@juspay/neurolink 9.68.15 → 9.68.17

package/dist/lib/providers/cloudflare.js

@@ -1,6 +1,7 @@
 import { CloudflareModels } from "../constants/enums.js";
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { createCloudflareConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
@@ -44,7 +45,7 @@ export class CloudflareProvider extends OpenAIChatCompletionsProvider {
         logger.debug("Cloudflare Workers AI Provider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {

package/dist/lib/providers/cohere.d.ts

@@ -1,27 +1,26 @@
 import type { AIProviderName } from "../constants/enums.js";
-import { BaseProvider } from "../core/baseProvider.js";
-import type { NeurolinkCredentials, StreamOptions, StreamResult, ValidationSchema } from "../types/index.js";
-import type { LanguageModel } from "../types/index.js";
+import type { NeurolinkCredentials } from "../types/index.js";
+import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
 /**
- * Cohere Provider
+ * Cohere Provider — direct HTTP, no AI SDK.
  *
- * Routes Command R / Command R+ chat completions through Cohere's OpenAI-
- * compatible endpoint. Embed v3 and Rerank v3 are top-tier for RAG but are
- * accessed via the Cohere native SDK / dedicated embedding routes (out of
- * scope for the LLM provider).
+ * Routes Command R / Command R+ chat completions through Cohere's
+ * OpenAI-compatible endpoint at /compatibility/v1. All request/stream/
+ * tool-loop orchestration lives in `OpenAIChatCompletionsProvider`; this
+ * class only declares configuration and provider-specific error mapping.
+ *
+ * Embed v3 is exposed via `embed()` / `embedMany()` backed by a native
+ * POST to /v2/embed (the compatibility path is chat-only).
  *
  * @see https://docs.cohere.com/docs/compatibility-api
+ * @see https://docs.cohere.com/reference/embed
  */
-export declare class CohereProvider extends BaseProvider {
-    private model;
-    private apiKey;
-    private baseURL;
+export declare class CohereProvider extends OpenAIChatCompletionsProvider {
     constructor(modelName?: string, sdk?: unknown, _region?: string, credentials?: NeurolinkCredentials["cohere"]);
-    protected executeStream(options: StreamOptions, _analysisSchema?: ValidationSchema): Promise<StreamResult>;
-    private executeStreamInner;
     protected getProviderName(): AIProviderName;
     protected getDefaultModel(): string;
-    protected getAISDKModel(): LanguageModel;
+    protected getFallbackModelName(): string;
+    protected getFallbackModels(): string[];
     protected formatProviderError(error: unknown): Error;
     validateConfiguration(): Promise<boolean>;
     getConfiguration(): {
@@ -46,7 +45,10 @@ export declare class CohereProvider extends BaseProvider {
     /**
      * Batch embedding via Cohere's native /v2/embed endpoint. Cohere caps at
      * 96 inputs per request; larger batches are chunked.
+     *
+     * Partial failures are not surfaced: if any chunk request fails the whole
+     * call rejects and already-embedded chunks are discarded — callers should
+     * retry the full input.
      */
     embedMany(texts: string[], modelName?: string): Promise<number[][]>;
 }
-export default CohereProvider;

