@juspay/neurolink 11.1.0 → 11.2.0

package/dist/utils/providerConfig.js

@@ -185,6 +185,29 @@ export function getProviderModel(envVar, defaultModel) {
 export function hasProviderCredentials(envVars) {
     return envVars.some((envVar) => !!process.env[envVar]);
 }
+/**
+ * Evaluates a `ProviderDescriptor.envVars.extraRequiredFallbacks`-shaped
+ * list against an env-var source. Each entry is either a single env var
+ * name (satisfied on its own) or a nested array of names that must ALL be
+ * present together (e.g. Vertex's GOOGLE_AUTH_CLIENT_EMAIL +
+ * GOOGLE_AUTH_PRIVATE_KEY pair, which is only valid auth as a pair).
+ * Returns true when at least one entry is satisfied. The single evaluation
+ * site for this shape — every consumer (providerUtils.ts, providerHealth.ts,
+ * setup.ts, environmentManager.ts) must call this instead of re-deriving the
+ * same `.some()`/`.every()` logic, so they can't drift out of sync with each
+ * other or with the real auth gate (hasGoogleCredentials()).
+ * @param env Explicit env-var source (`process.env`, or a parsed .env file) —
+ *   never hardcoded, so callers checking a file's contents (not the live
+ *   process env) can reuse this too.
+ */
+export function satisfiesFallbacks(fallbacks, env) {
+    if (!fallbacks) {
+        return false;
+    }
+    return fallbacks.some((entry) => typeof entry === "string"
+        ? !!env[entry]
+        : entry.every((name) => !!env[name]));
+}
 // =============================================================================
 // PROVIDER-SPECIFIC CONFIGURATION CREATORS
 // =============================================================================
@@ -1277,3 +1300,63 @@ export function describeAnthropicConfig() {
     lines.push(`Priority Access: ${config.limits.priorityAccess ? "Yes" : "No"}`);
     return lines.join("\n");
 }
+/**
+ * Resolves the {apiKey, baseURL} pair for a config-driven OpenAI-compatible
+ * catalog entry (see OpenAICompatCatalogEntry in types/providers.ts).
+ *
+ * Extracted from the identical 6-line precedence block that was copy-pasted
+ * across groq.ts, xai.ts, togetherAi.ts, fireworks.ts, perplexity.ts, and
+ * mistral.ts, plus Cloudflare's accountId-computed-baseURL variant.
+ *
+ * Precedence (matches every ported subclass's original behavior exactly):
+ *   apiKey:  credentials.apiKey (trimmed, non-blank) > env var > throw
+ *   baseURL: credentials.baseURL (trimmed, non-blank)
+ *            > env var (if entry.baseURLEnvVar is set, trimmed, non-blank)
+ *            > entry.defaultBaseURL
+ *   baseURL (computedBaseURL entries, e.g. Cloudflare):
+ *            credentials.baseURL > computedBaseURL.build(accountId), where
+ *            accountId = credentials.accountId (trimmed) > env var (trimmed)
+ *            > throw computedBaseURL.missingValueMessage
+ */
+export function resolveOpenAICompatConfig(entry, credentials) {
+    const overrideApiKey = credentials?.apiKey?.trim();
+    const apiKey = overrideApiKey && overrideApiKey.length > 0
+        ? overrideApiKey
+        : validateApiKey(entry.configOptions);
+    if (entry.computedBaseURL) {
+        const { envVar, missingValueMessage, build } = entry.computedBaseURL;
+        // An explicit base URL is checked first and trimmed the same way the
+        // static branch trims it. It makes the account id irrelevant — there is
+        // nothing left to build — so demanding one anyway would reject a fully
+        // specified override.
+        const overrideComputedBaseURL = credentials?.baseURL?.trim();
+        if (overrideComputedBaseURL && overrideComputedBaseURL.length > 0) {
+            return { apiKey, baseURL: overrideComputedBaseURL };
+        }
+        const extraValue = (credentials?.accountId ??
+            process.env[envVar] ??
+            "").trim();
+        if (!extraValue) {
+            throw new Error(missingValueMessage);
+        }
+        return { apiKey, baseURL: build(extraValue) };
+    }
+    const overrideBaseURL = credentials?.baseURL?.trim();
+    const envBaseURL = entry.baseURLEnvVar
+        ? process.env[entry.baseURLEnvVar]?.trim()
+        : undefined;
+    const baseURL = (overrideBaseURL && overrideBaseURL.length > 0
+        ? overrideBaseURL
+        : undefined) ??
+        (envBaseURL && envBaseURL.length > 0 ? envBaseURL : undefined) ??
+        entry.defaultBaseURL;
+    if (!baseURL) {
+        // Reachable only for an entry that sets neither defaultBaseURL nor
+        // computedBaseURL. Returning "" instead would hand the SDK an empty base
+        // URL and surface as a confusing request failure far from the cause.
+        throw new Error(`${entry.providerName}: no base URL. Set one in credentials` +
+            (entry.baseURLEnvVar ? `, set ${entry.baseURLEnvVar}` : "") +
+            `, or give the catalog entry a defaultBaseURL.`);
+    }
+    return { apiKey, baseURL };
+}

