@nemesis-oss/ollama-sdk 1.1.0 → 1.3.0

package/dist/index.cjs

@@ -5,6 +5,7 @@ var zod = require('zod');
 // src/config.ts
 var DEFAULT_BASE_URL = "http://localhost:11434";
 var DEFAULT_TIMEOUT_MS = 3e4;
+var OLLAMA_CLOUD_BASE_URL = "https://ollama.com";
 function readEnv(name) {
   return typeof process !== "undefined" && process.env ? process.env[name] : void 0;
 }
@@ -14,6 +15,34 @@ function resolveBaseUrl(configBaseUrl) {
 function resolveApiKey(configApiKey) {
   return configApiKey ?? readEnv("OLLAMA_API_KEY");
 }
+function resolveCredentialEndpoints(config) {
+  if (config.credentials === void 0) return [];
+  const modelsByCredential = /* @__PURE__ */ new Map();
+  for (const [model, bound] of Object.entries(config.modelBindings ?? {})) {
+    for (const id of typeof bound === "string" ? [bound] : bound) {
+      if (!(id in config.credentials)) {
+        throw new Error(
+          `modelBindings["${model}"] references unknown credential "${id}" \u2014 it isn't in \`credentials\`. Known credentials: ${Object.keys(config.credentials).join(", ") || "(none)"}.`
+        );
+      }
+      const list = modelsByCredential.get(id) ?? [];
+      list.push(model);
+      modelsByCredential.set(id, list);
+    }
+  }
+  return Object.entries(config.credentials).map(([id, credential]) => {
+    const isDefault = id === config.defaultCredential;
+    const boundModels = isDefault ? void 0 : modelsByCredential.get(id);
+    return {
+      name: `credential:${id}`,
+      baseUrl: resolveBaseUrl(credential.baseUrl ?? config.baseUrl),
+      apiKey: credential.apiKey,
+      ...credential.headers !== void 0 ? { headers: credential.headers } : {},
+      ...boundModels !== void 0 ? { models: boundModels } : {},
+      priority: isDefault ? -1 : 0
+    };
+  });
+}
 var DEFAULT_FAILOVER_CODES = [
   "network_error",
   "timeout",
@@ -72,6 +101,15 @@ var OllamaRateLimitError = class extends OllamaClientError {
     this.retryAfterMs = options?.retryAfterMs;
   }
 };
+var OllamaQuotaExceededError = class extends OllamaClientError {
+  windowId;
+  resetAt;
+  constructor(message, options) {
+    super(message, { ...options, code: "quota_exceeded", retryable: false });
+    this.windowId = options.windowId;
+    this.resetAt = options.resetAt;
+  }
+};
 var OllamaServerError = class extends OllamaClientError {
   constructor(message, options) {
     super(message, { ...options, code: "server_error", retryable: true });
@@ -107,6 +145,15 @@ var OllamaUnsupportedCapabilityError = class extends OllamaClientError {
     this.capability = options.capability;
   }
 };
+var OllamaModelRoutingError = class extends OllamaClientError {
+  model;
+  availableModels;
+  constructor(message, options) {
+    super(message, { ...options, code: "model_routing_error", retryable: false });
+    this.model = options.model;
+    this.availableModels = options.availableModels;
+  }
+};
 var OllamaAgentMaxIterationsError = class extends OllamaClientError {
   maxIterations;
   constructor(message, options) {
@@ -218,17 +265,143 @@ var EndpointRegistry = class {
   failureThreshold;
   cooldownMs;
   now;
+  strategy;
+  roundRobinCounter = 0;
+  activeCounts = /* @__PURE__ */ new Map();
+  maxConcurrentPerEndpoint;
+  waiters = [];
   constructor(endpoints, options = {}) {
     this.endpoints = endpoints.length > 0 ? endpoints : [{ name: "default", baseUrl: "http://localhost:11434" }];
     this.failureThreshold = options.failureThreshold ?? 3;
     this.cooldownMs = options.cooldownMs ?? 3e4;
     this.now = options.now ?? Date.now;
+    this.strategy = options.strategy ?? "priority";
+    this.maxConcurrentPerEndpoint = options.maxConcurrentPerEndpoint;
   }
-  candidates() {
+  /**
+   * Marks one more request as in-flight against `name`. Callers (`OllamaClient`) must
+   * pair every `acquire` with a `release` once that attempt finishes, success or not —
+   * see `OllamaClient.executeWithFailover`. Only affects candidate ordering when
+   * `strategy` is `'least-connections'`; harmless (just bookkeeping) otherwise, and
+   * always reflected in `status()`'s `activeRequests`.
