@juspay/neurolink 9.70.4 → 9.70.6

package/dist/lib/neurolink.js

@@ -76,7 +76,7 @@ import { resolveModel } from "./utils/modelAliasResolver.js";
 // Import orchestration components
 import { ModelRouter } from "./utils/modelRouter.js";
 import { getBestProvider } from "./utils/providerUtils.js";
-import { NON_RETRYABLE_HTTP_STATUS_CODES } from "./utils/retryability.js";
+import { NON_RETRYABLE_HTTP_STATUS_CODES, isDeterministicClientErrorMessage, } from "./utils/retryability.js";
 import { isZodSchema } from "./utils/schemaConversion.js";
 import { BinaryTaskClassifier } from "./utils/taskClassifier.js";
 // Tool detection and execution imports
@@ -226,6 +226,15 @@ function isNonRetryableProviderError(error) {
             msg.includes("UNAUTHENTICATED")) {
             return true;
         }
+        // A deterministic 400 / malformed-request whose status is only present in
+        // the message string (e.g. Vertex wraps `{"code":400,"status":
+        // "INVALID_ARGUMENT"}` inside the message). The object-level status check
+        // above misses it, so without this the fallback orchestrator retries the
+        // identical bad payload on every other provider — they reject it the same
+        // way. The request itself is malformed, so abort fast.
+        if (isDeterministicClientErrorMessage(msg)) {
+            return true;
+        }
     }
     return false;
 }

package/dist/lib/providers/googleVertex.d.ts

@@ -3,6 +3,32 @@ import { AIProviderName } from "../constants/enums.js";
 import { BaseProvider } from "../core/baseProvider.js";
 import type { EnhancedGenerateResult, TextGenerationOptions, StreamOptions, StreamResult } from "../types/index.js";
 import type { Schema, LanguageModel } from "../types/index.js";
+/**
+ * Recursively strip JSON-schema fields that Vertex Gemini's function-call AND
+ * `responseSchema` (structured output) validators reject with 400
+ * INVALID_ARGUMENT. Vertex implements OpenAPI 3.0 Schema strictly and rejects
+ * extension fields that the broader JSON Schema spec allows. The fields
+ * stripped here have no semantic meaning for the model, so removing them is
+ * safe for every caller.
+ *
+ * Fields removed:
+ * - `additionalProperties` — extension; Vertex rejects on any nested object.
+ * - `default` — Vertex rejects defaults on object/array-typed properties and
+ *   on properties that are also marked `required`. Safest to strip globally
+ *   because the model never inspects them.
+ * - `$schema`, `$id`, `$ref`, `definitions`, `$defs` — JSON-Schema-meta
+ *   fields that Vertex doesn't recognise.
+ * - `examples` — accepted by some Gemini variants but not 2.5-flash; strip
+ *   to avoid the model rejecting tool schemas under that path.
+ * - `errorMessage` — emitted by `convertZodToJsonSchema` (which enables
+ *   zod-to-json-schema's `errorMessages: true`) for any field carrying a
+ *   custom message, e.g. `z.string().regex(re, { message })`. Vertex's
+ *   `response_schema` validator rejects it with `Unknown name "errorMessage"
+ *   … Cannot find field`, failing the whole structured-output request.
+ *
+ * Exported for deterministic unit testing of the sanitization contract.
+ */
+export declare function stripAdditionalPropertiesDeep(schema: Record<string, unknown> | undefined): void;
 /**
  * Resolve the effective Vertex region for a given model.
  *

