@camstack/system 1.2.175 → 1.2.177

package/dist/{dist-B25PDvaS.mjs → dist-C-8k9Z9W.mjs}

@@ -11726,6 +11726,35 @@ var filesystemBrowseCapability = {
 	}
 };
 /**
+* Transport bounds for AI capability methods.
+*
+* Its own module because `llm.cap.ts` and `llm-runtime.cap.ts` already import
+* each other: declaring the constant in either one hands the other `undefined`
+* at module-init time, and an undefined `timeoutMs` silently falls back to the
+* kernel's 60 s default — the exact failure this constant exists to prevent,
+* reintroduced invisibly. Found by the guard, not by review.
+*/
+/**
+* Ceiling for a cap method that runs inference or loads a model.
+*
+* Deliberately far above anything the AI layer itself may wait for (a summary
+* asks 180 s by default, a rule may ask 600 s), because the TRANSPORT must
+* never be the layer that gives up first: when it does, the failure is
+* reported as a transport error for a model that was still thinking, naming
+* the wrong layer and hiding the real one.
+*
+* Measured 2026-09-03: a 6-image vision request needs 44.8 s warm and ~20 s
+* more on a cold model load. With no declaration every digest failed at
+* exactly 60 s and shipped without its text.
+*
+* A ceiling, not a budget. The AI layer's own timeouts (the rule's `timeoutMs`,
+* the profile's `timeoutMs` / `firstTokenTimeoutMs`) remain the things that
+* decide when to stop, because only they can say WHY.
+*/
+var AI_CAP_TRANSPORT_TIMEOUT_MS = 6e5;
+/** A multi-gigabyte download. An hour is not generous, it is honest. */
+var AI_MODEL_INSTALL_TIMEOUT_MS = 60 * 6e4;
+/**
 * Shared LLM generate contracts — imported by BOTH `llm.cap.ts` (consumer
 * surface) and `llm-runtime.cap.ts` (node-side managed executor) so the two
 * caps stay wire-compatible without a circular cap→cap import.
@@ -12018,11 +12047,13 @@ var llmRuntimeCapability = {
 			timeoutMs: z.number().int().positive().optional()
 		}), LlmGenerateResultSchema, {
 			kind: "mutation",
-			auth: "admin"
+			auth: "admin",
+			timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 		}),
 		ensureStarted: method(z.object({ runtime: ManagedRuntimeConfigSchema }), LlmRuntimeStatusSchema, {
 			kind: "mutation",
-			auth: "admin"
+			auth: "admin",
+			timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 		}),
 		stop: method(z.object({}), z.void(), {
 			kind: "mutation",
@@ -12031,7 +12062,8 @@ var llmRuntimeCapability = {
 		status: method(z.object({}), LlmRuntimeStatusSchema, { auth: "admin" }),
 		installModel: method(z.object({ model: ManagedModelRefSchema }), z.void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "admin",
+			timeoutMs: AI_MODEL_INSTALL_TIMEOUT_MS
 		}),
 		deleteModel: method(z.object({ file: z.string() }), z.void(), {
 			kind: "mutation",
@@ -12213,8 +12245,14 @@ var llmCapability = {
 	/** `nodeId` inputs below are DATA (the hub provider pins itself), never routing. */
 	nodeIdMode: "data",
 	methods: {
-		generate: method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }),
-		generateVision: method(GenerateVisionInputSchema, LlmGenerateResultSchema, { kind: "mutation" }),
+		generate: method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, {
+			kind: "mutation",
+			timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+		}),
+		generateVision: method(GenerateVisionInputSchema, LlmGenerateResultSchema, {
+			kind: "mutation",
+			timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+		}),
 		/**
 		* Stop a generation started with a `requestId`.
 		*
@@ -12238,7 +12276,8 @@ var llmCapability = {
 		}),
 		testProfile: method(ProfileRefInputSchema, LlmGenerateResultSchema, {
 			kind: "mutation",
-			auth: "admin"
+			auth: "admin",
+			timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 		}),
 		/** Live vendor enumeration (GET /models etc.). */
 		listModels: method(ProfileRefInputSchema, z.array(z.string())),
@@ -12803,17 +12842,6 @@ var ContainerMemoryPointSchema = z.object({
 	*/
 	gpuShmemBytes: z.number().nullable()
 }).extend({ atMs: z.number() });
-var DumpHeapSnapshotInputSchema = z.object({ 
-/** The addon whose runner should dump a heap snapshot. */
-addonId: z.string() });
-var DumpHeapSnapshotResultSchema = z.object({
-	success: z.boolean(),
-	/** Path of the written .heapsnapshot inside the runner's container/host. */
-	path: z.string().optional(),
-	/** Process pid that was signalled. */
-	pid: z.number().optional(),
-	reason: z.string().optional()
-});
 /**
 * One point of one function's series.
 *
@@ -13002,19 +13030,7 @@ var metricsProviderCapability = {
 		* agent's ring alone (`durable: false`). Empty is a legitimate answer: a
 		* node nobody has heard from has no series, and saying so is the truth.
 		*/
-		getLoadSeries: method(GetLoadSeriesInputSchema, NodeLoadSeriesSchema),
-		/**
-		* Tell the addon's forked runner to write a V8 heap snapshot to disk (via
-		* SIGUSR2 — the runner's diagnostic handler). Also logs its
-		* `process.memoryUsage()` + heap-space breakdown. Resolves the pid from
-		* `$process.list`, so it can only reach a runner this node spawned. Use
-		* for deep per-addon memory attribution; copy the returned path off the
-		* node to analyze.
-		*/
-		dumpHeapSnapshot: method(DumpHeapSnapshotInputSchema, DumpHeapSnapshotResultSchema, {
-			kind: "mutation",
-			auth: "admin"
-		})
+		getLoadSeries: method(GetLoadSeriesInputSchema, NodeLoadSeriesSchema)
 	}
 };
 var modelConvertCapability = {
@@ -17738,7 +17754,8 @@ var MediaFileKindEnum = z.enum([
 	"plateCrop",
 	"keyFrame",
 	"keyFrameSmall",
-	"thumbnailSmall"
+	"thumbnailSmall",
+	"sceneFrame"
 ]);
 /**
 * One media row ON THE WIRE: what it is, how big it is, and WHERE ITS BYTES
@@ -36842,12 +36859,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"metricsProvider.dumpHeapSnapshot": {
-		capName: "metrics-provider",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
 	"metricsProvider.getAddonStats": {
 		capName: "metrics-provider",
 		capScope: "system",

package/dist/{dist-BzPNEPHo.js → dist-DkVaJ5vG.js}

@@ -11726,6 +11726,35 @@ var filesystemBrowseCapability = {
 	}
 };
 /**
+* Transport bounds for AI capability methods.
+*
+* Its own module because `llm.cap.ts` and `llm-runtime.cap.ts` already import
+* each other: declaring the constant in either one hands the other `undefined`
+* at module-init time, and an undefined `timeoutMs` silently falls back to the
+* kernel's 60 s default — the exact failure this constant exists to prevent,
+* reintroduced invisibly. Found by the guard, not by review.
+*/
+/**
+* Ceiling for a cap method that runs inference or loads a model.
