@omnicross/core 0.2.0 → 0.2.1

package/dist/types-CbCZqLGg.d.ts

@@ -0,0 +1,127 @@
+import { SearchProviderId } from '@omnicross/contracts/search-types';
+
+/**
+ * Shared vocabulary for the API search slice (plan 阶段4).
+ *
+ * Config shapes, the transport seams, and the failure-stage vocabulary, in one
+ * place so the four adapters, the shared transport, the contributions factory
+ * and the doctor can agree on names without importing each other.
+ *
+ * The config shapes stay CORE-LOCAL rather than moving into
+ * `@omnicross/contracts`: their only consumers are in this package until
+ * 阶段5's daemon assembles real configuration, and promoting them then — with
+ * whatever that assembly actually needs — beats freezing a guess now. Recorded
+ * as an explicit deferral in the change's design.
+ *
+ * @module search/api/types
+ */
+
+/**
+ * The transport identity stamped on every failure this slice throws.
+ *
+ * Same client as the HTTP slice, declared separately rather than imported: the
+ * two subpaths are independent, and a shared constant would couple them for a
+ * five-character string.
+ */
+declare const SEARCH_API_TRANSPORT_ID = "undici";
+/**
+ * Which phase of an API search failed (plan §11.4).
+ *
+ * - `config` — a required key or host is absent; nothing was sent.
+ * - `egress` — the policy refused the target or a redirect hop.
+ * - `connect` — the request never produced a response (DNS, TCP, TLS).
+ * - `fetch` — a response arrived but its status is unusable.
+ * - `redirect` — the redirect chain exceeded its cap.
+ * - `body-cap` — the response body outgrew its byte cap mid-stream.
+ * - `parse` — the body is not the JSON shape this API documents.
+ */
+type SearchApiStage = 'config' | 'egress' | 'connect' | 'fetch' | 'redirect' | 'body-cap' | 'parse';
+/** Tavily: key required, host overridable. */
+interface TavilyProviderConfig {
+    /** API key. Comma-separated values rotate round-robin. */
+    apiKey: string;
+    /** Override for `https://api.tavily.com`. */
+    apiHost?: string;
+}
+/** Jina: key OPTIONAL — the search endpoint works unauthenticated (rate-limited). */
+interface JinaProviderConfig {
+    /** API key. Comma-separated values rotate round-robin. Omit to run keyless. */
+    apiKey?: string;
+    /** Override for `https://s.jina.ai`. */
+    apiHost?: string;
+}
+/** SearXNG: the HOST is the required setting; there is no API key. */
+interface SearxngProviderConfig {
+    /** Base URL of the SearXNG instance. Required — this is its "configured" signal. */
+    apiHost: string;
+    /** Basic-auth user. Sent only when both user and password are present. */
+    basicAuthUsername?: string;
+    /** Basic-auth password. Sent only when both user and password are present. */
+    basicAuthPassword?: string;
+}
+/** Zhipu and Z.AI: one wire contract, two ids, two default hosts. */
+interface ZhipuProviderConfig {
+    /** API key. Comma-separated values rotate round-robin. */
+    apiKey: string;
+    /** Override for the per-id default host; normalized onto `/web_search`. */
+    apiHost?: string;
+}
+/**
+ * Per-provider configuration, keyed by provider id.
+ *
+ * A provider absent from this object is UNCONFIGURED, not broken: it produces
+ * no contribution at all, so capability discovery never advertises something
+ * that cannot run.
+ */
+interface SearchApiProviderConfigs {
+    tavily?: TavilyProviderConfig;
+    jina?: JinaProviderConfig;
+    searxng?: SearxngProviderConfig;
+    zhipu?: ZhipuProviderConfig;
+    'z.ai'?: ZhipuProviderConfig;
+}
+/**
+ * One API request, as the shared transport takes it.
+ *
+ * `secrets` is the redaction input: every value listed is stripped out of any
+ * upstream text before it can reach an error message or a diagnostic. Tavily
+ * transmits its key in the request BODY, so an upstream 4xx that echoes the
+ * request would otherwise put the key straight into a log.
+ */
+interface SearchApiRequest {
+    /** Absolute request URL. Validated against the egress policy before use. */
+    url: string;
+    /** HTTP method. */
+    method: 'GET' | 'POST';
+    /** Request headers. Never logged, never echoed into an error. */
+    headers?: Record<string, string>;
+    /** Body to serialize as JSON. Omit for GET. */
+    jsonBody?: unknown;
+    /** Stamped onto every thrown error. */
+    providerId: SearchProviderId;
+    /** Human-readable provider name for failure messages (never the query). */
+    label: string;
+    /** Hard budget for this request in milliseconds. */
+    timeoutMs?: number;
+    /** Caller cancellation. Aborting surfaces as `cancelled`, never `timeout`. */
+    signal?: AbortSignal;
+    /** Credential values to redact from any upstream text. */
+    secrets?: ReadonlyArray<string | undefined>;
+}
+/**
+ * The seam every adapter calls: a request in, parsed JSON out.
+ *
+ * Deliberately `unknown` rather than generic. The transport cannot know an
+ * API's shape, and a generic here would be a promise it cannot keep — each
+ * adapter validates its own response and raises `parse_failed` itself, which is
+ * where that failure actually belongs.
+ */
+type SearchApiTransport = (request: SearchApiRequest) => Promise<unknown>;
+/**
+ * The low-level fetch primitive the shared transport drives — undici's `fetch`
+ * by default. Separate from {@link SearchApiTransport} so redirect, status and
+ * redaction behavior can be unit-tested without a network.
+ */
+type SearchApiFetch = (url: string, init: RequestInit) => Promise<Response>;
+
+export { type JinaProviderConfig as J, type SearchApiProviderConfigs as S, type TavilyProviderConfig as T, type ZhipuProviderConfig as Z, type SearchApiFetch as a, type SearchApiTransport as b, type SearxngProviderConfig as c, SEARCH_API_TRANSPORT_ID as d, type SearchApiRequest as e, type SearchApiStage as f };

