@juspay/neurolink 13.8.17 → 13.8.19

package/dist/server/middleware/rateLimit.js

@@ -2,6 +2,7 @@
  * Rate Limiting Middleware
  * Provides configurable rate limiting for server adapters
  */
+import { logger } from "../../utils/logger.js";
 import { RateLimitError as ServerRateLimitError } from "../errors.js";
 /**
  * In-memory rate limit store
@@ -86,6 +87,9 @@ export function createRateLimitMiddleware(config) {
         excludePaths: skipPaths,
         handler: async (ctx, next) => {
             const key = keyGenerator(ctx);
+            if (!key) {
+                return next(); // Nothing to attribute the request to: see defaultKeyGenerator.
+            }
             const { count, resetAt } = await store.increment(key, windowMs);
             // Set rate limit headers in responseHeaders (adapters read from here)
             ctx.responseHeaders = ctx.responseHeaders || {};
@@ -107,12 +111,27 @@ export function createRateLimitMiddleware(config) {
     };
 }
 /**
- * Default key generator using IP address
+ * Default key: the TCP peer the adapter recorded on the context. Never a
+ * header, which the client writes: keyed on `X-Forwarded-For`, one shared
+ * bucket served every direct client and a rotating header escaped the limit.
+ * Behind a reverse proxy, pass a `keyGenerator` that reads the proxy's header
+ * (see `resolveClientAddress`). An empty key means "do not count".
  */
 function defaultKeyGenerator(ctx) {
-    return (ctx.headers["x-forwarded-for"]?.split(",")[0].trim() ||
-        ctx.headers["x-real-ip"] ||
-        "unknown");
+    const address = ctx.remoteAddress?.trim();
+    if (!address) {
+        warnNoAddressOnce();
+        return "";
+    }
+    return address;
+}
+let warnedNoAddress = false;
+function warnNoAddressOnce() {
+    if (warnedNoAddress) {
+        return;
+    }
+    warnedNoAddress = true;
+    logger.alwaysStderr("[rateLimit] A request carried no peer address (ctx.remoteAddress), so the rate limiter let it through uncounted; pass a keyGenerator to limit by another key.");
 }
 /**
  * Create a sliding window rate limiter
@@ -142,6 +161,9 @@ export function createSlidingWindowRateLimitMiddleware(config) {
         excludePaths: skipPaths,
         handler: async (ctx, next) => {
             const key = keyGenerator(ctx);
+            if (!key) {
+                return next();
+            }
             const now = Date.now();
             // Get existing timestamps and filter old ones
             let timestamps = store.get(key) || [];
@@ -201,6 +223,9 @@ export function createFixedWindowRateLimitMiddleware(config, store) {
         excludePaths: skipPaths,
         handler: async (ctx, next) => {
             const key = keyGenerator(ctx);
+            if (!key) {
+                return next();
+            }
             const { count, resetAt } = await rateLimitStore.increment(key, windowMs);
             // Set rate limit headers in responseHeaders (adapters read from here)
             ctx.responseHeaders = ctx.responseHeaders || {};