+*
+* Deliberately far above anything the AI layer itself may wait for (a summary
+* asks 180 s by default, a rule may ask 600 s), because the TRANSPORT must
+* never be the layer that gives up first: when it does, the failure is
+* reported as a transport error for a model that was still thinking, naming
+* the wrong layer and hiding the real one.
+*
+* Measured 2026-09-03: a 6-image vision request needs 44.8 s warm and ~20 s
+* more on a cold model load. With no declaration every digest failed at
+* exactly 60 s and shipped without its text.
+*
+* A ceiling, not a budget. The AI layer's own timeouts (the rule's `timeoutMs`,
+* the profile's `timeoutMs` / `firstTokenTimeoutMs`) remain the things that
+* decide when to stop, because only they can say WHY.
+*/
+var AI_CAP_TRANSPORT_TIMEOUT_MS = 6e5;
+/** A multi-gigabyte download. An hour is not generous, it is honest. */
+var AI_MODEL_INSTALL_TIMEOUT_MS = 60 * 6e4;
+/**
 * Shared LLM generate contracts — imported by BOTH `llm.cap.ts` (consumer
 * surface) and `llm-runtime.cap.ts` (node-side managed executor) so the two
 * caps stay wire-compatible without a circular cap→cap import.
@@ -12018,11 +12047,13 @@ var llmRuntimeCapability = {
 			timeoutMs: zod.z.number().int().positive().optional()
 		}), LlmGenerateResultSchema, {
 			kind: "mutation",
-			auth: "admin"
+			auth: "admin",
+			timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 		}),
 		ensureStarted: method(zod.z.object({ runtime: ManagedRuntimeConfigSchema }), LlmRuntimeStatusSchema, {
 			kind: "mutation",
-			auth: "admin"
+			auth: "admin",
+			timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 		}),
 		stop: method(zod.z.object({}), zod.z.void(), {
 			kind: "mutation",
@@ -12031,7 +12062,8 @@ var llmRuntimeCapability = {
 		status: method(zod.z.object({}), LlmRuntimeStatusSchema, { auth: "admin" }),
 		installModel: method(zod.z.object({ model: ManagedModelRefSchema }), zod.z.void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "admin",
+			timeoutMs: AI_MODEL_INSTALL_TIMEOUT_MS
 		}),
 		deleteModel: method(zod.z.object({ file: zod.z.string() }), zod.z.void(), {
 			kind: "mutation",
@@ -12213,8 +12245,14 @@ var llmCapability = {
 	/** `nodeId` inputs below are DATA (the hub provider pins itself), never routing. */
 	nodeIdMode: "data",
 	methods: {
-		generate: method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }),
-		generateVision: method(GenerateVisionInputSchema, LlmGenerateResultSchema, { kind: "mutation" }),
+		generate: method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, {
+			kind: "mutation",
+			timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+		}),
+		generateVision: method(GenerateVisionInputSchema, LlmGenerateResultSchema, {
+			kind: "mutation",
+			timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+		}),
 		/**
 		* Stop a generation started with a `requestId`.
 		*
@@ -12238,7 +12276,8 @@ var llmCapability = {
 		}),
 		testProfile: method(ProfileRefInputSchema, LlmGenerateResultSchema, {
 			kind: "mutation",
-			auth: "admin"
+			auth: "admin",
+			timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 		}),
 		/** Live vendor enumeration (GET /models etc.). */
 		listModels: method(ProfileRefInputSchema, zod.z.array(zod.z.string())),
@@ -12803,17 +12842,6 @@ var ContainerMemoryPointSchema = zod.z.object({
 	*/
 	gpuShmemBytes: zod.z.number().nullable()
 }).extend({ atMs: zod.z.number() });
-var DumpHeapSnapshotInputSchema = zod.z.object({ 
-/** The addon whose runner should dump a heap snapshot. */
-addonId: zod.z.string() });
-var DumpHeapSnapshotResultSchema = zod.z.object({
-	success: zod.z.boolean(),
-	/** Path of the written .heapsnapshot inside the runner's container/host. */
-	path: zod.z.string().optional(),
-	/** Process pid that was signalled. */
-	pid: zod.z.number().optional(),
-	reason: zod.z.string().optional()
-});
 /**
 * One point of one function's series.
 *
@@ -13002,19 +13030,7 @@ var metricsProviderCapability = {
 		* agent's ring alone (`durable: false`). Empty is a legitimate answer: a
 		* node nobody has heard from has no series, and saying so is the truth.
 		*/
-		getLoadSeries: method(GetLoadSeriesInputSchema, NodeLoadSeriesSchema),
-		/**
-		* Tell the addon's forked runner to write a V8 heap snapshot to disk (via
-		* SIGUSR2 — the runner's diagnostic handler). Also logs its
-		* `process.memoryUsage()` + heap-space breakdown. Resolves the pid from
-		* `$process.list`, so it can only reach a runner this node spawned. Use
-		* for deep per-addon memory attribution; copy the returned path off the
-		* node to analyze.
-		*/
-		dumpHeapSnapshot: method(DumpHeapSnapshotInputSchema, DumpHeapSnapshotResultSchema, {
-			kind: "mutation",
-			auth: "admin"
-		})
+		getLoadSeries: method(GetLoadSeriesInputSchema, NodeLoadSeriesSchema)
 	}
 };
 var modelConvertCapability = {
@@ -17738,7 +17754,8 @@ var MediaFileKindEnum = zod.z.enum([
 	"plateCrop",
 	"keyFrame",
 	"keyFrameSmall",
-	"thumbnailSmall"
+	"thumbnailSmall",
+	"sceneFrame"
 ]);
 /**
 * One media row ON THE WIRE: what it is, how big it is, and WHERE ITS BYTES
@@ -36842,12 +36859,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"metricsProvider.dumpHeapSnapshot": {
-		capName: "metrics-provider",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
 	"metricsProvider.getAddonStats": {
 		capName: "metrics-provider",
 		capScope: "system",

package/dist/index.d.ts

@@ -51,7 +51,7 @@ export { createEventPlaneMeter, createEventPlaneReader, diffEventPlane, EVENT_PL
 export type { SocketPeerDelta, SocketPeerSample, SocketPlaneBaseline, SocketPlaneCounters, SocketPlaneMeter, SocketPlaneReader, SocketPlaneRegistry, SocketPlaneRegistryChild, SocketPlaneSources, SocketPlaneWindow, } from './kernel/socket-plane-report.js';
 export { createSocketPlaneMeter, createSocketPlaneReader, diffSocketPlane, EMPTY_SOCKET_PLANE_BASELINE, formatSocketPlane, SOCKET_PLANE_TOP_N, } from './kernel/socket-plane-report.js';
 export type { HeapDiagnosticDeps, HeapDiagnosticRequest, HeapSpaceReader, HeapSpaceUsage, } from './kernel/heap-spaces.js';
-export { DECISIVE_HEAP_SPACES, emitHeapDiagnosticReport, formatHeapSpaces, HEAP_SPACE_REPORT_MIN_MB, heapSnapshotAuthorised, heapSpaceField, readHeapSpaces, RUNNER_HEAP_SNAPSHOT_ENV, selectReportedSpaces, } from './kernel/heap-spaces.js';
+export { DECISIVE_HEAP_SPACES, emitHeapDiagnosticReport, formatHeapSpaces, HEAP_SPACE_REPORT_MIN_MB, heapSpaceField, readHeapSpaces, selectReportedSpaces, } from './kernel/heap-spaces.js';
 export type { DeferredHeapWatchSink, HeapReclaimer, HeapReclaimOptions, HeapSample, HeapWatchProbes, HeapWatchSink, LoopDelayMeter, LoopDelaySample, RssBreakdown, RssBudgetOptions, RssBudgetState, RssGrowthShape, RunnerHeapWatchOptions, } from './kernel/heap-watch.js';
