cli-agent-runner 0.3.7__tar.gz → 0.3.9__tar.gz

{cli_agent_runner-0.3.7 → cli_agent_runner-0.3.9}/.vulture-whitelist.py

@@ -15,15 +15,8 @@ buffer
 
 # agent_runner._plugin_manifest.PluginManifest
 name
-pre_round_hooks
-context_enrichers
 post_round_hooks
-serve_startup_hooks
-dirty_handlers
-spawn_hooks
-detectors
-event_kinds
-sigterm_cooperative
+cooperative_stop
 
 # agent_runner._round_outcome.RoundOutcome
 mem_terminated
@@ -36,12 +29,6 @@ usage_capable_by_agent
 newest_usage_ts_by_agent
 backoff_exponent_by_agent
 
-# agent_runner._sandbox_probe.SandboxProbe
-achieved_tier
-landlock_abi
-seccomp
-unconfined_reason
-
 # agent_runner.agent_runtime.RunResult
 exit_code
 duration_s
@@ -131,11 +118,6 @@ unit_file
 rate_limit
 system_managed
 
-# agent_runner.api_types.SpawnDecision
-action
-defer_s
-reason
-
 # agent_runner.api_types.SystemMetrics
 mem_total_mb
 mem_available_mb
@@ -156,7 +138,6 @@ phase
 checks
 overlaps
 plan
-sandbox
 cgroup
 sigterm_grace
 
@@ -199,7 +180,6 @@ brake
 
 # agent_runner.config.models.PhaseOverride
 round_budget_s
-disable_pre_round_hooks
 prompt_files
 agent
 schedule
@@ -211,10 +191,6 @@ phase_policy
 
 # agent_runner.config.models.PluginsConfig
 disable
-spawn_override_allow
-sandbox
-pin
-raw
 
 # agent_runner.config.models.Profile
 agent
@@ -235,7 +211,6 @@ work_dir
 log_dir
 round_budget_s
 restart_delay_s
-disable_pre_round_hooks
 round_log_retention
 narrative_file
 transient_error_action
@@ -316,10 +291,6 @@ anomaly_repetitive_window
 anomaly_repetitive_threshold
 vcs
 
-# agent_runner.hooks.SpawnView
-argv
-env
-
 # agent_runner.hooks.VcsHookView
 dirty_action
 stash_idempotency_s

cli_agent_runner-0.3.9/BACKLOG.md

@@ -0,0 +1,43 @@
+# Backlog
+
+Known follow-ups that are real design or behavior decisions, not defects. Each
+entry carries enough context to act on without re-deriving it.
+
+Items marked **NEEDS_DESIGN** change user-visible behavior and are held for an
+explicit decision — they are not shipped silently in a maintenance release.
+
+**Ordered by priority** (highest first). The number is a rank, not a stable id.
+
+## 1. `_tail_events` / `_tail_events_jsonl` duplication
+
+Three event-stream tailers now exist at deliberately different scopes, and they
+are not accidental copies:
+
+- `cli/events_cmd.py:_tail_events` — current-month-scoped
+  (`_current_month_events_file`), resets its offset to `0` on truncation.
+- `_monitor_state.py:_tail_events_jsonl` — globs every `events-*.jsonl`;
+  re-exported through the `monitor.py` facade. It moved out of `api.py` in the
+  0.3.0 api split (`_install`/`_lifecycle`/`_observe`).
+- `_throttle.py:_tail_events` — the newest two monthly files
+  (`glob("events-*.jsonl")[-2:]`).
+
+Collapsing them means first deciding which scope is correct for each caller — a
+structural decision, not a literal swap. (The older "character-identical
+kind-read loop in `_throttle.py` and `monitor.py`" sub-concern has evaporated:
+`monitor.py` no longer carries that loop — it moved to `_monitor_detectors.py`
+and grew its own reset-ladder logic — and `_throttle.py` iterates forward over
+the tailer generator, so the only shared text left is the single line
+`kind = ev.get("event")`.)
+
+## 2. `stash_orphan` loses the ref when the post-push listing fails
+
+`vcs_state.stash_orphan` returns `None` in three cases; two are true no-ops. The
+third — `git stash push` succeeded but the follow-up `git stash list` failed —
+means the WIP *is* stashed yet callers read "nothing stashed" and report the
+tree as ignored. It is already documented in-code as a KNOWN GAP and judged
+effectively unreachable (a listing that fails microseconds after a push that
+just succeeded in the same repo).
+
+Deferred because closing it is a naming decision, not cleanup: no event kind
+carries the meaning "stashed but ref lost" (`orphan_stash_failed` would be wrong
+— the stash exists). Left as-is until that kind is designed.

