@juspay/neurolink 9.68.16 → 9.68.18

package/dist/providers/cloudflare.js

@@ -1,6 +1,7 @@
 import { CloudflareModels } from "../constants/enums.js";
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { createCloudflareConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
@@ -44,7 +45,7 @@ export class CloudflareProvider extends OpenAIChatCompletionsProvider {
         logger.debug("Cloudflare Workers AI Provider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {

package/dist/providers/cohere.js

@@ -1,6 +1,7 @@
 import { CohereModels } from "../constants/enums.js";
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { createProxyFetch } from "../proxy/proxyFetch.js";
 import { createCohereConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
 import { createTimeoutController, TimeoutError } from "../utils/timeout.js";
@@ -36,7 +37,7 @@ export class CohereProvider extends OpenAIChatCompletionsProvider {
         logger.debug("Cohere Provider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {

package/dist/providers/deepseek.js

@@ -1,6 +1,7 @@
 import { DeepSeekModels } from "../constants/enums.js";
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { createDeepSeekConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
@@ -55,7 +56,7 @@ export class DeepSeekProvider extends OpenAIChatCompletionsProvider {
         logger.debug("DeepSeek Provider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     // ===========================================================================

package/dist/providers/fireworks.js

@@ -1,6 +1,7 @@
 import { FireworksModels } from "../constants/enums.js";
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { createFireworksConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
@@ -34,7 +35,7 @@ export class FireworksProvider extends OpenAIChatCompletionsProvider {
         logger.debug("Fireworks Provider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {

package/dist/providers/groq.js

@@ -1,6 +1,7 @@
 import { GroqModels } from "../constants/enums.js";
 import { AuthenticationError, InvalidModelError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { createGroqConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
@@ -33,7 +34,7 @@ export class GroqProvider extends OpenAIChatCompletionsProvider {
         logger.debug("Groq Provider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {

package/dist/providers/huggingFace.js

@@ -1,5 +1,6 @@
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { createHuggingFaceConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
@@ -33,7 +34,7 @@ export class HuggingFaceProvider extends OpenAIChatCompletionsProvider {
         logger.debug("HuggingFaceProvider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {

package/dist/providers/litellm.js

@@ -3,6 +3,7 @@ import { createProxyFetch } from "../proxy/proxyFetch.js";
 import { AuthenticationError, InvalidModelError, ModelAccessDeniedError, NetworkError, ProviderError, RateLimitError, isModelAccessDeniedMessage, parseAllowedModels, } from "../types/index.js";
 import { isAbortError } from "../utils/errorHandling.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { isGemini25Model as isCanonicalGemini25Model } from "../utils/modelDetection.js";
 import { calculateCost } from "../utils/pricing.js";
 import { getProviderModel } from "../utils/providerConfig.js";
@@ -53,7 +54,7 @@ export class LiteLLMProvider extends OpenAIChatCompletionsProvider {
         logger.debug("LiteLLM Provider initialized", {
             modelName: this.modelName,
             provider: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {

package/dist/providers/llamaCpp.js

@@ -1,5 +1,6 @@
 import { NetworkError, ProviderError } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
 const LLAMACPP_DEFAULT_BASE_URL = "http://localhost:8080/v1";
@@ -7,12 +8,6 @@ const LLAMACPP_PLACEHOLDER_KEY = "llamacpp";
 const getLlamaCppBaseURL = () => {
     return process.env.LLAMACPP_BASE_URL || LLAMACPP_DEFAULT_BASE_URL;
 };
-/**
- * Strip embedded `user:pass@` credentials from a URL before logging it or
- * surfacing it in a user-facing error. Preserves host/port/path so the URL
- * stays useful for diagnostics.
- */
-const redactUrlCredentials = (url) => url.replace(/\/\/[^/@]+@/, "//***@");
 /**
  * llama.cpp Provider — direct HTTP, no AI SDK.
  *

