@juspay/neurolink 12.49.13 → 12.49.15

package/dist/providers/googleAiStudio/client.js

@@ -7,6 +7,7 @@ import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, Ra
 import { ERROR_CODES, NeuroLinkError } from "../../utils/errorHandling.js";
 import { logger } from "../../utils/logger.js";
 import { drainDetachedPump } from "../../utils/drainDetachedPump.js";
+import { attachStreamCancel, cancelStream, releaseIterator, } from "../../utils/streamCancellation.js";
 import { createGeminiLoopAdapter } from "../../core/geminiLoopAdapter.js";
 import { isDirectTTSRequest } from "../../core/resolveRequestKind.js";
 import { runAgenticLoop } from "../../core/loopEngine.js";
@@ -2186,21 +2187,58 @@ export class GoogleAIStudioProvider extends BaseProvider {
             "gemini-2.5-flash-preview-native-audio-dialog";
         // Simple async queue for yielding audio events to the outer AsyncIterable
         const queue = [];
-        let resolveNext = null;
+        let notifyNext = null;
         let done = false;
-        const push = (item) => {
-            if (done) {
-                return;
+        let terminalQueued = false;
+        let cleanupRequested = false;
+        let liveSession = undefined;
+        let sessionCloseIssued = false;
+        let inputIterator;
+        let removeAbortListener = () => undefined;
+        const wake = () => {
+            const notify = notifyNext;
+            notifyNext = null;
+            notify?.();
+        };
+        const cleanup = () => {
+            if (!cleanupRequested) {
+                cleanupRequested = true;
+                removeAbortListener();
+                cancelStream(options.input?.audio?.frames);
+                if (inputIterator) {
+                    releaseIterator(inputIterator);
+                    inputIterator = undefined;
+                }
             }
-            if (item.type === "audio") {
-                if (resolveNext) {
-                    const fn = resolveNext;
-                    resolveNext = null;
-                    fn({ value: { type: "audio", audio: item.audio }, done: false });
-                    return;
+            // A close callback can run just before connect() yields its session.
+            // Keep cleanup repeatable so that newly acquired handle is still closed.
+            if (liveSession && !sessionCloseIssued) {
+                sessionCloseIssued = true;
+                try {
+                    void Promise.resolve(liveSession.close?.()).catch(() => { });
+                }
+                catch {
+                    // Cleanup cannot replace the stream's original outcome.
                 }
             }
+        };
+        const push = (item) => {
+            if (done || terminalQueued) {
+                return;
+            }
             queue.push(item);
+            if (item.type !== "audio") {
+                terminalQueued = true;
+                cleanup();
+            }
+            // A consumer can already be parked before either end or error arrives.
+            wake();
+        };
+        const cancel = () => {
+            done = true;
+            queue.length = 0;
+            cleanup();
+            wake();
         };
         // @google/genai 2.x waits inside connect() for the server's setupComplete
         // message and does not reject when the socket errors or closes first, so a
@@ -2219,6 +2257,9 @@ export class GoogleAIStudioProvider extends BaseProvider {
                     // no-op
                 },
                 onmessage: async (message) => {
+                    if (done || terminalQueued) {
+                        return;
+                    }
                     try {
                         const audio = message?.serverContent?.modelTurn?.parts?.[0]?.inlineData;
                         if (audio?.data) {
@@ -2260,16 +2301,50 @@ export class GoogleAIStudioProvider extends BaseProvider {
             },
         });
         const session = await Promise.race([connecting, connectFailed]);
+        liveSession = session;
         sessionOpen = true;
+        if (cleanupRequested) {
+            cleanup();
+        }
+        const signal = options.abortSignal;
+        if (signal && !cleanupRequested) {
+            const onAbort = () => {
+                push({
+                    type: "error",
+                    error: signal.reason instanceof Error
+                        ? signal.reason
+                        : new DOMException("The operation was aborted", "AbortError"),
+                });
+            };
+            signal.addEventListener("abort", onAbort, { once: true });
+            removeAbortListener = () => signal.removeEventListener("abort", onAbort);
+            if (signal.aborted) {
+                onAbort();
+            }
+        }
         // Feed upstream audio frames concurrently
         (async () => {
             try {
+                if (cleanupRequested) {
+                    return;
+                }
                 const spec = options.input?.audio;
                 if (!spec) {
                     logger.debug("[GeminiLive] No audio spec found on input; skipping upstream send");
                     return;
                 }
-                for await (const frame of spec.frames) {
+                const framesIterator = spec.frames[Symbol.asyncIterator]();
+                inputIterator = framesIterator;
+                while (!cleanupRequested) {
+                    const nextFrame = await framesIterator.next();
+                    if (cleanupRequested) {
+                        return;
+                    }
+                    if (nextFrame.done) {
+                        inputIterator = undefined;
+                        break;
+                    }
+                    const frame = nextFrame.value;
                     // Zero-length frame acts as a 'flush' control signal
                     if (!frame || frame.byteLength === 0) {
                         try {
@@ -2294,6 +2369,9 @@ export class GoogleAIStudioProvider extends BaseProvider {
                         media: { data: base64, mimeType },
                     });
                 }
+                if (cleanupRequested) {
+                    return;
+                }
                 // Best-effort flush signal if supported
                 try {
                     if (session.sendInput) {
@@ -2320,40 +2398,40 @@ export class GoogleAIStudioProvider extends BaseProvider {
             [Symbol.asyncIterator]() {
                 return {
                     async next() {
-                        if (queue.length > 0) {
+                        while (true) {
                             const item = queue.shift();
-                            if (!item) {
-                                // `done: true` selects the IteratorReturnResult arm, whose
-                                // value type accepts undefined.
-                                return { value: undefined, done: true };
-                            }
-                            if (item.type === "audio") {
+                            if (item?.type === "audio") {
                                 return {
                                     value: { type: "audio", audio: item.audio },
                                     done: false,
                                 };
                             }
-                            if (item.type === "end") {
+                            if (item?.type === "end") {
                                 done = true;
                                 return { value: undefined, done: true };
                             }
-                            if (item.type === "error") {
+                            if (item?.type === "error") {
                                 done = true;
                                 throw item.error instanceof Error
                                     ? item.error
                                     : new Error(String(item.error));
                             }
+                            if (done) {
+                                return { value: undefined, done: true };
+                            }
+                            await new Promise((resolve) => {
+                                notifyNext = resolve;
+                            });
                         }
-                        if (done) {
-                            return { value: undefined, done: true };
-                        }
-                        return await new Promise((resolve) => {
-                            resolveNext = resolve;
-                        });
+                    },
+                    async return() {
+                        cancel();
+                        return { value: undefined, done: true };
                     },
                 };
             },
         };
+        attachStreamCancel(asyncIterable, cancel);
         return {
             stream: asyncIterable,
             provider: this.providerName,