{cli_agent_runner-0.3.7 → cli_agent_runner-0.3.9}/CHANGELOG.md

@@ -5,6 +5,26 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.3.9] - 2026-09-17
+
+### Changed
+- `PluginManifest` narrows to 3 fields (`name`, `post_round_hooks`, `cooperative_stop`) — dropped 6 zero-producer hook seams, the `DirtyHandler` seam (dirty-tree resolution is now plain core), the sandbox subsystem, and the owned-paths registry, all with zero real producers.
+- `sigterm_cooperative: bool` is now typed `cooperative_stop: Literal["SIGTERM", "SIGINT"] | None`: `claude` now drains on SIGINT (SIGTERM abandoned its turn), `gemini`/`pi` stay on SIGTERM; the hard-wall kill path stays SIGTERM-first regardless.
+- The `claude` builtin plugin's manifest/entry-point name changed from `claude_rate_limit` to `claude` (`agent-runner migrate` flags any `[plugins] disable` entry still naming the old value).
+- `peek --json` schema bumps to `2.6`.
+
+### Removed
+- `[plugins]` `sandbox`/`pin`/`spawn_override_allow`/`raw` config keys and `[runtime]`/`[phases.<name>]` `disable_pre_round_hooks` — run `agent-runner migrate` before upgrading.
+
+## [0.3.8] - 2026-09-16
+
+### Changed
+- `try_auto_commit` (`vcs.dirty_action = "auto_commit"`) now honors the plugin-owned-paths registry, matching `stash_orphan`: paths registered via `register_plugin_owned_paths` are excluded from the auto-commit, so a plugin's deliverables no longer land in the agent's git history.
+- `round_oom_killed` now also carries `events_oom_kill_delta` — the canonical name, sibling-consistent with `round_cgroup_memory`'s counters; the original bare `oom_kill_delta` is retained as an alias (a future breaking release drops it).
+
+### Added
+- The `claude` preset arms the repetitive-tool-call anomaly detector (`[monitor] anomaly_repetitive_window = 30`, `anomaly_repetitive_threshold = 15`) — trips only on an egregious stuck loop (the same tool+target ≥15× within 30 calls). The global default stays opt-in (disabled).
+
 ## [0.3.7] - 2026-09-15
 
 ### Added

{cli_agent_runner-0.3.7 → cli_agent_runner-0.3.9}/CONTRIBUTING.md

@@ -75,10 +75,11 @@ into `docs/commands.md` from the registry) plus `CHANGELOG.md`. Between them
 they carry a config rewrite and per-version notes; a doc that only restates the
 changelog is upkeep with no reader.
 
-`docs/migrations/0.2.md` is the one surviving guide: it collects the few manual
-steps a config rewrite can't do (recovery procedures, a systemd regen, a mode
-switch). Keep the relevant CHANGELOG entries terse and link it
-(`See docs/migrations/0.2.md.`).
+`docs/migrations/0.2.md` and `docs/migrations/0.3.md` are the two surviving
+guides: they collect the few manual steps a config rewrite can't do (recovery
+procedures, a systemd regen, a mode switch, the 0.3.0 breaking-release port).
+Keep the relevant CHANGELOG entries terse and link the matching one
+(`See docs/migrations/0.3.md.`).
 