package/dist/providers/lmStudio.js

@@ -1,6 +1,7 @@
 import { createProxyFetch } from "../proxy/proxyFetch.js";
 import { InvalidModelError, NetworkError, ProviderError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
 const LM_STUDIO_DEFAULT_BASE_URL = "http://localhost:1234/v1";
@@ -34,7 +35,7 @@ export class LMStudioProvider extends OpenAIChatCompletionsProvider {
         logger.debug("LM Studio Provider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {
@@ -60,7 +61,7 @@ export class LMStudioProvider extends OpenAIChatCompletionsProvider {
             message.includes("ECONNREFUSED") ||
             message.includes("Failed to fetch") ||
             message.includes("fetch failed")) {
-            return new NetworkError(`LM Studio server not reachable at ${this.config.baseURL}. ` +
+            return new NetworkError(`LM Studio server not reachable at ${redactUrlCredentials(this.config.baseURL)}. ` +
                 `Open the LM Studio app, load a model, and click "Start Server".`, "lm-studio");
         }
         if (message.includes("model_not_found") || message.includes("404")) {

package/dist/providers/mistral.d.ts

@@ -1,33 +1,25 @@
 import type { AIProviderName } from "../constants/enums.js";
-import { BaseProvider } from "../core/baseProvider.js";
-import type { NeurolinkCredentials, StreamOptions, StreamResult, ValidationSchema } from "../types/index.js";
-import type { LanguageModel } from "../types/index.js";
+import type { NeurolinkCredentials } from "../types/index.js";
+import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
 /**
- * Mistral AI Provider v2 - BaseProvider Implementation
- * Supports official AI-SDK integration with all Mistral models
+ * Mistral AI Provider — direct HTTP, no AI SDK.
+ *
+ * OpenAI-compatible chat completions at api.mistral.ai/v1. All request/stream/
+ * tool-loop orchestration lives in `OpenAIChatCompletionsProvider`; this class
+ * only declares configuration and the provider-specific error mapping.
+ *
+ * Mistral's `/chat/completions` accepts `response_format: { type:
+ * "json_schema" }` on current models (mistral-small-2506 and newer), so no
+ * structured-output downgrade is needed — the base client's default
+ * pass-through is correct.
+ *
+ * @see https://docs.mistral.ai/api/
  */
-export declare class MistralProvider extends BaseProvider {
-    private model;
+export declare class MistralProvider extends OpenAIChatCompletionsProvider {
     constructor(modelName?: string, sdk?: unknown, _region?: string, credentials?: NeurolinkCredentials["mistral"]);
-    protected executeStream(options: StreamOptions, _analysisSchema?: ValidationSchema): Promise<StreamResult>;
-    getProviderName(): AIProviderName;
-    getDefaultModel(): string;
-    /**
-     * Returns the Vercel AI SDK model instance for Mistral
-     */
-    getAISDKModel(): LanguageModel;
-    formatProviderError(error: unknown): Error;
-    /**
-     * Validate provider configuration
-     */
-    validateConfiguration(): Promise<boolean>;
-    /**
-     * Get provider-specific configuration
-     */
-    getConfiguration(): {
-        provider: AIProviderName;
-        model: string;
-        defaultModel: string;
-    };
+    protected getProviderName(): AIProviderName;
+    protected getDefaultModel(): string;
+    protected formatProviderError(error: unknown): Error;
+    protected getFallbackModelName(): string;
+    protected getFallbackModels(): string[];
 }
-export default MistralProvider;

