@camstack/system 1.2.149 → 1.2.151

package/dist/{manifest-python-deps-CivtrAha.js → manifest-python-deps-BqWrDjSN.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-require("./dist-DdEXjTDo.js");
+require("./dist-CImxMt5h.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let _camstack_types_node = require("@camstack/types/node");
@@ -45,6 +45,13 @@ let _trpc_client = require("@trpc/client");
 * `addon-runner.ts`) — hub-main, the one process that actually OOMs, was the
 * one process with no telemetry at all.
 *
+* **And for 27 days after that it still had none where anyone could read it.**
+* The watch was started correctly and passed NO SINK, so it fell back to
+* `console.log`, which is not an `ILogDestination` — 42 hours of Loki carried a
+* line for every runner and none for hub-main. Read
+* {@link createDeferredHeapWatchSink} before trusting anything below: a
+* heartbeat with no destination is indistinguishable from no heartbeat (D285).
+*
 * ## What it gives
 *
 * A heartbeat carrying the numbers that separate the two possible stories, and
@@ -96,6 +103,30 @@ let _trpc_client = require("@trpc/client");
 * `HEAP_RECLAIM_MIN_INTERVAL_MS`. The alternative, measured, is a ratchet to
 * 7.8GB and the OOM that ends it.
 */
+/**
+* What hub-main calls itself in a `[mem]` line.
+*
+* ## Why not `hub/main`
+*
+* A runner's label is its nodeId, and a nodeId is built in exactly one place as
+* `` `${parentNodeId}/${runnerId}` `` (`kernel/moleculer/addon-runner.ts:222`) —
+* so every runner label contains a `/` and every hub-local one is `hub/<runner>`.
+* A label with NO slash therefore cannot be produced by that rule, which makes
+* `hub-main` unambiguous by construction rather than by convention: no future
+* addon, group or agent can ever claim it.
+*
+* It also sorts where it belongs. `-` (0x2D) precedes `/` (0x2F), so a sorted
+* `[mem]` census puts `hub-main` immediately before `hub/decoder`,
+* `hub/recorder`, `hub/stream-broker` — the composition root first, then the
+* runners it forked. `hub/main` would sort into the middle of its own children
+* and would be one addon id away from a collision.
+*
+* And it is the name the rest of this repository already uses — the docblocks,
+* {@link HUB_MAIN_RSS_BUDGET_MB}, {@link HUB_RSS_BUDGET_ENV}, every ADR. A log
+* label that disagreed with the prose would be a second vocabulary for one
+* process, which is the exact failure this telemetry exists to remove.
+*/
+var HUB_MAIN_HEAP_WATCH_LABEL = "hub-main";
 /** Heartbeat period. Slow enough to be free, fast enough that the sample before
 *  a fatal is recent. */
 var HEAP_WATCH_INTERVAL_MS = 6e4;
@@ -261,6 +292,33 @@ var consoleSink = {
 	warn: (line) => console.warn(line)
 };
 /**
+* Build a {@link DeferredHeapWatchSink}.
+*
+* The handover announces itself, once, through the NEW target: that line is the
+* only in-band evidence that hub-main's telemetry actually reached the log
+* manager on a given boot. Its absence from Loki means the wiring is broken —
+* which is precisely the state this module was in, undetected, for 42 hours.
+*/
+function createDeferredHeapWatchSink(label = HUB_MAIN_HEAP_WATCH_LABEL, fallback = consoleSink) {
+	let target = fallback;
+	const sink = {
+		info: (line) => {
+			target.info(line);
+		},
+		warn: (line) => {
+			target.warn(line);
+		}
+	};
+	const attach = (next) => {
+		target = next;
+		next.info(`[mem] ${label} heartbeat attached to the log manager — earlier lines went to stdout only and are not in the log buffer, the rotated file or Loki.`);
+	};
+	return {
+		sink,
+		attach
+	};
+}
+/**
 * RSS the process is holding but not using.