 Migration guides are **not** append-only. A per-version guide is pruned once its
 content becomes executable (`migrate`), generated (the transform list),

{cli_agent_runner-0.3.7 → cli_agent_runner-0.3.9}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: cli-agent-runner
-Version: 0.3.7
+Version: 0.3.9
 Summary: Restart-on-exit supervisor for autonomous CLI agents
 Project-URL: Homepage, https://github.com/wan9yu/cli-agent-runner
 Project-URL: Documentation, https://github.com/wan9yu/cli-agent-runner#readme
@@ -34,9 +34,6 @@ Requires-Dist: ruff<0.17,>=0.16; extra == 'dev'
 Requires-Dist: vulture>=2.13; extra == 'dev'
 Provides-Extra: e2e
 Requires-Dist: pytest>=8; extra == 'e2e'
-Provides-Extra: sandbox
-Requires-Dist: py-landlock==0.1.1; (sys_platform == 'linux') and extra == 'sandbox'
-Requires-Dist: pyseccomp==0.1.2; (sys_platform == 'linux') and extra == 'sandbox'
 Description-Content-Type: text/markdown
 
 > **[中文](README.zh.md)** · English
@@ -93,7 +90,7 @@ Full walkthrough: [`docs/quickstart.md`](docs/quickstart.md).
 | `start` / `stop` / `kill` | `watch` — peek in a refresh loop |
 | `restart` / `status` | `monitor` — 13 detectors, alerts, auto-stop |
 | `round` / `serve` | `events` — query / stream events.jsonl |
-| `upgrade` / `migrate` | |
+| `upgrade` / `migrate` | `doctor` — read-only pre-flight |
 
 Verb reference: [`docs/commands.md`](docs/commands.md).
 
@@ -123,7 +120,9 @@ Notify only: `timeout_rate`, `hung`, `orphan_chain`, `disk_warning`,
 `network_fail`, `rate_limit_active`, `anomaly_repetitive_active`,
 `supervisor_stale`. `mem_pressure` also drives a separate serve-loop
 admission gate that defers or terminates rounds under real memory pressure —
-see `docs/architecture.md`.
+see `docs/architecture.md`. An opt-in soft-brake (`[monitor.host_health.brake]`,
+default off) can additionally cap the serve leaf's `memory.high` under sustained
+pressure on a delegated cgroup.
 
 **Auto-stop the service** (continuing is harmful):
 - `oauth_fail` — burning API quota on auth-rejected rounds

{cli_agent_runner-0.3.7 → cli_agent_runner-0.3.9}/README.md

@@ -52,7 +52,7 @@ Full walkthrough: [`docs/quickstart.md`](docs/quickstart.md).
 | `start` / `stop` / `kill` | `watch` — peek in a refresh loop |
 | `restart` / `status` | `monitor` — 13 detectors, alerts, auto-stop |
 | `round` / `serve` | `events` — query / stream events.jsonl |
-| `upgrade` / `migrate` | |
+| `upgrade` / `migrate` | `doctor` — read-only pre-flight |
 
 Verb reference: [`docs/commands.md`](docs/commands.md).
 
@@ -82,7 +82,9 @@ Notify only: `timeout_rate`, `hung`, `orphan_chain`, `disk_warning`,
 `network_fail`, `rate_limit_active`, `anomaly_repetitive_active`,
 `supervisor_stale`. `mem_pressure` also drives a separate serve-loop
 admission gate that defers or terminates rounds under real memory pressure —
-see `docs/architecture.md`.
+see `docs/architecture.md`. An opt-in soft-brake (`[monitor.host_health.brake]`,
+default off) can additionally cap the serve leaf's `memory.high` under sustained
+pressure on a delegated cgroup.
 
