@juspay/neurolink 12.9.2 → 12.9.4

package/dist/providers/catalog/cloudflare.json

@@ -47,7 +47,7 @@
                 "contextWindow": 24000,
                 "vision": false,
                 "status": "production",
-                "description": "Llama 3.2 11B Vision Instruct — gated: Cloudflare returns 403 until the model's Community License is accepted once on the account, so it is unusable here and its vision flag is false despite being a vision model"
+                "description": "Llama 3.2 11B Vision Instruct — Meta Community License accepted on the account 2026-09-02, but Cloudflare's OpenAI-compatible endpoint accepts no image input for it: an image content part is rejected (400) and a top-level image is ignored ('There is no image'). The model reads images only through the native /ai/run prompt+image shape, which this OpenAI-compatible provider does not speak, so vision stays false here"
             },
             "@cf/mistral/mistral-7b-instruct-v0.2": {
                 "enumMember": "MISTRAL_7B_INSTRUCT_V0_2",
@@ -114,8 +114,8 @@
             "method": "real chat call per id against the live account"
         },
         "liveMatrix": {
-            "date": "2026-08-30",
-            "result": "Live tool round-trip verified on @cf/meta/llama-3.1-8b-instruct-fast, both non-streaming and streaming, once messageContentFormat normalization was applied; before it the follow-up turn was rejected with HTTP 400 (content sent as array/null). Of the three ids that failed, only two are actually gone: mistral-7b-instruct-v0.2 ('No such model') and qwen1.5-14b-chat-awq ('deprecated on 2025-10-01'). llama-3.2-11b-vision-instruct is alive but gated behind a one-time Community License acceptance on the account, so it answers 403 and is left production with vision false rather than retired."
+            "date": "2026-09-02",
+            "result": "Live tool round-trip verified on @cf/meta/llama-3.1-8b-instruct-fast, both non-streaming and streaming, once messageContentFormat normalization was applied; before it the follow-up turn was rejected with HTTP 400 (content sent as array/null). Of the three ids that failed, only two are actually gone: mistral-7b-instruct-v0.2 ('No such model') and qwen1.5-14b-chat-awq ('deprecated on 2025-10-01'). llama-3.2-11b-vision-instruct is alive but gated behind a one-time Community License acceptance on the account, so it answers 403 and is left production with vision false rather than retired. Update 2026-09-02: the Community License was accepted on the account; plain chat on llama-3.2-11b-vision-instruct now returns 200 on both endpoints, and the native /ai/run prompt+image call describes a 64x64 test image correctly. The OpenAI-compatible endpoint still cannot carry an image (content-part array → 400, top-level image ignored), so the vision flag remains false for this provider."
         },
         "addedInPR": "https://github.com/juspay/neurolink/pull/1587"
     },

package/dist/proxy/accountLedger.d.ts

@@ -29,10 +29,13 @@ import type { CliAccountUsageTotals } from "../types/index.js";
 /** UTC date stamp of the log file the totals cover. */
 export declare function currentUsageDate(now?: Date): string;
 /**
- * Token and cost totals for one UTC day, keyed by bare account label.
+ * Token and cost totals for one UTC day, keyed by provider-qualified account
+ * key ("anthropic:<label>" / "codex:<label>").
  *
- * Only Anthropic-pool rows are attributed, so a Codex account sharing a label
- * with an Anthropic one cannot contribute its tokens to the wrong row.
+ * Both engines' rows are attributed, each under its own key, so a Codex login
+ * sharing an email with an Anthropic one contributes to its own row and never
+ * to the other's. Keying by bare label used to force a choice between merging
+ * them and dropping Codex outright; it dropped Codex.
  */
 export declare function readAccountUsage(date?: string): Promise<Map<string, CliAccountUsageTotals>>;
 /** Drop all cached cursors. Exported for tests, which vary HOME per case. */

