@rosthq/cli 0.7.64 → 0.7.66

package/dist/host-resource.d.ts

@@ -0,0 +1,23 @@
+export type HostResourceTelemetry = {
+    load_avg_1m: number | null;
+    memory_available_mb: number | null;
+    swap_used_mb: number | null;
+    swap_total_mb: number | null;
+};
+export declare function parseLinuxMeminfoSwap(meminfo: string): {
+    swap_used_mb: number;
+    swap_total_mb: number;
+} | null;
+export declare function parseDarwinSwapusage(output: string): {
+    swap_used_mb: number;
+    swap_total_mb: number;
+} | null;
+export type HostResourceDeps = {
+    platform: () => string;
+    loadAvg: () => number[];
+    freeMemBytes: () => number;
+    readLinuxMeminfo: () => string;
+    readDarwinSwapusage: () => string;
+};
+export declare function detectHostResource(deps?: HostResourceDeps): HostResourceTelemetry;
+//# sourceMappingURL=host-resource.d.ts.map

package/dist/host-resource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-resource.d.ts","sourceRoot":"","sources":["../src/host-resource.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,qBAAqB,GAAG;IAClC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,CAAC;AAGF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAS7G;AAGD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAmB3G;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,EAAE,MAAM,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,MAAM,EAAE,CAAC;IACxB,YAAY,EAAE,MAAM,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,MAAM,CAAC;IAC/B,mBAAmB,EAAE,MAAM,MAAM,CAAC;CACnC,CAAC;AAUF,wBAAgB,kBAAkB,CAAC,IAAI,GAAE,gBAA8B,GAAG,qBAAqB,CAiC9F"}