 **Auto-stop the service** (continuing is harmful):
 - `oauth_fail` — burning API quota on auth-rejected rounds

cli_agent_runner-0.3.9/agent_runner/__init__.py

@@ -0,0 +1,121 @@
+"""Agent Runner — restart-on-exit supervisor for autonomous CLI agents."""
+
+from __future__ import annotations
+
+try:
+    from agent_runner._version import __version__
+except ImportError:  # editable install before hatch-vcs has generated _version.py
+    __version__ = "0.0.0+unknown"
+
+_PLUGIN_GROUP = "agent_runner.plugins"
+
+# Tracks the names passed to the most recent ``apply_plugin_disable`` call.
+# Surfaced via peek --json `plugins.disabled` for operator visibility.
+_DISABLED_PLUGIN_NAMES: list[str] = []
+
+
+_DISCOVERED_PLUGIN_ENTRIES: list[tuple[str, str]] = []  # (name, "module:attr"), populated once
+
+
+def _discover_plugin_manifests() -> None:
+    """Package-import-time step. Scans entry_points.txt ONLY (scan_entry_points) —
+    imports nothing, executes no plugin code.
+
+    Discovery goes through the ``entry_points.txt`` scanner (cheaper than a
+    fresh ``importlib.metadata.entry_points()`` scan per process; see
+    ``_plugin_scan``), with a hard fallback to ``importlib.metadata`` on any
+    parse failure.
+    """
+    import sys
+
+    from agent_runner._plugin_scan import scan_entry_points
+
+    global _DISCOVERED_PLUGIN_ENTRIES
+    _DISCOVERED_PLUGIN_ENTRIES = scan_entry_points(sys.path, _PLUGIN_GROUP)
+
+
+_discover_plugin_manifests()
+
+
+def load_and_register_plugins(plugins_cfg, log_dir=None) -> None:
+    """Called from config.loader.load_config once [plugins] is parsed. For
+    each discovered (name, value) NOT in plugins_cfg.disable and not already
+    registered, resolve module_path/attr_path, import + register_manifest. A
+    disabled name is never imported. A per-plugin failure isolates as a
+    UserWarning and skips that ONE plugin; it never aborts the whole load.
+
+    ``name`` here is always the entry-point name (the ``agent_runner.plugins``
+    pyproject.toml key) — it's the identifier known BEFORE import. It is NOT
+    necessarily ``PluginManifest.name`` (only known after import); for every
+    builtin the two are pinned equal by
+    ``test_entry_point_names_should_match_manifest_name``, but that is not
+    enforced here.
+
+    ``log_dir`` is accepted for call-site stability (config.loader threads it
+    through unconditionally) though this function no longer emits anything
+    itself.
+    """
+    import warnings
+
+    from agent_runner._plugin_manifest import loaded_manifest_names, register_manifest
+    from agent_runner._registry import resolve_entry_target
+
+    disable = set(plugins_cfg.disable)
+    already = set(loaded_manifest_names())
+    for name, value in _DISCOVERED_PLUGIN_ENTRIES:
+        if name in disable or name in already:
+            continue
+        # An entry-point value may carry a trailing extras marker
+        # (``module:attr [extra1,extra2]``); importlib.metadata.EntryPoint's
+        # own module/attr grammar excludes "[", so anything from the first
+        # "[" onward is always extras, never part of the path — strip it
+        # before resolving, or it glues onto attr_path and breaks getattr().
+        stripped = value.partition("[")[0].rstrip()
+        module_path, _, attr_path = stripped.partition(":")
+        try:
+            target = resolve_entry_target(module_path, attr_path)
+            register_manifest(target)
+        except Exception as e:  # noqa: BLE001 — a broken plugin must never crash the supervisor
+            warnings.warn(f"failed to load {_PLUGIN_GROUP} plugin {name!r}: {e}", stacklevel=3)
+
+
+def apply_plugin_disable(names: list[str]) -> None:
+    """Remove plugins matching ``names`` (manifest names) from all in-memory
+    registries.
+
+    Called after config-load to honor ``[plugins] disable``. Idempotent for
+    already-removed names. Emits a UserWarning for names that match no
+    loaded manifest (typo catcher; tolerates cross-env config drift).
+
+    A disabled name is never imported by ``load_and_register_plugins`` in the
+    first place, so this is belt-and-suspenders cleanup for anything that
+    reached the registries another way (e.g. a manifest registered directly
+    via ``register_manifest``, not through entry-point discovery).
+    """
+    import warnings
+
+    from agent_runner._plugin_manifest import unregister_by_name
+
+    if not names:
+        return
+
+    global _DISABLED_PLUGIN_NAMES
+    _DISABLED_PLUGIN_NAMES = list(names)
+
+    found = unregister_by_name(set(names))
+    unknown = set(names) - found
+    if unknown:
+        warnings.warn(
+            f"[plugins] disable references unknown plugin name(s): {sorted(unknown)}. "
+            f"(Names matched no loaded PluginManifest; check spelling or installed packages.)",
+            stacklevel=2,
+        )
+
+
+def disabled_plugin_names() -> list[str]:
+    """Names passed to the most recent ``apply_plugin_disable`` call.
+
+    Used by peek --json to surface ``plugins.disabled`` for operator visibility.
+    Returns the LIST (not set) preserving configured order.
+    """
+    return list(_DISABLED_PLUGIN_NAMES)

