@elsium-ai/cli 0.12.0 → 0.12.1

package/dist/cli.js

@@ -6023,6 +6023,15 @@ function createWorkerSandboxRunner(config, defaultTimeoutMs) {
 }
 
 // ../tools/src/define.ts
+var log7 = createLogger();
+var IS_BUN = typeof globalThis.Bun !== "undefined" || typeof process !== "undefined" && Boolean(process.versions.bun);
+var bunSandboxWarningShown = false;
+function warnBunSandboxOnce(toolName) {
+  if (bunSandboxWarningShown)
+    return;
+  bunSandboxWarningShown = true;
+  log7.warn(`Tool "${toolName}" uses sandbox.mode="worker" under Bun. Crash isolation is incomplete on Bun: process.exit() inside the handler does NOT terminate the worker (it does on Node). Other guarantees (process, memory, closure-state, timeout, abort) hold. Track: https://github.com/elsium-ai/elsium-ai/issues — search for "Bun crash isolation".`);
+}
 function formatZodErrors(error) {
   return error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join(", ");
 }
@@ -6042,6 +6051,30 @@ function buildExecutionSuccess(toolCallId, startTime, data) {
     durationMs: Math.round(performance.now() - startTime)
   };
 }
+function wireUserSignalToController(controller, userSignal) {
+  if (!userSignal)
+    return;
+  if (userSignal.aborted) {
+    controller.abort();
+    return;
+  }
+  userSignal.addEventListener("abort", () => controller.abort(), { once: true });
+}
+function createAbortRejection(signal, isTimeout, name, timeoutMs) {
+  return new Promise((_, reject) => {
+    signal.addEventListener("abort", () => {
+      if (isTimeout()) {
+        reject(ElsiumError.timeout(name, timeoutMs));
+      } else {
+        reject(new ElsiumError({
+          code: "TOOL_ERROR",
+          message: `Tool "${name}" was aborted`,
+          retryable: false
+        }));
+      }
+    }, { once: true });
+  });
+}
 function defineTool(config) {
   const input = config.input ?? config.parameters;
   if (!input) {
@@ -6053,6 +6086,9 @@ function defineTool(config) {
   if (config.sandbox && config.sandbox.mode !== "worker") {
     throw ElsiumError.validation(`Tool "${config.name}" sandbox.mode must be "worker" (received "${config.sandbox.mode}")`);
   }
+  if (config.sandbox && IS_BUN) {
+    warnBunSandboxOnce(config.name);
+  }
   const { name, description, output, sandbox, timeoutMs = 30000 } = config;
   const handler = config.handler;
   let sandboxRunner = null;
@@ -6090,20 +6126,21 @@ function defineTool(config) {
         return buildExecutionFailure(toolCallId, startTime, `Invalid input: ${formatZodErrors(parsed.error)}`);
       }
       const controller = new AbortController;
-      const timer = setTimeout(() => controller.abort(), timeoutMs);
+      let timedOut = false;
+      const timer = setTimeout(() => {
+        timedOut = true;
+        controller.abort();
+      }, timeoutMs);
+      wireUserSignalToController(controller, partialCtx?.signal);
       const context = {
         toolCallId,
         traceId: partialCtx?.traceId,
-        signal: partialCtx?.signal ?? controller.signal
+        signal: controller.signal
       };
       try {
         const result = await Promise.race([
           runHandler(parsed.data, context),
-          new Promise((_, reject) => {
-            context.signal?.addEventListener("abort", () => {
-              reject(ElsiumError.timeout(name, timeoutMs));
-            });
-          })
+          createAbortRejection(controller.signal, () => timedOut, name, timeoutMs)
         ]);
         if (output) {
           const validated = output.safeParse(result);
@@ -10462,7 +10499,7 @@ init_src();
 init_src();
 import { createRequire } from "node:module";
 var require2 = createRequire(import.meta.url);
-var log7 = createLogger();
+var log8 = createLogger();
 var BLOCKED_KEYS2 = new Set(["__proto__", "constructor", "prototype"]);
 // ../agents/src/stores/integrity.ts
 var ZERO_HASH = "0".repeat(64);
@@ -10472,7 +10509,7 @@ init_src();
 init_src();
 // ../agents/src/async-agent.ts
 init_src();
-var log8 = createLogger();
+var log9 = createLogger();
 // ../agents/src/session.ts
 init_src();
 // ../agents/src/react.ts
@@ -10495,7 +10532,7 @@ var vectorStoreRegistry = createRegistry("vectorStore");
 init_src();
 import { createRequire as createRequire2 } from "node:module";
 var require3 = createRequire2(import.meta.url);
-var log9 = createLogger();
+var log10 = createLogger();
 var BLOCKED_KEYS3 = new Set(["__proto__", "constructor", "prototype"]);
 // ../rag/src/stores/qdrant.ts
 init_src();
@@ -10710,13 +10747,13 @@ init_src();
 init_src();
 // ../observe/src/tracer.ts
 init_src();
-var log10 = createLogger();
+var log11 = createLogger();
 // ../observe/src/audit.ts
 import { createHash as createHash5 } from "node:crypto";
 
