@omnicross/core 0.2.1 → 0.3.1

package/dist/search/api.cjs

@@ -62,7 +62,7 @@ var API_RESPONSE_BYTES = 2 * 1024 * 1024;
 var MAX_UPSTREAM_TEXT = 300;
 function createSearchApiTransport(options = {}) {
   const policy = options.egressPolicy;
-  const fetchImpl = _nullishCoalesce(options.fetch, () => ( createUndiciApiFetch(options.env, policy)));
+  const fetchImpl = _nullishCoalesce(options.fetch, () => ( createUndiciApiFetch(options.env, policy, options.resolveProxyDispatcher)));
   const maxRedirects = _nullishCoalesce(options.maxRedirects, () => ( API_MAX_REDIRECTS));
   return async (request) => {
     const context = {
@@ -122,14 +122,18 @@ function createSearchApiTransport(options = {}) {
   };
 }
 var defaultSearchApiTransport = createSearchApiTransport();
-function selectApiDispatcher(env, policy) {
+function selectApiDispatcher(env, policy, override) {
+  if (_optionalChain([override, 'optionalAccess', _13 => _13.resolveProxyDispatcher])) {
+    const dispatcher = override.resolveProxyDispatcher(override.url);
+    if (dispatcher) return { dispatcher, proxied: true };
+  }
   const proxy = _chunk7RJI3NDIcjs.resolveSearchProxySettings.call(void 0, env);
   if (proxy) return { dispatcher: _chunk7RJI3NDIcjs.getSearchProxyDispatcher.call(void 0, proxy), proxied: true };
   return { dispatcher: _chunk7RJI3NDIcjs.createEgressGuardedDispatcher.call(void 0, policy), proxied: false };
 }
-function createUndiciApiFetch(env, policy) {
+function createUndiciApiFetch(env, policy, resolveProxyDispatcher) {
   return async (url, init) => {
-    const { dispatcher } = selectApiDispatcher(env, policy);
+    const { dispatcher } = selectApiDispatcher(env, policy, { url, resolveProxyDispatcher });
     return await _undici.fetch.call(void 0, 
       url,
       { ...init, dispatcher }
@@ -168,7 +172,7 @@ async function fetchWithValidatedRedirects(fetchImpl, initialUrl, request, signa
     if (response.status < 300 || response.status >= 400) return response;
     const location = response.headers.get("location");
     if (!location) return response;
-    void _optionalChain([response, 'access', _13 => _13.body, 'optionalAccess', _14 => _14.cancel, 'call', _15 => _15(), 'access', _16 => _16.catch, 'call', _17 => _17(() => void 0)]);
+    void _optionalChain([response, 'access', _14 => _14.body, 'optionalAccess', _15 => _15.cancel, 'call', _16 => _16(), 'access', _17 => _17.catch, 'call', _18 => _18(() => void 0)]);
     if (redirects === maxRedirects) throw tooManyRedirects(maxRedirects, context);
     let nextUrl;
     try {
@@ -208,7 +212,7 @@ function assertEgressAllowed(url, policy, context) {
     const denial = error;
     throw apiError(denial.code, denial.message, {
       stage: "egress",
-      context: { ...context, host: _nullishCoalesce(_optionalChain([denial, 'access', _18 => _18.details, 'optionalAccess', _19 => _19.host]), () => ( context.host)) },
+      context: { ...context, host: _nullishCoalesce(_optionalChain([denial, 'access', _19 => _19.details, 'optionalAccess', _20 => _20.host]), () => ( context.host)) },
       retryable: false,
       cause: denial,
       details: denial.details
@@ -224,7 +228,7 @@ function tooManyRedirects(maxRedirects, context) {
   });
 }
 async function readJsonBodyWithLimit(response, context) {
-  const reader = _optionalChain([response, 'access', _20 => _20.body, 'optionalAccess', _21 => _21.getReader, 'call', _22 => _22()]);
+  const reader = _optionalChain([response, 'access', _21 => _21.body, 'optionalAccess', _22 => _22.getReader, 'call', _23 => _23()]);
   if (!reader) return "";
   const chunks = [];
   let totalBytes = 0;
@@ -673,7 +677,8 @@ var ZHIPU_CAPABILITIES = Object.freeze({
 function apiSearchContributions(configs, options = {}) {
   const transport = createSearchApiTransport({
     fetch: options.fetchImpl,
-    egressPolicy: options.egressPolicy
+    egressPolicy: options.egressPolicy,
+    resolveProxyDispatcher: options.resolveProxyDispatcher
   });
   const contributions = [];
   if (configs.tavily) {

