@rosthq/cli 0.7.65 → 0.7.67

package/dist/generated/command-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-manifest.d.ts","sourceRoot":"","sources":["../../src/generated/command-manifest.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,eAAO,MAAM,gBAAgB,EAAE,SAAS,oBAAoB,EAyO3D,CAAC"}
+{"version":3,"file":"command-manifest.d.ts","sourceRoot":"","sources":["../../src/generated/command-manifest.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,eAAO,MAAM,gBAAgB,EAAE,SAAS,oBAAoB,EA0O3D,CAAC"}

package/dist/host-resource.d.ts

@@ -0,0 +1,23 @@
+export type HostResourceTelemetry = {
+    load_avg_1m: number | null;
+    memory_available_mb: number | null;
+    swap_used_mb: number | null;
+    swap_total_mb: number | null;
+};
+export declare function parseLinuxMeminfoSwap(meminfo: string): {
+    swap_used_mb: number;
+    swap_total_mb: number;
+} | null;
+export declare function parseDarwinSwapusage(output: string): {
+    swap_used_mb: number;
+    swap_total_mb: number;
+} | null;
+export type HostResourceDeps = {
+    platform: () => string;
+    loadAvg: () => number[];
+    freeMemBytes: () => number;
+    readLinuxMeminfo: () => string;
+    readDarwinSwapusage: () => string;
+};
+export declare function detectHostResource(deps?: HostResourceDeps): HostResourceTelemetry;
+//# sourceMappingURL=host-resource.d.ts.map

package/dist/host-resource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-resource.d.ts","sourceRoot":"","sources":["../src/host-resource.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,qBAAqB,GAAG;IAClC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,CAAC;AAGF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAS7G;AAGD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAmB3G;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,EAAE,MAAM,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,MAAM,EAAE,CAAC;IACxB,YAAY,EAAE,MAAM,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,MAAM,CAAC;IAC/B,mBAAmB,EAAE,MAAM,MAAM,CAAC;CACnC,CAAC;AAUF,wBAAgB,kBAAkB,CAAC,IAAI,GAAE,gBAA8B,GAAG,qBAAqB,CAiC9F"}

package/dist/index.js

@@ -38266,6 +38266,23 @@ var CATALOG_ENTRIES = [
     // `agent.script_run` account entitlement gates availability on top of this.
     default_access_policy: "always_ask"
   },
+  {
+    id: "secret.broker",
+    title: "Call an authenticated API (brokered)",
+    provider: "rost",
+    description: "Call this to make ONE authenticated request to a pre-approved third-party API on the agent's behalf. You supply only the grant key, method, path, and query/body \u2014 never a credential. A server-side broker injects the secret, calls the single allowlisted host/path/method the grant permits, and returns a size-capped, secret-scrubbed result (response bodies that echo credential-shaped material are redacted wholesale). The secret never enters your context or the sandbox. Read requests run directly; any write (POST/PUT/PATCH/DELETE) is HELD for human approval before it is sent. Every attempt is audited.",
+    // A write goes out over the network with a real credential — the broadest tier.
+    // Reads on the same grant self-select the read behaviour at call time; the
+    // catalog tier is the ceiling (a write is held-with-approval).
+    default_scope_tier: "write_with_approval",
+    scope_tiers: ["read", "write_with_approval"],
+    // The broker resolves a vault ref per grant and injects it server-side.
+    credential_required: true,
+    // Conservative by default (invariant #10): brokered egress is confirmed by
+    // default; writes are additionally held for /approvals. A per-seat grant
+    // (script_run_secret_grants) gates availability on top of this — no grant, no call.
