tolvyn 1.0.7 → 1.0.10

package/README.md

@@ -50,10 +50,10 @@ const { OpenAI } = require("tolvyn");
 const client = new OpenAI({ tolvynApiKey: process.env.TOLVYN_API_KEY, team: "backend" });
 ```
 
-## All three providers
+## All four providers
 
 ```typescript
-import { OpenAI, Anthropic, Google } from "tolvyn";
+import { OpenAI, Anthropic, Google, DeepSeek } from "tolvyn";
 
 // OpenAI
 const oai = new OpenAI({
@@ -70,6 +70,16 @@ const anth = new Anthropic({
 // Google (requires @google/generative-ai peer dep)
 const goog = new Google({ tolvynApiKey: "tlv_live_..." });
 const model = goog.getGenerativeModel({ model: "gemini-1.5-flash" });
+
+// DeepSeek (OpenAI-compatible API)
+const ds = new DeepSeek({
+  tolvynApiKey: "tlv_live_...",
+  deepSeekApiKey: "sk-...",        // optional — enables fail-open fallback
+});
+const dsResponse = await ds.chat.completions.create({
+  model: "deepseek-chat",
+  messages: [{ role: "user", content: "Hello" }],
+});
 ```
 
 ## Attribution headers
@@ -88,11 +98,11 @@ const client = new OpenAI({
 });
 ```
 
-The TOLVYN proxy strips all six headers before forwarding the request upstream — they never reach OpenAI/Anthropic/Google.
+The TOLVYN proxy strips all six headers before forwarding the request upstream — they never reach OpenAI/Anthropic/Google/DeepSeek.
 
 ## Fail-open behavior
 
-If TOLVYN's proxy is unreachable, the SDK automatically retries the request directly against the provider (requires `openAIApiKey` / `anthropicApiKey` / `googleApiKey` to be set). Disable with `failOpen: false`.
+If TOLVYN's proxy is unreachable, the SDK automatically retries the request directly against the provider (requires `openAIApiKey` / `anthropicApiKey` / `googleApiKey` / `deepSeekApiKey` to be set). Disable with `failOpen: false`.
 
 Triggers on: connection refused, timeout, DNS failure, HTTP 503.
 Does NOT trigger on: 4xx errors (auth failures, rate limits, bad requests).
@@ -106,7 +116,8 @@ Requests that fail open bypass the proxy and are not metered for that call.
 | `TOLVYN_API_KEY` | Yes (unless `tolvynApiKey` option is passed) | Your TOLVYN API key (`tlv_live_...`) |
 | `OPENAI_API_KEY` | For fail-open | Fallback OpenAI key if proxy unreachable |
 | `ANTHROPIC_API_KEY` | For fail-open | Fallback Anthropic key if proxy unreachable |
-| `GOOGLE_API_KEY` | For fail-open | Reserved; Google fail-open is implemented in v1.0.6+ |
+| `GOOGLE_API_KEY` | For fail-open | Fallback Google key if proxy unreachable (`generateContent` in v1.0.6+; `generateContentStream`/`countTokens`/`embedContent`/`batchEmbedContents` in v1.0.10+) |
+| `DEEPSEEK_API_KEY` | For fail-open | Fallback DeepSeek key if proxy unreachable (v1.0.9+) |
 | `TOLVYN_PROXY_URL` | No | Override proxy URL |
 
 ## API keys
@@ -114,7 +125,7 @@ Requests that fail open bypass the proxy and are not metered for that call.
 - Production keys start with `tlv_live_`
 - Test keys start with `tlv_test_` (use these in CI / staging)
 - Get your key at [app.tolvyn.io](https://app.tolvyn.io) → API Keys
-- **Provider keys** (OpenAI / Anthropic / Google) go in the dashboard under **Account → Provider Keys** — never in code. They are stored encrypted server-side.
+- **Provider keys** (OpenAI / Anthropic / Google / DeepSeek) go in the dashboard under **Account → Provider Keys** — never in code. They are stored encrypted server-side.
 
 ## TypeScript
 
@@ -125,6 +136,7 @@ import type {
   TolvynOpenAIOptions,
   TolvynAnthropicOptions,
   TolvynGoogleOptions,
+  TolvynDeepSeekOptions,
 } from "tolvyn";
 ```
 

package/dist/cjs/deepseek.d.ts

@@ -0,0 +1,28 @@
+/**
+ * TOLVYN DeepSeek wrapper — thin drop-in over the official openai package.
+ *
+ * DeepSeek exposes an OpenAI-compatible API, so this wraps the same `openai`
+ * base client as the OpenAI wrapper but points the proxy/fallback at DeepSeek
+ * and falls back with the DeepSeek key. Fail-open routes direct to
+ * https://api.deepseek.com/v1 (Bearer auth) when the TOLVYN proxy is unreachable.
+ */
+import OpenAIBase, { ClientOptions } from 'openai';
+export interface TolvynDeepSeekOptions extends Omit<ClientOptions, 'apiKey' | 'baseURL'> {
+    tolvynApiKey?: string;
+    proxyUrl?: string;
+    team?: string;
+    service?: string;
+    feature?: string;
+    agent?: string;
+    user?: string;
+    endCustomer?: string;
+    failOpen?: boolean;
+    deepSeekApiKey?: string;
+}
+export declare class DeepSeek extends OpenAIBase {
+    readonly _tolvynFailOpen: boolean;
+    readonly _tolvynFallbackKey: string | undefined;
+    readonly _tolvynProxyUrl: string;
+    constructor(options?: TolvynDeepSeekOptions);
+}
+//# sourceMappingURL=deepseek.d.ts.map

package/dist/cjs/deepseek.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deepseek.d.ts","sourceRoot":"","sources":["../../src/deepseek.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,UAAU,EAAE,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAMnD,MAAM,WAAW,qBACf,SAAQ,IAAI,CAAC,aAAa,EAAE,QAAQ,GAAG,SAAS,CAAC;IACjD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,QAAS,SAAQ,UAAU;IACtC,SAAgB,eAAe,EAAE,OAAO,CAAC;IACzC,SAAgB,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;IACvD,SAAgB,eAAe,EAAE,MAAM,CAAC;gBAE5B,OAAO,GAAE,qBAA0B;CAgDhD"}

package/dist/cjs/deepseek.js

@@ -0,0 +1,60 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeepSeek = void 0;
+/**
+ * TOLVYN DeepSeek wrapper — thin drop-in over the official openai package.
+ *
+ * DeepSeek exposes an OpenAI-compatible API, so this wraps the same `openai`
+ * base client as the OpenAI wrapper but points the proxy/fallback at DeepSeek
+ * and falls back with the DeepSeek key. Fail-open routes direct to
+ * https://api.deepseek.com/v1 (Bearer auth) when the TOLVYN proxy is unreachable.
+ */
+const openai_1 = __importDefault(require("openai"));
+const failopen_1 = require("./failopen");
+const DEEPSEEK_DEFAULT_PROXY_URL = 'https://proxy.tolvyn.io/v1/proxy/deepseek/';
+const DEEPSEEK_DIRECT_URL = 'https://api.deepseek.com/v1';
+class DeepSeek extends openai_1.default {
+    constructor(options = {}) {
+        const tolvynApiKey = options.tolvynApiKey ?? process.env['TOLVYN_API_KEY'];
+        if (!tolvynApiKey) {
+            throw new Error('tolvynApiKey required. Set TOLVYN_API_KEY env var or pass tolvynApiKey.');
+        }
+        const proxyUrl = options.proxyUrl ??
+            process.env['TOLVYN_PROXY_URL'] ??