+   */
+  acquire(name) {
+    this.activeCounts.set(name, (this.activeCounts.get(name) ?? 0) + 1);
+  }
+  /** Releases one in-flight request marked via `acquire`, waking one waiter for `name` if any. */
+  release(name) {
+    const next = (this.activeCounts.get(name) ?? 0) - 1;
+    if (next <= 0) {
+      this.activeCounts.delete(name);
+    } else {
+      this.activeCounts.set(name, next);
+    }
+    const idx = this.waiters.findIndex((w) => w.names.includes(name));
+    if (idx !== -1) {
+      const [waiter] = this.waiters.splice(idx, 1);
+      waiter?.cleanup();
+      waiter?.resolve();
+    }
+  }
+  /**
+   * `candidates` filtered down to those currently under `maxConcurrentPerEndpoint` (all
+   * of them, unchanged, if that option is unset).
+   */
+  filterWithCapacity(candidates) {
+    const cap = this.maxConcurrentPerEndpoint;
+    if (cap === void 0) return [...candidates];
+    return candidates.filter((ep) => (this.activeCounts.get(ep.name) ?? 0) < cap);
+  }
+  /**
+   * Resolves once any endpoint named in `names` has spare capacity under
+   * `maxConcurrentPerEndpoint` (a no-op resolve if that option is unset, or if one
+   * already does). Otherwise queues (FIFO per name) until a matching `release()` frees a
+   * slot, or rejects if `signal` aborts first — mirroring whatever aborted it
+   * (`OllamaTimeoutError`/the caller's own abort reason) so callers see the same error
+   * shape as any other in-flight request that times out or is cancelled. FIFO order is
+   * best-effort (a newly-arriving request can still win a race for a slot that just
+   * freed) — the capacity cap itself, not fairness, is the guarantee this exists for.
+   */
+  waitForCapacity(names, signal) {
+    const cap = this.maxConcurrentPerEndpoint;
+    if (cap === void 0) return Promise.resolve();
+    if (names.some((n) => (this.activeCounts.get(n) ?? 0) < cap)) return Promise.resolve();
+    return new Promise((resolve, reject) => {
+      const waiter = { names, resolve, cleanup: () => void 0 };
+      const onAbort = () => {
+        const idx = this.waiters.indexOf(waiter);
+        if (idx !== -1) this.waiters.splice(idx, 1);
+        reject(
+          signal?.reason instanceof Error ? signal.reason : new OllamaAbortError("Aborted while waiting for endpoint capacity")
+        );
+      };
+      if (signal !== void 0) {
+        if (signal.aborted) {
+          onAbort();
+          return;
+        }
+        signal.addEventListener("abort", onAbort, { once: true });
+        waiter.cleanup = () => signal.removeEventListener("abort", onAbort);
+      }
+      this.waiters.push(waiter);
+    });
+  }
+  /**
+   * Rotates each same-`priority` group in `sorted` (already sorted highest-priority-first)
+   * by one position further per call, wrapping around within the group. Priority tiers
+   * themselves are never reordered — only candidates that were already tied.