 export { buildHeapSample, createDeferredHeapWatchSink, createLoopDelayMeter, createV8Reclaimer, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, hubMainRssBudget, describeRss, nextRssBudgetState, parseRssBudgetMb, reclaimIntervalMs, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, shouldReclaim, startHeapWatch, startRunnerHeapWatch, strandedMb, ZERO_LOOP_DELAY, } from './kernel/heap-watch.js';
 export type { AddonDataPlaneFacility, DataPlaneSink, } from './kernel/moleculer/addon-data-plane-facility.js';

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-BzPNEPHo.js");
+const require_dist = require("./dist-DkVaJ5vG.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_formatter = require("./formatter-DqAKDlvN.js");
@@ -27,7 +27,7 @@ require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_file_data_plane = require("./file-data-plane-DO8KbxCe.js");
 const require_tls$1 = require("./tls-BxQlomxd.js");
-const require_manifest_system_deps = require("./manifest-system-deps-B0mzJPmb.js");
+const require_manifest_system_deps = require("./manifest-system-deps-BbB94ozU.js");
 const require_resource_monitor = require("./resource-monitor-CdnzxBLP.js");
 const require_custom_action_registry = require("./custom-action-registry-jY0NOZK8.js");
 let zod = require("zod");
@@ -95354,7 +95354,6 @@ exports.QUARANTINE_DIRNAME = QUARANTINE_DIRNAME;
 exports.RESTART_MARKER_FILE = RESTART_MARKER_FILE;
 exports.RSS_BUDGET_REANNOUNCE_MIN_MS = require_manifest_system_deps.RSS_BUDGET_REANNOUNCE_MIN_MS;
 exports.RSS_BUDGET_RELEASE_RATIO = require_manifest_system_deps.RSS_BUDGET_RELEASE_RATIO;
-exports.RUNNER_HEAP_SNAPSHOT_ENV = require_manifest_system_deps.RUNNER_HEAP_SNAPSHOT_ENV;
 exports.RUNNER_HEAP_WATCH_INTERVAL_MS = require_manifest_system_deps.RUNNER_HEAP_WATCH_INTERVAL_MS;
 exports.RUNNER_RSS_BUDGET_ENV = require_manifest_system_deps.RUNNER_RSS_BUDGET_ENV;
 exports.RUNTIME_DEFAULTS = require_dist.RUNTIME_DEFAULTS;
@@ -95545,7 +95544,6 @@ exports.getSinglePidStats = require_resource_monitor.getSinglePidStats;
 exports.getWorkerDeviceRegistry = require_manifest_system_deps.getWorkerDeviceRegistry;
 exports.hasDotNode = hasDotNode;
 exports.hashClusterSecret = hashClusterSecret;
-exports.heapSnapshotAuthorised = require_manifest_system_deps.heapSnapshotAuthorised;
 exports.heapSpaceField = require_manifest_system_deps.heapSpaceField;
 exports.hubMainRssBudget = require_manifest_system_deps.hubMainRssBudget;
 exports.installManifestNativeDeps = require_manifest_system_deps.installManifestNativeDeps;

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { $ as isArrayOutputSchema, D as addonSettingsCapability, Ft as DATAPLANE_SECRET_HEADER$1, Gt as asNumber, Ht as ReadinessTimeoutError, It as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Jt as emitDownForOwnedCaps, Kt as asString$1, Lt as DEVICE_STATUS_METHOD, Nt as errMsg$1, St as scopesAllowDeviceCap, Vt as ReadinessRegistry, Wt as asJsonObject$1, X as extractNestedAddonId, Xt as expandCapMethods, at as kebabToCamel, en as parseJsonObject, et as isCollectionArrayMethod, g as RUNTIME_DEFAULTS, gt as procedureAuthKey, in as scopeKey, it as isVoidInput, lt as logLevelAtMost, m as METHOD_ACCESS_MAP, nn as readinessKey, on as EventCategory$1, ot as lifecycleJobSchema, p as LOG_LEVEL_RANK, pt as objectInputDeclaresAddonId, qt as createEvent, rn as resolveCapMount, t as ALL_CAPABILITY_DEFINITIONS, tn as parseJsonUnknown, tt as isObjectInput, ut as looseSchema, xt as scopesAllowAddon, yt as resolveMethodAuth } from "./dist-B25PDvaS.mjs";
+import { $ as isArrayOutputSchema, D as addonSettingsCapability, Ft as DATAPLANE_SECRET_HEADER$1, Gt as asNumber, Ht as ReadinessTimeoutError, It as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Jt as emitDownForOwnedCaps, Kt as asString$1, Lt as DEVICE_STATUS_METHOD, Nt as errMsg$1, St as scopesAllowDeviceCap, Vt as ReadinessRegistry, Wt as asJsonObject$1, X as extractNestedAddonId, Xt as expandCapMethods, at as kebabToCamel, en as parseJsonObject, et as isCollectionArrayMethod, g as RUNTIME_DEFAULTS, gt as procedureAuthKey, in as scopeKey, it as isVoidInput, lt as logLevelAtMost, m as METHOD_ACCESS_MAP, nn as readinessKey, on as EventCategory$1, ot as lifecycleJobSchema, p as LOG_LEVEL_RANK, pt as objectInputDeclaresAddonId, qt as createEvent, rn as resolveCapMount, t as ALL_CAPABILITY_DEFINITIONS, tn as parseJsonUnknown, tt as isObjectInput, ut as looseSchema, xt as scopesAllowAddon, yt as resolveMethodAuth } from "./dist-C-8k9Z9W.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";
@@ -26,7 +26,7 @@ import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
 import { a as parseTokenizedUrl, c as collectModelFiles, d as downloadModel, f as ensureModel, h as isModelDownloaded, i as parseRangeHeader, l as deleteModelFromDisk, m as getModelFilePath, n as contentTypeFor, o as resolveFilePath, p as fetchJson, r as createAuthenticatedFileServer, s as ModelDownloadService, t as createFileDataPlaneHandler, u as downloadFile } from "./file-data-plane-BhKdxJgf.mjs";
 import { C as registerLanHttpHandler, S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, b as bindPendingLanHttp, c as loadTlsCert, d as collectCertIdentity, f as CA_VALIDITY_DAYS, g as evaluateExistingCert, h as SERVER_AUTH_OID, i as writeExtraSans, l as reissueTlsLeaf, m as MAX_LEAF_VALIDITY_DAYS, n as readTlsAccessStatus, o as validateUploadedTls, p as LEAF_RENEWAL_WINDOW_DAYS, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, u as CA_COMMON_NAME, v as allFamiliesListenHost, x as closeLanHttp, y as applyLanHttp } from "./tls-DOTmtLCW.mjs";
-import { $ as buildUdsNativeCapProxy, $t as emitHeapDiagnosticReport, A as createUdsLoggerWithControl, At as HUB_MAIN_RSS_BUDGET_MB, B as readMoleculerFanoutMode, Bt as createV8Reclaimer, C as ipcParentLink, Ct as createAddonDataPlaneFacility, D as createUdsEventBus, Dt as HEAP_WATCH_INTERVAL_MS, E as createUdsEventBridge, Et as HEAP_RECLAIM_TRIGGER_MB, F as AGENT_CAP_FWD_SERVICE, Ft as RUNNER_RSS_BUDGET_ENV, G as createLocalTransport, Gt as reclaimIntervalMs, H as PARENT_ROUTED_PROVIDER_ADDON_ID, Ht as hubMainRssBudget, I as CapRouteResolver, It as ZERO_LOOP_DELAY, J as SocketChannel, Jt as startRunnerHeapWatch, K as UdsLocalTransportClient, Kt as shouldReclaim, L as CapRouteError, Lt as buildHeapSample, M as LocalChildRegistry, Mt as RSS_BUDGET_REANNOUNCE_MIN_MS, N as UDS_NO_ROUTE_PREFIX, Nt as RSS_BUDGET_RELEASE_RATIO, O as udsChildLogToWorkerEntry, Ot as HEAP_WATCH_WARN_RATIO, P as AGENT_CAP_FWD_ACTION, Pt as RUNNER_HEAP_WATCH_INTERVAL_MS, Q as buildNativeCapProxy, Qt as RUNNER_HEAP_SNAPSHOT_ENV, R as classifyCapRoute, Rt as createDeferredHeapWatchSink, S as