@integrity-labs/agt-cli 0.28.883 → 0.28.884

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-B3WKENVI.js";
+} from "../chunk-5P4R3IPC.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-PZHDYVFU.js";
+} from "../chunk-YNYWVGHB.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -5467,7 +5467,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.883" : "dev";
+var cliVersion = true ? "0.28.884" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6658,7 +6658,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.883" : "dev";
+var cliVersion2 = true ? "0.28.884" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-B3WKENVI.js → chunk-5P4R3IPC.js}

@@ -16,7 +16,7 @@ import {
   parseEnvIntegrations,
   shellQuote,
   summarizeUnanswerablePane
-} from "./chunk-PZHDYVFU.js";
+} from "./chunk-YNYWVGHB.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -6765,7 +6765,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.883" : "dev";
+var agtCliVersion = true ? "0.28.884" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -11375,4 +11375,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-B3WKENVI.js.map
+//# sourceMappingURL=chunk-5P4R3IPC.js.map

package/dist/{chunk-PZHDYVFU.js → chunk-YNYWVGHB.js}

@@ -3825,6 +3825,7 @@ function buildDockerRunCommand(args) {
   ];
   const image = process.env.AGT_ISOLATION_IMAGE || "agt-runtime:latest";
   const memory = process.env.AGT_ISOLATION_MEMORY || "2g";
+  const memorySwap = memory;
   const cpus = process.env.AGT_ISOLATION_CPUS || "1.0";
   const pids = process.env.AGT_ISOLATION_PIDS || "512";
   const envArgs = [`-e ${q(`HOME=${homeDir}`)}`];
@@ -3881,7 +3882,13 @@ function buildDockerRunCommand(args) {
       // squid processes untrusted agent traffic - give it the same hardening as
       // the agent container (drop all caps, block privilege escalation). squid
       // binds 3128 (>1024) and needs no capabilities; verified it still boots.
-      `docker run -d --name ${squidName} --network ${internalNet} --restart unless-stopped --memory 128m --cap-drop ALL --security-opt no-new-privileges -v ${q(`${egress.allowlistHostPath}:/etc/squid/allowlist.txt:ro`)} ${q(egressImage)} >/dev/null`,
+      // ENG-10369: `--memory-swap 128m` equal to `--memory 128m`, same reasoning
+      // as the agent container above. squid is small and steady-state, so the
+      // phantom 256m grant was never load-bearing - but leaving ONE container on
+      // the implicit-doubling path is how the next host-swap change finds a way
+      // back in, and an exemption nobody wrote down is an exemption nobody
+      // re-checks.
+      `docker run -d --name ${squidName} --network ${internalNet} --restart unless-stopped --memory 128m --memory-swap 128m --cap-drop ALL --security-opt no-new-privileges -v ${q(`${egress.allowlistHostPath}:/etc/squid/allowlist.txt:ro`)} ${q(egressImage)} >/dev/null`,
       `docker network connect agt-egress ${squidName} >/dev/null 2>&1`
     ].join(" && ");
   }
@@ -3915,6 +3922,9 @@ function buildDockerRunCommand(args) {
     // per-application is how it gets forgotten again next time.
     "--init",
     `--memory ${memory}`,
+    // ENG-10369 - equal to `--memory`, so the container gets no swap access.
+    // See the `memorySwap` definition above for why this is not optional.
+    `--memory-swap ${memorySwap}`,
     `--cpus ${cpus}`,
     `--pids-limit ${pids}`,
     // Defence in depth (red-team 2026-06-16): drop all Linux capabilities and
@@ -5431,4 +5441,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-PZHDYVFU.js.map
+//# sourceMappingURL=chunk-YNYWVGHB.js.map