package/dist/lib/providers/googleVertex.js

@@ -41,11 +41,12 @@ const hasAnthropicSupport = () => {
     return true;
 };
 /**
- * Recursively strip JSON-schema fields that Vertex Gemini's function-call
- * validator rejects with 400 INVALID_ARGUMENT. Vertex implements OpenAPI 3.0
- * Schema strictly and rejects extension fields that the broader JSON Schema
- * spec allows. The fields stripped here have no semantic meaning for the
- * model, so removing them is safe for every caller.
+ * Recursively strip JSON-schema fields that Vertex Gemini's function-call AND
+ * `responseSchema` (structured output) validators reject with 400
+ * INVALID_ARGUMENT. Vertex implements OpenAPI 3.0 Schema strictly and rejects
+ * extension fields that the broader JSON Schema spec allows. The fields
+ * stripped here have no semantic meaning for the model, so removing them is
+ * safe for every caller.
  *
  * Fields removed:
  * - `additionalProperties` — extension; Vertex rejects on any nested object.
@@ -56,8 +57,15 @@ const hasAnthropicSupport = () => {
  *   fields that Vertex doesn't recognise.
  * - `examples` — accepted by some Gemini variants but not 2.5-flash; strip
  *   to avoid the model rejecting tool schemas under that path.
+ * - `errorMessage` — emitted by `convertZodToJsonSchema` (which enables
+ *   zod-to-json-schema's `errorMessages: true`) for any field carrying a
+ *   custom message, e.g. `z.string().regex(re, { message })`. Vertex's
+ *   `response_schema` validator rejects it with `Unknown name "errorMessage"
+ *   … Cannot find field`, failing the whole structured-output request.
+ *
+ * Exported for deterministic unit testing of the sanitization contract.
  */
-function stripAdditionalPropertiesDeep(schema) {
+export function stripAdditionalPropertiesDeep(schema) {
     if (!schema || typeof schema !== "object") {
         return;
     }
@@ -70,6 +78,7 @@ function stripAdditionalPropertiesDeep(schema) {
         "definitions",
         "$defs",
         "examples",
+        "errorMessage",
     ];
     for (const field of FIELDS_TO_STRIP) {
         if (field in schema) {
@@ -1121,6 +1130,13 @@ export class GoogleVertexProvider extends BaseProvider {
                     // ensureNestedSchemaTypes recursively adds missing type fields
                     // Note: convertZodToJsonSchema now uses openApi3 target which produces nullable: true
                     const typedSchema = ensureNestedSchemaTypes(inlinedSchema);
+                    // Sanitize the same way tool schemas are (see tool path above):
+                    // Vertex's responseSchema validator rejects extension keywords such
+                    // as `errorMessage` (from convertZodToJsonSchema's errorMessages
+                    // option) and `additionalProperties`. Without this a user schema with
+                    // a `.regex(.., { message })` field 400s the whole structured-output
+                    // request and the recovery loop retries the same poisoned payload.
+                    stripAdditionalPropertiesDeep(typedSchema);
                     config.responseSchema = typedSchema;
                     logger.debug("[GoogleVertex] Added responseSchema for JSON output (stream)", {
                         schemaKeys: Object.keys(typedSchema),
@@ -1749,6 +1765,13 @@ export class GoogleVertexProvider extends BaseProvider {
                     // ensureNestedSchemaTypes recursively adds missing type fields
                     // Note: convertZodToJsonSchema now uses openApi3 target which produces nullable: true
                     const typedSchema = ensureNestedSchemaTypes(inlinedSchema);
+                    // Sanitize the same way tool schemas are (see tool path above):
+                    // Vertex's responseSchema validator rejects extension keywords such
+                    // as `errorMessage` (from convertZodToJsonSchema's errorMessages
+                    // option) and `additionalProperties`. Without this a user schema with
+                    // a `.regex(.., { message })` field 400s the whole structured-output
+                    // request and the recovery loop retries the same poisoned payload.
+                    stripAdditionalPropertiesDeep(typedSchema);
                     config.responseSchema = typedSchema;
                     logger.debug("[GoogleVertex] Added responseSchema for JSON output (generate)", {
                         schemaKeys: Object.keys(typedSchema),

package/dist/lib/utils/retryability.d.ts

@@ -12,3 +12,16 @@ export declare const NON_RETRYABLE_HTTP_STATUS_CODES: readonly number[];
 export declare function isRetryableStatusCode(code: number): boolean;
 /** Check whether an HTTP status code is non-retryable. */
 export declare function isNonRetryableStatusCode(code: number): boolean;
+/**
+ * Detect a deterministic client-error (HTTP 400 / malformed request) signature
+ * embedded in a provider error MESSAGE, for cases where the numeric status is
+ * not exposed as a structured `status`/`statusCode` field. Vertex/Gemini wrap a
+ * 400 INVALID_ARGUMENT inside the message string (e.g. `Google Vertex AI Invalid
+ * Request: {"error":{"code":400,"status":"INVALID_ARGUMENT", …}}`), so the
+ * object-level status check misses it and the fallback orchestrator keeps
+ * retrying the identical, malformed payload on every other provider — they
+ * reject it the same way. A 400 means the request itself is bad, so retrying is
+ * pointless regardless of provider. Matches only unambiguous markers to avoid
+ * misclassifying transient (5xx/429) failures.
+ */
+export declare function isDeterministicClientErrorMessage(message: string): boolean;

