@camstack/system 1.2.144 → 1.2.146

package/dist/addon-runner.js

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_manifest_python_deps = require("./manifest-python-deps-B_mCU6gz.js");
+const require_manifest_python_deps = require("./manifest-python-deps-CktMcXzS.js");
 const require_custom_action_registry = require("./custom-action-registry-jY0NOZK8.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);
@@ -692,6 +692,7 @@ async function main() {
 	const stopHeapWatch = require_manifest_python_deps.startRunnerHeapWatch({
 		heapProfile: process.env["CAMSTACK_RUNNER_HEAP_PROFILE"],
 		reclaimSwitch: process.env["CAMSTACK_RUNNER_HEAP_RECLAIM"],
+		rssBudgetMb: process.env[require_manifest_python_deps.RUNNER_RSS_BUDGET_ENV],
 		label: nodeId,
 		sink: {
 			info: (line) => {

package/dist/addon-runner.mjs

@@ -1,4 +1,4 @@
-import { F as createUdsLoggerWithControl, I as LocalChildClient, Nt as startRunnerHeapWatch, bt as resolveAddonClass, i as createUdsAddonContext, it as setWorkerNativeCapsChangeListener, nt as getWorkerNativeCapSnapshot, ot as validateProviderRegistrations, t as installManifestPythonDeps, tt as getWorkerNativeCapProvider, yt as installManifestNativeDeps } from "./manifest-python-deps-BuhBXCg0.mjs";
+import { F as createUdsLoggerWithControl, Ht as startRunnerHeapWatch, I as LocalChildClient, Nt as RUNNER_RSS_BUDGET_ENV, bt as resolveAddonClass, i as createUdsAddonContext, it as setWorkerNativeCapsChangeListener, nt as getWorkerNativeCapSnapshot, ot as validateProviderRegistrations, t as installManifestPythonDeps, tt as getWorkerNativeCapProvider, yt as installManifestNativeDeps } from "./manifest-python-deps-CVeckyXx.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-F__gp_VX.mjs";
 import { register } from "node:module";
 import * as path$1 from "node:path";
@@ -688,6 +688,7 @@ async function main() {
 	const stopHeapWatch = startRunnerHeapWatch({
 		heapProfile: process.env["CAMSTACK_RUNNER_HEAP_PROFILE"],
 		reclaimSwitch: process.env["CAMSTACK_RUNNER_HEAP_RECLAIM"],
+		rssBudgetMb: process.env[RUNNER_RSS_BUDGET_ENV],
 		label: nodeId,
 		sink: {
 			info: (line) => {

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D3lqzV40.js");
+const require_dist = require("../../dist-BVU5JADq.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Et as BaseAddon, Qt as EventCategory, S as addonPagesCapability, Tt as errMsg } from "../../dist-6rM7chzb.mjs";
+import { Et as BaseAddon, Qt as EventCategory, S as addonPagesCapability, Tt as errMsg } from "../../dist-CG7kwIZp.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D3lqzV40.js");
+const require_dist = require("../../dist-BVU5JADq.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Et as BaseAddon, Qt as EventCategory, Tt as errMsg, w as addonWidgetsCapability } from "../../dist-6rM7chzb.mjs";
+import { Et as BaseAddon, Qt as EventCategory, Tt as errMsg, w as addonWidgetsCapability } from "../../dist-CG7kwIZp.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D3lqzV40.js");
+const require_dist = require("../../dist-BVU5JADq.js");
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Et as BaseAddon, Qt as EventCategory, T as alertsCapability, Tt as errMsg, n as AlertSchema, zt as createEvent } from "../../dist-6rM7chzb.mjs";
+import { Et as BaseAddon, Qt as EventCategory, T as alertsCapability, Tt as errMsg, n as AlertSchema, zt as createEvent } from "../../dist-CG7kwIZp.mjs";
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D3lqzV40.js");
+const require_dist = require("../../dist-BVU5JADq.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { D as backupCapability, Et as BaseAddon, Qt as EventCategory } from "../../dist-6rM7chzb.mjs";
+import { D as backupCapability, Et as BaseAddon, Qt as EventCategory } from "../../dist-CG7kwIZp.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D3lqzV40.js");
+const require_dist = require("../../dist-BVU5JADq.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Et as BaseAddon, nt as logDestinationCapability } from "../../dist-6rM7chzb.mjs";
+import { Et as BaseAddon, nt as logDestinationCapability } from "../../dist-CG7kwIZp.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D3lqzV40.js");