package/dist/index.js

@@ -38250,6 +38250,39 @@ var CATALOG_ENTRIES = [
     credential_required: false,
     default_access_policy: "always_allow"
   },
+  {
+    id: "script.run",
+    title: "Run a script (sandbox)",
+    provider: "rost",
+    description: "Call this to run a short program (shell/node/python) in an isolated, network-disabled microVM for pure computation \u2014 parsing, transforming, calculating, or validating data the agent already holds. The sandbox has NO credentials and NO network access; it cannot read files, call APIs, or reach the internet. Use it for compute, never to fetch or send data. Every run is metered and audited; availability is a per-account entitlement and each call is confirmed by default (arbitrary code execution).",
+    // Compute-only: the microVM produces a structured, size-capped result and has
+    // no durable or external effect, so the narrowest useful tier is `read`.
+    default_scope_tier: "read",
+    scope_tiers: ["read"],
+    // v1 injects ZERO credentials (secret grants are DER-1585) — never a vault ref.
+    credential_required: false,
+    // Conservative by default (invariant #10): arbitrary code execution routes to the
+    // human on every call until a tenant deliberately loosens it. The separate
+    // `agent.script_run` account entitlement gates availability on top of this.
+    default_access_policy: "always_ask"
+  },
+  {
+    id: "secret.broker",
+    title: "Call an authenticated API (brokered)",
+    provider: "rost",
+    description: "Call this to make ONE authenticated request to a pre-approved third-party API on the agent's behalf. You supply only the grant key, method, path, and query/body \u2014 never a credential. A server-side broker injects the secret, calls the single allowlisted host/path/method the grant permits, and returns a size-capped, secret-scrubbed result (response bodies that echo credential-shaped material are redacted wholesale). The secret never enters your context or the sandbox. Read requests run directly; any write (POST/PUT/PATCH/DELETE) is HELD for human approval before it is sent. Every attempt is audited.",
+    // A write goes out over the network with a real credential — the broadest tier.
+    // Reads on the same grant self-select the read behaviour at call time; the
+    // catalog tier is the ceiling (a write is held-with-approval).
+    default_scope_tier: "write_with_approval",
+    scope_tiers: ["read", "write_with_approval"],
+    // The broker resolves a vault ref per grant and injects it server-side.
+    credential_required: true,
+    // Conservative by default (invariant #10): brokered egress is confirmed by
+    // default; writes are additionally held for /approvals. A per-seat grant
+    // (script_run_secret_grants) gates availability on top of this — no grant, no call.
+    default_access_policy: "always_ask"
+  },
   {
     id: "ap.invoices.read",
     title: "Read AP invoices",
@@ -38984,8 +39017,29 @@ var agentSetupNextActionSchema = external_exports.enum([
   "sign_manifest",
   "run_dry_run",
   "go_live",
-  "complete"
+  "complete",
+  // DER-1628: live-agent remediation actions. A live agent is NOT automatically
+  // "complete" — a missing/never-approved active Charter or an ARCHIVED
+  // configured parent is a real post-go-live defect that must route the operator
+  // to the exact repair instead of falsely reading complete. These only ever
+  // appear for a live/promotable agent (the setup wizard's forward actions above
+  // cover the draft flow), and DER-1652 deep-links each to its repair surface.
+  "fix_charter",
+  "fix_reporting_line"
+]);
+var agentSetupBlockerCodeSchema = external_exports.enum([
+  "missing_active_charter",
+  "archived_parent",
+  "missing_parent",
+  "missing_steward",
+  "missing_occupancy",
+  "missing_goal_or_measurable",
+  "skill_dependency_blocked"
 ]);
+var agentSetupBlockerSchema = external_exports.object({
+  code: agentSetupBlockerCodeSchema,
+  message: external_exports.string().min(1).max(500)
+}).strict();
 var agentSetupSkillRecommendationSchema = skillSummarySchema.extend({
   match_score: external_exports.number().int().min(0).max(100),
   recommendation_reason: external_exports.string().min(1).max(240)
@@ -39051,7 +39105,10 @@ var agentSetupStateSchema = external_exports.object({
     // reload. Optional so a pre-DER-842 recorded result still validates.
     transcript: dryRunTranscriptSchema.optional()
   }).strict().nullable(),
-  blockers: external_exports.array(external_exports.string()),
+  // DER-1628: typed, stable completeness blockers (was `string[]`). `complete`
+  // is impossible while this array is non-empty — every surface reads the same
+  // canonical result rather than doing its own completeness math.
+  blockers: external_exports.array(agentSetupBlockerSchema),
   next_action: agentSetupNextActionSchema
 }).strict();
 var agentSetupToolUpdateSchema = external_exports.object({
@@ -39480,6 +39537,22 @@ var storedModelGatewayPolicySchema = external_exports.object({
   allow_non_zdr_models: external_exports.boolean()
 }).strict();
 
