@juspay/neurolink 10.8.21 → 10.9.0

package/dist/cli/commands/proxy.js

@@ -677,8 +677,9 @@ async function getRollingActivationFailure(host, port, expectedVersion) {
                 failure.workerExitCode === null
                 ? `exitCode=${failure.workerExitCode ?? "none"}`
                 : null,
-            typeof failure.workerExitSignal === "string"
-                ? `exitSignal=${failure.workerExitSignal}`
+            typeof failure.workerExitSignal === "string" ||
+                failure.workerExitSignal === null
+                ? `exitSignal=${failure.workerExitSignal ?? "none"}`
                 : null,
             typeof failure.supervisorAction === "string"
                 ? `supervisorAction=${failure.supervisorAction}`

package/dist/lib/agent/directTools.d.ts

@@ -1,4 +1,69 @@
 import type { AllToolsMap, BasicToolsMap, FilesystemToolsMap, Tool, UtilityToolsMap } from "../types/index.js";
+/**
+ * Vertex location for the websearchGrounding tool:
+ * NEUROLINK_WEBSEARCH_LOCATION, else `global`.
+ *
+ * Deliberately does NOT inherit GOOGLE_VERTEX_LOCATION. The search models are
+ * served only from the `global`, `us` and `eu` endpoints — never from a single
+ * region — so inheriting a regional value produces a 404 for the model rather
+ * than a working search. That is not hypothetical: a deployment pinned to
+ * us-east5 for Claude-on-Vertex sent web search to us-east5 too and every
+ * query failed with NOT_FOUND.
+ *
+ * Set NEUROLINK_WEBSEARCH_LOCATION to `us` or `eu` where the multi-region
+ * endpoints are required, e.g. for data residency.
+ */
+export declare function resolveWebsearchLocation(): string;
+/** Model for websearchGrounding — NEUROLINK_WEBSEARCH_MODEL, else the default. */
+export declare function resolveWebsearchModel(): string;
+/**
+ * The generateContent request for a web search. Google Search grounding is
+ * requested natively through `config.tools`.
+ */
+export declare function buildWebsearchRequest(model: string, query: string, maxWords: number): {
+    model: string;
+    contents: {
+        role: string;
+        parts: {
+            text: string;
+        }[];
+    }[];
+    config: {
+        tools: {
+            googleSearch: {};
+        }[];
+    };
+};
+/**
+ * Display domain for one grounding chunk.
+ *
+ * Blank `domain` values count as absent, and the uri fallback is guarded by
+ * `URL.canParse` — an unparseable provider uri would otherwise throw and take
+ * the entire search down with it.
+ */
+export declare function resolveGroundingDomain(web: {
+    uri?: string;
+    domain?: string;
+}): string;
+/**
+ * Map grounding chunks onto search results, capped at `limitedResults`.
+ * Returns an empty array when there is no usable grounding metadata, which the
+ * caller replaces with a single synthesised result.
+ */
+export declare function buildWebsearchResults(groundingMetadata: {
+    groundingChunks?: {
+        web?: {
+            uri?: string;
+            title?: string;
+            domain?: string;
+        };
+    }[];
+} | undefined, searchContent: string, limitedResults: number): {
+    title: string;
+    url: string;
+    snippet: string;
+    domain: string;
+}[];
 /**
  * Direct tool definitions that work immediately with Gemini/AI SDK
  * These bypass MCP complexity and provide reliable agent functionality