package/dist/search/api.d.cts

@@ -1,10 +1,10 @@
 import { SearchProviderCapabilities, SearchProviderContribution, SearchProviderId, SearchOptions, SearchUrlReadResult, SearchProvider, SearchResult, SearchProviderError } from '@omnicross/contracts/search-types';
+import { Dispatcher } from 'undici';
 import { S as SearchEgressPolicy } from '../egress-I46O_p5L.cjs';
 import { a as SearchApiFetch, S as SearchApiProviderConfigs, J as JinaProviderConfig, b as SearchApiTransport, c as SearxngProviderConfig, T as TavilyProviderConfig, Z as ZhipuProviderConfig } from '../types-CbCZqLGg.cjs';
 export { d as SEARCH_API_TRANSPORT_ID, e as SearchApiRequest, f as SearchApiStage } from '../types-CbCZqLGg.cjs';
 import { P as ProxyEnvironment } from '../proxy-UZTtjPZx.cjs';
 import 'node:dns';
-import 'undici';
 
 /**
  * The API search contributions.
@@ -44,6 +44,11 @@ interface ApiSearchContributionOptions {
     egressPolicy?: SearchEgressPolicy;
     /** Fetch primitive seam. Omit for the production undici transport. */
     fetchImpl?: SearchApiFetch;
+    /**
+     * Layered proxy-dispatcher override handed to the shared transport (the
+     * daemon's `fetchUpstream` resolver). Only meaningful without `fetchImpl`.
+     */
+    resolveProxyDispatcher?: (url: string) => Dispatcher | undefined;
 }
 /**
  * Build contributions for exactly the providers `configs` names.
@@ -286,6 +291,16 @@ interface SearchApiTransportOptions {
     fetch?: SearchApiFetch;
     /** Environment to read proxy variables from. Defaults to `process.env`. */
     env?: ProxyEnvironment;
+    /**
+     * Layered proxy-dispatcher override for one request URL, AHEAD of the env
+     * layer (the daemon's `fetchUpstream` resolver, so search follows
+     * `server.proxy`). When it yields a dispatcher the connection is proxied —
+     * URL and per-hop egress validation still apply, address-level validation
+     * does not, the same documented limitation as the env proxy. When it yields
+     * `undefined` the env layer and then the egress-guarded dispatcher apply,
+     * exactly as before.
+     */
+    resolveProxyDispatcher?: (url: string) => Dispatcher | undefined;
     /** Egress policy. Defaults to public-only. */
     egressPolicy?: SearchEgressPolicy;
     /** Redirect hop cap. Defaults to {@link API_MAX_REDIRECTS}. */

package/dist/search/api.d.ts

@@ -1,10 +1,10 @@
 import { SearchProviderCapabilities, SearchProviderContribution, SearchProviderId, SearchOptions, SearchUrlReadResult, SearchProvider, SearchResult, SearchProviderError } from '@omnicross/contracts/search-types';
+import { Dispatcher } from 'undici';
 import { S as SearchEgressPolicy } from '../egress-I46O_p5L.js';
 import { a as SearchApiFetch, S as SearchApiProviderConfigs, J as JinaProviderConfig, b as SearchApiTransport, c as SearxngProviderConfig, T as TavilyProviderConfig, Z as ZhipuProviderConfig } from '../types-CbCZqLGg.js';
 export { d as SEARCH_API_TRANSPORT_ID, e as SearchApiRequest, f as SearchApiStage } from '../types-CbCZqLGg.js';
 import { P as ProxyEnvironment } from '../proxy-UZTtjPZx.js';
 import 'node:dns';
-import 'undici';
 
 /**
  * The API search contributions.
@@ -44,6 +44,11 @@ interface ApiSearchContributionOptions {
     egressPolicy?: SearchEgressPolicy;
     /** Fetch primitive seam. Omit for the production undici transport. */
     fetchImpl?: SearchApiFetch;
+    /**
+     * Layered proxy-dispatcher override handed to the shared transport (the
+     * daemon's `fetchUpstream` resolver). Only meaningful without `fetchImpl`.
+     */
+    resolveProxyDispatcher?: (url: string) => Dispatcher | undefined;
 }
 /**
  * Build contributions for exactly the providers `configs` names.
@@ -286,6 +291,16 @@ interface SearchApiTransportOptions {
     fetch?: SearchApiFetch;
     /** Environment to read proxy variables from. Defaults to `process.env`. */
     env?: ProxyEnvironment;
+    /**
+     * Layered proxy-dispatcher override for one request URL, AHEAD of the env
+     * layer (the daemon's `fetchUpstream` resolver, so search follows
+     * `server.proxy`). When it yields a dispatcher the connection is proxied —
+     * URL and per-hop egress validation still apply, address-level validation
+     * does not, the same documented limitation as the env proxy. When it yields
+     * `undefined` the env layer and then the egress-guarded dispatcher apply,
+     * exactly as before.
+     */
+    resolveProxyDispatcher?: (url: string) => Dispatcher | undefined;
     /** Egress policy. Defaults to public-only. */
     egressPolicy?: SearchEgressPolicy;
     /** Redirect hop cap. Defaults to {@link API_MAX_REDIRECTS}. */