buildLinkChain, St as runNpm, T as createParentUnownedCallHandler, Tt as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, U as __resetCapUsageRegistryForTests, Ut as nextRssBudgetState, V as CapUsageRegistry, Vt as describeRss, W as getCapUsageRegistry, Wt as parseRssBudgetMb, X as FrameDecoder, Xt as DECISIVE_HEAP_SPACES, Y as localEndpointPath, Yt as strandedMb, Z as encodeFrame, Zt as HEAP_SPACE_REPORT_MIN_MB, _ as AddonDepsManager, _n as EVENT_PLANE_TOP_N, _t as CapabilityUnavailableError, a as createUdsAddonContext, an as EMPTY_SOCKET_PLANE_BASELINE, at as createAddonService, b as brokerCallForCap, bn as diffEventPlane, bt as resolveAddonClass, c as getOrInitReadinessRegistryForClient, cn as createSocketPlaneReader, ct as capActionName, d as clusterEventTopic, dn as EMPTY_SOCKET_DIRECTION, dt as capServiceName, en as formatHeapSpaces, et as createBrokerDeviceManagerApi, f as getBrokerEventBus, fn as createSocketDirectionCounters, ft as parseCapAction, g as subscribePassthrough, gn as socketDirectionMessages, gt as CapabilityHandle, h as setNodeEventInterest, hn as socketDirectionBytes, ht as DeviceRegistry, i as createAddonContext, in as selectReportedSpaces, j as LocalChildClient, jt as HUB_RSS_BUDGET_ENV, k as createUdsLogger, kt as HUB_MAIN_HEAP_WATCH_LABEL, l as setHubConnected, ln as diffSocketPlane, lt as capActionSuffix, m as registerEventBusService, mn as sampleSocketDirection, mt as serializeTypedArrays, n as installManifestPythonDeps, nn as heapSpaceField, o as getWorkerDeviceRegistry, on as SOCKET_PLANE_TOP_N, ot as validateProviderRegistrations, p as getMoleculerEventStats, pn as recordSocketFrame, pt as deserializeTypedArrays, q as UdsLocalTransportServer, qt as startHeapWatch, r as adaptBrokerToCluster, rn as readHeapSpaces, rt as mountNativeCapService, s as getOrInitReadinessRegistry, sn as createSocketPlaneMeter, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestSystemDeps, tn as heapSnapshotAuthorised, u as EVENT_TOPIC_PREFIX, un as formatSocketPlane, ut as capBareAction, v as createKernelHwAccel, vn as createEventPlaneMeter, vt as copyBundledNativeModules, w as localProviderLink, wt as HEAP_RECLAIM_MIN_INTERVAL_MS, x as brokerTransportLink, xn as formatEventPlane, xt as resolveNpmInvocation, y as resolveHwAccel, yn as createEventPlaneReader, yt as installManifestNativeDeps, z as callWithServiceDiscovery, zt as createLoopDelayMeter } from "./manifest-system-deps-Pw8iaY5X.mjs";
+import { $ as buildUdsNativeCapProxy, $t as formatHeapSpaces, A as createUdsLoggerWithControl, At as HUB_MAIN_RSS_BUDGET_MB, B as readMoleculerFanoutMode, Bt as createV8Reclaimer, C as ipcParentLink, Ct as createAddonDataPlaneFacility, D as createUdsEventBus, Dt as HEAP_WATCH_INTERVAL_MS, E as createUdsEventBridge, Et as HEAP_RECLAIM_TRIGGER_MB, F as AGENT_CAP_FWD_SERVICE, Ft as RUNNER_RSS_BUDGET_ENV, G as createLocalTransport, Gt as reclaimIntervalMs, H as PARENT_ROUTED_PROVIDER_ADDON_ID, Ht as hubMainRssBudget, I as CapRouteResolver, It as ZERO_LOOP_DELAY, J as SocketChannel, Jt as startRunnerHeapWatch, K as UdsLocalTransportClient, Kt as shouldReclaim, L as CapRouteError, Lt as buildHeapSample, M as LocalChildRegistry, Mt as RSS_BUDGET_REANNOUNCE_MIN_MS, N as UDS_NO_ROUTE_PREFIX, Nt as RSS_BUDGET_RELEASE_RATIO, O as udsChildLogToWorkerEntry, Ot as HEAP_WATCH_WARN_RATIO, P as AGENT_CAP_FWD_ACTION, Pt as RUNNER_HEAP_WATCH_INTERVAL_MS, Q as buildNativeCapProxy, Qt as emitHeapDiagnosticReport, R as classifyCapRoute, Rt as createDeferredHeapWatchSink, S as buildLinkChain, St as runNpm, T as createParentUnownedCallHandler, Tt as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, U as __resetCapUsageRegistryForTests, Ut as nextRssBudgetState, V as CapUsageRegistry, Vt as describeRss, W as getCapUsageRegistry, Wt as parseRssBudgetMb, X as FrameDecoder, Xt as DECISIVE_HEAP_SPACES, Y as localEndpointPath, Yt as strandedMb, Z as encodeFrame, Zt as HEAP_SPACE_REPORT_MIN_MB, _ as AddonDepsManager, _n as createEventPlaneReader, _t as CapabilityUnavailableError, a as createUdsAddonContext, an as createSocketPlaneMeter, at as createAddonService, b as brokerCallForCap, bt as resolveAddonClass, c as getOrInitReadinessRegistryForClient, cn as formatSocketPlane, ct as capActionName, d as clusterEventTopic, dn as recordSocketFrame, dt as capServiceName, en as heapSpaceField, et as createBrokerDeviceManagerApi, f as getBrokerEventBus, fn as sampleSocketDirection, ft as parseCapAction, g as subscribePassthrough, gn as createEventPlaneMeter, gt as CapabilityHandle, h as setNodeEventInterest, hn as EVENT_PLANE_TOP_N, ht as DeviceRegistry, i as createAddonContext, in as SOCKET_PLANE_TOP_N, j as LocalChildClient, jt as HUB_RSS_BUDGET_ENV, k as createUdsLogger, kt as HUB_MAIN_HEAP_WATCH_LABEL, l as setHubConnected, ln as EMPTY_SOCKET_DIRECTION, lt as capActionSuffix, m as registerEventBusService, mn as socketDirectionMessages, mt as serializeTypedArrays, n as installManifestPythonDeps, nn as selectReportedSpaces, o as getWorkerDeviceRegistry, on as createSocketPlaneReader, ot as validateProviderRegistrations, p as getMoleculerEventStats, pn as socketDirectionBytes, pt as deserializeTypedArrays, q as UdsLocalTransportServer, qt as startHeapWatch, r as adaptBrokerToCluster, rn as EMPTY_SOCKET_PLANE_BASELINE, rt as mountNativeCapService, s as getOrInitReadinessRegistry, sn as diffSocketPlane, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestSystemDeps, tn as readHeapSpaces, u as EVENT_TOPIC_PREFIX, un as createSocketDirectionCounters, ut as capBareAction, v as createKernelHwAccel, vn as diffEventPlane, vt as copyBundledNativeModules, w as localProviderLink, wt as HEAP_RECLAIM_MIN_INTERVAL_MS, x as brokerTransportLink, xt as resolveNpmInvocation, y as resolveHwAccel, yn as formatEventPlane, yt as installManifestNativeDeps, z as callWithServiceDiscovery, zt as createLoopDelayMeter } from "./manifest-system-deps-4NeY_8iQ.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-BWmQ5i-o.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-F__gp_VX.mjs";
 import { z } from "zod";
@@ -95238,4 +95238,4 @@ var LifecycleJobEngine = class {
 	}
 };
 //#endregion