package/dist/rag/chunking/htmlChunker.js

@@ -5,6 +5,7 @@
  * Best for web pages, email templates, and structured HTML content.
  */
 import { randomUUID } from "crypto";
+import { decodeHtmlTextEntitiesOnce } from "../../utils/htmlEntities.js";
 /**
  * HTML-aware chunker implementation
  * Splits based on HTML structure (tags, elements)
@@ -170,7 +171,7 @@ export class HTMLChunker {
      * Extract plain text from HTML
      */
     extractText(html) {
-        return (html
+        return decodeHtmlTextEntitiesOnce(html
             // Remove script and style elements
             .replace(/<script[\s\S]*?<\/script>/gi, "")
             .replace(/<style[\s\S]*?<\/style>/gi, "")
@@ -179,17 +180,9 @@ export class HTMLChunker {
             // Replace block elements with newlines
             .replace(/<\/(p|div|br|h[1-6]|li|tr)>/gi, "\n")
             // Remove remaining tags
-            .replace(/<[^>]+>/g, "")
-            // Decode common HTML entities
-            .replace(/&nbsp;/gi, " ")
-            .replace(/&amp;/gi, "&")
-            .replace(/&lt;/gi, "<")
-            .replace(/&gt;/gi, ">")
-            .replace(/&quot;/gi, '"')
-            .replace(/&#039;/gi, "'")
-            // Normalize whitespace
+            .replace(/<[^>]+>/g, ""), { nbsp: " ", amp: "&", lt: "<", gt: ">", quot: '"', "#039": "'" })
             .replace(/\s+/g, " ")
-            .trim());
+            .trim();
     }
     /**
      * Split content that exceeds max size