package/dist/search/api.js

@@ -62,7 +62,7 @@ var API_RESPONSE_BYTES = 2 * 1024 * 1024;
 var MAX_UPSTREAM_TEXT = 300;
 function createSearchApiTransport(options = {}) {
   const policy = options.egressPolicy;
-  const fetchImpl = options.fetch ?? createUndiciApiFetch(options.env, policy);
+  const fetchImpl = options.fetch ?? createUndiciApiFetch(options.env, policy, options.resolveProxyDispatcher);
   const maxRedirects = options.maxRedirects ?? API_MAX_REDIRECTS;
   return async (request) => {
     const context = {
@@ -122,14 +122,18 @@ function createSearchApiTransport(options = {}) {
   };
 }
 var defaultSearchApiTransport = createSearchApiTransport();
-function selectApiDispatcher(env, policy) {
+function selectApiDispatcher(env, policy, override) {
+  if (override?.resolveProxyDispatcher) {
+    const dispatcher = override.resolveProxyDispatcher(override.url);
+    if (dispatcher) return { dispatcher, proxied: true };
+  }
   const proxy = resolveSearchProxySettings(env);
   if (proxy) return { dispatcher: getSearchProxyDispatcher(proxy), proxied: true };
   return { dispatcher: createEgressGuardedDispatcher(policy), proxied: false };
 }
-function createUndiciApiFetch(env, policy) {
+function createUndiciApiFetch(env, policy, resolveProxyDispatcher) {
   return async (url, init) => {
-    const { dispatcher } = selectApiDispatcher(env, policy);
+    const { dispatcher } = selectApiDispatcher(env, policy, { url, resolveProxyDispatcher });
     return await undiciFetch(
       url,
       { ...init, dispatcher }
@@ -673,7 +677,8 @@ var ZHIPU_CAPABILITIES = Object.freeze({
 function apiSearchContributions(configs, options = {}) {
   const transport = createSearchApiTransport({
     fetch: options.fetchImpl,
-    egressPolicy: options.egressPolicy
+    egressPolicy: options.egressPolicy,
+    resolveProxyDispatcher: options.resolveProxyDispatcher
   });
   const contributions = [];
   if (configs.tavily) {

package/dist/search/http.cjs

@@ -15,7 +15,7 @@
 
 
 
-var _chunkHL2YSPL7cjs = require('../chunk-HL2YSPL7.cjs');
+var _chunkBTBEJRGLcjs = require('../chunk-BTBEJRGL.cjs');
 require('../chunk-7RJI3NDI.cjs');
 
 
@@ -34,4 +34,4 @@ require('../chunk-7RJI3NDI.cjs');
 
 
 
