@camstack/system 1.2.151 → 1.2.154

package/dist/addon-runner.js

@@ -1,13 +1,11 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_manifest_python_deps = require("./manifest-python-deps-BqWrDjSN.js");
+const require_manifest_python_deps = require("./manifest-python-deps-COeSr7el.js");
 const require_custom_action_registry = require("./custom-action-registry-jY0NOZK8.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_module = require("node:module");
-let node_v8 = require("node:v8");
-node_v8 = require_chunk.__toESM(node_v8);
 let _camstack_types_addon = require("@camstack/types/addon");
 let node_url = require("node:url");
 //#region src/kernel/moleculer/child-addon-call-dispatch.ts
@@ -705,18 +703,19 @@ async function main() {
 		}
 	});
 	process.on("SIGUSR2", () => {
-		const MB = (x) => Math.round(x / 1048576 * 10) / 10;
-		try {
-			const mu = process.memoryUsage();
-			const spaces = node_v8.getHeapSpaceStatistics().filter((s) => s.space_used_size > 0).map((s) => `${s.space_name}=${MB(s.space_used_size)}`).join(" ");
-			const addons = loaded.map((e) => e.addonId).join(",");
-			runnerLog.info(`[mem] node="${nodeId}" addons=[${addons}] rss=${MB(mu.rss)} heapUsed=${MB(mu.heapUsed)} heapTotal=${MB(mu.heapTotal)} external=${MB(mu.external)} arrayBuffers=${MB(mu.arrayBuffers)} | ${spaces}`);
-			const snapPath = `/tmp/heap-${nodeId.replace(/[^\w.-]/g, "_")}.heapsnapshot`;
-			node_v8.writeHeapSnapshot(snapPath);
-			runnerLog.info(`[mem] node="${nodeId}" heap snapshot written -> ${snapPath}`);
-		} catch (err) {
-			runnerLog.warn(`[mem] snapshot failed: ${(0, _camstack_types_addon.errMsg)(err)}`);
-		}
+		require_manifest_python_deps.emitHeapDiagnosticReport({
+			label: nodeId,
+			addons: loaded.map((e) => e.addonId),
+			sink: {
+				info: (line) => {
+					runnerLog.info(line);
+				},
+				warn: (line) => {
+					runnerLog.warn(line);
+				}
+			},
+			snapshotPath: `/tmp/heap-${nodeId.replace(/[^\w.-]/g, "_")}.heapsnapshot`
+		});
 	});
 	const shutdown = async () => {
 		shuttingDown = true;

