@juspay/neurolink 9.93.1 → 9.93.2

package/dist/cli/commands/proxy.js

@@ -16,6 +16,7 @@ import chalk from "chalk";
 import ora from "ora";
 import { buildProxyHealthResponse, createProxyReadinessState, markProxyDrainingForUpdate, markProxyReady, resumeProxyConnections, waitForProxyReadiness, } from "../../lib/proxy/proxyHealth.js";
 import { logger } from "../../lib/utils/logger.js";
+import { sanitizeForLog } from "../../lib/utils/logSanitize.js";
 import { withTimeout } from "../../lib/utils/async/withTimeout.js";
 import { formatUptime, isProcessRunning, StateFileManager, } from "../utils/serverUtils.js";
 import { configureProxyKeepAliveDispatcher } from "../../lib/proxy/proxyDispatcher.js";
@@ -25,6 +26,7 @@ import { beginProxyRequest, getProxyActivitySnapshot, trackProxyResponse, } from
 import { flushProxyLifecycleEvents, getProxyLifecycleLoggerSnapshot, hashProxyLifecycleSessionId, logProxyLifecycleEvent, } from "../../lib/proxy/proxyLifecycle.js";
 import { describeInstallFailure, getGlobalInstallArgs, resolveGlobalInstaller, validateInstalledVersion, } from "../../lib/proxy/globalInstaller.js";
 import { startUpdaterWorkerSupervisor } from "../../lib/proxy/updaterSupervisor.js";
+import { openProxyWorkerLog } from "../../lib/proxy/workerLog.js";
 import { waitForProxyUpdateWindow } from "../../lib/proxy/updateCoordinator.js";
 import { abandonPendingUpdate, clearUpdateDeferral, isVersionSuppressed, loadUpdateState, recordCheck, recordSuccessfulUpdate, recordUpdateDeferred, recordUpdateFailure, recordUpdateInstalled, suppressVersion, } from "../../lib/proxy/updateState.js";
 import { loadProxyEnvFile, resolveProxyEnvFile, } from "../../lib/proxy/proxyEnv.js";
@@ -538,18 +540,14 @@ function spawnFailOpenGuard(host, port, parentPid) {
         String(parentPid),
         "--quiet",
     ];
-    // Write guard stdout/stderr to a log file instead of discarding them.
-    const { openSync, closeSync, mkdirSync, existsSync } = _require("fs");
-    const guardLogDir = join(homedir(), ".neurolink", "logs");
-    if (!existsSync(guardLogDir)) {
-        mkdirSync(guardLogDir, { recursive: true });
-    }
-    const guardLogPath = join(guardLogDir, "proxy-guard.log");
-    const logFd = openSync(guardLogPath, "a");
+    const workerLog = openProxyWorkerLog("proxy-guard.log");
+    if (workerLog.error) {
+        logger.debug(`[proxy] guard logging disabled: ${workerLog.error}`);
+    }
     try {
         const child = spawn(process.execPath, args, {
             detached: true,
-            stdio: ["ignore", logFd, logFd],
+            stdio: ["ignore", workerLog.stdio, workerLog.stdio],
         });
         child.unref();
         return child.pid;
@@ -559,7 +557,7 @@ function spawnFailOpenGuard(host, port, parentPid) {
         return undefined;
     }
     finally {
-        closeSync(logFd); // parent closes its copy; child keeps the fd
+        workerLog.close();
     }
 }
 function spawnProxyUpdater(host, port, parentPid) {
@@ -585,16 +583,14 @@ function spawnProxyUpdater(host, port, parentPid) {
         "--updater-only",
         "--quiet",
     ];
-    const { openSync, closeSync, mkdirSync, existsSync } = _require("fs");
-    const logsDir = join(homedir(), ".neurolink", "logs");
-    if (!existsSync(logsDir)) {
-        mkdirSync(logsDir, { recursive: true });
+    const workerLog = openProxyWorkerLog("proxy-updater.log");
+    if (workerLog.error) {
+        logger.always(`[proxy] updater logging disabled: ${workerLog.error}`);
     }
-    const logFd = openSync(join(logsDir, "proxy-updater.log"), "a");
     try {
         const child = spawn(process.execPath, args, {
             detached: true,
-            stdio: ["ignore", logFd, logFd],
+            stdio: ["ignore", workerLog.stdio, workerLog.stdio],
             env: {
                 ...process.env,
                 NEUROLINK_PROXY_UPDATE_CONTROL_TOKEN: PROXY_UPDATE_CONTROL_TOKEN,
@@ -614,7 +610,7 @@ function spawnProxyUpdater(host, port, parentPid) {
         return undefined;
     }
     finally {
-        closeSync(logFd);
+        workerLog.close();
     }
 }
 async function runProxyTelemetryManager(command) {
@@ -1065,7 +1061,8 @@ export async function createProxyStartApp(params) {
                 metadata.stream = stream === "stream";
                 metadata.toolCount = toolCount;
             }
-            logger.always(`[proxy] ${c.req.method} ${c.req.path} → model=${model} ${stream} tools=${toolCount}`);
+            const logModel = sanitizeForLog(String(model));
+            logger.always(`[proxy] ${c.req.method} ${c.req.path} → model=${logModel} ${stream} tools=${toolCount}`);
             const ctx = {
                 requestId: metadata?.requestId ?? crypto.randomUUID(),
                 method: c.req.method,

