@defai.digital/automatosx 6.2.6 → 6.2.8

package/CHANGELOG.md

@@ -2,6 +2,82 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [6.2.8] - 2025-10-31
+
+### 🔧 Fixes
+
+**Provider Error Handler Timer Race Condition (Bug #35)**
+
+Through systematic heavy-thinking analysis of provider timer cleanup patterns:
+
+- **Bug #35 (MEDIUM)**: Missing cleanup() call in child process error handlers across all CLI providers
+  - **Files affected**:
+    - `src/providers/openai-provider.ts` (2 locations: lines 360, 760)
+    - `src/providers/claude-provider.ts` (line 445)
+    - `src/providers/gemini-provider.ts` (line 399)
+  - **Problem**: Error handlers call `cleanupAbortListener()` but NOT `cleanup()`, leaving timers running
+  - **Impact**: Race condition - if child.on('error') fires, mainTimeout continues and can create orphaned nestedKillTimeout
+  - **Root Cause**: Inconsistent cleanup pattern - close/timeout/abort handlers all call cleanup(), but error handler doesn't
+  - **Fix**: Added `cleanup()` call before `cleanupAbortListener()` in all error handlers (matching close handler pattern)
+  - **Scenario**: Between error event and close event, timers fire and create nested timers that aren't cleaned until close
+
+### 🔍 Analysis Methodology
+
+- **Heavy-thinking provider analysis**: Systematically checked all child.on('error') handlers in CLI providers
+- **Pattern comparison**: Verified cleanup() is called in close, timeout, and abort handlers
+- **Verified vulnerable operations**: All 3 CLI providers (OpenAI, Claude, Gemini) had same bug
+- **Fixed**: 4 total error handler locations across 3 provider files
+
+### 📊 Impact
+
+- **Users affected**: Users experiencing provider CLI process errors during execution
+- **Severity**: Medium (timers eventually cleaned in close handler, but race condition window exists)
+- **Breaking changes**: None
+- **Migration**: None required - automatic cleanup improvement
+
+### ✅ Testing
+
+- All 2,281 unit tests passing
+- TypeScript compilation successful
+- Build successful
+
+## [6.2.7] - 2025-10-31
+
+### 🔧 Fixes
+
+**Timer Cleanup Memory Leak (Bug #34)**
+
+Through systematic timer analysis across all setTimeout/setInterval operations:
+
+- **Bug #34 (LOW)**: Missing timer cleanup in prompt timeout handler (`src/core/prompt-manager.ts:238`)
+  - **Problem**: When main timeout fires, the warning timer (`warningHandle`) is not cleared
+  - **Impact**: Memory leak - warning timer continues running even after prompt resolved
+  - **Root Cause**: `handleTimeout()` clears readline and resolves promise, but forgets to clear `warningHandle`
+  - **Fix**: Added `clearTimeout(warningHandle)` in `handleTimeout()` before resolving (lines 242-244)
+  - **Pattern**: Symmetric cleanup - both answer callback and timeout handler now clear both timers
+
+### 🔍 Analysis Methodology
+
+- **Heavy-thinking timer analysis**: Systematically checked all setTimeout/setInterval in `src/core/`
+- **Verified safe operations**:
+  - db-connection-pool.ts queue timeouts (properly cleared in processWaitQueue)
+  - session-manager.ts save debouncing (clears before setting new)
+  - All setInterval operations have corresponding clear in destroy/close methods
+- **Fixed vulnerable operation**: prompt-manager.ts dual-timeout handling
+
+### 📊 Impact
+
+- **Users affected**: Users with interactive prompts that timeout (edge case)
+- **Severity**: Low (timer eventually completes, but wastes resources)
+- **Breaking changes**: None
+- **Migration**: None required - automatic cleanup improvement
+
+### ✅ Testing
+
+- All 2,281 unit tests passing
+- TypeScript compilation successful
+- Build successful
+
 ## [6.2.6] - 2025-10-31
 
 ### 🔧 Fixes

package/dist/index.js

@@ -4363,6 +4363,7 @@ Details: ${errorMsg}`
             }
           });
           child.on("error", (error) => {
+            cleanup();
             cleanupAbortListener();
             if (hasTimedOut) {
               return;
@@ -5018,6 +5019,7 @@ This is a placeholder response. Set AUTOMATOSX_MOCK_PROVIDERS=false to use real
             }
           });
           child.on("error", (error) => {
+            cleanup();
             cleanupAbortListener();
             if (!hasTimedOut) {
               reject(ProviderError.executionError(this.config.name, error));
@@ -5510,6 +5512,7 @@ This is a placeholder response. Set AUTOMATOSX_MOCK_PROVIDERS=false to use real
             }
           });
           child.on("error", (error) => {
+            cleanup();
             cleanupAbortListener();
             if (!hasTimedOut) {
               reject(new Error(`Failed to spawn OpenAI CLI: ${error.message}`));
@@ -5779,6 +5782,7 @@ This is a placeholder streaming response.`;
             }
           });
           child.on("error", (error) => {
+            cleanup();
             cleanupAbortListener();
             if (!hasTimedOut) {
               reject(new Error(`Failed to spawn OpenAI CLI: ${error.message}`));
@@ -23366,6 +23370,9 @@ ${this.config.locale === "zh" ? "\u8ACB\u9078\u64C7" : "Select"}${defaultDisplay
       const handleTimeout = () => {
         if (!resolved) {
           resolved = true;
+          if (warningHandle) {
+            clearTimeout(warningHandle);
+          }
           console.log(`
 ${template.timedOut}`);
           rl.close();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@defai.digital/automatosx",
-  "version": "6.2.6",
+  "version": "6.2.8",
   "description": "AI Agent Orchestration Platform",
   "type": "module",
   "publishConfig": {