package/dist/providers/mistral.js

@@ -1,135 +1,64 @@
-import { createMistral } from "@ai-sdk/mistral";
-import { BaseProvider } from "../core/baseProvider.js";
-import { DEFAULT_MAX_STEPS } from "../core/constants.js";
-import { streamAnalyticsCollector } from "../core/streamAnalytics.js";
-import { isNeuroLink } from "../neurolink.js";
-import { createProxyFetch } from "../proxy/proxyFetch.js";
-import { AuthenticationError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
-import { emitToolEndFromStepFinish } from "../utils/toolEndEmitter.js";
+import { MistralModels } from "../constants/enums.js";
+import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { createMistralConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
-import { composeAbortSignals, createTimeoutController, TimeoutError, } from "../utils/timeout.js";
-import { resolveToolChoice } from "../utils/toolChoice.js";
-import { toAnalyticsStreamResult } from "./providerTypeUtils.js";
-import { stepCountIs } from "../utils/tool.js";
-import { streamText } from "../utils/generation.js";
-// Configuration helpers - now using consolidated utility
+import { TimeoutError } from "../utils/timeout.js";
+import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
+const MISTRAL_DEFAULT_BASE_URL = "https://api.mistral.ai/v1";
 const getMistralApiKey = () => {
     return validateApiKey(createMistralConfig());
 };
 const getDefaultMistralModel = () => {
-    // Default to vision-capable Mistral Small 2506 (June 2025) with multimodal support
-    return getProviderModel("MISTRAL_MODEL", "mistral-small-2506");
+    // Vision-capable Mistral Small (June 2025) with multimodal support.
+    return getProviderModel("MISTRAL_MODEL", MistralModels.MISTRAL_SMALL_2506);
 };
 /**
- * Mistral AI Provider v2 - BaseProvider Implementation
- * Supports official AI-SDK integration with all Mistral models
+ * Mistral AI Provider — direct HTTP, no AI SDK.
+ *
+ * OpenAI-compatible chat completions at api.mistral.ai/v1. All request/stream/
+ * tool-loop orchestration lives in `OpenAIChatCompletionsProvider`; this class
+ * only declares configuration and the provider-specific error mapping.
+ *
+ * Mistral's `/chat/completions` accepts `response_format: { type:
+ * "json_schema" }` on current models (mistral-small-2506 and newer), so no
+ * structured-output downgrade is needed — the base client's default
+ * pass-through is correct.
+ *
+ * @see https://docs.mistral.ai/api/
  */
-export class MistralProvider extends BaseProvider {
-    model;
+export class MistralProvider extends OpenAIChatCompletionsProvider {
     constructor(modelName, sdk, _region, credentials) {
-        // Type guard for NeuroLink parameter validation
-        const validatedNeurolink = isNeuroLink(sdk) ? sdk : undefined;
-        super(modelName, "mistral", validatedNeurolink);
-        // Initialize Mistral model with API key validation and proxy support
-        const apiKey = credentials?.apiKey ?? getMistralApiKey();
-        const mistral = createMistral({
-            apiKey: apiKey,
-            fetch: createProxyFetch(),
-        });
-        this.model = mistral(this.modelName);
-        logger.debug("Mistral Provider v2 initialized", {
+        // Trim the override before applying precedence. A blank/whitespace
+        // `credentials.apiKey` must NOT bypass `getMistralApiKey()` — that would
+        // build a client with an unusable bearer token and fail at request time
+        // with a confusing 401 instead of at construction time.
+        const overrideApiKey = credentials?.apiKey?.trim();
+        const apiKey = overrideApiKey && overrideApiKey.length > 0
+            ? overrideApiKey
+            : getMistralApiKey();
+        // Treat blank/whitespace overrides as unset so an empty
+        // `credentials.baseURL` or `MISTRAL_BASE_URL=` cannot silently override
+        // the default with "" (mirrors the apiKey precedence above).
+        const baseURL = credentials?.baseURL?.trim() ||
+            process.env.MISTRAL_BASE_URL?.trim() ||
+            MISTRAL_DEFAULT_BASE_URL;
+        super("mistral", modelName, sdk, { baseURL, apiKey });
+        logger.debug("Mistral Provider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
-    // generate() method is inherited from BaseProvider; this provider uses the base implementation for generation with tools
-    async executeStream(options, _analysisSchema) {
-        this.validateStreamOptions(options);
-        const startTime = Date.now();
-        const timeout = this.getTimeout(options);
-        const timeoutController = createTimeoutController(timeout, this.providerName, "stream");
-        try {
-            // Get tools - options.tools is pre-merged by BaseProvider.stream()
-            const shouldUseTools = !options.disableTools && this.supportsTools();
-            const tools = shouldUseTools
-                ? options.tools || (await this.getAllTools())
-                : {};
-            // Build message array from options with multimodal support
-            // Using protected helper from BaseProvider to eliminate code duplication
-            const messages = await this.buildMessagesForStream(options);
-            const model = await this.getAISDKModelWithMiddleware(options); // This is where network connection happens!
-            // Reviewer follow-up: capture upstream provider errors via onError
-            // so the post-stream NoOutput sentinel carries the real cause.
-            let capturedProviderError;
-            const result = await streamText({