+            DEEPSEEK_DEFAULT_PROXY_URL;
+        const defaultHeaders = {};
+        if (options.team)
+            defaultHeaders['X-Tolvyn-Team'] = options.team;
+        if (options.service)
+            defaultHeaders['X-Tolvyn-Service'] = options.service;
+        if (options.feature)
+            defaultHeaders['X-Tolvyn-Feature'] = options.feature;
+        if (options.agent)
+            defaultHeaders['X-Tolvyn-Agent'] = options.agent;
+        if (options.user)
+            defaultHeaders['X-Tolvyn-User'] = options.user;
+        if (options.endCustomer)
+            defaultHeaders['X-Tolvyn-End-Customer'] = options.endCustomer;
+        const fallbackKey = options.deepSeekApiKey ?? process.env['DEEPSEEK_API_KEY'];
+        const failOpen = options.failOpen ?? true;
+        const { tolvynApiKey: _tk, proxyUrl: _pu, team: _t, service: _sv, feature: _f, agent: _a, user: _u, endCustomer: _ec, failOpen: _fo, deepSeekApiKey: _dsk, ...rest } = options;
+        const superOptions = {
+            ...rest,
+            apiKey: tolvynApiKey,
+            baseURL: proxyUrl,
+            defaultHeaders,
+        };
+        if (failOpen && fallbackKey && !superOptions.fetch) {
+            superOptions.fetch = (0, failopen_1.makeFailOpenFetch)(fallbackKey, DEEPSEEK_DIRECT_URL, 'DeepSeek');
+        }
+        super(superOptions);
+        this._tolvynFailOpen = failOpen;
+        this._tolvynFallbackKey = fallbackKey;
+        this._tolvynProxyUrl = proxyUrl;
+    }
+}
+exports.DeepSeek = DeepSeek;
+//# sourceMappingURL=deepseek.js.map

package/dist/cjs/deepseek.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deepseek.js","sourceRoot":"","sources":["../../src/deepseek.ts"],"names":[],"mappings":";;;;;;AAAA;;;;;;;GAOG;AACH,oDAAmD;AACnD,yCAA+C;AAE/C,MAAM,0BAA0B,GAAG,4CAA4C,CAAC;AAChF,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AAgB1D,MAAa,QAAS,SAAQ,gBAAU;IAKtC,YAAY,UAAiC,EAAE;QAC7C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC3E,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ;YAChB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;YAC/B,0BAA0B,CAAC;QAE7B,MAAM,cAAc,GAA2B,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,IAAI;YAAS,cAAc,CAAC,eAAe,CAAC,GAAW,OAAO,CAAC,IAAI,CAAC;QAChF,IAAI,OAAO,CAAC,OAAO;YAAM,cAAc,CAAC,kBAAkB,CAAC,GAAQ,OAAO,CAAC,OAAO,CAAC;QACnF,IAAI,OAAO,CAAC,OAAO;YAAM,cAAc,CAAC,kBAAkB,CAAC,GAAQ,OAAO,CAAC,OAAO,CAAC;QACnF,IAAI,OAAO,CAAC,KAAK;YAAQ,cAAc,CAAC,gBAAgB,CAAC,GAAU,OAAO,CAAC,KAAK,CAAC;QACjF,IAAI,OAAO,CAAC,IAAI;YAAS,cAAc,CAAC,eAAe,CAAC,GAAW,OAAO,CAAC,IAAI,CAAC;QAChF,IAAI,OAAO,CAAC,WAAW;YAAE,cAAc,CAAC,uBAAuB,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;QAEvF,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC;QAE1C,MAAM,EACJ,YAAY,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,EAClD,QAAQ,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EACnC,GAAG,IAAI,EACR,GAAG,OAAO,CAAC;QAEZ,MAAM,YAAY,GAAkB;YAClC,GAAG,IAAI;YACP,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,QAAQ;YACjB,cAAc;SACf,CAAC;QAEF,IAAI,QAAQ,IAAI,WAAW,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YACnD,YAAY,CAAC,KAAK,GAAG,IAAA,4BAAiB,EAAC,WAAW,EAAE,mBAAmB,EAAE,UAAU,CAAC,CAAC;QACvF,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,CAAC;QAEpB,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;QAChC,IAAI,CAAC,kBAAkB,GAAG,WAAW,CAAC;QACtC,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;IAClC,CAAC;CACF;AArDD,4BAqDC"}

package/dist/cjs/failopen.d.ts

@@ -21,5 +21,14 @@ export declare function shouldNotFailOpen(error: unknown): boolean;
  *   → https://api.anthropic.com/v1/messages
  */
 export declare function buildFallbackUrl(originalUrl: URL, fallbackBaseUrl: string): URL;
+/**
+ * Rewrite `headers` in place to authenticate a direct provider call.
+ *
+ * Strips every inbound auth header (Authorization/x-api-key/x-goog-api-key —
+ * each may carry the TOLVYN key) and sets the single header the provider's
+ * direct API expects, with the provider's own key. Fixes ND-09 (Bearer sent to
+ * Anthropic → 401) and ND-11 (the TOLVYN key in x-api-key leaking on fallback).
+ */
+export declare function applyFallbackAuth(headers: Headers, provider: string, fallbackKey: string): void;
 export declare function makeFailOpenFetch(fallbackKey: string, directUrl: string, provider: string): typeof globalThis.fetch;
 //# sourceMappingURL=failopen.d.ts.map

package/dist/cjs/failopen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"failopen.d.ts","sourceRoot":"","sources":["../../src/failopen.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAoCpD;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CASzD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,GAAG,GAAG,CAa/E;AAED,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,UAAU,CAAC,KAAK,CAgCzB"}
+{"version":3,"file":"failopen.d.ts","sourceRoot":"","sources":["../../src/failopen.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAoCpD;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CASzD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,GAAG,GAAG,CAa/E;AAaD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,GAClB,IAAI,CAUN;AAED,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,UAAU,CAAC,KAAK,CAgCzB"}

package/dist/cjs/failopen.js

@@ -6,8 +6,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.isProxyError = isProxyError;
 exports.shouldNotFailOpen = shouldNotFailOpen;
 exports.buildFallbackUrl = buildFallbackUrl;
+exports.applyFallbackAuth = applyFallbackAuth;
 exports.makeFailOpenFetch = makeFailOpenFetch;
-const PROXY_PREFIX_RE = /^\/v1\/proxy\/(?:openai|anthropic|google)\//;
+const PROXY_PREFIX_RE = /^\/v1\/proxy\/(?:openai|anthropic|google|deepseek)\//;
 function isProxyError(error) {
     if (!error || typeof error !== 'object')
         return false;
@@ -79,6 +80,36 @@ function buildFallbackUrl(originalUrl, fallbackBaseUrl) {
     newUrl.pathname = finalPath;
     return newUrl;
 }
+// The header each provider's DIRECT API reads the API key from. The TOLVYN
+// proxy accepts Authorization/x-api-key/x-goog-api-key interchangeably, but the
+// providers themselves do NOT: Anthropic authenticates only via x-api-key and
+// Google only via x-goog-api-key — sending Bearer to them 401s.
+const PROVIDER_AUTH_HEADER = {
+    openai: 'Authorization',
+    anthropic: 'x-api-key',
+    google: 'x-goog-api-key',
+    deepseek: 'Authorization', // OpenAI-compatible; Bearer auth (same as the default)
+};
+/**
+ * Rewrite `headers` in place to authenticate a direct provider call.
+ *
+ * Strips every inbound auth header (Authorization/x-api-key/x-goog-api-key —
+ * each may carry the TOLVYN key) and sets the single header the provider's
+ * direct API expects, with the provider's own key. Fixes ND-09 (Bearer sent to
+ * Anthropic → 401) and ND-11 (the TOLVYN key in x-api-key leaking on fallback).
+ */
+function applyFallbackAuth(headers, provider, fallbackKey) {
+    headers.delete('Authorization');
+    headers.delete('x-api-key');
+    headers.delete('x-goog-api-key');
+    const header = PROVIDER_AUTH_HEADER[provider.toLowerCase()] ?? 'Authorization';
+    if (header === 'Authorization') {
+        headers.set('Authorization', `Bearer ${fallbackKey}`);
+    }
+    else {
+        headers.set(header, fallbackKey);
+    }
+}
 function makeFailOpenFetch(fallbackKey, directUrl, provider) {
     return async function failOpenFetch(input, init) {
         try {
@@ -100,7 +131,7 @@ function makeFailOpenFetch(fallbackKey, directUrl, provider) {
             const url = buildFallbackUrl(new URL(originalUrl), directUrl);
             const newInit = { ...(init ?? {}) };
             const headers = new Headers(init?.headers ?? {});
-            headers.set('Authorization', `Bearer ${fallbackKey}`);
+            applyFallbackAuth(headers, provider, fallbackKey);
             newInit.headers = headers;
             return fetch(url.toString(), newInit);
         }

package/dist/cjs/failopen.js.map

@@ -1 +1 @@
-{"version":3,"file":"failopen.js","sourceRoot":"","sources":["../../src/failopen.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAIH,oCAoCC;AAED,8CASC;AAmBD,4CAaC;AAED,8CAoCC;AAvHD,MAAM,eAAe,GAAG,6CAA6C,CAAC;AAEtE,SAAgB,YAAY,CAAC,KAAc;IACzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAE7C,4DAA4D;IAC5D,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAC9B,IAAI,KAAK,cAAc;QACvB,IAAI,KAAK,YAAY;QACrB,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,WAAW;QACpB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CACxB,EAAE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sBAAsB;IACtB,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAEhC,qBAAqB;IACrB,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,IACE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC7B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EACxC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sCAAsC;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAAc;IAC9C,uEAAuE;IACvE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,gBAAgB,CAAC,WAAgB,EAAE,eAAuB;IACxE,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc;IAEjE,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;IAExC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/C,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC;IAC9B,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC;IAC9B,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC;IACtB,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,iBAAiB,CAC/B,WAAmB,EACnB,SAAiB,EACjB,QAAgB;IAEhB,OAAO,KAAK,UAAU,aAAa,CACjC,KAAwB,EACxB,IAAkB;QAElB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACrC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC5D,OAAO,CAAC,KAAK,CACX,gDAAgD,QAAQ,cAAc,CACvE,CAAC;YACF,MAAM,WAAW,GACf,OAAO,KAAK,KAAK,QAAQ;gBACvB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,KAAK,YAAY,GAAG;oBACtB,CAAC,CAAC,KAAK,CAAC,IAAI;oBACZ,CAAC,CAAE,KAAiB,CAAC,GAAG,CAAC;YAC7B,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC;YAE9D,MAAM,OAAO,GAAgB,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAE,IAAI,EAAE,OAAuB,IAAI,EAAE,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,WAAW,EAAE,CAAC,CAAC;YACtD,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;YAE1B,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"failopen.js","sourceRoot":"","sources":["../../src/failopen.