+    default_access_policy: "always_ask"
+  },
   {
     id: "ap.invoices.read",
     title: "Read AP invoices",
@@ -39000,8 +39017,29 @@ var agentSetupNextActionSchema = external_exports.enum([
   "sign_manifest",
   "run_dry_run",
   "go_live",
-  "complete"
+  "complete",
+  // DER-1628: live-agent remediation actions. A live agent is NOT automatically
+  // "complete" — a missing/never-approved active Charter or an ARCHIVED
+  // configured parent is a real post-go-live defect that must route the operator
+  // to the exact repair instead of falsely reading complete. These only ever
+  // appear for a live/promotable agent (the setup wizard's forward actions above
+  // cover the draft flow), and DER-1652 deep-links each to its repair surface.
+  "fix_charter",
+  "fix_reporting_line"
 ]);
+var agentSetupBlockerCodeSchema = external_exports.enum([
+  "missing_active_charter",
+  "archived_parent",
+  "missing_parent",
+  "missing_steward",
+  "missing_occupancy",
+  "missing_goal_or_measurable",
+  "skill_dependency_blocked"
+]);
+var agentSetupBlockerSchema = external_exports.object({
+  code: agentSetupBlockerCodeSchema,
+  message: external_exports.string().min(1).max(500)
+}).strict();
 var agentSetupSkillRecommendationSchema = skillSummarySchema.extend({
   match_score: external_exports.number().int().min(0).max(100),
   recommendation_reason: external_exports.string().min(1).max(240)
@@ -39067,7 +39105,10 @@ var agentSetupStateSchema = external_exports.object({
     // reload. Optional so a pre-DER-842 recorded result still validates.
     transcript: dryRunTranscriptSchema.optional()
   }).strict().nullable(),
-  blockers: external_exports.array(external_exports.string()),
+  // DER-1628: typed, stable completeness blockers (was `string[]`). `complete`
+  // is impossible while this array is non-empty — every surface reads the same
+  // canonical result rather than doing its own completeness math.
+  blockers: external_exports.array(agentSetupBlockerSchema),
   next_action: agentSetupNextActionSchema
 }).strict();
 var agentSetupToolUpdateSchema = external_exports.object({
@@ -40819,7 +40860,11 @@ var goalBindMeasurableOutputSchema = external_exports.object({
   computed_status: goalStatusSchema.nullable(),
   // True when a human status pin currently diverges from what the signal computes
   // ("computed says X / you pinned Y").
-  pinned_divergence: external_exports.boolean()
+  pinned_divergence: external_exports.boolean(),
+  // DER-1633: false for a fresh binding; true when this exact (goal, Signal) pair was
+  // already bound — the command is an idempotent no-op (no new event, no duplicate
+  // confirmation). Lets a caller distinguish "just bound" from "already bound".
+  already_bound: external_exports.boolean()
 }).strict();
 var goalUnbindMeasurableInputSchema = external_exports.object({
   goal_id: uuidSchema8,
@@ -40846,6 +40891,27 @@ var goalSetAutoStatusOutputSchema = external_exports.object({
   status_source: goalStatusSourceSchema,
   applied_from_signal: external_exports.boolean()
 }).strict();
+var goalMeasurableBindingSchema = external_exports.object({
+  measurable_id: uuidSchema8,
+  name: external_exports.string(),
+  unit: external_exports.string(),
+  role: external_exports.literal("drives_status"),
+  auto_status_enabled: external_exports.boolean(),
+  // Current signal indicator + the status it would compute from the latest CONFIRMED
+  // reading (null while awaiting a confirmed reading).
+  signal_state: goalSignalStateSchema,
+  computed_status: goalStatusSchema.nullable(),
+  // The latest confirmed reading's value (null while awaiting one) — enough to render
+  // "measured by <Signal>: <value> <unit>" instead of a bare "Not measured".