-                model,
-                messages: messages,
-                temperature: options.temperature,
-                maxOutputTokens: options.maxTokens, // No default limit - unlimited unless specified
-                tools,
-                stopWhen: stepCountIs(options.maxSteps || DEFAULT_MAX_STEPS),
-                toolChoice: resolveToolChoice(options, tools, shouldUseTools),
-                abortSignal: composeAbortSignals(options.abortSignal, timeoutController?.controller.signal),
-                experimental_telemetry: this.telemetryHandler.getTelemetryConfig(options),
-                experimental_repairToolCall: this.getToolCallRepairFn(options),
-                onError: (event) => {
-                    capturedProviderError = event.error;
-                    logger.error("Mistral: Stream error", {
-                        error: event.error instanceof Error
-                            ? event.error.message
-                            : String(event.error),
-                    });
-                },
-                onStepFinish: ({ toolCalls, toolResults }) => {
-                    emitToolEndFromStepFinish(this.neurolink?.getEventEmitter(), toolResults);
-                    this.handleToolExecutionStorage(toolCalls, toolResults, options, new Date()).catch((error) => {
-                        logger.warn("[MistralProvider] Failed to store tool executions", {
-                            provider: this.providerName,
-                            error: error instanceof Error ? error.message : String(error),
-                        });
-                    });
-                },
-            });
-            timeoutController?.cleanup();
-            // Transform string stream to content object stream using BaseProvider method
-            const transformedStream = this.createTextStream(result, () => capturedProviderError);
-            // Create analytics promise that resolves after stream completion
-            const analyticsPromise = streamAnalyticsCollector.createAnalytics(this.providerName, this.modelName, toAnalyticsStreamResult(result), Date.now() - startTime, {
-                requestId: `mistral-stream-${Date.now()}`,
-                streamingMode: true,
-            });
-            return {
-                stream: transformedStream,
-                provider: this.providerName,
-                model: this.modelName,
-                analytics: analyticsPromise,
-                metadata: {
-                    startTime,
-                    streamId: `mistral-${Date.now()}`,
-                },
-            };
-        }
-        catch (error) {
-            timeoutController?.cleanup();
-            throw this.handleProviderError(error);
-        }
-    }
-    // ===================
-    // ABSTRACT METHOD IMPLEMENTATIONS
-    // ===================
+    // ===========================================================================
+    // Abstract hooks (required)
+    // ===========================================================================
     getProviderName() {
-        return this.providerName;
+        return "mistral";
     }
     getDefaultModel() {
         return getDefaultMistralModel();
     }
-    /**
-     * Returns the Vercel AI SDK model instance for Mistral
-     */
-    getAISDKModel() {
-        return this.model;
-    }
     formatProviderError(error) {
         if (error instanceof TimeoutError) {
             return new NetworkError(`Request timed out: ${error.message}`, "mistral");
@@ -139,35 +68,31 @@ export class MistralProvider extends BaseProvider {
             ? errorRecord.message
             : "Unknown error";
         if (message.includes("API_KEY_INVALID") ||
-            message.includes("Invalid API key")) {
+            message.includes("Invalid API key") ||
+            message.includes("Unauthorized") ||
+            message.includes("401")) {
             return new AuthenticationError("Invalid Mistral API key. Please check your MISTRAL_API_KEY environment variable.", "mistral");
         }
-        if (message.includes("Rate limit exceeded")) {
+        if (message.includes("rate limit") ||
+            message.includes("Rate limit") ||
+            message.includes("429")) {
             return new RateLimitError("Mistral rate limit exceeded", "mistral");
         }
+        if (message.includes("model_not_found") || message.includes("404")) {
+            return new InvalidModelError(`Mistral model '${this.modelName}' not found.`, "mistral");
+        }
         return new ProviderError(`Mistral error: ${message}`, "mistral");
     }
-    /**
-     * Validate provider configuration
-     */
-    async validateConfiguration() {
-        try {
-            getMistralApiKey();
-            return true;
-        }
-        catch {
-            return false;
-        }
+    // ===========================================================================
+    // Optional hooks
+    // ===========================================================================
+    getFallbackModelName() {
+        return MistralModels.MISTRAL_SMALL_2506;
     }
-    /**
-     * Get provider-specific configuration
-     */
-    getConfiguration() {
-        return {
-            provider: this.providerName,
-            model: this.modelName,
-            defaultModel: getDefaultMistralModel(),
-        };
+    getFallbackModels() {
+        return [
+            MistralModels.MISTRAL_SMALL_2506,
+            MistralModels.MISTRAL_LARGE_LATEST,
+        ];
     }
 }
-export default MistralProvider;