{cli_agent_runner-0.3.7 → cli_agent_runner-0.3.9}/agent_runner/_docgen.py

@@ -29,6 +29,7 @@ from agent_runner.config import (
     RuntimeConfig,
     ScheduleConfig,
     VcsConfig,
+    _HostHealthBrakeConfig,
     _HostHealthDiskConfig,
     _HostHealthMemoryConfig,
     _HostHealthPressureConfig,
@@ -47,9 +48,8 @@ from agent_runner.monitor import AUTO_STOP_ALERTS, KNOWN_ALERT_KINDS
 # (toml_section_name, dataclass, nested_sub_sections). Nesting is an EXPLICIT
 # registry, not reflection, on two counts:
 #   - field name != TOML key: PhaseOverride.prompt_files is written as
-#     [phases.<name>.prompt] files=[...], and PluginsConfig.raw is a catch-all
-#     for unknown keys. Recursing generically would document TOML keys that do
-#     not exist.
+#     [phases.<name>.prompt] files=[...]. Recursing generically would document
+#     TOML keys that do not exist.
 #   - typing.get_type_hints() raises TypeError on PhasesConfig — its `list`
 #     field shadows the builtin, so `list[str] | None` resolves against
 #     None. Do not reach for it here.
@@ -66,6 +66,7 @@ _SECTIONS: list[tuple[str, type, list[tuple[str, type]]]] = [
             ("monitor.host_health.disk", _HostHealthDiskConfig),
             ("monitor.host_health.memory", _HostHealthMemoryConfig),
             ("monitor.host_health.pressure", _HostHealthPressureConfig),
+            ("monitor.host_health.brake", _HostHealthBrakeConfig),
         ],
     ),
     ("phases", PhasesConfig, []),

{cli_agent_runner-0.3.7 → cli_agent_runner-0.3.9}/agent_runner/_emit/__init__.py

@@ -42,14 +42,6 @@ from agent_runner._emit.memory import (  # noqa: F401 — public re-export
     emit_round_oom_killed,
     emit_round_resumed,
 )
-from agent_runner._emit.plugins import (  # noqa: F401 — public re-export
-    emit_plugin_builtin_name_squat,
-    emit_plugin_checksum_mismatch,
-    emit_plugin_sandbox_degraded,
-    emit_plugin_sandbox_kill,
-    emit_plugin_spawn_decision,
-    emit_plugin_spawn_override_ignored,
-)
 from agent_runner._emit.rounds import (  # noqa: F401 — public re-export
     emit_fresh_eyes_round_triggered,
     emit_round_container_orphan_risk,
@@ -94,12 +86,6 @@ __all__ = [
     "emit_memory_high_engaged",
     "emit_memory_high_released",
     "emit_memory_high_write_failed",
-    "emit_plugin_builtin_name_squat",
-    "emit_plugin_checksum_mismatch",
-    "emit_plugin_sandbox_degraded",
-    "emit_plugin_sandbox_kill",
-    "emit_plugin_spawn_decision",
-    "emit_plugin_spawn_override_ignored",
     "emit_rate_limit_stop",
     "emit_round_cgroup_memory",
     "emit_round_container_orphan_risk",

{cli_agent_runner-0.3.7 → cli_agent_runner-0.3.9}/agent_runner/_emit/memory.py

@@ -217,13 +217,20 @@ def emit_round_oom_killed(
     took, no second sysfs read). Symmetric with ``round_mem_terminated``
     (supervisor-killed) -- this is the kernel-killed sibling.
 