-export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CA_COMMON_NAME, CA_VALIDITY_DAYS, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DECISIVE_HEAP_SPACES, DEFAULT_DATA_PATH, DEFAULT_LAN_HTTP_PORT, DEFAULT_LOG_LEVEL, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EMPTY_SOCKET_DIRECTION, EMPTY_SOCKET_PLANE_BASELINE, EVENT_PLANE_TOP_N, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_SPACE_REPORT_MIN_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LEAF_RENEWAL_WINDOW_DAYS, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LoggingGate, LokiDestination, LokiLoggingAddon, MAX_LEAF_VALIDITY_DAYS, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PARENT_ROUTED_PROVIDER_ADDON_ID, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, QUARANTINE_DIRNAME, RESTART_MARKER_FILE, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_SNAPSHOT_ENV, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, SERVER_AUTH_OID, SOCKET_PLANE_TOP_N, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, ZERO_LOOP_DELAY, __resetCapUsageRegistryForTests, __resetLoggingGateForTests, adaptBrokerToCluster, addonSettingsCapability, allFamiliesListenHost, applyLanHttp, bindPendingLanHttp, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, canServeDataPlane, capActionName, capActionSuffix, capBareAction, capServiceName, classifyAddonDir, classifyCapRoute, clearPendingRestart, closeLanHttp, clusterEventTopic, clusterSecretMatches, collectCertIdentity, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createDeferredHeapWatchSink, createDoorSettingsView, createEventPlaneMeter, createEventPlaneReader, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createKernelHwAccel, createLocalTransport, createLoopDelayMeter, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createSocketDirectionCounters, createSocketPlaneMeter, createSocketPlaneReader, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, describeRss, detectWorkspacePackagesDir, diffEventPlane, diffSocketPlane, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, emitHeapDiagnosticReport, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, evaluateExistingCert, expandCapMethods, fetchJson, findInPath, formatEventPlane, formatHeapSpaces, formatLogLine, formatSocketPlane, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getLoggingGate, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, heapSnapshotAuthorised, heapSpaceField, hubMainRssBudget, installManifestNativeDeps, installManifestPythonDeps, installManifestSystemDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcParentLink, isAddonDeploySource, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, isolatedBuiltinPhase, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, nextRssBudgetState, parseCapAction, parseRangeHeader, parseRssBudgetMb, parseTokenizedUrl, partitionIsolatedBuiltinIds, proxyToUpstream, quarantineAddonResidue, readExtraSans, readHeapSpaces, readLanHttpState, readMoleculerFanoutMode, readPendingRestart, readTlsAccessStatus, readTlsMode, readinessKey, reclaimIntervalMs, recordSocketFrame, registerEventBusService, registerLanHttpHandler, reissueTlsLeaf, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runHubAddonBoot, runNpm, sampleSocketDirection, scheduleSelfRestart, scopeKey, scopesAllowAddon, scopesAllowDeviceCap, selectAddonResidue, selectReportedSpaces, serializeTypedArrays, setHubConnected, setNodeEventInterest, shouldReclaim, socketDirectionBytes, socketDirectionMessages, startHeapWatch, startRunnerHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, validateUploadedTls, waitUntilReady, writeExtraSans, writePendingRestart, writeTlsMode };
+export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CA_COMMON_NAME, CA_VALIDITY_DAYS, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DECISIVE_HEAP_SPACES, DEFAULT_DATA_PATH, DEFAULT_LAN_HTTP_PORT, DEFAULT_LOG_LEVEL, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EMPTY_SOCKET_DIRECTION, EMPTY_SOCKET_PLANE_BASELINE, EVENT_PLANE_TOP_N, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_SPACE_REPORT_MIN_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LEAF_RENEWAL_WINDOW_DAYS, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LoggingGate, LokiDestination, LokiLoggingAddon, MAX_LEAF_VALIDITY_DAYS, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PARENT_ROUTED_PROVIDER_ADDON_ID, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, QUARANTINE_DIRNAME, RESTART_MARKER_FILE, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, SERVER_AUTH_OID, SOCKET_PLANE_TOP_N, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, ZERO_LOOP_DELAY, __resetCapUsageRegistryForTests, __resetLoggingGateForTests, adaptBrokerToCluster, addonSettingsCapability, allFamiliesListenHost, applyLanHttp, bindPendingLanHttp, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, canServeDataPlane, capActionName, capActionSuffix, capBareAction, capServiceName, classifyAddonDir, classifyCapRoute, clearPendingRestart, closeLanHttp, clusterEventTopic, clusterSecretMatches, collectCertIdentity, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createDeferredHeapWatchSink, createDoorSettingsView, createEventPlaneMeter, createEventPlaneReader, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createKernelHwAccel, createLocalTransport, createLoopDelayMeter, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createSocketDirectionCounters, createSocketPlaneMeter, createSocketPlaneReader, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, describeRss, detectWorkspacePackagesDir, diffEventPlane, diffSocketPlane, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, emitHeapDiagnosticReport, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, evaluateExistingCert, expandCapMethods, fetchJson, findInPath, formatEventPlane, formatHeapSpaces, formatLogLine, formatSocketPlane, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getLoggingGate, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, heapSpaceField, hubMainRssBudget, installManifestNativeDeps, installManifestPythonDeps, installManifestSystemDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcParentLink, isAddonDeploySource, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, isolatedBuiltinPhase, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, nextRssBudgetState, parseCapAction, parseRangeHeader, parseRssBudgetMb, parseTokenizedUrl, partitionIsolatedBuiltinIds, proxyToUpstream, quarantineAddonResidue, readExtraSans, readHeapSpaces, readLanHttpState, readMoleculerFanoutMode, readPendingRestart, readTlsAccessStatus, readTlsMode, readinessKey, reclaimIntervalMs, recordSocketFrame, registerEventBusService, registerLanHttpHandler, reissueTlsLeaf, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runHubAddonBoot, runNpm, sampleSocketDirection, scheduleSelfRestart, scopeKey, scopesAllowAddon, scopesAllowDeviceCap, selectAddonResidue, selectReportedSpaces, serializeTypedArrays, setHubConnected, setNodeEventInterest, shouldReclaim, socketDirectionBytes, socketDirectionMessages, startHeapWatch, startRunnerHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, validateUploadedTls, waitUntilReady, writeExtraSans, writePendingRestart, writeTlsMode };

package/dist/kernel/heap-allocation-sample.d.ts

@@ -0,0 +1,107 @@
+/**
+ * WHERE the bytes come from, without stopping the process.