+const require_dist = require("../../dist-BVU5JADq.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,4 +1,4 @@
-import { Et as BaseAddon, M as coreBlockIdFromAddonId, N as coreBlocksCapability, Tt as errMsg, c as CoreBlockSchema, j as coreBlockAddonId, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX, u as DeclaredDevices } from "../../dist-6rM7chzb.mjs";
+import { Et as BaseAddon, M as coreBlockIdFromAddonId, N as coreBlocksCapability, Tt as errMsg, c as CoreBlockSchema, j as coreBlockAddonId, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX, u as DeclaredDevices } from "../../dist-CG7kwIZp.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D3lqzV40.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-OtUQtEbq.js");
+const require_dist = require("../../dist-BVU5JADq.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-_PLI9w0k.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 //#region src/builtins/device-manager/adoption-job-engine.ts
@@ -1465,30 +1465,25 @@ async function getDevice(pctx, input) {
 		...sourceInfoGetDevice !== void 0 ? { sourceInfo: sourceInfoGetDevice } : {}
 	};
 }
-async function getChildren(pctx, input) {
-	const { parentDeviceId } = input;
-	let ownerAddonId = null;
-	if (pctx.registry) {
-		if (pctx.registry.getById(parentDeviceId)) ownerAddonId = pctx.registry.getAddonId(parentDeviceId);
-	}
-	if (!ownerAddonId) {
-		const persisted = await pctx.metaStore.resolvePersistedById(parentDeviceId);
-		if (!persisted) return [];
-		ownerAddonId = persisted.addonId;
-	}
+/**
+* The children of ONE parent, projected from rows and live devices the caller
+* has ALREADY read.
+*
+* Extracted so `getChildren` and `getChildrenBatch` share one projection: the
+* batch differs only in HOW the rows were fetched (one `listByParentMany`
+* instead of N `listByParent`), never in what a parent's answer looks like.
+* Byte-for-byte the body `getChildren` had.
+*/
+async function projectChildren(pctx, parentDeviceId, ownerAddonId, childRows, liveChildren) {
 	const results = [];
 	const seen = /* @__PURE__ */ new Set();
-	const childRows = await pctx.metaStore.rows.listByParent(parentDeviceId);
 	const rowById = /* @__PURE__ */ new Map();
 	for (const row of childRows) rowById.set(row.meta.id, row);
-	if (pctx.registry) {
-		const liveChildren = pctx.registry.getChildren(parentDeviceId);
-		for (const device of liveChildren) {
-			const key = String(device.id);
-			const row = rowById.get(device.id);
-			results.push(toDeviceInfo(ownerAddonId, device, row?.metadata ?? null, row?.meta ?? null));
-			seen.add(key);
-		}
+	for (const device of liveChildren) {
+		const key = String(device.id);
+		const row = rowById.get(device.id);
+		results.push(toDeviceInfo(ownerAddonId, device, row?.metadata ?? null, row?.meta ?? null));
+		seen.add(key);
 	}
 	for (const row of childRows) {
 		const m = row.meta;
@@ -1524,6 +1519,86 @@ async function getChildren(pctx, input) {
 	}
 	return results;
 }
+/**
+* Owning addonId for a parent, or `null` when the fleet does not know it.
+*
+* Children are always registered under the same addonId as their parent, so
+* the persisted-child projection is scoped by it. The live registry answers
+* for free; only a parent it does not hold costs a row read.
+*/
+function liveOwnerOf(pctx, parentDeviceId) {
+	if (!pctx.registry) return null;
+	if (!pctx.registry.getById(parentDeviceId)) return null;
+	return pctx.registry.getAddonId(parentDeviceId);
+}
+async function getChildren(pctx, input) {
+	const { parentDeviceId } = input;
+	let ownerAddonId = liveOwnerOf(pctx, parentDeviceId);
+	if (!ownerAddonId) {
+		const persisted = await pctx.metaStore.resolvePersistedById(parentDeviceId);
+		if (!persisted) return [];
+		ownerAddonId = persisted.addonId;
+	}
+	const childRows = await pctx.metaStore.rows.listByParent(parentDeviceId);
+	const liveChildren = pctx.registry?.getChildren(parentDeviceId) ?? [];
+	return [...await projectChildren(pctx, parentDeviceId, ownerAddonId, childRows, liveChildren)];
+}
+/**
+* `getChildren` for a set of parents — TWO store reads for the whole set, not
+* two per parent.