+   */
+  applyRoundRobin(sorted) {
+    const offset = this.roundRobinCounter++;
+    const result = [];
+    let i = 0;
+    while (i < sorted.length) {
+      const priority = sorted[i]?.priority ?? 0;
+      let j = i + 1;
+      while (j < sorted.length && (sorted[j]?.priority ?? 0) === priority) j++;
+      const tier = sorted.slice(i, j);
+      const rotation = offset % tier.length;
+      result.push(...tier.slice(rotation), ...tier.slice(0, rotation));
+      i = j;
+    }
+    return result;
+  }
+  /**
+   * Reorders each same-`priority` group in `sorted` by ascending in-flight request count
+   * (from `acquire`/`release`); a stable sort, so candidates tied on active count keep
+   * their relative (priority-then-registration) order. Priority tiers themselves are
+   * never reordered.
+   */
+  applyLeastConnections(sorted) {
+    const result = [];
+    let i = 0;
+    while (i < sorted.length) {
+      const priority = sorted[i]?.priority ?? 0;
+      let j = i + 1;
+      while (j < sorted.length && (sorted[j]?.priority ?? 0) === priority) j++;
+      const tier = [...sorted.slice(i, j)].sort(
+        (a, b) => (this.activeCounts.get(a.name) ?? 0) - (this.activeCounts.get(b.name) ?? 0)
+      );
+      result.push(...tier);
+      i = j;
+    }
+    return result;
+  }
+  /**
+   * Endpoints eligible for `model`, sorted healthy-first-by-priority (falling back to
+   * soonest-to-recover if every eligible endpoint is cooling down); same-priority
+   * candidates are further reordered per `options.strategy` (see
+   * `EndpointRegistryOptions.strategy`). When `model` is given, endpoints whose `models`
+   * allow-list doesn't include it are excluded entirely — see `OllamaEndpoint.models`.
+   * Omit `model` to consider every configured endpoint, regardless of any `models`
+   * restriction (used for non-model-scoped operations).
+   */
+  candidates(model) {
     const currentTime = this.now();
+    const scoped = model === void 0 ? this.endpoints : this.endpoints.filter((ep) => ep.models === void 0 || ep.models.includes(model));
     const healthy = [];
     const coolingDown = [];
-    for (const ep of this.endpoints) {
+    for (const ep of scoped) {
       const failures = this.failureCounts.get(ep.name) ?? 0;
       const lastFail = this.lastFailures.get(ep.name) ?? 0;
       const isCooling = failures >= this.failureThreshold && currentTime - lastFail < this.cooldownMs;
@@ -239,7 +412,10 @@ var EndpointRegistry = class {
       }
     }
     if (healthy.length > 0) {
-      return healthy.sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
+      const sorted = healthy.sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
+      if (this.strategy === "round-robin") return this.applyRoundRobin(sorted);
+      if (this.strategy === "least-connections") return this.applyLeastConnections(sorted);
+      return sorted;
     }
     return coolingDown.sort((a, b) => a.recoveredAt - b.recoveredAt).map((c) => c.endpoint);
   }
@@ -255,6 +431,10 @@ var EndpointRegistry = class {
   list() {
     return this.endpoints;
   }
+  /** True if any configured endpoint restricts itself to a `models` allow-list. */
+  hasModelScopedEndpoints() {
+    return this.endpoints.some((ep) => ep.models !== void 0);
+  }
   status() {
     const currentTime = this.now();
     return this.endpoints.map((ep) => {
@@ -265,7 +445,8 @@ var EndpointRegistry = class {
         endpoint: ep,
         failureCount: failures,
         ...lastFail !== void 0 ? { lastFailureTimestamp: lastFail } : {},
-        isCoolingDown
+        isCoolingDown,
+        activeRequests: this.activeCounts.get(ep.name) ?? 0
       };
     });
   }
@@ -1024,7 +1205,7 @@ var ModelsClient = class {
           });
           return normalizeProgressStream(stream);
         },
-        { ...request, singleEndpoint: true }
+        { ...request, singleEndpoint: true, holdUntil: (stream) => stream.finalResult }
       );
     }
     return this.runner(
@@ -1047,7 +1228,7 @@ var ModelsClient = class {
           });
           return normalizeProgressStream(stream);
         },
-        { ...request, singleEndpoint: true }
+        { ...request, singleEndpoint: true, holdUntil: (stream) => stream.finalResult }
       );
     }
     return this.runner(
@@ -1070,7 +1251,7 @@ var ModelsClient = class {
           });
           return normalizeProgressStream(stream);
         },
-        { ...request, singleEndpoint: true }
+        { ...request, singleEndpoint: true, holdUntil: (stream) => stream.finalResult }
       );
     }
     return this.runner(
@@ -1226,17 +1407,27 @@ var OllamaClient = class {
   failoverCodes;
   fetchImpl;
   logger;
+  /**
+   * API key for Ollama's hosted web tools (`webSearch`/`webFetch`), which always target
+   * `OLLAMA_CLOUD_BASE_URL` regardless of `config.endpoints` — an Ollama account API key
+   * is inherently a single global credential, not tied to any one inference endpoint.