package/dist/utils/providerHealth.d.ts

@@ -36,27 +36,25 @@ export declare class ProviderHealthChecker {
      */
     private static checkModelAvailability;
     /**
-     * Providers whose credential model can't be reduced to "every one of
-     * these exact env vars must be literally set" — the check in
-     * checkEnvironmentConfiguration() below ANDs every entry in the
-     * returned list together, which can't express Vertex's file-OR-
-     * individual-creds-OR-service-account auth, Bedrock's AWS SDK default
-     * provider chain (profile / IAM role, no env vars at all), or
-     * LiteLLM's documented zero-config local proxy. Their real requirement
-     * is validated by checkProviderSpecificConfig()'s dedicated per-provider
-     * checks instead — matches the original hand-written switch's
-     * deliberate `return []` for exactly these three. Naively deriving
-     * [apiKey, ...extraRequired] from the descriptor here (as for the other
-     * 27 providers) would make checkEnvironmentConfiguration() push a false
-     * "missing environment variables" issue — and therefore isHealthy=false
-     * — for legitimate fallback-based Vertex auth, AWS_PROFILE/IAM-role
-     * Bedrock auth, and unauthenticated local LiteLLM proxies. See
-     * hasProviderEnvVars() in providerUtils.ts for the equivalent OR-aware
-     * check used for auto-select gating.
-     */
-    private static readonly ENV_CHECK_DELEGATED_TO_SPECIFIC_CONFIG;
-    /**
-     * Get required environment variables for a provider
+     * Get required environment variables for a provider.
+     *
+     * Returns `[]` for providers with `descriptor.credentialsResolvedExternally
+     * === true` (Vertex, Bedrock, LiteLLM) — the check in
+     * checkEnvironmentConfiguration() below ANDs every entry in the returned
+     * list together, which can't express Vertex's file-OR-individual-creds-
+     * OR-service-account auth, Bedrock's AWS SDK default provider chain
+     * (profile / IAM role, no env vars at all), or LiteLLM's documented
+     * zero-config local proxy. Their real requirement is validated by
+     * checkProviderSpecificConfig()'s dedicated per-provider checks instead.
+     * Naively deriving [apiKey, ...extraRequired] from the descriptor for
+     * these three (as for the other 27 providers) would make
+     * checkEnvironmentConfiguration() push a false "missing environment
+     * variables" issue — and therefore isHealthy=false — for legitimate
+     * fallback-based Vertex auth, AWS_PROFILE/IAM-role Bedrock auth, and
+     * unauthenticated local LiteLLM proxies. See hasProviderEnvVars() in
+     * providerUtils.ts for the equivalent OR-aware check used for
+     * auto-select gating. See `ProviderDescriptor.credentialsResolvedExternally`
+     * (types/providers.ts) for the field's full documentation.
      */
     static getRequiredEnvironmentVariables(providerName: string): string[];
     /**
@@ -107,9 +105,17 @@ export declare class ProviderHealthChecker {
      */
     private static checkGoogleApplicationCredentials;
     /**
-     * Check individual Google credentials
-     */
-    private static checkIndividualGoogleCredentials;
+     * Check Vertex's non-file auth fallbacks (GOOGLE_APPLICATION_CREDENTIALS_
+     * NEUROLINK, GOOGLE_SERVICE_ACCOUNT_KEY, or the GOOGLE_AUTH_CLIENT_EMAIL +
+     * GOOGLE_AUTH_PRIVATE_KEY pair) via the descriptor's extraRequiredFallbacks
+     * instead of a hand-maintained env-var list, so this stays in sync with
+     * the real gating logic (hasGoogleCredentials()) the same way
+     * checkApiKeyValidity()'s vertex branch does. The previous hand-rolled
+     * version only recognized GOOGLE_SERVICE_ACCOUNT_KEY or the email+key
+     * pair — missing GOOGLE_APPLICATION_CREDENTIALS_NEUROLINK, the
+     * descriptor's documented first-priority fallback.
+     */
+    private static checkExtraRequiredFallbackCredentials;
     /**
      * Check AWS Bedrock configuration
      */

