b31db6c7d9
hive-subagent-daemon and hive-bash-daemon are now delegated their cgroup (Delegate=memory pids, DelegateSubgroup=daemon). At start each daemon enables memory+pids below its unit and creates runs/ (subagent) or tasks/ (bash). Each subagent run gets runs/<name>-<n>/ and each bash task tasks/<id>/, both with memory.oom.group=1, and the daemon removes the directory when the run ends. An OOM kill now takes one whole run instead of one process out of the daemon's shared cgroup, and never the daemon itself. Subagent runs get oom_score_adj +1000; bash tasks and both daemons stay at 0; the harness stays at -500. The unit-level OOMScoreAdjust=500 on the subagent daemon goes: it was both the daemon's own score and a floor no run below it could be lowered past. Bash tasks enter their cgroup from the existing pre_exec hook, writing to a cgroup.procs fd opened by the parent. hive-claude builds its Command itself and exposes neither a pre_exec hook nor the child's pid, so a subagent's claude (and an ACP agent's process) is started as the daemon's own binary with the run's cgroup in its environment; main() enters the cgroup, raises oom_score_adj and execs the real program, the trampoline swarm-review-classifier already uses. Both enter before the program executes, so nothing it forks starts outside the run's cgroup. Without a delegated `daemon` leaf (tests, a dev shell) each daemon logs one warning and runs everything in its own cgroup, as before. The shared helper is hive-agent-sock's run_cgroup module, the crate both daemons already use for what in-container plugins share. Closes #5007
50 lines
1.8 KiB
Rust
50 lines
1.8 KiB
Rust
//! `hive-bash-daemon` binary — long-running per-agent bash task runner.
|
|
//! Spawns `sh -c` subprocesses, monitors completion, writes task state
|
|
//! files, and surfaces task state to the agent as todos on the harness's
|
|
//! in-agent socket. Serves its MCP tools (`run`/`status`/`kill`) directly
|
|
//! over streamable-http on `--http <addr>` — no stdio bridge, no separate
|
|
//! bin claude has to respawn every turn.
|
|
|
|
use anyhow::Result;
|
|
use clap::Parser;
|
|
|
|
#[derive(Parser)]
|
|
#[command(name = "hive-bash-daemon", about = "bash-task runner + MCP daemon")]
|
|
struct Cli {
|
|
/// Serve the MCP tools over streamable-http on this address (e.g.
|
|
/// `127.0.0.1:8791`). Bind loopback only.
|
|
#[arg(long)]
|
|
http: std::net::SocketAddr,
|
|
}
|
|
|
|
#[tokio::main]
|
|
async fn main() -> Result<()> {
|
|
tracing_subscriber::fmt()
|
|
.with_env_filter(
|
|
tracing_subscriber::EnvFilter::try_from_env("RUST_LOG")
|
|
.unwrap_or_else(|_| tracing_subscriber::EnvFilter::new("info")),
|
|
)
|
|
// This is a systemd-managed daemon — stdout always goes to journald,
|
|
// never a human terminal, and journald doesn't strip ANSI escapes:
|
|
// they land in victorialogs as raw byte-array spam otherwise.
|
|
.with_ansi(false)
|
|
.init();
|
|
|
|
let cli = Cli::parse();
|
|
let todo_socket = hive_bash_mcp::paths::agent_socket();
|
|
|
|
tracing::info!(
|
|
http = %cli.http,
|
|
todo = %todo_socket.display(),
|
|
"hive-bash-daemon starting"
|
|
);
|
|
|
|
let cgroups = hive_agent_sock::run_cgroup::RunCgroups::init("tasks");
|
|
|
|
// Start the background runner loop — scans for pending tasks and
|
|
// spawns them, pushing todos to the harness on task transitions.
|
|
hive_bash_mcp::runner::spawn_loop(todo_socket, cgroups);
|
|
|
|
// Serve the MCP tools over streamable-http forever.
|
|
hive_bash_mcp::mcp::serve_http(cli.http).await
|
|
}
|