-exports.DEFAULT_MAX_RESULTS = _chunkHL2YSPL7cjs.DEFAULT_MAX_RESULTS; exports.DEFAULT_SEARCH_TIMEOUT_MS = _chunkHL2YSPL7cjs.DEFAULT_SEARCH_TIMEOUT_MS; exports.HTTP_BING_PROVIDER_ID = _chunkHL2YSPL7cjs.HTTP_BING_PROVIDER_ID; exports.HTTP_DUCKDUCKGO_PROVIDER_ID = _chunkHL2YSPL7cjs.HTTP_DUCKDUCKGO_PROVIDER_ID; exports.HTTP_SEARCH_CAPABILITIES = _chunkHL2YSPL7cjs.HTTP_SEARCH_CAPABILITIES; exports.HttpBingProvider = _chunkHL2YSPL7cjs.HttpBingProvider; exports.HttpDuckDuckGoProvider = _chunkHL2YSPL7cjs.HttpDuckDuckGoProvider; exports.MAX_REDIRECTS = _chunkHL2YSPL7cjs.MAX_REDIRECTS; exports.MAX_RESULTS = _chunkHL2YSPL7cjs.MAX_RESULTS; exports.SEARCH_BROWSER_HEADERS = _chunkHL2YSPL7cjs.SEARCH_BROWSER_HEADERS; exports.SEARCH_HTTP_TRANSPORT_ID = _chunkHL2YSPL7cjs.SEARCH_HTTP_TRANSPORT_ID; exports.SEARCH_RESPONSE_BYTES = _chunkHL2YSPL7cjs.SEARCH_RESPONSE_BYTES; exports.builtinHttpSearchContributions = _chunkHL2YSPL7cjs.builtinHttpSearchContributions; exports.clampMaxResults = _chunkHL2YSPL7cjs.clampMaxResults; exports.createSearchHttpTransport = _chunkHL2YSPL7cjs.createSearchHttpTransport; exports.defaultSearchHttpTransport = _chunkHL2YSPL7cjs.defaultSearchHttpTransport;
+exports.DEFAULT_MAX_RESULTS = _chunkBTBEJRGLcjs.DEFAULT_MAX_RESULTS; exports.DEFAULT_SEARCH_TIMEOUT_MS = _chunkBTBEJRGLcjs.DEFAULT_SEARCH_TIMEOUT_MS; exports.HTTP_BING_PROVIDER_ID = _chunkBTBEJRGLcjs.HTTP_BING_PROVIDER_ID; exports.HTTP_DUCKDUCKGO_PROVIDER_ID = _chunkBTBEJRGLcjs.HTTP_DUCKDUCKGO_PROVIDER_ID; exports.HTTP_SEARCH_CAPABILITIES = _chunkBTBEJRGLcjs.HTTP_SEARCH_CAPABILITIES; exports.HttpBingProvider = _chunkBTBEJRGLcjs.HttpBingProvider; exports.HttpDuckDuckGoProvider = _chunkBTBEJRGLcjs.HttpDuckDuckGoProvider; exports.MAX_REDIRECTS = _chunkBTBEJRGLcjs.MAX_REDIRECTS; exports.MAX_RESULTS = _chunkBTBEJRGLcjs.MAX_RESULTS; exports.SEARCH_BROWSER_HEADERS = _chunkBTBEJRGLcjs.SEARCH_BROWSER_HEADERS; exports.SEARCH_HTTP_TRANSPORT_ID = _chunkBTBEJRGLcjs.SEARCH_HTTP_TRANSPORT_ID; exports.SEARCH_RESPONSE_BYTES = _chunkBTBEJRGLcjs.SEARCH_RESPONSE_BYTES; exports.builtinHttpSearchContributions = _chunkBTBEJRGLcjs.builtinHttpSearchContributions; exports.clampMaxResults = _chunkBTBEJRGLcjs.clampMaxResults; exports.createSearchHttpTransport = _chunkBTBEJRGLcjs.createSearchHttpTransport; exports.defaultSearchHttpTransport = _chunkBTBEJRGLcjs.defaultSearchHttpTransport;

package/dist/search/http.d.cts

@@ -1,8 +1,10 @@
 import { SearchProviderId, SearchResult, SearchProviderCapabilities, SearchProviderContribution, SearchProvider, SearchOptions } from '@omnicross/contracts/search-types';
+import { ProxyConfig } from '@omnicross/contracts/account-tokens-types';
+import { Dispatcher } from 'undici';
 import { S as SearchEgressPolicy } from '../egress-I46O_p5L.cjs';
+import { ImpitOptions, Impit } from 'impit';
 import { P as ProxyEnvironment } from '../proxy-UZTtjPZx.cjs';
 import 'node:dns';
-import 'undici';
 
 /**
  * Shared vocabulary for the keyless HTTP search slice (plan 阶段2).
@@ -160,12 +162,13 @@ declare function clampMaxResults(maxResults: number | undefined): number;
  * This is the profile `packages/core/test-fixtures/http-search/` was captured
  * with, so changing it invalidates the fixtures as live-behavior evidence.
  *
- * Ported from Elftia's `webFetchHttp.browserHeaders()` with ONE deliberate
- * difference: the Chrome version is PINNED here instead of read from
- * `process.versions.chrome`. Elftia runs inside Electron and inherits a real
- * Chromium version; `@omnicross/core` runs in plain Node, where that field is
- * absent — pinning keeps the sent profile identical across every host and
- * matches the spec's "pinned Chrome desktop User-Agent".
+ * Ported verbatim from Elftia's `webFetchHttp.browserHeaders()` — a verified
+ * config; do not deviate from it. The Chromium version is read from the
+ * RUNTIME, exactly as Elftia does: `process.versions.chrome` inside an
+ * Electron host (a real, complete build number), and Elftia's own fixed
+ * fallback when no Chromium runtime reports one (plain Node). Never pin or
+ * invent a version string here — a fabricated build number is a bot
+ * fingerprint no real browser ever sends.
  *
  * @module search/http/headers
  */
@@ -211,6 +214,34 @@ declare class HttpDuckDuckGoProvider implements SearchProvider {
     search(query: string, options?: SearchOptions): Promise<SearchResult[]>;
 }
 