package/dist/{types-jjU24eYG.d.cts → types-D-oHYusb.d.cts}

@@ -1,4 +1,4 @@
-import { e as ImageApiLimits } from './types-CbglB73l.cjs';
+import { e as ImageApiLimits } from './types-Be-yt_6T.cjs';
 import { ProxyConfig } from '@omnicross/contracts/account-tokens-types';
 import { AuditConfig } from '@omnicross/contracts/audit-types';
 import { BillingConfig } from '@omnicross/contracts/billing-types';
@@ -7,9 +7,12 @@ import { VoucherRecord, VoucherGrant, VoucherInfo, VoucherConfig } from '@omnicr
 import { WebhookConfig } from '@omnicross/contracts/webhook-types';
 import { L as Logger } from './logger-4GvQNzhE.cjs';
 import { ProviderConfigSource } from './ports/provider-config-source.cjs';
-import { P as ProviderProxy } from './ProviderProxy-CgIcCVwk.cjs';
-import { W as ProviderProxyDeps } from './types-DsHBBk3h.cjs';
+import { P as ProviderProxy } from './ProviderProxy-Bz_nkOwq.cjs';
+import { W as ProviderProxyDeps } from './types-BSIJdsyl.cjs';
 import { BoundAccountFallbackPolicy } from './pipeline/BoundAccountSelectionError.cjs';
+import { S as SearchApiProviderConfigs } from './types-CbCZqLGg.cjs';
+import { d as SearchFrontendModes } from './frontends-Doz0RaWu.cjs';
+import { S as SearchRuntime } from './runtime-t8AZacFF.cjs';
 import { c as KeySpend } from './keyPolicy-zdWTu3CQ.cjs';
 