+*
+* The single-parent path costs one `resolvePersistedById` (a primary-key read)
+* plus one `listByParent` (an indexed scan) EACH. Asked once per device at
+* boot that was 1 024 of each, measured on the live hub 2026-08-27 — see the
+* cap method's note. Here the ownership lookup for every parent the live
+* registry does not hold is ONE `getMany`, and the children of every parent
+* are ONE `listByParentMany`.
+*
+* The live half is indexed once too: `registry.getChildren` is
+* `getAll().filter(…)`, so calling it per parent would trade an RPC N+1 for an
+* in-memory one — 256 full sweeps of the registry per batch. One pass over
+* `getAll()` buckets every live device by its parent instead.
+*
+* A parent with no children at all is ABSENT from the record; so is a parent
+* the fleet does not know. Same contract as `DeviceRowStore.getMany` — the
+* caller asked about it and gets no row, rather than an invented empty one it
+* cannot tell apart from a real childless parent.
+*/
+async function getChildrenBatch(pctx, input) {
+	const parentIds = [...new Set(input.parentDeviceIds)];
+	const out = {};
+	if (parentIds.length === 0) return out;
+	const owners = /* @__PURE__ */ new Map();
+	const unownedIds = [];
+	for (const parentId of parentIds) {
+		const live = liveOwnerOf(pctx, parentId);
+		if (live !== null) owners.set(parentId, live);
+		else unownedIds.push(parentId);
+	}
+	if (unownedIds.length > 0) {
+		const rows = await pctx.metaStore.rows.getMany(unownedIds);
+		for (const [parentId, row] of rows) owners.set(parentId, row.meta.addonId);
+	}
+	const requested = new Set(parentIds);
+	const rowsByParent = await pctx.metaStore.rows.listByParentMany([...owners.keys()]);
+	const liveByParent = /* @__PURE__ */ new Map();
+	for (const device of pctx.registry?.getAll() ?? []) {
+		const parentId = device.parentDeviceId;
+		if (parentId === null || parentId === void 0) continue;
+		if (!requested.has(parentId)) continue;
+		const bucket = liveByParent.get(parentId);
+		if (bucket === void 0) liveByParent.set(parentId, [device]);
+		else bucket.push(device);
+	}
+	for (const [parentId, ownerAddonId] of owners) {
+		const childRows = rowsByParent.get(parentId) ?? [];
+		const liveChildren = liveByParent.get(parentId) ?? [];
+		if (childRows.length === 0 && liveChildren.length === 0) continue;
+		const projected = await projectChildren(pctx, parentId, ownerAddonId, childRows, liveChildren);
+		if (projected.length > 0) out[String(parentId)] = [...projected];
+	}
+	return out;
+}
 async function getStreamSources(pctx, input) {
 	const { deviceId } = input;
 	if (pctx.registry) {
@@ -3395,27 +3470,33 @@ async function setName(pctx, input) {
 	});
 }
 /**
-* Every descendant of `rootId`, walked via `parentDeviceId` chains
-* (BFS, `listByParent` per level — the same indexed lookup `setName`'s
-* rename cascade uses one level of). `visited` seeded with `rootId` guards a
-* pathological parent-cycle in persisted data from recursing forever; a row
-* already seen is never re-queued or re-emitted. Depth is unbounded on
-* purpose — a nested container's own children are still `rootId`'s
-* descendants and must align too.
+* Every descendant of `rootId`, walked via `parentDeviceId` chains.
+*
+* BFS one LEVEL per query, not one node per query: `listByParentMany` asks for
+* the whole frontier's children in a single indexed `whereIn`, so a tree costs
+* as many reads as it is DEEP, never as many as it has nodes. It used to be
+* `listByParent` per node — the same N+1 the boot census measured at 1 024
+* calls on `getChildren`.
