAAI,MAAM,CAAC,WAAW,CAAC;YACpD,MAAM,SAAS,GAAG,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC,cAAc,CAAC;YACxD,IAAI,aAAa,IAAI,SAAS,EAAE,CAAC;gBAC/B,MAAM,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YAC7C,CAAC;YAED,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO;gBACP,OAAO,EAAE,IAAI;gBACb,iBAAiB,EAAE,UAAU;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,QAAgB,EAAE,UAAkB;IACpD,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAW,CAAC;IACnC,IAAI,GAAG,GAAY,GAAG,CAAC;IACvB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,eAAe,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAC7D,OAAO,SAAS,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,kBAAkB,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;QACxC,GAAG,GAAI,GAA2B,CAAC,KAAK,CAAC;IAC3C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAiB,EACjB,OAAU;IAEV,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IAClD,MAAM,CAAC,GAAG,OAAwC,CAAC;IACnD,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAC/B,IAAI,QAAQ,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC7C,CAAC,CAAC,iBAAiB,GAAG,QAAQ,CAAC,iBAAiB,CAAC;IACnD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CACxB,WAAmB,EACnB,QAAgB;IAEhB,MAAM,CAAC,GAAG,IAAI,KAAK,CACjB,2EAA2E,CACxD,CAAC;IACtB,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACtB,CAAC,CAAC,iBAAiB,GAAG,WAAW,GAAG,IAAI,CAAC;IACzC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,QAAQ,CACf,KAAc,EACd,QAAgB,EAChB,iBAA0B;IAE1B,MAAM,CAAC,GAAG,CACR,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CACtC,CAAC;IACtB,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACtB,IAAI,iBAAiB,KAAK,SAAS;QAAE,CAAC,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;IAC7E,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/types.d.ts

@@ -2,6 +2,7 @@
  * Core types for LLM Proxy
  */
 import type { LlmUsage } from './interfaces/types.js';
+import type { RateLimitPolicy } from './llm/rate-limit.js';
 export interface Message {
     /**
      * Message role
@@ -77,6 +78,13 @@ export interface LLMProviderConfig {
     model?: string;
     temperature?: number;
     maxTokens?: number;
+    /**
+     * How this provider answers HTTP 429. Omit for the shared default: back off
+     * with jitter, honour `Retry-After`, give up after 5 attempts or 60 seconds
+     * of waiting. Set `{ enabled: false }` to pass every 429 straight to the
+     * caller.
+     */
+    rateLimit?: Partial<RateLimitPolicy>;
 }
 export interface LLMCallOptions {
     /** Per-request model override. */

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEtD,MAAM,WAAW,OAAO;IACtB;;;;;;OAMG;IACH,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC/C,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,iGAAiG;IACjG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uFAAuF;IACvF,UAAU,CAAC,EAAE,KAAK,CAAC;QACjB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,UAAU,CAAC;QACjB,QAAQ,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC;KAC/C,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;+EAG2E;IAC3E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,KAAK,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IACH;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,QAAQ,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,8FAA8F;IAC9F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,kCAAkC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAMD,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,QAAQ,EAAE,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,GAAG,YAAY,GAAG,QAAQ,GAAG,OAAO,CAAA;CAAE,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,MAAM,WAAW,OAAO;IACtB;;;;;;OAMG;IACH,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC/C,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,iGAAiG;IACjG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uFAAuF;IACvF,UAAU,CAAC,EAAE,KAAK,CAAC;QACjB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,UAAU,CAAC;QACjB,QAAQ,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC;KAC/C,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;+EAG2E;IAC3E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,KAAK,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IACH;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,QAAQ,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,8FAA8F;IAC9F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,cAAc;IAC7B,kCAAkC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAMD,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,QAAQ,EAAE,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,GAAG,YAAY,GAAG,QAAQ,GAAG,OAAO,CAAA;CAAE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcp-abap-adt/llm-agent",
-  "version": "22.0.1",
+  "version": "22.2.0",
   "description": "Core interfaces, types, and lightweight default implementations for LLM agent orchestration.",
   "type": "module",
   "main": "dist/index.js",
@@ -24,7 +24,7 @@
     "test": "node --import tsx/esm --test --test-reporter=spec 'src/**/*.test.ts'"
   },
   "dependencies": {
-    "zod": "^4.4.3"
+    "zod": "^4.5.4"
   },
   "license": "LGPL-3.0-only",
   "repository": {