+   * Resolved the same way as a single-endpoint `apiKey` (`config.apiKey` falling back to
+   * `OLLAMA_API_KEY`), independent of whether `config.endpoints` was used instead.
+   */
+  cloudApiKey;
   constructor(config = {}) {
     const resolvedApiKey = resolveApiKey(config.apiKey);
-    const endpoints = config.endpoints ?? [
+    this.cloudApiKey = resolvedApiKey;
+    const credentialEndpoints = resolveCredentialEndpoints(config);
+    const endpoints = config.endpoints ?? (credentialEndpoints.length > 0 ? [] : [
       {
         name: "default",
         baseUrl: resolveBaseUrl(config.baseUrl),
         ...resolvedApiKey !== void 0 ? { apiKey: resolvedApiKey } : {},
         ...config.headers !== void 0 ? { headers: config.headers } : {}
       }
-    ];
-    this.registry = new EndpointRegistry(endpoints, config.endpointHealth);
+    ]);
+    this.registry = new EndpointRegistry([...endpoints, ...credentialEndpoints], config.endpointHealth);
     this.timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT_MS;
     this.failoverCodes = new Set(config.failoverOn ?? DEFAULT_FAILOVER_CODES);
     this.fetchImpl = config.fetch ?? globalThis.fetch;
@@ -1265,38 +1456,64 @@ var OllamaClient = class {
   async executeWithFailover(operation, options) {
     const timeout = createTimeoutSignal(options?.timeoutMs ?? this.timeoutMs, options?.signal);
     try {
-      const allCandidates = this.registry.candidates();
-      const candidates = options?.singleEndpoint ? allCandidates.slice(0, 1) : allCandidates;
       let lastError;
-      for (const [attemptIndex, endpoint] of candidates.entries()) {
-        this.logger.debug(`Executing on endpoint "${endpoint.name}" (${endpoint.baseUrl})`);
-        const http = new HttpClient({
-          baseUrl: endpoint.baseUrl,
-          ...endpoint.apiKey !== void 0 ? { apiKey: endpoint.apiKey } : {},
-          ...endpoint.headers !== void 0 ? { headers: endpoint.headers } : {},
-          fetch: this.fetchImpl
-        });
-        try {
-          const result = await withSpan(
-            "ollama.endpoint.attempt",
-            {
-              [ATTR_OLLAMA_ENDPOINT_NAME]: endpoint.name,
-              [ATTR_OLLAMA_ENDPOINT_ATTEMPT]: attemptIndex
-            },
-            () => withRetry(() => operation(http, timeout.signal), this.retryConfig)
+      for (; ; ) {
+        const allCandidates = this.registry.candidates(options?.model);
+        if (allCandidates.length === 0 && options?.model !== void 0 && this.registry.hasModelScopedEndpoints()) {
+          const configured = this.registry.list().flatMap((ep) => ep.models ?? []).filter((m, i, arr) => arr.indexOf(m) === i);
+          throw new OllamaModelRoutingError(
+            `No configured endpoint is authorized for model "${options.model}". ` + (configured.length > 0 ? `Endpoints are scoped to: ${configured.join(", ")}.` : "No endpoint declares a `models` allow-list that includes it.") + " Add or widen an `OllamaEndpoint.models` entry to route this model.",
+            { model: options.model, availableModels: configured }
           );
-          this.registry.reportSuccess(endpoint.name);
-          return result;
-        } catch (err) {
-          const error = err instanceof Error ? err : new Error(String(err));
-          lastError = error;
-          this.registry.reportFailure(endpoint.name);
-          this.logger.warn(`Failed on "${endpoint.name}": ${error.message}`);
-          if (!(error instanceof OllamaClientError && this.failoverCodes.has(error.code)))
-            throw error;
         }
+        const candidates = options?.singleEndpoint ? allCandidates.slice(0, 1) : allCandidates;