package/dist/lib/agent/directTools.js

@@ -6,6 +6,8 @@ import { logger } from "../utils/logger.js";
 import { CSVProcessor } from "../utils/csvProcessor.js";
 import { shouldEnableBashTool } from "../utils/toolUtils.js";
 import { tool } from "../utils/tool.js";
+import { withTimeout } from "../utils/async/withTimeout.js";
+import { TIMEOUTS } from "../constants/timeouts.js";
 const MAX_OUTPUT_BYTES = 102400; // 100KB
 function truncateOutput(output) {
     if (output.length > MAX_OUTPUT_BYTES) {
@@ -35,16 +37,77 @@ function resolveWithinCwd(filePath) {
     }
     return { path: resolvedPath };
 }
-// Runtime Google Search tool creation - bypasses TypeScript strict typing
-function createGoogleSearchTools() {
-    const searchTool = {};
-    // Dynamically assign google_search property at runtime
-    Object.defineProperty(searchTool, "google_search", {
-        value: {},
-        enumerable: true,
-        configurable: true,
-    });
-    return [searchTool];
+/**
+ * Vertex location for the websearchGrounding tool:
+ * NEUROLINK_WEBSEARCH_LOCATION, else `global`.
+ *
+ * Deliberately does NOT inherit GOOGLE_VERTEX_LOCATION. The search models are
+ * served only from the `global`, `us` and `eu` endpoints — never from a single
+ * region — so inheriting a regional value produces a 404 for the model rather
+ * than a working search. That is not hypothetical: a deployment pinned to
+ * us-east5 for Claude-on-Vertex sent web search to us-east5 too and every
+ * query failed with NOT_FOUND.
+ *
+ * Set NEUROLINK_WEBSEARCH_LOCATION to `us` or `eu` where the multi-region
+ * endpoints are required, e.g. for data residency.
+ */
+export function resolveWebsearchLocation() {
+    return process.env.NEUROLINK_WEBSEARCH_LOCATION?.trim() || "global";
+}
+/** Model for websearchGrounding — NEUROLINK_WEBSEARCH_MODEL, else the default. */
+export function resolveWebsearchModel() {
+    return (process.env.NEUROLINK_WEBSEARCH_MODEL?.trim() || "gemini-3.1-flash-lite");
+}
+/**
+ * The generateContent request for a web search. Google Search grounding is
+ * requested natively through `config.tools`.
+ */
+export function buildWebsearchRequest(model, query, maxWords) {
+    return {
+        model,
+        contents: [
+            {
+                role: "user",
+                parts: [
+                    {
+                        text: `Search for: "${query}". Provide a concise summary in no more than ${maxWords} words.`,
+                    },
+                ],
+            },
+        ],
+        config: { tools: [{ googleSearch: {} }] },
+    };
+}
+/**
+ * Display domain for one grounding chunk.
+ *
+ * Blank `domain` values count as absent, and the uri fallback is guarded by
+ * `URL.canParse` — an unparseable provider uri would otherwise throw and take
+ * the entire search down with it.
+ */
+export function resolveGroundingDomain(web) {
+    return (web.domain?.trim() ||
+        (web.uri && URL.canParse(web.uri) ? new URL(web.uri).hostname : "unknown"));
+}
+/**
+ * Map grounding chunks onto search results, capped at `limitedResults`.
+ * Returns an empty array when there is no usable grounding metadata, which the
+ * caller replaces with a single synthesised result.
+ */
+export function buildWebsearchResults(groundingMetadata, searchContent, limitedResults) {
+    const searchResults = [];
+    for (const chunk of groundingMetadata?.groundingChunks?.slice(0, limitedResults) ?? []) {
+        if (chunk.web) {
+            searchResults.push({
+                title: chunk.web.title || "No title",
+                url: chunk.web.uri || "",
+                // Full content — maxWords already bounds the length.
+                snippet: searchContent,
+                domain: resolveGroundingDomain(chunk.web),
+            });
+        }
+    }
+    return searchResults;
 }
 /**
  * Direct tool definitions that work immediately with Gemini/AI SDK
@@ -593,7 +656,7 @@ export const directAgentTools = {
             try {
                 const hasCredentials = process.env.GOOGLE_APPLICATION_CREDENTIALS;
                 const hasProjectId = process.env.GOOGLE_VERTEX_PROJECT;
-                const projectLocation = process.env.GOOGLE_VERTEX_LOCATION || "us-central1";
+                const projectLocation = resolveWebsearchLocation();
                 if (!hasCredentials || !hasProjectId) {
                     return {
                         success: false,
@@ -605,31 +668,19 @@ export const directAgentTools = {
                     };
                 }
                 const limitedResults = Math.min(Math.max(maxResults, 1), 5);
-                const { VertexAI } = await import("@google-cloud/vertexai");
-                const vertex_ai = new VertexAI({
+                const { GoogleGenAI } = await import("@google/genai");
+                const vertex_ai = new GoogleGenAI({
+                    vertexai: true,
                     project: hasProjectId,
                     location: projectLocation,
                 });
-                const websearchModel = process.env.NEUROLINK_WEBSEARCH_MODEL?.trim() ||
-                    "gemini-2.5-flash-lite";
-                const model = vertex_ai.getGenerativeModel({
-                    model: websearchModel,
-                    tools: createGoogleSearchTools(),
-                });
-                // Search query with word limit constraint
-                const searchPrompt = `Search for: "${query}". Provide a concise summary in no more than ${maxWords} words.`;
+                const websearchModel = resolveWebsearchModel();
                 const startTime = Date.now();
-                const response = await model.generateContent({
-                    contents: [
-                        {
-                            role: "user",
-                            parts: [{ text: searchPrompt }],
-                        },
-                    ],
-                });
+                // A stalled Vertex call would otherwise leave the tool pending
+                // indefinitely; the outer catch turns a timeout into the failure shape.
+                const result = await withTimeout(vertex_ai.models.generateContent(buildWebsearchRequest(websearchModel, query, maxWords)), TIMEOUTS.TOOL.EXECUTION_DEFAULT_MS, "[websearchGrounding] Vertex AI web search request timed out");
                 const responseTime = Date.now() - startTime;
                 // Extract grounding metadata and search results
-                const result = response.response;
                 const candidates = result.candidates;
                 if (!candidates || candidates.length === 0) {
                     return {
@@ -638,33 +689,18 @@ export const directAgentTools = {
                         query,
                     };
                 }
-                const content = candidates[0].content;
-                if (!content || !content.parts || content.parts.length === 0) {
+                // Extract raw search content. The aggregated `text` getter joins every
+                // text part, so it survives responses that lead with a non-text part.
+                const searchContent = result.text?.trim() || "";
+                if (!searchContent) {
                     return {
                         success: false,
                         error: "No search content found",
                         query,
                     };
                 }
-                // Extract raw search content
-                const searchContent = content.parts[0].text || "";
                 // Extract grounding sources if available
-                const groundingMetadata = candidates[0]?.groundingMetadata;
-                const searchResults = [];
-                if (groundingMetadata?.groundingChunks) {
-                    for (const chunk of groundingMetadata.groundingChunks.slice(0, limitedResults)) {
-                        if (chunk.web) {
-                            searchResults.push({
-                                title: chunk.web.title || "No title",
-                                url: chunk.web.uri || "",
-                                snippet: searchContent, // Use full content since maxWords already limits length
-                                domain: chunk.web.uri
-                                    ? new URL(chunk.web.uri).hostname
-                                    : "unknown",
-                            });
-                        }
-                    }
-                }
+                const searchResults = buildWebsearchResults(candidates[0]?.groundingMetadata, searchContent, limitedResults);
                 // If no grounding metadata, create basic result structure
                 if (searchResults.length === 0) {
                     searchResults.push({

