@songsid/agend 2.3.1 → 2.3.2-beta.10

package/dist/cpu-quota.js

@@ -0,0 +1,86 @@
+import { readFileSync } from "node:fs";
+import { availableParallelism, platform } from "node:os";
+const defaultDeps = {
+    platform: platform(),
+    availableParallelism,
+    readFile: (path) => readFileSync(path, "utf8"),
+};
+export function effectiveCpuCount(deps = defaultDeps) {
+    const parallelism = Math.max(1, Math.floor(deps.availableParallelism()) || 1);
+    if (deps.platform !== "linux")
+        return parallelism;
+    const quota = cgroupCpuQuota(deps);
+    return quota == null ? parallelism : Math.max(1, Math.min(parallelism, Math.ceil(quota)));
+}
+/** The tightest CFS quota on this process, in CPUs; null when unlimited or unreadable. */
+export function cgroupCpuQuota(deps) {
+    let selfCgroup;
+    try {
+        selfCgroup = deps.readFile("/proc/self/cgroup");
+    }
+    catch {
+        return null;
+    }
+    const lines = selfCgroup.split("\n");
+    const v2 = lines.find(l => l.startsWith("0::"));
+    if (v2) {
+        const fromV2 = v2Quota(deps, v2.slice(3).trim());
+        if (fromV2 != null)
+            return fromV2;
+    }
+    // Hybrid hosts list both; a v1 cpu controller line is "N:cpu,cpuacct:/path" (any order).
+    const v1 = lines.map(l => l.split(":")).find(p => p.length >= 3 && p[1].split(",").includes("cpu"));
+    return v1 ? v1Quota(deps, v1.slice(2).join(":").trim()) : null;
+}
+/** A cgroup's own quota says nothing about its parents': check every level up to the mount. */
+function ancestry(base, path) {
+    const segments = path.split("/").filter(Boolean);
+    // A path outside our cgroup namespace ("/../..") does not exist under our mount: only the mount root applies.
+    if (segments.includes(".."))
+        return [base];
+    const dirs = [];
+    for (let i = segments.length; i >= 0; i--)
+        dirs.push([base, ...segments.slice(0, i)].join("/"));
+    return dirs;
+}
+function v2Quota(deps, path) {
+    let tightest = null;
+    for (const dir of ancestry("/sys/fs/cgroup", path)) {
+        let text;
+        try {
+            text = deps.readFile(`${dir}/cpu.max`);
+        }
+        catch {
+            continue;
+        }
+        const match = /^(\d+|max)\s+(\d+)\s*$/.exec(text.trim());
+        if (!match || match[1] === "max")
+            continue;
+        const cpus = Number(match[1]) / Number(match[2]);
+        if (Number.isFinite(cpus) && cpus > 0 && (tightest == null || cpus < tightest))
+            tightest = cpus;
+    }
+    return tightest;
+}
+function v1Quota(deps, path) {
+    let tightest = null;
+    for (const mount of ["/sys/fs/cgroup/cpu", "/sys/fs/cgroup/cpu,cpuacct"]) {
+        for (const dir of ancestry(mount, path)) {
+            let quota, period;
+            try {
+                quota = Number(deps.readFile(`${dir}/cpu.cfs_quota_us`).trim());
+                period = Number(deps.readFile(`${dir}/cpu.cfs_period_us`).trim());
+            }
+            catch {
+                continue;
+            }
+            if (!Number.isFinite(quota) || !Number.isFinite(period) || quota <= 0 || period <= 0)
+                continue; // -1 = unlimited
+            const cpus = quota / period;
+            if (tightest == null || cpus < tightest)
+                tightest = cpus;
+        }
+    }
+    return tightest;
+}
+//# sourceMappingURL=cpu-quota.js.map

package/dist/cpu-quota.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cpu-quota.js","sourceRoot":"","sources":["../src/cpu-quota.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAuBzD,MAAM,WAAW,GAAiB;IAChC,QAAQ,EAAE,QAAQ,EAAE;IACpB,oBAAoB;IACpB,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC;CAC/C,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,IAAI,GAAiB,WAAW;IAChE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,WAAW,CAAC;IAClD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,cAAc,CAAC,IAAoC;IACjE,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QAAC,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAChD,IAAI,EAAE,EAAE,CAAC;QACP,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACjD,IAAI,MAAM,IAAI,IAAI;YAAE,OAAO,MAAM,CAAC;IACpC,CAAC;IACD,yFAAyF;IACzF,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACpG,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC;AAED,+FAA+F;AAC/F,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAY;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,8GAA8G;IAC9G,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAChG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,IAAoC,EAAE,IAAY;IACjE,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,gBAAgB,EAAE,IAAI,CAAC,EAAE,CAAC;QACnD,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,UAAU,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QACnE,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK;YAAE,SAAS;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI,GAAG,QAAQ,CAAC;YAAE,QAAQ,GAAG,IAAI,CAAC;IAClG,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,OAAO,CAAC,IAAoC,EAAE,IAAY;IACjE,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,CAAC,oBAAoB,EAAE,4BAA4B,CAAC,EAAE,CAAC;QACzE,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;YACxC,IAAI,KAAa,EAAE,MAAc,CAAC;YAClC,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChE,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACpE,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC;gBAAE,SAAS,CAAC,iBAAiB;YACjH,MAAM,IAAI,GAAG,KAAK,GAAG,MAAM,CAAC;YAC5B,IAAI,QAAQ,IAAI,IAAI,IAAI,IAAI,GAAG,QAAQ;gBAAE,QAAQ,GAAG,IAAI,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/daemon.d.ts

