@juspay/neurolink 9.86.4 → 9.87.0

package/dist/types/auth.d.ts

@@ -69,7 +69,7 @@ export type StoredProviderTokens = {
     disabled?: boolean;
     /** When the tokens were disabled (Unix ms) */
     disabledAt?: number;
-    /** Reason the tokens were disabled (e.g., "refresh_failed") */
+    /** Reason the tokens were disabled (e.g., "refresh_invalid") */
     disabledReason?: string;
 };
 /**

package/dist/types/cli.d.ts

@@ -825,6 +825,8 @@ export type ProxyState = {
     envFile?: string;
     /** Fallback chain from proxy config (persisted at start time) */
     fallbackChain?: FallbackInfo[];
+    /** Normalized Anthropic account keys allowed for this proxy process. */
+    accountAllowlist?: string[];
     /** Optional fail-open guard PID that reverts Claude settings if proxy dies */
     guardPid?: number;
     /** How the proxy was launched — "launchd" if installed as service, "manual" otherwise */

package/dist/types/multimodal.d.ts

@@ -190,6 +190,18 @@ export type VideoOutputOptions = {
      * `image` Buffer argument passed to `generate()`.
      */
     imageUrl?: string;
+    /**
+     * Replicate only: the input-schema key the model expects the image under.
+     * Replicate image-to-video models disagree on this — e.g.
+     * `minimax/hailuo-2.3-fast` requires `first_frame_image`,
+     * `wan-video/wan-2.7-i2v` requires `first_frame` — and a model whose
+     * required image key is missing fails the prediction on submit. Setting
+     * this also switches the payload to the modern `duration`/`resolution`
+     * field shape those models expect (instead of the legacy
+     * `num_frames`/`fps`/`aspect_ratio` shape). Omit for models that accept
+     * the default `image` key.
+     */
+    imageInputKey?: string;
     /**
      * Per-call provider credentials. Takes precedence over instance-level
      * credentials set at construction time, which in turn override env vars.