package/dist/addon-runner.mjs

@@ -1,9 +1,8 @@
-import { F as createUdsLoggerWithControl, I as LocalChildClient, Pt as RUNNER_RSS_BUDGET_ENV, Wt as startRunnerHeapWatch, bt as resolveAddonClass, i as createUdsAddonContext, it as setWorkerNativeCapsChangeListener, nt as getWorkerNativeCapSnapshot, ot as validateProviderRegistrations, t as installManifestPythonDeps, tt as getWorkerNativeCapProvider, yt as installManifestNativeDeps } from "./manifest-python-deps-DuQ3Uqoq.mjs";
+import { F as createUdsLoggerWithControl, I as LocalChildClient, It as RUNNER_RSS_BUDGET_ENV, Yt as startRunnerHeapWatch, at as setWorkerNativeCapsChangeListener, bt as installManifestNativeDeps, en as emitHeapDiagnosticReport, i as createUdsAddonContext, nt as getWorkerNativeCapProvider, rt as getWorkerNativeCapSnapshot, st as validateProviderRegistrations, t as installManifestPythonDeps, xt as resolveAddonClass } from "./manifest-python-deps-BILJm2mI.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-F__gp_VX.mjs";
 import { register } from "node:module";
 import * as path$1 from "node:path";
 import * as fs from "node:fs";
-import * as v8 from "node:v8";
 import { ReadinessRegistry, ReadinessTimeoutError, errMsg, isCollectionArrayMethodName, normalizeAddonInitResult } from "@camstack/types/addon";
 import { pathToFileURL } from "node:url";
 //#region src/kernel/moleculer/child-addon-call-dispatch.ts
@@ -701,18 +700,19 @@ async function main() {
 		}
 	});
 	process.on("SIGUSR2", () => {
-		const MB = (x) => Math.round(x / 1048576 * 10) / 10;
-		try {
-			const mu = process.memoryUsage();
-			const spaces = v8.getHeapSpaceStatistics().filter((s) => s.space_used_size > 0).map((s) => `${s.space_name}=${MB(s.space_used_size)}`).join(" ");
-			const addons = loaded.map((e) => e.addonId).join(",");
-			runnerLog.info(`[mem] node="${nodeId}" addons=[${addons}] rss=${MB(mu.rss)} heapUsed=${MB(mu.heapUsed)} heapTotal=${MB(mu.heapTotal)} external=${MB(mu.external)} arrayBuffers=${MB(mu.arrayBuffers)} | ${spaces}`);
-			const snapPath = `/tmp/heap-${nodeId.replace(/[^\w.-]/g, "_")}.heapsnapshot`;
-			v8.writeHeapSnapshot(snapPath);
-			runnerLog.info(`[mem] node="${nodeId}" heap snapshot written -> ${snapPath}`);
-		} catch (err) {
-			runnerLog.warn(`[mem] snapshot failed: ${errMsg(err)}`);
-		}
+		emitHeapDiagnosticReport({
+			label: nodeId,
+			addons: loaded.map((e) => e.addonId),
+			sink: {
+				info: (line) => {
+					runnerLog.info(line);
+				},
+				warn: (line) => {
+					runnerLog.warn(line);
+				}
+			},
+			snapshotPath: `/tmp/heap-${nodeId.replace(/[^\w.-]/g, "_")}.heapsnapshot`
+		});
 	});
 	const shutdown = async () => {
 		shuttingDown = true;

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CImxMt5h.js");
+const require_dist = require("../../dist-BPlfW-CG.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Ot as errMsg, S as addonPagesCapability, kt as BaseAddon, tn as EventCategory } from "../../dist-CbRciAbu.mjs";
+import { Ot as errMsg, S as addonPagesCapability, kt as BaseAddon, tn as EventCategory } from "../../dist-D_NyUV6Y.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CImxMt5h.js");
+const require_dist = require("../../dist-BPlfW-CG.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Ot as errMsg, kt as BaseAddon, tn as EventCategory, w as addonWidgetsCapability } from "../../dist-CbRciAbu.mjs";
+import { Ot as errMsg, kt as BaseAddon, tn as EventCategory, w as addonWidgetsCapability } from "../../dist-D_NyUV6Y.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CImxMt5h.js");
+const require_dist = require("../../dist-BPlfW-CG.js");
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as createEvent, Ot as errMsg, T as alertsCapability, kt as BaseAddon, n as AlertSchema, tn as EventCategory } from "../../dist-CbRciAbu.mjs";
+import { Ht as createEvent, Ot as errMsg, T as alertsCapability, kt as BaseAddon, n as AlertSchema, tn as EventCategory } from "../../dist-D_NyUV6Y.mjs";
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CImxMt5h.js");
+const require_dist = require("../../dist-BPlfW-CG.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { D as backupCapability, kt as BaseAddon, tn as EventCategory } from "../../dist-CbRciAbu.mjs";
+import { D as backupCapability, kt as BaseAddon, tn as EventCategory } from "../../dist-D_NyUV6Y.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CImxMt5h.js");
+const require_dist = require("../../dist-BPlfW-CG.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { kt as BaseAddon, rt as logDestinationCapability } from "../../dist-CbRciAbu.mjs";
+import { kt as BaseAddon, rt as logDestinationCapability } from "../../dist-D_NyUV6Y.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CImxMt5h.js");
+const require_dist = require("../../dist-BPlfW-CG.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,4 +1,4 @@
-import { M as coreBlockIdFromAddonId, N as coreBlocksCapability, Ot as errMsg, c as CoreBlockSchema, j as coreBlockAddonId, kt as BaseAddon, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX, u as DeclaredDevices } from "../../dist-CbRciAbu.mjs";
+import { M as coreBlockIdFromAddonId, N as coreBlocksCapability, Ot as errMsg, c as CoreBlockSchema, j as coreBlockAddonId, kt as BaseAddon, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX, u as DeclaredDevices } from "../../dist-D_NyUV6Y.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CImxMt5h.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-C7gLUS3x.js");
+const require_dist = require("../../dist-BPlfW-CG.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-DBY6ebwV.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 //#region src/builtins/device-manager/adoption-job-engine.ts