package/dist/lib/proxy/globalInstaller.d.ts

@@ -6,6 +6,8 @@ export declare function getGlobalInstallArgs(kind: GlobalInstallerKind, packageS
  * Return whether a global package-manager failure is likely environmental and
  * worth retrying. Configuration and permission failures deliberately return
  * false so the updater does not repeatedly mutate a broken installation.
+ *
+ * @param error - The package-manager error, including any nested `cause` chain.
  */
 export declare function isTransientInstallFailure(error: unknown): boolean;
 /**

package/dist/lib/proxy/globalInstaller.js

@@ -146,17 +146,25 @@ const TRANSIENT_INSTALL_FAILURE_CODES = new Set([
     "EPIPE",
     "ETIMEDOUT",
 ]);
+const MAX_INSTALL_FAILURE_CAUSE_DEPTH = 10;
 /**
  * Return whether a global package-manager failure is likely environmental and
  * worth retrying. Configuration and permission failures deliberately return
  * false so the updater does not repeatedly mutate a broken installation.
+ *
+ * @param error - The package-manager error, including any nested `cause` chain.
  */
 export function isTransientInstallFailure(error) {
     let current = error;
-    for (let depth = 0; depth < 5 && current; depth++) {
+    const seen = new Set();
+    for (let depth = 0; depth < MAX_INSTALL_FAILURE_CAUSE_DEPTH && current; depth++) {
         if (typeof current !== "object") {
             return false;
         }
+        if (seen.has(current)) {
+            return false;
+        }
+        seen.add(current);
         const candidate = current;
         if (typeof candidate.code === "string" &&
             TRANSIENT_INSTALL_FAILURE_CODES.has(candidate.code)) {

