@juspay/neurolink 9.68.15 → 9.68.17

package/dist/utils/logSanitize.d.ts

@@ -26,6 +26,20 @@
  * @param maxLen - Maximum number of characters to keep (default 500).
  */
 export declare function sanitizeForLog(text: string, maxLen?: number): string;
+/**
+ * Strip embedded `user:pass@` credentials from a URL's authority component
+ * before logging it or surfacing it in a user-facing error.
+ *
+ * Turns `https://user:secret@host/path` into `https://***@host/path` while
+ * leaving credential-free URLs untouched, so the host/port/path stay useful
+ * for diagnostics. Use this for any `baseURL`/endpoint a caller may have
+ * supplied with inline credentials. The match is global, so every `//…@`
+ * authority in the string is redacted (e.g. a proxy chain or a URL embedded
+ * in a query parameter), not just the first.
+ *
+ * @param url - The URL (or URL-shaped string) to redact.
+ */
+export declare function redactUrlCredentials(url: string): string;
 /**
  * Recursively sanitize a record/array, returning a structurally identical
  * value with sensitive keys redacted and string values run through

package/dist/utils/logSanitize.js

@@ -91,6 +91,22 @@ export function sanitizeForLog(text, maxLen = 500) {
     }
     return text.slice(0, maxLen).replace(SECRET_PATTERN, "***");
 }
+/**
+ * Strip embedded `user:pass@` credentials from a URL's authority component
+ * before logging it or surfacing it in a user-facing error.
+ *
+ * Turns `https://user:secret@host/path` into `https://***@host/path` while
+ * leaving credential-free URLs untouched, so the host/port/path stay useful
+ * for diagnostics. Use this for any `baseURL`/endpoint a caller may have
+ * supplied with inline credentials. The match is global, so every `//…@`
+ * authority in the string is redacted (e.g. a proxy chain or a URL embedded
+ * in a query parameter), not just the first.
+ *
+ * @param url - The URL (or URL-shaped string) to redact.
+ */
+export function redactUrlCredentials(url) {
+    return url.replace(/\/\/[^/@]+@/g, "//***@");
+}
 /**
  * Recursively sanitize a record/array, returning a structurally identical
  * value with sensitive keys redacted and string values run through

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@juspay/neurolink",
-  "version": "9.68.15",
+  "version": "9.68.17",
   "packageManager": "pnpm@10.15.1",
   "description": "Universal AI Development Platform with working MCP integration, multi-provider support, voice (TTS/STT/realtime), and professional CLI. 58+ external MCP servers discoverable, multimodal file processing, RAG pipelines. Build, test, and deploy AI applications with 21+ providers: OpenAI, Anthropic, Google AI Studio, Google Vertex, AWS Bedrock, Azure OpenAI, Mistral, LiteLLM, SageMaker, Hugging Face, Ollama, OpenAI-compatible, OpenRouter, DeepSeek, NVIDIA NIM, LM Studio, llama.cpp, plus voice (OpenAI TTS, ElevenLabs, Deepgram, Azure Speech).",
   "author": {