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAIH,oCAoCC;AAED,8CASC;AAmBD,4CAaC;AAqBD,8CAcC;AAED,8CAoCC;AA1JD,MAAM,eAAe,GAAG,sDAAsD,CAAC;AAE/E,SAAgB,YAAY,CAAC,KAAc;IACzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAE7C,4DAA4D;IAC5D,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAC9B,IAAI,KAAK,cAAc;QACvB,IAAI,KAAK,YAAY;QACrB,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,WAAW;QACpB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CACxB,EAAE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sBAAsB;IACtB,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAEhC,qBAAqB;IACrB,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,IACE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC7B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EACxC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sCAAsC;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAAc;IAC9C,uEAAuE;IACvE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,gBAAgB,CAAC,WAAgB,EAAE,eAAuB;IACxE,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc;IAEjE,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;IAExC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/C,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC;IAC9B,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC;IAC9B,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC;IACtB,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2EAA2E;AAC3E,gFAAgF;AAChF,8EAA8E;AAC9E,gEAAgE;AAChE,MAAM,oBAAoB,GAA2B;IACnD,MAAM,EAAE,eAAe;IACvB,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,gBAAgB;IACxB,QAAQ,EAAE,eAAe,EAAE,uDAAuD;CACnF,CAAC;AAEF;;;;;;;GAOG;AACH,SAAgB,iBAAiB,CAC/B,OAAgB,EAChB,QAAgB,EAChB,WAAmB;IAEnB,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAChC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC5B,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,eAAe,CAAC;IAC/E,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,WAAW,EAAE,CAAC,CAAC;IACxD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB,CAC/B,WAAmB,EACnB,SAAiB,EACjB,QAAgB;IAEhB,OAAO,KAAK,UAAU,aAAa,CACjC,KAAwB,EACxB,IAAkB;QAElB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACrC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC5D,OAAO,CAAC,KAAK,CACX,gDAAgD,QAAQ,cAAc,CACvE,CAAC;YACF,MAAM,WAAW,GACf,OAAO,KAAK,KAAK,QAAQ;gBACvB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,KAAK,YAAY,GAAG;oBACtB,CAAC,CAAC,KAAK,CAAC,IAAI;oBACZ,CAAC,CAAE,KAAiB,CAAC,GAAG,CAAC;YAC7B,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC;YAE9D,MAAM,OAAO,GAAgB,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAE,IAAI,EAAE,OAAuB,IAAI,EAAE,CAAC,CAAC;YAClE,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;YAClD,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;YAE1B,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/cjs/google.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../../src/google.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EACL,kBAAkB,EAClB,WAAW,EACX,cAAc,EACf,MAAM,uBAAuB,CAAC;AAO/B,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAID,qBAAa,MAAO,SAAQ,kBAAkB;IAC5C,SAAgB,eAAe,EAAE,OAAO,CAAC;IACzC,SAAgB,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;IACvD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyB;gBAE5C,OAAO,GAAE,mBAAwB;IAgCpC,kBAAkB,CACzB,WAAW,EAAE,WAAW,EACxB,cAAc,CAAC,EAAE,cAAc;CAkClC"}
+{"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../../src/google.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EACL,kBAAkB,EAClB,WAAW,EACX,cAAc,EACf,MAAM,uBAAuB,CAAC;AAW/B,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAID,qBAAa,MAAO,SAAQ,kBAAkB;IAC5C,SAAgB,eAAe,EAAE,OAAO,CAAC;IACzC,SAAgB,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;IACvD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyB;gBAE5C,OAAO,GAAE,mBAAwB;IAgCpC,kBAAkB,CACzB,WAAW,EAAE,WAAW,EACxB,cAAc,CAAC,EAAE,cAAc;CAwDlC"}

package/dist/cjs/google.js

@@ -8,7 +8,11 @@ const generative_ai_1 = require("@google/generative-ai");
 const failopen_1 = require("./failopen");
 // The proxy base URL is prepended to Google API paths (/v1beta/models/...).
 // The TOLVYN proxy strips /v1/proxy/google and forwards the remainder to Google.
-const GOOGLE_DEFAULT_PROXY_URL = 'https://proxy.tolvyn.io/v1/proxy/google/';
+// ND-10: NO trailing slash. @google/generative-ai builds `${baseUrl}/${apiVersion}/...`
+// WITHOUT collapsing a double slash (unlike the OpenAI/Anthropic SDKs), so a
+// trailing slash here produces `.../proxy/google//v1beta/...`. This intentionally
+// reverses ND-07's trailing-slash "consistency" for the Google provider only.
+const GOOGLE_DEFAULT_PROXY_URL = 'https://proxy.tolvyn.io/v1/proxy/google';
 // ND-05: renamed from TolvynGoogle → Google so stack traces and constructor.name
 // match the public API. Old name remains re-exportable via index.ts alias.
 class Google extends generative_ai_1.GoogleGenerativeAI {
@@ -45,34 +49,53 @@ class Google extends generative_ai_1.GoogleGenerativeAI {
     }
     getGenerativeModel(modelParams, requestOptions) {
         const mergedOptions = {
-            baseUrl: this._tolvynProxyUrl,
+            // ND-10: strip any trailing slash so an env/option override can't
+            // reintroduce the double-slash the Google SDK won't collapse.
+            baseUrl: this._tolvynProxyUrl.replace(/\/+$/, ''),
             customHeaders: this._tolvynHeaders,
             ...requestOptions,
         };
         const model = super.getGenerativeModel(modelParams, mergedOptions);
-        // ND-01: wrap generateContent so a proxy-unreachable error retries against
-        // the real Google API using the fallback key.
+        // ND-01 + BE-91: wrap every GenerativeModel network method so a
+        // proxy-unreachable error retries against the real Google API using the
+        // fallback key. Google's SDK exposes no fetch hook (unlike the
+        // OpenAI/Anthropic wrappers), so we rebuild a direct client — with the
+        // ORIGINAL requestOptions, i.e. WITHOUT the proxy baseUrl, so it hits the
+        // real generativelanguage.googleapis.com — and re-invoke the same method.
+        // (ND-01 covered only generateContent; BE-91 extends to stream/count/embed.
+        //  startChat returns a ChatSession with separate plumbing — not yet covered.)
         if (!this._tolvynFailOpen || !this._tolvynFallbackKey) {
             return model;
         }
         const fallbackKey = this._tolvynFallbackKey;
-        const originalGenerate = model.generateContent.bind(model);
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        model.generateContent = async (...args) => {
-            try {
-                // eslint-disable-next-line @typescript-eslint/no-explicit-any
-                return await originalGenerate(...args);
-            }
-            catch (e) {
-                if (!(0, failopen_1.isProxyError)(e))
-                    throw e;
-                console.error('TOLVYN proxy unreachable — routing direct to Google (fail-open)');
-                const fallbackAI = new generative_ai_1.GoogleGenerativeAI(fallbackKey);
-                const fallbackModel = fallbackAI.getGenerativeModel(modelParams, requestOptions);
-                // eslint-disable-next-line @typescript-eslint/no-explicit-any
-                return fallbackModel.generateContent(...args);
-            }
-        };
+        const failOpenMethods = [
+            'generateContent',
+            'generateContentStream',
+            'countTokens',
+            'embedContent',
+            'batchEmbedContents',
+        ];
+        for (const method of failOpenMethods) {
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            const original = model[method];
+            if (typeof original !== 'function')
+                continue;
+            const boundOriginal = original.bind(model);
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            model[method] = async (...args) => {
+                try {
+                    return await boundOriginal(...args);
+                }
+                catch (e) {
+                    if (!(0, failopen_1.isProxyError)(e))
+                        throw e;
+                    console.error('TOLVYN proxy unreachable — routing direct to Google (fail-open)');
+                    const fallbackModel = new generative_ai_1.GoogleGenerativeAI(fallbackKey).getGenerativeModel(modelParams, requestOptions);
