@songsid/agend 2.1.10-beta.2 → 2.1.10-beta.4

package/dist/coredump-filter.js

@@ -0,0 +1,64 @@
+/**
+ * Keep crash dumps small, from inside the fleet (#1113 hotfix).
+ *
+ * On WSL every crash is piped to /wsl-capture-crash, which ignores
+ * RLIMIT_CORE, so kiro-cli and the fleet left ~1 GB / ~450 MB dumps in
+ * %TEMP%\wsl-crashes. A zero /proc/<pid>/coredump_filter writes no memory
+ * mappings into a dump (a few KB). The unit's `CoredumpFilter=0` was meant to
+ * set it, but systemd 249 silently ignores that directive in a unit file
+ * (only a transient `systemd-run -p` honours it), so the fleet sets its own
+ * filter at startup instead. The value is inherited across fork/exec by a
+ * tmux server the fleet starts; panes of a server that already existed get
+ * it from coredumpFilterLaunchPrefix below.
+ *
+ * Linux only. No privilege needed: a process may always narrow its own filter.
+ */
+import { readFileSync, writeFileSync } from "node:fs";
+export function disableCoredumpMemory(path = "/proc/self/coredump_filter", platform = process.platform, env = process.env) {
+    if (platform !== "linux")
+        return "unsupported";
+    // An operator debugging a crash keeps full dumps (and any filter they set).
+    if (env.AGEND_KEEP_COREDUMP_FILTER === "1")
+        return "kept";
+    try {
+        if (/^0+$/.test(readFileSync(path, "utf-8").trim()))
+            return "already";
+    }
+    catch {
+        return "unsupported"; // no such file: a kernel without it
+    }
+    try {
+        writeFileSync(path, "0");
+        return /^0+$/.test(readFileSync(path, "utf-8").trim()) ? "set" : "failed";
+    }
+    catch {
+        return "failed";
+    }
+}
+/**
+ * The fleet process's start-up step: called once the fleet owns its lock,
+ * before anything is spawned, so a tmux server it starts inherits it.
+ */
+export function limitFleetCoreDumps(log, disable = disableCoredumpMemory) {
+    const outcome = disable();
+    if (outcome === "set" || outcome === "already")
+        log.info("Crash dumps limited to a few KB (coredump_filter=0 for the fleet and every CLI it launches).");
+    else if (outcome === "failed")
+        log.error("⚠ Could not set /proc/self/coredump_filter to 0; a crash may write a full-size core dump (#1113).");
+}
+/**
+ * Shell prefix for AgEnD's own CLI launch commands (#1125 review). The fleet's
+ * filter reaches a CLI only if the tmux server was started by this fleet; a
+ * server that already existed (the default socket may hold a user's own
+ * session, which AgEnD reuses and never kills) forks panes with ITS filter.
+ * So each launch sets the filter of the pane's own shell before the CLI
+ * starts: `echo` is a builtin in sh, bash, zsh and fish, the redirect order
+ * silences a failure, and the CLI and everything it spawns inherit the value.
+ * Empty where it does not apply or the operator opted out.
+ */
+export function coredumpFilterLaunchPrefix(platform = process.platform, env = process.env) {
+    if (platform !== "linux" || env.AGEND_KEEP_COREDUMP_FILTER === "1")
+        return "";
+    return "echo 0 2>/dev/null >/proc/self/coredump_filter; ";
+}
+//# sourceMappingURL=coredump-filter.js.map

package/dist/coredump-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coredump-filter.js","sourceRoot":"","sources":["../src/coredump-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAItD,MAAM,UAAU,qBAAqB,CACnC,IAAI,GAAG,4BAA4B,EACnC,WAA4B,OAAO,CAAC,QAAQ,EAC5C,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,aAAa,CAAC;IAC/C,4EAA4E;IAC5E,IAAI,GAAG,CAAC,0BAA0B,KAAK,GAAG;QAAE,OAAO,MAAM,CAAC;IAC1D,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAAE,OAAO,SAAS,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC,CAAC,oCAAoC;IAC5D,CAAC;IACD,IAAI,CAAC;QACH,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzB,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAA0D,EAC1D,UAAgD,qBAAqB;IAErE,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,IAAI,CAAC,8FAA8F,CAAC,CAAC;SACpJ,IAAI,OAAO,KAAK,QAAQ;QAAE,GAAG,CAAC,KAAK,CAAC,mGAAmG,CAAC,CAAC;AAChJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACxC,WAA4B,OAAO,CAAC,QAAQ,EAC5C,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,0BAA0B,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC;IAC9E,OAAO,kDAAkD,CAAC;AAC5D,CAAC"}

package/dist/daemon.js

@@ -5,6 +5,7 @@ import { ensureInstanceDir } from "./private-dir.js";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { EventEmitter } from "node:events";
 import { rotateLogIfNeeded } from "./logger.js";
+import { coredumpFilterLaunchPrefix } from "./coredump-filter.js";
 import { mcpServerState } from "./mcp-liveness.js";
 import { clearPausedMarker, writePausedMarker } from "./pause-marker.js";
 import { TmuxManager, resolveTmuxLogicalSize } from "./tmux-manager.js";
@@ -8206,7 +8207,10 @@ export class Daemon extends EventEmitter {
                 clearMuseUsageSnapshot(this.instanceDir);
             }
         }
-        const cmd = `${envPrefix} ` + this.backend.buildCommand(launchConfig);
+        // The CLI's own shell sets a zero coredump_filter first (#1113): this pane
+        // may belong to a tmux server the fleet did not start, which would hand
+        // the CLI its own (full) filter instead of the fleet's.
+        const cmd = coredumpFilterLaunchPrefix() + `${envPrefix} ` + this.backend.buildCommand(launchConfig);
         // Every launched command re-arms the passive-transient check, including a
         // retry inside the same spawn: its load is a new one.
         this.launchAttempt++;