package/dist/rag/document/loaders.js

@@ -27,6 +27,7 @@ import { existsSync } from "fs";
 import { readFile } from "fs/promises";
 import { basename, extname } from "path";
 import { logger } from "../../utils/logger.js";
+import { decodeHtmlTextEntitiesOnce } from "../../utils/htmlEntities.js";
 import { CSVProcessor, stripBom, stripMetadataLine, splitCsvLines, dedupeColumnNames, sanitizeColumnName, } from "../../utils/csvProcessor.js";
 import { splitCSVFields } from "../../utils/csvUtils.js";
 import { MDocument } from "./MDocument.js";
@@ -428,7 +429,7 @@ export class WebLoader {
      * Convert HTML to plain text
      */
     htmlToText(html) {
-        return (html
+        return decodeHtmlTextEntitiesOnce(html
             // Remove script and style elements
             .replace(/<script[\s\S]*?<\/script>/gi, "")
             .replace(/<style[\s\S]*?<\/style>/gi, "")
@@ -438,21 +439,18 @@ export class WebLoader {
             .replace(/<\/(p|div|h[1-6]|br|li|tr|blockquote)>/gi, "\n")
             .replace(/<(br|hr)\s*\/?>/gi, "\n")
             // Remove remaining tags
-            .replace(/<[^>]+>/g, "")
-            // Decode common HTML entities
-            .replace(/&nbsp;/gi, " ")
-            .replace(/&amp;/gi, "&")
-            .replace(/&lt;/gi, "<")
-            .replace(/&gt;/gi, ">")
-            .replace(/&quot;/gi, '"')
-            .replace(/&#039;/gi, "'")
-            .replace(/&apos;/gi, "'")
-            // Decode numeric entities
-            .replace(/&#(\d+);/g, (_, code) => String.fromCharCode(Number(code)))
-            // Normalize whitespace
+            .replace(/<[^>]+>/g, ""), {
+            nbsp: " ",
+            amp: "&",
+            lt: "<",
+            gt: ">",
+            quot: '"',
+            "#039": "'",
+            apos: "'",
+        }, true)
             .replace(/\n\s*\n/g, "\n\n")
             .replace(/[ \t]+/g, " ")
-            .trim());
+            .trim();
     }
 }
 /**

package/dist/server/openapi/generator.d.ts

@@ -29,7 +29,6 @@ export declare class OpenAPIGenerator {
     toJSON(pretty?: boolean): string;
     /**
      * Generate OpenAPI spec as YAML string
-     * Note: For full YAML support, use a YAML library
      */
     toYAML(): string;
     private generateInfo;
@@ -41,11 +40,6 @@ export declare class OpenAPIGenerator {
     private generateComponents;
     private convertPath;
     private extractPathParameters;
-    /**
-     * Simple JSON to YAML converter
-     * For production use, consider using a proper YAML library
-     */
-    private jsonToYaml;
 }
 /**
  * Create an OpenAPI generator with default configuration