package/dist/lib/utils/retryability.js

@@ -20,4 +20,26 @@ export function isRetryableStatusCode(code) {
 export function isNonRetryableStatusCode(code) {
     return NON_RETRYABLE_HTTP_STATUS_CODES.includes(code);
 }
+/**
+ * Detect a deterministic client-error (HTTP 400 / malformed request) signature
+ * embedded in a provider error MESSAGE, for cases where the numeric status is
+ * not exposed as a structured `status`/`statusCode` field. Vertex/Gemini wrap a
+ * 400 INVALID_ARGUMENT inside the message string (e.g. `Google Vertex AI Invalid
+ * Request: {"error":{"code":400,"status":"INVALID_ARGUMENT", …}}`), so the
+ * object-level status check misses it and the fallback orchestrator keeps
+ * retrying the identical, malformed payload on every other provider — they
+ * reject it the same way. A 400 means the request itself is bad, so retrying is
+ * pointless regardless of provider. Matches only unambiguous markers to avoid
+ * misclassifying transient (5xx/429) failures.
+ */
+export function isDeterministicClientErrorMessage(message) {
+    if (!message) {
+        return false;
+    }
+    return (message.includes("INVALID_ARGUMENT") ||
+        message.includes("Invalid JSON payload") ||
+        /\bInvalid Request\b/i.test(message) ||
+        /"code"\s*:\s*400\b/.test(message) ||
+        /\b400\s+Bad Request\b/i.test(message));
+}
 //# sourceMappingURL=retryability.js.map

package/dist/neurolink.js

@@ -76,7 +76,7 @@ import { resolveModel } from "./utils/modelAliasResolver.js";
 // Import orchestration components
 import { ModelRouter } from "./utils/modelRouter.js";
 import { getBestProvider } from "./utils/providerUtils.js";
-import { NON_RETRYABLE_HTTP_STATUS_CODES } from "./utils/retryability.js";
+import { NON_RETRYABLE_HTTP_STATUS_CODES, isDeterministicClientErrorMessage, } from "./utils/retryability.js";
 import { isZodSchema } from "./utils/schemaConversion.js";
 import { BinaryTaskClassifier } from "./utils/taskClassifier.js";
 // Tool detection and execution imports
@@ -226,6 +226,15 @@ function isNonRetryableProviderError(error) {
             msg.includes("UNAUTHENTICATED")) {
             return true;
         }
+        // A deterministic 400 / malformed-request whose status is only present in
+        // the message string (e.g. Vertex wraps `{"code":400,"status":
+        // "INVALID_ARGUMENT"}` inside the message). The object-level status check
+        // above misses it, so without this the fallback orchestrator retries the
+        // identical bad payload on every other provider — they reject it the same
+        // way. The request itself is malformed, so abort fast.
+        if (isDeterministicClientErrorMessage(msg)) {
+            return true;
+        }
     }
     return false;
 }

package/dist/providers/googleVertex.d.ts

@@ -3,6 +3,32 @@ import { AIProviderName } from "../constants/enums.js";
 import { BaseProvider } from "../core/baseProvider.js";
 import type { EnhancedGenerateResult, TextGenerationOptions, StreamOptions, StreamResult } from "../types/index.js";
 import type { Schema, LanguageModel } from "../types/index.js";
+/**
+ * Recursively strip JSON-schema fields that Vertex Gemini's function-call AND
+ * `responseSchema` (structured output) validators reject with 400
+ * INVALID_ARGUMENT. Vertex implements OpenAPI 3.0 Schema strictly and rejects
+ * extension fields that the broader JSON Schema spec allows. The fields
+ * stripped here have no semantic meaning for the model, so removing them is
+ * safe for every caller.
+ *
+ * Fields removed:
+ * - `additionalProperties` — extension; Vertex rejects on any nested object.
+ * - `default` — Vertex rejects defaults on object/array-typed properties and
+ *   on properties that are also marked `required`. Safest to strip globally
+ *   because the model never inspects them.
+ * - `$schema`, `$id`, `$ref`, `definitions`, `$defs` — JSON-Schema-meta
+ *   fields that Vertex doesn't recognise.
+ * - `examples` — accepted by some Gemini variants but not 2.5-flash; strip
+ *   to avoid the model rejecting tool schemas under that path.
+ * - `errorMessage` — emitted by `convertZodToJsonSchema` (which enables
+ *   zod-to-json-schema's `errorMessages: true`) for any field carrying a
+ *   custom message, e.g. `z.string().regex(re, { message })`. Vertex's
+ *   `response_schema` validator rejects it with `Unknown name "errorMessage"
+ *   … Cannot find field`, failing the whole structured-output request.
+ *
+ * Exported for deterministic unit testing of the sanitization contract.
+ */
+export declare function stripAdditionalPropertiesDeep(schema: Record<string, unknown> | undefined): void;
 /**
  * Resolve the effective Vertex region for a given model.
  *