+ *
+ * A heap SNAPSHOT answers "what is retained" and costs a stop-the-world walk
+ * plus a multi-gigabyte write. On this hub that took the machine down twice;
+ * the second attempt did not even finish — it left a 0-byte file and an
+ * unresponsive host that had to be rebooted. The remotely-triggerable command
+ * is gone (`scripts/check-no-heap-dump-command.ts`).
+ *
+ * V8's SAMPLING heap profiler answers a cheaper, different question: which
+ * allocation SITES the bytes came from, statistically, with no pause and
+ * nothing written. Measured locally: 51 ms for a window that allocated 200 000
+ * objects.
+ *
+ * ## What this is NOT
+ *
+ * It is not retention analysis. It says where bytes were BORN, not what is
+ * holding them alive, and a leak is about the second. It is still the right
+ * first instrument for the recorder's ~900 MB of large objects that "no
+ * allocation site in its tree can produce" — because naming the sites is
+ * exactly the claim under test, and if the sites turn out to be ordinary, the
+ * retention question is the one that survives.
+ *
+ * This module is the PURE half: it folds the profile V8 hands back. The
+ * sampling belongs to the caller, so the fold is testable without a profiler.
+ */
+/** One frame as the inspector protocol reports it. */
+export interface AllocationCallFrame {
+    readonly functionName: string;
+    readonly url: string;
+    readonly lineNumber: number;
+}
+/** One node of `HeapProfiler.stopSampling`'s profile tree. */
+export interface AllocationProfileNode {
+    readonly selfSize: number;
+    readonly callFrame: AllocationCallFrame;
+    readonly children?: readonly AllocationProfileNode[];
+}
+export interface AllocationSite {
+    readonly functionName: string;
+    /** `file.js:line` — what a human reads in a log line. */
+    readonly site: string;
+    readonly bytes: number;
+}
+/**
+ * Fold the tree into the biggest allocation sites.
+ *
+ * Sites are SUMMED across call paths: one site reached from two callers is one
+ * site, and reporting it twice at half the size is how a dominant allocator
+ * hides in a long tail. Identity is (function, url, line) — the same line of
+ * two files is two sites.
+ */
+export declare function summariseAllocationProfile(head: AllocationProfileNode, limit: number): readonly AllocationSite[];
+/**
+ * The inspector session slice this needs. Injected so the sampler is testable
+ * without an inspector, and so nothing here reaches for a global.
+ */
+export interface HeapProfilerSession {
+    connect: () => void;
+    disconnect: () => void;
+    post: (method: string, paramsOrCb: unknown, maybeCb?: unknown) => void;
+}
+export interface SampleHeapAllocationsInput {
+    readonly session: HeapProfilerSession;
+    /** How long to sample. Bounded by the caller; this module never loops. */
+    readonly durationMs: number;
+    readonly limit: number;
+    readonly wait: (ms: number) => Promise<void>;
+    /** Bytes between samples. Larger = cheaper and coarser. */
+    readonly samplingInterval?: number;
+}
+/**
+ * Sample allocations for a bounded window and answer with the top sites.
+ *
+ * Writes NOTHING and pauses nothing. The profiler is stopped and the session
+ * disconnected in a `finally`, because a sampler left running is a tax on the
+ * process that outlives whoever enabled it — and the failure that made this
+ * module necessary was a diagnostic nobody could turn off from outside.
+ */
+export declare function sampleHeapAllocations(input: SampleHeapAllocationsInput): Promise<readonly AllocationSite[]>;
+/**
+ * Per-runner opt-in for allocation sampling.
+ *
+ * Explicit `'on'` only — the same discipline the snapshot flag had. The
+ * DIFFERENCE is what it authorises: that flag allowed a stop-the-world walk and
+ * a multi-gigabyte write, so leaving it on in production (which is exactly what
+ * happened) was an outage waiting for a signal. This one allows ~50 ms of
+ * statistical sampling and one log line, so a runner left with it on is simply
+ * a runner that reports where its bytes come from.
+ */
+export declare const RUNNER_ALLOC_SAMPLE_ENV = "CAMSTACK_RUNNER_ALLOC_SAMPLE";
+export declare function allocationSamplingEnabled(env?: NodeJS.ProcessEnv): boolean;
+/** Sample on every Nth heartbeat — one sample per ~10 minutes at a 60 s beat. */
+export declare const ALLOCATION_SAMPLE_EVERY_N_BEATS = 10;
+/** How long one sample runs. Short enough that two can never overlap. */
+export declare const ALLOCATION_SAMPLE_WINDOW_MS = 5000;
+/** How many sites one log line carries. */
+export declare const ALLOCATION_SAMPLE_TOP_N = 8;
+/**
+ * Is this the beat that samples?
+ *
+ * Beat 0 never samples: a runner that has just booted has allocated nothing
+ * worth ranking. A non-positive cadence samples NEVER rather than always — a
+ * misconfigured `0` must not turn a diagnostic into a permanent load, which is
+ * the failure mode this whole module exists because of.
+ */
+export declare function shouldSampleAllocations(beat: number, everyN: number): boolean;

package/dist/kernel/heap-spaces.d.ts

@@ -97,7 +97,6 @@ export declare function formatHeapSpaces(spaces: readonly HeapSpaceUsage[], minM
  * seconds. The per-space breakdown is ~1.2 µs and changes nothing. Welding them
  * to one signal priced the free answer at the cost of the expensive one.
  */
-export declare const RUNNER_HEAP_SNAPSHOT_ENV = "CAMSTACK_RUNNER_HEAP_SNAPSHOT";
 /**
  * Whether the operator has authorised the snapshot half of SIGUSR2.
  *
@@ -105,26 +104,22 @@ export declare const RUNNER_HEAP_SNAPSHOT_ENV = "CAMSTACK_RUNNER_HEAP_SNAPSHOT";
  * authorisation: a multi-GB stop-the-world write must never be reachable by a
  * value someone set for a different purpose.
