@juspay/neurolink 12.49.12 → 12.49.13

package/CHANGELOG.md

@@ -1,8 +1,8 @@
-## [12.49.12](https://github.com/juspay/neurolink/compare/v12.49.11...v12.49.12) (2026-10-09)
+## [12.49.13](https://github.com/juspay/neurolink/compare/v12.49.12...v12.49.13) (2026-10-09)
 
 ### Bug Fixes
 
-- **(deps):** raise the music-metadata floor past five new moderate advisories ([86175f2](https://github.com/juspay/neurolink/commit/86175f27abe75dd5bfd2d94ba493457628e852da))
+- **(deps):** override handlebars past two critical AST-injection advisories ([9fa0b99](https://github.com/juspay/neurolink/commit/9fa0b9981ba4a17998066ac93ca0de87c3d13f03))
 
 ## [11.2.3](https://github.com/juspay/neurolink/compare/v11.2.2...v11.2.3) (2026-08-19)
 

package/dist/core/baseProvider.d.ts

@@ -598,7 +598,7 @@ export declare abstract class BaseProvider implements AIProvider {
     /**
      * Get AI SDK model with middleware applied
      * This method wraps the base model with any configured middleware
-     * TODO(#1576): Implement global level middlewares that can be used
+     * TODO(#1953): Implement global level middlewares that can be used
      */
     protected getAISDKModelWithMiddleware(options?: TextGenerationOptions | StreamOptions): Promise<LanguageModel>;
     /**

package/dist/core/baseProvider.js

@@ -117,7 +117,7 @@ export class BaseProvider {
     modelName;
     providerName;
     defaultTimeout = 30000; // 30 seconds
-    middlewareOptions; // TODO(#1576): Implement global level middlewares that can be used
+    middlewareOptions; // TODO(#1953): Implement global level middlewares that can be used
     // Tools are conditionally included based on centralized configuration
     directTools = shouldDisableBuiltinTools()
         ? {}
@@ -2516,7 +2516,7 @@ export class BaseProvider {
     /**
      * Get AI SDK model with middleware applied
      * This method wraps the base model with any configured middleware
-     * TODO(#1576): Implement global level middlewares that can be used
+     * TODO(#1953): Implement global level middlewares that can be used
      */
     async getAISDKModelWithMiddleware(options = {}) {
         return this.applyMiddlewareToModel(await this.getAISDKModel(), options);

package/dist/evaluation/scorers/rule/formatScorer.js

@@ -396,7 +396,7 @@ export class FormatScorer extends BaseRuleScorer {
         // First check if it's valid JSON
         try {
             JSON.parse(text);
-            // TODO(#1576): Implement full JSON Schema validation
+            // TODO(#1955): Implement full JSON Schema validation
             // For now, just check it's valid JSON
             return { passed: true, score: 1.0 };
         }

package/dist/mcp/mcpRegistryClient.js

@@ -272,7 +272,7 @@ export class MCPRegistryClient extends EventEmitter {
         if (wellKnown) {
             return wellKnown;
         }
-        // TODO(#1576): Fetch from remote registry
+        // TODO(#1956): Fetch from remote registry
         return undefined;
     }
     /**

package/dist/middleware/utils/guardrailsUtils.js

@@ -325,7 +325,7 @@ export function applyContentFiltering(text, badWordsConfig, context = "unknown")
             logger.debug(`[ContentFiltering:${context}] Applying regex pattern filtering with ${badWordsConfig.regexPatterns.length} patterns using replacement: "${replacementText}".`);
             for (const pattern of badWordsConfig.regexPatterns) {
                 try {
-                    // TODO(#1576): Add blocking for overly complex or long patterns
+                    // TODO(#1954): Add blocking for overly complex or long patterns
                     if (pattern.length > 1000) {
                         logger.warn(`[ContentFiltering:${context}] Regex pattern exceeds max length (1000 chars): "${pattern.substring(0, 50)}..."`);
                     }

package/dist/neurolink.js

@@ -10357,8 +10357,10 @@ Current user's request: ${currentInput}`;
     // ========================================
     // ENHANCED: Tool Event Emission API
     // ========================================
-    // TODO(#1576): Add ToolExecutionEvent utility methods in future version
-    // Will provide structured event format for consistent tool event processing
+    // Speculative, not a gap: ToolExecutionEvent already exists
+    // (src/lib/types/tools.ts) and is already surfaced via
+    // StreamResult.toolEvents. Dedicated utility methods are a possible
+    // future convenience, not planned work.
     /**
      * Emit tool start event with execution tracking
      * @param toolName - Name of the tool being executed
@@ -10480,8 +10482,9 @@ Current user's request: ${currentInput}`;
     clearCurrentStreamExecutions() {
         this.currentStreamToolExecutions = [];
     }
-    // TODO(#1576): Add getToolExecutionEvents() method in future version
-    // Will return properly formatted ToolExecutionEvent objects for structured event processing
+    // Speculative, not a gap: the same structured events a
+    // getToolExecutionEvents() method would return are already available via
+    // StreamResult.toolEvents.
     // ========================================
     // Tool Registration API
     // ========================================