package/dist/providers/googleVertex.js

@@ -41,11 +41,12 @@ const hasAnthropicSupport = () => {
     return true;
 };
 /**
- * Recursively strip JSON-schema fields that Vertex Gemini's function-call
- * validator rejects with 400 INVALID_ARGUMENT. Vertex implements OpenAPI 3.0
- * Schema strictly and rejects extension fields that the broader JSON Schema
- * spec allows. The fields stripped here have no semantic meaning for the
- * model, so removing them is safe for every caller.
+ * Recursively strip JSON-schema fields that Vertex Gemini's function-call AND
+ * `responseSchema` (structured output) validators reject with 400
+ * INVALID_ARGUMENT. Vertex implements OpenAPI 3.0 Schema strictly and rejects
+ * extension fields that the broader JSON Schema spec allows. The fields
+ * stripped here have no semantic meaning for the model, so removing them is
+ * safe for every caller.
  *
  * Fields removed:
  * - `additionalProperties` — extension; Vertex rejects on any nested object.
@@ -56,8 +57,15 @@ const hasAnthropicSupport = () => {
  *   fields that Vertex doesn't recognise.
  * - `examples` — accepted by some Gemini variants but not 2.5-flash; strip
  *   to avoid the model rejecting tool schemas under that path.
+ * - `errorMessage` — emitted by `convertZodToJsonSchema` (which enables
+ *   zod-to-json-schema's `errorMessages: true`) for any field carrying a
+ *   custom message, e.g. `z.string().regex(re, { message })`. Vertex's
+ *   `response_schema` validator rejects it with `Unknown name "errorMessage"
+ *   … Cannot find field`, failing the whole structured-output request.
+ *
+ * Exported for deterministic unit testing of the sanitization contract.
  */
-function stripAdditionalPropertiesDeep(schema) {
+export function stripAdditionalPropertiesDeep(schema) {
     if (!schema || typeof schema !== "object") {
         return;
     }
@@ -70,6 +78,7 @@ function stripAdditionalPropertiesDeep(schema) {
         "definitions",
         "$defs",
         "examples",
+        "errorMessage",
     ];
     for (const field of FIELDS_TO_STRIP) {
         if (field in schema) {
@@ -1121,6 +1130,13 @@ export class GoogleVertexProvider extends BaseProvider {
                     // ensureNestedSchemaTypes recursively adds missing type fields
                     // Note: convertZodToJsonSchema now uses openApi3 target which produces nullable: true
                     const typedSchema = ensureNestedSchemaTypes(inlinedSchema);
+                    // Sanitize the same way tool schemas are (see tool path above):
+                    // Vertex's responseSchema validator rejects extension keywords such
+                    // as `errorMessage` (from convertZodToJsonSchema's errorMessages
+                    // option) and `additionalProperties`. Without this a user schema with
+                    // a `.regex(.., { message })` field 400s the whole structured-output
+                    // request and the recovery loop retries the same poisoned payload.
+                    stripAdditionalPropertiesDeep(typedSchema);
                     config.responseSchema = typedSchema;
                     logger.debug("[GoogleVertex] Added responseSchema for JSON output (stream)", {
                         schemaKeys: Object.keys(typedSchema),
@@ -1749,6 +1765,13 @@ export class GoogleVertexProvider extends BaseProvider {
                     // ensureNestedSchemaTypes recursively adds missing type fields
                     // Note: convertZodToJsonSchema now uses openApi3 target which produces nullable: true
                     const typedSchema = ensureNestedSchemaTypes(inlinedSchema);
+                    // Sanitize the same way tool schemas are (see tool path above):
+                    // Vertex's responseSchema validator rejects extension keywords such
+                    // as `errorMessage` (from convertZodToJsonSchema's errorMessages
+                    // option) and `additionalProperties`. Without this a user schema with
+                    // a `.regex(.., { message })` field 400s the whole structured-output
+                    // request and the recovery loop retries the same poisoned payload.
+                    stripAdditionalPropertiesDeep(typedSchema);
                     config.responseSchema = typedSchema;
                     logger.debug("[GoogleVertex] Added responseSchema for JSON output (generate)", {
                         schemaKeys: Object.keys(typedSchema),