+  last_reading_value: external_exports.number().nullable()
+}).strict();
+var goalListMeasurablesInputSchema = external_exports.object({
+  goal_id: uuidSchema8
+}).strict();
+var goalListMeasurablesOutputSchema = external_exports.object({
+  goal_id: uuidSchema8,
+  bindings: external_exports.array(goalMeasurableBindingSchema)
+}).strict();
 var issueStatusSchema = external_exports.enum(["open", "diagnosing", "resolved", "dropped"]);
 var frictionListInputSchema = external_exports.object({
   status: external_exports.enum(["open", "diagnosing", "resolved", "dropped", "active", "all"]).optional()
@@ -44385,7 +44451,8 @@ var syncBriefExceptionSchema = external_exports.object({
   latest_value: external_exports.number().nullable(),
   target: external_exports.number(),
   unit: external_exports.string(),
-  period_start: dateSchema.nullable()
+  period_start: dateSchema.nullable(),
+  freshness: external_exports.enum(["fresh", "due", "stale", "awaiting_first_reading", "not_expected"]).optional()
 }).strict();
 var syncBriefGoalDeltaSchema = external_exports.object({
   goal_id: uuidSchema15,
@@ -44663,10 +44730,20 @@ var statusRecordOutputSchema = external_exports.object({
   event_id: uuidSchema17,
   type: external_exports.literal("status")
 }).strict();
+var duplicateFrictionCandidateSchema = external_exports.object({
+  issue_id: uuidSchema17,
+  summary: external_exports.string().min(1),
+  // pg_trgm similarity in [0, 1]; higher is more similar.
+  similarity: external_exports.number().min(0).max(1)
+}).strict();
 var frictionFileIssueOutputSchema = external_exports.object({
   event_id: uuidSchema17,
   issue_id: uuidSchema17,
-  type: external_exports.literal("issue")
+  type: external_exports.literal("issue"),
+  // DER-1522: likely-duplicate candidates detected before creation. Recommend,
+  // never block — filing always proceeds; empty when nothing crossed the
+  // conservative threshold (or the actor is not an agent).
+  duplicate_candidates: external_exports.array(duplicateFrictionCandidateSchema).default([])
 }).strict();
 var workLogInputSchema = external_exports.object({
   note: external_exports.string().min(1)
@@ -45759,7 +45836,7 @@ For CLI and MCP setup, read agent-skill-setup-guide before adding or assigning S
     order: 42,
     title: "Design a custom agent",
     summary: "How to build a custom agent from operational questions through the Charter Builder, tools, dry run, and go-live without writing prompts.",
-    version: "2026-07-10.1",
+    version: "2026-07-12.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["staffing", "charter_design"],
@@ -45824,6 +45901,14 @@ The same path is command-backed:
 7. \`agent.configure_tools\` / \`rost_configure_agent_tools\` records connect/decline decisions and credential-ingress requests (vault refs only).
 8. \`agent.run_dry_run\` / \`rost_run_agent_dry_run\` rehearses the task after the manifest is signed.
 
+## Setup completeness and blockers
+
+\`agent_setup.get\` derives completeness canonically, so every surface \u2014 the web builder, the CLI, and the \`agent.show_markdown\` readout \u2014 reads one result instead of doing its own math. It returns a \`blockers\` array plus a \`next_action\`. Each blocker is a typed \`{ code, message }\`: consumers key off the stable \`code\` (to group blockers or deep-link to the exact repair) and show \`message\` verbatim. A setup is \`complete\` only when \`blockers\` is empty; while any blocker is present, \`next_action\` points at the highest-priority repair rather than \`complete\`.
+
+The blocker codes are a stable vocabulary \u2014 new reasons get a new code rather than a rename. Emitted today: \`missing_active_charter\`, \`archived_parent\`, \`missing_parent\`, \`missing_steward\`, and \`skill_dependency_blocked\` (\`missing_occupancy\` and \`missing_goal_or_measurable\` are reserved for later checks).
+
+Completeness is not just a draft gate: a **live** agent is not automatically \`complete\`. If a live seat has no active, approved Charter, its configured parent is archived, or its steward chain no longer resolves to a human, \`agent_setup.get\` surfaces the matching blocker and routes \`next_action\` to the fix \u2014 \`fix_charter\` for \`missing_active_charter\`, \`fix_reporting_line\` for \`archived_parent\`, then \`set_steward\` for \`missing_steward\`, in that priority order. A live agent with no configured parent at all is the legitimate top-level case and stays \`complete\`; only an archived configured parent blocks it.
