@songsid/agend 2.3.0-beta.25 → 2.3.0-beta.26

package/dist/cross-instance-envelope.js.map

@@ -1 +1 @@
-{"version":3,"file":"cross-instance-envelope.js","sourceRoot":"","sources":["../src/cross-instance-envelope.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,MAAM,CAAC,MAAM,0CAA0C,GAAG,MAAM,CAAC;AAEjE,2DAA2D;AAC3D,MAAM,UAAU,kCAAkC,CAAC,IAA4B;IAC7E,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,KAAyB,EAAE,EAAE;QACvD,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC;IACF,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACnC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC7C,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/B,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IAC3C,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACvC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACvC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACjD,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAE,WAA+B;IACrF,MAAM,OAAO,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAa;IACpC,OAAO,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC/F,CAAC;AAKD;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAA4B,EAAE,OAAkB,KAAK;IAC5F,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,KAAK,MAAM,CAAC;IAChD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,aAAa,IAAI,QAAQ,CAAC,CAAC;QACtD,OAAO,QAAQ;YACb,CAAC,CAAC,8CAA8C,IAAI,QAAQ,QAAQ,CAAC,IAAI,CAAC,cAAc,IAAI,gBAAgB,CAAC,0BAA0B,IAAI,yBAAyB;YACpK,CAAC,CAAC,iDAAiD,IAAI,0EAA0E,CAAC;IACtI,CAAC;IACD,OAAO,QAAQ;QACb,CAAC,CAAC,kHAAkH;QACpH,CAAC,CAAC,wHAAwH,CAAC;AAC/H,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,iCAAiC,CAAC,OAAe,EAAE,IAA4B,EAAE,OAAkB,KAAK;IACtH,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,IAAI,SAAS,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;IAC9F,IAAI,SAAS,GAAG,SAAS,SAAS,KAAK,OAAO,EAAE,CAAC;IACjD,wEAAwE;IACxE,kDAAkD;IAClD,MAAM,UAAU,GAAG,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC;QACnE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE;QAC/B,CAAC,CAAC,IAAI,CAAC;IACT,SAAS,IAAI,kCAAkC,CAAC,UAAU,CAAC,CAAC;IAC5D,SAAS,IAAI,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClD,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"cross-instance-envelope.js","sourceRoot":"","sources":["../src/cross-instance-envelope.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,MAAM,CAAC,MAAM,0CAA0C,GAAG,MAAM,CAAC;AAEjE,2DAA2D;AAC3D,MAAM,UAAU,kCAAkC,CAAC,IAA4B;IAC7E,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,KAAyB,EAAE,EAAE;QACvD,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC;IACF,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACnC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC7C,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/B,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IAC3C,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACvC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACvC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACjD,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAE,WAA+B;IACrF,MAAM,OAAO,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAa;IACpC,OAAO,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC/F,CAAC;AAKD;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAA4B,EAAE,IAAI,GAAc,KAAK;IAC5F,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,KAAK,MAAM,CAAC;IAChD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,aAAa,IAAI,QAAQ,CAAC,CAAC;QACtD,OAAO,QAAQ;YACb,CAAC,CAAC,8CAA8C,IAAI,QAAQ,QAAQ,CAAC,IAAI,CAAC,cAAc,IAAI,gBAAgB,CAAC,0BAA0B,IAAI,yBAAyB;YACpK,CAAC,CAAC,iDAAiD,IAAI,0EAA0E,CAAC;IACtI,CAAC;IACD,OAAO,QAAQ;QACb,CAAC,CAAC,kHAAkH;QACpH,CAAC,CAAC,wHAAwH,CAAC;AAC/H,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,iCAAiC,CAAC,OAAe,EAAE,IAA4B,EAAE,IAAI,GAAc,KAAK;IACtH,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,IAAI,SAAS,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;IAC9F,IAAI,SAAS,GAAG,SAAS,SAAS,KAAK,OAAO,EAAE,CAAC;IACjD,wEAAwE;IACxE,kDAAkD;IAClD,MAAM,UAAU,GAAG,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC;QACnE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE;QAC/B,CAAC,CAAC,IAAI,CAAC;IACT,SAAS,IAAI,kCAAkC,CAAC,UAAU,CAAC,CAAC;IAC5D,SAAS,IAAI,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/daemon.d.ts