package/dist/server/routes/agentRoutes.js

@@ -29,7 +29,13 @@ async function resolveRequestToolFilter(ctx, requestedTools) {
     return undefined;
 }
 import { AgentInputError, resolveAgentInput } from "../utils/agentInput.js";
+import { shapeRouteError } from "../utils/clientError.js";
 import { createStreamRedactor } from "../utils/redaction.js";
+/** The route's error response for an exception: a fixed message, the detail logged. */
+function agentFailure(ctx, error, code = "EXECUTION_FAILED") {
+    const shaped = shapeRouteError("agentRoutes", ctx.requestId, error);
+    return createError(shaped.status === 500 ? code : shaped.code, shaped.message, undefined, ctx.requestId, shaped.status);
+}
 import { AgentExecuteRequestSchema, createErrorResponse as createError, EmbedManyRequestSchema, EmbedRequestSchema, SkillCreateRequestSchema, SkillUpdateRequestSchema, validateRequest, } from "../utils/validation.js";
 /**
  * Resolve the skills manager from the server's NeuroLink instance, or a
@@ -244,6 +250,9 @@ export function createAgentRoutes(basePath = "/api", options) {
                             return input;
                         }
                         const requestToolFilter = await resolveRequestToolFilter(ctx, request.tools);
+                        // The adapter's signal: the client went away, or the request
+                        // ran past the server's timeout. Either stops the generation
+                        // instead of leaving it running for nobody.
                         const result = await ctx.neurolink.generate({
                             input,
                             provider: request.provider,
@@ -252,6 +261,7 @@ export function createAgentRoutes(basePath = "/api", options) {
                             temperature: request.temperature,
                             maxTokens: request.maxTokens,
                             ...(requestToolFilter ? { toolFilter: requestToolFilter } : {}),
+                            ...(ctx.abortSignal ? { abortSignal: ctx.abortSignal } : {}),
                             context: callerContext(ctx, request),
                         });
                         // Map tool calls from SDK format to API format
@@ -295,6 +305,7 @@ export function createAgentRoutes(basePath = "/api", options) {
                         temperature: request.temperature,
                         maxTokens: request.maxTokens,
                         ...(streamToolFilter ? { toolFilter: streamToolFilter } : {}),
+                        ...(ctx.abortSignal ? { abortSignal: ctx.abortSignal } : {}),
                         context: callerContext(ctx, request),
                     });
                     // Create redactor (no-op if redaction is not enabled)
@@ -377,9 +388,7 @@ export function createAgentRoutes(basePath = "/api", options) {
                         });
                     }
                     catch (error) {
-                        return createError("EXECUTION_FAILED", error instanceof Error
-                            ? error.message
-                            : "Embedding generation failed", undefined, ctx.requestId);
+                        return agentFailure(ctx, error);
                     }
                 },
                 description: "Generate embedding for a single text",
@@ -418,9 +427,7 @@ export function createAgentRoutes(basePath = "/api", options) {
                         });
                     }
                     catch (error) {
-                        return createError("EXECUTION_FAILED", error instanceof Error
-                            ? error.message
-                            : "Batch embedding generation failed", undefined, ctx.requestId);
+                        return agentFailure(ctx, error);
                     }
                 },
                 description: "Generate embeddings for multiple texts in a batch",
@@ -439,7 +446,7 @@ export function createAgentRoutes(basePath = "/api", options) {
                         return { skills, count: skills.length };
                     }
                     catch (error) {
-                        return createError("EXECUTION_FAILED", error instanceof Error ? error.message : "Skills listing failed", undefined, ctx.requestId);
+                        return agentFailure(ctx, error);
                     }
                 },
                 description: "List active skills (index only — no instructions). Optional ?scopeId= filter.",
@@ -461,7 +468,7 @@ export function createAgentRoutes(basePath = "/api", options) {
                         return skill;
                     }
                     catch (error) {
-                        return createError("EXECUTION_FAILED", error instanceof Error ? error.message : "Skill lookup failed", undefined, ctx.requestId);
+                        return agentFailure(ctx, error);
                     }
                 },
                 description: "Fetch one skill (by id or exact name) with instructions",
@@ -490,7 +497,7 @@ export function createAgentRoutes(basePath = "/api", options) {
                         return result;
                     }
                     catch (error) {
-                        return createError("EXECUTION_FAILED", error instanceof Error ? error.message : "Skill create failed", undefined, ctx.requestId);
+                        return agentFailure(ctx, error);
                     }
                 },
                 description: "Create a skill (routed through the host's onMutationRequest gate when configured)",
@@ -520,8 +527,12 @@ export function createAgentRoutes(basePath = "/api", options) {
                         return result;
                     }
                     catch (error) {
+                        // "not found" is this server's own wording for an unknown id, so
+                        // it may be said; anything else is reduced to its category.
                         const message = error instanceof Error ? error.message : "Skill update failed";
-                        return createError(message.includes("not found") ? "NOT_FOUND" : "EXECUTION_FAILED", message, undefined, ctx.requestId);
+                        return message.includes("not found")
+                            ? createError("NOT_FOUND", `Skill "${ctx.params.id}" not found`, undefined, ctx.requestId)
+                            : agentFailure(ctx, error);
                     }
                 },
                 description: "Update a skill (patch semantics; version is bumped)",
@@ -546,7 +557,9 @@ export function createAgentRoutes(basePath = "/api", options) {
                     }
                     catch (error) {
                         const message = error instanceof Error ? error.message : "Skill delete failed";
-                        return createError(message.includes("not found") ? "NOT_FOUND" : "EXECUTION_FAILED", message, undefined, ctx.requestId);
+                        return message.includes("not found")
+                            ? createError("NOT_FOUND", `Skill "${ctx.params.id}" not found`, undefined, ctx.requestId)
+                            : agentFailure(ctx, error);
                     }
                 },
                 description: "Soft-delete (deprecate) a skill",

package/dist/server/routes/claudeProxyRoutes.d.ts

@@ -385,6 +385,7 @@ declare function handleAnthropicNonOkResponse(args: {
     } | null;
     entitlementFailure: AnthropicEntitlementFailure | null;
     allowConfiguredModelFallback?: boolean;
+    clientSuppliedBetaForwarded?: boolean;
 }): Promise<AnthropicNonOkResult>;
 /**
  * Detect Anthropic's anti-abuse / request-construction 429.