+// ../../packages/protocol/src/cloud-brain-options.ts
+var cloudBrainOptionSchema = external_exports.object({
+  // Null is reserved for the synthetic Anthropic "Automatic" default (today's
+  // unchanged tiering behavior — no behavior change). A real option's slug is
+  // the registry's dotted `provider:model` slug (e.g. "openai:gpt-5.6").
+  slug: external_exports.string().nullable(),
+  provider: external_exports.string(),
+  label: external_exports.string().min(1),
+  managed: external_exports.boolean(),
+  zdr_available: external_exports.boolean(),
+  selectable: external_exports.boolean(),
+  disabled_reason: external_exports.string().min(1).nullable(),
+  retention_disclosure: external_exports.string().min(1).nullable(),
+  live_note: external_exports.string().min(1).nullable()
+}).strict();
+
 // ../../packages/protocol/src/aicos.ts
 var uuidSchema5 = external_exports.string().uuid();
 var jsonObjectSchema = external_exports.record(external_exports.string(), external_exports.unknown());
@@ -39697,7 +39770,18 @@ var aicosBrainSettingsSchema = external_exports.object({
   cloud_brain: aicosCloudBrainPreferenceSchema,
   runner_brain: aicosRunnerBrainPreferenceSchema,
   effective_brain: aicosAnswerBrainSchema,
-  label: external_exports.string().min(1).max(80)
+  label: external_exports.string().min(1).max(80),
+  // DER-1591 (ADR-0019 W2.3b): the persisted managed-model slug for cloud
+  // AICOS (null = the Anthropic "Automatic" default — today's unchanged
+  // behavior), the full picker option list (ZDR-gated availability +
+  // disclosure + the permanent non-Anthropic honesty note baked into each
+  // option by `buildCloudBrainOptions`), and whether this tenant has unlocked
+  // non-ZDR managed models. This settings/persistence layer does not yet
+  // change which model actually serves a cloud turn (DER-1582, next in the
+  // serial lane, wires it live).
+  cloud_model_slug: external_exports.string().nullable(),
+  cloud_options: external_exports.array(cloudBrainOptionSchema),
+  non_zdr_unlocked: external_exports.boolean()
 }).strict();
 var aicosBrainSettingsGetInputSchema = external_exports.object({}).strict();
 var aicosBrainSettingsGetOutputSchema = external_exports.object({
@@ -39706,9 +39790,10 @@ var aicosBrainSettingsGetOutputSchema = external_exports.object({
 var aicosBrainSettingsUpdateInputSchema = external_exports.object({
   lane: aicosLaneSchema.optional(),
   cloud_brain: aicosCloudBrainPreferenceSchema.optional(),
-  runner_brain: aicosRunnerBrainPreferenceSchema.optional()
+  runner_brain: aicosRunnerBrainPreferenceSchema.optional(),
+  cloud_model_slug: external_exports.string().nullable().optional()
 }).strict().refine(
-  (value) => value.lane !== void 0 || value.cloud_brain !== void 0 || value.runner_brain !== void 0,
+  (value) => value.lane !== void 0 || value.cloud_brain !== void 0 || value.runner_brain !== void 0 || value.cloud_model_slug !== void 0,
   "At least one AICOS lane or brain setting must be provided."
 );
 var aicosSessionSchema = external_exports.object({
@@ -45165,7 +45250,7 @@ The Compass is drafted, then activated by a human through supersession.
     order: 15,
     title: "AICOS chat guide",
     summary: "How the AI Chief of Staff chat works in the authenticated app shell and what it can safely do today.",
-    version: "2026-07-10.2",
+    version: "2026-07-11.1",
     public: true,
     audiences: ["human", "in_app_agent"],
     stages: ["company_setup", "operating_rhythm"],
@@ -45178,6 +45263,7 @@ The Compass is drafted, then activated by a human through supersession.
       "runner.list",
       "aicos.brain_settings.get",
       "aicos.brain_settings.update",
+      "tenant.model_gateway_policy.update",
       "agent.create_custom",
       "agent.configure_tools",
       "agent.run_dry_run",
@@ -45233,7 +45319,7 @@ Each turn carries server-normalized page context: route template, current path,
 
 The current chat harness shows the effective lane and model. Cloud is the default and remains the enforced lane during onboarding, even if a post-onboarding lane has been selected. After onboarding, an owner or admin can select cloud, runner, or MCP only when the server says that lane is ready. Lane changes update the governed AICOS agent seat and write an append-only audit event; the browser never decides tenant authority or runner/MCP readiness.
 