package/dist/proxy/accountLedger.js

@@ -33,9 +33,29 @@ const REQUEST_FILE_PATTERN = /^proxy-\d{4}-\d{2}-\d{2}\.jsonl$/;
 /**
  * Account types written by the Anthropic pool. The request log is shared with
  * the Codex engine, and an operator can use the same email for both, so rows
- * must be filtered by engine before being attributed to an Anthropic account.
+ * are attributed by provider-qualified key, never by bare label.
  */
 const ANTHROPIC_ACCOUNT_TYPES = new Set(["oauth", "api_key"]);
+const CODEX_ACCOUNT_TYPE = "codex-oauth";
+/**
+ * The key a log row is attributed under. Current builds write `accountKey`;
+ * rows from before that field existed carry only the label and the engine's
+ * account type, which is enough to rebuild it — the two engines never share a
+ * type string.
+ */
+function ledgerAccountKey(record, account) {
+    if (typeof record.accountKey === "string" && record.accountKey.length > 0) {
+        return record.accountKey;
+    }
+    const type = typeof record.accountType === "string" ? record.accountType : "";
+    if (ANTHROPIC_ACCOUNT_TYPES.has(type)) {
+        return `anthropic:${account.trim().toLowerCase()}`;
+    }
+    if (type === CODEX_ACCOUNT_TYPE) {
+        return `codex:${account}`;
+    }
+    return account;
+}
 const cursors = new Map();
 function getLogsDir() {
     return join(homedir(), ".neurolink", "logs");
@@ -134,9 +154,11 @@ async function advanceCursor(fileName, cursor) {
         // on the triple means two distinct calls that collide on id but differ in
         // account or model are still counted separately; a true re-log of the same
         // request keeps the same triple and merges.
-        const entryKey = `${requestId}\u0000${account}\u0000${typeof record.model === "string" ? record.model : ""}`;
+        const accountKey = ledgerAccountKey(record, account);
+        const entryKey = `${requestId}\u0000${accountKey}\u0000${typeof record.model === "string" ? record.model : ""}`;
         const next = {
             account,
+            accountKey,
             accountType: typeof record.accountType === "string" ? record.accountType : "",
             model: typeof record.model === "string" ? record.model : "",
             provider: typeof record.provider === "string" ? record.provider : undefined,
@@ -254,10 +276,13 @@ function emptyTotals() {
     };
 }
 /**
- * Token and cost totals for one UTC day, keyed by bare account label.
+ * Token and cost totals for one UTC day, keyed by provider-qualified account
+ * key ("anthropic:<label>" / "codex:<label>").
  *
- * Only Anthropic-pool rows are attributed, so a Codex account sharing a label
- * with an Anthropic one cannot contribute its tokens to the wrong row.
+ * Both engines' rows are attributed, each under its own key, so a Codex login
+ * sharing an email with an Anthropic one contributes to its own row and never
+ * to the other's. Keying by bare label used to force a choice between merging
+ * them and dropping Codex outright; it dropped Codex.
  */
 export async function readAccountUsage(date = currentUsageDate()) {
     const fileName = `proxy-${date}.jsonl`;
@@ -281,10 +306,12 @@ export async function readAccountUsage(date = currentUsageDate()) {
     const totals = new Map();
     const unpriced = new Map();
     for (const entry of cursor.entries.values()) {
-        if (!ANTHROPIC_ACCOUNT_TYPES.has(entry.accountType)) {
+        if (!ANTHROPIC_ACCOUNT_TYPES.has(entry.accountType) &&
+            entry.accountType !== CODEX_ACCOUNT_TYPE) {
+            // Translation and internal rows are proxy plumbing, not a login's spend.
             continue;
         }
-        const row = totals.get(entry.account) ?? emptyTotals();
+        const row = totals.get(entry.accountKey) ?? emptyTotals();
         row.requests += 1;
         row.inputTokens += entry.inputTokens;
         row.outputTokens += entry.outputTokens;
@@ -318,12 +345,12 @@ export async function readAccountUsage(date = currentUsageDate()) {
             }
             else {
                 row.unpricedRequests += 1;
-                const seen = unpriced.get(entry.account) ?? new Set();
+                const seen = unpriced.get(entry.accountKey) ?? new Set();
                 seen.add(entry.model);
-                unpriced.set(entry.account, seen);
+                unpriced.set(entry.accountKey, seen);
             }
         }
-        totals.set(entry.account, row);
+        totals.set(entry.accountKey, row);
     }
     for (const [account, row] of totals) {
         row.costUsd = Number(row.costUsd.toFixed(6));