  */
-export declare function heapSnapshotAuthorised(env?: NodeJS.ProcessEnv): boolean;
 /** What a diagnostic report is ABOUT. */
 export interface HeapDiagnosticRequest {
     /** The runner's nodeId, so the line groups with its `[mem]` heartbeat. */
     readonly label: string;
     readonly addons: readonly string[];
     readonly sink: HeapWatchSink;
-    /** Where a snapshot would be written, if one is authorised. */
-    readonly snapshotPath: string;
 }
 /** Everything the report READS. Injected so the split itself is testable. */
 export interface HeapDiagnosticDeps {
     readonly readMemory: () => NodeJS.MemoryUsage;
     readonly readSpaces: HeapSpaceReader;
-    readonly writeSnapshot: (path: string) => void;
     readonly env: NodeJS.ProcessEnv;
 }
 /**
  * The SIGUSR2 report — memory + the FULL per-space breakdown, always; the
- * snapshot only when {@link heapSnapshotAuthorised}.
+ * snapshot NEVER — see the note in the body.
  *
  * The breakdown here keeps every non-empty space at 0.1 MB, unlike the
  * heartbeat's filtered whole-MB pair: this is a hand-fired diagnostic read once

package/dist/{manifest-system-deps-Pw8iaY5X.mjs → manifest-system-deps-4NeY_8iQ.mjs}

@@ -1,4 +1,4 @@
-import "./dist-B25PDvaS.mjs";
+import "./dist-C-8k9Z9W.mjs";
 import "./hub-cap-forward-BdT320dq.mjs";
 import * as crypto$1 from "node:crypto";
 import { randomBytes, randomUUID } from "node:crypto";
@@ -576,37 +576,14 @@ function formatHeapSpaces(spaces, minMb = 32) {
 	if (selected.length === 0) return "";
 	return ` ${selected.map((s) => `${heapSpaceField(s.name)}=${mb(s.usedBytes)}MB`).join(" ")}`;
 }
-/**
-* Env var that authorises a heap snapshot on SIGUSR2.
-*
-* A snapshot is an admin mutation on a production hub: `writeHeapSnapshot`
-* streams a file the size of the heap to `/tmp` and stops the world while it
-* walks it — on the recorder that is a multi-GB file and a stall measured in
-* seconds. The per-space breakdown is ~1.2 µs and changes nothing. Welding them
-* to one signal priced the free answer at the cost of the expensive one.
-*/
-var RUNNER_HEAP_SNAPSHOT_ENV = "CAMSTACK_RUNNER_HEAP_SNAPSHOT";
-/**
-* Whether the operator has authorised the snapshot half of SIGUSR2.
-*
-* Explicit `'on'` only. Anything else — unset, empty, `'true'`, `'1'` — is NOT
-* authorisation: a multi-GB stop-the-world write must never be reachable by a
-* value someone set for a different purpose.
-*/
-function heapSnapshotAuthorised(env = process.env) {
-	return env[RUNNER_HEAP_SNAPSHOT_ENV] === "on";
-}
 var defaultDeps = {
 	readMemory: () => process.memoryUsage(),
 	readSpaces: readHeapSpaces,
-	writeSnapshot: (path) => {
-		v8.writeHeapSnapshot(path);
-	},
 	env: process.env
 };
 /**
 * The SIGUSR2 report — memory + the FULL per-space breakdown, always; the
-* snapshot only when {@link heapSnapshotAuthorised}.
+* snapshot NEVER — see the note in the body.
 *
 * The breakdown here keeps every non-empty space at 0.1 MB, unlike the
 * heartbeat's filtered whole-MB pair: this is a hand-fired diagnostic read once
@@ -625,16 +602,6 @@ function emitHeapDiagnosticReport(request, deps = defaultDeps) {
 	} catch (error) {
 		request.sink.warn(`[mem] node="${request.label}" space report failed: ${error instanceof Error ? error.message : String(error)}`);
 	}
-	if (!heapSnapshotAuthorised(deps.env)) {
-		request.sink.info(`[mem] node="${request.label}" heap snapshot NOT taken — it is an admin mutation (a multi-GB write and a stop-the-world walk of the heap). The per-space breakdown above is the free half and needs no authorisation. Set ${RUNNER_HEAP_SNAPSHOT_ENV}=on for this runner and signal again to take one.`);
-		return;
-	}
-	try {
-		deps.writeSnapshot(request.snapshotPath);
-		request.sink.info(`[mem] node="${request.label}" heap snapshot written -> ${request.snapshotPath}`);
-	} catch (error) {
-		request.sink.warn(`[mem] node="${request.label}" snapshot failed: ${error instanceof Error ? error.message : String(error)}`);
-	}
 }
 //#endregion
 //#region src/kernel/heap-watch.ts
@@ -9968,4 +9935,4 @@ async function defaultRun(command, args) {
 	await execFileAsync(command, [...args], { timeout: INSTALL_TIMEOUT_MS });
 }
 //#endregion
-export { buildUdsNativeCapProxy as $, emitHeapDiagnosticReport as $t, createUdsLoggerWithControl as A, HUB_MAIN_RSS_BUDGET_MB as At, readMoleculerFanoutMode as B, createV8Reclaimer as Bt, ipcParentLink as C, createAddonDataPlaneFacility as Ct, createUdsEventBus as D, HEAP_WATCH_INTERVAL_MS as Dt, createUdsEventBridge as E, HEAP_RECLAIM_TRIGGER_MB as Et, AGENT_CAP_FWD_SERVICE as F, RUNNER_RSS_BUDGET_ENV as Ft, createLocalTransport as G, reclaimIntervalMs as Gt, PARENT_ROUTED_PROVIDER_ADDON_ID as H, hubMainRssBudget as Ht, CapRouteResolver as I, ZERO_LOOP_DELAY as It, SocketChannel as J, startRunnerHeapWatch as Jt, UdsLocalTransportClient as K, shouldReclaim as Kt, CapRouteError as L, buildHeapSample as Lt, LocalChildRegistry as M, RSS_BUDGET_REANNOUNCE_MIN_MS as Mt, UDS_NO_ROUTE_PREFIX as N, RSS_BUDGET_RELEASE_RATIO as Nt, udsChildLogToWorkerEntry as O, HEAP_WATCH_WARN_RATIO as Ot, AGENT_CAP_FWD_ACTION as P, RUNNER_HEAP_WATCH_INTERVAL_MS as Pt, buildNativeCapProxy as Q, RUNNER_HEAP_SNAPSHOT_ENV as Qt, classifyCapRoute as R, createDeferredHeapWatchSink as Rt, buildLinkChain as S, runNpm as St, createParentUnownedCallHandler as T, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS as Tt, __resetCapUsageRegistryForTests as U, nextRssBudgetState as Ut, CapUsageRegistry as V, describeRss as Vt, getCapUsageRegistry as W, parseRssBudgetMb as Wt, FrameDecoder as X, DECISIVE_HEAP_SPACES as Xt, localEndpointPath as Y, strandedMb as Yt, encodeFrame as