package/dist/utils/providerHealth.js

@@ -4,7 +4,7 @@
  */
 import { logger } from "./logger.js";
 import { AIProviderName, OpenAIModels, GoogleAIModels, AnthropicModels, BedrockModels, } from "../constants/enums.js";
-import { PROJECT_ID_FORMAT } from "./providerConfig.js";
+import { PROJECT_ID_FORMAT, satisfiesFallbacks } from "./providerConfig.js";
 import { basename } from "path";
 import { createProxyFetch } from "../proxy/proxyFetch.js";
 import { DEFAULT_OLLAMA_MODEL } from "../providers/ollama/constants.js";
@@ -194,7 +194,7 @@ export class ProviderHealthChecker {
             const descriptor = ProviderFactory.getDescriptor(AIProviderName.VERTEX);
             const { extraRequired, extraRequiredFallbacks } = descriptor?.envVars ?? {};
             const hasValidAuth = (extraRequired ?? []).every((v) => !!process.env[v]) ||
-                (extraRequiredFallbacks ?? []).some((v) => !!process.env[v]);
+                satisfiesFallbacks(extraRequiredFallbacks, process.env);
             logger.debug("Vertex auth final result", { hasValidAuth });
             if (hasValidAuth) {
                 healthStatus.hasApiKey = true;
@@ -342,46 +342,40 @@ export class ProviderHealthChecker {
         }
     }
     /**
-     * Providers whose credential model can't be reduced to "every one of
-     * these exact env vars must be literally set" — the check in
-     * checkEnvironmentConfiguration() below ANDs every entry in the
-     * returned list together, which can't express Vertex's file-OR-
-     * individual-creds-OR-service-account auth, Bedrock's AWS SDK default
-     * provider chain (profile / IAM role, no env vars at all), or
-     * LiteLLM's documented zero-config local proxy. Their real requirement
-     * is validated by checkProviderSpecificConfig()'s dedicated per-provider
-     * checks instead — matches the original hand-written switch's
-     * deliberate `return []` for exactly these three. Naively deriving
-     * [apiKey, ...extraRequired] from the descriptor here (as for the other
-     * 27 providers) would make checkEnvironmentConfiguration() push a false
-     * "missing environment variables" issue — and therefore isHealthy=false
-     * — for legitimate fallback-based Vertex auth, AWS_PROFILE/IAM-role
-     * Bedrock auth, and unauthenticated local LiteLLM proxies. See
-     * hasProviderEnvVars() in providerUtils.ts for the equivalent OR-aware
-     * check used for auto-select gating.
-     */
-    static ENV_CHECK_DELEGATED_TO_SPECIFIC_CONFIG = new Set([
-        AIProviderName.VERTEX,
-        AIProviderName.BEDROCK,
-        AIProviderName.LITELLM,
-    ]);
-    /**
-     * Get required environment variables for a provider
+     * Get required environment variables for a provider.
+     *
+     * Returns `[]` for providers with `descriptor.credentialsResolvedExternally
+     * === true` (Vertex, Bedrock, LiteLLM) — the check in
+     * checkEnvironmentConfiguration() below ANDs every entry in the returned
+     * list together, which can't express Vertex's file-OR-individual-creds-
+     * OR-service-account auth, Bedrock's AWS SDK default provider chain
+     * (profile / IAM role, no env vars at all), or LiteLLM's documented
+     * zero-config local proxy. Their real requirement is validated by
+     * checkProviderSpecificConfig()'s dedicated per-provider checks instead.
+     * Naively deriving [apiKey, ...extraRequired] from the descriptor for
+     * these three (as for the other 27 providers) would make
+     * checkEnvironmentConfiguration() push a false "missing environment
+     * variables" issue — and therefore isHealthy=false — for legitimate
+     * fallback-based Vertex auth, AWS_PROFILE/IAM-role Bedrock auth, and
+     * unauthenticated local LiteLLM proxies. See hasProviderEnvVars() in
+     * providerUtils.ts for the equivalent OR-aware check used for
+     * auto-select gating. See `ProviderDescriptor.credentialsResolvedExternally`