package/dist/proxy/providerTransportCoordinator.d.ts

@@ -5,10 +5,13 @@ export declare class ProviderTransportCoordinator {
     private backoffUntil;
     private lastErrorCode;
     private lastTransportScope;
+    /** Whether the failure that degraded the transport happened before any
+     *  request byte was sent. Waiters use it to pick their retry budget. */
+    private lastFailureConnectPhase;
     private probe;
     acquire(signal?: AbortSignal): Promise<ProxyProviderTransportPermit>;
     reportSuccess(permit: ProxyProviderTransportPermit): void;
-    reportTransportFailure(errorCode: string | undefined, transportScope: "shared_provider_transport" | "connection_transport", permit: ProxyProviderTransportPermit): void;
+    reportTransportFailure(errorCode: string | undefined, transportScope: "shared_provider_transport" | "connection_transport", permit: ProxyProviderTransportPermit, connectPhase?: boolean): void;
     reportProbeAbandoned(permit: ProxyProviderTransportPermit): void;
     clear(): void;
     private wait;

package/dist/proxy/providerTransportCoordinator.js

@@ -7,6 +7,9 @@ export class ProviderTransportCoordinator {
     backoffUntil = 0;
     lastErrorCode = null;
     lastTransportScope = "shared_provider_transport";
+    /** Whether the failure that degraded the transport happened before any
+     *  request byte was sent. Waiters use it to pick their retry budget. */
+    lastFailureConnectPhase = false;
     probe;
     async acquire(signal) {
         if (!this.degraded) {
@@ -31,6 +34,7 @@ export class ProviderTransportCoordinator {
                 allowed: false,
                 errorCode: this.lastErrorCode,
                 transportScope: this.lastTransportScope,
+                connectPhase: this.lastFailureConnectPhase,
             };
         }
         let resolveProbe;
@@ -55,12 +59,13 @@ export class ProviderTransportCoordinator {
         this.backoffUntil = 0;
         this.lastErrorCode = null;
         this.lastTransportScope = "shared_provider_transport";
+        this.lastFailureConnectPhase = false;
         if (permit.probe && this.probe?.generation === permit.generation) {
             this.probe.resolve("recovered");
             this.probe = undefined;
         }
     }
-    reportTransportFailure(errorCode, transportScope, permit) {
+    reportTransportFailure(errorCode, transportScope, permit, connectPhase = false) {
         if (!permit.allowed || permit.generation !== this.generation) {
             return;
         }
@@ -71,6 +76,7 @@ export class ProviderTransportCoordinator {
         this.backoffUntil = Date.now() + SHARED_TRANSPORT_BACKOFF_MS;
         this.lastErrorCode = errorCode ?? null;
         this.lastTransportScope = transportScope;
+        this.lastFailureConnectPhase = connectPhase;
         if (permit.probe && this.probe?.generation === permit.generation) {
             this.probe.resolve("failed");
             this.probe = undefined;
@@ -96,6 +102,7 @@ export class ProviderTransportCoordinator {
         this.backoffUntil = 0;
         this.lastErrorCode = null;
         this.lastTransportScope = "shared_provider_transport";
+        this.lastFailureConnectPhase = false;
     }
     async wait(ms, signal) {
         if (signal?.aborted) {

