@juspay/neurolink 10.8.21 → 10.8.22

package/CHANGELOG.md

@@ -1,3 +1,9 @@
+## [10.8.22](https://github.com/juspay/neurolink/compare/v10.8.21...v10.8.22) (2026-08-05)
+
+### Bug Fixes
+
+- **(proxy):** close updater and worker review gaps ([2631e23](https://github.com/juspay/neurolink/commit/2631e23dee43b0352e0fff85a462dcb252c013ec))
+
 ## [10.8.21](https://github.com/juspay/neurolink/compare/v10.8.20...v10.8.21) (2026-08-05)
 
 ## [10.8.20](https://github.com/juspay/neurolink/compare/v10.8.19...v10.8.20) (2026-08-05)

package/dist/cli/commands/proxy.js

@@ -677,8 +677,9 @@ async function getRollingActivationFailure(host, port, expectedVersion) {
                 failure.workerExitCode === null
                 ? `exitCode=${failure.workerExitCode ?? "none"}`
                 : null,
-            typeof failure.workerExitSignal === "string"
-                ? `exitSignal=${failure.workerExitSignal}`
+            typeof failure.workerExitSignal === "string" ||
+                failure.workerExitSignal === null
+                ? `exitSignal=${failure.workerExitSignal ?? "none"}`
                 : null,
             typeof failure.supervisorAction === "string"
                 ? `supervisorAction=${failure.supervisorAction}`

package/dist/lib/proxy/globalInstaller.d.ts

@@ -6,6 +6,8 @@ export declare function getGlobalInstallArgs(kind: GlobalInstallerKind, packageS
  * Return whether a global package-manager failure is likely environmental and
  * worth retrying. Configuration and permission failures deliberately return
  * false so the updater does not repeatedly mutate a broken installation.
+ *
+ * @param error - The package-manager error, including any nested `cause` chain.
  */
 export declare function isTransientInstallFailure(error: unknown): boolean;
 /**

package/dist/lib/proxy/globalInstaller.js

@@ -146,17 +146,25 @@ const TRANSIENT_INSTALL_FAILURE_CODES = new Set([
     "EPIPE",
     "ETIMEDOUT",
 ]);
+const MAX_INSTALL_FAILURE_CAUSE_DEPTH = 10;
 /**
  * Return whether a global package-manager failure is likely environmental and
  * worth retrying. Configuration and permission failures deliberately return
  * false so the updater does not repeatedly mutate a broken installation.
+ *
+ * @param error - The package-manager error, including any nested `cause` chain.
  */
 export function isTransientInstallFailure(error) {
     let current = error;
-    for (let depth = 0; depth < 5 && current; depth++) {
+    const seen = new Set();
+    for (let depth = 0; depth < MAX_INSTALL_FAILURE_CAUSE_DEPTH && current; depth++) {
         if (typeof current !== "object") {
             return false;
         }
+        if (seen.has(current)) {
+            return false;
+        }
+        seen.add(current);
         const candidate = current;
         if (typeof candidate.code === "string" &&
             TRANSIENT_INSTALL_FAILURE_CODES.has(candidate.code)) {

package/dist/lib/proxy/rollingWorkerSupervisor.js

@@ -424,10 +424,12 @@ export class RollingWorkerSupervisor {
         if (this.active?.generation === worker.generation && !this.closed) {
             this.active = null;
             this.draining.set(worker.generation, worker);
-            // The child may own a duplicate of an incompletely transferred socket.
-            // SIGKILL closes its descriptor without worker-side shutdown(2), after
-            // which the parent rejects its copy rather than attempting unsafe replay.
-            worker.handle.terminate("SIGKILL");
+            if (!lifecycle.observedExit) {
+                // The child may own a duplicate of an incompletely transferred socket.
+                // SIGKILL closes its descriptor without worker-side shutdown(2), after
+                // which the parent rejects its copy rather than attempting unsafe replay.
+                worker.handle.terminate("SIGKILL");
+            }
             this.publishState();
         }
         this.rejectSocket(socket);

package/dist/proxy/globalInstaller.d.ts

@@ -6,6 +6,8 @@ export declare function getGlobalInstallArgs(kind: GlobalInstallerKind, packageS
  * Return whether a global package-manager failure is likely environmental and
  * worth retrying. Configuration and permission failures deliberately return
  * false so the updater does not repeatedly mutate a broken installation.
+ *
+ * @param error - The package-manager error, including any nested `cause` chain.
  */
 export declare function isTransientInstallFailure(error: unknown): boolean;
 /**

package/dist/proxy/globalInstaller.js

@@ -146,17 +146,25 @@ const TRANSIENT_INSTALL_FAILURE_CODES = new Set([
     "EPIPE",
     "ETIMEDOUT",
 ]);
+const MAX_INSTALL_FAILURE_CAUSE_DEPTH = 10;
 /**
  * Return whether a global package-manager failure is likely environmental and
  * worth retrying. Configuration and permission failures deliberately return
  * false so the updater does not repeatedly mutate a broken installation.
+ *
+ * @param error - The package-manager error, including any nested `cause` chain.
  */
 export function isTransientInstallFailure(error) {
     let current = error;
-    for (let depth = 0; depth < 5 && current; depth++) {
+    const seen = new Set();
+    for (let depth = 0; depth < MAX_INSTALL_FAILURE_CAUSE_DEPTH && current; depth++) {
         if (typeof current !== "object") {
             return false;
         }
+        if (seen.has(current)) {
+            return false;
+        }
+        seen.add(current);
         const candidate = current;
         if (typeof candidate.code === "string" &&
             TRANSIENT_INSTALL_FAILURE_CODES.has(candidate.code)) {

package/dist/proxy/rollingWorkerSupervisor.js

@@ -424,10 +424,12 @@ export class RollingWorkerSupervisor {
         if (this.active?.generation === worker.generation && !this.closed) {
             this.active = null;
             this.draining.set(worker.generation, worker);
-            // The child may own a duplicate of an incompletely transferred socket.
-            // SIGKILL closes its descriptor without worker-side shutdown(2), after
-            // which the parent rejects its copy rather than attempting unsafe replay.
-            worker.handle.terminate("SIGKILL");
+            if (!lifecycle.observedExit) {
+                // The child may own a duplicate of an incompletely transferred socket.
+                // SIGKILL closes its descriptor without worker-side shutdown(2), after
+                // which the parent rejects its copy rather than attempting unsafe replay.
+                worker.handle.terminate("SIGKILL");
+            }
             this.publishState();
         }
         this.rejectSocket(socket);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@juspay/neurolink",
-  "version": "10.8.21",
+  "version": "10.8.22",
   "packageManager": "pnpm@10.15.1",
   "description": "TypeScript AI SDK with 24+ LLM providers behind one consistent API. MCP-native (connect any MCP server), voice TTS/STT/realtime, RAG, agents, memory, context compaction. OpenAI · Anthropic · Gemini · Bedrock · Azure · Ollama · DeepSeek · NVIDIA NIM and more.",
   "author": {