package/dist/server/openapi/generator.js

@@ -2,6 +2,7 @@
  * OpenAPI 3.1 Specification Generator
  * Generates OpenAPI documentation from NeuroLink server routes
  */
+import { dump } from "js-yaml";
 import { OpenAPISchemas } from "./schemas.js";
 import { CommonParameters, createDeleteOperation, createGetOperation, createPostOperation, createStreamingPostOperation, DefaultServers, NeuroLinkApiInfo, StandardErrorResponses, StandardTags, BearerSecurityScheme, ApiKeySecurityScheme, } from "./templates.js";
 // ============================================
@@ -63,11 +64,9 @@ export class OpenAPIGenerator {
     }
     /**
      * Generate OpenAPI spec as YAML string
-     * Note: For full YAML support, use a YAML library
      */
     toYAML() {
-        const spec = this.generate();
-        return this.jsonToYaml(spec);
+        return dump(this.generate(), { noRefs: true, lineWidth: -1 });
     }
     // ============================================
     // Private Methods
@@ -291,75 +290,6 @@ export class OpenAPIGenerator {
         }
         return params;
     }
-    /**
-     * Simple JSON to YAML converter
-     * For production use, consider using a proper YAML library
-     */
-    jsonToYaml(obj, indent = 0) {
-        const spaces = "  ".repeat(indent);
-        if (obj === null || obj === undefined) {
-            return "null";
-        }
-        if (typeof obj === "boolean" || typeof obj === "number") {
-            return String(obj);
-        }
-        if (typeof obj === "string") {
-            // Check if string needs quotes
-            if (obj.includes("\n") ||
-                obj.includes(":") ||
-                obj.includes("#") ||
-                obj.includes("'") ||
-                obj.includes('"') ||
-                obj.startsWith(" ") ||
-                obj.endsWith(" ")) {
-                // Use block scalar for multiline
-                if (obj.includes("\n")) {
-                    const lines = obj.split("\n");
-                    return `|\n${lines.map((line) => spaces + "  " + line).join("\n")}`;
-                }
-                return `"${obj.replace(/"/g, '\\"')}"`;
-            }
-            return obj;
-        }
-        if (Array.isArray(obj)) {
-            if (obj.length === 0) {
-                return "[]";
-            }
-            return obj
-                .map((item) => {
-                const itemYaml = this.jsonToYaml(item, indent + 1);
-                if (typeof item === "object" && item !== null) {
-                    return `${spaces}- ${itemYaml
-                        .trim()
-                        .replace(/^\s+/gm, (match) => spaces + "  " + match.trim() + "\n")
-                        .trim()}`;
-                }
-                return `${spaces}- ${itemYaml}`;
-            })
-                .join("\n");
-        }
-        if (typeof obj === "object") {
-            const entries = Object.entries(obj);
-            if (entries.length === 0) {
-                return "{}";
-            }
-            return entries
-                .map(([key, value]) => {
-                const valueYaml = this.jsonToYaml(value, indent + 1);
-                if (typeof value === "object" &&
-                    value !== null &&
-                    !Array.isArray(value)) {
-                    return `${spaces}${key}:\n${valueYaml}`;
-                }
-                if (Array.isArray(value)) {
-                    return `${spaces}${key}:\n${valueYaml}`;
-                }
-                return `${spaces}${key}: ${valueYaml}`;
-            })
-                .join("\n");
-        }
-        return String(obj);
-    }
 }
 // ============================================
 // Factory Functions

package/dist/types/cli.d.ts

@@ -70,6 +70,8 @@ export type GenerateCommandArgs = BaseCommandArgs & CliToolRoutingFlags & CliCla
     context?: string;
     /** Disable tools */
     disableTools?: boolean;
+    /** Keep the request on the selected provider and model. */
+    disableInternalFallback?: boolean;
     /** Maximum steps for multi-turn */
     maxSteps?: number;
     /** Output file */
@@ -133,6 +135,8 @@ export type StreamCommandArgs = BaseCommandArgs & CliToolRoutingFlags & CliClass
     maxTokens?: number;
     /** Disable tools */
     disableTools?: boolean;
+    /** Keep the request on the selected provider and model. */
+    disableInternalFallback?: boolean;
     /** Enable extended thinking/reasoning */
     thinking?: boolean;
     /** Token budget for thinking */
@@ -164,6 +168,8 @@ export type BatchCommandArgs = BaseCommandArgs & CliToolRoutingFlags & CliClassi
     output?: string;
     /** Disable tools */
     disableTools?: boolean;
+    /** Keep the request on the selected provider and model. */
+    disableInternalFallback?: boolean;
 };
 /**
  * MCP command arguments - Enhanced with transport and server management