 *
 * The subtrahend is heapUSED, not heapTotal, deliberately: the pages V8
@@ -400,7 +458,7 @@ function format(label, s, loop, budgetMb) {
 * `unref`ed so it can never hold the process open, and every read is wrapped:
 * a diagnostic that can crash the process it watches is worse than none.
 */
-function startHeapWatch(label = "hub-main", sink = consoleSink, intervalMs = HEAP_WATCH_INTERVAL_MS, reclaimOptions, loopDelay = createLoopDelayMeter(), execArgv = process.execArgv, announceCeilingOrigin = true, rssBudget) {
+function startHeapWatch(label = HUB_MAIN_HEAP_WATCH_LABEL, sink = consoleSink, intervalMs = HEAP_WATCH_INTERVAL_MS, reclaimOptions, loopDelay = createLoopDelayMeter(), execArgv = process.execArgv, announceCeilingOrigin = true, rssBudget) {
 	const readMemory = reclaimOptions?.readMemory ?? (() => process.memoryUsage());
 	const now = reclaimOptions?.now ?? (() => Date.now());
 	const triggerMb = reclaimOptions?.triggerMb ?? 1024;
@@ -8688,6 +8746,12 @@ Object.defineProperty(exports, "HUB_CAP_FWD_SERVICE", {
 		return HUB_CAP_FWD_SERVICE;
 	}
 });
+Object.defineProperty(exports, "HUB_MAIN_HEAP_WATCH_LABEL", {
+	enumerable: true,
+	get: function() {
+		return HUB_MAIN_HEAP_WATCH_LABEL;
+	}
+});
 Object.defineProperty(exports, "HUB_MAIN_RSS_BUDGET_MB", {
 	enumerable: true,
 	get: function() {
@@ -8886,6 +8950,12 @@ Object.defineProperty(exports, "createBrokerDeviceManagerApi", {
 		return createBrokerDeviceManagerApi;
 	}
 });
+Object.defineProperty(exports, "createDeferredHeapWatchSink", {
+	enumerable: true,
+	get: function() {
+		return createDeferredHeapWatchSink;
+	}
+});
 Object.defineProperty(exports, "createHubCapForwardService", {
 	enumerable: true,
 	get: function() {

package/dist/{manifest-python-deps-HFh_iE0E.mjs → manifest-python-deps-DuQ3Uqoq.mjs}

@@ -1,4 +1,4 @@
-import "./dist-CZWAU40-.mjs";
+import "./dist-CbRciAbu.mjs";
 import * as crypto$1 from "node:crypto";
 import { randomBytes, randomUUID } from "node:crypto";
 import { ensureBinary, ensureFfmpeg, ensurePython, installPythonPackages, installPythonRequirements } from "@camstack/types/node";
@@ -41,6 +41,13 @@ import { TRPCClientError, createTRPCClient } from "@trpc/client";
 * `addon-runner.ts`) — hub-main, the one process that actually OOMs, was the
 * one process with no telemetry at all.
 *
+* **And for 27 days after that it still had none where anyone could read it.**
+* The watch was started correctly and passed NO SINK, so it fell back to
+* `console.log`, which is not an `ILogDestination` — 42 hours of Loki carried a
+* line for every runner and none for hub-main. Read
+* {@link createDeferredHeapWatchSink} before trusting anything below: a
+* heartbeat with no destination is indistinguishable from no heartbeat (D285).
+*
 * ## What it gives
 *
 * A heartbeat carrying the numbers that separate the two possible stories, and
@@ -92,6 +99,30 @@ import { TRPCClientError, createTRPCClient } from "@trpc/client";
 * `HEAP_RECLAIM_MIN_INTERVAL_MS`. The alternative, measured, is a ratchet to
 * 7.8GB and the OOM that ends it.
 */
+/**
+* What hub-main calls itself in a `[mem]` line.