+/**
+ * The browser-impersonating fetch primitive for the keyless HTTP slice.
+ *
+ * Ported from Elftia's `nodeWebFetchTransport` (the impit half): impit supplies
+ * a current-Chrome TLS/HTTP2 fingerprint, which is the difference between a
+ * real SERP and a bot-decoy page on engines that fingerprint the client
+ * handshake. This is a verified config — `browser`, `followRedirects` and
+ * `vanillaFallback` mirror Elftia exactly; do not deviate.
+ *
+ * Fixed semantics:
+ * - `followRedirects: false`, so the transport's manual, egress-validated
+ *   redirect walk keeps sole ownership of hop decisions.
+ * - `vanillaFallback: false`: if the platform binary is unavailable we degrade
+ *   to the bounded undici path IN THIS MODULE'S CALLER — never silently to a
+ *   vanilla (non-impersonating) impit mode that would look like a browser and
+ *   handshake like Node.
+ * - Request-specific `user-agent`/`sec-ch-ua*` headers are REMOVED, so the
+ *   headers stay consistent with the impersonated fingerprint (impit sends its
+ *   own matching set).
+ * - One client per proxy URL, cached; if `impit` cannot be imported at all the
+ *   answer is `undefined` and the caller uses the undici fallback.
+ *
+ * @module search/http/impit
+ */
+
+/** Structural constructor type — resilient to impit being absent at runtime. */
+type ImpitConstructor = new (options?: ImpitOptions) => Impit;
+
 /**
  * The shared HTTP transport both keyless search providers run on.
  *
@@ -221,8 +252,14 @@ declare class HttpDuckDuckGoProvider implements SearchProvider {
  * `details.stage`.
  *
  * Fixed semantics:
- * - undici `fetch`, with an `EnvHttpProxyAgent` dispatcher when the environment
- *   configures a proxy (cached per proxy signature).
+ * - impit first (Elftia's verified browser-impersonating client — a real
+ *   Chrome TLS/HTTP2 fingerprint; `followRedirects: false` keeps this
+ *   transport's manual, egress-validated walk in charge), with the layered
+ *   `resolveProxyConfig` as its proxy source. When the impit platform binary
+ *   is unavailable, the bounded undici path serves instead, with a per-request
+ *   proxy dispatcher: the layered `resolveProxyDispatcher` override first (the
+ *   daemon's `fetchUpstream` resolver), else the `EnvHttpProxyAgent` the
+ *   environment configures (cached per proxy signature).
  * - The pinned browser navigation header profile (see `./headers`).
  * - `redirect: 'manual'`, at most {@link MAX_REDIRECTS} hops, with the initial
  *   URL and every hop target checked against the search egress policy
@@ -253,6 +290,23 @@ interface SearchHttpTransportOptions {
     fetch?: SearchHttpFetch;
     /** Environment to read proxy variables from. Defaults to `process.env`. */
     env?: ProxyEnvironment;
+    /**
+     * Layered proxy-dispatcher override for one request URL, AHEAD of the env
+     * layer. The daemon passes `fetchUpstream`'s resolver here so search egress
+     * follows the same `server.proxy` stack (global config, socks5 included) as
+     * LLM upstream traffic; a `NO_PROXY`/loopback target yields `undefined`
+     * inside that resolver and falls through to the env layer unchanged.
+     */
+    resolveProxyDispatcher?: (url: string) => Dispatcher | undefined;
+    /**
+     * Layered proxy CONFIG for one request URL — the impit path's proxy source,
+     * because impit takes a proxy URL, not an undici dispatcher. The daemon
+     * passes its `fetchUpstream`-layered resolver, so `server.proxy` (socks5
+     * included) governs impersonated requests exactly like LLM egress.
+     */
+    resolveProxyConfig?: (url: string) => ProxyConfig | undefined;
+    /** Test seam for the impit constructor loader. Omit for the real import. */
+    loadImpit?: () => Promise<ImpitConstructor | undefined>;
     /** Redirect hop cap. Defaults to {@link MAX_REDIRECTS}. */
     maxRedirects?: number;
     /**

package/dist/search/http.d.ts

@@ -1,8 +1,10 @@
 import { SearchProviderId, SearchResult, SearchProviderCapabilities, SearchProviderContribution, SearchProvider, SearchOptions } from '@omnicross/contracts/search-types';
+import { ProxyConfig } from '@omnicross/contracts/account-tokens-types';
+import { Dispatcher } from 'undici';
 import { S as SearchEgressPolicy } from '../egress-I46O_p5L.js';
+import { ImpitOptions, Impit } from 'impit';
 import { P as ProxyEnvironment } from '../proxy-UZTtjPZx.js';
 import 'node:dns';
-import 'undici';
 