@@ -481,6 +481,9 @@ export declare class Daemon extends EventEmitter {
     private mcpPingWaiters;
     private healthCheckTimer;
     private crashCount;
+    private cliOomObservation;
+    private consecutiveOoms;
+    private oomSessionKey;
     private lastCrashAt;
     private lastSpawnAt;
     private crashTimestamps;

package/dist/daemon.js

@@ -10,6 +10,7 @@ import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { EventEmitter } from "node:events";
 import { rotateLogIfNeededAsync } from "./logger.js";
 import { coredumpFilterLaunchPrefix } from "./coredump-filter.js";
+import { observeCliOomIdentity, confirmedCliOom, consecutiveSessionOoms } from "./session-oom.js";
 import { mcpServerState } from "./mcp-liveness.js";
 import { clearPausedMarker, writePausedMarker } from "./pause-marker.js";
 import { writeBackgroundWorkEndedMarker } from "./background-work-ended.js";
@@ -19,6 +20,7 @@ import { createTranscriptSource } from "./transcript-sources.js";
 import { TranscriptTurnLedger } from "./transcript-turns.js";
 import { credentialProfileStoreHome, resolveCredentialProfile } from "./backend/credential-profile.js";
 import { resolveToolSet } from "./tool-permissions.js";
+import { dashboardAccessProblem, dashboardFeaturesOff } from "./dashboard-permissions.js";
 import { getAgendHome } from "./paths.js";
 import { readCanvasWorkerEnabled, scopedFleetConfigEnvironment } from "./web-experimental.js";
 import { readAgentEffect, sendEffectInParts } from "./web-effect-upload.js";
@@ -1159,6 +1161,18 @@ export class Daemon extends EventEmitter {
     // injected by FleetManager below.
     healthCheckTimer = null;
     crashCount = 0;
+    cliOomObservation = null;
+    consecutiveOoms = null;
+    oomSessionKey() {
+        // Claude's per-instance statusline owns its ID. Other current getters
+        // either return null or select by cwd (Muse/Grok): those are not proof
+        // of this pane's session and must not trigger this destructive decision.
+        if ((this.config.backend ?? "claude-code") !== "claude-code")
+            return null;
+        const session = this.backend?.getSessionId?.();
+        return typeof session === "string" && session.trim() && session.length <= 512
+            ? JSON.stringify([this.config.backend ?? "claude-code", session.trim()]) : null;
+    }
     lastCrashAt = 0;
     lastSpawnAt = 0;
     crashTimestamps = [];
@@ -2904,6 +2918,19 @@ export class Daemon extends EventEmitter {
                     if (discardStaleHealth())
                         return;
                     if (paneStatus?.alive) {
+                        // Capture only a known primary while it lives. No extra tmux call: PID comes
+                        // from this same status read. Fast/unobserved deaths remain ordinary crashes.
+                        const key = this.oomSessionKey();
+                        if (this.cliOomObservation?.key !== key)
+                            this.cliOomObservation = null;
+                        if (paneStatus.pid && key && !this.cliOomObservation) {
+                            const identity = await observeCliOomIdentity(paneStatus.pid, cliLabel);
+                            if (discardStaleHealth())
+                                return;
+                            if (identity && this.oomSessionKey() === key) {
+                                this.cliOomObservation = { identity, key, owner: healthOwner, tmux: healthTmux };
+                            }
+                        }
                         this.windowQueryFailureTicks = 0;
                         this.stormWindow?.noteWindowAlive(this.name);
                         // Instance output.log is fed by tmux pipe-pane and was previously never
@@ -3058,6 +3085,30 @@ export class Daemon extends EventEmitter {
                         return;
                     this.setProcessStatus("crashed");
                     this.logPaneDeath(cliLabel, exitCode, lastOutput);
+                    const observed = this.cliOomObservation;
+                    const key = this.oomSessionKey();
+                    const oom = paneStatus && exitCode === 137 && observed && observed.key === key
+                        && observed.tmux === healthTmux && sameInteractionOwner(observed.owner, healthOwner)
+                        ? await confirmedCliOom(observed.identity, Date.now()) : null;
+                    if (discardStaleHealth())
+                        return;
+                    this.cliOomObservation = null;
+                    const decisionKey = this.oomSessionKey();
+                    this.consecutiveOoms = consecutiveSessionOoms(this.consecutiveOoms, decisionKey, decisionKey === key && oom !== null);
+                    if (this.consecutiveOoms && this.consecutiveOoms.count >= 2) {
+                        // Stop supervision, not an idle pause: queued work must not auto-wake
+                        // the same session. An explicit restart is the person's retry choice.
+                        this.healthCheckPaused = true;
+                        try {
+                            this.appendCrashHistory({ exitCode, lastOutput, crashType, reason: "session_oom" });
+                        }
+                        catch (error) {
+                            this.logger.warn({ error }, "Could not append session OOM history");
+                        }
+                        this.logger.error({ pid: oom.pid, count: this.consecutiveOoms.count }, "Repeated confirmed CLI OOM — automatic resume stopped; session preserved");
+                        this.emitSupervisionEnded(t("inst.session_oom_stopped"), t("inst.session_oom_remedy"), exitCode, "session_oom");
+                        return;
+                    }
                     // Kill the dead window (remain-on-exit keeps it around) before respawn
                     if (paneStatus) {