package/dist/lib/providers/cohere.js

@@ -1,154 +1,62 @@
-import { createOpenAI } from "@ai-sdk/openai";
 import { CohereModels } from "../constants/enums.js";
-import { BaseProvider } from "../core/baseProvider.js";
-import { DEFAULT_MAX_STEPS } from "../core/constants.js";
-import { streamAnalyticsCollector } from "../core/streamAnalytics.js";
-import { isNeuroLink } from "../neurolink.js";
-import { createLoggingFetch } from "../utils/loggingFetch.js";
-import { tracers, ATTR, withClientStreamSpan } from "../telemetry/index.js";
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
+import { createProxyFetch } from "../proxy/proxyFetch.js";
 import { createCohereConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
-import { composeAbortSignals, createTimeoutController, TimeoutError, } from "../utils/timeout.js";
-import { emitToolEndFromStepFinish } from "../utils/toolEndEmitter.js";
-import { resolveToolChoice } from "../utils/toolChoice.js";
-import { toAnalyticsStreamResult } from "./providerTypeUtils.js";
-import { stepCountIs } from "../utils/tool.js";
-import { streamText } from "../utils/generation.js";
-/**
- * Cohere uses an OpenAI-compatible endpoint at /compatibility/v1 that
- * accepts the same chat-completions shape. Embeddings + Rerank live on
- * the native API and are not exposed through this LLM provider class
- * (use the Cohere SDK directly or the embed/rerank routes when added).
- */
+import { createTimeoutController, TimeoutError } from "../utils/timeout.js";
+import { stripTrailingSlash } from "./openaiChatCompletionsClient.js";
+import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
 const COHERE_DEFAULT_BASE_URL = "https://api.cohere.com/compatibility/v1";
 const getCohereApiKey = () => validateApiKey(createCohereConfig());
 const getDefaultCohereModel = () => getProviderModel("COHERE_MODEL", CohereModels.COMMAND_R_PLUS);
 /**
- * Cohere Provider
+ * Cohere Provider — direct HTTP, no AI SDK.
+ *
+ * Routes Command R / Command R+ chat completions through Cohere's
+ * OpenAI-compatible endpoint at /compatibility/v1. All request/stream/
+ * tool-loop orchestration lives in `OpenAIChatCompletionsProvider`; this
+ * class only declares configuration and provider-specific error mapping.
  *
- * Routes Command R / Command R+ chat completions through Cohere's OpenAI-
- * compatible endpoint. Embed v3 and Rerank v3 are top-tier for RAG but are
- * accessed via the Cohere native SDK / dedicated embedding routes (out of
- * scope for the LLM provider).
+ * Embed v3 is exposed via `embed()` / `embedMany()` backed by a native
+ * POST to /v2/embed (the compatibility path is chat-only).
  *
  * @see https://docs.cohere.com/docs/compatibility-api
+ * @see https://docs.cohere.com/reference/embed
  */
-export class CohereProvider extends BaseProvider {
-    model;
-    apiKey;
-    baseURL;
+export class CohereProvider extends OpenAIChatCompletionsProvider {
     constructor(modelName, sdk, _region, credentials) {
-        const validatedNeurolink = isNeuroLink(sdk) ? sdk : undefined;
-        super(modelName, "cohere", validatedNeurolink);
         const overrideApiKey = credentials?.apiKey?.trim();
-        this.apiKey =
-            overrideApiKey && overrideApiKey.length > 0
-                ? overrideApiKey
-                : getCohereApiKey();
-        this.baseURL =
-            credentials?.baseURL ??
-                process.env.COHERE_BASE_URL ??
-                COHERE_DEFAULT_BASE_URL;
-        const cohere = createOpenAI({
-            apiKey: this.apiKey,
-            baseURL: this.baseURL,
-            fetch: createLoggingFetch("cohere"),
-        });
-        this.model = cohere.chat(this.modelName);
+        const apiKey = overrideApiKey && overrideApiKey.length > 0
+            ? overrideApiKey
+            : getCohereApiKey();
+        const baseURL = credentials?.baseURL?.trim() ||
+            process.env.COHERE_BASE_URL?.trim() ||
+            COHERE_DEFAULT_BASE_URL;
+        super("cohere", modelName, sdk, { baseURL, apiKey });
         logger.debug("Cohere Provider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
-    async executeStream(options, _analysisSchema) {
-        // withClientStreamSpan: keeps the span open until the consumer reaches
-        // end-of-stream / error, so the recorded duration reflects the actual
-        // stream lifetime instead of just setup.
-        return withClientStreamSpan({
-            name: "neurolink.provider.stream",
-            tracer: tracers.provider,
-            attributes: {
-                [ATTR.GEN_AI_SYSTEM]: "cohere",