package/dist/cli/utils/serverUtils.js

@@ -112,7 +112,10 @@ export class StateFileManager {
         if (!fs.existsSync(dir)) {
             fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
         }
-        fs.writeFileSync(this.filePath, JSON.stringify(state, null, 2));
+        fs.writeFileSync(this.filePath, JSON.stringify(state, null, 2), {
+            mode: 0o600,
+        });
+        fs.chmodSync(this.filePath, 0o600);
     }
     /**
      * Load state from the state file

package/dist/lib/proxy/globalInstaller.js

@@ -14,7 +14,7 @@ function writableDirectory(path) {
         if (!existsSync(path)) {
             return false;
         }
-        accessSync(path, constants.W_OK);
+        accessSync(path, constants.W_OK | constants.X_OK);
         return true;
     }
     catch {

package/dist/lib/proxy/openaiFormat.js

@@ -760,6 +760,7 @@ export function createClaudeToOpenAIStreamTransform(requestModel, options = {})
                 finished = true;
                 options.onError?.(message);
                 emit(controller, serializer.emitError(message));
+                controller.terminate();
                 return;
             }
             default:

package/dist/lib/proxy/sseInterceptor.js

@@ -337,7 +337,7 @@ function processEvent(acc, event) {
         const message = nestedError?.message ?? payload.message;
         acc.streamErrorMessage =
             typeof message === "string" && message.trim()
-                ? message.trim()
+                ? truncateString(message.trim(), MAX_EVENT_DATA_BYTES)
                 : truncateString(event.data, MAX_EVENT_DATA_BYTES);
     }
     switch (event.event) {

package/dist/lib/proxy/workerLog.d.ts

@@ -0,0 +1,6 @@
+/** Open a restrictive worker log without making proxy startup depend on it. */
+export declare function openProxyWorkerLog(filename: string, logDir?: string): {
+    stdio: number | "ignore";
+    close: () => void;
+    error?: string;
+};

package/dist/lib/proxy/workerLog.js

@@ -0,0 +1,42 @@
+import { chmodSync, closeSync, existsSync, mkdirSync, openSync, statSync, } from "node:fs";
+import { homedir } from "node:os";
+import { basename, join } from "node:path";
+/** Open a restrictive worker log without making proxy startup depend on it. */
+export function openProxyWorkerLog(filename, logDir = join(homedir(), ".neurolink", "logs")) {
+    let fd;
+    try {
+        if (basename(filename) !== filename) {
+            throw new Error("worker log filename must not contain a path");
+        }
+        if (!existsSync(logDir)) {
+            mkdirSync(logDir, { recursive: true, mode: 0o700 });
+        }
+        else if (!statSync(logDir).isDirectory()) {
+            throw new Error("worker log path exists but is not a directory");
+        }
+        chmodSync(logDir, 0o700);
+        const path = join(logDir, filename);
+        fd = openSync(path, "a", 0o600);
+        chmodSync(path, 0o600);
+        return {
+            stdio: fd,
+            close: () => closeSync(fd),
+        };
+    }
+    catch (error) {
+        if (fd !== undefined) {
+            try {
+                closeSync(fd);
+            }
+            catch {
+                // The log is optional and startup must remain fail-open.
+            }
+        }
+        return {
+            stdio: "ignore",
+            close: () => undefined,
+            error: error instanceof Error ? error.message : String(error),
+        };
+    }
+}
+//# sourceMappingURL=workerLog.js.map