+*
+* `visited` seeded with `rootId` guards a pathological parent-cycle in
+* persisted data from recursing forever; a row already seen is never re-queued
+* or re-emitted. Depth is unbounded on purpose — a nested container's own
+* children are still `rootId`'s descendants and must align too.
 */
 async function collectDescendants(metaStore, rootId) {
 	const out = [];
 	const visited = new Set([rootId]);
-	const queue = [rootId];
-	while (queue.length > 0) {
-		const parentId = queue.shift();
-		if (parentId === void 0) break;
-		for (const row of await metaStore.rows.listByParent(parentId)) {
+	let frontier = [rootId];
+	while (frontier.length > 0) {
+		const byParent = await metaStore.rows.listByParentMany(frontier);
+		const next = [];
+		for (const parentId of frontier) for (const row of byParent.get(parentId) ?? []) {
 			if (visited.has(row.meta.id)) continue;
 			visited.add(row.meta.id);
 			out.push(row.meta);
-			queue.push(row.meta.id);
+			next.push(row.meta.id);
 		}
+		frontier = next;
 	}
 	return out;
 }
@@ -4745,6 +4826,46 @@ var DeviceRowStore = class {
 			limit: DEVICE_ROWS_FLEET_LIMIT
 		});
 	}
+	/**
+	* Direct children of MANY devices, in ONE query.
+	*
+	* `listByParent` called once per parent is the same shape `get` was before
+	* {@link getMany}: an indexed lookup this store makes cheap, repeated until
+	* it isn't. Measured on the live hub 2026-08-27, 120-second boot window:
+	* `DeviceRowStore.list < DeviceRowStore.listByParent < getChildren` at
+	* **1 024 calls** — one per device — for 919 rows in total. The BFS in
+	* `device-meta-actions.ts#collectDescendants` walked a container tree the
+	* same way, one query per node.
+	*
+	* `whereIn` on the indexed `parentDeviceId` column collapses a level of that
+	* walk into a single statement. Contract, verbatim from {@link getMany}: an
+	* EMPTY `parentDeviceIds` reads nothing at all rather than degrading to
+	* "everything", and a parent with no children — or one the fleet does not
+	* know — is simply ABSENT from the map, never an invented empty row.
+	*/
+	async listByParentMany(parentDeviceIds) {
+		const out = /* @__PURE__ */ new Map();
+		const unique = [...new Set(parentDeviceIds)];
+		if (unique.length === 0) return out;
+		const rows = await this.list({
+			whereIn: { parentDeviceId: unique },
+			orderBy: {
+				field: "deviceId",
+				direction: "asc"
+			},
+			limit: DEVICE_ROWS_FLEET_LIMIT
+		});
+		const byParent = /* @__PURE__ */ new Map();
+		for (const row of rows) {
+			const parent = row.meta.parentDeviceId;
+			if (parent === null || parent === void 0) continue;
+			const bucket = byParent.get(parent);
+			if (bucket === void 0) byParent.set(parent, [row]);
+			else bucket.push(row);
+		}
+		for (const [parent, bucket] of byParent) out.set(parent, bucket);
+		return out;
+	}
 	/** How many devices the fleet holds. Used to tell "empty store" from "gone device". */
 	async count() {
 		await this.declare();
@@ -5565,6 +5686,7 @@ var DeviceManagerAddon = class extends require_dist.BaseAddon {
 			listAll: (input) => listAll(pctx, input),
 			getDevice: (input) => getDevice(pctx, input),
 			getChildren: (input) => getChildren(pctx, input),
+			getChildrenBatch: (input) => getChildrenBatch(pctx, input),
 			getLinkedDevices: (input) => getLinkedDevices(pctx, input),
 			getLinkedDevicesBatch: (input) => getLinkedDevicesBatch(pctx, input),
 			getDeviceSettingsContribution: (input) => buildLinkedDevicesContribution(pctx, input.deviceId),