package/dist/types/loopEngine.d.ts

@@ -1,6 +1,7 @@
 import type Anthropic from "@anthropic-ai/sdk";
 import type { Span } from "@opentelemetry/api";
 import type { Tool } from "./tools.js";
+import type { GenerateStopReason } from "./generate.js";
 import type { CollectedChunkResult, NativeFunctionCall, NativeToolDeclarationsResult } from "./providers.js";
 import type { ExecutionControlDecision, ExecutionControlStepContext } from "./stream.js";
 /**
@@ -603,6 +604,12 @@ export type AgenticLoopResult<TConversation> = {
     usage: AgenticLoopUsage;
     finishReason: string;
     rawStopReason: string | undefined;
+    /**
+     * A known engine-owned termination condition, distinct from the provider's
+     * raw reason. Optional for adapters/fixtures that predate this field; the
+     * engine reports step-cap or aborted when it has observed that condition.
+     */
+    stopReason?: GenerateStopReason;
     conversation: TConversation;
     /**
      * True when the turn ended because its abort signal fired rather than

package/dist/types/providerCatalog.d.ts

@@ -91,6 +91,10 @@ export type CatalogQuirks = {
      *  without it once tools are in play). ConfiguredOpenAICompatProvider
      *  turns on the replay; every other provider leaves the field off. */
     replayReasoningContent?: boolean;
+    /** The endpoint accepts auto/none/named tool choices but not required.
+     * Reject that explicit caller intent with nonempty tools before sending;
+     * never silently downgrade it to auto. Omitted preserves existing behavior. */
+    rejectRequiredToolChoice?: boolean;
     /** Vendor's chat-completions endpoint authenticates with a vendor-specific
      *  header instead of the OpenAI-standard `Authorization: Bearer <key>`.
      *  "x-api-key": send `X-Api-Key: <key>` and omit Authorization entirely —
@@ -101,7 +105,9 @@ export type CatalogQuirks = {
      *  inherited Bearer default. */
     authHeaderStyle?: "x-api-key";
 };
-export type CatalogBillingPolicy = "free-tier" | "free-with-card" | "no-free-tier";
+/** Promotional allowance is conditional; setup text must describe eligibility,
+ * activation and expiry without implying current account entitlement. */
+export type CatalogBillingPolicy = "free-tier" | "free-with-card" | "no-free-tier" | "promotional-credit";
 export type CatalogSetup = {
     url: string;
     apiKeyFormat: string | null;
@@ -122,6 +128,9 @@ export type CatalogProbeEvidence = {
     method?: string;
 };
 export type CatalogEvidence = {
+    /** Historical dated evidence. Its presence does not reverify an account
+     * roster or live execution; the authoring admission command reports those
+     * states separately without changing existing catalog records. */
     rosterVerified: CatalogProbeEvidence;
     authProbe?: CatalogProbeEvidence;
     billingProbe?: CatalogProbeEvidence;
@@ -129,6 +138,8 @@ export type CatalogEvidence = {
         date: string;
         result: string;
     } | null;
+    /** Introduction PR identity, or PENDING_PR during local source authoring.
+     * A string/URL alone is not proof of PR association, merge or release. */
     addedInPR: string;
 };
 export type CatalogCapabilities = {
@@ -198,7 +209,10 @@ export type ProviderCatalogJson = {
          *  registryDefaultModel is MISTRAL_LARGE_LATEST while its defaultModel
          *  is not). Must be a models.catalog key (validated). */
         registryDefaultModel?: string;
+        /** Source-supported positive safe integer model ceiling; never a zero
+         * placeholder. This does not change caller maxTokens: 0 semantics. */
         defaultContextWindow: number;
+        /** Source-supported positive safe integer output ceiling. */
         defaultMaxOutputTokens: number;
         catalog: Record<string, CatalogModelSpec>;
         /** Ordered curated subset of `catalog` keys for wizard/choice surfaces