package/dist/lib/server/routes/openaiProxyRoutes.d.ts

@@ -12,6 +12,11 @@
  * provider/model pairs (e.g. "gpt-4o" -> vertex/gemini-2.5-pro).
  */
 import type { ModelRouterInterface, ProxyRuntimeConfigProvider, RouteGroup } from "../../types/index.js";
+declare function resolveStreamCancellationLifecycle(terminalStreamError: string | undefined): {
+    status: number;
+    errorType: string;
+    errorMessage: string;
+};
 /**
  * Create OpenAI-compatible proxy routes.
  *
@@ -27,3 +32,7 @@ import type { ModelRouterInterface, ProxyRuntimeConfigProvider, RouteGroup } fro
  * @returns RouteGroup with OpenAI-compatible endpoints.
  */
 export declare function createOpenAIProxyRoutes(modelRouter?: ModelRouterInterface, basePath?: string, loopbackPort?: number, runtimeConfigProvider?: ProxyRuntimeConfigProvider): RouteGroup;
+export declare const __testHooks: {
+    resolveStreamCancellationLifecycle: typeof resolveStreamCancellationLifecycle;
+};
+export {};

package/dist/lib/server/routes/openaiProxyRoutes.js

@@ -27,6 +27,19 @@ const LOOPBACK_TIMEOUT_MS = 5 * 60 * 1000; // 5 minutes — long enough for slow
 // `createOpenAIProxyRoutes`'s third argument when the actual listener port is
 // known (e.g. when started from the CLI handler).
 const DEFAULT_LOOPBACK_PORT = 55669;
+function resolveStreamCancellationLifecycle(terminalStreamError) {
+    return terminalStreamError
+        ? {
+            status: 502,
+            errorType: "loopback_stream_error",
+            errorMessage: terminalStreamError,
+        }
+        : {
+            status: 499,
+            errorType: "client_cancelled",
+            errorMessage: "Client cancelled the OpenAI-compatible stream",
+        };
+}
 /**
  * Build an OpenAI-shaped error as a typed Response with the intended status.
  *
@@ -188,7 +201,8 @@ async function handleOpenAIToAnthropicBridge(args) {
                     await reader.cancel(reason);
                 }
                 finally {
-                    await finishLifecycle(499, "client_cancelled", "Client cancelled the OpenAI-compatible stream");
+                    const cancellation = resolveStreamCancellationLifecycle(terminalStreamError);
+                    await finishLifecycle(cancellation.status, cancellation.errorType, cancellation.errorMessage);
                 }
             },
         });
@@ -381,4 +395,5 @@ export function createOpenAIProxyRoutes(modelRouter, basePath = "", loopbackPort
         ],
     };
 }
+export const __testHooks = { resolveStreamCancellationLifecycle };
 //# sourceMappingURL=openaiProxyRoutes.js.map

package/dist/proxy/globalInstaller.js

@@ -14,7 +14,7 @@ function writableDirectory(path) {
         if (!existsSync(path)) {
             return false;
         }
-        accessSync(path, constants.W_OK);
+        accessSync(path, constants.W_OK | constants.X_OK);
         return true;
     }
     catch {

package/dist/proxy/openaiFormat.js

@@ -760,6 +760,7 @@ export function createClaudeToOpenAIStreamTransform(requestModel, options = {})
                 finished = true;
                 options.onError?.(message);
                 emit(controller, serializer.emitError(message));
+                controller.terminate();
                 return;
             }
             default:

package/dist/proxy/sseInterceptor.js

@@ -337,7 +337,7 @@ function processEvent(acc, event) {
         const message = nestedError?.message ?? payload.message;
         acc.streamErrorMessage =
             typeof message === "string" && message.trim()
-                ? message.trim()
+                ? truncateString(message.trim(), MAX_EVENT_DATA_BYTES)
                 : truncateString(event.data, MAX_EVENT_DATA_BYTES);
     }
     switch (event.event) {

package/dist/proxy/workerLog.d.ts

@@ -0,0 +1,6 @@
+/** Open a restrictive worker log without making proxy startup depend on it. */
+export declare function openProxyWorkerLog(filename: string, logDir?: string): {
+    stdio: number | "ignore";
+    close: () => void;
+    error?: string;
+};