+                    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+                    return fallbackModel[method](...args);
+                }
+            };
+        }
         return model;
     }
 }

package/dist/cjs/google.js.map

@@ -1 +1 @@
-{"version":3,"file":"google.js","sourceRoot":"","sources":["../../src/google.ts"],"names":[],"mappings":";;;AAAA;;GAEG;AACH,yDAI+B;AAC/B,yCAA0C;AAE1C,4EAA4E;AAC5E,iFAAiF;AACjF,MAAM,wBAAwB,GAAG,0CAA0C,CAAC;AAe5E,iFAAiF;AACjF,2EAA2E;AAC3E,MAAa,MAAO,SAAQ,kCAAkB;IAM5C,YAAY,UAA+B,EAAE;QAC3C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC3E,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;QACJ,CAAC;QAED,yEAAyE;QACzE,sEAAsE;QACtE,kEAAkE;QAClE,2DAA2D;QAC3D,KAAK,CAAC,YAAY,CAAC,CAAC;QAEpB,IAAI,CAAC,eAAe;YAClB,OAAO,CAAC,QAAQ;gBAChB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;gBAC/B,wBAAwB,CAAC;QAE3B,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,IAAI;YAAS,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,GAAW,OAAO,CAAC,IAAI,CAAC;QACrF,IAAI,OAAO,CAAC,OAAO;YAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,GAAQ,OAAO,CAAC,OAAO,CAAC;QACxF,IAAI,OAAO,CAAC,OAAO;YAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,GAAQ,OAAO,CAAC,OAAO,CAAC;QACxF,IAAI,OAAO,CAAC,KAAK;YAAQ,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,GAAU,OAAO,CAAC,KAAK,CAAC;QACtF,IAAI,OAAO,CAAC,IAAI;YAAS,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,GAAW,OAAO,CAAC,IAAI,CAAC;QACrF,IAAI,OAAO,CAAC,WAAW;YAAE,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;QAE5F,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC;QAChD,IAAI,CAAC,kBAAkB;YACrB,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC1D,CAAC;IAEQ,kBAAkB,CACzB,WAAwB,EACxB,cAA+B;QAE/B,MAAM,aAAa,GAAmB;YACpC,OAAO,EAAE,IAAI,CAAC,eAAe;YAC7B,aAAa,EAAE,IAAI,CAAC,cAAc;YAClC,GAAG,cAAc;SAClB,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,CAAC,kBAAkB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAEnE,2EAA2E;QAC3E,8CAA8C;QAC9C,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAC5C,MAAM,gBAAgB,GAAG,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3D,8DAA8D;QAC7D,KAAa,CAAC,eAAe,GAAG,KAAK,EAAE,GAAG,IAAe,EAAE,EAAE;YAC5D,IAAI,CAAC;gBACH,8DAA8D;gBAC9D,OAAO,MAAO,gBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,IAAA,uBAAY,EAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,CAAC;gBAC9B,OAAO,CAAC,KAAK,CACX,iEAAiE,CAClE,CAAC;gBACF,MAAM,UAAU,GAAG,IAAI,kCAAkB,CAAC,WAAW,CAAC,CAAC;gBACvD,MAAM,aAAa,GAAG,UAAU,CAAC,kBAAkB,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;gBACjF,8DAA8D;gBAC9D,OAAQ,aAAa,CAAC,eAAuB,CAAC,GAAG,IAAI,CAAC,CAAC;YACzD,CAAC;QACH,CAAC,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AA1ED,wBA0EC"}
+{"version":3,"file":"google.js","sourceRoot":"","sources":["../../src/google.ts"],"names":[],"mappings":";;;AAAA;;GAEG;AACH,yDAI+B;AAC/B,yCAA0C;AAE1C,4EAA4E;AAC5E,iFAAiF;AACjF,wFAAwF;AACxF,6EAA6E;AAC7E,kFAAkF;AAClF,8EAA8E;AAC9E,MAAM,wBAAwB,GAAG,yCAAyC,CAAC;AAe3E,iFAAiF;AACjF,2EAA2E;AAC3E,MAAa,MAAO,SAAQ,kCAAkB;IAM5C,YAAY,UAA+B,EAAE;QAC3C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC3E,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;QACJ,CAAC;QAED,yEAAyE;QACzE,sEAAsE;QACtE,kEAAkE;QAClE,2DAA2D;QAC3D,KAAK,CAAC,YAAY,CAAC,CAAC;QAEpB,IAAI,CAAC,eAAe;YAClB,OAAO,CAAC,QAAQ;gBAChB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;gBAC/B,wBAAwB,CAAC;QAE3B,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,IAAI;YAAS,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,GAAW,OAAO,CAAC,IAAI,CAAC;QACrF,IAAI,OAAO,CAAC,OAAO;YAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,GAAQ,OAAO,CAAC,OAAO,CAAC;QACxF,IAAI,OAAO,CAAC,OAAO;YAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,GAAQ,OAAO,CAAC,OAAO,CAAC;QACxF,IAAI,OAAO,CAAC,KAAK;YAAQ,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,GAAU,OAAO,CAAC,KAAK,CAAC;QACtF,IAAI,OAAO,CAAC,IAAI;YAAS,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,GAAW,OAAO,CAAC,IAAI,CAAC;QACrF,IAAI,OAAO,CAAC,WAAW;YAAE,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;QAE5F,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC;QAChD,IAAI,CAAC,kBAAkB;YACrB,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC1D,CAAC;IAEQ,kBAAkB,CACzB,WAAwB,EACxB,cAA+B;QAE/B,MAAM,aAAa,GAAmB;YACpC,kEAAkE;YAClE,8DAA8D;YAC9D,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACjD,aAAa,EAAE,IAAI,CAAC,cAAc;YAClC,GAAG,cAAc;SAClB,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,CAAC,kBAAkB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAEnE,gEAAgE;QAChE,wEAAwE;QACxE,+DAA+D;QAC/D,uEAAuE;QACvE,0EAA0E;QAC1E,0EAA0E;QAC1E,4EAA4E;QAC5E,8EAA8E;QAC9E,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAC5C,MAAM,eAAe,GAAG;YACtB,iBAAiB;YACjB,uBAAuB;YACvB,aAAa;YACb,cAAc;YACd,oBAAoB;SACZ,CAAC;QAEX,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;YACrC,8DAA8D;YAC9D,MAAM,QAAQ,GAAI,KAAa,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,OAAO,QAAQ,KAAK,UAAU;gBAAE,SAAS;YAC7C,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,8DAA8D;YAC7D,KAAa,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,GAAG,IAAe,EAAE,EAAE;gBACpD,IAAI,CAAC;oBACH,OAAO,MAAM,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC;gBACtC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IAAI,CAAC,IAAA,uBAAY,EAAC,CAAC,CAAC;wBAAE,MAAM,CAAC,CAAC;oBAC9B,OAAO,CAAC,KAAK,CACX,iEAAiE,CAClE,CAAC;oBACF,MAAM,aAAa,GAAG,IAAI,kCAAkB,CAAC,WAAW,CAAC,CAAC,kBAAkB,CAC1E,WAAW,EACX,cAAc,CACf,CAAC;oBACF,8DAA8D;oBAC9D,OAAQ,aAAqB,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAhGD,wBAgGC"}

package/dist/cjs/index.d.ts

@@ -4,4 +4,6 @@ export { Anthropic } from './anthropic';
 export type { TolvynAnthropicOptions } from './anthropic';
 export { Google } from './google';
 export type { TolvynGoogleOptions } from './google';
+export { DeepSeek } from './deepseek';
+export type { TolvynDeepSeekOptions } from './deepseek';
 //# sourceMappingURL=index.d.ts.map

package/dist/cjs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,YAAY,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,YAAY,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,YAAY,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,YAAY,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,YAAY,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,YAAY,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,YAAY,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC"}

package/dist/cjs/index.js

@@ -1,10 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Google = exports.Anthropic = exports.OpenAI = void 0;
+exports.DeepSeek = exports.Google = exports.Anthropic = exports.OpenAI = void 0;
 var client_1 = require("./client");
 Object.defineProperty(exports, "OpenAI", { enumerable: true, get: function () { return client_1.OpenAI; } });
 var anthropic_1 = require("./anthropic");
 Object.defineProperty(exports, "Anthropic", { enumerable: true, get: function () { return anthropic_1.Anthropic; } });
 var google_1 = require("./google");
 Object.defineProperty(exports, "Google", { enumerable: true, get: function () { return google_1.Google; } });
+var deepseek_1 = require("./deepseek");
+Object.defineProperty(exports, "DeepSeek", { enumerable: true, get: function () { return deepseek_1.DeepSeek; } });
 //# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;AAAA,mCAAkC;AAAzB,gGAAA,MAAM,OAAA;AAEf,yCAAwC;AAA/B,sGAAA,SAAS,OAAA;AAElB,mCAAkC;AAAzB,gGAAA,MAAM,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;AAAA,mCAAkC;AAAzB,gGAAA,MAAM,OAAA;AAEf,yCAAwC;AAA/B,sGAAA,SAAS,OAAA;AAElB,mCAAkC;AAAzB,gGAAA,MAAM,OAAA;AAEf,uCAAsC;AAA7B,oGAAA,QAAQ,OAAA"}

package/dist/esm/deepseek.d.ts

@@ -0,0 +1,28 @@
+/**
+ * TOLVYN DeepSeek wrapper — thin drop-in over the official openai package.
+ *
+ * DeepSeek exposes an OpenAI-compatible API, so this wraps the same `openai`
+ * base client as the OpenAI wrapper but points the proxy/fallback at DeepSeek
+ * and falls back with the DeepSeek key. Fail-open routes direct to
+ * https://api.deepseek.com/v1 (Bearer auth) when the TOLVYN proxy is unreachable.
+ */
+import OpenAIBase, { ClientOptions } from 'openai';
+export interface TolvynDeepSeekOptions extends Omit<ClientOptions, 'apiKey' | 'baseURL'> {
+    tolvynApiKey?: string;
+    proxyUrl?: string;
+    team?: string;
+    service?: string;
+    feature?: string;
+    agent?: string;
+    user?: string;
+    endCustomer?: string;
+    failOpen?: boolean;
+    deepSeekApiKey?: string;
+}
+export declare class DeepSeek extends OpenAIBase {
+    readonly _tolvynFailOpen: boolean;
+    readonly _tolvynFallbackKey: string | undefined;
+    readonly _tolvynProxyUrl: string;
+    constructor(options?: TolvynDeepSeekOptions);
+}
+//# sourceMappingURL=deepseek.d.ts.map

package/dist/esm/deepseek.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deepseek.d.ts","sourceRoot":"","sources":["../../src/deepseek.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,UAAU,EAAE,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAMnD,MAAM,WAAW,qBACf,SAAQ,IAAI,CAAC,aAAa,EAAE,QAAQ,GAAG,SAAS,CAAC;IACjD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,QAAS,SAAQ,UAAU;IACtC,SAAgB,eAAe,EAAE,OAAO,CAAC;IACzC,SAAgB,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;IACvD,SAAgB,eAAe,EAAE,MAAM,CAAC;gBAE5B,OAAO,GAAE,qBAA0B;CAgDhD"}

package/dist/esm/deepseek.js

@@ -0,0 +1,53 @@
+/**
+ * TOLVYN DeepSeek wrapper — thin drop-in over the official openai package.