package/dist/lib/proxy/rollingWorkerSupervisor.js

@@ -424,10 +424,12 @@ export class RollingWorkerSupervisor {
         if (this.active?.generation === worker.generation && !this.closed) {
             this.active = null;
             this.draining.set(worker.generation, worker);
-            // The child may own a duplicate of an incompletely transferred socket.
-            // SIGKILL closes its descriptor without worker-side shutdown(2), after
-            // which the parent rejects its copy rather than attempting unsafe replay.
-            worker.handle.terminate("SIGKILL");
+            if (!lifecycle.observedExit) {
+                // The child may own a duplicate of an incompletely transferred socket.
+                // SIGKILL closes its descriptor without worker-side shutdown(2), after
+                // which the parent rejects its copy rather than attempting unsafe replay.
+                worker.handle.terminate("SIGKILL");
+            }
             this.publishState();
         }
         this.rejectSocket(socket);

package/dist/proxy/globalInstaller.d.ts

@@ -6,6 +6,8 @@ export declare function getGlobalInstallArgs(kind: GlobalInstallerKind, packageS
  * Return whether a global package-manager failure is likely environmental and
  * worth retrying. Configuration and permission failures deliberately return
  * false so the updater does not repeatedly mutate a broken installation.
+ *
+ * @param error - The package-manager error, including any nested `cause` chain.
  */
 export declare function isTransientInstallFailure(error: unknown): boolean;
 /**

package/dist/proxy/globalInstaller.js

@@ -146,17 +146,25 @@ const TRANSIENT_INSTALL_FAILURE_CODES = new Set([
     "EPIPE",
     "ETIMEDOUT",
 ]);
+const MAX_INSTALL_FAILURE_CAUSE_DEPTH = 10;
 /**
  * Return whether a global package-manager failure is likely environmental and
  * worth retrying. Configuration and permission failures deliberately return
  * false so the updater does not repeatedly mutate a broken installation.
+ *
+ * @param error - The package-manager error, including any nested `cause` chain.
  */
 export function isTransientInstallFailure(error) {
     let current = error;
-    for (let depth = 0; depth < 5 && current; depth++) {
+    const seen = new Set();
+    for (let depth = 0; depth < MAX_INSTALL_FAILURE_CAUSE_DEPTH && current; depth++) {
         if (typeof current !== "object") {
             return false;
         }
+        if (seen.has(current)) {
+            return false;
+        }
+        seen.add(current);
         const candidate = current;
         if (typeof candidate.code === "string" &&
             TRANSIENT_INSTALL_FAILURE_CODES.has(candidate.code)) {