-                [ATTR.GEN_AI_MODEL]: this.modelName,
-                [ATTR.GEN_AI_OPERATION]: "stream",
-                [ATTR.NL_STREAM_MODE]: true,
-            },
-        }, async () => this.executeStreamInner(options), (r) => r.stream, (r, wrapped) => ({ ...r, stream: wrapped }));
-    }
-    async executeStreamInner(options) {
-        this.validateStreamOptions(options);
-        // Resolve per-call credentials first, then fall back to instance-level.
-        const perCallCreds = options.credentials?.cohere;
-        const effectiveApiKey = perCallCreds?.apiKey?.trim() || this.apiKey;
-        const effectiveBaseURL = perCallCreds?.baseURL || this.baseURL;
-        const startTime = Date.now();
-        const timeout = this.getTimeout(options);
-        const timeoutController = createTimeoutController(timeout, this.providerName, "stream");
-        try {
-            const shouldUseTools = !options.disableTools && this.supportsTools();
-            const tools = shouldUseTools
-                ? options.tools || (await this.getAllTools())
-                : {};
-            const messages = await this.buildMessagesForStream(options);
-            // When per-call credentials differ from instance, build a fresh client.
-            const hasDifferentCreds = effectiveApiKey !== this.apiKey || effectiveBaseURL !== this.baseURL;
-            const model = hasDifferentCreds
-                ? createOpenAI({
-                    apiKey: effectiveApiKey,
-                    baseURL: effectiveBaseURL,
-                    fetch: createLoggingFetch("cohere"),
-                }).chat(this.modelName)
-                : await this.getAISDKModelWithMiddleware(options);
-            const result = await streamText({
-                model,
-                messages,
-                temperature: options.temperature,
-                maxOutputTokens: options.maxTokens,
-                tools,
-                stopWhen: stepCountIs(options.maxSteps || DEFAULT_MAX_STEPS),
-                toolChoice: resolveToolChoice(options, tools, shouldUseTools),
-                abortSignal: composeAbortSignals(options.abortSignal, timeoutController?.controller.signal),
-                experimental_telemetry: this.telemetryHandler.getTelemetryConfig(options),
-                experimental_repairToolCall: this.getToolCallRepairFn(options),
-                onStepFinish: ({ toolCalls, toolResults }) => {
-                    emitToolEndFromStepFinish(this.neurolink?.getEventEmitter(), toolResults);
-                    this.handleToolExecutionStorage(toolCalls, toolResults, options, new Date()).catch((error) => {
-                        logger.warn("[CohereProvider] Failed to store tool executions", {
-                            provider: this.providerName,
-                            error: error instanceof Error ? error.message : String(error),
-                        });
-                    });
-                },
-            });
-            timeoutController?.cleanup();
-            const transformedStream = this.createTextStream(result);
-            const analyticsPromise = streamAnalyticsCollector.createAnalytics(this.providerName, this.modelName, toAnalyticsStreamResult(result), Date.now() - startTime, {
-                requestId: `cohere-stream-${Date.now()}`,
-                streamingMode: true,
-            });
-            return {
-                stream: transformedStream,
-                provider: this.providerName,
-                model: this.modelName,
-                analytics: analyticsPromise,
-                metadata: { startTime, streamId: `cohere-${Date.now()}` },
-            };
-        }
-        catch (error) {
-            timeoutController?.cleanup();
-            throw this.handleProviderError(error);
-        }
-    }
     getProviderName() {
-        return this.providerName;
+        return "cohere";
     }
     getDefaultModel() {
         return getDefaultCohereModel();
     }
-    getAISDKModel() {
-        return this.model;
+    getFallbackModelName() {
+        return CohereModels.COMMAND_R;
+    }
+    getFallbackModels() {
+        return [
+            CohereModels.COMMAND_A,
+            CohereModels.COMMAND_A_REASONING,
+            CohereModels.COMMAND_R_PLUS,
+            CohereModels.COMMAND_R,
+            CohereModels.COMMAND_R7B,
+        ];
     }
     formatProviderError(error) {
         if (error instanceof TimeoutError) {
@@ -176,14 +84,15 @@ export class CohereProvider extends BaseProvider {
         return new ProviderError(`Cohere error: ${message}`, "cohere");
     }