                         await healthTmux.killWindow();
@@ -3168,14 +3219,14 @@ export class Daemon extends EventEmitter {
                         // (bounded) session lookup. They only stop LATER ticks; this continuation is already
                         // past that check and must not clear the process/window or respawn an instance that
                         // was just stopped or paused (#1160 review).
-                        if (this.runtimeMonitorsFrozen || this.healthCheckPaused)
+                        if (discardStaleHealth())
                             return;
                         // Reset is synchronous for file sources, but Kiro's baseline is
                         // read off-thread. Finish it before starting the replacement CLI,
                         // otherwise its first work could become part of that baseline.
                         if (!await this.resetTranscriptBeforeAdmission())
                             return;
-                        if (this.runtimeMonitorsFrozen || this.healthCheckPaused)
+                        if (discardStaleHealth())
                             return;
                         // Kill orphan MCP server from the crashed CLI session.
                         // MCP server writes its PID to channel.mcp.pid on startup.
@@ -3199,6 +3250,8 @@ export class Daemon extends EventEmitter {
                             }
                         }
                         catch { /* tmux server may be dead — ensureSession in trySpawn will recover */ }
+                        if (discardStaleHealth())
+                            return;
                         // Write snapshot before spawn — consumed only if resume fails
                         this.writeRotationSnapshot("crash");
                         // Try --resume first; spawnClaudeWindow falls back to fresh session if resume fails
@@ -6415,6 +6468,11 @@ export class Daemon extends EventEmitter {
             this.config.board_cards_at_once = update.board_cards_at_once;
         else if (update.board_cards_at_once === null)
             delete this.config.board_cards_at_once;
+        // The fleet reads it at each tool call; kept current here for the next spawn's tool menu.
+        if (update.dashboard && typeof update.dashboard === "object" && !dashboardAccessProblem(update.dashboard))
+            this.config.dashboard = update.dashboard;
+        else if (update.dashboard === null)
+            delete this.config.dashboard;
         if (["trace", "debug", "info", "warn", "error"].includes(String(update.log_level))) {
             const level = update.log_level;
             if (this.config.log_level !== level) {
@@ -10558,6 +10616,11 @@ export class Daemon extends EventEmitter {
             ? resolveToolSet(this.config, this.name, "general")
             : resolveToolSet(this.config, this.name);
         mcpEnv.AGEND_TOOL_SET = toolSet;
+        // The dashboard features the person switched off: out of the tool menu from this start (the fleet refuses them
+        // at once, whatever the menu still shows).
+        const dashboardOff = dashboardFeaturesOff(this.config.dashboard);
+        if (dashboardOff.length)
+            mcpEnv.AGEND_DASHBOARD_OFF = dashboardOff.join(",");
         if (this.config.display_name)
             mcpEnv.AGEND_DISPLAY_NAME = this.config.display_name;
         if (this.config.description)
@@ -10590,6 +10653,7 @@ export class Daemon extends EventEmitter {
             catch { /* fallback to empty */ }
             instructions = buildFleetInstructions({
                 instanceName: this.name,
+                taskBoard: !dashboardOff.includes("task_board"),
                 workingDirectory: this.config.working_directory,
                 runtimeIdentity: this.runtimeIdentity,
                 displayName: this.config.display_name,
@@ -10604,6 +10668,7 @@ export class Daemon extends EventEmitter {
         else {
             instructions = buildFleetInstructions({
                 instanceName: this.name,
+                taskBoard: !dashboardOff.includes("task_board"),
                 workingDirectory: this.config.working_directory,
                 runtimeIdentity: this.runtimeIdentity,
                 displayName: this.config.display_name,
@@ -10706,6 +10771,7 @@ export class Daemon extends EventEmitter {
         this.clearReplyGuardConfirm();
         this.sawBlockedInput = false;
         if (this.spawnDepth === 0) {
+            this.cliOomObservation = null;
             this.spawnGeneration++;
             this.interactionObservation.reset(this.interactionOwner());
             this.clearInteractionConfirmation();
@@ -11009,6 +11075,10 @@ export class Daemon extends EventEmitter {
                 // is reachable again (a fresh prompt is local and proves nothing).
                 this.backendOutage?.clear(this.backendKey());
             }
+            // A pre-existing fresh fallback is not another resume of the old session.
+            // Providers may not have rewritten their session reading yet.
+            if (!resumedSuccessfully)
+                this.consecutiveOoms = null;
             this.lastSpawnAt = Date.now();
             // #1217: whatever session this CLI writes from here on is this backend's.
             this.recordSessionOwner();
@@ -12411,7 +12481,7 @@ export class Daemon extends EventEmitter {
             respond(null, `Not a git repository: ${source}`);
             return;
         }
-        mkdirSync(join(this.instanceDir, "repos"), { recursive: true });
+        mkdirSync(join(this.instanceDir, "repos"), { recursive: true, mode: 0o700 });
         // Only a fresh direct child of a real repos/ directory (never through a symlinked repos/, never an existing path).
         const target = checkoutTarget(this.instanceDir, source, branch);
         if (!target.ok) {