 /**
  * Shared vocabulary for the keyless HTTP search slice (plan 阶段2).
@@ -160,12 +162,13 @@ declare function clampMaxResults(maxResults: number | undefined): number;
  * This is the profile `packages/core/test-fixtures/http-search/` was captured
  * with, so changing it invalidates the fixtures as live-behavior evidence.
  *
- * Ported from Elftia's `webFetchHttp.browserHeaders()` with ONE deliberate
- * difference: the Chrome version is PINNED here instead of read from
- * `process.versions.chrome`. Elftia runs inside Electron and inherits a real
- * Chromium version; `@omnicross/core` runs in plain Node, where that field is
- * absent — pinning keeps the sent profile identical across every host and
- * matches the spec's "pinned Chrome desktop User-Agent".
+ * Ported verbatim from Elftia's `webFetchHttp.browserHeaders()` — a verified
+ * config; do not deviate from it. The Chromium version is read from the
+ * RUNTIME, exactly as Elftia does: `process.versions.chrome` inside an
+ * Electron host (a real, complete build number), and Elftia's own fixed
+ * fallback when no Chromium runtime reports one (plain Node). Never pin or
+ * invent a version string here — a fabricated build number is a bot
+ * fingerprint no real browser ever sends.
  *
  * @module search/http/headers
  */
@@ -211,6 +214,34 @@ declare class HttpDuckDuckGoProvider implements SearchProvider {
     search(query: string, options?: SearchOptions): Promise<SearchResult[]>;
 }
 
+/**
+ * The browser-impersonating fetch primitive for the keyless HTTP slice.
+ *
+ * Ported from Elftia's `nodeWebFetchTransport` (the impit half): impit supplies
+ * a current-Chrome TLS/HTTP2 fingerprint, which is the difference between a
+ * real SERP and a bot-decoy page on engines that fingerprint the client
+ * handshake. This is a verified config — `browser`, `followRedirects` and
+ * `vanillaFallback` mirror Elftia exactly; do not deviate.
+ *
+ * Fixed semantics:
+ * - `followRedirects: false`, so the transport's manual, egress-validated
+ *   redirect walk keeps sole ownership of hop decisions.
+ * - `vanillaFallback: false`: if the platform binary is unavailable we degrade
+ *   to the bounded undici path IN THIS MODULE'S CALLER — never silently to a
+ *   vanilla (non-impersonating) impit mode that would look like a browser and
+ *   handshake like Node.
+ * - Request-specific `user-agent`/`sec-ch-ua*` headers are REMOVED, so the
+ *   headers stay consistent with the impersonated fingerprint (impit sends its
+ *   own matching set).
+ * - One client per proxy URL, cached; if `impit` cannot be imported at all the
+ *   answer is `undefined` and the caller uses the undici fallback.
+ *
+ * @module search/http/impit
+ */
+
+/** Structural constructor type — resilient to impit being absent at runtime. */
+type ImpitConstructor = new (options?: ImpitOptions) => Impit;
+
 /**
  * The shared HTTP transport both keyless search providers run on.
  *
@@ -221,8 +252,14 @@ declare class HttpDuckDuckGoProvider implements SearchProvider {
  * `details.stage`.
  *
  * Fixed semantics:
- * - undici `fetch`, with an `EnvHttpProxyAgent` dispatcher when the environment
- *   configures a proxy (cached per proxy signature).
+ * - impit first (Elftia's verified browser-impersonating client — a real
+ *   Chrome TLS/HTTP2 fingerprint; `followRedirects: false` keeps this
+ *   transport's manual, egress-validated walk in charge), with the layered
+ *   `resolveProxyConfig` as its proxy source. When the impit platform binary
+ *   is unavailable, the bounded undici path serves instead, with a per-request
+ *   proxy dispatcher: the layered `resolveProxyDispatcher` override first (the
+ *   daemon's `fetchUpstream` resolver), else the `EnvHttpProxyAgent` the
+ *   environment configures (cached per proxy signature).
  * - The pinned browser navigation header profile (see `./headers`).
  * - `redirect: 'manual'`, at most {@link MAX_REDIRECTS} hops, with the initial
  *   URL and every hop target checked against the search egress policy
@@ -253,6 +290,23 @@ interface SearchHttpTransportOptions {
     fetch?: SearchHttpFetch;
     /** Environment to read proxy variables from. Defaults to `process.env`. */
     env?: ProxyEnvironment;
+    /**
+     * Layered proxy-dispatcher override for one request URL, AHEAD of the env
+     * layer. The daemon passes `fetchUpstream`'s resolver here so search egress
+     * follows the same `server.proxy` stack (global config, socks5 included) as
+     * LLM upstream traffic; a `NO_PROXY`/loopback target yields `undefined`
+     * inside that resolver and falls through to the env layer unchanged.
+     */
+    resolveProxyDispatcher?: (url: string) => Dispatcher | undefined;
+    /**
+     * Layered proxy CONFIG for one request URL — the impit path's proxy source,
+     * because impit takes a proxy URL, not an undici dispatcher. The daemon
+     * passes its `fetchUpstream`-layered resolver, so `server.proxy` (socks5
+     * included) governs impersonated requests exactly like LLM egress.
+     */
+    resolveProxyConfig?: (url: string) => ProxyConfig | undefined;
+    /** Test seam for the impit constructor loader. Omit for the real import. */
+    loadImpit?: () => Promise<ImpitConstructor | undefined>;
     /** Redirect hop cap. Defaults to {@link MAX_REDIRECTS}. */
     maxRedirects?: number;
     /**