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { A as buildStreamParamsConfigSchema, At as DeviceFeature, Et as BaseAddon, Ft as WELL_KNOWN_TAB_MAP, H as enumerateItemArrayFields, L as deviceManagerCapability, Mt as DeviceType, Qt as EventCategory, R as deviceStateCapability, Tt as errMsg, U as enumerateSchemaFields, Wt as isDeviceConfigCap, Zt as sleep, _ as STREAM_PROFILE_META, a as CAP_NAMES_WITH_STATUS, ct as parseStreamParamsFormPatch, d as DeviceStatusSchema, ft as runtimeStatePolicyFor, jt as DeviceRole, ot as normalizeUnit, t as ALL_CAPABILITY_DEFINITIONS, z as deviceStatusCapability } from "../../dist-6rM7chzb.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-BtvClSPu.mjs";
+import { A as buildStreamParamsConfigSchema, At as DeviceFeature, Et as BaseAddon, Ft as WELL_KNOWN_TAB_MAP, H as enumerateItemArrayFields, L as deviceManagerCapability, Mt as DeviceType, Qt as EventCategory, R as deviceStateCapability, Tt as errMsg, U as enumerateSchemaFields, Wt as isDeviceConfigCap, Zt as sleep, _ as STREAM_PROFILE_META, a as CAP_NAMES_WITH_STATUS, ct as parseStreamParamsFormPatch, d as DeviceStatusSchema, ft as runtimeStatePolicyFor, jt as DeviceRole, ot as normalizeUnit, t as ALL_CAPABILITY_DEFINITIONS, z as deviceStatusCapability } from "../../dist-CG7kwIZp.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-Dm1z4mO4.mjs";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 //#region src/builtins/device-manager/adoption-job-engine.ts
@@ -1460,30 +1460,25 @@ async function getDevice(pctx, input) {
 		...sourceInfoGetDevice !== void 0 ? { sourceInfo: sourceInfoGetDevice } : {}
 	};
 }
-async function getChildren(pctx, input) {
-	const { parentDeviceId } = input;
-	let ownerAddonId = null;
-	if (pctx.registry) {
-		if (pctx.registry.getById(parentDeviceId)) ownerAddonId = pctx.registry.getAddonId(parentDeviceId);
-	}
-	if (!ownerAddonId) {
-		const persisted = await pctx.metaStore.resolvePersistedById(parentDeviceId);
-		if (!persisted) return [];
-		ownerAddonId = persisted.addonId;
-	}
+/**
+* The children of ONE parent, projected from rows and live devices the caller
+* has ALREADY read.
+*
+* Extracted so `getChildren` and `getChildrenBatch` share one projection: the
+* batch differs only in HOW the rows were fetched (one `listByParentMany`
+* instead of N `listByParent`), never in what a parent's answer looks like.
+* Byte-for-byte the body `getChildren` had.
+*/
+async function projectChildren(pctx, parentDeviceId, ownerAddonId, childRows, liveChildren) {
 	const results = [];
 	const seen = /* @__PURE__ */ new Set();
-	const childRows = await pctx.metaStore.rows.listByParent(parentDeviceId);
 	const rowById = /* @__PURE__ */ new Map();
 	for (const row of childRows) rowById.set(row.meta.id, row);
-	if (pctx.registry) {
-		const liveChildren = pctx.registry.getChildren(parentDeviceId);
-		for (const device of liveChildren) {
-			const key = String(device.id);
-			const row = rowById.get(device.id);
-			results.push(toDeviceInfo(ownerAddonId, device, row?.metadata ?? null, row?.meta ?? null));
-			seen.add(key);
-		}
+	for (const device of liveChildren) {
+		const key = String(device.id);
+		const row = rowById.get(device.id);
+		results.push(toDeviceInfo(ownerAddonId, device, row?.metadata ?? null, row?.meta ?? null));
+		seen.add(key);
 	}
 	for (const row of childRows) {
 		const m = row.meta;
@@ -1519,6 +1514,86 @@ async function getChildren(pctx, input) {
 	}
 	return results;
 }
+/**
+* Owning addonId for a parent, or `null` when the fleet does not know it.
+*
+* Children are always registered under the same addonId as their parent, so
+* the persisted-child projection is scoped by it. The live registry answers
+* for free; only a parent it does not hold costs a row read.