-    POINTER-ONLY: ``log_path`` + ``log_bytes`` + ``oom_kill_delta`` -- NEVER the
+    POINTER-ONLY: ``log_path`` + ``log_bytes`` + the oom-kill delta -- NEVER the
     round-log/transcript content itself (durability, secret-redaction, size all
     argue against embedding it in events.jsonl). ``partial_log`` reports whether
     the supervisor's own truncation trailer (see ``_mark_partial_log``) was
     written onto the round log, so a later reader can tell the log's tail is
     supervisor residue, not the agent's own output.
 
+    The oom-kill delta rides under TWO field names with the identical value:
+    ``events_oom_kill_delta`` is the canonical name (sibling-consistent with
+    ``round_cgroup_memory``'s ``events_oom_kill_delta``); ``oom_kill_delta`` is
+    the retained legacy alias. The append-only event contract keeps both until a
+    future breaking release drops the bare alias -- so a single ``oom_kill_delta``
+    argument single-sources both fields, which can never diverge.
+
     Classification is UNCHANGED by this event: the round still exits 137 and
     counts toward the crash streak exactly as before -- this is pure
     observability layered on top, computed and emitted after that decision is
@@ -236,6 +243,7 @@ def emit_round_oom_killed(
         round_num=round_num,
         log_path=str(log_path),
         log_bytes=log_bytes,
+        events_oom_kill_delta=oom_kill_delta,
         oom_kill_delta=oom_kill_delta,
         partial_log=partial_log,
     )

{cli_agent_runner-0.3.7 → cli_agent_runner-0.3.9}/agent_runner/_monitor_registry.py

@@ -1,4 +1,4 @@
-"""Alert-kind catalog + the plugin detector registry.
+"""Alert-kind catalog.
 
 Pure bookkeeping: no filesystem I/O, no clock reads. Detector *logic* lives in
 ``_monitor_detectors``; state assembly in ``_monitor_state``; the cycle-edge
@@ -7,8 +7,7 @@ wiring (``run_all_detectors``/``on_alert``) in ``monitor.py``.
 
 from __future__ import annotations
 
-from agent_runner._registry import ensure_unique
-from agent_runner.api_types import Alert, Detector
+from agent_runner.api_types import Alert
 from agent_runner.config import _DEFAULT_AUTO_STOP_ON
 from agent_runner.events import (
     DETECTOR_ERROR,
@@ -82,17 +81,3 @@ def alert_identity(alert: Alert) -> str:
         return alert.detector
     parts = "|".join(f"{k}={alert.context.get(k)!r}" for k in fields)
     return f"{alert.detector}:{parts}"
-
-
-_PLUGIN_DETECTORS: list[Detector] = []
-
-
-def register_detector(detector: Detector) -> None:
-    """Register a plugin detector. Rejects duplicate names."""
-    ensure_unique(detector.name, _PLUGIN_DETECTORS, "detector")
-    _PLUGIN_DETECTORS.append(detector)
-
-
-def plugin_detectors() -> list[str]:
-    """Sorted list of registered plugin detector names (for peek --json)."""
-    return sorted(d.name for d in _PLUGIN_DETECTORS)

{cli_agent_runner-0.3.7 → cli_agent_runner-0.3.9}/agent_runner/_monitor_state.py

@@ -14,11 +14,12 @@ from dataclasses import dataclass, field
 from pathlib import Path
 from typing import Any
 
+from agent_runner import event_log
+from agent_runner._notify import NULL_LISTENER
 from agent_runner.api_types import ProjectState, ServiceMode, ServiceStatus, SystemMetrics
 from agent_runner.builtin_plugins._constants import _TAIL_LINES
-from agent_runner.clock import SYSTEM_CLOCK
 from agent_runner.context_store import read_json
-from agent_runner.events import iter_event_dicts, read_new
+from agent_runner.events import iter_event_dicts
 
 
 @dataclass(frozen=True)
@@ -29,7 +30,7 @@ class LocalSource:
     log_dir: Path
 
     def events_files(self) -> list[Path]:
-        return sorted(self.log_dir.glob("events-*.jsonl"))
+        return event_log.all_month_files(self.log_dir)
 
     def metrics_files(self) -> list[Path]:
         return sorted(self.log_dir.glob("metrics-*.jsonl"))
@@ -75,7 +76,7 @@ class _EventTail:
     )
 
     def read(self, files: list[Path]) -> list[dict[str, Any]]:
-        new_events, self.offsets = read_new(files, self.offsets)
+        new_events, self.offsets = event_log.read_new(files, self.offsets)
         self.buffer.extend(new_events)
         return list(self.buffer)
 
@@ -93,23 +94,22 @@ def _tail_events_jsonl(
     byte 0 of every file present at start (human-narrate use case).
 