-AICOS also has an explicit brain selection. Cloud can use the included managed allowance or a tenant Anthropic key (BYOK). Runner brain preference still records Claude or Codex, but interactive AICOS runner turns are currently gated to Claude while the Codex path remains unverified. MCP is labeled as the MCP client. Read this selection with \`aicos.brain_settings.get\`; owners can update it with \`aicos.brain_settings.update\` (CLI flags: \`--lane\`, \`--cloud-brain managed|byok\`, \`--runner-brain claude-cli|codex-cli\`). BYOK requires an active tenant Anthropic key. Choosing \`codex-cli\` for AICOS runner mode is currently rejected with a precondition error until the governed interactive runner path is verified. Runner and MCP answers are labeled in the transcript and do not consume the managed cloud allowance. If the selected runner reports that its active local model account has exhausted its allowance, Settings surfaces **Allowance exhausted** before the user sends another AICOS turn so they can switch lanes, switch runner accounts, or keep working manually instead of waiting on a doomed runner round-trip.
+AICOS also has an explicit brain selection. Cloud can use the included managed allowance or a tenant Anthropic key (BYOK). When cloud is on the managed allowance, an owner can also pick a specific managed model from the AI Gateway's priced, ZDR-rated catalog (today: Anthropic's own "Automatic" default, plus managed OpenAI and xAI entries) instead of leaving the choice on Anthropic's default routing. A managed model without a zero-data-retention tier shows as locked with the reason until a tenant owner explicitly unlocks non-ZDR managed models (\`tenant.model_gateway_policy.update\`, owner-only and dangerous-gated); once unlocked, its per-model data-retention disclosure is shown before it becomes selectable. Selecting one of these managed models updates AICOS settings immediately, but it does not yet change which model actually answers a cloud AICOS turn \u2014 every non-Anthropic option says so plainly, and cloud turns keep running on the existing Anthropic routing until a later runtime cutover wires the persisted selection through. Runner brain preference still records Claude or Codex, but interactive AICOS runner turns are currently gated to Claude while the Codex path remains unverified. MCP is labeled as the MCP client. Read this selection with \`aicos.brain_settings.get\`; owners can update it with \`aicos.brain_settings.update\` (CLI flags: \`--lane\`, \`--cloud-brain managed|byok\`, \`--runner-brain claude-cli|codex-cli\`). BYOK requires an active tenant Anthropic key and does not support a specific managed-model selection. Choosing \`codex-cli\` for AICOS runner mode is currently rejected with a precondition error until the governed interactive runner path is verified. Runner and MCP answers are labeled in the transcript and do not consume the managed cloud allowance. If the selected runner reports that its active local model account has exhausted its allowance, Settings surfaces **Allowance exhausted** before the user sends another AICOS turn so they can switch lanes, switch runner accounts, or keep working manually instead of waiting on a doomed runner round-trip.
 
 Runner mode uses the same AICOS sessions and transcript. Interactive chat turns are tracked separately from scheduled work orders: each user message has one user-owned turn execution with a short deadline, so two users' chat messages cannot collapse into the same scheduled-work slot. Scheduled and Forge runner work still use work orders. Runner claim packets carry ids and execution metadata, not the user's free-text request. After claim, the local runner calls the governed AICOS context-load tool, which re-checks seat scope and returns the bounded transcript, session summary, route context, tenant clock, grounding text, and source counts authorized for that turn. For execute-ready runners, the claim also carries a server-built Seat work contract that names the governed runtime profile, the AICOS context-loader tool, and the Seat's permission manifest; action attempts still route through command guards, tool-call audit, and pending confirmations. The runner treats loaded tenant clock, context, and contract as authoritative instead of substituting its own runtime clock, local files, or self-invented authority. A runner must be paired, execute-ready, and backed by the live AICOS agent before it can be selected.
 
@@ -45714,7 +45800,7 @@ For CLI and MCP setup, read agent-skill-setup-guide before adding or assigning S
     order: 42,
     title: "Design a custom agent",
     summary: "How to build a custom agent from operational questions through the Charter Builder, tools, dry run, and go-live without writing prompts.",
-    version: "2026-07-10.1",
+    version: "2026-07-12.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["staffing", "charter_design"],
@@ -45779,6 +45865,14 @@ The same path is command-backed:
 7. \`agent.configure_tools\` / \`rost_configure_agent_tools\` records connect/decline decisions and credential-ingress requests (vault refs only).
 8. \`agent.run_dry_run\` / \`rost_run_agent_dry_run\` rehearses the task after the manifest is signed.
 