 /**
@@ -244,6 +247,54 @@ interface VoucherDb {
 type OutboundEndpoint = 'chat' | 'responses' | 'messages' | 'gemini';
 /** Named-key authorization vocabulary. Images is deliberately not a text route. */
 type OutboundPermission = OutboundEndpoint | 'images';
+/**
+ * The persisted `search` section (plan §6.3).
+ *
+ * Deliberately small. It carries the four things assembly cannot invent —
+ * which keyed providers exist, where they may egress, who executes per
+ * frontend, and the runtime's default policy — and nothing else. The
+ * provider-config SHAPES stay core-local (`@omnicross/core/search/api`); the
+ * 阶段4 deferral of promoting them into `@omnicross/contracts` is left standing
+ * because assembly turned out not to need it.
+ *
+ * **Secrets are values here, not references.** The
+ * `search-provider:<id>:apiKey` secret-ref scheme Elftia uses is host-side and
+ * belongs to the Phase-2 cutover; this phase reads what the config holds and
+ * never prints it.
+ */
+interface SearchServerConfig {
+    /**
+     * Per-frontend execution modes. Always total after normalization.
+     *
+     * **These do not all apply at the same moment.** `modes.codex` is read from
+     * the live config on every request, so an admin PUT takes effect at once;
+     * `modes.responses` / `modes.anthropic` are captured into the proxy deps at
+     * bootstrap, as are `providers`, `egress` and `policy` (they build the ONE
+     * runtime), so changing those requires a daemon restart. `doctor search`
+     * prints this distinction rather than leaving an operator to discover it.
+     */
+    modes: SearchFrontendModes;
+    /** Configured API providers. A provider absent here is UNCONFIGURED, not broken. */
+    providers: SearchApiProviderConfigs;
+    /** SSRF egress policy knobs. */
+    egress: {
+        /**
+         * Hostnames allowed to resolve into an otherwise-denied address class —
+         * the internal-SearXNG escape hatch. Exact, case-insensitive matching.
+         */
+        allowedPrivateHosts: string[];
+    };
+    /**
+     * The runtime's DEFAULT policy. These are 阶段3's existing knobs surfaced as
+     * configuration; no new orchestration semantics are introduced here.
+     */
+    policy: {
+        preferred?: string;
+        allowed?: string[];
+        fallbackEnabled: boolean;
+        maxAttempts?: number;
+    };
+}
 interface ImagesServerConfig {
     enabled: boolean;
     provider: 'codex-subscription';
@@ -770,6 +821,13 @@ interface OutboundApiServerConfig {
     anthropic?: AnthropicConfigSegment;
     /** Default-off Images serving policy; capability still requires fresh evidence. */
     images?: ImagesServerConfig;
+    /**
+     * Search assembly (plan 阶段5/§6.3): which API providers exist, where they may
+     * egress, which frontend runs in which mode, and the runtime's default policy.
+     * Absent yields {@link DEFAULT_SEARCH_SERVER_CONFIG} — HTTP-only providers,
+     * modes `off`/`native`/`native`, public-only egress.
+     */
+    search?: SearchServerConfig;
 }
 /** A live status snapshot the Settings tab renders. */
 interface OutboundApiServerStatus {
@@ -1075,6 +1133,17 @@ interface OutboundApiDeps {
      * embedders/tests that do not wire it).
      */
     readonly logger?: Logger;
+    /**
+     * OPTIONAL shared search runtime (plan 阶段5). When wired by the daemon
+     * bootstrap, `POST /v1/alpha/search` executes through it in managed mode.
+     * Absent ⇒ the route behaves exactly as mode `off`: a structured
+     * `unsupported_capability`, never a generic 404.
+     *
+     * There is exactly ONE of these per daemon, shared with both managed protocol
+     * frontends and with `doctor search`. A second instance anywhere would be a
+     * second provider order, which is what the whole extraction removes.
+     */
+    readonly searchRuntime?: SearchRuntime | null;
 }
 