+
 ## Dry run and go-live
 
 The dry run is a real sandbox rehearsal, not a stamp. It executes a mock-provider run derived from the Charter \u2014 the agent works against sandbox data only and is expected to escalate where the Charter's must-escalate clause requires it. The same rehearsal works on all three lanes: cloud, external MCP, and local Runner. External MCP dry runs require an active seat-scoped MCP token; Runner dry runs require a paired Runner. Missing substrate returns a typed precondition error, not a generic failure. The recorded run keeps the agent's actual lane, so the evidence you review matches the lane you selected. The result is earned: a run that escalates the must-escalate boundary passes; a run that acts on that boundary instead of escalating fails. A failed dry run keeps the draft and shows the reason so you can edit and rerun. The rehearsal returns a transcript \u2014 the steps the agent took and the escalation it raised \u2014 shown step by step in the builder and printed by the CLI, so you can see the governance model working before anything goes live. The transcript is also lane-honest: each granted tool is marked executable, held for the steward, or granted but unimplemented in this lane, with a plain-count verdict such as "2 of 6 granted tools don't execute in the cloud lane yet" \u2014 so a grant that would silently no-op in the cloud runtime is visible before go-live instead of passing green. Runner and MCP-session agents run those tools through their own local skills, so their grants are not flagged as unimplemented. When the dry run passes, a human promotes the agent live. The dry run rehearses the specific model tier you chose, so once it passes the model is locked \u2014 changing the model requires re-running the dry run on the new model before go-live.
@@ -46169,7 +46254,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-07-11.1",
+    version: "2026-07-12.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -46842,6 +46927,7 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_import_rocks_from_a_ninety_rocks_export\` | \`cascade.import\` | Bulk-import Rocks as Cascade cycle goals under a company objective in the active cycle (from a ninety Rocks export). Owners resolve to seats; idempotent re-import skips a cycle goal already imported for the same objective + seat + title. | Tenant | Call with the parsed \`rocks\` array. |
 | \`rost_import_a_ninety_v_to_into_a_compass_draft\` | \`compass.import\` | AI-draft a Compass from a ninety V/TO (Core Values \u2192 principles, 10/3/1-Year \u2192 horizon goals, Rocks \u2192 cycle objectives), landed as a draft a human confirms by supersession \u2014 never an accepted Compass. Idempotent by document content (a re-upload of the same V/TO short-circuits without re-drafting). | Tenant | Call with the extracted V/TO \`text\` (and optional \`source_name\`). |
 | \`rost_list_cascade_goals\` | \`goal.list\` | List Cascade goals, optionally by cycle or seat. | Seat or tenant-admin | Call with \`{}\` or \`{"cycle_id":"<id>"}\`. |
+| \`rost_list_a_cascade_goals_signals\` | \`goal.list_measurables\` | List the Signals bound to a goal (drives_status) with each one's current indicator and latest confirmed reading. Read-only. | Seat or tenant-admin | Call with \`{"goal_id":"<id>"}\`. |
 | \`rost_create_cascade_goal\` | \`goal.create\` | Create a cycle goal under an objective. | Tenant | Call with cycle, seat, parent, title, definition of done. |
 | \`rost_update_cascade_goal\` | \`goal.update\` | Update a goal's title or definition of done. | Tenant | Call with \`goal_id\` and the changed fields. |
 | \`rost_set_cascade_goal_status\` | \`goal.set_status\` | Set a goal's status (on/off/done). | Seat or tenant-admin | Seats may set only their own goals. |
@@ -50102,6 +50188,7 @@ var COMMAND_MANIFEST = [
