@node-llm/core 1.17.0 → 1.17.1

package/dist/providers/anthropic/Models.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Models.d.ts","sourceRoot":"","sources":["../../../src/providers/anthropic/Models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAI3C,qBAAa,eAAe;IAExB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAG3B,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAqDrC,IAAI,CAAC,OAAO,EAAE,MAAM;CAGrB"}
+{"version":3,"file":"Models.d.ts","sourceRoot":"","sources":["../../../src/providers/anthropic/Models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAM3C,qBAAa,eAAe;IAExB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAG3B,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAyDrC,IAAI,CAAC,OAAO,EAAE,MAAM;CAGrB"}

package/dist/providers/anthropic/Models.js

@@ -1,3 +1,5 @@
+import { config } from "../../config.js";
+import { fetchWithTimeout } from "../../utils/fetch.js";
 import { Capabilities } from "./Capabilities.js";
 import { ModelRegistry } from "../../models/ModelRegistry.js";
 export class AnthropicModels {
@@ -9,14 +11,14 @@ export class AnthropicModels {
     }
     async execute() {
         try {
-            const response = await fetch(`${this.baseUrl}/models`, {
+            const response = await fetchWithTimeout(`${this.baseUrl}/models`, {
                 method: "GET",
                 headers: {
                     "x-api-key": this.apiKey,
                     "anthropic-version": "2023-06-01",
                     "content-type": "application/json"
                 }
-            });
+            }, config.requestTimeout);
             if (response.ok) {
                 const { data } = (await response.json());
                 return data.map((m) => {

package/dist/providers/deepseek/Models.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Models.d.ts","sourceRoot":"","sources":["../../../src/providers/deepseek/Models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAe3C,qBAAa,cAAc;IAEvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAG3B,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;CA+DtC"}
+{"version":3,"file":"Models.d.ts","sourceRoot":"","sources":["../../../src/providers/deepseek/Models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAiB3C,qBAAa,cAAc;IAEvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAG3B,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;CAmEtC"}

package/dist/providers/deepseek/Models.js

@@ -1,3 +1,5 @@
+import { config } from "../../config.js";
+import { fetchWithTimeout } from "../../utils/fetch.js";
 import { Capabilities } from "./Capabilities.js";
 import { ModelRegistry } from "../../models/ModelRegistry.js";
 export class DeepSeekModels {
@@ -8,12 +10,12 @@ export class DeepSeekModels {
         this.apiKey = apiKey;
     }
     async execute() {
-        const response = await fetch(`${this.baseUrl}/models`, {
+        const response = await fetchWithTimeout(`${this.baseUrl}/models`, {
             method: "GET",
             headers: {
                 Authorization: `Bearer ${this.apiKey}`
             }
-        });
+        }, config.requestTimeout);
         if (!response.ok) {
             // Fallback to local registry
             const localModels = ModelRegistry.all()

package/dist/providers/gemini/Embeddings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Embeddings.d.ts","sourceRoot":"","sources":["../../../src/providers/gemini/Embeddings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAKrE,qBAAa,gBAAgB;IAEzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAG3B,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CA2CrE"}
+{"version":3,"file":"Embeddings.d.ts","sourceRoot":"","sources":["../../../src/providers/gemini/Embeddings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAOrE,qBAAa,gBAAgB;IAEzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAG3B,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CA+CrE"}

package/dist/providers/gemini/Embeddings.js

@@ -1,3 +1,5 @@
+import { config } from "../../config.js";
+import { fetchWithTimeout } from "../../utils/fetch.js";
 import { handleGeminiError } from "./Errors.js";
 import { logger } from "../../utils/logger.js";
 export class GeminiEmbeddings {
@@ -26,11 +28,11 @@ export class GeminiEmbeddings {
             })
         };
         logger.logRequest("Gemini", "POST", url, payload);
-        const response = await fetch(url, {
+        const response = await fetchWithTimeout(url, {
             method: "POST",
             headers: { "Content-Type": "application/json" },
             body: JSON.stringify(payload)
-        });
+        }, config.requestTimeout);
         if (!response.ok) {
             await handleGeminiError(response, modelId);
         }

package/dist/providers/gemini/Image.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Image.d.ts","sourceRoot":"","sources":["../../../src/providers/gemini/Image.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAK7D,qBAAa,WAAW;IAEpB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAG3B,OAAO,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;CAiE7D"}
+{"version":3,"file":"Image.d.ts","sourceRoot":"","sources":["../../../src/providers/gemini/Image.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAO7D,qBAAa,WAAW;IAEpB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAG3B,OAAO,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;CAqE7D"}