+ *
+ * DeepSeek exposes an OpenAI-compatible API, so this wraps the same `openai`
+ * base client as the OpenAI wrapper but points the proxy/fallback at DeepSeek
+ * and falls back with the DeepSeek key. Fail-open routes direct to
+ * https://api.deepseek.com/v1 (Bearer auth) when the TOLVYN proxy is unreachable.
+ */
+import OpenAIBase from 'openai';
+import { makeFailOpenFetch } from './failopen';
+const DEEPSEEK_DEFAULT_PROXY_URL = 'https://proxy.tolvyn.io/v1/proxy/deepseek/';
+const DEEPSEEK_DIRECT_URL = 'https://api.deepseek.com/v1';
+export class DeepSeek extends OpenAIBase {
+    constructor(options = {}) {
+        const tolvynApiKey = options.tolvynApiKey ?? process.env['TOLVYN_API_KEY'];
+        if (!tolvynApiKey) {
+            throw new Error('tolvynApiKey required. Set TOLVYN_API_KEY env var or pass tolvynApiKey.');
+        }
+        const proxyUrl = options.proxyUrl ??
+            process.env['TOLVYN_PROXY_URL'] ??
+            DEEPSEEK_DEFAULT_PROXY_URL;
+        const defaultHeaders = {};
+        if (options.team)
+            defaultHeaders['X-Tolvyn-Team'] = options.team;
+        if (options.service)
+            defaultHeaders['X-Tolvyn-Service'] = options.service;
+        if (options.feature)
+            defaultHeaders['X-Tolvyn-Feature'] = options.feature;
+        if (options.agent)
+            defaultHeaders['X-Tolvyn-Agent'] = options.agent;
+        if (options.user)
+            defaultHeaders['X-Tolvyn-User'] = options.user;
+        if (options.endCustomer)
+            defaultHeaders['X-Tolvyn-End-Customer'] = options.endCustomer;
+        const fallbackKey = options.deepSeekApiKey ?? process.env['DEEPSEEK_API_KEY'];
+        const failOpen = options.failOpen ?? true;
+        const { tolvynApiKey: _tk, proxyUrl: _pu, team: _t, service: _sv, feature: _f, agent: _a, user: _u, endCustomer: _ec, failOpen: _fo, deepSeekApiKey: _dsk, ...rest } = options;
+        const superOptions = {
+            ...rest,
+            apiKey: tolvynApiKey,
+            baseURL: proxyUrl,
+            defaultHeaders,
+        };
+        if (failOpen && fallbackKey && !superOptions.fetch) {
+            superOptions.fetch = makeFailOpenFetch(fallbackKey, DEEPSEEK_DIRECT_URL, 'DeepSeek');
+        }
+        super(superOptions);
+        this._tolvynFailOpen = failOpen;
+        this._tolvynFallbackKey = fallbackKey;
+        this._tolvynProxyUrl = proxyUrl;
+    }
+}
+//# sourceMappingURL=deepseek.js.map

package/dist/esm/deepseek.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deepseek.js","sourceRoot":"","sources":["../../src/deepseek.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,UAA6B,MAAM,QAAQ,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,0BAA0B,GAAG,4CAA4C,CAAC;AAChF,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AAgB1D,MAAM,OAAO,QAAS,SAAQ,UAAU;IAKtC,YAAY,UAAiC,EAAE;QAC7C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC3E,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ;YAChB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;YAC/B,0BAA0B,CAAC;QAE7B,MAAM,cAAc,GAA2B,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,IAAI;YAAS,cAAc,CAAC,eAAe,CAAC,GAAW,OAAO,CAAC,IAAI,CAAC;QAChF,IAAI,OAAO,CAAC,OAAO;YAAM,cAAc,CAAC,kBAAkB,CAAC,GAAQ,OAAO,CAAC,OAAO,CAAC;QACnF,IAAI,OAAO,CAAC,OAAO;YAAM,cAAc,CAAC,kBAAkB,CAAC,GAAQ,OAAO,CAAC,OAAO,CAAC;QACnF,IAAI,OAAO,CAAC,KAAK;YAAQ,cAAc,CAAC,gBAAgB,CAAC,GAAU,OAAO,CAAC,KAAK,CAAC;QACjF,IAAI,OAAO,CAAC,IAAI;YAAS,cAAc,CAAC,eAAe,CAAC,GAAW,OAAO,CAAC,IAAI,CAAC;QAChF,IAAI,OAAO,CAAC,WAAW;YAAE,cAAc,CAAC,uBAAuB,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;QAEvF,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC;QAE1C,MAAM,EACJ,YAAY,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,EAClD,QAAQ,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EACnC,GAAG,IAAI,EACR,GAAG,OAAO,CAAC;QAEZ,MAAM,YAAY,GAAkB;YAClC,GAAG,IAAI;YACP,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,QAAQ;YACjB,cAAc;SACf,CAAC;QAEF,IAAI,QAAQ,IAAI,WAAW,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YACnD,YAAY,CAAC,KAAK,GAAG,iBAAiB,CAAC,WAAW,EAAE,mBAAmB,EAAE,UAAU,CAAC,CAAC;QACvF,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,CAAC;QAEpB,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;QAChC,IAAI,CAAC,kBAAkB,GAAG,WAAW,CAAC;QACtC,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;IAClC,CAAC;CACF"}

package/dist/esm/failopen.d.ts

@@ -21,5 +21,14 @@ export declare function shouldNotFailOpen(error: unknown): boolean;
  *   → https://api.anthropic.com/v1/messages
  */
 export declare function buildFallbackUrl(originalUrl: URL, fallbackBaseUrl: string): URL;
+/**
+ * Rewrite `headers` in place to authenticate a direct provider call.
+ *
+ * Strips every inbound auth header (Authorization/x-api-key/x-goog-api-key —
+ * each may carry the TOLVYN key) and sets the single header the provider's
+ * direct API expects, with the provider's own key. Fixes ND-09 (Bearer sent to
+ * Anthropic → 401) and ND-11 (the TOLVYN key in x-api-key leaking on fallback).
+ */
+export declare function applyFallbackAuth(headers: Headers, provider: string, fallbackKey: string): void;
 export declare function makeFailOpenFetch(fallbackKey: string, directUrl: string, provider: string): typeof globalThis.fetch;
 //# sourceMappingURL=failopen.d.ts.map

package/dist/esm/failopen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"failopen.d.ts","sourceRoot":"","sources":["../../src/failopen.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAoCpD;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CASzD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,GAAG,GAAG,CAa/E;AAED,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,UAAU,CAAC,KAAK,CAgCzB"}
+{"version":3,"file":"failopen.d.ts","sourceRoot":"","sources":["../../src/failopen.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAoCpD;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CASzD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,GAAG,GAAG,CAa/E;AAaD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,GAClB,IAAI,CAUN;AAED,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,UAAU,CAAC,KAAK,CAgCzB"}

package/dist/esm/failopen.js

@@ -1,7 +1,7 @@
 /**
  * Fail-open helpers: detect proxy unreachability and retry direct.
  */
-const PROXY_PREFIX_RE = /^\/v1\/proxy\/(?:openai|anthropic|google)\//;
+const PROXY_PREFIX_RE = /^\/v1\/proxy\/(?:openai|anthropic|google|deepseek)\//;
 export function isProxyError(error) {
     if (!error || typeof error !== 'object')
         return false;
@@ -73,6 +73,36 @@ export function buildFallbackUrl(originalUrl, fallbackBaseUrl) {
     newUrl.pathname = finalPath;
     return newUrl;
 }
+// The header each provider's DIRECT API reads the API key from. The TOLVYN
+// proxy accepts Authorization/x-api-key/x-goog-api-key interchangeably, but the
+// providers themselves do NOT: Anthropic authenticates only via x-api-key and
+// Google only via x-goog-api-key — sending Bearer to them 401s.
+const PROVIDER_AUTH_HEADER = {
+    openai: 'Authorization',
+    anthropic: 'x-api-key',
+    google: 'x-goog-api-key',
+    deepseek: 'Authorization', // OpenAI-compatible; Bearer auth (same as the default)
+};
+/**
+ * Rewrite `headers` in place to authenticate a direct provider call.
+ *
+ * Strips every inbound auth header (Authorization/x-api-key/x-goog-api-key —
+ * each may carry the TOLVYN key) and sets the single header the provider's
+ * direct API expects, with the provider's own key. Fixes ND-09 (Bearer sent to
+ * Anthropic → 401) and ND-11 (the TOLVYN key in x-api-key leaking on fallback).
