@juspay/neurolink 13.4.5 → 13.4.7

package/CHANGELOG.md

@@ -1,8 +1,8 @@
-## [13.4.5](https://github.com/juspay/neurolink/compare/v13.4.4...v13.4.5) (2026-10-18)
+## [13.4.7](https://github.com/juspay/neurolink/compare/v13.4.6...v13.4.7) (2026-10-18)
 
 ### Bug Fixes
 
-- **(xor):** send decisions to /v1/decisions with the xor-latest and xor-omni models ([5ef74c4](https://github.com/juspay/neurolink/commit/5ef74c42a8e6422641ff39743b65061c5c5c1385))
+- **(search-index):** read comment lines inside code fences as code, not headings ([45557b3](https://github.com/juspay/neurolink/commit/45557b3bef6fdcc05105883b6ac7fec2ef0bbb37))
 
 ## [11.2.3](https://github.com/juspay/neurolink/compare/v11.2.2...v11.2.3) (2026-08-19)
 

package/dist/types/livekit.d.ts

@@ -502,7 +502,7 @@ export type RealtimeVoiceAgentConfig = {
     location?: string;
     model?: string;
     voice?: string;
-    /** xai only: WebSocket base URL of the realtime endpoint. */
+    /** xai only: WebSocket base URL of the realtime endpoint. A `ws://` URL to a host other than localhost, 127.0.0.0/8 or [::1] is refused unless `XAI_REALTIME_ALLOW_INSECURE=true`, because the xAI key would cross the network unencrypted. */
     xaiBaseURL?: string;
     responseModality?: string;
     systemPrompt?: string;

package/dist/voice/livekit/config.d.ts

@@ -23,6 +23,15 @@ export declare function resolveLiveKitServerConfig(): LiveKitServerConfig;
  * `VOICE_LLM_MODEL`.
  */
 export declare function resolveBrainDefaults(): LiveKitBrainDefaults;
+/**
+ * Refuse a `ws://` URL to a host other than loopback unless
+ * `XAI_REALTIME_ALLOW_INSECURE=true`: the xAI plugin sends `XAI_API_KEY` to the
+ * URL it is given, and `ws://` sends it unencrypted. Anything else passes,
+ * including a value that is not a ws or wss URL, which is for the caller's own
+ * check. The error names the setting and the opt-in and does not repeat the
+ * value.
+ */
+export declare function requireNoCleartextCrossHost(value: string, name: string): void;
 /**
  * Resolve the realtime (speech-to-speech) voice configuration from the
  * environment.
@@ -31,7 +40,10 @@ export declare function resolveBrainDefaults(): LiveKitBrainDefaults;
  * env at all. `VOICE_REALTIME_BACKEND` picks the model family (`gemini`, the
  * default, or `xai`); `backend` here overrides it and then the environment's
  * value is not read. A non-blank `xaiBaseURL` here likewise replaces
- * `XAI_REALTIME_BASE_URL` after the same ws or wss check.
+ * `XAI_REALTIME_BASE_URL` after the same ws or wss check. Either URL is
+ * checked whatever the backend. A `ws://` URL to a host other than `localhost`,
+ * `127.0.0.0/8` or `[::1]` is refused unless `XAI_REALTIME_ALLOW_INSECURE=true`,
+ * because the xAI plugin sends `XAI_API_KEY` to it unencrypted.
  * `VOICE_LIVE_MODEL` overrides the backend's default model.
  * Vertex `project` is resolved from `VERTEX_PROJECT`, then the service-account
  * project (`GOOGLE_AUTH_BREEZE_PROJECT_ID`), then `GOOGLE_CLOUD_PROJECT_ID`;