-export { type OutboundKeyModelRestrictionMode as $, type AccountProbeConfig as A, type VoucherDb as B, type ChatDispatchMode as C, computeVoucherGrant as D, ENDPOINT_MODEL_KINDS as E, type FingerprintConfig as F, type GatewayBinding as G, generateVoucherCode as H, type ImagesServerConfig as I, hashVoucherCode as J, type KeySpendReader as K, newVoucherId as L, type MessagesModelKind as M, startOfLocalDay as N, type OutboundKeyDb as O, startOfLocalWeek as P, toVoucherInfo as Q, type RequestRole as R, voucherCodePrefix as S, type ModelRef as T, type UserMessageQueueConfig as U, type VoucherCreateInput as V, type AnthropicConfigSegment as W, type AccountHealthConfig as X, type AnthropicCountTokensMode as Y, type AnthropicModelsShape as Z, type ImageModelCatalogReader as _, type AllowanceSchedulingConfig as a, type ConcurrencyQueueConfig as b, type EndpointRoutingConfig as c, type GatewayBindingFallback as d, type GatewayBindingKeyScope as e, type GatewayBindingModelMode as f, type GatewayBindingTarget as g, type GatewayModelMapping as h, type KeySpendSeeder as i, KeySpendTracker as j, type KindMappedEndpoint as k, type ModelKind as l, type ModelPrefixTargets as m, type OutboundApiDeps as n, type OutboundApiKeyCreated as o, type OutboundApiKeyInfo as p, type OutboundApiServerConfig as q, type OutboundApiServerStatus as r, type OutboundEndpoint as s, type OutboundFormatUrls as t, type OutboundKeyActivationMode as u, type OutboundKeyDbRow as v, type OutboundKeyPolicy as w, type OutboundPermission as x, type OutboundProxyConfig as y, type ResponsesModelKind as z };
+export { type ImageModelCatalogReader as $, type AccountProbeConfig as A, type VoucherDb as B, type ChatDispatchMode as C, computeVoucherGrant as D, ENDPOINT_MODEL_KINDS as E, type FingerprintConfig as F, type GatewayBinding as G, generateVoucherCode as H, type ImagesServerConfig as I, hashVoucherCode as J, type KeySpendReader as K, newVoucherId as L, type MessagesModelKind as M, startOfLocalDay as N, type OutboundKeyDb as O, startOfLocalWeek as P, toVoucherInfo as Q, type RequestRole as R, type SearchServerConfig as S, voucherCodePrefix as T, type UserMessageQueueConfig as U, type VoucherCreateInput as V, type ModelRef as W, type AnthropicConfigSegment as X, type AccountHealthConfig as Y, type AnthropicCountTokensMode as Z, type AnthropicModelsShape as _, type AllowanceSchedulingConfig as a, type OutboundKeyModelRestrictionMode as a0, type ConcurrencyQueueConfig as b, type EndpointRoutingConfig as c, type GatewayBindingFallback as d, type GatewayBindingKeyScope as e, type GatewayBindingModelMode as f, type GatewayBindingTarget as g, type GatewayModelMapping as h, type KeySpendSeeder as i, KeySpendTracker as j, type KindMappedEndpoint as k, type ModelKind as l, type ModelPrefixTargets as m, type OutboundApiDeps as n, type OutboundApiKeyCreated as o, type OutboundApiKeyInfo as p, type OutboundApiServerConfig as q, type OutboundApiServerStatus as r, type OutboundEndpoint as s, type OutboundFormatUrls as t, type OutboundKeyActivationMode as u, type OutboundKeyDbRow as v, type OutboundKeyPolicy as w, type OutboundPermission as x, type OutboundProxyConfig as y, type ResponsesModelKind as z };

