phase: 187_sync_peak_memory_line

**Phase 187 — final verification pass: all criteria met, repo 100% green.**

Verified (all four tasks already in `complete/`)
- `app/core/memory.py`: `rss_mb` / `rss_peak_mb` / `cgroup_peak_mb` / `fmt_mb`, pure stdlib, never-raise, **100%** coverage, 24 branch tests.
- Lifecycle lines append-only: `sync: started … rss_mb=`, all three terminals `… rss_mb= rss_peak_mb=` (failed = sanitized one-liner beside the surviving `logger.exception`), `import: summary … rss_mb=`; prefixes byte-identical.
- `GET /api/sync/status`: additive `rss_mb`/`rss_peak_mb` (`int|null`), keyed off the ONE `_sample_rss` (run start, phase transitions, forced terminals, 5 s-throttled hook), `peak >= current` invariant, anonymous 403.
- `sources.js` `fmtSyncPeakClause`: ` · peak <N> MB` trailing the counts line / "Sync cancelled", nothing when null, no new control/live region.

Gates (exact commands)
- `uv run pytest --cov=app --cov-report=term-missing` → **4570 passed**, TOTAL **99%**, `app/api/sync.py` **100%**, `app/core/memory.py` **100%**
- `uv run ruff check .` → clean · `uv run pyright` → **0 errors**
- `uv run pytest tests/e2e/test_sync_peak_memory_visible.py -v --no-cov` → **5 passed in isolation** (ran twice)
- All 27 touched E2E families re-run **in isolation**, all green (progress_box 8, cancel 3, status_freshness 4, summary_visibility 3, sync_button 3, session_reset 4, git_freeze 2, git_log_stream_dates 5, PDF/image suites, …)

Completion criteria: every checkbox ✅ except the commit + phase-dir move, which belong to the harness.

Documentation
- README reviewed in full (pages, commands, config tables cross-checked against `app/config.py` — 85 env rows, all defaults match; phase-187 ops section, greps, process-vs-cgroup caveat): consistent, no changes needed.
- `AGENTS.md`: **fixed one pre-existing inconsistency** — rule 6 claimed the no-CDN test covers "the index page"; it actually parametrizes 10 pages (all but `/doc-edit.html`).

Notable
- Two failures early in the pass were self-inflicted by running the E2E module concurrently with the full suite on the shared Postgres (TRUNCATE deadlock + one order-dependent `test_overview` flake); both vanish under the documented serial isolation — no code defect, no change made.
- **PLAN §9 still needs the owner's reconciliation** (phase 187 adds the sync memory fields + two status keys; PLAN is never agent-edited — AGENTS rule 10 carries the spec). `TODO.md` holds an unrelated owner note, left untouched.

Next pending phase: `188_chunks_hnsw_index`.

app/rag/importer.py

@@ -357,6 +357,7 @@ from sqlalchemy import Select, select
 from sqlalchemy.orm import Session, defer, load_only
 
 from app.config import Settings
+from app.core.memory import fmt_mb, rss_mb
 from app.db import SessionLocal
 from app.models import Chunk, Document
 from app.rag.chunker import chunk_document, extract_title
@@ -532,7 +533,7 @@ class ImportSummary:
             "summary_backfilled=%d dates_updated=%d images_failed=%d svg_indexed=%d "
             "image_context_backfilled=%d pdfs_screenshotted=%d "
             "pdfs_pictorial=%d pdf_pictorial_pages=%d pdf_images_deduped=%d "
-            "pdf_images_blank_skipped=%d formats=%s",
+            "pdf_images_blank_skipped=%d formats=%s rss_mb=%s",
             self.files,
             self.added,
             self.updated,
@@ -554,6 +555,14 @@ class ImportSummary:
             self.pdf_images_deduped,
             self.pdf_images_blank_skipped,
             self.format_counts(),
+            # Phase 187 (task 02): the run's CURRENT process RSS on the
+            # cron-safe summary line (PLAN §9) — appended, so the
+            # pre-phase line stays greppable field-for-field. The
+            # high-water mark belongs to the SYNC TERMINALS
+            # (app/api/sync.py), not to this line; ``format_counts()``
+            # is deliberately untouched, so every other consumer of it
+            # is byte-identical.
+            fmt_mb(rss_mb()),
         )