+     * (types/providers.ts) for the field's full documentation.
      */
     static getRequiredEnvironmentVariables(providerName) {
-        // Resolve the descriptor FIRST so the delegation-Set check below is
-        // keyed on the canonical, alias-resolved `descriptor.name` — not the
-        // raw, possibly-aliased `providerName` argument. Checking the raw
-        // input here would let documented aliases (e.g. "googleVertex" for
+        // Resolve the descriptor FIRST so the field check below is keyed on
+        // the canonical, alias-resolved `descriptor.credentialsResolvedExternally`
+        // — not the raw, possibly-aliased `providerName` argument. Checking the
+        // raw input here would let documented aliases (e.g. "googleVertex" for
         // vertex, "aws" for bedrock) skip the delegation and fall through to
         // the naive [apiKey, ...extraRequired] derivation below, reproducing
         // the exact false "missing environment variables" regression this
-        // Set exists to prevent.
+        // field exists to prevent.
         const descriptor = ProviderFactory.getDescriptor(providerName);
         if (!descriptor) {
             return [];
         }
-        if (this.ENV_CHECK_DELEGATED_TO_SPECIFIC_CONFIG.has(descriptor.name)) {
+        if (descriptor.credentialsResolvedExternally) {
             return [];
         }
         const { apiKey, extraRequired } = descriptor.envVars;
@@ -518,11 +512,11 @@ export class ProviderHealthChecker {
             hasValidAuth = await this.checkGoogleApplicationCredentials(healthStatus);
         }
         if (!hasValidAuth) {
-            hasValidAuth = this.checkIndividualGoogleCredentials(healthStatus);
+            hasValidAuth = this.checkExtraRequiredFallbackCredentials(healthStatus);
         }
         if (!hasValidAuth) {
             healthStatus.configurationIssues.push("Google Cloud authentication not configured or credentials file missing");
-            healthStatus.recommendations.push("Set either GOOGLE_APPLICATION_CREDENTIALS (valid file path), GOOGLE_SERVICE_ACCOUNT_KEY (base64), or both GOOGLE_AUTH_CLIENT_EMAIL and GOOGLE_AUTH_PRIVATE_KEY");
+            healthStatus.recommendations.push("Set either GOOGLE_APPLICATION_CREDENTIALS (valid file path), GOOGLE_APPLICATION_CREDENTIALS_NEUROLINK, GOOGLE_SERVICE_ACCOUNT_KEY (base64), or both GOOGLE_AUTH_CLIENT_EMAIL and GOOGLE_AUTH_PRIVATE_KEY");
         }
         return hasValidAuth;
     }
@@ -554,13 +548,20 @@ export class ProviderHealthChecker {
         }
     }
     /**
-     * Check individual Google credentials
+     * Check Vertex's non-file auth fallbacks (GOOGLE_APPLICATION_CREDENTIALS_
+     * NEUROLINK, GOOGLE_SERVICE_ACCOUNT_KEY, or the GOOGLE_AUTH_CLIENT_EMAIL +
+     * GOOGLE_AUTH_PRIVATE_KEY pair) via the descriptor's extraRequiredFallbacks
+     * instead of a hand-maintained env-var list, so this stays in sync with
+     * the real gating logic (hasGoogleCredentials()) the same way
+     * checkApiKeyValidity()'s vertex branch does. The previous hand-rolled
+     * version only recognized GOOGLE_SERVICE_ACCOUNT_KEY or the email+key
+     * pair — missing GOOGLE_APPLICATION_CREDENTIALS_NEUROLINK, the
+     * descriptor's documented first-priority fallback.
      */
-    static checkIndividualGoogleCredentials(healthStatus) {
-        const hasServiceAccountKey = !!process.env.GOOGLE_SERVICE_ACCOUNT_KEY;
-        const hasIndividualCredentials = !!(process.env.GOOGLE_AUTH_CLIENT_EMAIL &&
-            process.env.GOOGLE_AUTH_PRIVATE_KEY);
-        if (hasServiceAccountKey || hasIndividualCredentials) {
+    static checkExtraRequiredFallbackCredentials(healthStatus) {
+        const descriptor = ProviderFactory.getDescriptor(AIProviderName.VERTEX);
+        const hasValidAuth = satisfiesFallbacks(descriptor?.envVars.extraRequiredFallbacks, process.env);
+        if (hasValidAuth) {
             healthStatus.hasApiKey = true;
             return true;
         }