+*
+* ## Why not `hub/main`
+*
+* A runner's label is its nodeId, and a nodeId is built in exactly one place as
+* `` `${parentNodeId}/${runnerId}` `` (`kernel/moleculer/addon-runner.ts:222`) —
+* so every runner label contains a `/` and every hub-local one is `hub/<runner>`.
+* A label with NO slash therefore cannot be produced by that rule, which makes
+* `hub-main` unambiguous by construction rather than by convention: no future
+* addon, group or agent can ever claim it.
+*
+* It also sorts where it belongs. `-` (0x2D) precedes `/` (0x2F), so a sorted
+* `[mem]` census puts `hub-main` immediately before `hub/decoder`,
+* `hub/recorder`, `hub/stream-broker` — the composition root first, then the
+* runners it forked. `hub/main` would sort into the middle of its own children
+* and would be one addon id away from a collision.
+*
+* And it is the name the rest of this repository already uses — the docblocks,
+* {@link HUB_MAIN_RSS_BUDGET_MB}, {@link HUB_RSS_BUDGET_ENV}, every ADR. A log
+* label that disagreed with the prose would be a second vocabulary for one
+* process, which is the exact failure this telemetry exists to remove.
+*/
+var HUB_MAIN_HEAP_WATCH_LABEL = "hub-main";
 /** Heartbeat period. Slow enough to be free, fast enough that the sample before
 *  a fatal is recent. */
 var HEAP_WATCH_INTERVAL_MS = 6e4;
@@ -257,6 +288,33 @@ var consoleSink = {
 	warn: (line) => console.warn(line)
 };
 /**
+* Build a {@link DeferredHeapWatchSink}.
+*
+* The handover announces itself, once, through the NEW target: that line is the
+* only in-band evidence that hub-main's telemetry actually reached the log
+* manager on a given boot. Its absence from Loki means the wiring is broken —
+* which is precisely the state this module was in, undetected, for 42 hours.
+*/
+function createDeferredHeapWatchSink(label = HUB_MAIN_HEAP_WATCH_LABEL, fallback = consoleSink) {
+	let target = fallback;
+	const sink = {
+		info: (line) => {
+			target.info(line);
+		},
+		warn: (line) => {
+			target.warn(line);
+		}
+	};
+	const attach = (next) => {
+		target = next;
+		next.info(`[mem] ${label} heartbeat attached to the log manager — earlier lines went to stdout only and are not in the log buffer, the rotated file or Loki.`);
+	};
+	return {
+		sink,
+		attach
+	};
+}
+/**
 * RSS the process is holding but not using.
 *
 * The subtrahend is heapUSED, not heapTotal, deliberately: the pages V8
@@ -396,7 +454,7 @@ function format(label, s, loop, budgetMb) {
 * `unref`ed so it can never hold the process open, and every read is wrapped:
 * a diagnostic that can crash the process it watches is worse than none.