package/dist/{types-Bd72H4SB.d.ts → types-Dm4_36V4.d.ts}

@@ -1,6 +1,6 @@
 import * as _omnicross_contracts_image_generation_types from '@omnicross/contracts/image-generation-types';
 import { ImageArtifactMetadata, ImageRequestOptions } from '@omnicross/contracts/image-generation-types';
-import { I as ImageAsset, p as ImageReferenceLease, K as OpenAIOperationHandler, h as ImageOrchestrator, L as OpenAIOperationHandlerContext, s as ImageReferenceStore, u as ImageRetentionPolicy } from './types-CVRge76p.js';
+import { I as ImageAsset, p as ImageReferenceLease, K as OpenAIOperationHandler, h as ImageOrchestrator, L as OpenAIOperationHandlerContext, s as ImageReferenceStore, u as ImageRetentionPolicy } from './types-By9Tg6-I.js';
 import { FileHandle } from 'node:fs/promises';
 
 type ResourceKind = 'input' | 'spool';

package/dist/{types-5T223WYQ.d.ts → types-Dvlpjn0d.d.ts}

@@ -1,4 +1,4 @@
-import { e as ImageApiLimits } from './types-Bd72H4SB.js';
+import { e as ImageApiLimits } from './types-Dm4_36V4.js';
 import { ProxyConfig } from '@omnicross/contracts/account-tokens-types';
 import { AuditConfig } from '@omnicross/contracts/audit-types';
 import { BillingConfig } from '@omnicross/contracts/billing-types';
@@ -7,9 +7,12 @@ import { VoucherRecord, VoucherGrant, VoucherInfo, VoucherConfig } from '@omnicr
 import { WebhookConfig } from '@omnicross/contracts/webhook-types';
 import { L as Logger } from './logger-4GvQNzhE.js';
 import { ProviderConfigSource } from './ports/provider-config-source.js';
-import { P as ProviderProxy } from './ProviderProxy-DYoY5XoT.js';
-import { W as ProviderProxyDeps } from './types-CVRge76p.js';
+import { P as ProviderProxy } from './ProviderProxy-Ckr6oTrE.js';
+import { W as ProviderProxyDeps } from './types-By9Tg6-I.js';
 import { BoundAccountFallbackPolicy } from './pipeline/BoundAccountSelectionError.js';
+import { S as SearchApiProviderConfigs } from './types-CbCZqLGg.js';
+import { d as SearchFrontendModes } from './frontends-Doz0RaWu.js';
+import { S as SearchRuntime } from './runtime-t8AZacFF.js';
 import { c as KeySpend } from './keyPolicy-zdWTu3CQ.js';
 