package/dist/proxy/rollingWorkerSupervisor.js

@@ -424,10 +424,12 @@ export class RollingWorkerSupervisor {
         if (this.active?.generation === worker.generation && !this.closed) {
             this.active = null;
             this.draining.set(worker.generation, worker);
-            // The child may own a duplicate of an incompletely transferred socket.
-            // SIGKILL closes its descriptor without worker-side shutdown(2), after
-            // which the parent rejects its copy rather than attempting unsafe replay.
-            worker.handle.terminate("SIGKILL");
+            if (!lifecycle.observedExit) {
+                // The child may own a duplicate of an incompletely transferred socket.
+                // SIGKILL closes its descriptor without worker-side shutdown(2), after
+                // which the parent rejects its copy rather than attempting unsafe replay.
+                worker.handle.terminate("SIGKILL");
+            }
             this.publishState();
         }
         this.rejectSocket(socket);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@juspay/neurolink",
-  "version": "10.8.21",
+  "version": "10.9.0",
   "packageManager": "pnpm@10.15.1",
   "description": "TypeScript AI SDK with 24+ LLM providers behind one consistent API. MCP-native (connect any MCP server), voice TTS/STT/realtime, RAG, agents, memory, context compaction. OpenAI · Anthropic · Gemini · Bedrock · Azure · Ollama · DeepSeek · NVIDIA NIM and more.",
   "author": {
@@ -145,6 +145,7 @@
     "test:model-capabilities": "npx tsx test/continuous-test-suite-model-capabilities.ts",
     "test:agent-runtime:vitest": "pnpm exec vitest run test/agentRuntime.test.ts",
     "test:retry-after:vitest": "pnpm exec vitest run test/retryAfter.test.ts",
+    "test:websearch-grounding": "npx tsx test/continuous-test-suite-websearch-grounding.ts",
     "test:ci": "pnpm run test && pnpm run test:client && pnpm run test:hitl",
     "// CI tier — fast, no live AI calls, safe for every commit": "",
     "test:tool-routing": "npx tsx test/continuous-test-suite-tool-routing.ts",
@@ -152,7 +153,7 @@
     "test:system-messages": "npx tsx test/continuous-test-suite-system-messages.ts",
     "test:test-stubs": "npx tsx test/continuous-test-suite-test-stubs.ts",
     "test:tool-routing-semantic": "npx tsx test/continuous-test-suite-tool-routing-semantic.ts",
-    "test:unit": "pnpm run test:envguard && pnpm run test:bugfixes && pnpm run test:file-detector-extension && pnpm run test:file-detector-magic-bytes && pnpm run test:mcp:infra && pnpm run test:mcp:bash && pnpm run test:mcp:limits && pnpm run test:mcp:spans && pnpm run test:autoresearch:redis && pnpm run test:tool-routing && pnpm run test:tool-routing-cli && pnpm run test:tool-dedup && pnpm run test:model-pool && pnpm run test:litellm-context && pnpm run test:dedup-execute-map && pnpm run test:step-budget-guard && pnpm run test:agent-plumbing && pnpm run test:tool-execution-recorder && pnpm run test:proxy-terminal-errors && pnpm run test:system-messages && pnpm run test:tool-routing-semantic && pnpm run test:anthropic-tools-policy && pnpm run test:sagemaker-tools && pnpm run test:anthropic-multimodal && pnpm run test:excel-interop && pnpm run test:model-capabilities && pnpm run test:agent-runtime:vitest && pnpm run test:agent-delegation && pnpm run test:retry-after:vitest && pnpm run test:sampling-params && pnpm run test:structured-recovery && pnpm run test:prompt-redaction && pnpm run test:mcp-result-cache && pnpm run test:test-stubs && pnpm run test:model-not-found-retryable",
+    "test:unit": "pnpm run test:envguard && pnpm run test:bugfixes && pnpm run test:file-detector-extension && pnpm run test:file-detector-magic-bytes && pnpm run test:mcp:infra && pnpm run test:mcp:bash && pnpm run test:mcp:limits && pnpm run test:mcp:spans && pnpm run test:autoresearch:redis && pnpm run test:tool-routing && pnpm run test:tool-routing-cli && pnpm run test:tool-dedup && pnpm run test:model-pool && pnpm run test:litellm-context && pnpm run test:dedup-execute-map && pnpm run test:step-budget-guard && pnpm run test:agent-plumbing && pnpm run test:tool-execution-recorder && pnpm run test:proxy-terminal-errors && pnpm run test:system-messages && pnpm run test:tool-routing-semantic && pnpm run test:anthropic-tools-policy && pnpm run test:sagemaker-tools && pnpm run test:anthropic-multimodal && pnpm run test:excel-interop && pnpm run test:model-capabilities && pnpm run test:agent-runtime:vitest && pnpm run test:agent-delegation && pnpm run test:retry-after:vitest && pnpm run test:sampling-params && pnpm run test:structured-recovery && pnpm run test:prompt-redaction && pnpm run test:mcp-result-cache && pnpm run test:test-stubs && pnpm run test:model-not-found-retryable && pnpm run test:websearch-grounding",
     "// CI tier — live providers, runs only when API keys are present (test:credentials and test:dynamic make real provider calls when keys are set, so they live here, not in test:unit)": "",
     "test:live": "pnpm run test:providers && pnpm run test:mcp:http && pnpm run test:mcp:sdk && pnpm run test:mcp:cli && pnpm run test:observability && pnpm run test:context && pnpm run test:memory && pnpm run test:tool-reliability && pnpm run test:evaluation && pnpm run test:autoresearch && pnpm run test:credentials && pnpm run test:dynamic",
     "// CI tier — product output (image/video/TTS/PPT) — costs $$ per run": "",