+*/
+function liveOwnerOf(pctx, parentDeviceId) {
+	if (!pctx.registry) return null;
+	if (!pctx.registry.getById(parentDeviceId)) return null;
+	return pctx.registry.getAddonId(parentDeviceId);
+}
+async function getChildren(pctx, input) {
+	const { parentDeviceId } = input;
+	let ownerAddonId = liveOwnerOf(pctx, parentDeviceId);
+	if (!ownerAddonId) {
+		const persisted = await pctx.metaStore.resolvePersistedById(parentDeviceId);
+		if (!persisted) return [];
+		ownerAddonId = persisted.addonId;
+	}
+	const childRows = await pctx.metaStore.rows.listByParent(parentDeviceId);
+	const liveChildren = pctx.registry?.getChildren(parentDeviceId) ?? [];
+	return [...await projectChildren(pctx, parentDeviceId, ownerAddonId, childRows, liveChildren)];
+}
+/**
+* `getChildren` for a set of parents — TWO store reads for the whole set, not
+* two per parent.
+*
+* The single-parent path costs one `resolvePersistedById` (a primary-key read)
+* plus one `listByParent` (an indexed scan) EACH. Asked once per device at
+* boot that was 1 024 of each, measured on the live hub 2026-08-27 — see the
+* cap method's note. Here the ownership lookup for every parent the live
+* registry does not hold is ONE `getMany`, and the children of every parent
+* are ONE `listByParentMany`.
+*
+* The live half is indexed once too: `registry.getChildren` is
+* `getAll().filter(…)`, so calling it per parent would trade an RPC N+1 for an
+* in-memory one — 256 full sweeps of the registry per batch. One pass over
+* `getAll()` buckets every live device by its parent instead.
+*
+* A parent with no children at all is ABSENT from the record; so is a parent
+* the fleet does not know. Same contract as `DeviceRowStore.getMany` — the
+* caller asked about it and gets no row, rather than an invented empty one it
+* cannot tell apart from a real childless parent.
+*/
+async function getChildrenBatch(pctx, input) {
+	const parentIds = [...new Set(input.parentDeviceIds)];
+	const out = {};
+	if (parentIds.length === 0) return out;
+	const owners = /* @__PURE__ */ new Map();
+	const unownedIds = [];
+	for (const parentId of parentIds) {
+		const live = liveOwnerOf(pctx, parentId);
+		if (live !== null) owners.set(parentId, live);
+		else unownedIds.push(parentId);
+	}
+	if (unownedIds.length > 0) {
+		const rows = await pctx.metaStore.rows.getMany(unownedIds);
+		for (const [parentId, row] of rows) owners.set(parentId, row.meta.addonId);
+	}
+	const requested = new Set(parentIds);
+	const rowsByParent = await pctx.metaStore.rows.listByParentMany([...owners.keys()]);
+	const liveByParent = /* @__PURE__ */ new Map();
+	for (const device of pctx.registry?.getAll() ?? []) {
+		const parentId = device.parentDeviceId;
+		if (parentId === null || parentId === void 0) continue;
+		if (!requested.has(parentId)) continue;
+		const bucket = liveByParent.get(parentId);
+		if (bucket === void 0) liveByParent.set(parentId, [device]);
+		else bucket.push(device);
+	}
+	for (const [parentId, ownerAddonId] of owners) {
+		const childRows = rowsByParent.get(parentId) ?? [];
+		const liveChildren = liveByParent.get(parentId) ?? [];
+		if (childRows.length === 0 && liveChildren.length === 0) continue;
+		const projected = await projectChildren(pctx, parentId, ownerAddonId, childRows, liveChildren);
+		if (projected.length > 0) out[String(parentId)] = [...projected];
+	}
+	return out;
+}
 async function getStreamSources(pctx, input) {
 	const { deviceId } = input;
 	if (pctx.registry) {
@@ -3390,27 +3465,33 @@ async function setName(pctx, input) {
 	});
 }
 /**
-* Every descendant of `rootId`, walked via `parentDeviceId` chains
-* (BFS, `listByParent` per level — the same indexed lookup `setName`'s
-* rename cascade uses one level of). `visited` seeded with `rootId` guards a
-* pathological parent-cycle in persisted data from recursing forever; a row
-* already seen is never re-queued or re-emitted. Depth is unbounded on
-* purpose — a nested container's own children are still `rootId`'s
-* descendants and must align too.
+* Every descendant of `rootId`, walked via `parentDeviceId` chains.
