# fix\(server\): delegate cgroups to agent scopes · PR \#23913 · pingdotgg/t3code

[View on GitCafe](https://git.cafe/pingdotgg/t3code/pull/23913)

Repository: [pingdotgg/t3code](https://git.cafe/pingdotgg/t3code)

Visibility: public

State: open

Source repository: pingdotgg/t3code

Source branch: fix/issue-21730

Target branch: main

Head commit: 74c4ffc4ca044c6bfb63cb203237a6aacb3b238c

[Discussion and reviews](https://git.cafe/pingdotgg/t3code/pull/23913)

[Commits](https://git.cafe/pingdotgg/t3code/pull/23913/commits?format=markdown)

[Files changed](https://git.cafe/pingdotgg/t3code/pull/23913/diffs?format=markdown)

## Description

---

## Problem

On Linux with systemd and cgroup v2, rootless kind fails inside T3 agent sessions with `requires setting systemd property "Delegate=yes"`. Agent scopes do not delegate their cgroups.

## Change

Pass `Delegate=yes` in the shared scope launch options and startup probes. Existing memory limits, stop timeouts, and OOM policy handling remain in place.

## Scope and approval

Fixes #21730

Triaged bug via the automated issue flow. Fixes existing Linux scope behavior across agents, shared Codex processes, and app terminals.

## Verification

- Regression test committed red: 1 failed / 5 passed because scope launch arguments lacked delegation.
- After merging main: `vp test run src/process/agentScope.test.ts` in `apps/server`: 6 passed.
- Targeted lint passed; server `tsc-rs --noEmit` completed with exit code 0.
- Real dev app browser terminal on Ubuntu, systemd 255, cgroup v2: before, kind fails its delegation check; after, the scope reports `Delegate=yes` and kind reaches node preparation.
- [Before/after runtime transcript, commands, revisions, and test output](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d90c0a3f090b38b9/21730-evidence.txt). Server-only change; visual matrix is empty.
- Full cluster creation could not be checked: this VM lacks `/lib/modules`. Its user manager exposes `cpu memory pids`; no claim is made that the fix adds controllers unavailable from the host. Older systemd versions and packaged Electron were not run.

Models: Claude Opus 5.5 and GPT-6.1-Sol. Harnesses: Claude Agent SDK and Codex through T3 Code.