+ */
+export function applyFallbackAuth(headers, provider, fallbackKey) {
+    headers.delete('Authorization');
+    headers.delete('x-api-key');
+    headers.delete('x-goog-api-key');
+    const header = PROVIDER_AUTH_HEADER[provider.toLowerCase()] ?? 'Authorization';
+    if (header === 'Authorization') {
+        headers.set('Authorization', `Bearer ${fallbackKey}`);
+    }
+    else {
+        headers.set(header, fallbackKey);
+    }
+}
 export function makeFailOpenFetch(fallbackKey, directUrl, provider) {
     return async function failOpenFetch(input, init) {
         try {
@@ -94,7 +124,7 @@ export function makeFailOpenFetch(fallbackKey, directUrl, provider) {
             const url = buildFallbackUrl(new URL(originalUrl), directUrl);
             const newInit = { ...(init ?? {}) };
             const headers = new Headers(init?.headers ?? {});
-            headers.set('Authorization', `Bearer ${fallbackKey}`);
+            applyFallbackAuth(headers, provider, fallbackKey);
             newInit.headers = headers;
             return fetch(url.toString(), newInit);
         }

package/dist/esm/failopen.js.map

@@ -1 +1 @@
-{"version":3,"file":"failopen.js","sourceRoot":"","sources":["../../src/failopen.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,eAAe,GAAG,6CAA6C,CAAC;AAEtE,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAE7C,4DAA4D;IAC5D,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAC9B,IAAI,KAAK,cAAc;QACvB,IAAI,KAAK,YAAY;QACrB,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,WAAW;QACpB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CACxB,EAAE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sBAAsB;IACtB,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAEhC,qBAAqB;IACrB,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,IACE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC7B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EACxC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sCAAsC;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,uEAAuE;IACvE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAgB,EAAE,eAAuB;IACxE,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc;IAEjE,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;IAExC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/C,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC;IAC9B,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC;IAC9B,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC;IACtB,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,WAAmB,EACnB,SAAiB,EACjB,QAAgB;IAEhB,OAAO,KAAK,UAAU,aAAa,CACjC,KAAwB,EACxB,IAAkB;QAElB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACrC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC5D,OAAO,CAAC,KAAK,CACX,gDAAgD,QAAQ,cAAc,CACvE,CAAC;YACF,MAAM,WAAW,GACf,OAAO,KAAK,KAAK,QAAQ;gBACvB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,KAAK,YAAY,GAAG;oBACtB,CAAC,CAAC,KAAK,CAAC,IAAI;oBACZ,CAAC,CAAE,KAAiB,CAAC,GAAG,CAAC;YAC7B,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC;YAE9D,MAAM,OAAO,GAAgB,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAE,IAAI,EAAE,OAAuB,IAAI,EAAE,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,WAAW,EAAE,CAAC,CAAC;YACtD,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;YAE1B,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"failopen.js","sourceRoot":"","sources":["../../src/failopen.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,eAAe,GAAG,sDAAsD,CAAC;AAE/E,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAE7C,4DAA4D;IAC5D,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAC9B,IAAI,KAAK,cAAc;QACvB,IAAI,KAAK,YAAY;QACrB,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,WAAW;QACpB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CACxB,EAAE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sBAAsB;IACtB,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAEhC,qBAAqB;IACrB,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,IACE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC7B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EACxC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sCAAsC;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,uEAAuE;IACvE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAgB,EAAE,eAAuB;IACxE,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc;IAEjE,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;IAExC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/C,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC;IAC9B,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC;IAC9B,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC;IACtB,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2EAA2E;AAC3E,gFAAgF;AAChF,8EAA8E;AAC9E,gEAAgE;AAChE,MAAM,oBAAoB,GAA2B;IACnD,MAAM,EAAE,eAAe;IACvB,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,gBAAgB;IACxB,QAAQ,EAAE,eAAe,EAAE,uDAAuD;CACnF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAgB,EAChB,QAAgB,EAChB,WAAmB;IAEnB,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAChC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC5B,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,eAAe,CAAC;IAC/E,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,WAAW,EAAE,CAAC,CAAC;IACxD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,WAAmB,EACnB,SAAiB,EACjB,QAAgB;IAEhB,OAAO,KAAK,UAAU,aAAa,CACjC,KAAwB,EACxB,IAAkB;QAElB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACrC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC5D,OAAO,CAAC,KAAK,CACX,gDAAgD,QAAQ,cAAc,CACvE,CAAC;YACF,MAAM,WAAW,GACf,OAAO,KAAK,KAAK,QAAQ;gBACvB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,KAAK,YAAY,GAAG;oBACtB,CAAC,CAAC,KAAK,CAAC,IAAI;oBACZ,CAAC,CAAE,KAAiB,CAAC,GAAG,CAAC;YAC7B,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC;YAE9D,MAAM,OAAO,GAAgB,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAE,IAAI,EAAE,OAAuB,IAAI,EAAE,CAAC,CAAC;YAClE,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;YAClD,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;YAE1B,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/esm/google.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../../src/google.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EACL,kBAAkB,EAClB,WAAW,EACX,cAAc,EACf,MAAM,uBAAuB,CAAC;AAO/B,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAID,qBAAa,MAAO,SAAQ,kBAAkB;IAC5C,SAAgB,eAAe,EAAE,OAAO,CAAC;IACzC,SAAgB,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;IACvD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyB;gBAE5C,OAAO,GAAE,mBAAwB;IAgCpC,kBAAkB,CACzB,WAAW,EAAE,WAAW,EACxB,cAAc,CAAC,EAAE,cAAc;CAkClC"}
+{"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../../src/google.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EACL,kBAAkB,EAClB,WAAW,EACX,cAAc,EACf,MAAM,uBAAuB,CAAC;AAW/B,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAID,qBAAa,MAAO,SAAQ,kBAAkB;IAC5C,SAAgB,eAAe,EAAE,OAAO,CAAC;IACzC,SAAgB,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;IACvD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyB;gBAE5C,OAAO,GAAE,mBAAwB;IAgCpC,kBAAkB,CACzB,WAAW,EAAE,WAAW,EACxB,cAAc,CAAC,EAAE,cAAc;CAwDlC"}

package/dist/esm/google.js

@@ -5,7 +5,11 @@ import { GoogleGenerativeAI, } from '@google/generative-ai';
 import { isProxyError } from './failopen';
 // The proxy base URL is prepended to Google API paths (/v1beta/models/...).
 // The TOLVYN proxy strips /v1/proxy/google and forwards the remainder to Google.
-const GOOGLE_DEFAULT_PROXY_URL = 'https://proxy.tolvyn.io/v1/proxy/google/';
+// ND-10: NO trailing slash. @google/generative-ai builds `${baseUrl}/${apiVersion}/...`
+// WITHOUT collapsing a double slash (unlike the OpenAI/Anthropic SDKs), so a
+// trailing slash here produces `.../proxy/google//v1beta/...`. This intentionally
+// reverses ND-07's trailing-slash "consistency" for the Google provider only.
+const GOOGLE_DEFAULT_PROXY_URL = 'https://proxy.tolvyn.io/v1/proxy/google';
 // ND-05: renamed from TolvynGoogle → Google so stack traces and constructor.name
 // match the public API. Old name remains re-exportable via index.ts alias.
 export class Google extends GoogleGenerativeAI {
@@ -42,34 +46,53 @@ export class Google extends GoogleGenerativeAI {
     }
     getGenerativeModel(modelParams, requestOptions) {
         const mergedOptions = {
-            baseUrl: this._tolvynProxyUrl,
+            // ND-10: strip any trailing slash so an env/option override can't
+            // reintroduce the double-slash the Google SDK won't collapse.
+            baseUrl: this._tolvynProxyUrl.replace(/\/+$/, ''),
             customHeaders: this._tolvynHeaders,
             ...requestOptions,
         };
         const model = super.getGenerativeModel(modelParams, mergedOptions);
-        // ND-01: wrap generateContent so a proxy-unreachable error retries against
-        // the real Google API using the fallback key.
+        // ND-01 + BE-91: wrap every GenerativeModel network method so a
+        // proxy-unreachable error retries against the real Google API using the
+        // fallback key. Google's SDK exposes no fetch hook (unlike the
+        // OpenAI/Anthropic wrappers), so we rebuild a direct client — with the
+        // ORIGINAL requestOptions, i.e. WITHOUT the proxy baseUrl, so it hits the
+        // real generativelanguage.googleapis.com — and re-invoke the same method.
+        // (ND-01 covered only generateContent; BE-91 extends to stream/count/embed.
+        //  startChat returns a ChatSession with separate plumbing — not yet covered.)