+## Setup completeness and blockers
+
+\`agent_setup.get\` derives completeness canonically, so every surface \u2014 the web builder, the CLI, and the \`agent.show_markdown\` readout \u2014 reads one result instead of doing its own math. It returns a \`blockers\` array plus a \`next_action\`. Each blocker is a typed \`{ code, message }\`: consumers key off the stable \`code\` (to group blockers or deep-link to the exact repair) and show \`message\` verbatim. A setup is \`complete\` only when \`blockers\` is empty; while any blocker is present, \`next_action\` points at the highest-priority repair rather than \`complete\`.
+
+The blocker codes are a stable vocabulary \u2014 new reasons get a new code rather than a rename. Emitted today: \`missing_active_charter\`, \`archived_parent\`, \`missing_parent\`, \`missing_steward\`, and \`skill_dependency_blocked\` (\`missing_occupancy\` and \`missing_goal_or_measurable\` are reserved for later checks).
+
+Completeness is not just a draft gate: a **live** agent is not automatically \`complete\`. If a live seat has no active, approved Charter, its configured parent is archived, or its steward chain no longer resolves to a human, \`agent_setup.get\` surfaces the matching blocker and routes \`next_action\` to the fix \u2014 \`fix_charter\` for \`missing_active_charter\`, \`fix_reporting_line\` for \`archived_parent\`, then \`set_steward\` for \`missing_steward\`, in that priority order. A live agent with no configured parent at all is the legitimate top-level case and stays \`complete\`; only an archived configured parent blocks it.
+
 ## Dry run and go-live
 