@@ -1,3 +1,4 @@
+import type { RecoveryLive } from "./working-recovery.js";
 import type { PaneContextSource } from "./pane-context-cache.js";
 import type { WorkingStateObservation } from "./working-state-journal.js";
 import { EventEmitter } from "node:events";
@@ -7,6 +8,7 @@ import { type PauseReason } from "./pause-marker.js";
 import { MessageBus } from "./channel/message-bus.js";
 import type { CliBackend, ErrorPattern, InstanceState, InstanceStateSnapshot } from "./backend/types.js";
 import { HangDetector } from "./hang-detector.js";
+import { type RemoteCardAction, type RemoteCardOutcome } from "./remote-card-answer.js";
 import type { TmuxControlClient } from "./tmux-control.js";
 import type { FleetInstructionsParams } from "./instructions.js";
 import type { SpawnGate } from "./spawn-gate.js";
@@ -543,6 +545,8 @@ export declare class Daemon extends EventEmitter {
      * skipResume — the #1209 gate reads this, never the resettable flag.
      */
     private bootSkippedResume;
+    private recoveryCrashLoopFresh;
+    private recoveryFreshChoice;
     private startupAborted;
     /** First time the current on-screen blocking dialog was seen (0 = none); drives the parked report. */
     private dialogParkedSince;
@@ -550,6 +554,12 @@ export declare class Daemon extends EventEmitter {
     private dialogParkedKey;
     private dialogParkedInteractionEpisode;
     private dialogParkedReported;
+    /** #2675: the card on screen that a person can answer from the chat — what it asks, since when, and whether it was posted. */
+    private remoteCardShown;
+    /** #2675: when (performance.now, taken before its capture) the newest read the card tracker used was started. */
+    private remoteCardReadAt;
+    /** #2675: an answer from the chat is being keyed in (one at a time). */
+    private remoteCardAnswering;
     /**
      * #1691: the prompt at the bottom of the pane that no backend table knows — its block, since when (performance.now)
      * it has been unchanged, and whether that has lasted UNRECOGNISED_PROMPT_STABLE_MS. Updated by the runtime scan.
@@ -932,6 +942,8 @@ export declare class Daemon extends EventEmitter {
     private lastDetectedErrorType;
     private static errorPatternKey;
     /** Read the occurrence baseline so a lifecycle-owned restart can carry it forward. */
+    /** #2648: kiro only — what a model error on the current launch should do (see kiro-retired-model.ts). */
+    kiroModelError(): import("./backend/kiro-retired-model.js").KiroModelErrorVerdict | null;
     getErrorPatternOccurrenceCount(type: ErrorPattern["type"], pattern: RegExp): number;
     /** Seed a replacement daemon with an already-reported pattern count. */
     seedErrorPatternOccurrenceCount(type: ErrorPattern["type"], pattern: RegExp, count: number): void;
@@ -1320,6 +1332,21 @@ export declare class Daemon extends EventEmitter {
     private interactionOwner;
     /** Cached, pure observation read; it never captures, constructs a backend or writes stdin. */
     getInteractionSnapshot(): InteractionSnapshot;
+    private ownedWorkingSession;
+    private recoveryBootSettled;
+    private recoveryBootWorkPending;
+    private recoveryLegacyCovered;
+    private recoveryNativeWork;
+    private recoveryContinuationId;
+    private recoveryCancelled;
+    private workingRecoveryInputOwner;
+    noteLegacyRestartReminder(): void;
+    getWorkingRecoveryState(): RecoveryLive;
+    /** Local system work: no user turn, channel reply target, wake or replay of an original request. */
+    deliverWorkingRecovery(content: string, delivery: {
+        deliveryId: string;
+        attemptNo: number;
+    }, admitted: () => boolean): Promise<void>;
     private workingTurnDelivery;
     private workingBackgroundObservation;
     /** Pure metadata read: never discovers sessions, captures a pane or reads backend files. */
@@ -1432,6 +1459,8 @@ export declare class Daemon extends EventEmitter {
     private currentReplyRecovery;
     private queueMalformedReplyRecovery;
     private reportUnrecoveredReplyDrop;
+    /** Channel notice for a reply-drop. `rateLimit` shares the per-instance cooldown (#2544). */
+    private deliverReplyDropNotice;
     /** Relay the pane's final text to the channel, marked as a daemon proxy reply. */
     private sendProxyReply;
     /** Context-bound reply path shared by dead-MCP and malformed-call recovery. */
@@ -1703,7 +1732,8 @@ export declare class Daemon extends EventEmitter {
     /**
      * Arm the "keep going" nudge for the error occurrence just reported (`pattern` must be the one the lifecycle was
      * handed). The nudge is sent once, `delayMs` from now on the MONOTONIC clock (a wall-clock step changes nothing),
-     * and only if nothing has changed by then — see {@link tickCapacityNudge}. Returns false when there is nothing to arm.