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { A as buildStreamParamsConfigSchema, Ft as DeviceType, H as enumerateItemArrayFields, L as deviceManagerCapability, Nt as DeviceFeature, Ot as errMsg, Pt as DeviceRole, R as deviceStateCapability, Rt as WELL_KNOWN_TAB_MAP, U as enumerateSchemaFields, _ as STREAM_PROFILE_META, a as CAP_NAMES_WITH_STATUS, d as DeviceStatusSchema, en as sleep, ht as runtimeStatePolicyFor, kt as BaseAddon, lt as parseStreamParamsFormPatch, qt as isDeviceConfigCap, st as normalizeUnit, t as ALL_CAPABILITY_DEFINITIONS, tn as EventCategory, z as deviceStatusCapability } from "../../dist-CbRciAbu.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-DhFPXIRD.mjs";
+import { A as buildStreamParamsConfigSchema, Ft as DeviceType, H as enumerateItemArrayFields, L as deviceManagerCapability, Nt as DeviceFeature, Ot as errMsg, Pt as DeviceRole, R as deviceStateCapability, Rt as WELL_KNOWN_TAB_MAP, U as enumerateSchemaFields, _ as STREAM_PROFILE_META, a as CAP_NAMES_WITH_STATUS, d as DeviceStatusSchema, en as sleep, ht as runtimeStatePolicyFor, kt as BaseAddon, lt as parseStreamParamsFormPatch, qt as isDeviceConfigCap, st as normalizeUnit, t as ALL_CAPABILITY_DEFINITIONS, tn as EventCategory, z as deviceStatusCapability } from "../../dist-D_NyUV6Y.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-Bq1Tb84I.mjs";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 //#region src/builtins/device-manager/adoption-job-engine.ts

package/dist/builtins/doorbell/virtual-doorbell.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CImxMt5h.js");
+const require_dist = require("../../dist-BPlfW-CG.js");
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/doorbell/virtual-doorbell.addon.mjs