package/dist/providers/gemini/Image.js

@@ -1,3 +1,5 @@
+import { config } from "../../config.js";
+import { fetchWithTimeout } from "../../utils/fetch.js";
 import { handleGeminiError } from "./Errors.js";
 import { logger } from "../../utils/logger.js";
 import { BinaryUtils } from "../../utils/Binary.js";
@@ -36,13 +38,13 @@ export class GeminiImage {
             }
         };
         logger.logRequest("Gemini", "POST", url, body);
-        const response = await fetch(url, {
+        const response = await fetchWithTimeout(url, {
             method: "POST",
             headers: {
                 "Content-Type": "application/json"
             },
             body: JSON.stringify(body)
-        });
+        }, config.requestTimeout);
         if (!response.ok) {
             await handleGeminiError(response, modelId);
         }

package/dist/providers/gemini/Models.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Models.d.ts","sourceRoot":"","sources":["../../../src/providers/gemini/Models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAK3C,qBAAa,YAAY;IAErB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAG3B,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAmDrC,IAAI,CAAC,OAAO,EAAE,MAAM;CAGrB"}
+{"version":3,"file":"Models.d.ts","sourceRoot":"","sources":["../../../src/providers/gemini/Models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAO3C,qBAAa,YAAY;IAErB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAG3B,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAuDrC,IAAI,CAAC,OAAO,EAAE,MAAM;CAGrB"}

package/dist/providers/gemini/Models.js

@@ -1,3 +1,5 @@
+import { config } from "../../config.js";
+import { fetchWithTimeout } from "../../utils/fetch.js";
 import { Capabilities } from "./Capabilities.js";
 import { ModelRegistry } from "../../models/ModelRegistry.js";
 export class GeminiModels {
@@ -9,12 +11,12 @@ export class GeminiModels {
     }
     async execute() {
         try {
-            const response = await fetch(`${this.baseUrl}/models?key=${this.apiKey}`, {
+            const response = await fetchWithTimeout(`${this.baseUrl}/models?key=${this.apiKey}`, {
                 method: "GET",
                 headers: {
                     "Content-Type": "application/json"
                 }
-            });
+            }, config.requestTimeout);
             if (response.ok) {
                 const { models } = (await response.json());
                 return models.map((m) => {

package/dist/providers/gemini/Transcription.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Transcription.d.ts","sourceRoot":"","sources":["../../../src/providers/gemini/Transcription.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAM7E,qBAAa,mBAAmB;IAK5B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IALzB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CACuC;gBAG1D,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAG3B,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CA8D7E"}
+{"version":3,"file":"Transcription.d.ts","sourceRoot":"","sources":["../../../src/providers/gemini/Transcription.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAQ7E,qBAAa,mBAAmB;IAK5B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IALzB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CACuC;gBAG1D,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAG3B,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAkE7E"}

package/dist/providers/gemini/Transcription.js

@@ -1,3 +1,5 @@
+import { config } from "../../config.js";
+import { fetchWithTimeout } from "../../utils/fetch.js";
 import { handleGeminiError } from "./Errors.js";
 import { BinaryUtils } from "../../utils/Binary.js";
 import { logger } from "../../utils/logger.js";
@@ -44,13 +46,13 @@ export class GeminiTranscription {
             }
         };
         logger.logRequest("Gemini", "POST", url, payload);
-        const response = await fetch(url, {
+        const response = await fetchWithTimeout(url, {
             method: "POST",
             headers: {
                 "Content-Type": "application/json"
             },
             body: JSON.stringify(payload)
-        });
+        }, config.requestTimeout);
         if (!response.ok) {
             await handleGeminiError(response, model);
         }

package/dist/providers/mistral/Embedding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Embedding.d.ts","sourceRoot":"","sources":["../../../src/providers/mistral/Embedding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAoBrE,qBAAa,gBAAgB;IAEzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAG3B,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAwCrE"}
+{"version":3,"file":"Embedding.d.ts","sourceRoot":"","sources":["../../../src/providers/mistral/Embedding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAsBrE,qBAAa,gBAAgB;IAEzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAG3B,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CA4CrE"}