         if (!this._tolvynFailOpen || !this._tolvynFallbackKey) {
             return model;
         }
         const fallbackKey = this._tolvynFallbackKey;
-        const originalGenerate = model.generateContent.bind(model);
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        model.generateContent = async (...args) => {
-            try {
-                // eslint-disable-next-line @typescript-eslint/no-explicit-any
-                return await originalGenerate(...args);
-            }
-            catch (e) {
-                if (!isProxyError(e))
-                    throw e;
-                console.error('TOLVYN proxy unreachable — routing direct to Google (fail-open)');
-                const fallbackAI = new GoogleGenerativeAI(fallbackKey);
-                const fallbackModel = fallbackAI.getGenerativeModel(modelParams, requestOptions);
-                // eslint-disable-next-line @typescript-eslint/no-explicit-any
-                return fallbackModel.generateContent(...args);
-            }
-        };
+        const failOpenMethods = [
+            'generateContent',
+            'generateContentStream',
+            'countTokens',
+            'embedContent',
+            'batchEmbedContents',
+        ];
+        for (const method of failOpenMethods) {
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            const original = model[method];
+            if (typeof original !== 'function')
+                continue;
+            const boundOriginal = original.bind(model);
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            model[method] = async (...args) => {
+                try {
+                    return await boundOriginal(...args);
+                }
+                catch (e) {
+                    if (!isProxyError(e))
+                        throw e;
+                    console.error('TOLVYN proxy unreachable — routing direct to Google (fail-open)');
+                    const fallbackModel = new GoogleGenerativeAI(fallbackKey).getGenerativeModel(modelParams, requestOptions);
+                    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+                    return fallbackModel[method](...args);
+                }
+            };
+        }
         return model;
     }
 }

package/dist/esm/google.js.map

@@ -1 +1 @@
-{"version":3,"file":"google.js","sourceRoot":"","sources":["../../src/google.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EACL,kBAAkB,GAGnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,4EAA4E;AAC5E,iFAAiF;AACjF,MAAM,wBAAwB,GAAG,0CAA0C,CAAC;AAe5E,iFAAiF;AACjF,2EAA2E;AAC3E,MAAM,OAAO,MAAO,SAAQ,kBAAkB;IAM5C,YAAY,UAA+B,EAAE;QAC3C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC3E,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;QACJ,CAAC;QAED,yEAAyE;QACzE,sEAAsE;QACtE,kEAAkE;QAClE,2DAA2D;QAC3D,KAAK,CAAC,YAAY,CAAC,CAAC;QAEpB,IAAI,CAAC,eAAe;YAClB,OAAO,CAAC,QAAQ;gBAChB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;gBAC/B,wBAAwB,CAAC;QAE3B,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,IAAI;YAAS,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,GAAW,OAAO,CAAC,IAAI,CAAC;QACrF,IAAI,OAAO,CAAC,OAAO;YAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,GAAQ,OAAO,CAAC,OAAO,CAAC;QACxF,IAAI,OAAO,CAAC,OAAO;YAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,GAAQ,OAAO,CAAC,OAAO,CAAC;QACxF,IAAI,OAAO,CAAC,KAAK;YAAQ,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,GAAU,OAAO,CAAC,KAAK,CAAC;QACtF,IAAI,OAAO,CAAC,IAAI;YAAS,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,GAAW,OAAO,CAAC,IAAI,CAAC;QACrF,IAAI,OAAO,CAAC,WAAW;YAAE,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;QAE5F,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC;QAChD,IAAI,CAAC,kBAAkB;YACrB,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC1D,CAAC;IAEQ,kBAAkB,CACzB,WAAwB,EACxB,cAA+B;QAE/B,MAAM,aAAa,GAAmB;YACpC,OAAO,EAAE,IAAI,CAAC,eAAe;YAC7B,aAAa,EAAE,IAAI,CAAC,cAAc;YAClC,GAAG,cAAc;SAClB,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,CAAC,kBAAkB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAEnE,2EAA2E;QAC3E,8CAA8C;QAC9C,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAC5C,MAAM,gBAAgB,GAAG,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3D,8DAA8D;QAC7D,KAAa,CAAC,eAAe,GAAG,KAAK,EAAE,GAAG,IAAe,EAAE,EAAE;YAC5D,IAAI,CAAC;gBACH,8DAA8D;gBAC9D,OAAO,MAAO,gBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,CAAC;gBAC9B,OAAO,CAAC,KAAK,CACX,iEAAiE,CAClE,CAAC;gBACF,MAAM,UAAU,GAAG,IAAI,kBAAkB,CAAC,WAAW,CAAC,CAAC;gBACvD,MAAM,aAAa,GAAG,UAAU,CAAC,kBAAkB,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;gBACjF,8DAA8D;gBAC9D,OAAQ,aAAa,CAAC,eAAuB,CAAC,GAAG,IAAI,CAAC,CAAC;YACzD,CAAC;QACH,CAAC,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}
+{"version":3,"file":"google.js","sourceRoot":"","sources":["../../src/google.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EACL,kBAAkB,GAGnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,4EAA4E;AAC5E,iFAAiF;AACjF,wFAAwF;AACxF,6EAA6E;AAC7E,kFAAkF;AAClF,8EAA8E;AAC9E,MAAM,wBAAwB,GAAG,yCAAyC,CAAC;AAe3E,iFAAiF;AACjF,2EAA2E;AAC3E,MAAM,OAAO,MAAO,SAAQ,kBAAkB;IAM5C,YAAY,UAA+B,EAAE;QAC3C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC3E,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;QACJ,CAAC;QAED,yEAAyE;QACzE,sEAAsE;QACtE,kEAAkE;QAClE,2DAA2D;QAC3D,KAAK,CAAC,YAAY,CAAC,CAAC;QAEpB,IAAI,CAAC,eAAe;YAClB,OAAO,CAAC,QAAQ;gBAChB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;gBAC/B,wBAAwB,CAAC;QAE3B,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,IAAI;YAAS,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,GAAW,OAAO,CAAC,IAAI,CAAC;QACrF,IAAI,OAAO,CAAC,OAAO;YAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,GAAQ,OAAO,CAAC,OAAO,CAAC;QACxF,IAAI,OAAO,CAAC,OAAO;YAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,GAAQ,OAAO,CAAC,OAAO,CAAC;QACxF,IAAI,OAAO,CAAC,KAAK;YAAQ,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,GAAU,OAAO,CAAC,KAAK,CAAC;QACtF,IAAI,OAAO,CAAC,IAAI;YAAS,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,GAAW,OAAO,CAAC,IAAI,CAAC;QACrF,IAAI,OAAO,CAAC,WAAW;YAAE,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;QAE5F,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC;QAChD,IAAI,CAAC,kBAAkB;YACrB,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC1D,CAAC;IAEQ,kBAAkB,CACzB,WAAwB,EACxB,cAA+B;QAE/B,MAAM,aAAa,GAAmB;YACpC,kEAAkE;YAClE,8DAA8D;YAC9D,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACjD,aAAa,EAAE,IAAI,CAAC,cAAc;YAClC,GAAG,cAAc;SAClB,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,CAAC,kBAAkB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAEnE,gEAAgE;QAChE,wEAAwE;QACxE,+DAA+D;QAC/D,uEAAuE;QACvE,0EAA0E;QAC1E,0EAA0E;QAC1E,4EAA4E;QAC5E,8EAA8E;QAC9E,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAC5C,MAAM,eAAe,GAAG;YACtB,iBAAiB;YACjB,uBAAuB;YACvB,aAAa;YACb,cAAc;YACd,oBAAoB;SACZ,CAAC;QAEX,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;YACrC,8DAA8D;YAC9D,MAAM,QAAQ,GAAI,KAAa,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,OAAO,QAAQ,KAAK,UAAU;gBAAE,SAAS;YAC7C,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,8DAA8D;YAC7D,KAAa,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,GAAG,IAAe,EAAE,EAAE;gBACpD,IAAI,CAAC;oBACH,OAAO,MAAM,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC;gBACtC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;wBAAE,MAAM,CAAC,CAAC;oBAC9B,OAAO,CAAC,KAAK,CACX,iEAAiE,CAClE,CAAC;oBACF,MAAM,aAAa,GAAG,IAAI,kBAAkB,CAAC,WAAW,CAAC,CAAC,kBAAkB,CAC1E,WAAW,EACX,cAAc,CACf,CAAC;oBACF,8DAA8D;oBAC9D,OAAQ,aAAqB,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/esm/index.d.ts

@@ -4,4 +4,6 @@ export { Anthropic } from './anthropic';
 export type { TolvynAnthropicOptions } from './anthropic';
 export { Google } from './google';
 export type { TolvynGoogleOptions } from './google';
+export { DeepSeek } from './deepseek';
+export type { TolvynDeepSeekOptions } from './deepseek';
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,YAAY,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,YAAY,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,YAAY,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,YAAY,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,YAAY,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,YAAY,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,YAAY,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC"}

package/dist/esm/index.js

@@ -1,4 +1,5 @@
 export { OpenAI } from './client';
 export { Anthropic } from './anthropic';
 export { Google } from './google';
+export { DeepSeek } from './deepseek';
 //# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "tolvyn",
-  "version": "1.0.7",
-  "description": "Drop-in replacement for the OpenAI/Anthropic SDK — routes through TOLVYN for cost attribution, budget enforcement, and audit logging.",
+  "version": "1.0.10",
+  "description": "Drop-in replacement for the OpenAI/Anthropic/Google/DeepSeek SDKs — routes through TOLVYN for cost attribution, budget enforcement, and audit logging.",
   "main": "./dist/cjs/index.js",
   "module": "./dist/esm/index.js",
   "types": "./dist/cjs/index.d.ts",

package/src/deepseek.ts

@@ -0,0 +1,82 @@
+/**
+ * TOLVYN DeepSeek wrapper — thin drop-in over the official openai package.
+ *
+ * DeepSeek exposes an OpenAI-compatible API, so this wraps the same `openai`
+ * base client as the OpenAI wrapper but points the proxy/fallback at DeepSeek
+ * and falls back with the DeepSeek key. Fail-open routes direct to
+ * https://api.deepseek.com/v1 (Bearer auth) when the TOLVYN proxy is unreachable.
+ */
+import OpenAIBase, { ClientOptions } from 'openai';
+import { makeFailOpenFetch } from './failopen';
+
+const DEEPSEEK_DEFAULT_PROXY_URL = 'https://proxy.tolvyn.io/v1/proxy/deepseek/';
+const DEEPSEEK_DIRECT_URL = 'https://api.deepseek.com/v1';
+
+export interface TolvynDeepSeekOptions
+  extends Omit<ClientOptions, 'apiKey' | 'baseURL'> {
+  tolvynApiKey?: string;
+  proxyUrl?: string;
+  team?: string;
+  service?: string;
+  feature?: string;
+  agent?: string;
+  user?: string;
+  endCustomer?: string;
+  failOpen?: boolean;
+  deepSeekApiKey?: string;
+}
+
+export class DeepSeek extends OpenAIBase {
+  public readonly _tolvynFailOpen: boolean;
+  public readonly _tolvynFallbackKey: string | undefined;
+  public readonly _tolvynProxyUrl: string;
+
+  constructor(options: TolvynDeepSeekOptions = {}) {
+    const tolvynApiKey = options.tolvynApiKey ?? process.env['TOLVYN_API_KEY'];
+    if (!tolvynApiKey) {
+      throw new Error(
+        'tolvynApiKey required. Set TOLVYN_API_KEY env var or pass tolvynApiKey.'