package/dist/types/providerCatalog.generated.d.ts

@@ -1,2 +1,2 @@
-export type CatalogProviderName = "a2agent" | "above-dev" | "ai21" | "aiand" | "aionlabs" | "ambient" | "api-route" | "arcee" | "atlas-cloud" | "avian-io" | "baidu-qianfan" | "baseten" | "bee-heossi" | "byteplus-modelark" | "bytez" | "cerebras" | "charm-hyper" | "chutes" | "cloudflare" | "crusoe" | "dashscope" | "deepinfra" | "deepseek" | "empiriolabs" | "featherless-ai" | "fireworks" | "friendli" | "gmicloud" | "gradientai" | "groq" | "hetzner-inference" | "huggingface" | "inception-labs" | "inceptron" | "inco" | "inference-net" | "io-intelligence" | "koscompute" | "lemonfox-ai" | "lilac" | "llmtech" | "mancer" | "meta-model-api" | "minimax" | "mistral" | "moark" | "modelscope" | "moonshot-ai" | "morph" | "nebius" | "neuralwatt" | "novita" | "ovhcloud" | "parasail" | "pareto-inference" | "perplexity" | "poolside" | "prime-intellect" | "reka" | "sakana-ai" | "sambanova" | "sarvam" | "scaleway" | "siliconflow" | "stackit" | "stepfun" | "subconscious" | "synthetic" | "telnyx" | "thinking-machines" | "tinfoil" | "together-ai" | "umans-ai" | "upstage" | "venice-ai" | "vispark" | "vultr-inference" | "wafer" | "wandb-inference" | "xai" | "z-ai";
-export type CatalogCredentialKey = "a2agent" | "aboveDev" | "ai21" | "aiand" | "aionlabs" | "ambient" | "apiRoute" | "arcee" | "atlasCloud" | "avianIo" | "baiduQianfan" | "baseten" | "beeHeossi" | "byteplusModelark" | "bytez" | "cerebras" | "charmHyper" | "chutes" | "cloudflare" | "crusoe" | "dashscope" | "deepinfra" | "deepseek" | "empiriolabs" | "featherlessAi" | "fireworks" | "friendli" | "gmicloud" | "gradientai" | "groq" | "hetznerInference" | "huggingFace" | "inceptionLabs" | "inceptron" | "inco" | "inferenceNet" | "ioIntelligence" | "koscompute" | "lemonfoxAi" | "lilac" | "llmtech" | "mancer" | "metaModelApi" | "minimax" | "mistral" | "moark" | "modelscope" | "moonshotAi" | "morph" | "nebius" | "neuralwatt" | "novita" | "ovhcloud" | "parasail" | "paretoInference" | "perplexity" | "poolside" | "primeIntellect" | "reka" | "sakanaAi" | "sambanova" | "sarvam" | "scaleway" | "siliconflow" | "stackit" | "stepfun" | "subconscious" | "synthetic" | "telnyx" | "thinkingMachines" | "tinfoil" | "together" | "umansAi" | "upstage" | "veniceAi" | "vispark" | "vultrInference" | "wafer" | "wandbInference" | "xai" | "zAi";
+export type CatalogProviderName = "a2agent" | "abliteration" | "above-dev" | "ai21" | "aiand" | "aihubmix" | "aionlabs" | "ambient" | "api-route" | "arcee" | "atlas-cloud" | "avian-io" | "baidu-qianfan" | "baseten" | "bee-heossi" | "byteplus-modelark" | "bytez" | "cerebras" | "charm-hyper" | "chutes" | "cloudflare" | "crusoe" | "dashscope" | "deepinfra" | "deepseek" | "empiriolabs" | "featherless-ai" | "fireworks" | "friendli" | "gmicloud" | "gradientai" | "groq" | "hetzner-inference" | "huggingface" | "inception-labs" | "inceptron" | "inco" | "inference-net" | "io-intelligence" | "koscompute" | "lemonfox-ai" | "lilac" | "llmtech" | "mancer" | "meta-model-api" | "minimax" | "mistral" | "moark" | "modelscope" | "moonshot-ai" | "morph" | "naver-clova-studio" | "nebius" | "neuralwatt" | "novita" | "ovhcloud" | "parasail" | "pareto-inference" | "perplexity" | "poolside" | "prime-intellect" | "reka" | "sakana-ai" | "sambanova" | "sarvam" | "scaleway" | "siliconflow" | "stackit" | "stepfun" | "subconscious" | "synthetic" | "telnyx" | "thinking-machines" | "tinfoil" | "together-ai" | "umans-ai" | "upstage" | "venice-ai" | "vispark" | "vultr-inference" | "wafer" | "wandb-inference" | "xai" | "z-ai";
+export type CatalogCredentialKey = "a2agent" | "abliteration" | "aboveDev" | "ai21" | "aiand" | "aihubmix" | "aionlabs" | "ambient" | "apiRoute" | "arcee" | "atlasCloud" | "avianIo" | "baiduQianfan" | "baseten" | "beeHeossi" | "byteplusModelark" | "bytez" | "cerebras" | "charmHyper" | "chutes" | "cloudflare" | "crusoe" | "dashscope" | "deepinfra" | "deepseek" | "empiriolabs" | "featherlessAi" | "fireworks" | "friendli" | "gmicloud" | "gradientai" | "groq" | "hetznerInference" | "huggingFace" | "inceptionLabs" | "inceptron" | "inco" | "inferenceNet" | "ioIntelligence" | "koscompute" | "lemonfoxAi" | "lilac" | "llmtech" | "mancer" | "metaModelApi" | "minimax" | "mistral" | "moark" | "modelscope" | "moonshotAi" | "morph" | "naverClovaStudio" | "nebius" | "neuralwatt" | "novita" | "ovhcloud" | "parasail" | "paretoInference" | "perplexity" | "poolside" | "primeIntellect" | "reka" | "sakanaAi" | "sambanova" | "sarvam" | "scaleway" | "siliconflow" | "stackit" | "stepfun" | "subconscious" | "synthetic" | "telnyx" | "thinkingMachines" | "tinfoil" | "together" | "umansAi" | "upstage" | "veniceAi" | "vispark" | "vultrInference" | "wafer" | "wandbInference" | "xai" | "zAi";