package/dist/providers/mistral/Embedding.js

@@ -1,3 +1,5 @@
+import { config } from "../../config.js";
+import { fetchWithTimeout } from "../../utils/fetch.js";
 import { logger } from "../../utils/logger.js";
 import { handleMistralError } from "./Errors.js";
 import { MistralCapabilities } from "./Capabilities.js";
@@ -20,7 +22,7 @@ export class MistralEmbedding {
         };
         const url = `${this.baseUrl}/embeddings`;
         logger.logRequest("Mistral Embeddings", "POST", url, body);
-        const response = await fetch(url, {
+        const response = await fetchWithTimeout(url, {
             method: "POST",
             headers: {
                 Authorization: `Bearer ${this.apiKey}`,
@@ -28,7 +30,7 @@ export class MistralEmbedding {
                 Accept: "application/json"
             },
             body: JSON.stringify(body)
-        });
+        }, config.requestTimeout);
         if (!response.ok) {
             await handleMistralError(response, model);
         }

package/dist/providers/mistral/Models.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Models.d.ts","sourceRoot":"","sources":["../../../src/providers/mistral/Models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAgB3C,qBAAa,aAAa;IAEtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAG3B,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;CAmEtC"}
+{"version":3,"file":"Models.d.ts","sourceRoot":"","sources":["../../../src/providers/mistral/Models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAkB3C,qBAAa,aAAa;IAEtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAG3B,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;CAuEtC"}

package/dist/providers/mistral/Models.js

@@ -1,3 +1,5 @@
+import { config } from "../../config.js";
+import { fetchWithTimeout } from "../../utils/fetch.js";
 import { MistralCapabilities } from "./Capabilities.js";
 import { ModelRegistry } from "../../models/ModelRegistry.js";
 export class MistralModels {
@@ -8,13 +10,13 @@ export class MistralModels {
         this.apiKey = apiKey;
     }
     async execute() {
-        const response = await fetch(`${this.baseUrl}/models`, {
+        const response = await fetchWithTimeout(`${this.baseUrl}/models`, {
             method: "GET",
             headers: {
                 Authorization: `Bearer ${this.apiKey}`,
                 Accept: "application/json"
             }
-        });
+        }, config.requestTimeout);
         if (!response.ok) {
             // Fallback to local registry
             const localModels = ModelRegistry.all()

package/dist/providers/openai/Models.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Models.d.ts","sourceRoot":"","sources":["../../../src/providers/openai/Models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAK3C,qBAAa,YAAY;IAErB,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM;IAClC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBADd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAGnC,SAAS,CAAC,eAAe,IAAI,MAAM;IAInC,SAAS,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAMpD,SAAS,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAQ1D,SAAS,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAQ5D,SAAS,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM;;;;IAKvC,SAAS,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE;IAKpD,SAAS,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM;IAK9B,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IA0DrC,IAAI,CAAC,OAAO,EAAE,MAAM;CAGrB"}
+{"version":3,"file":"Models.d.ts","sourceRoot":"","sources":["../../../src/providers/openai/Models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAO3C,qBAAa,YAAY;IAErB,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM;IAClC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBADd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAGnC,SAAS,CAAC,eAAe,IAAI,MAAM;IAInC,SAAS,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAMpD,SAAS,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAQ1D,SAAS,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAQ5D,SAAS,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM;;;;IAKvC,SAAS,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE;IAKpD,SAAS,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM;IAK9B,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IA8DrC,IAAI,CAAC,OAAO,EAAE,MAAM;CAGrB"}

package/dist/providers/openai/Models.js

@@ -1,3 +1,5 @@
+import { config } from "../../config.js";
+import { fetchWithTimeout } from "../../utils/fetch.js";
 import { Capabilities } from "./Capabilities.js";
 import { ModelRegistry } from "../../models/ModelRegistry.js";
 import { buildUrl } from "./utils.js";
@@ -42,13 +44,13 @@ export class OpenAIModels {
     async execute() {
         const provider = this.getProviderName();
         try {
-            const response = await fetch(buildUrl(this.baseUrl, "/models"), {
+            const response = await fetchWithTimeout(buildUrl(this.baseUrl, "/models"), {
                 method: "GET",
                 headers: {
                     Authorization: `Bearer ${this.apiKey}`,
                     "Content-Type": "application/json"
                 }
-            });
+            }, config.requestTimeout);
             if (response.ok) {
                 const { data } = (await response.json());
                 return data.map((m) => {

