@juspay/neurolink 11.18.2 → 11.18.3

package/dist/utils/fileDetector.js

@@ -5,7 +5,8 @@
  */
 import { open, readFile, realpath } from "fs/promises";
 import { basename, isAbsolute as isAbsolutePath, relative as relativePath, resolve as resolvePath, sep, } from "path";
-import { getGlobalDispatcher, interceptors, request } from "undici";
+import { request } from "undici";
+import { redirectFollowingDispatcher } from "./redirectDispatcher.js";
 // Lazy-loaded processor singletons — avoids loading heavy media deps
 // (mediabunny, fluent-ffmpeg, music-metadata, adm-zip) on every generate() call.
 async function getVideoProcessor() {
@@ -1519,7 +1520,7 @@ export class FileDetector {
         if (getCachedUrlContentType(url, Date.now()) === undefined) {
             try {
                 const head = await request(url, {
-                    dispatcher: getGlobalDispatcher().compose(interceptors.redirect({ maxRedirections: 5 })),
+                    dispatcher: redirectFollowingDispatcher(5),
                     method: "HEAD",
                     headersTimeout: FileDetector.DEFAULT_HEAD_TIMEOUT,
                     bodyTimeout: FileDetector.DEFAULT_HEAD_TIMEOUT,
@@ -1550,7 +1551,7 @@ export class FileDetector {
         return withRetry(async () => {
             try {
                 const response = await request(url, {
-                    dispatcher: getGlobalDispatcher().compose(interceptors.redirect({ maxRedirections: 5 })),
+                    dispatcher: redirectFollowingDispatcher(5),
                     method: "GET",
                     headersTimeout: timeout,
                     bodyTimeout: timeout,
@@ -2283,7 +2284,7 @@ class MimeTypeStrategy {
                 // dump() can't hang detection, per the project's async-timeout guideline.
                 contentType = await withTimeout((async () => {
                     const response = await request(input, {
-                        dispatcher: getGlobalDispatcher().compose(interceptors.redirect({ maxRedirections: 5 })),
+                        dispatcher: redirectFollowingDispatcher(5),
                         method: "HEAD",
                         headersTimeout: FileDetector.DEFAULT_HEAD_TIMEOUT,
                         bodyTimeout: FileDetector.DEFAULT_HEAD_TIMEOUT,

package/dist/utils/messageBuilder.js

@@ -1,6 +1,7 @@
 import { existsSync, readFileSync, statSync } from "fs";
 import { readFile as readFileAsync, stat as statAsync } from "fs/promises";
-import { getGlobalDispatcher, interceptors, request } from "undici";
+import { request } from "undici";
+import { redirectFollowingDispatcher } from "./redirectDispatcher.js";
 import { MultimodalLogger, ProviderImageAdapter, } from "../adapters/providerImageAdapter.js";
 import { CONVERSATION_INSTRUCTIONS, STRUCTURED_OUTPUT_INSTRUCTIONS, } from "../config/conversationMemory.js";
 import { getAvailableInputTokens } from "../constants/contextWindows.js";
@@ -1660,7 +1661,7 @@ async function downloadImageFromUrl(url) {
     await urlDownloadRateLimiter.acquire();
     try {
         const response = await request(url, {
-            dispatcher: getGlobalDispatcher().compose(interceptors.redirect({ maxRedirections: 5 })),
+            dispatcher: redirectFollowingDispatcher(5),
             method: "GET",
             headersTimeout: 10000, // 10 second timeout for headers
             bodyTimeout: 30000, // 30 second timeout for body,