   { "id": "goal.drop", "namespace": "goal", "action": "drop", "title": "Drop Cascade goal", "description": "Drop (retire) a goal by setting status to dropped. Dropping retires the commitment, so it is human-gated. The row is retained for audit (never deleted).", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "goal_id", "flag": "goal-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Drop a goal to retire a commitment; the goal is retained for audit and dropping is human-gated." },
   { "id": "goal.list", "namespace": "goal", "action": "list", "title": "List Cascade goals", "description": "List goals in the tenant, optionally filtered by cycle or seat. Seat-scoped callers see only their own seat's goals.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "cycle_id", "flag": "cycle-id", "type": "string", "required": false }, { "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "List Cascade goals to find goal ids, parentage, and seat ownership before mutating the tree." },
   { "id": "goal.list_at_risk", "namespace": "goal", "action": "list_at_risk", "title": "List at-risk Cascade goals", "description": "List goals projected to miss their cycle pace (at-risk or projected-miss), with how many days behind pace. Read-only; status-only goals (no progress) are excluded.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "List goals projected off pace (at-risk or projected-miss), with how many days behind pace. Read-only; status-only goals are excluded." },
+  { "id": "goal.list_measurables", "namespace": "goal", "action": "list_measurables", "title": "List a Cascade goal's Signals", "description": "List the Signals bound to a Cascade goal (role drives_status), each with its current signal indicator and latest confirmed reading. Read-only.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "goal_id", "flag": "goal-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "List the Signals bound to a goal (role drives_status) with each one's current indicator and latest confirmed reading." },
   { "id": "goal.reparent", "namespace": "goal", "action": "reparent", "title": "Reparent Cascade goal", "description": "Move a goal under a different parent. Reparenting changes accountable structure, so it is human-gated. One-root and no-cycle are enforced server-side.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "goal_id", "flag": "goal-id", "type": "string", "required": true }, { "name": "parent_goal_id", "flag": "parent-goal-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Reparent a goal only when it clarifies accountable structure; reparenting changes authority and is human-gated." },
   { "id": "goal.set_auto_status", "namespace": "goal", "action": "set_auto_status", "title": "Toggle Signal-driven auto-status", "description": "Opt a goal's drives_status binding into (or out of) auto-status. Default OFF. Enabling lets confirmed readings drive the goal's status; a human status pin still wins. Human-gated opt-in.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "goal_id", "flag": "goal-id", "type": "string", "required": true }, { "name": "measurable_id", "flag": "measurable-id", "type": "string", "required": true }, { "name": "enabled", "flag": "enabled", "type": "boolean", "required": true }], "hasComplexInput": false, "help": "Opt a goal's Signal binding into (or out of) auto-status. Default OFF. Enabling lets confirmed readings drive the status; a human status pin still wins." },
   { "id": "goal.set_progress", "namespace": "goal", "action": "set_progress", "title": "Set Cascade goal progress", "description": "Set a goal's quantified progress (0\u2013100). Seat-scoped callers may set progress only for their own goals. An agent's progress is a proposal a human approves before it lands.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "goal_id", "flag": "goal-id", "type": "string", "required": true }, { "name": "progress_pct", "flag": "progress-pct", "type": "integer", "required": true }], "hasComplexInput": false, "help": "Report a goal's quantified progress (0-100). An agent's progress is a proposal a human approves before the goal moves." },