Z, HEAP_SPACE_REPORT_MIN_MB as Zt, AddonDepsManager as _, EVENT_PLANE_TOP_N as _n, CapabilityUnavailableError as _t, createUdsAddonContext as a, EMPTY_SOCKET_PLANE_BASELINE as an, createAddonService as at, brokerCallForCap as b, diffEventPlane as bn, resolveAddonClass as bt, getOrInitReadinessRegistryForClient as c, createSocketPlaneReader as cn, capActionName as ct, clusterEventTopic as d, EMPTY_SOCKET_DIRECTION as dn, capServiceName as dt, formatHeapSpaces as en, createBrokerDeviceManagerApi as et, getBrokerEventBus as f, createSocketDirectionCounters as fn, parseCapAction as ft, subscribePassthrough as g, socketDirectionMessages as gn, CapabilityHandle as gt, setNodeEventInterest as h, socketDirectionBytes as hn, DeviceRegistry as ht, createAddonContext as i, selectReportedSpaces as in, setWorkerNativeCapsChangeListener as it, LocalChildClient as j, HUB_RSS_BUDGET_ENV as jt, createUdsLogger as k, HUB_MAIN_HEAP_WATCH_LABEL as kt, setHubConnected as l, diffSocketPlane as ln, capActionSuffix as lt, registerEventBusService as m, sampleSocketDirection as mn, serializeTypedArrays as mt, installManifestPythonDeps as n, heapSpaceField as nn, getWorkerNativeCapSnapshot as nt, getWorkerDeviceRegistry as o, SOCKET_PLANE_TOP_N as on, validateProviderRegistrations as ot, getMoleculerEventStats as p, recordSocketFrame as pn, deserializeTypedArrays as pt, UdsLocalTransportServer as q, startHeapWatch as qt, adaptBrokerToCluster as r, readHeapSpaces as rn, mountNativeCapService as rt, getOrInitReadinessRegistry as s, createSocketPlaneMeter as sn, NATIVE_PROVIDER_SERVICE_INFIX as st, installManifestSystemDeps as t, heapSnapshotAuthorised as tn, getWorkerNativeCapProvider as tt, EVENT_TOPIC_PREFIX as u, formatSocketPlane as un, capBareAction as ut, createKernelHwAccel as v, createEventPlaneMeter as vn, copyBundledNativeModules as vt, localProviderLink as w, HEAP_RECLAIM_MIN_INTERVAL_MS as wt, brokerTransportLink as x, formatEventPlane as xn, resolveNpmInvocation as xt, resolveHwAccel as y, createEventPlaneReader as yn, installManifestNativeDeps as yt, callWithServiceDiscovery as z, createLoopDelayMeter as zt };
+export { buildUdsNativeCapProxy as $, formatHeapSpaces as $t, createUdsLoggerWithControl as A, HUB_MAIN_RSS_BUDGET_MB as At, readMoleculerFanoutMode as B, createV8Reclaimer as Bt, ipcParentLink as C, createAddonDataPlaneFacility as Ct, createUdsEventBus as D, HEAP_WATCH_INTERVAL_MS as Dt, createUdsEventBridge as E, HEAP_RECLAIM_TRIGGER_MB as Et, AGENT_CAP_FWD_SERVICE as F, RUNNER_RSS_BUDGET_ENV as Ft, createLocalTransport as G, reclaimIntervalMs as Gt, PARENT_ROUTED_PROVIDER_ADDON_ID as H, hubMainRssBudget as Ht, CapRouteResolver as I, ZERO_LOOP_DELAY as It, SocketChannel as J, startRunnerHeapWatch as Jt, UdsLocalTransportClient as K, shouldReclaim as Kt, CapRouteError as L, buildHeapSample as Lt, LocalChildRegistry as M, RSS_BUDGET_REANNOUNCE_MIN_MS as Mt, UDS_NO_ROUTE_PREFIX as N, RSS_BUDGET_RELEASE_RATIO as Nt, udsChildLogToWorkerEntry as O, HEAP_WATCH_WARN_RATIO as Ot, AGENT_CAP_FWD_ACTION as P, RUNNER_HEAP_WATCH_INTERVAL_MS as Pt, buildNativeCapProxy as Q, emitHeapDiagnosticReport as Qt, classifyCapRoute as R, createDeferredHeapWatchSink as Rt, buildLinkChain as S, runNpm as St, createParentUnownedCallHandler as T, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS as Tt, __resetCapUsageRegistryForTests as U, nextRssBudgetState as Ut, CapUsageRegistry as V, describeRss as Vt, getCapUsageRegistry as W, parseRssBudgetMb as Wt, FrameDecoder as X, DECISIVE_HEAP_SPACES as Xt, localEndpointPath as Y, strandedMb as Yt, encodeFrame as Z, HEAP_SPACE_REPORT_MIN_MB as Zt, AddonDepsManager as _, createEventPlaneReader as _n, CapabilityUnavailableError as _t, createUdsAddonContext as a, createSocketPlaneMeter as an, createAddonService as at, brokerCallForCap as b, resolveAddonClass as bt, getOrInitReadinessRegistryForClient as c, formatSocketPlane as cn, capActionName as ct, clusterEventTopic as d, recordSocketFrame as dn, capServiceName as dt, heapSpaceField as en, createBrokerDeviceManagerApi as et, getBrokerEventBus as f, sampleSocketDirection as fn, parseCapAction as ft, subscribePassthrough as g, createEventPlaneMeter as gn, CapabilityHandle as gt, setNodeEventInterest as h, EVENT_PLANE_TOP_N as hn, DeviceRegistry as ht, createAddonContext as i, SOCKET_PLANE_TOP_N as in, setWorkerNativeCapsChangeListener as it, LocalChildClient as j, HUB_RSS_BUDGET_ENV as jt, createUdsLogger as k, HUB_MAIN_HEAP_WATCH_LABEL as kt, setHubConnected as l, EMPTY_SOCKET_DIRECTION as ln, capActionSuffix as lt, registerEventBusService as m, socketDirectionMessages as mn, serializeTypedArrays as mt, installManifestPythonDeps as n, selectReportedSpaces as nn, getWorkerNativeCapSnapshot as nt, getWorkerDeviceRegistry as o, createSocketPlaneReader as on, validateProviderRegistrations as ot, getMoleculerEventStats as p, socketDirectionBytes as pn, deserializeTypedArrays as pt, UdsLocalTransportServer as q, startHeapWatch as qt, adaptBrokerToCluster as r, EMPTY_SOCKET_PLANE_BASELINE as rn, mountNativeCapService as rt, getOrInitReadinessRegistry as s, diffSocketPlane as sn, NATIVE_PROVIDER_SERVICE_INFIX as st, installManifestSystemDeps as t, readHeapSpaces as tn, getWorkerNativeCapProvider as tt, EVENT_TOPIC_PREFIX as u, createSocketDirectionCounters as un, capBareAction as ut, createKernelHwAccel as v, diffEventPlane as vn, copyBundledNativeModules as vt, localProviderLink as w, HEAP_RECLAIM_MIN_INTERVAL_MS as wt, brokerTransportLink as x, resolveNpmInvocation as xt, resolveHwAccel as y, formatEventPlane as yn, installManifestNativeDeps as yt, callWithServiceDiscovery as z, createLoopDelayMeter as zt };