 /**
@@ -244,6 +247,54 @@ interface VoucherDb {
 type OutboundEndpoint = 'chat' | 'responses' | 'messages' | 'gemini';
 /** Named-key authorization vocabulary. Images is deliberately not a text route. */
 type OutboundPermission = OutboundEndpoint | 'images';
+/**
+ * The persisted `search` section (plan §6.3).
+ *
+ * Deliberately small. It carries the four things assembly cannot invent —
+ * which keyed providers exist, where they may egress, who executes per
+ * frontend, and the runtime's default policy — and nothing else. The
+ * provider-config SHAPES stay core-local (`@omnicross/core/search/api`); the
+ * 阶段4 deferral of promoting them into `@omnicross/contracts` is left standing
+ * because assembly turned out not to need it.
+ *
+ * **Secrets are values here, not references.** The
+ * `search-provider:<id>:apiKey` secret-ref scheme Elftia uses is host-side and
+ * belongs to the Phase-2 cutover; this phase reads what the config holds and
+ * never prints it.
+ */
+interface SearchServerConfig {
+    /**
+     * Per-frontend execution modes. Always total after normalization.
+     *
+     * **These do not all apply at the same moment.** `modes.codex` is read from
+     * the live config on every request, so an admin PUT takes effect at once;
+     * `modes.responses` / `modes.anthropic` are captured into the proxy deps at
+     * bootstrap, as are `providers`, `egress` and `policy` (they build the ONE
+     * runtime), so changing those requires a daemon restart. `doctor search`
+     * prints this distinction rather than leaving an operator to discover it.
+     */
+    modes: SearchFrontendModes;
+    /** Configured API providers. A provider absent here is UNCONFIGURED, not broken. */
+    providers: SearchApiProviderConfigs;
+    /** SSRF egress policy knobs. */
+    egress: {
+        /**
+         * Hostnames allowed to resolve into an otherwise-denied address class —
+         * the internal-SearXNG escape hatch. Exact, case-insensitive matching.
+         */
+        allowedPrivateHosts: string[];
+    };
+    /**
+     * The runtime's DEFAULT policy. These are 阶段3's existing knobs surfaced as
+     * configuration; no new orchestration semantics are introduced here.
+     */
+    policy: {
+        preferred?: string;
+        allowed?: string[];
+        fallbackEnabled: boolean;
+        maxAttempts?: number;
+    };
+}
 interface ImagesServerConfig {
     enabled: boolean;
     provider: 'codex-subscription';
@@ -770,6 +821,13 @@ interface OutboundApiServerConfig {
     anthropic?: AnthropicConfigSegment;
     /** Default-off Images serving policy; capability still requires fresh evidence. */
     images?: ImagesServerConfig;
+    /**
+     * Search assembly (plan 阶段5/§6.3): which API providers exist, where they may
+     * egress, which frontend runs in which mode, and the runtime's default policy.
+     * Absent yields {@link DEFAULT_SEARCH_SERVER_CONFIG} — HTTP-only providers,
+     * modes `off`/`native`/`native`, public-only egress.
+     */
+    search?: SearchServerConfig;
 }
 /** A live status snapshot the Settings tab renders. */
 interface OutboundApiServerStatus {
@@ -1075,6 +1133,17 @@ interface OutboundApiDeps {
      * embedders/tests that do not wire it).
      */
     readonly logger?: Logger;
+    /**
+     * OPTIONAL shared search runtime (plan 阶段5). When wired by the daemon
+     * bootstrap, `POST /v1/alpha/search` executes through it in managed mode.
+     * Absent ⇒ the route behaves exactly as mode `off`: a structured
+     * `unsupported_capability`, never a generic 404.
+     *
+     * There is exactly ONE of these per daemon, shared with both managed protocol
+     * frontends and with `doctor search`. A second instance anywhere would be a
+     * second provider order, which is what the whole extraction removes.
+     */
+    readonly searchRuntime?: SearchRuntime | null;
 }
 