+        const runnable = this.registry.filterWithCapacity(candidates);
+        if (runnable.length === 0 && candidates.length > 0) {
+          await this.registry.waitForCapacity(
+            candidates.map((c) => c.name),
+            timeout.signal
+          );
+          continue;
+        }
+        for (const [attemptIndex, endpoint] of runnable.entries()) {
+          this.logger.debug(`Executing on endpoint "${endpoint.name}" (${endpoint.baseUrl})`);
+          const http = new HttpClient({
+            baseUrl: endpoint.baseUrl,
+            ...endpoint.apiKey !== void 0 ? { apiKey: endpoint.apiKey } : {},
+            ...endpoint.headers !== void 0 ? { headers: endpoint.headers } : {},
+            fetch: this.fetchImpl
+          });
+          this.registry.acquire(endpoint.name);
+          let holdPromise;
+          try {
+            const result = await withSpan(
+              "ollama.endpoint.attempt",
+              {
+                [ATTR_OLLAMA_ENDPOINT_NAME]: endpoint.name,
+                [ATTR_OLLAMA_ENDPOINT_ATTEMPT]: attemptIndex
+              },
+              () => withRetry(() => operation(http, timeout.signal), this.retryConfig)
+            );
+            this.registry.reportSuccess(endpoint.name);
+            if (options?.holdUntil) holdPromise = options.holdUntil(result);
+            return result;
+          } catch (err) {
+            const error = err instanceof Error ? err : new Error(String(err));
+            lastError = error;
+            this.registry.reportFailure(endpoint.name);
+            this.logger.warn(`Failed on "${endpoint.name}": ${error.message}`);
+            if (!(error instanceof OllamaClientError && this.failoverCodes.has(error.code)))
+              throw error;
+          } finally {
+            if (holdPromise) {
+              void holdPromise.catch(() => void 0).finally(() => this.registry.release(endpoint.name));
+            } else {
+              this.registry.release(endpoint.name);
+            }
+          }
+        }
+        throw lastError ?? new Error("No healthy Ollama endpoints available");
       }
-      throw lastError ?? new Error("No healthy Ollama endpoints available");
     } finally {
       timeout.cancel();
     }
@@ -1304,15 +1521,27 @@ var OllamaClient = class {
   async chat(req) {
     const messages = await withEncodedMessageImages(req.messages);
     if (req.stream) {
-      return this.executeWithFailover(async (http, signal) => {
-        if (req.format !== void 0) this.assertStructuredOutputSupported(http.baseUrl, req.model);
-        const stream = await http.requestStream({
-          path: "/api/chat",
-          body: { ...req, messages, stream: true },
-          signal
-        });
-        return normalizeChatStream(stream);
-      }, req);
+      return this.executeWithFailover(
+        async (http, signal) => {
+          if (req.format !== void 0)
+            this.assertStructuredOutputSupported(http.baseUrl, req.model);
+          const stream = await http.requestStream({
+            path: "/api/chat",
+            body: { ...req, messages, stream: true },
+            signal
+          });
+          return normalizeChatStream(stream);
+        },
+        {
+          signal: req.signal,
+          timeoutMs: req.timeoutMs,
+          model: req.model,
+          // The endpoint's concurrency slot must stay held for as long as the stream is
+          // actually being consumed, not just until the initial response/headers arrive
+          // — see `executeWithFailover`'s `holdUntil` doc.