package/dist/utils/retryability.d.ts

@@ -12,3 +12,16 @@ export declare const NON_RETRYABLE_HTTP_STATUS_CODES: readonly number[];
 export declare function isRetryableStatusCode(code: number): boolean;
 /** Check whether an HTTP status code is non-retryable. */
 export declare function isNonRetryableStatusCode(code: number): boolean;
+/**
+ * Detect a deterministic client-error (HTTP 400 / malformed request) signature
+ * embedded in a provider error MESSAGE, for cases where the numeric status is
+ * not exposed as a structured `status`/`statusCode` field. Vertex/Gemini wrap a
+ * 400 INVALID_ARGUMENT inside the message string (e.g. `Google Vertex AI Invalid
+ * Request: {"error":{"code":400,"status":"INVALID_ARGUMENT", …}}`), so the
+ * object-level status check misses it and the fallback orchestrator keeps
+ * retrying the identical, malformed payload on every other provider — they
+ * reject it the same way. A 400 means the request itself is bad, so retrying is
+ * pointless regardless of provider. Matches only unambiguous markers to avoid
+ * misclassifying transient (5xx/429) failures.
+ */
+export declare function isDeterministicClientErrorMessage(message: string): boolean;

package/dist/utils/retryability.js

@@ -20,3 +20,25 @@ export function isRetryableStatusCode(code) {
 export function isNonRetryableStatusCode(code) {
     return NON_RETRYABLE_HTTP_STATUS_CODES.includes(code);
 }
+/**
+ * Detect a deterministic client-error (HTTP 400 / malformed request) signature
+ * embedded in a provider error MESSAGE, for cases where the numeric status is
+ * not exposed as a structured `status`/`statusCode` field. Vertex/Gemini wrap a
+ * 400 INVALID_ARGUMENT inside the message string (e.g. `Google Vertex AI Invalid
+ * Request: {"error":{"code":400,"status":"INVALID_ARGUMENT", …}}`), so the
+ * object-level status check misses it and the fallback orchestrator keeps
+ * retrying the identical, malformed payload on every other provider — they
+ * reject it the same way. A 400 means the request itself is bad, so retrying is
+ * pointless regardless of provider. Matches only unambiguous markers to avoid
+ * misclassifying transient (5xx/429) failures.
+ */
+export function isDeterministicClientErrorMessage(message) {
+    if (!message) {
+        return false;
+    }
+    return (message.includes("INVALID_ARGUMENT") ||
+        message.includes("Invalid JSON payload") ||
+        /\bInvalid Request\b/i.test(message) ||
+        /"code"\s*:\s*400\b/.test(message) ||
+        /\b400\s+Bad Request\b/i.test(message));
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@juspay/neurolink",
-  "version": "9.70.4",
+  "version": "9.70.6",
   "packageManager": "pnpm@10.15.1",
   "description": "Universal AI Development Platform with working MCP integration, multi-provider support, voice (TTS/STT/realtime), and professional CLI. 58+ external MCP servers discoverable, multimodal file processing, RAG pipelines. Build, test, and deploy AI applications with 21+ providers: OpenAI, Anthropic, Google AI Studio, Google Vertex, AWS Bedrock, Azure OpenAI, Mistral, LiteLLM, SageMaker, Hugging Face, Ollama, OpenAI-compatible, OpenRouter, DeepSeek, NVIDIA NIM, LM Studio, llama.cpp, plus voice (OpenAI TTS, ElevenLabs, Deepgram, Azure Speech).",
