@juspay/neurolink 9.48.1 → 9.48.3

package/CHANGELOG.md

@@ -1,3 +1,15 @@
+## [9.48.3](https://github.com/juspay/neurolink/compare/v9.48.2...v9.48.3) (2026-04-08)
+
+### Bug Fixes
+
+- **(ci):** upgrade to npm 11 for native OIDC publish support ([e25fedb](https://github.com/juspay/neurolink/commit/e25fedb74845322fc44509ebf076834d1a02abfd))
+
+## [9.48.2](https://github.com/juspay/neurolink/compare/v9.48.1...v9.48.2) (2026-04-08)
+
+### Bug Fixes
+
+- **(release):** remove npm downgrade that breaks OIDC token persistence ([0ba4e22](https://github.com/juspay/neurolink/commit/0ba4e223af87e8f1dde31f2eb1d425ce4da3e985))
+
 ## [9.48.1](https://github.com/juspay/neurolink/compare/v9.48.0...v9.48.1) (2026-04-06)
 
 ### Bug Fixes

package/dist/types/index.d.ts

@@ -16,7 +16,7 @@ export type { BatchProcessingSummary, ExcelWorksheet, FailedFileInfo, FileInfo,
 export { PROCESSOR_PRIORITIES } from "../processors/base/types.js";
 export type { ActionAWSConfig, ActionCommentResult, ActionEvaluation, ActionExecutionResult, ActionGoogleCloudConfig, ActionInputs, ActionInputValidation, ActionMultimodalInputs, ActionOutput, ActionProviderKeys, ActionThinkingConfig, ActionTokenUsage, CliAnalytics, CliEvaluation, CliResponse, CliTokenUsage, ProviderKeyMapping, } from "./actionTypes.js";
 export type { AnalyticsData, AnalyticsErrorInfo, PerformanceMetrics, StreamAnalyticsData, TokenUsage, } from "./analytics.js";
-export * from "./content.js";
+export * from "./multimodal.js";
 export type { DomainConfig, DomainConfigOptions, DomainEvaluationCriteria, DomainTemplate, DomainType, DomainValidationRule, } from "./domainTypes.js";
 export * from "./evaluation.js";
 export * from "./evaluationProviders.js";

package/dist/utils/imageProcessor.d.ts

@@ -79,6 +79,11 @@ export declare class ImageProcessor {
      */
     static processImage(image: Buffer | string, provider: string, model?: string): ProcessedImage;
 }
+/**
+ * Whitelist of valid image file extensions (lowercase, no dots).
+ * Used to validate file extensions against a known set of image formats.
+ */
+export declare const VALID_IMAGE_EXTENSIONS: string[];
 /**
  * Utility functions for image handling
  */
@@ -96,9 +101,27 @@ export declare const imageUtils: {
      */
     isBase64: (str: string) => boolean;
     /**
-     * Extract file extension from filename or URL
+     * Extract file extension from filename or URL.
+     * Strips query strings and fragments before matching so that
+     * "image.jpg?v=1" correctly returns "jpg".
+     * Returns null if no extension is found or if the extension
+     * contains non-alphanumeric characters.
      */
     getFileExtension: (filename: string) => string | null;
+    /**
+     * Validate that an extension is a recognised image format.
+     * Case-insensitive; rejects extensions with special characters.
+     */
+    isValidImageExtension: (extension: string) => boolean;
+    /**
+     * Extract and validate image file extension from a filename or URL.
+     * Returns null if the extension is missing or not a recognised image format.
+     *
+     * Security note: the last extension is used, so "malware.exe.jpg" returns
+     * "jpg". Callers should apply additional checks (e.g. content inspection)
+     * where double-extension attacks are a concern.
+     */
+    getValidatedImageExtension: (filename: string) => string | null;
     /**
      * Convert file size to human readable format
      */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@juspay/neurolink",
-  "version": "9.48.1",
+  "version": "9.48.3",
   "packageManager": "pnpm@10.15.1",
   "description": "Universal AI Development Platform with working MCP integration, multi-provider support, and professional CLI. Built-in tools operational, 58+ external MCP servers discoverable. Connect to filesystem, GitHub, database operations, and more. Build, test, and deploy AI applications with 13 providers: OpenAI, Anthropic, Google AI, AWS Bedrock, Azure, Hugging Face, Ollama, and Mistral AI.",
   "author": {