+          holdUntil: (stream) => stream.finalResult
+        }
+      );
     }
     return withSpan(
       `chat ${req.model}`,
@@ -1356,16 +1585,24 @@ var OllamaClient = class {
   async generate(req) {
     const encodedReq = await withEncodedImages(req);
     if (encodedReq.stream) {
-      return this.executeWithFailover(async (http, signal) => {
-        if (encodedReq.format !== void 0)
-          this.assertStructuredOutputSupported(http.baseUrl, encodedReq.model);
-        const stream = await http.requestStream({
-          path: "/api/generate",
-          body: { ...encodedReq, stream: true },
-          signal
-        });
-        return normalizeGenerateStream(stream);
-      }, encodedReq);
+      return this.executeWithFailover(
+        async (http, signal) => {
+          if (encodedReq.format !== void 0)
+            this.assertStructuredOutputSupported(http.baseUrl, encodedReq.model);
+          const stream = await http.requestStream({
+            path: "/api/generate",
+            body: { ...encodedReq, stream: true },
+            signal
+          });
+          return normalizeGenerateStream(stream);
+        },
+        {
+          signal: encodedReq.signal,
+          timeoutMs: encodedReq.timeoutMs,
+          model: encodedReq.model,
+          holdUntil: (stream) => stream.finalResult
+        }
+      );
     }
     return withSpan(
       `text_completion ${encodedReq.model}`,
@@ -1439,22 +1676,60 @@ var OllamaClient = class {
   createBlob = (digest, data) => this.models.createBlob(digest, data);
   checkBlob = (digest) => this.models.checkBlob(digest);
   // --- Web Endpoints ---
-  webSearch(req) {
-    return this.executeWithFailover(
-      (http, signal) => http.request({ path: "/api/websearch", body: req, signal }),
+  /**
+   * Ollama's hosted web search tool (`POST https://ollama.com/api/web_search`) — a fixed
+   * Ollama Cloud service, unrelated to `config.endpoints`/`baseUrl` and not proxied
+   * through a local server. Requires an Ollama account API key: pass `apiKey` to the
+   * client constructor or set `OLLAMA_API_KEY`. Applies the same default `timeoutMs` and
+   * retry policy as inference calls, but never cross-endpoint-fails-over — there is only
+   * ever the one cloud endpoint to call.
+   */
+  async webSearch(req) {
+    const { count, max_results, ...rest } = req;
+    const res = await this.executeCloudRequest(
+      (http, signal) => http.request({
+        path: "/api/web_search",
+        body: { ...rest, max_results: max_results ?? count },
+        signal
+      }),
       req
     );
+    return { results: res.results.map((r) => ({ ...r, snippet: r.content })) };
   }
+  /**
+   * Ollama's hosted web fetch tool (`POST https://ollama.com/api/web_fetch`) — see
+   * {@link OllamaClient.webSearch} for the cloud-endpoint/auth/timeout/retry behavior,
+   * which applies identically here.
+   */
   webFetch(req) {
-    return this.executeWithFailover(
-      (http, signal) => http.request({ path: "/api/webfetch", body: req, signal }),
+    return this.executeCloudRequest(
+      (http, signal) => http.request({ path: "/api/web_fetch", body: req, signal }),
       req
     );
   }
+  /**
+   * Runs `operation` against the fixed Ollama Cloud host with this client's default
+   * timeout and retry policy — the same primitives `executeWithFailover` uses, minus the
+   * multi-candidate loop, since `webSearch`/`webFetch` only ever have the one endpoint.