 // ../observe/src/audit-sink.ts
 init_src();
-var log11 = createLogger();
+var log12 = createLogger();
 function getRetryDelay2(attempt, baseDelayMs, maxDelayMs) {
   const delay = Math.min(baseDelayMs * 2 ** attempt, maxDelayMs);
   return delay * (0.5 + Math.random() * 0.5);
@@ -10744,14 +10781,14 @@ async function deliverToSink(sink, events, retryConfig, deadLetterSink, onError)
   try {
     await sendWithRetry(sink, filtered, retryConfig);
   } catch (error) {
-    log11.error("Audit sink delivery failed", { sink: sink.name });
+    log12.error("Audit sink delivery failed", { sink: sink.name });
     onError?.(sink.name, error);
     if (!deadLetterSink)
       return;
     try {
       await deadLetterSink.send(filtered);
     } catch (dlqError) {
-      log11.error("Dead letter sink delivery failed", { sink: deadLetterSink.name });
+      log12.error("Dead letter sink delivery failed", { sink: deadLetterSink.name });
       onError?.(deadLetterSink.name, dlqError);
     }
   }
@@ -10795,7 +10832,7 @@ function createSinkManager(config) {
     dispatch(event) {
       if (buffer.length >= maxBufferSize) {
         buffer.shift();
-        log11.warn("Audit sink buffer full, dropping oldest event");
+        log12.warn("Audit sink buffer full, dropping oldest event");
       }
       buffer.push(event);
       if (buffer.length >= batchSize)
@@ -11106,16 +11143,16 @@ function auditMiddleware(auditTrail) {
 }
 // ../observe/src/audit-sink-jsonl.ts
 init_src();
-var log12 = createLogger();
+var log13 = createLogger();
 // ../observe/src/experiment.ts
 init_src();
-var log13 = createLogger();
+var log14 = createLogger();
 // ../observe/src/studio-exporter.ts
 init_src();
-var log14 = createLogger();
+var log15 = createLogger();
 // ../observe/src/otel.ts
 init_src();
-var log15 = createLogger();
+var log16 = createLogger();
 // ../app/src/app.ts
 init_src();
 
@@ -12876,19 +12913,19 @@ init_src();
 init_src();
 
 // ../app/src/app.ts
-var log16 = createLogger();
+var log17 = createLogger();
 // ../app/src/rbac.ts
 init_src();
-var log17 = createLogger();
+var log18 = createLogger();
 // ../app/src/tenant.ts
 init_src();
-var log18 = createLogger();
+var log19 = createLogger();
 var tenantUsage = new Map;
 // ../mcp/src/client.ts
 init_src();
 // ../mcp/src/server.ts
 init_src();
-var log19 = createLogger();
+var log20 = createLogger();
 // ../mcp/src/trust.ts
 init_src();
 var MAX_TOOL_OUTPUT_SIZE = 1024 * 1024;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@elsium-ai/cli",
-	"version": "0.12.0",
+	"version": "0.12.1",
 	"description": "CLI tool for ElsiumAI projects",
 	"license": "MIT",
 	"author": "Eric Utrera <ebutrera9103@gmail.com>",
@@ -24,9 +24,9 @@
 		"dev": "bun --watch src/cli.ts"
 	},
 	"dependencies": {
-		"@elsium-ai/core": "^0.12.0",
-		"@elsium-ai/observe": "^0.12.0",
-		"elsium-ai": "^0.12.0"
+		"@elsium-ai/core": "^0.12.1",
+		"@elsium-ai/observe": "^0.12.1",
+		"elsium-ai": "^0.12.1"
 	},
 	"devDependencies": {
 		"typescript": "^5.7.0"