 The dry run is a real sandbox rehearsal, not a stamp. It executes a mock-provider run derived from the Charter \u2014 the agent works against sandbox data only and is expected to escalate where the Charter's must-escalate clause requires it. The same rehearsal works on all three lanes: cloud, external MCP, and local Runner. External MCP dry runs require an active seat-scoped MCP token; Runner dry runs require a paired Runner. Missing substrate returns a typed precondition error, not a generic failure. The recorded run keeps the agent's actual lane, so the evidence you review matches the lane you selected. The result is earned: a run that escalates the must-escalate boundary passes; a run that acts on that boundary instead of escalating fails. A failed dry run keeps the draft and shows the reason so you can edit and rerun. The rehearsal returns a transcript \u2014 the steps the agent took and the escalation it raised \u2014 shown step by step in the builder and printed by the CLI, so you can see the governance model working before anything goes live. The transcript is also lane-honest: each granted tool is marked executable, held for the steward, or granted but unimplemented in this lane, with a plain-count verdict such as "2 of 6 granted tools don't execute in the cloud lane yet" \u2014 so a grant that would silently no-op in the cloud runtime is visible before go-live instead of passing green. Runner and MCP-session agents run those tools through their own local skills, so their grants are not flagged as unimplemented. When the dry run passes, a human promotes the agent live. The dry run rehearses the specific model tier you chose, so once it passes the model is locked \u2014 changing the model requires re-running the dry run on the new model before go-live.
@@ -50002,7 +50096,7 @@ var COMMAND_MANIFEST = [
   { "id": "agent.status", "namespace": "agent", "action": "status", "title": "Get agent status", "description": "Return the agent occupancy, lane, schedule, live/offline state, steward chain, dry-run result, and Runner availability for a seat.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Check an agent's lane, live state, steward chain, dry-run result, and Runner availability before relying on it." },
   { "id": "agent.update_schedule", "namespace": "agent", "action": "update_schedule", "title": "Update agent schedule", "description": "Set or clear the scheduled execution cron for a draft or live agent on a seat.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "schedule_cron", "flag": "schedule-cron", "type": "string", "required": true }], "hasComplexInput": false, "help": "Set or clear an agent's scheduled execution; a live scheduled agent must keep a steward chain resolving to a human." },
   { "id": "aicos.brain_settings.get", "namespace": "aicos", "action": "brain_settings.get", "title": "Get AICOS brain settings", "description": "Read the AICOS run lane and brain selection. Returns labels and enum settings only; no secrets or vault refs.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read the AICOS lane and brain selection labels without returning provider keys, vault refs, or runner secrets." },
-  { "id": "aicos.brain_settings.update", "namespace": "aicos", "action": "brain_settings.update", "title": "Update AICOS brain settings", "description": "Update the AICOS lane and cloud/runner brain preferences. Owner-only and audited.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "lane", "flag": "lane", "type": "enum", "required": false, "enumValues": ["cloud", "runner", "mcp"] }, { "name": "cloud_brain", "flag": "cloud-brain", "type": "enum", "required": false, "enumValues": ["managed", "byok"] }, { "name": "runner_brain", "flag": "runner-brain", "type": "enum", "required": false, "enumValues": ["claude-cli", "codex-cli"] }], "hasComplexInput": false, "help": "Owner-only update for AICOS cloud managed/BYOK and runner Claude/Codex preferences; BYOK requires an active tenant Anthropic key." },
+  { "id": "aicos.brain_settings.update", "namespace": "aicos", "action": "brain_settings.update", "title": "Update AICOS brain settings", "description": "Update the AICOS lane and cloud/runner brain preferences. Owner-only and audited.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "lane", "flag": "lane", "type": "enum", "required": false, "enumValues": ["cloud", "runner", "mcp"] }, { "name": "cloud_brain", "flag": "cloud-brain", "type": "enum", "required": false, "enumValues": ["managed", "byok"] }, { "name": "runner_brain", "flag": "runner-brain", "type": "enum", "required": false, "enumValues": ["claude-cli", "codex-cli"] }, { "name": "cloud_model_slug", "flag": "cloud-model-slug", "type": "string", "required": false }], "hasComplexInput": false, "help": "Owner-only update for AICOS cloud managed/BYOK and runner Claude/Codex preferences; BYOK requires an active tenant Anthropic key." },
   { "id": "cascade.import", "namespace": "cascade", "action": "import", "title": "Import Rocks from a ninety Rocks export", "description": "Bulk-import a ninety Rocks export into the Cascade as cycle goals under a company objective in the active cycle. Owners are seat names resolved to seats. Requires an active cycle and a target company objective (auto-selected when exactly one exists, else pass parent_objective_id). Idempotent \u2014 re-importing the same export is a no-op, and an existing cycle goal with the same objective + seat + title is skipped.", "requiredScope": "tenant_admin", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "dry_run", "flag": "dry-run", "type": "boolean", "required": false }, { "name": "parent_objective_id", "flag": "parent-objective-id", "type": "string", "required": false }], "hasComplexInput": true, "help": "Import a ninety Rocks export into the Cascade as cycle goals under a company objective in the active cycle; owners resolve to seats." },
   { "id": "charter.apply_seat_type_recommendation", "namespace": "charter", "action": "apply_seat_type_recommendation", "title": "Apply Charter seat-type recommendation", "description": "Apply the seat-type recommendation from a draft Charter.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Apply seat-type recommendations only after the Charter clarifies work shape, risk, and Steward accountability." },
   { "id": "charter.approve", "namespace": "charter", "action": "approve", "title": "Approve charter", "description": "Approve a draft Charter as a human owner.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }, { "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": false }, { "name": "apply_seat_type", "flag": "apply-seat-type", "type": "boolean", "required": false }], "hasComplexInput": true, "help": "Charter approval is a human decision that activates the seat's operating contract." },
@@ -54554,6 +54648,80 @@ async function removeWorkspace(ws) {
   await removeWorktree(ws.baseRepo, ws.worktreeDir);
 }
 