+   */
+  async executeCloudRequest(operation, options) {
+    const timeout = createTimeoutSignal(options.timeoutMs ?? this.timeoutMs, options.signal);
+    try {
+      const http = new HttpClient({
+        baseUrl: OLLAMA_CLOUD_BASE_URL,
+        apiKey: this.cloudApiKey,
+        fetch: this.fetchImpl
+      });
+      return await withRetry(() => operation(http, timeout.signal), this.retryConfig);
+    } finally {
+      timeout.cancel();
+    }
+  }
   // --- Capabilities & Health ---
   capabilities(model) {
     return this.executeWithFailover((http) => detectModelCapabilities(http, model), {
-      singleEndpoint: true
+      singleEndpoint: true,
+      model
     });
   }
   runtimeMode() {
@@ -1572,6 +1847,117 @@ function toResponse(stream, init = {}) {
   return new Response(body, { ...init, headers });
 }
 
+// src/quota.ts
+var QuotaManager = class {
+  now;
+  windows;
+  constructor(options) {
+    if (options.windows.length === 0) {
+      throw new Error("QuotaManager requires at least one window configuration.");
+    }
+    this.now = options.now ?? Date.now;
+    this.windows = options.windows.map((config) => ({
+      config,
+      tokensUsed: 0,
+      requestsMade: 0,
+      windowStartedAt: this.now()
+    }));
+  }
+  rollover(state) {
+    if (this.now() - state.windowStartedAt >= state.config.windowMs) {
+      state.tokensUsed = 0;
+      state.requestsMade = 0;
+      state.windowStartedAt = this.now();
+    }
+  }
+  /** Current usage, budgets, and reset time for every configured window. */
+  status() {
+    return this.windows.map((state) => {
+      this.rollover(state);
+      const { config } = state;
+      return {
+        ...config,
+        tokensUsed: state.tokensUsed,
+        requestsMade: state.requestsMade,
+        windowStartedAt: state.windowStartedAt,
+        windowResetAt: state.windowStartedAt + config.windowMs,
+        ...config.maxTokens !== void 0 ? { remainingTokens: Math.max(0, config.maxTokens - state.tokensUsed) } : {},
+        ...config.maxRequests !== void 0 ? { remainingRequests: Math.max(0, config.maxRequests - state.requestsMade) } : {}
+      };
+    });
+  }
+  /**
+   * True if one more request — optionally estimated at `estimatedTokens` — would stay
+   * within every configured window's budget. Read-only; does not record usage.
+   */
+  canProceed(estimatedTokens = 0) {
+    return this.windows.every((state) => {
+      this.rollover(state);
+      const { config } = state;
+      if (config.maxRequests !== void 0 && state.requestsMade + 1 > config.maxRequests) {
+        return false;
+      }
+      return !(config.maxTokens !== void 0 && state.tokensUsed + estimatedTokens > config.maxTokens);
+    });
+  }
+  /**
+   * Throws `OllamaQuotaExceededError` for the first window that `canProceed(estimatedTokens)`
+   * would fail on; otherwise a no-op. Call before issuing a request.
+   */
+  assertCanProceed(estimatedTokens = 0) {
+    for (const state of this.windows) {
+      this.rollover(state);
+      const { config } = state;
+      if (config.maxRequests !== void 0 && state.requestsMade + 1 > config.maxRequests) {
+        throw new OllamaQuotaExceededError(
+          `Client-side quota window "${config.id}" would exceed its request budget (${state.requestsMade}/${config.maxRequests} requests used).`,
+          { windowId: config.id, resetAt: state.windowStartedAt + config.windowMs }
+        );
+      }
+      if (config.maxTokens !== void 0 && state.tokensUsed + estimatedTokens > config.maxTokens) {
+        throw new OllamaQuotaExceededError(
+          `Client-side quota window "${config.id}" would exceed its token budget (${state.tokensUsed}/${config.maxTokens} tokens used).`,
+          { windowId: config.id, resetAt: state.windowStartedAt + config.windowMs }
+        );
+      }
+    }
+  }
+  /** Records one request's actual usage — a raw API response or a pre-normalized `TokenUsage` — against every window. */
+  recordUsage(usage) {
+    const normalized = "totalTokens" in usage ? usage : extractUsage(usage);
+    for (const state of this.windows) {
+      this.rollover(state);
+      state.tokensUsed += normalized.totalTokens;
+      state.requestsMade += 1;
+    }
+  }
+  /** Resets one window (by `id`) or, if omitted, all windows — zeroing usage and restarting their clocks. */
+  reset(windowId) {
+    for (const state of this.windows) {
+      if (windowId === void 0 || state.config.id === windowId) {
+        state.tokensUsed = 0;
+        state.requestsMade = 0;
+        state.windowStartedAt = this.now();
+      }
+    }
+  }
+};
+function createOllamaCloudFreeTierQuota(budgets) {
+  const windows = [];
+  if (budgets.session !== void 0) {
+    windows.push({ id: "session", windowMs: 5 * 60 * 60 * 1e3, ...budgets.session });
+  }
+  if (budgets.weekly !== void 0) {
+    windows.push({ id: "weekly", windowMs: 7 * 24 * 60 * 60 * 1e3, ...budgets.weekly });
+  }
+  if (windows.length === 0) {
+    throw new Error(
+      "createOllamaCloudFreeTierQuota requires at least a `session` or `weekly` budget."