+     * and only if the failed turn still owns an empty idle composer — see {@link tickCapacityNudge}.
+     * Cosmetic footer redraws are not new work. Returns false when there is nothing to arm.
      */
     armCapacityNudge(pattern: RegExp, delayMs: number): boolean;
     /**
@@ -1715,13 +1745,23 @@ export declare class Daemon extends EventEmitter {
     prepareCapacityNudgePause(): Promise<CapacityNudgePauseGuard | null>;
     /** Drop an armed nudge (the user stopped / paused the instance, or the lifecycle gave up on it). */
     cancelCapacityNudge(reason: string): void;
+    /** Only a dispatched channel promise needs a later cancellation notice. */
+    markCapacityNudgePromised(target: string): void;
+    private reportCapacityNudgeCancelled;
+    /**
+     * A failed turn must still be the last live transcript item, with no new
+     * error occurrence, draft, queue, busy status or background work. Codex's
+     * own periodic-redraw idle classifier recognises its empty composer/footer;
+     * never infer inactivity from byte equality or a cached idle state alone.
+     */
+    private capacityNudgePaneCurrent;
     /** The first live composer of a spawn fixes what is history (see {@link nudgeBaselines}). */
     private takeNudgeBaselines;
     private static countOccurrences;
     /**
      * One monitor poll's look at an armed nudge. It is CANCELLED — never postponed — when anything about the instance
-     * moved: a stop / pause / respawn (spawn generation or monitor epoch), a user cancel (delivery epoch), the pane no
-     * longer being exactly the one the error was seen on (it moved on by itself, a person typed, another dialog), the
+     * moved: a stop / pause / respawn (spawn generation or monitor epoch), a user cancel (delivery epoch), the pane
+     * no longer belonging to the failed turn (new output, a draft, another dialog), the
      * agent working, or a message waiting for delivery. Only when it is due and still untouched is it fired — once — and
      * the injection re-verifies everything under the pane-write lock.
      */
@@ -1750,6 +1790,20 @@ export declare class Daemon extends EventEmitter {
      * dialog's static description and a count, never the pane: a pane can hold anything the agent printed.
      */
     private noteDialogAnswer;
+    /**
+     * #2675: a held card a person can answer from the chat (the dialog's remoteCard reader) is posted once it has stayed
+     * the same card for REMOTE_CARD_STABLE_MS — `remote_card` with what it asks; the fleet posts it with its buttons. When
+     * it closes or another card replaces it, `remote_card_gone` retires that post. Moving through the card (ours or the
+     * person's in the pane) is the same card: its identity has no cursor. `readAt` is when the pane's capture was started
+     * (performance.now): a read that started before the newest one used here finishes late and says nothing about now —
+     * it may neither retire a newer card nor bring an older one back (#2677 review).
+     */
+    private trackRemoteCard;
+    /**
+     * #2675: answer the card on screen from the chat, as the person chose: only while it is the card they saw
+     * (`identity`), on a verified cursor, under the pane write lock (remote-card-answer.ts). Never logs the answer.
+     */
+    answerRemoteCard(identity: string, action: RemoteCardAction): Promise<RemoteCardOutcome>;
     /**
      * Remember how long a blocking dialog has been on screen. Once it has
      * outlived DIALOG_PARKED_NOTIFY_MS — the auto-dismiss did not take, or the