package/dist/rag/ChunkerFactory.js

@@ -177,8 +177,8 @@ export class ChunkerFactory extends BaseFactory {
         }, DEFAULT_CHUNKER_METADATA.latex);
         // Register semantic chunker (placeholder - uses recursive as fallback)
         this.registerChunker("semantic", async (config) => {
-            // TODO(#1576): Implement dedicated SemanticChunker with LLM support
-            // For now, fall back to RecursiveChunker with semantic defaults
+            // Intentional fallback, not a gap: no dedicated SemanticChunker
+            // exists yet, so this uses RecursiveChunker with semantic defaults.
             const { RecursiveChunker } = await import("./chunkers/RecursiveChunker.js");
             return new RecursiveChunker(config);
         }, DEFAULT_CHUNKER_METADATA.semantic);

package/dist/workflow/config.d.ts

@@ -367,8 +367,8 @@ export declare function hasJudge(config: WorkflowConfig): boolean;
  */
 export declare function getAllJudges(config: WorkflowConfig): JudgeConfig[];
 /**
- * Calculate estimated workflow cost (placeholder)
- * TODO(#1576): Implement actual provider-specific pricing
+ * Calculate estimated workflow cost (placeholder). Provider-specific
+ * pricing is a possible future direction, not planned work.
  * @param config - Workflow configuration
  * @param estimatedTokens - Estimated number of tokens for the request
  * @returns Estimated cost in USD

package/dist/workflow/config.js

@@ -382,8 +382,8 @@ export function getAllJudges(config) {
     return [];
 }
 /**
- * Calculate estimated workflow cost (placeholder)
- * TODO(#1576): Implement actual provider-specific pricing
+ * Calculate estimated workflow cost (placeholder). Provider-specific
+ * pricing is a possible future direction, not planned work.
  * @param config - Workflow configuration
  * @param estimatedTokens - Estimated number of tokens for the request
  * @returns Estimated cost in USD

package/dist/workflow/core/workflowRegistry.js

@@ -9,8 +9,8 @@ const functionTag = "WorkflowRegistry";
 // REGISTRY STORAGE
 // ============================================================================
 /**
- * In-memory workflow registry
- * TODO(#1576): Consider persistent storage in future phases
+ * In-memory workflow registry. Persistent storage is a possible future
+ * direction, not planned work.
  */
 const workflowRegistry = new Map();
 // ============================================================================

package/dist/workflow/core/workflowRunner.js

@@ -158,7 +158,7 @@ export async function runWorkflow(config, options) {
                     totalInputTokens: calculateInputTokens(ensembleResult.responses),
                     totalOutputTokens: calculateOutputTokens(ensembleResult.responses),
                     totalTokens: calculateTotalTokens(ensembleResult.responses),
-                    byModel: [], // TODO(#1576): Populate per-model breakdown
+                    byModel: [], // Placeholder — not populated yet
                 },
                 // Additional metadata
                 metadata: options.metadata,

package/dist/workflow/utils/workflowMetrics.d.ts

@@ -45,8 +45,8 @@ export declare function calculateModelMetrics(responses: EnsembleResponse[]): Re
 }>;
 /**
  * Calculate consensus level between responses
- * NOTE: Placeholder implementation - uses response length similarity
- * TODO(#1576): Implement semantic similarity in Phase 2
+ * NOTE: Placeholder implementation - uses response length similarity.
+ * Semantic similarity is a possible future direction, not planned work.
  */
 export declare function calculateConsensus(responses: EnsembleResponse[]): number;
 /**

package/dist/workflow/utils/workflowMetrics.js

@@ -158,8 +158,8 @@ export function calculateModelMetrics(responses) {
 }
 /**
  * Calculate consensus level between responses
- * NOTE: Placeholder implementation - uses response length similarity
- * TODO(#1576): Implement semantic similarity in Phase 2
+ * NOTE: Placeholder implementation - uses response length similarity.
+ * Semantic similarity is a possible future direction, not planned work.
  */
 export function calculateConsensus(responses) {
     const successful = responses.filter((r) => r.status === "success");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@juspay/neurolink",
-  "version": "12.49.12",
+  "version": "12.49.13",
   "packageManager": "pnpm@10.15.1",
   "description": "The pipe layer of an AI nervous system: one interface connecting provider neurons to your application, across three inference types — generate, stream and decide. `decide` returns typed, calibrated judgements from a non-generative model (~400ms, ~$0.00002/call) for routing, tool selection and context budgeting. MCP-native (4 transports), voice TTS/STT/realtime, RAG, agents, memory, compaction, 9 observability exporters. OpenAI · Anthropic · Gemini · Bedrock · Azure · Ollama · TypeSafe Jev and more.",
   "author": {
@@ -686,6 +686,7 @@
       "@eslint/plugin-kit@<0.3.4": ">=0.3.4",
       "tmp@<0.2.6": ">=0.2.6",
       "axios@<1.13.5": ">=1.13.5",
+      "handlebars@<=4.7.9": ">=4.7.10",
       "glob@>=10.3.7 <=11.0.3": ">=11.1.0",
       "@semantic-release/npm": "^13.1.4",
       "@opentelemetry/sdk-trace-base": "^2.6.0",