 */
-function startHeapWatch(label = "hub-main", sink = consoleSink, intervalMs = HEAP_WATCH_INTERVAL_MS, reclaimOptions, loopDelay = createLoopDelayMeter(), execArgv = process.execArgv, announceCeilingOrigin = true, rssBudget) {
+function startHeapWatch(label = HUB_MAIN_HEAP_WATCH_LABEL, sink = consoleSink, intervalMs = HEAP_WATCH_INTERVAL_MS, reclaimOptions, loopDelay = createLoopDelayMeter(), execArgv = process.execArgv, announceCeilingOrigin = true, rssBudget) {
 	const readMemory = reclaimOptions?.readMemory ?? (() => process.memoryUsage());
 	const now = reclaimOptions?.now ?? (() => Date.now());
 	const triggerMb = reclaimOptions?.triggerMb ?? 1024;
@@ -8582,4 +8640,4 @@ async function installManifestPythonDeps(declaration, addonDir, deps, logger) {
 	await deps.installPythonRequirements(reqAbs);
 }
 //#endregion
-export { buildUdsNativeCapProxy as $, createParentUnownedCallHandler as A, RSS_BUDGET_REANNOUNCE_MIN_MS as At, AGENT_CAP_FWD_SERVICE as B, shouldReclaim as Bt, brokerTransportLink as C, createAddonDataPlaneFacility as Ct, HUB_CAP_FWD_ACTION as D, HEAP_WATCH_WARN_RATIO as Dt, localProviderLink as E, HEAP_WATCH_INTERVAL_MS as Et, createUdsLoggerWithControl as F, createV8Reclaimer as Ft, createLocalTransport as G, CapRouteError as H, startRunnerHeapWatch as Ht, LocalChildClient as I, describeRss as It, SocketChannel as J, UdsLocalTransportClient as K, LocalChildRegistry as L, hubMainRssBudget as Lt, createUdsEventBus as M, RUNNER_HEAP_WATCH_INTERVAL_MS as Mt, udsChildLogToWorkerEntry as N, RUNNER_RSS_BUDGET_ENV as Nt, HUB_CAP_FWD_SERVICE as O, HUB_MAIN_RSS_BUDGET_MB as Ot, createUdsLogger as P, buildHeapSample as Pt, buildNativeCapProxy as Q, UDS_NO_ROUTE_PREFIX as R, nextRssBudgetState as Rt, brokerCallForCap as S, runNpm as St, ipcParentLink as T, HEAP_RECLAIM_TRIGGER_MB as Tt, classifyCapRoute as U, strandedMb as Ut, CapRouteResolver as V, startHeapWatch as Vt, callWithServiceDiscovery as W, FrameDecoder as X, localEndpointPath as Y, encodeFrame as Z, createKernelHwAccel as _, CapabilityUnavailableError as _t, getWorkerDeviceRegistry as a, createAddonService as at, __resetCapUsageRegistryForTests as b, resolveAddonClass as bt, setHubConnected as c, capActionName as ct, getBrokerEventBus as d, capServiceName as dt, createBrokerDeviceManagerApi as et, getMoleculerEventStats as f, parseCapAction as ft, AddonDepsManager as g, CapabilityHandle as gt, subscribePassthrough as h, DeviceRegistry as ht, createUdsAddonContext as i, setWorkerNativeCapsChangeListener as it, createUdsEventBridge as j, RSS_BUDGET_RELEASE_RATIO as jt, createHubCapForwardService as k, HUB_RSS_BUDGET_ENV as kt, EVENT_TOPIC_PREFIX as l, capActionSuffix as lt, setNodeEventInterest as m, serializeTypedArrays as mt, adaptBrokerToCluster as n, getWorkerNativeCapSnapshot as nt, getOrInitReadinessRegistry as o, validateProviderRegistrations as ot, registerEventBusService as p, deserializeTypedArrays as pt, UdsLocalTransportServer as q, createAddonContext as r, mountNativeCapService as rt, getOrInitReadinessRegistryForClient as s, NATIVE_PROVIDER_SERVICE_INFIX as st, installManifestPythonDeps as t, getWorkerNativeCapProvider as tt, clusterEventTopic as u, capBareAction as ut, resolveHwAccel as v, copyBundledNativeModules as vt, buildLinkChain as w, HEAP_RECLAIM_MIN_INTERVAL_MS as wt, getCapUsageRegistry as x, resolveNpmInvocation as xt, CapUsageRegistry as y, installManifestNativeDeps as yt, AGENT_CAP_FWD_ACTION as z, parseRssBudgetMb as zt };