package/dist/types/providers.d.ts

@@ -196,6 +196,10 @@ export type NeurolinkCredentials = {
         apiKey?: string;
         baseURL?: string;
     };
+    abliteration?: {
+        apiKey?: string;
+        baseURL?: string;
+    };
     aboveDev?: {
         apiKey?: string;
         baseURL?: string;
@@ -208,6 +212,10 @@ export type NeurolinkCredentials = {
         apiKey?: string;
         baseURL?: string;
     };
+    aihubmix?: {
+        apiKey?: string;
+        baseURL?: string;
+    };
     aionlabs?: {
         apiKey?: string;
         baseURL?: string;
@@ -389,6 +397,10 @@ export type NeurolinkCredentials = {
         apiKey?: string;
         baseURL?: string;
     };
+    naverClovaStudio?: {
+        apiKey?: string;
+        baseURL?: string;
+    };
     nebius?: {
         apiKey?: string;
         baseURL?: string;
@@ -1126,6 +1138,9 @@ export type OpenAICompatCatalogEntry = {
     /** See CatalogQuirks.replayReasoningContent — a vendor that wants each
      *  assistant turn's `reasoning_content` sent back on later requests. */
     replayReasoningContent?: boolean;
+    /** See CatalogQuirks.rejectRequiredToolChoice. Applied only to a nonempty
+     * tools request that explicitly requires a tool; no silent auto downgrade. */
+    rejectRequiredToolChoice?: boolean;
     /** See CatalogQuirks.authHeaderStyle — a vendor whose chat-completions
      *  endpoint authenticates via `X-Api-Key` instead of the inherited
      *  `Authorization: Bearer` default. */