package/dist/providers/openrouter/Models.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Models.d.ts","sourceRoot":"","sources":["../../../src/providers/openrouter/Models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAwB3C,qBAAa,gBAAgB;IAEzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAG3B,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAiBrC,OAAO,CAAC,UAAU;IA0BlB,OAAO,CAAC,iBAAiB;IA8BzB,OAAO,CAAC,YAAY;CAgCrB"}
+{"version":3,"file":"Models.d.ts","sourceRoot":"","sources":["../../../src/providers/openrouter/Models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AA0B3C,qBAAa,gBAAgB;IAEzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM;IAG3B,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAqBrC,OAAO,CAAC,UAAU;IA0BlB,OAAO,CAAC,iBAAiB;IA8BzB,OAAO,CAAC,YAAY;CAgCrB"}

package/dist/providers/openrouter/Models.js

@@ -1,3 +1,5 @@
+import { config } from "../../config.js";
+import { fetchWithTimeout } from "../../utils/fetch.js";
 export class OpenRouterModels {
     baseUrl;
     apiKey;
@@ -6,12 +8,12 @@ export class OpenRouterModels {
         this.apiKey = apiKey;
     }
     async execute() {
-        const response = await fetch(`${this.baseUrl}/models`, {
+        const response = await fetchWithTimeout(`${this.baseUrl}/models`, {
             headers: {
                 Authorization: `Bearer ${this.apiKey}`,
                 "Content-Type": "application/json"
             }
-        });
+        }, config.requestTimeout);
         if (!response.ok) {
             throw new Error(`OpenRouter API error: ${response.status}`);
         }

package/dist/utils/Binary.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Binary.d.ts","sourceRoot":"","sources":["../../src/utils/Binary.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,WAAW;IACtB;;OAEG;WACU,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IA0C9D;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI;IAI7C;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAIjD,OAAO,CAAC,MAAM,CAAC,aAAa;CA0B7B"}
+{"version":3,"file":"Binary.d.ts","sourceRoot":"","sources":["../../src/utils/Binary.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,WAAW;IACtB;;OAEG;WACU,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAmD9D;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI;IAI7C;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAIjD,OAAO,CAAC,MAAM,CAAC,aAAa;CA0B7B"}

package/dist/utils/Binary.js

@@ -1,6 +1,8 @@
 import fs from "fs";
 import path from "path";
 import { logger } from "./logger.js";
+/** Max size (bytes) for a remotely-fetched binary, buffered fully into memory. */
+const MAX_REMOTE_BYTES = 50 * 1024 * 1024;
 export class BinaryUtils {
     /**
      * Converts a URL (data:, http:, or local path) to a base64 string and mime type.
@@ -20,7 +22,16 @@ export class BinaryUtils {
                 const response = await fetch(url);
                 if (!response.ok)
                     return null;
+                const declared = Number(response.headers.get("content-length"));
+                if (Number.isFinite(declared) && declared > MAX_REMOTE_BYTES) {
+                    logger.error(`Remote file exceeds ${MAX_REMOTE_BYTES}-byte limit: ${url}`);
+                    return null;
+                }
                 const buffer = await response.arrayBuffer();
+                if (buffer.byteLength > MAX_REMOTE_BYTES) {
+                    logger.error(`Remote file exceeds ${MAX_REMOTE_BYTES}-byte limit: ${url}`);
+                    return null;
+                }
                 const base64 = Buffer.from(buffer).toString("base64");
                 const mimeType = response.headers.get("content-type") || this.guessMimeType(url);
                 return {

package/dist/utils/FileLoader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FileLoader.d.ts","sourceRoot":"","sources":["../../src/utils/FileLoader.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAgEjD,qBAAa,UAAU;WACR,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;CAmF1D"}
+{"version":3,"file":"FileLoader.d.ts","sourceRoot":"","sources":["../../src/utils/FileLoader.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAyFjD,qBAAa,UAAU;WACR,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;CAmF1D"}