+export { buildUdsNativeCapProxy as $, createParentUnownedCallHandler as A, HUB_RSS_BUDGET_ENV as At, AGENT_CAP_FWD_SERVICE as B, nextRssBudgetState as Bt, brokerTransportLink as C, createAddonDataPlaneFacility as Ct, HUB_CAP_FWD_ACTION as D, HEAP_WATCH_WARN_RATIO as Dt, localProviderLink as E, HEAP_WATCH_INTERVAL_MS as Et, createUdsLoggerWithControl as F, buildHeapSample as Ft, createLocalTransport as G, strandedMb as Gt, CapRouteError as H, shouldReclaim as Ht, LocalChildClient as I, createDeferredHeapWatchSink as It, SocketChannel as J, UdsLocalTransportClient as K, LocalChildRegistry as L, createV8Reclaimer as Lt, createUdsEventBus as M, RSS_BUDGET_RELEASE_RATIO as Mt, udsChildLogToWorkerEntry as N, RUNNER_HEAP_WATCH_INTERVAL_MS as Nt, HUB_CAP_FWD_SERVICE as O, HUB_MAIN_HEAP_WATCH_LABEL as Ot, createUdsLogger as P, RUNNER_RSS_BUDGET_ENV as Pt, buildNativeCapProxy as Q, UDS_NO_ROUTE_PREFIX as R, describeRss as Rt, brokerCallForCap as S, runNpm as St, ipcParentLink as T, HEAP_RECLAIM_TRIGGER_MB as Tt, classifyCapRoute as U, startHeapWatch as Ut, CapRouteResolver as V, parseRssBudgetMb as Vt, callWithServiceDiscovery as W, startRunnerHeapWatch as Wt, FrameDecoder as X, localEndpointPath as Y, encodeFrame as Z, createKernelHwAccel as _, CapabilityUnavailableError as _t, getWorkerDeviceRegistry as a, createAddonService as at, __resetCapUsageRegistryForTests as b, resolveAddonClass as bt, setHubConnected as c, capActionName as ct, getBrokerEventBus as d, capServiceName as dt, createBrokerDeviceManagerApi as et, getMoleculerEventStats as f, parseCapAction as ft, AddonDepsManager as g, CapabilityHandle as gt, subscribePassthrough as h, DeviceRegistry as ht, createUdsAddonContext as i, setWorkerNativeCapsChangeListener as it, createUdsEventBridge as j, RSS_BUDGET_REANNOUNCE_MIN_MS as jt, createHubCapForwardService as k, HUB_MAIN_RSS_BUDGET_MB as kt, EVENT_TOPIC_PREFIX as l, capActionSuffix as lt, setNodeEventInterest as m, serializeTypedArrays as mt, adaptBrokerToCluster as n, getWorkerNativeCapSnapshot as nt, getOrInitReadinessRegistry as o, validateProviderRegistrations as ot, registerEventBusService as p, deserializeTypedArrays as pt, UdsLocalTransportServer as q, createAddonContext as r, mountNativeCapService as rt, getOrInitReadinessRegistryForClient as s, NATIVE_PROVIDER_SERVICE_INFIX as st, installManifestPythonDeps as t, getWorkerNativeCapProvider as tt, clusterEventTopic as u, capBareAction as ut, resolveHwAccel as v, copyBundledNativeModules as vt, buildLinkChain as w, HEAP_RECLAIM_MIN_INTERVAL_MS as wt, getCapUsageRegistry as x, resolveNpmInvocation as xt, CapUsageRegistry as y, installManifestNativeDeps as yt, AGENT_CAP_FWD_ACTION as z, hubMainRssBudget as zt };

package/dist/{retired-settings-keys-BXaTgLyZ.js → retired-settings-keys-C7gLUS3x.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-DdEXjTDo.js");
+const require_dist = require("./dist-CImxMt5h.js");
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/dist/{retired-settings-keys-BynPjBHV.mjs → retired-settings-keys-DhFPXIRD.mjs}

@@ -1,4 +1,4 @@
-import { zt as asJsonObject } from "./dist-CZWAU40-.mjs";
+import { zt as asJsonObject } from "./dist-CbRciAbu.mjs";
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.149",
+  "version": "1.2.151",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",