package/dist/providers/nvidiaNim.js

@@ -1,6 +1,7 @@
 import { NvidiaNimModels } from "../constants/enums.js";
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { createNvidiaNimConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
@@ -164,7 +165,7 @@ export class NvidiaNimProvider extends OpenAIChatCompletionsProvider {
         logger.debug("NVIDIA NIM Provider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {

package/dist/providers/openAI.js

@@ -3,6 +3,7 @@ import { AIProviderName as AIProviderNameEnum } from "../constants/enums.js";
 import { createProxyFetch } from "../proxy/proxyFetch.js";
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { calculateCost } from "../utils/pricing.js";
 import { createOpenAIConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
 import { MAX_IMAGE_BYTES, readBoundedBuffer } from "../utils/sizeGuard.js";
@@ -67,7 +68,7 @@ export class OpenAIProvider extends OpenAIChatCompletionsProvider {
         logger.debug("OpenAIProvider initialized", {
             model: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     // ===========================================================================

package/dist/providers/openaiCompatible.js

@@ -1,5 +1,6 @@
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
 const FALLBACK_OPENAI_COMPATIBLE_MODEL = "gpt-3.5-turbo";
@@ -42,7 +43,7 @@ export class OpenAICompatibleProvider extends OpenAIChatCompletionsProvider {
         logger.debug("OpenAI Compatible Provider initialized", {
             modelName: this.modelName,
             provider: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {
@@ -78,7 +79,7 @@ export class OpenAICompatibleProvider extends OpenAIChatCompletionsProvider {
         if (typeof errorRecord?.message === "string") {
             if (errorRecord.message.includes("ECONNREFUSED") ||
                 errorRecord.message.includes("Failed to fetch")) {
-                return new NetworkError(`OpenAI Compatible endpoint not available. Please check your OPENAI_COMPATIBLE_BASE_URL: ${this.config.baseURL}`, "openai-compatible");
+                return new NetworkError(`OpenAI Compatible endpoint not available. Please check your OPENAI_COMPATIBLE_BASE_URL: ${redactUrlCredentials(this.config.baseURL)}`, "openai-compatible");
             }
             if (errorRecord.message.includes("API_KEY_INVALID") ||
                 errorRecord.message.includes("Invalid API key") ||

package/dist/providers/perplexity.js

@@ -1,6 +1,7 @@
 import { PerplexityModels } from "../constants/enums.js";
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { createPerplexityConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
@@ -33,7 +34,7 @@ export class PerplexityProvider extends OpenAIChatCompletionsProvider {
         logger.debug("Perplexity Provider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {

package/dist/providers/togetherAi.js

@@ -1,6 +1,7 @@
 import { TogetherAIModels } from "../constants/enums.js";
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { createTogetherAIConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
@@ -32,7 +33,7 @@ export class TogetherAIProvider extends OpenAIChatCompletionsProvider {
         logger.debug("Together AI Provider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {

package/dist/providers/xai.js

@@ -1,6 +1,7 @@
 import { XaiModels } from "../constants/enums.js";
 import { AuthenticationError, InvalidModelError, NetworkError, ProviderError, RateLimitError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { redactUrlCredentials } from "../utils/logSanitize.js";
 import { createXaiConfig, getProviderModel, validateApiKey, } from "../utils/providerConfig.js";
 import { TimeoutError } from "../utils/timeout.js";
 import { OpenAIChatCompletionsProvider } from "./openaiChatCompletionsBase.js";
@@ -34,7 +35,7 @@ export class XaiProvider extends OpenAIChatCompletionsProvider {
         logger.debug("xAI Provider initialized", {
             modelName: this.modelName,
             providerName: this.providerName,
-            baseURL: this.config.baseURL,
+            baseURL: redactUrlCredentials(this.config.baseURL),
         });
     }
     getProviderName() {

package/dist/types/providers.d.ts

@@ -129,6 +129,7 @@ export type NeurolinkCredentials = {
     };
     mistral?: {
         apiKey?: string;
+        baseURL?: string;
     };
     huggingFace?: {
         apiKey?: string;

package/dist/utils/logSanitize.d.ts

@@ -26,6 +26,20 @@
  * @param maxLen - Maximum number of characters to keep (default 500).
  */
 export declare function sanitizeForLog(text: string, maxLen?: number): string;
+/**
+ * Strip embedded `user:pass@` credentials from a URL's authority component
+ * before logging it or surfacing it in a user-facing error.
+ *
+ * Turns `https://user:secret@host/path` into `https://***@host/path` while
+ * leaving credential-free URLs untouched, so the host/port/path stay useful
+ * for diagnostics. Use this for any `baseURL`/endpoint a caller may have
+ * supplied with inline credentials. The match is global, so every `//…@`
+ * authority in the string is redacted (e.g. a proxy chain or a URL embedded
+ * in a query parameter), not just the first.
+ *
+ * @param url - The URL (or URL-shaped string) to redact.
+ */
+export declare function redactUrlCredentials(url: string): string;
 /**
  * Recursively sanitize a record/array, returning a structurally identical
  * value with sensitive keys redacted and string values run through

package/dist/utils/logSanitize.js

@@ -91,6 +91,22 @@ export function sanitizeForLog(text, maxLen = 500) {
     }
     return text.slice(0, maxLen).replace(SECRET_PATTERN, "***");
 }
+/**
+ * Strip embedded `user:pass@` credentials from a URL's authority component
+ * before logging it or surfacing it in a user-facing error.
+ *
+ * Turns `https://user:secret@host/path` into `https://***@host/path` while
+ * leaving credential-free URLs untouched, so the host/port/path stay useful
+ * for diagnostics. Use this for any `baseURL`/endpoint a caller may have
+ * supplied with inline credentials. The match is global, so every `//…@`
+ * authority in the string is redacted (e.g. a proxy chain or a URL embedded
+ * in a query parameter), not just the first.
+ *
+ * @param url - The URL (or URL-shaped string) to redact.
+ */
+export function redactUrlCredentials(url) {
+    return url.replace(/\/\/[^/@]+@/g, "//***@");
+}
 /**
  * Recursively sanitize a record/array, returning a structurally identical
  * value with sensitive keys redacted and string values run through

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@juspay/neurolink",
-  "version": "9.68.16",
+  "version": "9.68.18",
   "packageManager": "pnpm@10.15.1",
   "description": "Universal AI Development Platform with working MCP integration, multi-provider support, voice (TTS/STT/realtime), and professional CLI. 58+ external MCP servers discoverable, multimodal file processing, RAG pipelines. Build, test, and deploy AI applications with 21+ providers: OpenAI, Anthropic, Google AI Studio, Google Vertex, AWS Bedrock, Azure OpenAI, Mistral, LiteLLM, SageMaker, Hugging Face, Ollama, OpenAI-compatible, OpenRouter, DeepSeek, NVIDIA NIM, LM Studio, llama.cpp, plus voice (OpenAI TTS, ElevenLabs, Deepgram, Azure Speech).",
   "author": {