@@ -1,4 +1,4 @@
-import { B as doorbellCapability, Ft as DeviceType, Ht as createEvent, O as bareAddonId, Ot as errMsg, Q as isSourceCap, W as evaluateSensorEdge, Z as isSameAddonId, g as SOURCE_DEVICE_TYPES, h as SOURCE_CAPS, kt as BaseAddon, tn as EventCategory } from "../../dist-CbRciAbu.mjs";
+import { B as doorbellCapability, Ft as DeviceType, Ht as createEvent, O as bareAddonId, Ot as errMsg, Q as isSourceCap, W as evaluateSensorEdge, Z as isSameAddonId, g as SOURCE_DEVICE_TYPES, h as SOURCE_CAPS, kt as BaseAddon, tn as EventCategory } from "../../dist-D_NyUV6Y.mjs";
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CImxMt5h.js");
+const require_dist = require("../../dist-BPlfW-CG.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { kt as BaseAddon, rt as logDestinationCapability } from "../../dist-CbRciAbu.mjs";
+import { kt as BaseAddon, rt as logDestinationCapability } from "../../dist-D_NyUV6Y.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CImxMt5h.js");
+const require_dist = require("../../dist-BPlfW-CG.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as createEvent, Ot as errMsg, kt as BaseAddon, tn as EventCategory } from "../../dist-CbRciAbu.mjs";
+import { Ht as createEvent, Ot as errMsg, kt as BaseAddon, tn as EventCategory } from "../../dist-D_NyUV6Y.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CImxMt5h.js");
+const require_dist = require("../../dist-BPlfW-CG.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { E as authProviderCapability, Tt as userManagementCapability, kt as BaseAddon, r as ApiKeyRecordSchema, v as ScopedTokenSchema, x as UserRecordSchema } from "../../dist-CbRciAbu.mjs";
+import { E as authProviderCapability, Tt as userManagementCapability, kt as BaseAddon, r as ApiKeyRecordSchema, v as ScopedTokenSchema, x as UserRecordSchema } from "../../dist-D_NyUV6Y.mjs";
 import * as crypto$2 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,12 +1,12 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CImxMt5h.js");
-const require_tls = require("../../tls-u8QCJCFE.js");
+const require_dist = require("../../dist-BPlfW-CG.js");
+const require_tls = require("../../tls-BxQlomxd.js");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");
+let node_fs = require("node:fs");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
-let node_fs = require("node:fs");
 let node_net = require("node:net");
 //#region src/builtins/local-network/local-hostname.ts
 var DNS_NAME = /^(?=.{1,253}$)([a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])$/;

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,9 +1,9 @@
-import { kt as BaseAddon, nt as localNetworkCapability, tn as EventCategory } from "../../dist-CbRciAbu.mjs";
-import { S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, i as writeExtraSans, l as reissueTlsLeaf, n as readTlsAccessStatus, o as validateUploadedTls, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, y as applyLanHttp } from "../../tls-CQhPGSJm.mjs";
+import { kt as BaseAddon, nt as localNetworkCapability, tn as EventCategory } from "../../dist-D_NyUV6Y.mjs";
+import { S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, i as writeExtraSans, l as reissueTlsLeaf, n as readTlsAccessStatus, o as validateUploadedTls, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, y as applyLanHttp } from "../../tls-DOTmtLCW.mjs";
 import { mkdir, writeFile } from "node:fs/promises";
 import { join } from "node:path";
-import * as os from "node:os";
 import { readFileSync } from "node:fs";
+import * as os from "node:os";
 import { isIP } from "node:net";
 //#region src/builtins/local-network/local-hostname.ts
 var DNS_NAME = /^(?=.{1,253}$)([a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])$/;

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CImxMt5h.js");
+const require_dist = require("../../dist-BPlfW-CG.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { kt as BaseAddon, rt as logDestinationCapability } from "../../dist-CbRciAbu.mjs";
+import { kt as BaseAddon, rt as logDestinationCapability } from "../../dist-D_NyUV6Y.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/cgroup-memory.d.ts