package/dist/utils/FileLoader.js

@@ -1,5 +1,23 @@
 import { promises as fs } from "fs";
 import * as path from "path";
+/**
+ * Maximum size (bytes) for a remotely-fetched attachment. Caps memory use and
+ * limits the blast radius if an untrusted URL is ever passed here (the fetched
+ * body is buffered fully into memory as base64). 50 MB comfortably covers
+ * images, audio, and PDFs sent to providers.
+ */
+const MAX_REMOTE_BYTES = 50 * 1024 * 1024;
+async function readCapped(response, source) {
+    const declared = Number(response.headers.get("content-length"));
+    if (Number.isFinite(declared) && declared > MAX_REMOTE_BYTES) {
+        throw new Error(`Remote file ${source} is ${declared} bytes, exceeding the ${MAX_REMOTE_BYTES}-byte limit.`);
+    }
+    const buffer = await response.arrayBuffer();
+    if (buffer.byteLength > MAX_REMOTE_BYTES) {
+        throw new Error(`Remote file ${source} is ${buffer.byteLength} bytes, exceeding the ${MAX_REMOTE_BYTES}-byte limit.`);
+    }
+    return buffer;
+}
 const MIME_TYPES = {
     ".jpg": "image/jpeg",
     ".jpeg": "image/jpeg",
@@ -50,7 +68,8 @@ const TEXT_EXTENSIONS = new Set([
     ".xml",
     ".yml",
     ".yaml",
-    ".env",
+    // ".env" intentionally excluded: silently inlining a dotenv file would leak
+    // secrets into the prompt sent to the provider.
     ".csv",
     ".go",
     ".java",
@@ -67,7 +86,7 @@ export class FileLoader {
                 const response = await fetch(filePath);
                 if (!response.ok)
                     throw new Error(`Failed to fetch file: ${response.statusText}`);
-                const buffer = await response.arrayBuffer();
+                const buffer = await readCapped(response, filePath);
                 const contentTypeFull = response.headers.get("content-type") || "image/jpeg";
                 const contentType = (contentTypeFull.split(";")[0] ?? "image/jpeg").trim();
                 const base64 = Buffer.from(buffer).toString("base64");

package/dist/utils/logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAEA,cAAM,MAAM;IACV,OAAO,CAAC,cAAc;IAItB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI;IAO5C;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI;IAS/E;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI;IASvF,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAI3B,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI;IAI3C,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;CAG5B;AAED,eAAO,MAAM,MAAM,QAAe,CAAC"}
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAUA,cAAM,MAAM;IACV,OAAO,CAAC,cAAc;IAItB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI;IAO5C;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI;IAS/E;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI;IASvF,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAI3B,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI;IAI3C,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;CAG5B;AAED,eAAO,MAAM,MAAM,QAAe,CAAC"}

package/dist/utils/logger.js

@@ -1,4 +1,11 @@
 import { config } from "../config.js";
+/**
+ * Masks credentials passed as URL query parameters (e.g. Gemini's `?key=...`)
+ * so they never reach stdout or a log aggregator when debug logging is on.
+ */
+function redactUrl(url) {
+    return url.replace(/([?&](?:key|api_key|apikey|access_token|token)=)[^&#]+/gi, "$1[REDACTED]");
+}
 class Logger {
     isDebugEnabled() {
         return config.debug === true;
@@ -14,7 +21,7 @@ class Logger {
      */
     logRequest(provider, method, url, body) {
         if (this.isDebugEnabled()) {
-            console.log(`[NodeLLM] [${provider}] Request: ${method} ${url}`);
+            console.log(`[NodeLLM] [${provider}] Request: ${method} ${redactUrl(url)}`);
             if (body) {
                 console.log(JSON.stringify(body, null, 2));
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node-llm/core",
-  "version": "1.17.0",
+  "version": "1.17.1",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -55,17 +55,6 @@
     "README.md",
     "LICENSE"
   ],
-  "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "dev": "tsc -w",
-    "lint": "tsc --noEmit",
-    "test": "vitest run",
-    "test:docs": "vitest run test/docs",
-    "test:watch": "vitest",
-    "prepack": "npm run build && cp ../../CHANGELOG.md ./CHANGELOG.md",
-    "postpack": "rm ./CHANGELOG.md",
-    "prepublishOnly": "npm run build && npm run test:docs"
-  },
   "dependencies": {
     "zod": "^3.23.8",
     "zod-to-json-schema": "^3.25.1"
@@ -75,5 +64,13 @@
     "@pollyjs/adapter-node-http": "^6.0.6",
     "@pollyjs/core": "^6.0.6",
     "@pollyjs/persister-fs": "^6.0.6"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsc -w",
+    "lint": "tsc --noEmit",
+    "test": "vitest run",
+    "test:docs": "vitest run test/docs",
+    "test:watch": "vitest"
   }
-}
+}