package/dist/utils/redirectDispatcher.d.ts

@@ -0,0 +1,28 @@
+import type { Dispatcher } from "undici";
+/**
+ * A dispatcher that follows redirects, when composing one is safe here.
+ *
+ * `getGlobalDispatcher()` returns Node's **built-in** undici dispatcher, whose
+ * major tracks the runtime rather than this package's dependency. The composed
+ * result is then passed to the **npm** undici's `request()`, and the two majors
+ * do not share a handler contract:
+ *
+ *   node 24   built-in 7.24.4 + npm 7.28.0   request() succeeds
+ *   node 22   built-in 6.28.0 + npm 7.28.0   throws "invalid onError method"
+ *
+ * Node 22 is this package's declared minimum, so the broken combination is not
+ * exotic — it is the floor. The throw happens at request time rather than at
+ * compose(), which is why it surfaces as an opaque runtime error instead of
+ * something recognisably about versions.
+ *
+ * When the majors disagree, return the global dispatcher uncomposed. That drops
+ * redirect-following from the pre-flight HEAD only. Callers already treat any
+ * non-2xx HEAD — a redirect included — as untrustworthy and fall through to the
+ * streaming size guard on the GET, so the size protection is unchanged and the
+ * cost is one extra round trip.
+ *
+ * Composing onto the global dispatcher rather than a fresh `Agent` is
+ * deliberate: it preserves whatever the host application configured globally,
+ * such as a corporate ProxyAgent.
+ */
+export declare function redirectFollowingDispatcher(maxRedirections: number): Dispatcher;

package/dist/utils/redirectDispatcher.js

@@ -0,0 +1,43 @@
+import { getGlobalDispatcher, interceptors } from "undici";
+/**
+ * The major of the `undici` this package depends on.
+ *
+ * `dependencies.undici` is `>=7.24.0 <8.0.0`, and `pnpm.overrides` maps
+ * `undici@>=8.0.0` back into that same range, so major 7 is a declared
+ * invariant rather than an observation. Update both together if it ever moves.
+ */
+const NPM_UNDICI_MAJOR = 7;
+/**
+ * A dispatcher that follows redirects, when composing one is safe here.
+ *
+ * `getGlobalDispatcher()` returns Node's **built-in** undici dispatcher, whose
+ * major tracks the runtime rather than this package's dependency. The composed
+ * result is then passed to the **npm** undici's `request()`, and the two majors
+ * do not share a handler contract:
+ *
+ *   node 24   built-in 7.24.4 + npm 7.28.0   request() succeeds
+ *   node 22   built-in 6.28.0 + npm 7.28.0   throws "invalid onError method"
+ *
+ * Node 22 is this package's declared minimum, so the broken combination is not
+ * exotic — it is the floor. The throw happens at request time rather than at
+ * compose(), which is why it surfaces as an opaque runtime error instead of
+ * something recognisably about versions.
+ *
+ * When the majors disagree, return the global dispatcher uncomposed. That drops
+ * redirect-following from the pre-flight HEAD only. Callers already treat any
+ * non-2xx HEAD — a redirect included — as untrustworthy and fall through to the
+ * streaming size guard on the GET, so the size protection is unchanged and the
+ * cost is one extra round trip.
+ *
+ * Composing onto the global dispatcher rather than a fresh `Agent` is
+ * deliberate: it preserves whatever the host application configured globally,
+ * such as a corporate ProxyAgent.
+ */
+export function redirectFollowingDispatcher(maxRedirections) {
+    const globalDispatcher = getGlobalDispatcher();
+    const builtinMajor = Number.parseInt(process.versions.undici?.split(".")[0] ?? "", 10);
+    if (!Number.isFinite(builtinMajor) || builtinMajor !== NPM_UNDICI_MAJOR) {
+        return globalDispatcher;
+    }
+    return globalDispatcher.compose(interceptors.redirect({ maxRedirections }));
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@juspay/neurolink",
-  "version": "11.18.2",
+  "version": "11.18.3",
   "packageManager": "pnpm@10.15.1",
   "description": "TypeScript AI SDK with 24+ LLM providers behind one consistent API. MCP-native (connect any MCP server), voice TTS/STT/realtime, RAG, agents, memory, context compaction. OpenAI · Anthropic · Gemini · Bedrock · Azure · Ollama · DeepSeek · NVIDIA NIM and more.",
   "author": {