@@ -0,0 +1,193 @@
+import { ContainerMemorySnapshot, IScopedLogger } from '@camstack/types';
+/**
+ * Which hierarchy answered. Reported so a reading is never ambiguous.
+ *
+ * Narrowed from {@link ContainerMemorySnapshot}'s own field rather than
+ * re-declared: the shape is the capability's Zod schema and this file must not
+ * own a second copy of it.
+ */
+export type CgroupMemorySource = ContainerMemorySnapshot['source'];
+/** The one impure surface. Returns `null` for anything unreadable. */
+export interface CgroupFileReader {
+    read(path: string): string | null;
+}
+/** `readFileSync`, with every failure flattened to `null`. */
+export declare const nodeCgroupFileReader: CgroupFileReader;
+/** Where the v2 unified hierarchy is mounted, and where v1 hangs its controllers. */
+export declare const CGROUP_MOUNT_ROOT = "/sys/fs/cgroup";
+/**
+ * The i915 GEM accounting file.
+ *
+ * **debugfs, and it is not mounted in our containers.** Verified on the live
+ * hub on 2026-08-29: readable on the Unraid host (`6014 shrinkable [0 free]
+ * objects, 1194934272 bytes`), `ENOENT` inside the `CamStack` container where
+ * `native-metrics` actually runs. It is probed ONCE per process and latched —
+ * a bind mount cannot appear under a running container — so an absent file
+ * costs one failed `open` for the life of the runner and one log line, never a
+ * failure per tick.
+ *
+ * Making it populate is a one-line change on the container, not here:
+ * mounting `/sys/kernel/debug` read-only into `CamStack` fills this field on
+ * the next sample with no code change.
+ */
+export declare const I915_GEM_OBJECTS_PATH = "/sys/kernel/debug/dri/0/i915_gem_objects";
+/** Where the numbers for one hierarchy live, once resolved. */
+export interface CgroupMemoryLayout {
+    readonly source: CgroupMemorySource;
+    /** Directory the three files below sit in. Kept for the resolution log line. */
+    readonly directory: string;
+    readonly currentPath: string;
+    readonly limitPath: string;
+    readonly statPath: string;
+}
+/** What `/proc/self/cgroup` says about this process. */
+export interface CgroupSelfEntry {
+    readonly version: 'v2' | 'v1';
+    /** Path RELATIVE to the hierarchy root, always leading-slashed. */
+    readonly path: string;
+}
+/**
+ * Parse `/proc/self/cgroup`.
+ *
+ * Two formats, and the file may contain both on a hybrid host:
+ *
+ * ```
+ * 0::/                                  ← v2 unified
+ * 5:memory:/docker/9f3c…                ← v1, memory controller
+ * 4:cpu,cpuacct:/docker/9f3c…           ← v1, other controllers
+ * ```
+ *
+ * v2 wins when present: on a hybrid host the unified hierarchy is the one
+ * carrying `memory.current`, and every camstack deployment is v2 (verified on
+ * the live hub, which reports the single line `0::/`).
+ *
+ * Returns `null` when the file names no memory hierarchy at all — which is
+ * also what a non-Linux host produces, because there is no file to read.
+ */
+export declare function parseCgroupSelf(text: string): CgroupSelfEntry | null;
+/**
+ * Parse a `memory.stat` file — v1 or v2, both are `key value` per line.
+ *
+ * Unknown keys are KEPT rather than refused: a v2 `memory.stat` carries ~50
+ * fields and we read five of them, and a kernel that adds a sixth must not
+ * turn into a parse failure. A malformed line is skipped, not thrown on.
+ */
+export declare function parseCgroupStat(text: string): ReadonlyMap<string, number>;
+/**
+ * Parse a single-scalar cgroup file (`memory.current`, `memory.max`, …).
+ *
+ * `max` — v2's word for "no limit" — and v1's `V1_UNLIMITED_SENTINEL` both
+ * become `null`, because a ceiling nothing can reach is not a ceiling and
+ * charting it as 8 exabytes would flatten every real series to zero.
+ */
+export declare function parseCgroupScalar(text: string): number | null;
+/**
+ * Parse the first line of `i915_gem_objects`.
+ *
+ * ```
+ * 6014 shrinkable [0 free] objects, 1194934272 bytes
+ * ```
+ *
+ * Only the byte total is taken. The format has changed across kernel releases
+ * more than once, so a line that does not match reads `null` — an unrecognised
+ * format is UNKNOWN, never zero.
+ */
+export declare function parseI915GemObjects(text: string): number | null;
+/**
+ * Find the cgroup from INSIDE this process — never a hard-coded path.
+ *
+ * The path the hub happens to have (`/sys/fs/cgroup/docker/<id>/memory.stat`
