@integrity-labs/agt-cli 0.28.927 → 0.28.929

package/dist/{chunk-NIUBYSLW.js → chunk-ZNVYUZSM.js}

@@ -19,7 +19,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-Y7ERASS6.js";
+} from "./chunk-IIIMUCGD.js";
 import {
   reapOrphanChannelMcps
 } from "./chunk-XWVM4KPK.js";
@@ -5730,4 +5730,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-NIUBYSLW.js.map
+//# sourceMappingURL=chunk-ZNVYUZSM.js.map

package/dist/{claude-pair-runtime-RFY57WC3.js → claude-pair-runtime-MA4CLC6B.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-O3AKW6IW.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-PYQ5U6FU.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-RFY57WC3.js.map
+//# sourceMappingURL=claude-pair-runtime-MA4CLC6B.js.map

package/dist/lib/manager-worker.js

@@ -63,7 +63,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-LWLTSFH3.js";
+} from "../chunk-VZVCPJC7.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -136,7 +136,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-NIUBYSLW.js";
+} from "../chunk-ZNVYUZSM.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -231,7 +231,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-Y7ERASS6.js";
+} from "../chunk-IIIMUCGD.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -9305,6 +9305,21 @@ function configuredCeiling() {
   const raw = Number(process.env.AGT_ISOLATION_PIDS);
   return Number.isFinite(raw) && raw > 0 ? raw : 512;
 }
+function parseMemoryEvents(text) {
+  if (text == null) return null;
+  const wanted = /* @__PURE__ */ new Map();
+  for (const line of text.split("\n")) {
+    const [key, rawValue] = line.trim().split(/\s+/);
+    if (key !== "oom_kill" && key !== "max") continue;
+    const value = Number(rawValue);
+    if (!Number.isFinite(value) || value < 0) return null;
+    wanted.set(key, value);
+  }
+  const oomKill = wanted.get("oom_kill");
+  const atCeiling = wanted.get("max");
+  if (oomKill === void 0 || atCeiling === void 0) return null;
+  return { oomKill, atCeiling };
+}
 function readTextReal(path) {
   try {
     return readFileSync29(path, "utf-8");
@@ -9388,7 +9403,26 @@ function samplePidPressureFor(codeName, io = {}) {
     ceiling,
     defunct: countDefunct(dir, readText),
     warnAt,
-    overThreshold: current >= warnAt
+    overThreshold: current >= warnAt,
+    // ENG-10370. Same directory, same `readText` seam, no extra resolution and
+    // nothing spawned - the module's headline guarantee is unchanged because
+    // this is one more `readFileSync` against a path already resolved.
+    //
+    // CGROUP v1 IS RULED OUT HERE BY CONSTRUCTION, not by a fallback, and the
+    // mechanism is worth naming because the ticket asked for v1 to be "handled
+    // or explicitly ruled out". `resolveCgroupDirReal` probes exactly two
+    // layouts - `/sys/fs/cgroup/system.slice/docker-<id>.scope` and
+    // `/sys/fs/cgroup/docker/<id>` - and BOTH are unified (v2) paths. A v1 host
+    // splits cgroups by controller (`/sys/fs/cgroup/memory/docker/<id>`), so
+    // neither probe hits, the resolver returns null, and this function has
+    // already returned null above for PID pressure too.
+    //
+    // So on a v1 host this reports NOTHING rather than a false zero. That is
+    // the silent-zero failure the AC was worried about, and it is structurally
+    // impossible on this path rather than merely guarded against. If per-agent
+    // cgroups ever land on a v1 host, the resolver is the single place that has
+    // to learn about it, and both gauges follow.
+    memory: parseMemoryEvents(readText(`${dir}/memory.events`))
   };
 }
 var lastSample = /* @__PURE__ */ new Map();
@@ -13187,7 +13221,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-MIPUX3BG.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-T4LKSNFO.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname11(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -13872,7 +13906,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.927" : "dev";
+var agtCliVersion = true ? "0.28.929" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -15462,7 +15496,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-O3AKW6IW.js");
+      const { collectDiagnostics } = await import("../persistent-session-PYQ5U6FU.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -15604,7 +15638,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-O3AKW6IW.js");
+      const { collectDiagnostics } = await import("../persistent-session-PYQ5U6FU.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -15779,7 +15813,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-MIPUX3BG.js");
+      } = await import("../responsiveness-probe-T4LKSNFO.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -15896,7 +15930,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-MIPUX3BG.js");
+        } = await import("../responsiveness-probe-T4LKSNFO.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -16052,7 +16086,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-ZGZZLE4X.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-M5SFWTQH.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -20316,7 +20350,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
       try {
         const freshId = rotateSessionForWedge(codeName);
         consecutiveWedgeCycles.delete(codeName);
-        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-MIPUX3BG.js");
+        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-T4LKSNFO.js");
         const { parked, deadLettered } = parkForRestart(codeName, /* @__PURE__ */ new Date());
         const parkNote = parked > 0 ? `, ${parked} inbound parked` : "";
         const deadNote = deadLettered > 0 ? `, ${deadLettered} undeliverable dead-lettered` : "";
@@ -20359,7 +20393,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-O3AKW6IW.js");
+        const { collectDiagnostics } = await import("../persistent-session-PYQ5U6FU.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -20410,7 +20444,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-O3AKW6IW.js");
+      const { collectDiagnostics } = await import("../persistent-session-PYQ5U6FU.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -21052,7 +21086,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-RFY57WC3.js");
+  } = await import("../claude-pair-runtime-MA4CLC6B.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));