package/dist/server/routes/claudeProxyRoutes.d.ts

@@ -12,6 +12,7 @@
 import { buildTranslationOptions } from "../../proxy/proxyTranslationEngine.js";
 import { ProxyTracer } from "../../proxy/proxyTracer.js";
 import { isPermanentRefreshFailure } from "../../proxy/tokenRefresh.js";
+import type { ProxyAccountDirectoryOverride } from "../../types/index.js";
 import type { AccountAllowlist, AccountAdmissionLease, JsonObject, AccountCooldownPlan, AccountQuota, AccountQuotaWindow, AccountUsageFetchResult, AnthropicAttemptLogger, AnthropicAuthRetryResult, AnthropicEntitlementFailure, AnthropicInvalidRequestFailure, AnthropicLoopState, AnthropicScopedExhaustion, AnthropicNonOkResult, AnthropicSuccessResult, AnthropicUpstreamFetchResult, ClaudeFinalRequestLogger, ClaudeLoggedErrorBuilder, ClaudeRequest, ClaudeProxyRouteRuntimeOptions, ModelRouterInterface, ParsedClaudeError, ProxyAccountRoutingDecision, ProxyAccountSortMetrics, ProxyBodyCaptureLogger, ProxyLimitsRefreshResponse, ProxyQuotaCooldownUpdate, ProxyOveragePolicy, ProxyPassthroughAccount, QueuedAccountAdmission, RouteGroup, RuntimeAccountState, ServerContext, StreamTerminalOutcome } from "../../types/index.js";
 declare function tryAcquireAccountAdmission(accountKey: string, capacity: number | undefined): AccountAdmissionLease | undefined;
 declare function enqueueAccountAdmission(accountKey: string, capacity: number): QueuedAccountAdmission;
@@ -388,6 +389,20 @@ declare function reconcileEligibleAccountRuntimeState(account: ProxyPassthroughA
 export declare function getTransientSameAccountRetryDelayMs(retryNumber: number): number;
 export declare function getOverloadRotationDelayMs(attemptNumber: number): number;
 declare function describeTransportError(error: unknown): string;
+/**
+ * Whether a transport failure provably happened while connecting, before any
+ * byte of the request left the process.
+ *
+ * Node tags its connect errors with `syscall: "connect"`; with happy-eyeballs
+ * enabled (the default) the error is an AggregateError whose every entry is
+ * one such attempt, and undici wraps either as `fetch failed` with the
+ * original as `cause`. The code alone cannot make this call: an `ETIMEDOUT`
+ * from the connect timer and an `ETIMEDOUT` from a socket that went quiet
+ * after dispatch look identical by code, and only the first is safe to
+ * retry. Both proxies behind one lossy Wi-Fi uplink returned 116 terminal
+ * 502s in a day on exactly that ambiguity.
+ */
+declare function isConnectPhaseNetworkError(error: unknown): boolean;
 /**
  * Determine whether a POST can be retried without risking duplicate provider
  * work. Only failures that prove connection establishment did not complete are
@@ -467,7 +482,11 @@ export declare const __testHooks: {
     refreshAccountLimits: typeof refreshAccountLimits;
     applyAccountUsageResult: typeof applyAccountUsageResult;
     clearLimitsRefreshStateForTests: () => void;
+    setAccountDirectoryForTests: (override: ProxyAccountDirectoryOverride | null) => void;
     isRetryableNetworkError: typeof isRetryableNetworkError;
+    isConnectPhaseNetworkError: typeof isConnectPhaseNetworkError;
+    MAX_CONNECT_PHASE_SAME_ACCOUNT_RETRIES: number;
+    clearProviderTransportCoordinatorForTests: () => void;
     isPermanentRefreshFailure: typeof isPermanentRefreshFailure;
     getStreamFailureDetails: typeof getStreamFailureDetails;
     trackUpstreamReadableStream: typeof trackUpstreamReadableStream;