package/dist/utils/providerUtils.js

@@ -6,7 +6,7 @@ import { AIProviderFactory } from "../core/factory.js";
 import { logger } from "./logger.js";
 import { AIProviderName } from "../constants/enums.js";
 import { ProviderHealthChecker } from "./providerHealth.js";
-import { API_KEY_FORMATS, API_KEY_LENGTHS, PROJECT_ID_FORMAT, } from "./providerConfig.js";
+import { API_KEY_FORMATS, API_KEY_LENGTHS, PROJECT_ID_FORMAT, satisfiesFallbacks, } from "./providerConfig.js";
 import { DEFAULT_OLLAMA_MODEL } from "../providers/ollama/constants.js";
 import { ProviderFactory } from "../factories/providerFactory.js";
 import { PROVIDER_DESCRIPTORS } from "../factories/providerDescriptors.js";
@@ -340,7 +340,7 @@ export function hasProviderEnvVars(provider) {
         return false;
     }
     return ((extraRequired ?? []).every((v) => !!process.env[v]) ||
-        (extraRequiredFallbacks ?? []).some((v) => !!process.env[v]));
+        satisfiesFallbacks(extraRequiredFallbacks, process.env));
 }
 /**
  * Get available provider names

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@juspay/neurolink",
-  "version": "11.1.0",
+  "version": "11.2.0",
   "packageManager": "pnpm@10.15.1",
   "description": "TypeScript AI SDK with 24+ LLM providers behind one consistent API. MCP-native (connect any MCP server), voice TTS/STT/realtime, RAG, agents, memory, context compaction. OpenAI · Anthropic · Gemini · Bedrock · Azure · Ollama · DeepSeek · NVIDIA NIM and more.",
   "author": {
@@ -94,6 +94,7 @@
     "test:mcp:spans": "npx tsx test/continuous-test-suite-mcp-spans.ts",
     "test:mcp:infra": "npx tsx test/continuous-test-suite-mcp-infra.ts",
     "test:providers-mocked": "npx tsx test/continuous-test-suite-providers-mocked.ts",
+    "test:openai-compat-catalog": "npx tsx test/continuous-test-suite-openai-compat-catalog.ts",
     "test:provider-descriptors": "npx tsx test/continuous-test-suite-provider-descriptors.ts",
     "test:provider-structure": "npx tsx test/continuous-test-suite-provider-structure.ts",
     "test:provider-fallback": "npx tsx test/continuous-test-suite-provider-fallback.ts",