package/dist/search/http.js

@@ -15,7 +15,7 @@ import {
   clampMaxResults,
   createSearchHttpTransport,
   defaultSearchHttpTransport
-} from "../chunk-NLUOTJWB.js";
+} from "../chunk-DXWFBBSK.js";
 import "../chunk-DBBR6RHF.js";
 export {
   DEFAULT_MAX_RESULTS,

package/dist/search.cjs

@@ -8,8 +8,8 @@
 
 
 
-var _chunkD4WNI6BRcjs = require('./chunk-D4WNI6BR.cjs');
-require('./chunk-HL2YSPL7.cjs');
+var _chunkPTU7SXM3cjs = require('./chunk-PTU7SXM3.cjs');
+require('./chunk-BTBEJRGL.cjs');
 
 
 
@@ -54,4 +54,4 @@ var _chunkE4QHVXV5cjs = require('./chunk-E4QHVXV5.cjs');
 
 
 
-exports.DEFAULT_NORMALIZED_MAX_RESULTS = _chunkD4WNI6BRcjs.DEFAULT_NORMALIZED_MAX_RESULTS; exports.DEFAULT_SEARCH_EGRESS_POLICY = _chunk7RJI3NDIcjs.DEFAULT_SEARCH_EGRESS_POLICY; exports.DEFAULT_SEARCH_FRONTEND_MODES = _chunkE4QHVXV5cjs.DEFAULT_SEARCH_FRONTEND_MODES; exports.SEARCH_FRONTEND_MODES = _chunkE4QHVXV5cjs.SEARCH_FRONTEND_MODES; exports.SEARCH_FRONTEND_NAMES = _chunkE4QHVXV5cjs.SEARCH_FRONTEND_NAMES; exports.SEARCH_UNSUPPORTED_CAPABILITY_CODE = _chunkE4QHVXV5cjs.SEARCH_UNSUPPORTED_CAPABILITY_CODE; exports.SearchOrchestrator = _chunkD4WNI6BRcjs.SearchOrchestrator; exports.SearchProviderRegistry = _chunkD4WNI6BRcjs.SearchProviderRegistry; exports.SearchRegistryError = _chunkD4WNI6BRcjs.SearchRegistryError; exports.assertEgressAddressAllowed = _chunk7RJI3NDIcjs.assertEgressAddressAllowed; exports.createEgressGuardedDispatcher = _chunk7RJI3NDIcjs.createEgressGuardedDispatcher; exports.createEgressGuardedLookup = _chunk7RJI3NDIcjs.createEgressGuardedLookup; exports.createSearchRuntime = _chunkD4WNI6BRcjs.createSearchRuntime; exports.findEgressDenial = _chunk7RJI3NDIcjs.findEgressDenial; exports.hashSearchQuery = _chunkD4WNI6BRcjs.hashSearchQuery; exports.isDirectResultUrl = _chunkD4WNI6BRcjs.isDirectResultUrl; exports.isSearchFrontendMode = _chunkE4QHVXV5cjs.isSearchFrontendMode; exports.normalizeSearchFrontendModes = _chunkE4QHVXV5cjs.normalizeSearchFrontendModes; exports.normalizeSearchResults = _chunkD4WNI6BRcjs.normalizeSearchResults; exports.normalizedResultLimit = _chunkD4WNI6BRcjs.normalizedResultLimit; exports.searchErrorHttpStatus = _chunkE4QHVXV5cjs.searchErrorHttpStatus; exports.searchRuntimeAsWebSearchBackend = _chunkE4QHVXV5cjs.searchRuntimeAsWebSearchBackend; exports.validateEgressUrl = _chunk7RJI3NDIcjs.validateEgressUrl; exports.validateSearchFrontendModes = _chunkE4QHVXV5cjs.validateSearchFrontendModes;