package/dist/voice/livekit/config.js

@@ -77,6 +77,7 @@ const DEFAULT_SYSTEM_PROMPT = "You are a concise voice assistant for a merchant
 const DEFAULT_GREETING = "Briefly greet the merchant and ask how you can help with their store today.";
 const DEFAULT_LIGHTHOUSE_URL = "http://localhost:5173";
 const DEFAULT_MCP_PATH = "/ai/mcp/v2";
+const ALLOW_INSECURE_ENV = "XAI_REALTIME_ALLOW_INSECURE";
 /**
  * The backend named by `VOICE_REALTIME_BACKEND`: `gemini` or `xai`, matched
  * case-insensitively, with blank or absent meaning `gemini`. The error names the
@@ -100,20 +101,53 @@ function requireKnownBackend(value) {
     }
     throw new Error('The realtime voice backend must be "gemini" or "xai"');
 }
-function isWebSocketUrl(value) {
+function parseWebSocketUrl(value) {
     try {
-        const { protocol } = new URL(value);
-        return protocol === "ws:" || protocol === "wss:";
+        const url = new URL(value);
+        return url.protocol === "ws:" || url.protocol === "wss:" ? url : undefined;
     }
     catch {
-        return false;
+        return undefined;
     }
 }
-/** A ws or wss URL. The error names the setting and does not repeat the value. */
+/**
+ * Whether a WHATWG-parsed hostname is `localhost`, an address in `127.0.0.0/8`
+ * or `[::1]`. The parser has already lowercased the name and reduced shorthand
+ * IPv4 forms (`127.1`, `0x7f.1`) to dotted decimal, and a userinfo prefix such
+ * as `localhost@host` never reaches `hostname`, so neither can pass for a
+ * loopback host.
+ */
+function isLoopbackHost(hostname) {
+    if (hostname === "localhost" || hostname === "[::1]") {
+        return true;
+    }
+    const octets = hostname.split(".");
+    return (octets.length === 4 &&
+        octets[0] === "127" &&
+        octets.every((octet) => /^\d{1,3}$/.test(octet) && Number(octet) <= 255));
+}
+/**
+ * Refuse a `ws://` URL to a host other than loopback unless
+ * `XAI_REALTIME_ALLOW_INSECURE=true`: the xAI plugin sends `XAI_API_KEY` to the
+ * URL it is given, and `ws://` sends it unencrypted. Anything else passes,
+ * including a value that is not a ws or wss URL, which is for the caller's own
+ * check. The error names the setting and the opt-in and does not repeat the
+ * value.
+ */
+export function requireNoCleartextCrossHost(value, name) {
+    const url = parseWebSocketUrl(value);
+    if (url?.protocol === "ws:" &&
+        !isLoopbackHost(url.hostname) &&
+        readEnv(ALLOW_INSECURE_ENV, "").toLowerCase() !== "true") {
+        throw new Error(`${name} is a ws:// URL to a host other than localhost, 127.0.0.0/8 or [::1], which would send XAI_API_KEY unencrypted. Use wss://, or set ${ALLOW_INSECURE_ENV}=true to accept that`);
+    }
+}
+/** A ws or wss URL that passes `requireNoCleartextCrossHost`. The error names the setting and does not repeat the value. */
 function requireWebSocketUrl(value, name) {
-    if (!isWebSocketUrl(value)) {
+    if (parseWebSocketUrl(value) === undefined) {
         throw new Error(`${name} must be a ws:// or wss:// URL`);
     }
+    requireNoCleartextCrossHost(value, name);
     return value;
 }
 /** `XAI_REALTIME_BASE_URL`, which must be a ws or wss URL when set. */
@@ -136,7 +170,10 @@ function resolveXaiBaseUrl(override) {
  * env at all. `VOICE_REALTIME_BACKEND` picks the model family (`gemini`, the
  * default, or `xai`); `backend` here overrides it and then the environment's
  * value is not read. A non-blank `xaiBaseURL` here likewise replaces
- * `XAI_REALTIME_BASE_URL` after the same ws or wss check.
+ * `XAI_REALTIME_BASE_URL` after the same ws or wss check. Either URL is
+ * checked whatever the backend. A `ws://` URL to a host other than `localhost`,
+ * `127.0.0.0/8` or `[::1]` is refused unless `XAI_REALTIME_ALLOW_INSECURE=true`,
+ * because the xAI plugin sends `XAI_API_KEY` to it unencrypted.
  * `VOICE_LIVE_MODEL` overrides the backend's default model.
  * Vertex `project` is resolved from `VERTEX_PROJECT`, then the service-account
  * project (`GOOGLE_AUTH_BREEZE_PROJECT_ID`), then `GOOGLE_CLOUD_PROJECT_ID`;

package/dist/voice/livekit/realtimeModel.d.ts

@@ -28,6 +28,8 @@ export declare function requireXaiApiKey(): void;
  * The gemini branch builds exactly what the agent has always built: Vertex AI,
  * the configured model, transcripts of both sides, and project, location,
  * voice and modality when set. The xai branch needs `XAI_API_KEY` in the
- * environment and throws before touching the plugin when it is missing.
+ * environment and throws before touching the plugin when it is missing. It also
+ * throws before touching the plugin for a `ws://` base URL to a host other than
+ * loopback, unless `XAI_REALTIME_ALLOW_INSECURE=true`, as config resolution does.
  */
 export declare function createRealtimeLlm(cfg: RealtimeVoiceConfig): Promise<RealtimeLlm>;

package/dist/voice/livekit/realtimeModel.js

@@ -13,6 +13,7 @@
  *
  * See docs/features/livekit-voice-agent.md.
  */
+import { requireNoCleartextCrossHost } from "./config.js";
 /**
  * Fail early, naming the variable, when `XAI_API_KEY` is blank or absent.
  *
@@ -53,6 +54,11 @@ async function createGeminiRealtimeLlm(cfg) {
 }
 async function createXaiRealtimeLlm(cfg) {
     requireXaiApiKey();
+    // `cfg` can be built by hand, without `resolveRealtimeVoiceConfig`, so the
+    // key-leak check runs here as well as there.
+    if (cfg.xaiBaseURL) {
+        requireNoCleartextCrossHost(cfg.xaiBaseURL, "xaiBaseURL");
+    }
     const xai = await import("@livekit/agents-plugin-xai");
     // Keys are added only when set. The plugin spreads these options over its
     // own defaults, so a key holding `undefined` would erase the default: a
@@ -75,7 +81,9 @@ async function createXaiRealtimeLlm(cfg) {
  * The gemini branch builds exactly what the agent has always built: Vertex AI,
  * the configured model, transcripts of both sides, and project, location,
  * voice and modality when set. The xai branch needs `XAI_API_KEY` in the
- * environment and throws before touching the plugin when it is missing.
+ * environment and throws before touching the plugin when it is missing. It also
+ * throws before touching the plugin for a `ws://` base URL to a host other than
+ * loopback, unless `XAI_REALTIME_ALLOW_INSECURE=true`, as config resolution does.
  */
 export async function createRealtimeLlm(cfg) {
     switch (cfg.backend) {