package/dist/types/safeFetch.d.ts

@@ -19,6 +19,6 @@ export type SafeDownloadOptions = {
     label: string;
     /** Optional abort signal for caller-driven cancellation. */
     signal?: AbortSignal;
-    /** Optional per-call request timeout (ms). Default: 60_000. */
+    /** Optional HTTP transfer timeout (ms), covering headers and body after URL validation. Default: 60_000. */
     timeoutMs?: number;
 };

package/dist/utils/htmlEntities.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Decode a caller's supported HTML text references exactly once.
+ *
+ * Replacement scans the original string: a decoded ampersand is never
+ * reinterpreted as the beginning of another reference. Unknown references
+ * stay literal. This is text conversion, not HTML output sanitization.
+ */
+export declare function decodeHtmlTextEntitiesOnce(value: string, entities: Readonly<Record<string, string>>, decodeDecimalReferences?: boolean): string;

package/dist/utils/htmlEntities.js

@@ -0,0 +1,29 @@
+/**
+ * Decode a caller's supported HTML text references exactly once.
+ *
+ * Replacement scans the original string: a decoded ampersand is never
+ * reinterpreted as the beginning of another reference. Unknown references
+ * stay literal. This is text conversion, not HTML output sanitization.
+ */
+export function decodeHtmlTextEntitiesOnce(value, entities, decodeDecimalReferences = false) {
+    return value.replace(/&([a-z]+|#\d+);/gi, (match, body) => {
+        const reference = body.toLowerCase();
+        const decoded = Object.hasOwn(entities, reference)
+            ? entities[reference]
+            : undefined;
+        if (typeof decoded === "string") {
+            return decoded;
+        }
+        if (!decodeDecimalReferences || !reference.startsWith("#")) {
+            return match;
+        }
+        const codePoint = Number(reference.slice(1));
+        if (!Number.isInteger(codePoint) ||
+            codePoint <= 0 ||
+            codePoint > 0x10ffff ||
+            (codePoint >= 0xd800 && codePoint <= 0xdfff)) {
+            return match;
+        }
+        return String.fromCodePoint(codePoint);
+    });
+}

package/dist/utils/safeFetch.js

@@ -140,14 +140,23 @@ export async function safeDownload(url, options) {
     const composedSignal = options.signal
         ? AbortSignal.any([options.signal, timeoutCtrl.signal])
         : timeoutCtrl.signal;
-    let response;
     try {
-        response = await undiciFetch(validatedUrl, {
+        const response = await undiciFetch(validatedUrl, {
             method: "GET",
             signal: composedSignal,
             redirect: "manual", // a 3xx → private-IP redirect would bypass the guard
             dispatcher,
         });
+        // fetch resolves at the headers. Keep the same deadline and abort signal
+        // active while the bounded reader drains the response body as well.
+        return await readDownloadResponse(response, url, options);
+    }
+    catch (error) {
+        // A status/size rejection may happen before the body is consumed. Stop
+        // that request so a pinned agent can close and a shared proxy agent does
+        // not retain an unused response stream.
+        timeoutCtrl.abort();
+        throw error;
     }
     finally {
         clearTimeout(timeoutId);
@@ -157,5 +166,4 @@ export async function safeDownload(url, options) {
             dispatcher.close().catch(() => undefined);
         }
     }
-    return readDownloadResponse(response, url, options);
 }