     Follows file rotation transparently — when a new events-YYYY-MM.jsonl
-    appears, it is picked up from byte 0.
+    appears, it is picked up from byte 0. A thin client over the shared
+    :func:`event_log.follow` loop (also used by ``events --tail``); polls
+    (``NULL_LISTENER`` -- no doorbell) rather than a live FIFO listener.
     """
-    offsets: dict[Path, int] = {}
+    seed: dict[Path, int] = {}
     if start_at_now:
-        for path in sorted(log_dir.glob("events-*.jsonl")):
-            try:
-                offsets[path] = path.stat().st_size
-            except FileNotFoundError:
-                continue
-
-    while True:
-        files = sorted(log_dir.glob("events-*.jsonl"))
-        new_events, offsets = read_new(files, offsets)
-        if new_events:
-            yield from new_events
-        else:
-            SYSTEM_CLOCK.sleep(poll_interval_s)
+        seed = event_log.seed_at_eof(event_log.all_month_files(log_dir))
+
+    for _line, obj in event_log.follow(
+        log_dir,
+        event_log.all_month_files,
+        wake=NULL_LISTENER,
+        timeout_s=poll_interval_s,
+        offsets=seed,
+    ):
+        yield obj
 
 
 _MAX_TAIL_FILES = 20

{cli_agent_runner-0.3.7 → cli_agent_runner-0.3.9}/agent_runner/_notify.py

@@ -78,14 +78,9 @@ def drain(fd: int) -> None:
     ``select()`` on it instantly ready -- an undrained fd busy-spins its
     caller at 100% CPU forever after the first wake, since a level-triggered
     fd stays readable until read. Advisory: the bytes carry no payload and are
-    discarded. Two callers: :meth:`Listener.wait` self-drains its own fd on the
-    wake branch (the pause/sleep waits ``_interruptible_sleep``/``_pause_poll``
-    are the consumers of a live ``Listener``); and the sandboxed-hook trampoline
-    (``_plugin_sandbox._run_child_process``, P3) drains the CALLER-OWNED wake fd
-    it was handed on the ``"woken"`` branch of its exit wait, before re-checking
-    ``should_stop()`` -- that fd is the serve listener's, watched by
-    ``wait_exit`` for the duration of the hook, so the trampoline must drain it
-    itself rather than leave the next wait instantly ready.
+    discarded. :meth:`Listener.wait` self-drains its own fd on the wake branch
+    (the pause/sleep waits ``_interruptible_sleep``/``_pause_poll`` are the
+    consumers of a live ``Listener``).
     """
     while True:
         try:

{cli_agent_runner-0.3.7 → cli_agent_runner-0.3.9}/agent_runner/_observe.py

@@ -155,7 +155,7 @@ def _poll_once(
         events = monitor.parse_events_from_jsonl_files(src.events_files())
     metrics = monitor.parse_events_from_jsonl_files(src.metrics_files())
     log_tails = monitor.load_round_log_tails(src.rounds_dir())
-    builtin = monitor.run_all_detectors(
+    return monitor.run_all_detectors(
         events=events,
         metrics=metrics,
         log_tails=log_tails,
@@ -167,11 +167,6 @@ def _poll_once(
         host_health_cfg=cfg.monitor.host_health,
         log_dir=cfg.runtime.log_dir,
     )
-    if not monitor._PLUGIN_DETECTORS:
-        return builtin  # skip ProjectState assembly when no plugins to feed
-    state = monitor.assemble_project_state(src, project=_project_name(work_dir))
-    plugin = monitor.run_plugin_detectors(state)
-    return builtin + plugin
 
 
 def monitor_loop(