+      );
+    }
+
+    const proxyUrl =
+      options.proxyUrl ??
+      process.env['TOLVYN_PROXY_URL'] ??
+      DEEPSEEK_DEFAULT_PROXY_URL;
+
+    const defaultHeaders: Record<string, string> = {};
+    if (options.team)        defaultHeaders['X-Tolvyn-Team']         = options.team;
+    if (options.service)     defaultHeaders['X-Tolvyn-Service']      = options.service;
+    if (options.feature)     defaultHeaders['X-Tolvyn-Feature']      = options.feature;
+    if (options.agent)       defaultHeaders['X-Tolvyn-Agent']        = options.agent;
+    if (options.user)        defaultHeaders['X-Tolvyn-User']         = options.user;
+    if (options.endCustomer) defaultHeaders['X-Tolvyn-End-Customer'] = options.endCustomer;
+
+    const fallbackKey = options.deepSeekApiKey ?? process.env['DEEPSEEK_API_KEY'];
+    const failOpen = options.failOpen ?? true;
+
+    const {
+      tolvynApiKey: _tk, proxyUrl: _pu, team: _t, service: _sv,
+      feature: _f, agent: _a, user: _u, endCustomer: _ec,
+      failOpen: _fo, deepSeekApiKey: _dsk,
+      ...rest
+    } = options;
+
+    const superOptions: ClientOptions = {
+      ...rest,
+      apiKey: tolvynApiKey,
+      baseURL: proxyUrl,
+      defaultHeaders,
+    };
+
+    if (failOpen && fallbackKey && !superOptions.fetch) {
+      superOptions.fetch = makeFailOpenFetch(fallbackKey, DEEPSEEK_DIRECT_URL, 'DeepSeek');
+    }
+
+    super(superOptions);
+
+    this._tolvynFailOpen = failOpen;
+    this._tolvynFallbackKey = fallbackKey;
+    this._tolvynProxyUrl = proxyUrl;
+  }
+}

package/src/failopen.ts

@@ -2,7 +2,7 @@
  * Fail-open helpers: detect proxy unreachability and retry direct.
  */
 
-const PROXY_PREFIX_RE = /^\/v1\/proxy\/(?:openai|anthropic|google)\//;
+const PROXY_PREFIX_RE = /^\/v1\/proxy\/(?:openai|anthropic|google|deepseek)\//;
 
 export function isProxyError(error: unknown): boolean {
   if (!error || typeof error !== 'object') return false;
@@ -85,6 +85,41 @@ export function buildFallbackUrl(originalUrl: URL, fallbackBaseUrl: string): URL
   return newUrl;
 }
 
+// The header each provider's DIRECT API reads the API key from. The TOLVYN
+// proxy accepts Authorization/x-api-key/x-goog-api-key interchangeably, but the
+// providers themselves do NOT: Anthropic authenticates only via x-api-key and
+// Google only via x-goog-api-key — sending Bearer to them 401s.
+const PROVIDER_AUTH_HEADER: Record<string, string> = {
+  openai: 'Authorization',
+  anthropic: 'x-api-key',
+  google: 'x-goog-api-key',
+  deepseek: 'Authorization', // OpenAI-compatible; Bearer auth (same as the default)
+};
+
+/**
+ * Rewrite `headers` in place to authenticate a direct provider call.
+ *
+ * Strips every inbound auth header (Authorization/x-api-key/x-goog-api-key —
+ * each may carry the TOLVYN key) and sets the single header the provider's
+ * direct API expects, with the provider's own key. Fixes ND-09 (Bearer sent to
+ * Anthropic → 401) and ND-11 (the TOLVYN key in x-api-key leaking on fallback).
+ */
+export function applyFallbackAuth(
+  headers: Headers,
+  provider: string,
+  fallbackKey: string,
+): void {
+  headers.delete('Authorization');
+  headers.delete('x-api-key');
+  headers.delete('x-goog-api-key');
+  const header = PROVIDER_AUTH_HEADER[provider.toLowerCase()] ?? 'Authorization';
+  if (header === 'Authorization') {
+    headers.set('Authorization', `Bearer ${fallbackKey}`);
+  } else {
+    headers.set(header, fallbackKey);
+  }
+}
+
 export function makeFailOpenFetch(
   fallbackKey: string,
   directUrl: string,
@@ -115,7 +150,7 @@ export function makeFailOpenFetch(
 
       const newInit: RequestInit = { ...(init ?? {}) };
       const headers = new Headers((init?.headers as HeadersInit) ?? {});
-      headers.set('Authorization', `Bearer ${fallbackKey}`);
+      applyFallbackAuth(headers, provider, fallbackKey);
       newInit.headers = headers;
 
       return fetch(url.toString(), newInit);

package/src/google.ts

@@ -10,7 +10,11 @@ import { isProxyError } from './failopen';
 
 // The proxy base URL is prepended to Google API paths (/v1beta/models/...).
 // The TOLVYN proxy strips /v1/proxy/google and forwards the remainder to Google.
-const GOOGLE_DEFAULT_PROXY_URL = 'https://proxy.tolvyn.io/v1/proxy/google/';
+// ND-10: NO trailing slash. @google/generative-ai builds `${baseUrl}/${apiVersion}/...`
+// WITHOUT collapsing a double slash (unlike the OpenAI/Anthropic SDKs), so a
+// trailing slash here produces `.../proxy/google//v1beta/...`. This intentionally
+// reverses ND-07's trailing-slash "consistency" for the Google provider only.
+const GOOGLE_DEFAULT_PROXY_URL = 'https://proxy.tolvyn.io/v1/proxy/google';
 
 export interface TolvynGoogleOptions {
   tolvynApiKey?: string;
@@ -70,35 +74,57 @@ export class Google extends GoogleGenerativeAI {
     requestOptions?: RequestOptions
   ) {
     const mergedOptions: RequestOptions = {
-      baseUrl: this._tolvynProxyUrl,
+      // ND-10: strip any trailing slash so an env/option override can't
+      // reintroduce the double-slash the Google SDK won't collapse.
+      baseUrl: this._tolvynProxyUrl.replace(/\/+$/, ''),
       customHeaders: this._tolvynHeaders,
       ...requestOptions,
     };
     const model = super.getGenerativeModel(modelParams, mergedOptions);
 
-    // ND-01: wrap generateContent so a proxy-unreachable error retries against
-    // the real Google API using the fallback key.
+    // ND-01 + BE-91: wrap every GenerativeModel network method so a
+    // proxy-unreachable error retries against the real Google API using the
+    // fallback key. Google's SDK exposes no fetch hook (unlike the
+    // OpenAI/Anthropic wrappers), so we rebuild a direct client — with the
+    // ORIGINAL requestOptions, i.e. WITHOUT the proxy baseUrl, so it hits the
+    // real generativelanguage.googleapis.com — and re-invoke the same method.
+    // (ND-01 covered only generateContent; BE-91 extends to stream/count/embed.
+    //  startChat returns a ChatSession with separate plumbing — not yet covered.)
     if (!this._tolvynFailOpen || !this._tolvynFallbackKey) {
       return model;
     }
     const fallbackKey = this._tolvynFallbackKey;
-    const originalGenerate = model.generateContent.bind(model);
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    (model as any).generateContent = async (...args: unknown[]) => {
-      try {
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        return await (originalGenerate as any)(...args);
-      } catch (e) {
-        if (!isProxyError(e)) throw e;
-        console.error(
-          'TOLVYN proxy unreachable — routing direct to Google (fail-open)',
-        );
-        const fallbackAI = new GoogleGenerativeAI(fallbackKey);
-        const fallbackModel = fallbackAI.getGenerativeModel(modelParams, requestOptions);
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        return (fallbackModel.generateContent as any)(...args);
-      }
-    };
+    const failOpenMethods = [
+      'generateContent',
+      'generateContentStream',
+      'countTokens',
+      'embedContent',
+      'batchEmbedContents',
+    ] as const;
+
+    for (const method of failOpenMethods) {
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
+      const original = (model as any)[method];
+      if (typeof original !== 'function') continue;
+      const boundOriginal = original.bind(model);
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
+      (model as any)[method] = async (...args: unknown[]) => {
+        try {
+          return await boundOriginal(...args);
+        } catch (e) {
+          if (!isProxyError(e)) throw e;
+          console.error(
+            'TOLVYN proxy unreachable — routing direct to Google (fail-open)',
+          );
+          const fallbackModel = new GoogleGenerativeAI(fallbackKey).getGenerativeModel(
+            modelParams,
+            requestOptions,
+          );
+          // eslint-disable-next-line @typescript-eslint/no-explicit-any
+          return (fallbackModel as any)[method](...args);
+        }
+      };
+    }
     return model;
   }
 }

package/src/index.ts

@@ -4,3 +4,5 @@ export { Anthropic } from './anthropic';
 export type { TolvynAnthropicOptions } from './anthropic';
 export { Google } from './google';
 export type { TolvynGoogleOptions } from './google';
+export { DeepSeek } from './deepseek';
+export type { TolvynDeepSeekOptions } from './deepseek';