@integrity-labs/agt-cli 0.28.927 → 0.28.928

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-LWLTSFH3.js";
+} from "../chunk-OXWLTPU2.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
@@ -5467,7 +5467,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.927" : "dev";
+var cliVersion = true ? "0.28.928" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6682,7 +6682,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.927" : "dev";
+var cliVersion2 = true ? "0.28.928" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-LWLTSFH3.js → chunk-OXWLTPU2.js}

@@ -6942,7 +6942,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.927" : "dev";
+var agtCliVersion = true ? "0.28.928" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -11552,4 +11552,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-LWLTSFH3.js.map
+//# sourceMappingURL=chunk-OXWLTPU2.js.map

package/dist/lib/manager-worker.js

@@ -63,7 +63,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-LWLTSFH3.js";
+} from "../chunk-OXWLTPU2.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -9305,6 +9305,21 @@ function configuredCeiling() {
   const raw = Number(process.env.AGT_ISOLATION_PIDS);
   return Number.isFinite(raw) && raw > 0 ? raw : 512;
 }
+function parseMemoryEvents(text) {
+  if (text == null) return null;
+  const wanted = /* @__PURE__ */ new Map();
+  for (const line of text.split("\n")) {
+    const [key, rawValue] = line.trim().split(/\s+/);
+    if (key !== "oom_kill" && key !== "max") continue;
+    const value = Number(rawValue);
+    if (!Number.isFinite(value) || value < 0) return null;
+    wanted.set(key, value);
+  }
+  const oomKill = wanted.get("oom_kill");
+  const atCeiling = wanted.get("max");
+  if (oomKill === void 0 || atCeiling === void 0) return null;
+  return { oomKill, atCeiling };
+}
 function readTextReal(path) {
   try {
     return readFileSync29(path, "utf-8");
@@ -9388,7 +9403,26 @@ function samplePidPressureFor(codeName, io = {}) {
     ceiling,
     defunct: countDefunct(dir, readText),
     warnAt,
-    overThreshold: current >= warnAt
+    overThreshold: current >= warnAt,
+    // ENG-10370. Same directory, same `readText` seam, no extra resolution and
+    // nothing spawned - the module's headline guarantee is unchanged because
+    // this is one more `readFileSync` against a path already resolved.
+    //
+    // CGROUP v1 IS RULED OUT HERE BY CONSTRUCTION, not by a fallback, and the
+    // mechanism is worth naming because the ticket asked for v1 to be "handled
+    // or explicitly ruled out". `resolveCgroupDirReal` probes exactly two
+    // layouts - `/sys/fs/cgroup/system.slice/docker-<id>.scope` and
+    // `/sys/fs/cgroup/docker/<id>` - and BOTH are unified (v2) paths. A v1 host
+    // splits cgroups by controller (`/sys/fs/cgroup/memory/docker/<id>`), so
+    // neither probe hits, the resolver returns null, and this function has
+    // already returned null above for PID pressure too.
+    //
+    // So on a v1 host this reports NOTHING rather than a false zero. That is
+    // the silent-zero failure the AC was worried about, and it is structurally
+    // impossible on this path rather than merely guarded against. If per-agent
+    // cgroups ever land on a v1 host, the resolver is the single place that has
+    // to learn about it, and both gauges follow.
+    memory: parseMemoryEvents(readText(`${dir}/memory.events`))
   };
 }
 var lastSample = /* @__PURE__ */ new Map();
@@ -13872,7 +13906,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.927" : "dev";
+var agtCliVersion = true ? "0.28.928" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();