-export { type OutboundKeyModelRestrictionMode as $, type AccountProbeConfig as A, type VoucherDb as B, type ChatDispatchMode as C, computeVoucherGrant as D, ENDPOINT_MODEL_KINDS as E, type FingerprintConfig as F, type GatewayBinding as G, generateVoucherCode as H, type ImagesServerConfig as I, hashVoucherCode as J, type KeySpendReader as K, newVoucherId as L, type MessagesModelKind as M, startOfLocalDay as N, type OutboundKeyDb as O, startOfLocalWeek as P, toVoucherInfo as Q, type RequestRole as R, voucherCodePrefix as S, type ModelRef as T, type UserMessageQueueConfig as U, type VoucherCreateInput as V, type AnthropicConfigSegment as W, type AccountHealthConfig as X, type AnthropicCountTokensMode as Y, type AnthropicModelsShape as Z, type ImageModelCatalogReader as _, type AllowanceSchedulingConfig as a, type ConcurrencyQueueConfig as b, type EndpointRoutingConfig as c, type GatewayBindingFallback as d, type GatewayBindingKeyScope as e, type GatewayBindingModelMode as f, type GatewayBindingTarget as g, type GatewayModelMapping as h, type KeySpendSeeder as i, KeySpendTracker as j, type KindMappedEndpoint as k, type ModelKind as l, type ModelPrefixTargets as m, type OutboundApiDeps as n, type OutboundApiKeyCreated as o, type OutboundApiKeyInfo as p, type OutboundApiServerConfig as q, type OutboundApiServerStatus as r, type OutboundEndpoint as s, type OutboundFormatUrls as t, type OutboundKeyActivationMode as u, type OutboundKeyDbRow as v, type OutboundKeyPolicy as w, type OutboundPermission as x, type OutboundProxyConfig as y, type ResponsesModelKind as z };
+export { type ImageModelCatalogReader as $, type AccountProbeConfig as A, type VoucherDb as B, type ChatDispatchMode as C, computeVoucherGrant as D, ENDPOINT_MODEL_KINDS as E, type FingerprintConfig as F, type GatewayBinding as G, generateVoucherCode as H, type ImagesServerConfig as I, hashVoucherCode as J, type KeySpendReader as K, newVoucherId as L, type MessagesModelKind as M, startOfLocalDay as N, type OutboundKeyDb as O, startOfLocalWeek as P, toVoucherInfo as Q, type RequestRole as R, type SearchServerConfig as S, voucherCodePrefix as T, type UserMessageQueueConfig as U, type VoucherCreateInput as V, type ModelRef as W, type AnthropicConfigSegment as X, type AccountHealthConfig as Y, type AnthropicCountTokensMode as Z, type AnthropicModelsShape as _, type AllowanceSchedulingConfig as a, type OutboundKeyModelRestrictionMode as a0, type ConcurrencyQueueConfig as b, type EndpointRoutingConfig as c, type GatewayBindingFallback as d, type GatewayBindingKeyScope as e, type GatewayBindingModelMode as f, type GatewayBindingTarget as g, type GatewayModelMapping as h, type KeySpendSeeder as i, KeySpendTracker as j, type KindMappedEndpoint as k, type ModelKind as l, type ModelPrefixTargets as m, type OutboundApiDeps as n, type OutboundApiKeyCreated as o, type OutboundApiKeyInfo as p, type OutboundApiServerConfig as q, type OutboundApiServerStatus as r, type OutboundEndpoint as s, type OutboundFormatUrls as t, type OutboundKeyActivationMode as u, type OutboundKeyDbRow as v, type OutboundKeyPolicy as w, type OutboundPermission as x, type OutboundProxyConfig as y, type ResponsesModelKind as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omnicross/core",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Omnicross LLM serving core — provider dispatch, completion pipeline, transformers, and the provider proxy.",
   "license": "MIT",
   "author": "Sayo (https://github.com/Dumoedss)",
@@ -50,13 +50,15 @@
     "README.md"
   ],
   "scripts": {
-    "build": "tsup",
+    "build": "tsup && node scripts/check-exports.mjs",
+    "check:exports": "node scripts/check-exports.mjs",
     "typecheck": "tsc -p tsconfig.typecheck.json --noEmit"
   },
   "dependencies": {
     "@mozilla/readability": "^0.6.0",
-    "@omnicross/contracts": "^0.2.0",
+    "@omnicross/contracts": "^0.2.1",
     "busboy": "^1.6.0",
+    "entities": "^6.0.1",
     "jsdom": "^24.1.3",
     "sharp": "^0.35.4",
     "socks": "^2.8.3",

package/dist/{chunk-6OC3ORW6.js → chunk-EUZRH544.js}

@@ -1,9 +1,9 @@
-import {
-  anthropicUsageToChatUsage
-} from "./chunk-FU7EAR73.js";
 import {
   convertOpenAIStreamToAnthropic
 } from "./chunk-LFEH7CEO.js";
+import {
+  anthropicUsageToChatUsage
+} from "./chunk-FU7EAR73.js";
 import {
   flattenToolResultContent,
   formatBase64,

package/dist/{chunk-SQMAEDNE.cjs → chunk-POUTD5AM.cjs}

@@ -1,9 +1,9 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } var _class;
 
-var _chunk5RSZYQJHcjs = require('./chunk-5RSZYQJH.cjs');
+var _chunk6DDYNS2Bcjs = require('./chunk-6DDYNS2B.cjs');
 
 
-var _chunk6DDYNS2Bcjs = require('./chunk-6DDYNS2B.cjs');
+var _chunk5RSZYQJHcjs = require('./chunk-5RSZYQJH.cjs');