     async validateConfiguration() {
-        return typeof this.apiKey === "string" && this.apiKey.trim().length > 0;
+        return (typeof this.config.apiKey === "string" &&
+            this.config.apiKey.trim().length > 0);
     }
     getConfiguration() {
         return {
             provider: this.providerName,
             model: this.modelName,
             defaultModel: getDefaultCohereModel(),
-            baseURL: this.baseURL,
+            baseURL: this.config.baseURL,
         };
     }
     /**
@@ -210,45 +119,59 @@ export class CohereProvider extends BaseProvider {
     /**
      * Batch embedding via Cohere's native /v2/embed endpoint. Cohere caps at
      * 96 inputs per request; larger batches are chunked.
+     *
+     * Partial failures are not surfaced: if any chunk request fails the whole
+     * call rejects and already-embedded chunks are discarded — callers should
+     * retry the full input.
      */
     async embedMany(texts, modelName) {
         if (texts.length === 0) {
             return [];
         }
         const model = modelName ?? this.getDefaultEmbeddingModel();
-        const baseUrl = this.baseURL.replace(/\/compatibility\/v\d+\/?$/, "");
+        // Strip the compatibility suffix to reach the native API root.
+        const baseUrl = stripTrailingSlash(this.config.baseURL.replace(/\/compatibility\/v\d+\/?$/, ""));
         const url = `${baseUrl}/v2/embed`;
         const BATCH_SIZE = 96;
         const results = [];
+        const fetchImpl = createProxyFetch();
         for (let i = 0; i < texts.length; i += BATCH_SIZE) {
             const batch = texts.slice(i, i + BATCH_SIZE);
-            const response = await fetch(url, {
-                method: "POST",
-                headers: {
-                    Authorization: `Bearer ${this.apiKey}`,
-                    "Content-Type": "application/json",
-                },
-                body: JSON.stringify({
-                    model,
-                    texts: batch,
-                    input_type: "search_document",
-                    embedding_types: ["float"],
-                }),
-            });
-            if (!response.ok) {
-                const body = await response.text();
-                throw this.formatProviderError(new Error(`Cohere /v2/embed failed: ${response.status} — ${body.slice(0, 500)}`));
+            const timeoutController = createTimeoutController(30_000, this.providerName, "generate");
+            try {
+                const response = await fetchImpl(url, {
+                    method: "POST",
+                    headers: {
+                        Authorization: `Bearer ${this.config.apiKey}`,
+                        "Content-Type": "application/json",
+                    },
+                    body: JSON.stringify({
+                        model,
+                        texts: batch,
+                        input_type: "search_document",
+                        embedding_types: ["float"],
+                    }),
+                    ...(timeoutController?.controller.signal
+                        ? { signal: timeoutController.controller.signal }
+                        : {}),
+                });
+                if (!response.ok) {
+                    const body = await response.text().catch(() => "");
+                    throw this.formatProviderError(new Error(`Cohere /v2/embed failed: ${response.status} — ${body.slice(0, 500)}`));
+                }
+                const json = (await response.json());
+                const floatVecs = json.embeddings?.float ??
+                    (Array.isArray(json.embeddings) ? json.embeddings : undefined);
+                if (!floatVecs || floatVecs.length !== batch.length) {
+                    throw new ProviderError(`Cohere /v2/embed returned ${floatVecs?.length ?? 0} embeddings for ${batch.length} inputs.`, "cohere");
+                }
+                results.push(...floatVecs);
             }
-            const json = (await response.json());
-            const floatVecs = json.embeddings?.float ??
-                (Array.isArray(json.embeddings) ? json.embeddings : undefined);
-            if (!floatVecs || floatVecs.length !== batch.length) {
-                throw new ProviderError(`Cohere /v2/embed returned ${floatVecs?.length ?? 0} embeddings for ${batch.length} inputs.`, "cohere");
+            finally {
+                timeoutController?.cleanup();
             }
-            results.push(...floatVecs);
         }
         return results;
     }
 }
-export default CohereProvider;
 //# sourceMappingURL=cohere.js.map