@@ -54599,6 +54686,80 @@ async function removeWorkspace(ws) {
   await removeWorktree(ws.baseRepo, ws.worktreeDir);
 }
 
+// src/host-resource.ts
+import { execFileSync } from "node:child_process";
+import { readFileSync as readFileSync4 } from "node:fs";
+import { freemem, loadavg, platform as osPlatform } from "node:os";
+var MB = 1024 * 1024;
+function parseLinuxMeminfoSwap(meminfo) {
+  const total = /^SwapTotal:\s+(\d+)\s*kB/m.exec(meminfo);
+  const free = /^SwapFree:\s+(\d+)\s*kB/m.exec(meminfo);
+  if (!total || !free) return null;
+  const totalKb = Number(total[1]);
+  const freeKb = Number(free[1]);
+  if (!Number.isFinite(totalKb) || !Number.isFinite(freeKb)) return null;
+  const usedKb = Math.max(0, totalKb - freeKb);
+  return { swap_used_mb: Math.round(usedKb / 1024), swap_total_mb: Math.round(totalKb / 1024) };
+}
+function parseDarwinSwapusage(output) {
+  const total = /total\s*=\s*([\d.]+)\s*([KMGT])/i.exec(output);
+  const used = /used\s*=\s*([\d.]+)\s*([KMGT])/i.exec(output);
+  if (!total || !used) return null;
+  const toMb = (value, unit) => {
+    const n = Number(value);
+    const u = unit.toUpperCase();
+    const mult = u === "G" ? 1024 : u === "T" ? 1024 * 1024 : u === "K" ? 1 / 1024 : 1;
+    return n * mult;
+  };
+  const usedValue = used[1];
+  const usedUnit = used[2];
+  const totalValue = total[1];
+  const totalUnit = total[2];
+  if (usedValue === void 0 || usedUnit === void 0 || totalValue === void 0 || totalUnit === void 0) return null;
+  const usedMb = toMb(usedValue, usedUnit);
+  const totalMb = toMb(totalValue, totalUnit);
+  if (!Number.isFinite(usedMb) || !Number.isFinite(totalMb)) return null;
+  return { swap_used_mb: Math.round(usedMb), swap_total_mb: Math.round(totalMb) };
+}
+var defaultDeps = {
+  platform: () => osPlatform(),
+  loadAvg: () => loadavg(),
+  freeMemBytes: () => freemem(),
+  readLinuxMeminfo: () => readFileSync4("/proc/meminfo", "utf8"),
+  readDarwinSwapusage: () => execFileSync("sysctl", ["-n", "vm.swapusage"], { encoding: "utf8", timeout: 2e3 })
+};
+function detectHostResource(deps = defaultDeps) {
+  let load_avg_1m = null;
+  try {
+    const l = deps.loadAvg();
+    const first = Array.isArray(l) ? l[0] : void 0;
+    load_avg_1m = typeof first === "number" && Number.isFinite(first) ? first : null;
+  } catch {
+    load_avg_1m = null;
+  }
+  let memory_available_mb = null;
+  try {
+    const bytes = deps.freeMemBytes();
+    memory_available_mb = Number.isFinite(bytes) && bytes >= 0 ? Math.round(bytes / MB) : null;
+  } catch {
+    memory_available_mb = null;
+  }
+  let swap = null;
+  try {
+    const p = deps.platform();
+    if (p === "linux") swap = parseLinuxMeminfoSwap(deps.readLinuxMeminfo());
+    else if (p === "darwin") swap = parseDarwinSwapusage(deps.readDarwinSwapusage());
+  } catch {
+    swap = null;
+  }
+  return {
+    load_avg_1m,
+    memory_available_mb,
+    swap_used_mb: swap?.swap_used_mb ?? null,
+    swap_total_mb: swap?.swap_total_mb ?? null
+  };
+}
+
 // src/runner-serve.ts
 var execFile5 = promisify5(execFileCallback5);
 var RUNNER_WORK_ORDER_TOOLS = [
@@ -54784,6 +54945,7 @@ function capabilitiesForAnalytics(capabilities) {
 }
 function detectTelemetry(capabilities, env, activeSessions, cliVersion) {
   const usageState = env.RUNNER_MODEL_ACCOUNT_STATE ?? env.ROST_RUNNER_MODEL_ACCOUNT_STATE ?? "unknown";
+  const host = detectHostResource();
   return {
     os: platform(),
     cpu_count: cpus().length,
@@ -54797,7 +54959,11 @@ function detectTelemetry(capabilities, env, activeSessions, cliVersion) {
     usage_limit_observation: {
       state: usageState,
       source: "runner_env_or_unknown"
-    }
+    },
+    load_avg_1m: host.load_avg_1m,
+    memory_available_mb: host.memory_available_mb,
+    swap_used_mb: host.swap_used_mb,
+    swap_total_mb: host.swap_total_mb
   };
 }
 function parseServeArgs(args, appUrl2, env, homeDir) {