+exports.DEFAULT_NORMALIZED_MAX_RESULTS = _chunkPTU7SXM3cjs.DEFAULT_NORMALIZED_MAX_RESULTS; exports.DEFAULT_SEARCH_EGRESS_POLICY = _chunk7RJI3NDIcjs.DEFAULT_SEARCH_EGRESS_POLICY; exports.DEFAULT_SEARCH_FRONTEND_MODES = _chunkE4QHVXV5cjs.DEFAULT_SEARCH_FRONTEND_MODES; exports.SEARCH_FRONTEND_MODES = _chunkE4QHVXV5cjs.SEARCH_FRONTEND_MODES; exports.SEARCH_FRONTEND_NAMES = _chunkE4QHVXV5cjs.SEARCH_FRONTEND_NAMES; exports.SEARCH_UNSUPPORTED_CAPABILITY_CODE = _chunkE4QHVXV5cjs.SEARCH_UNSUPPORTED_CAPABILITY_CODE; exports.SearchOrchestrator = _chunkPTU7SXM3cjs.SearchOrchestrator; exports.SearchProviderRegistry = _chunkPTU7SXM3cjs.SearchProviderRegistry; exports.SearchRegistryError = _chunkPTU7SXM3cjs.SearchRegistryError; exports.assertEgressAddressAllowed = _chunk7RJI3NDIcjs.assertEgressAddressAllowed; exports.createEgressGuardedDispatcher = _chunk7RJI3NDIcjs.createEgressGuardedDispatcher; exports.createEgressGuardedLookup = _chunk7RJI3NDIcjs.createEgressGuardedLookup; exports.createSearchRuntime = _chunkPTU7SXM3cjs.createSearchRuntime; exports.findEgressDenial = _chunk7RJI3NDIcjs.findEgressDenial; exports.hashSearchQuery = _chunkPTU7SXM3cjs.hashSearchQuery; exports.isDirectResultUrl = _chunkPTU7SXM3cjs.isDirectResultUrl; exports.isSearchFrontendMode = _chunkE4QHVXV5cjs.isSearchFrontendMode; exports.normalizeSearchFrontendModes = _chunkE4QHVXV5cjs.normalizeSearchFrontendModes; exports.normalizeSearchResults = _chunkPTU7SXM3cjs.normalizeSearchResults; exports.normalizedResultLimit = _chunkPTU7SXM3cjs.normalizedResultLimit; exports.searchErrorHttpStatus = _chunkE4QHVXV5cjs.searchErrorHttpStatus; exports.searchRuntimeAsWebSearchBackend = _chunkE4QHVXV5cjs.searchRuntimeAsWebSearchBackend; exports.validateEgressUrl = _chunk7RJI3NDIcjs.validateEgressUrl; exports.validateSearchFrontendModes = _chunkE4QHVXV5cjs.validateSearchFrontendModes;

package/dist/search.js

@@ -8,8 +8,8 @@ import {
   isDirectResultUrl,
   normalizeSearchResults,
   normalizedResultLimit
-} from "./chunk-LFPQ2OVH.js";
-import "./chunk-NLUOTJWB.js";
+} from "./chunk-L7O2YQ5O.js";
+import "./chunk-DXWFBBSK.js";
 import {
   DEFAULT_SEARCH_EGRESS_POLICY,
   assertEgressAddressAllowed,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omnicross/core",
-  "version": "0.2.1",
+  "version": "0.3.1",
   "description": "Omnicross LLM serving core — provider dispatch, completion pipeline, transformers, and the provider proxy.",
   "license": "MIT",
   "author": "Sayo (https://github.com/Dumoedss)",
@@ -56,9 +56,10 @@
   },
   "dependencies": {
     "@mozilla/readability": "^0.6.0",
-    "@omnicross/contracts": "^0.2.1",
+    "@omnicross/contracts": "^0.3.1",
     "busboy": "^1.6.0",
     "entities": "^6.0.1",
+    "impit": "^0.14.4",
     "jsdom": "^24.1.3",
     "sharp": "^0.35.4",
     "socks": "^2.8.3",

package/dist/runtime-6QXNU526.cjs

@@ -1,8 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});
-
-var _chunkD4WNI6BRcjs = require('./chunk-D4WNI6BR.cjs');
-require('./chunk-HL2YSPL7.cjs');
-require('./chunk-7RJI3NDI.cjs');
-
-
-exports.createSearchRuntime = _chunkD4WNI6BRcjs.createSearchRuntime;