package/dist/lib/providers/deepseek.js

@@ -1,6 +1,7 @@
 import { DeepSeekModels } from "../constants/enums.js";
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { createDeepSeekConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
@@ -55,7 +56,7 @@ export class DeepSeekProvider extends OpenAIChatCompletionsProvider {
         logger.debug("DeepSeek Provider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     // ===========================================================================

package/dist/lib/providers/fireworks.js

@@ -1,6 +1,7 @@
 import { FireworksModels } from "../constants/enums.js";
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { createFireworksConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
@@ -34,7 +35,7 @@ export class FireworksProvider extends OpenAIChatCompletionsProvider {
         logger.debug("Fireworks Provider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {

package/dist/lib/providers/groq.js

@@ -1,6 +1,7 @@
 import { GroqModels } from "../constants/enums.js";
 import { AuthenticationError, InvalidModelError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { createGroqConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
@@ -33,7 +34,7 @@ export class GroqProvider extends OpenAIChatCompletionsProvider {
         logger.debug("Groq Provider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {

package/dist/lib/providers/huggingFace.js

@@ -1,5 +1,6 @@
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { createHuggingFaceConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
@@ -33,7 +34,7 @@ export class HuggingFaceProvider extends OpenAIChatCompletionsProvider {
         logger.debug("HuggingFaceProvider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {

package/dist/lib/providers/litellm.js

@@ -3,6 +3,7 @@ import { createProxyFetch } from "../proxy/proxyFetch.js";
 import { AuthenticationError, InvalidModelError, ModelAccessDeniedError, NetworkError, ProviderError, RateLimitError, isModelAccessDeniedMessage, parseAllowedModels, } from "../types/index.js";
 import { isAbortError } from "../utils/errorHandling.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { isGemini25Model as isCanonicalGemini25Model } from "../utils/modelDetection.js";
 import { calculateCost } from "../utils/pricing.js";
 import { getProviderModel } from "../utils/providerConfig.js";
@@ -53,7 +54,7 @@ export class LiteLLMProvider extends OpenAIChatCompletionsProvider {
         logger.debug("LiteLLM Provider initialized", {
             modelName: this.modelName,
             provider: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {

package/dist/lib/providers/llamaCpp.js

@@ -1,5 +1,6 @@
 import { NetworkError, ProviderError } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
 const LLAMACPP_DEFAULT_BASE_URL = "http://localhost:8080/v1";
@@ -7,12 +8,6 @@ const LLAMACPP_PLACEHOLDER_KEY = "llamacpp";
 const getLlamaCppBaseURL = () => {
     return process.env.LLAMACPP_BASE_URL || LLAMACPP_DEFAULT_BASE_URL;
 };
-/**
- * Strip embedded `user:pass@` credentials from a URL before logging it or
- * surfacing it in a user-facing error. Preserves host/port/path so the URL
- * stays useful for diagnostics.
- */
-const redactUrlCredentials = (url) => url.replace(/\/\/[^/@]+@/, "//***@");
 /**
  * llama.cpp Provider — direct HTTP, no AI SDK.
  *

package/dist/lib/providers/lmStudio.js

@@ -1,6 +1,7 @@
 import { createProxyFetch } from "../proxy/proxyFetch.js";
 import { InvalidModelError, NetworkError, ProviderError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
 const LM_STUDIO_DEFAULT_BASE_URL = "http://localhost:1234/v1";
@@ -34,7 +35,7 @@ export class LMStudioProvider extends OpenAIChatCompletionsProvider {
         logger.debug("LM Studio Provider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {
@@ -60,7 +61,7 @@ export class LMStudioProvider extends OpenAIChatCompletionsProvider {
             message.includes("ECONNREFUSED") ||
             message.includes("Failed to fetch") ||
             message.includes("fetch failed")) {
-            return new NetworkError(`LM Studio server not reachable at ${this.config.baseURL}. ` +
+            return new NetworkError(`LM Studio server not reachable at ${redactUrlCredentials(this.config.baseURL)}. ` +
                 `Open the LM Studio app, load a model, and click "Start Server".`, "lm-studio");
         }
         if (message.includes("model_not_found") || message.includes("404")) {

package/dist/lib/providers/nvidiaNim.js

@@ -1,6 +1,7 @@
 import { NvidiaNimModels } from "../constants/enums.js";
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { createNvidiaNimConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
@@ -164,7 +165,7 @@ export class NvidiaNimProvider extends OpenAIChatCompletionsProvider {
         logger.debug("NVIDIA NIM Provider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {

package/dist/lib/providers/openAI.js

@@ -3,6 +3,7 @@ import { AIProviderName as AIProviderNameEnum } from "../constants/enums.js";
 import { createProxyFetch } from "../proxy/proxyFetch.js";
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { calculateCost } from "../utils/pricing.js";
 import { createOpenAIConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
 import { MAX_IMAGE_BYTES, readBoundedBuffer } from "../utils/sizeGuard.js";
@@ -67,7 +68,7 @@ export class OpenAIProvider extends OpenAIChatCompletionsProvider {
         logger.debug("OpenAIProvider initialized", {
             model: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     // ===========================================================================

package/dist/lib/providers/openaiCompatible.js

@@ -1,5 +1,6 @@
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
 const FALLBACK_OPENAI_COMPATIBLE_MODEL = "gpt-3.5-turbo";
@@ -42,7 +43,7 @@ export class OpenAICompatibleProvider extends OpenAIChatCompletionsProvider {
         logger.debug("OpenAI Compatible Provider initialized", {
             modelName: this.modelName,
             provider: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {
@@ -78,7 +79,7 @@ export class OpenAICompatibleProvider extends OpenAIChatCompletionsProvider {
         if (typeof errorRecord?.message === "string") {
             if (errorRecord.message.includes("ECONNREFUSED") ||
                 errorRecord.message.includes("Failed to fetch")) {
-                return new NetworkError(`OpenAI Compatible endpoint not available. Please check your OPENAI_COMPATIBLE_BASE_URL: ${this.config.baseURL}`, "openai-compatible");
+                return new NetworkError(`OpenAI Compatible endpoint not available. Please check your OPENAI_COMPATIBLE_BASE_URL: ${redactUrlCredentials(this.config.baseURL)}`, "openai-compatible");
             }
             if (errorRecord.message.includes("API_KEY_INVALID") ||
                 errorRecord.message.includes("Invalid API key") ||

package/dist/lib/providers/perplexity.js

@@ -1,6 +1,7 @@
 import { PerplexityModels } from "../constants/enums.js";
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { createPerplexityConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
@@ -33,7 +34,7 @@ export class PerplexityProvider extends OpenAIChatCompletionsProvider {
         logger.debug("Perplexity Provider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {

package/dist/lib/providers/togetherAi.js

@@ -1,6 +1,7 @@
 import { TogetherAIModels } from "../constants/enums.js";
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { createTogetherAIConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
@@ -32,7 +33,7 @@ export class TogetherAIProvider extends OpenAIChatCompletionsProvider {
         logger.debug("Together AI Provider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {

package/dist/lib/providers/xai.js

@@ -1,6 +1,7 @@
 import { XaiModels } from "../constants/enums.js";
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { createXaiConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
@@ -34,7 +35,7 @@ export class XaiProvider extends OpenAIChatCompletionsProvider {
         logger.debug("xAI Provider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {

package/dist/lib/utils/logSanitize.d.ts

@@ -26,6 +26,20 @@
  * @param maxLen - Maximum number of characters to keep (default 500).
  */
 export declare function sanitizeForLog(text: string, maxLen?: number): string;
+/**
+ * Strip embedded `user:pass@` credentials from a URL's authority component
+ * before logging it or surfacing it in a user-facing error.
+ *
+ * Turns `https://user:secret@host/path` into `https://***@host/path` while
+ * leaving credential-free URLs untouched, so the host/port/path stay useful
+ * for diagnostics. Use this for any `baseURL`/endpoint a caller may have
+ * supplied with inline credentials. The match is global, so every `//…@`
+ * authority in the string is redacted (e.g. a proxy chain or a URL embedded
+ * in a query parameter), not just the first.
+ *
+ * @param url - The URL (or URL-shaped string) to redact.
+ */
+export declare function redactUrlCredentials(url: string): string;
 /**
  * Recursively sanitize a record/array, returning a structurally identical
  * value with sensitive keys redacted and string values run through