+// src/host-resource.ts
+import { execFileSync } from "node:child_process";
+import { readFileSync as readFileSync4 } from "node:fs";
+import { freemem, loadavg, platform as osPlatform } from "node:os";
+var MB = 1024 * 1024;
+function parseLinuxMeminfoSwap(meminfo) {
+  const total = /^SwapTotal:\s+(\d+)\s*kB/m.exec(meminfo);
+  const free = /^SwapFree:\s+(\d+)\s*kB/m.exec(meminfo);
+  if (!total || !free) return null;
+  const totalKb = Number(total[1]);
+  const freeKb = Number(free[1]);
+  if (!Number.isFinite(totalKb) || !Number.isFinite(freeKb)) return null;
+  const usedKb = Math.max(0, totalKb - freeKb);
+  return { swap_used_mb: Math.round(usedKb / 1024), swap_total_mb: Math.round(totalKb / 1024) };
+}
+function parseDarwinSwapusage(output) {
+  const total = /total\s*=\s*([\d.]+)\s*([KMGT])/i.exec(output);
+  const used = /used\s*=\s*([\d.]+)\s*([KMGT])/i.exec(output);
+  if (!total || !used) return null;
+  const toMb = (value, unit) => {
+    const n = Number(value);
+    const u = unit.toUpperCase();
+    const mult = u === "G" ? 1024 : u === "T" ? 1024 * 1024 : u === "K" ? 1 / 1024 : 1;
+    return n * mult;
+  };
+  const usedValue = used[1];
+  const usedUnit = used[2];
+  const totalValue = total[1];
+  const totalUnit = total[2];
+  if (usedValue === void 0 || usedUnit === void 0 || totalValue === void 0 || totalUnit === void 0) return null;
+  const usedMb = toMb(usedValue, usedUnit);
+  const totalMb = toMb(totalValue, totalUnit);
+  if (!Number.isFinite(usedMb) || !Number.isFinite(totalMb)) return null;
+  return { swap_used_mb: Math.round(usedMb), swap_total_mb: Math.round(totalMb) };
+}
+var defaultDeps = {
+  platform: () => osPlatform(),
+  loadAvg: () => loadavg(),
+  freeMemBytes: () => freemem(),
+  readLinuxMeminfo: () => readFileSync4("/proc/meminfo", "utf8"),
+  readDarwinSwapusage: () => execFileSync("sysctl", ["-n", "vm.swapusage"], { encoding: "utf8", timeout: 2e3 })
+};
+function detectHostResource(deps = defaultDeps) {
+  let load_avg_1m = null;
+  try {
+    const l = deps.loadAvg();
+    const first = Array.isArray(l) ? l[0] : void 0;
+    load_avg_1m = typeof first === "number" && Number.isFinite(first) ? first : null;
+  } catch {
+    load_avg_1m = null;
+  }
+  let memory_available_mb = null;
+  try {
+    const bytes = deps.freeMemBytes();
+    memory_available_mb = Number.isFinite(bytes) && bytes >= 0 ? Math.round(bytes / MB) : null;
+  } catch {
+    memory_available_mb = null;
+  }
+  let swap = null;
+  try {
+    const p = deps.platform();
+    if (p === "linux") swap = parseLinuxMeminfoSwap(deps.readLinuxMeminfo());
+    else if (p === "darwin") swap = parseDarwinSwapusage(deps.readDarwinSwapusage());
+  } catch {
+    swap = null;
+  }
+  return {
+    load_avg_1m,
+    memory_available_mb,
+    swap_used_mb: swap?.swap_used_mb ?? null,
+    swap_total_mb: swap?.swap_total_mb ?? null
+  };
+}
+
 // src/runner-serve.ts
 var execFile5 = promisify5(execFileCallback5);
 var RUNNER_WORK_ORDER_TOOLS = [
@@ -54739,6 +54907,7 @@ function capabilitiesForAnalytics(capabilities) {
 }
 function detectTelemetry(capabilities, env, activeSessions, cliVersion) {
   const usageState = env.RUNNER_MODEL_ACCOUNT_STATE ?? env.ROST_RUNNER_MODEL_ACCOUNT_STATE ?? "unknown";
+  const host = detectHostResource();
   return {
     os: platform(),
     cpu_count: cpus().length,
@@ -54752,7 +54921,11 @@ function detectTelemetry(capabilities, env, activeSessions, cliVersion) {
     usage_limit_observation: {
       state: usageState,
       source: "runner_env_or_unknown"
-    }
+    },
+    load_avg_1m: host.load_avg_1m,
+    memory_available_mb: host.memory_available_mb,
+    swap_used_mb: host.swap_used_mb,
+    swap_total_mb: host.swap_total_mb
   };
 }
 function parseServeArgs(args, appUrl2, env, homeDir) {