package/dist/proxy/workerLog.js

@@ -0,0 +1,41 @@
+import { chmodSync, closeSync, existsSync, mkdirSync, openSync, statSync, } from "node:fs";
+import { homedir } from "node:os";
+import { basename, join } from "node:path";
+/** Open a restrictive worker log without making proxy startup depend on it. */
+export function openProxyWorkerLog(filename, logDir = join(homedir(), ".neurolink", "logs")) {
+    let fd;
+    try {
+        if (basename(filename) !== filename) {
+            throw new Error("worker log filename must not contain a path");
+        }
+        if (!existsSync(logDir)) {
+            mkdirSync(logDir, { recursive: true, mode: 0o700 });
+        }
+        else if (!statSync(logDir).isDirectory()) {
+            throw new Error("worker log path exists but is not a directory");
+        }
+        chmodSync(logDir, 0o700);
+        const path = join(logDir, filename);
+        fd = openSync(path, "a", 0o600);
+        chmodSync(path, 0o600);
+        return {
+            stdio: fd,
+            close: () => closeSync(fd),
+        };
+    }
+    catch (error) {
+        if (fd !== undefined) {
+            try {
+                closeSync(fd);
+            }
+            catch {
+                // The log is optional and startup must remain fail-open.
+            }
+        }
+        return {
+            stdio: "ignore",
+            close: () => undefined,
+            error: error instanceof Error ? error.message : String(error),
+        };
+    }
+}

package/dist/server/routes/openaiProxyRoutes.d.ts

@@ -12,6 +12,11 @@
  * provider/model pairs (e.g. "gpt-4o" -> vertex/gemini-2.5-pro).
  */
 import type { ModelRouterInterface, ProxyRuntimeConfigProvider, RouteGroup } from "../../types/index.js";
+declare function resolveStreamCancellationLifecycle(terminalStreamError: string | undefined): {
+    status: number;
+    errorType: string;
+    errorMessage: string;
+};
 /**
  * Create OpenAI-compatible proxy routes.
  *
@@ -27,3 +32,7 @@ import type { ModelRouterInterface, ProxyRuntimeConfigProvider, RouteGroup } fro
  * @returns RouteGroup with OpenAI-compatible endpoints.
  */
 export declare function createOpenAIProxyRoutes(modelRouter?: ModelRouterInterface, basePath?: string, loopbackPort?: number, runtimeConfigProvider?: ProxyRuntimeConfigProvider): RouteGroup;
+export declare const __testHooks: {
+    resolveStreamCancellationLifecycle: typeof resolveStreamCancellationLifecycle;
+};
+export {};

package/dist/server/routes/openaiProxyRoutes.js

@@ -27,6 +27,19 @@ const LOOPBACK_TIMEOUT_MS = 5 * 60 * 1000; // 5 minutes — long enough for slow
 // `createOpenAIProxyRoutes`'s third argument when the actual listener port is
 // known (e.g. when started from the CLI handler).
 const DEFAULT_LOOPBACK_PORT = 55669;
+function resolveStreamCancellationLifecycle(terminalStreamError) {
+    return terminalStreamError
+        ? {
+            status: 502,
+            errorType: "loopback_stream_error",
+            errorMessage: terminalStreamError,
+        }
+        : {
+            status: 499,
+            errorType: "client_cancelled",
+            errorMessage: "Client cancelled the OpenAI-compatible stream",
+        };
+}
 /**
  * Build an OpenAI-shaped error as a typed Response with the intended status.
  *
@@ -188,7 +201,8 @@ async function handleOpenAIToAnthropicBridge(args) {
                     await reader.cancel(reason);
                 }
                 finally {
-                    await finishLifecycle(499, "client_cancelled", "Client cancelled the OpenAI-compatible stream");
+                    const cancellation = resolveStreamCancellationLifecycle(terminalStreamError);
+                    await finishLifecycle(cancellation.status, cancellation.errorType, cancellation.errorMessage);
                 }
             },
         });
@@ -381,3 +395,4 @@ export function createOpenAIProxyRoutes(modelRouter, basePath = "", loopbackPort
         ],
     };
 }
+export const __testHooks = { resolveStreamCancellationLifecycle };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@juspay/neurolink",
-  "version": "9.93.1",
+  "version": "9.93.2",
   "packageManager": "pnpm@10.15.1",
   "description": "TypeScript AI SDK with 24+ LLM providers behind one consistent API. MCP-native (connect any MCP server), voice TTS/STT/realtime, RAG, agents, memory, context compaction. OpenAI · Anthropic · Gemini · Bedrock · Azure · Ollama · DeepSeek · NVIDIA NIM and more.",
   "author": {