+    );
+  }
+  return new QuotaManager({ windows, ...budgets.now !== void 0 ? { now: budgets.now } : {} });
+}
+
 // src/tools/define-tool.ts
 function defineTool(options) {
   const jsonSchema = zodToJsonSchema(options.schema);
@@ -2038,6 +2424,7 @@ exports.ModelsClient = ModelsClient;
 exports.NANOS_PER_MS = NANOS_PER_MS;
 exports.NANOS_PER_SECOND = NANOS_PER_SECOND;
 exports.NOOP_LOGGER = NOOP_LOGGER;
+exports.OLLAMA_CLOUD_BASE_URL = OLLAMA_CLOUD_BASE_URL;
 exports.OllamaAbortError = OllamaAbortError;
 exports.OllamaAgentMaxIterationsError = OllamaAgentMaxIterationsError;
 exports.OllamaAuthError = OllamaAuthError;
@@ -2045,8 +2432,10 @@ exports.OllamaClient = OllamaClient;
 exports.OllamaClientError = OllamaClientError;
 exports.OllamaGenericClientError = OllamaGenericClientError;
 exports.OllamaMcpError = OllamaMcpError;
+exports.OllamaModelRoutingError = OllamaModelRoutingError;
 exports.OllamaNetworkError = OllamaNetworkError;
 exports.OllamaNotFoundError = OllamaNotFoundError;
+exports.OllamaQuotaExceededError = OllamaQuotaExceededError;
 exports.OllamaRateLimitError = OllamaRateLimitError;
 exports.OllamaServerError = OllamaServerError;
 exports.OllamaSkillInvalidError = OllamaSkillInvalidError;
@@ -2057,6 +2446,7 @@ exports.OllamaToolTimeoutError = OllamaToolTimeoutError;
 exports.OllamaToolValidationError = OllamaToolValidationError;
 exports.OllamaUnsupportedCapabilityError = OllamaUnsupportedCapabilityError;
 exports.OpenAICompatClient = OpenAICompatClient;
+exports.QuotaManager = QuotaManager;
 exports.ToolRegistry = ToolRegistry;
 exports.addSpanEvent = addSpanEvent;
 exports.applySkill = applySkill;
@@ -2064,6 +2454,7 @@ exports.calculateBackoff = calculateBackoff;
 exports.checkEndpointHealth = checkEndpointHealth;
 exports.composeMiddleware = composeMiddleware;
 exports.createConsoleLogger = createConsoleLogger;
+exports.createOllamaCloudFreeTierQuota = createOllamaCloudFreeTierQuota;
 exports.createTimeoutSignal = createTimeoutSignal;
 exports.defineTool = defineTool;
 exports.detectModelCapabilities = detectModelCapabilities;
@@ -2080,6 +2471,7 @@ exports.parseFrontmatter = parseFrontmatter;
 exports.parseNdjsonStream = parseNdjsonStream;
 exports.parseStructuredOutput = parseStructuredOutput;
 exports.registerMcpTools = registerMcpTools;
+exports.resolveCredentialEndpoints = resolveCredentialEndpoints;
 exports.setSpanError = setSpanError;
 exports.toDataStream = toDataStream;
 exports.toResponse = toResponse;