+*
+* BFS one LEVEL per query, not one node per query: `listByParentMany` asks for
+* the whole frontier's children in a single indexed `whereIn`, so a tree costs
+* as many reads as it is DEEP, never as many as it has nodes. It used to be
+* `listByParent` per node — the same N+1 the boot census measured at 1 024
+* calls on `getChildren`.
+*
+* `visited` seeded with `rootId` guards a pathological parent-cycle in
+* persisted data from recursing forever; a row already seen is never re-queued
+* or re-emitted. Depth is unbounded on purpose — a nested container's own
+* children are still `rootId`'s descendants and must align too.
 */
 async function collectDescendants(metaStore, rootId) {
 	const out = [];
 	const visited = new Set([rootId]);
-	const queue = [rootId];
-	while (queue.length > 0) {
-		const parentId = queue.shift();
-		if (parentId === void 0) break;
-		for (const row of await metaStore.rows.listByParent(parentId)) {
+	let frontier = [rootId];
+	while (frontier.length > 0) {
+		const byParent = await metaStore.rows.listByParentMany(frontier);
+		const next = [];
+		for (const parentId of frontier) for (const row of byParent.get(parentId) ?? []) {
 			if (visited.has(row.meta.id)) continue;
 			visited.add(row.meta.id);
 			out.push(row.meta);
-			queue.push(row.meta.id);
+			next.push(row.meta.id);
 		}
+		frontier = next;
 	}
 	return out;
 }
@@ -4740,6 +4821,46 @@ var DeviceRowStore = class {
 			limit: DEVICE_ROWS_FLEET_LIMIT
 		});
 	}
+	/**
+	* Direct children of MANY devices, in ONE query.
+	*
+	* `listByParent` called once per parent is the same shape `get` was before
+	* {@link getMany}: an indexed lookup this store makes cheap, repeated until
+	* it isn't. Measured on the live hub 2026-08-27, 120-second boot window:
+	* `DeviceRowStore.list < DeviceRowStore.listByParent < getChildren` at
+	* **1 024 calls** — one per device — for 919 rows in total. The BFS in
+	* `device-meta-actions.ts#collectDescendants` walked a container tree the
+	* same way, one query per node.
+	*
+	* `whereIn` on the indexed `parentDeviceId` column collapses a level of that
+	* walk into a single statement. Contract, verbatim from {@link getMany}: an
+	* EMPTY `parentDeviceIds` reads nothing at all rather than degrading to
+	* "everything", and a parent with no children — or one the fleet does not
+	* know — is simply ABSENT from the map, never an invented empty row.
+	*/
+	async listByParentMany(parentDeviceIds) {
+		const out = /* @__PURE__ */ new Map();
+		const unique = [...new Set(parentDeviceIds)];
+		if (unique.length === 0) return out;
+		const rows = await this.list({
+			whereIn: { parentDeviceId: unique },
+			orderBy: {
+				field: "deviceId",
+				direction: "asc"
+			},
+			limit: DEVICE_ROWS_FLEET_LIMIT
+		});
+		const byParent = /* @__PURE__ */ new Map();
+		for (const row of rows) {
+			const parent = row.meta.parentDeviceId;
+			if (parent === null || parent === void 0) continue;
+			const bucket = byParent.get(parent);
+			if (bucket === void 0) byParent.set(parent, [row]);
+			else bucket.push(row);
+		}
+		for (const [parent, bucket] of byParent) out.set(parent, bucket);
+		return out;
+	}
 	/** How many devices the fleet holds. Used to tell "empty store" from "gone device". */
 	async count() {
 		await this.declare();
@@ -5560,6 +5681,7 @@ var DeviceManagerAddon = class extends BaseAddon {
 			listAll: (input) => listAll(pctx, input),
 			getDevice: (input) => getDevice(pctx, input),
 			getChildren: (input) => getChildren(pctx, input),
+			getChildrenBatch: (input) => getChildrenBatch(pctx, input),
 			getLinkedDevices: (input) => getLinkedDevices(pctx, input),
 			getLinkedDevicesBatch: (input) => getLinkedDevicesBatch(pctx, input),
 			getDeviceSettingsContribution: (input) => buildLinkedDevicesContribution(pctx, input.deviceId),