+ * as seen from the Unraid host) is an artefact of where you are standing. From
+ * inside the container the same cgroup is at the mount ROOT, because Docker
+ * gives the container its own cgroup namespace and `/proc/self/cgroup` reports
+ * `0::/`. Hard-coding either one breaks the other.
+ *
+ * So the resolution is: ask `/proc/self/cgroup` which hierarchy and which
+ * path, then take the FIRST candidate directory that actually publishes the
+ * usage file.
+ *
+ * - **v2** — `<mount><path>` then `<mount>`. The second candidate is the
+ *   namespaced case and the one that answers on our hub; the first is the
+ *   un-namespaced case (a host process, or `--cgroupns=host`).
+ * - **v1** — `<mount>/memory<path>` then `<mount>/memory`, same reasoning.
+ * - **neither** — `null`. macOS has no `/proc/self/cgroup` at all, so a
+ *   developer Mac lands here and reports nothing, which is the truth.
+ */
+export declare function resolveCgroupMemoryLayout(fs: CgroupFileReader): CgroupMemoryLayout | null;
+/**
+ * Turn one layout's three files into a snapshot.
+ *
+ * Pure over the text, so the whole mapping — including a v2 `memory.stat` full
+ * of fields we do not read — is testable against a real fixture.
+ *
+ * v1's `memory.stat` names the same quantities differently and publishes fewer
+ * of them: `rss` is the anonymous charge, `cache` is the page cache, and there
+ * is no slab accounting at all. Mapping them onto the same field names is what
+ * makes a v1 node and a v2 node comparable; reporting `slabBytes: null` on v1
+ * is what stops that comparison from lying.
+ */
+export declare function buildContainerMemorySnapshot(input: {
+    readonly source: CgroupMemorySource;
+    readonly currentText: string;
+    readonly limitText: string | null;
+    readonly statText: string | null;
+    readonly gpuShmemBytes: number | null;
+}): ContainerMemorySnapshot | null;
+export interface ContainerMemoryProbeDeps {
+    readonly logger: IScopedLogger;
+    readonly fs?: CgroupFileReader;
+    /** Set `false` to skip the debugfs probe entirely. Default `true`. */
+    readonly readGpu?: boolean;
+}
+/**
+ * The sampler. Resolves once, latches, and logs TRANSITIONS only.
+ *
+ * Three states are worth a line and none of them is worth one per tick:
+ *
+ * 1. **Resolution** — once, at the first sample. Either the layout that
+ *    answered, or "no cgroup on this node", which is a fact about the node and
+ *    not an error.
+ * 2. **GPU probe** — once, at the first sample. Absent debugfs is the normal
+ *    case inside a container and is stated as such, then never retried: a bind
+ *    mount cannot appear under a running container.
+ * 3. **Read failing / recovering** — a cgroup that resolved and then stopped
+ *    answering is a real change and says so, once in each direction. A tick
+ *    that fails while already failing is silent, because the first line
+ *    already said it.
+ *
+ * The silence is bounded by design: at the 10 s snapshot cadence a per-tick
+ * warning would be 8 640 lines a day on a node that simply is not Linux.
+ */
+export declare class ContainerMemoryProbe {
+    private readonly logger;
+    private readonly fs;
+    private readonly wantGpu;
+    private resolved;
+    private layout;
+    private gpuProbed;
+    private gpuReadable;
+    /** `null` until the first sample — so the FIRST outcome is a transition too. */
+    private lastReadOk;
+    constructor(deps: ContainerMemoryProbeDeps);
+    /** Did this node resolve a cgroup at all? Absent is a reportable fact. */
+    get available(): boolean;
+    /**
+     * One reading, or `null` when this node has no cgroup or the cgroup stopped
+     * answering. `null` is ABSENT — the caller contributes no point, and no
+     * point is what a chart must show, never a zero.
+     */
+    sample(): ContainerMemorySnapshot | null;
+    /** Resolve on first use and never again — a cgroup does not move under a pid. */
+    private resolveOnce;
+    /**
+     * The GPU number, probed once.
+     *
+     * It is host-wide and lives in debugfs, so it is absent far more often than
+     * it is present — inside every camstack container today. One `open` decides
+     * it for the life of the process; after that an unreadable file costs
+     * nothing at all, not even a syscall.
+     */
+    private readGpuShmem;
+    /** Log a read outcome only when it CHANGES. Never once per tick. */
+    private noteRead;
+}