package/dist/types/proxy.d.ts

@@ -517,6 +517,7 @@ export type AnthropicLoopState = {
         contentType?: string;
     } | null;
     authFailureMessage: string | null;
+    authCooldownMessage: string | null;
     attemptNumber: number;
 };
 export type AnthropicUpstreamBody = {
@@ -580,9 +581,9 @@ export type AccountCooldownPlan = {
     reason: AccountCoolingReason;
     /** Epoch-ms until which the account should not be used. */
     coolingUntil: number;
-    /** When true (5h/7d window rejected), rotate immediately — retrying the same
-     *  account is futile until its window resets. When false (transient burst),
-     *  a small number of jittered same-account retries is allowed first. */
+    /** When true (unified/5h/7d rejected), rotate immediately — retrying the
+     *  same account is futile until its window resets. When false (transient
+     *  burst), a small number of jittered same-account retries is allowed first. */
     rotateImmediately: boolean;
 };
 export type AnthropicUpstreamFetchResult = {
@@ -630,12 +631,22 @@ export type RefreshResult = {
     error?: string;
     status?: number;
 };
+/** Result shared by callers waiting on the same rotating refresh token. */
+export type SharedRefreshResult = {
+    result: RefreshResult;
+    token: string;
+    refreshToken?: string;
+    expiresAt?: number;
+};
 export type TokenPersistTarget = string | {
     credPath: string;
 } | {
     providerKey: string;
 };
 export type AccountQuota = {
+    /** Top-level unified status. A rejected value can be authoritative even
+     *  while both 5h and 7d sub-window statuses still report allowed. */
+    unifiedStatus?: string;
     /** 0.0-1.0  (from unified-5h-utilization) */
     sessionUsed: number;
     /** "allowed" | "throttled" | "rejected" */
@@ -658,9 +669,18 @@ export type AccountQuota = {
 /** Why an account is currently cooling. Drives cooldown duration and logging.
  *  - "weekly"    : 7d unified limit rejected — cool until the weekly reset.
  *  - "session"   : 5h unified limit rejected — cool until the session reset.
+ *  - "unified"   : top-level unified limit rejected — cool for retry-after.
  *  - "transient" : short per-minute/burst 429 — cool for retry-after only.
- *  - "auth"      : auth/refresh failures (reserved; currently rotate-only). */
-export type AccountCoolingReason = "weekly" | "session" | "transient" | "auth";
+ *  - "auth"      : transient refresh failure with bounded backoff. */
+export type AccountCoolingReason = "weekly" | "session" | "unified" | "transient" | "auth";
+/** Restart-safe cooldown snapshot for one account. */
+export type PersistedAccountCooldown = {
+    coolingUntil: number;
+    reason: AccountCoolingReason;
+    updatedAt: number;
+};
+/** Normalized Anthropic account keys eligible for proxy routing. */
+export type AccountAllowlist = ReadonlySet<string>;
 /** Runtime state for a proxy account. */
 export type RuntimeAccountState = {
     consecutiveRefreshFailures: number;
@@ -668,9 +688,9 @@ export type RuntimeAccountState = {
     lastToken?: string;
     lastRefreshToken?: string;
     /** Epoch-ms timestamp until which the account should not be used for new
-     *  requests. Set from the ACTUAL Anthropic reset window (5h/7d) on an
-     *  exhaustion 429, or from retry-after on a transient burst. Other requests
-     *  arriving during this window skip the account rather than hammering it. */
+     *  requests. Set from the actual Anthropic reset/retry window or from
+     *  bounded refresh backoff. Other requests arriving during this window skip
+     *  the account rather than hammering it. */
     coolingUntil?: number;
     /** Why the account is cooling (set alongside coolingUntil). */
     coolingReason?: AccountCoolingReason;
@@ -769,6 +789,8 @@ export type ProxyPaths = {
     logsDir: string;
     /** account-quotas.json — per-account rate limit state */
     quotaFile: string;
+    /** account-cooldowns.json — restart-safe account cooldown state */
+    cooldownFile: string;
     /** Whether this is a dev-mode isolated instance */
     isDev: boolean;
 };
@@ -958,8 +980,26 @@ export type SSETelemetry = {
         timestamp: number;
         data: string;
     }>;
+    /** Error carried as a terminal SSE `event: error`, if one was observed. */
+    streamErrorMessage?: string;
     rawText?: string;
 };
+/** Terminal outcome of a response body after the HTTP headers were sent. */
+export type StreamTerminalOutcome = {
+    kind: "completed";
+} | {
+    kind: "upstream_error";
+    message: string;
+} | {
+    kind: "client_cancelled";
+};
+/** First-writer-wins tracker for an upstream streaming response. */
+export type StreamTerminalOutcomeTracker = {
+    outcome: Promise<StreamTerminalOutcome>;
+    complete: () => void;
+    fail: (message: string) => void;
+    cancel: () => void;
+};
 /** Mutable accumulator the SSE interceptor uses internally. */
 export type TelemetryAccumulator = {
     messageId: string;
@@ -984,6 +1024,7 @@ export type TelemetryAccumulator = {
     rawTextBytes: number;
     rawTextTruncated: boolean;
     eventLogTruncated: boolean;
+    streamErrorMessage?: string;
 };
 /** Result of createSSEInterceptor: the pass-through stream and a telemetry promise. */
 export type SSEInterceptorResult = {

package/dist/types/subscription.d.ts

@@ -914,6 +914,11 @@ export type ProxyRoutingConfig = {
      *  Resolved per-request to a stable key (anthropic:<email>); does not
      *  encode an index. */
     primaryAccount?: string;
+    /** Anthropic account emails/labels that may be loaded by the proxy. When
+     *  present, every token-store, legacy, and environment credential outside
+     *  this set is excluded before refresh or routing. An empty list denies all
+     *  stored credentials. */
+    accountAllowlist?: string[];
 };
 /** Cloaking plugin config */
 export type CloakingConfig = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@juspay/neurolink",
-  "version": "9.86.4",
+  "version": "9.87.0",
   "packageManager": "pnpm@10.15.1",
   "description": "TypeScript AI SDK with 24+ LLM providers behind one consistent API. MCP-native (58+ servers), voice TTS/STT/realtime, RAG, agents, memory, context compaction. OpenAI · Anthropic · Gemini · Bedrock · Azure · Ollama · DeepSeek · NVIDIA NIM and more.",
   "author": {