   "author": {
@@ -350,7 +350,7 @@
     "p-limit": "^7.3.0",
     "redis": "^5.11.0",
     "tar-stream": "^3.1.8",
-    "undici": ">=7.22.0",
+    "undici": ">=7.24.0 <8.0.0",
     "ws": "^8.20.1",
     "yargs": "^18.0.0",
     "zod": "^4.3.6",
@@ -396,7 +396,7 @@
     "exceljs": "^4.4.0",
     "express": "^5.1.0",
     "express-rate-limit": "^8.2.1",
-    "fastify": "^5.7.2",
+    "fastify": "^5.8.5",
     "ffmpeg-static": "^5.3.0",
     "fluent-ffmpeg": "^2.1.3",
     "koa": "^3.1.1",
@@ -430,7 +430,7 @@
     "@semantic-release/release-notes-generator": "^14.1.0",
     "@smithy/types": "^4.13.0",
     "@sveltejs/adapter-auto": "^7.0.1",
-    "@sveltejs/kit": "^2.53.4",
+    "@sveltejs/kit": "^2.60.1",
     "@sveltejs/package": "^2.5.7",
     "@sveltejs/vite-plugin-svelte": "^7.0.0",
     "@types/adm-zip": "^0.5.7",
@@ -548,7 +548,7 @@
       "esbuild@<=0.24.2": ">=0.25.0",
       "cookie@<0.7.0": ">=0.7.0",
       "@eslint/plugin-kit@<0.3.4": ">=0.3.4",
-      "tmp@<=0.2.3": ">=0.2.4",
+      "tmp@<0.2.6": ">=0.2.6",
       "axios@<1.13.5": ">=1.13.5",
       "glob@>=10.3.7 <=11.0.3": ">=11.1.0",
       "@semantic-release/npm": "^13.1.4",
@@ -556,24 +556,35 @@
       "@opentelemetry/sdk-trace-node": "^2.6.0",
       "jws@<4.0.1": ">=4.0.1",
       "tar@<7.5.8": ">=7.5.8",
-      "qs@<6.14.2": ">=6.14.2",
+      "qs@<6.15.2": ">=6.15.2",
       "minimatch@>=10.0.0 <10.2.3": ">=10.2.3",
       "minimatch@>=9.0.0 <9.0.7": ">=9.0.7",
       "typedoc>minimatch": ">=10.2.3",
       "minimatch@>=5.0.0 <5.1.8": ">=5.1.8",
       "minimatch@>=3.0.0 <3.1.4": ">=3.1.4",
-      "fast-xml-parser@>=5.0.0 <5.3.8": ">=5.3.8",
-      "lodash@<4.17.23": ">=4.17.23",
-      "lodash-es@<4.17.23": ">=4.17.23",
-      "undici@>=7.0.0 <7.22.0": ">=7.22.0",
+      "fast-xml-parser@>=5.0.0 <5.7.0": ">=5.7.0",
+      "lodash@<4.18.0": ">=4.18.0",
+      "lodash-es@<4.18.0": ">=4.18.0",
+      "undici@>=7.0.0 <7.24.0": ">=7.24.0 <8.0.0",
       "undici@>=6.0.0 <6.23.0": ">=6.23.0",
       "undici@<5.29.0": ">=5.29.0",
       "js-yaml@>=4.0.0 <4.1.1": ">=4.1.1",
       "js-yaml@>=3.0.0 <3.14.2": ">=3.14.2",
       "markdown-it@<14.1.1": ">=14.1.1",
       "ajv@>=8.0.0 <8.18.0": ">=8.18.0",
-      "@xmldom/xmldom@<0.8.12": ">=0.8.12",
-      "rollup@>=4.0.0 <4.59.0": ">=4.59.0"
+      "@xmldom/xmldom@<0.9.10": ">=0.9.10",
+      "@grpc/grpc-js@<1.14.4": ">=1.14.4",
+      "protobufjs@<7.5.8": ">=7.5.8",
+      "@protobufjs/utf8@<1.1.1": ">=1.1.1",
+      "brace-expansion@>=5.0.0 <5.0.6": ">=5.0.6",
+      "fast-uri@<3.1.2": ">=3.1.2",
+      "ip-address@<10.1.1": ">=10.1.1",
+      "basic-ftp@<5.2.2": ">=5.2.2",
+      "fast-xml-builder@<1.1.7": ">=1.1.7",
+      "esbuild@>=0.17.0 <0.28.1": ">=0.28.1",
+      "rollup@>=4.0.0 <4.59.0": ">=4.59.0",
+      "shell-quote@<1.8.4": ">=1.8.4",
+      "undici@>=8.0.0": ">=7.24.0 <8.0.0"
     }
   },
   "os": [