@camstack/system 1.2.176 → 1.2.178

package/dist/{dist-KItAWyKG.js → dist-C0IXtI_E.js}

@@ -12842,17 +12842,6 @@ var ContainerMemoryPointSchema = zod.z.object({
 	*/
 	gpuShmemBytes: zod.z.number().nullable()
 }).extend({ atMs: zod.z.number() });
-var DumpHeapSnapshotInputSchema = zod.z.object({ 
-/** The addon whose runner should dump a heap snapshot. */
-addonId: zod.z.string() });
-var DumpHeapSnapshotResultSchema = zod.z.object({
-	success: zod.z.boolean(),
-	/** Path of the written .heapsnapshot inside the runner's container/host. */
-	path: zod.z.string().optional(),
-	/** Process pid that was signalled. */
-	pid: zod.z.number().optional(),
-	reason: zod.z.string().optional()
-});
 /**
 * One point of one function's series.
 *
@@ -13041,19 +13030,7 @@ var metricsProviderCapability = {
 		* agent's ring alone (`durable: false`). Empty is a legitimate answer: a
 		* node nobody has heard from has no series, and saying so is the truth.
 		*/
-		getLoadSeries: method(GetLoadSeriesInputSchema, NodeLoadSeriesSchema),
-		/**
-		* Tell the addon's forked runner to write a V8 heap snapshot to disk (via
-		* SIGUSR2 — the runner's diagnostic handler). Also logs its
-		* `process.memoryUsage()` + heap-space breakdown. Resolves the pid from
-		* `$process.list`, so it can only reach a runner this node spawned. Use
-		* for deep per-addon memory attribution; copy the returned path off the
-		* node to analyze.
-		*/
-		dumpHeapSnapshot: method(DumpHeapSnapshotInputSchema, DumpHeapSnapshotResultSchema, {
-			kind: "mutation",
-			auth: "admin"
-		})
+		getLoadSeries: method(GetLoadSeriesInputSchema, NodeLoadSeriesSchema)
 	}
 };
 var modelConvertCapability = {
@@ -17777,7 +17754,8 @@ var MediaFileKindEnum = zod.z.enum([
 	"plateCrop",
 	"keyFrame",
 	"keyFrameSmall",
-	"thumbnailSmall"
+	"thumbnailSmall",
+	"sceneFrame"
 ]);
 /**
 * One media row ON THE WIRE: what it is, how big it is, and WHERE ITS BYTES
@@ -18441,7 +18419,21 @@ var pipelineAnalyticsCapability = {
 			/** Include stationary-promoted rows (parked objects handed to the
 			*  stationary registry). Default false: the timeline lists passages,
 			*  not parking records (operator decision, 2026-08-15). */
-			includeStationary: zod.z.boolean().optional()
+			includeStationary: zod.z.boolean().optional(),
+			/**
+			* Restrict to these track classes. ABSENT or EMPTY means no filter.
+			*
+			* Added 2026-09-03: the timeline's class chips filtered in the CLIENT,
+			* on a day of rows already downloaded. The zone filter had been moved
+			* here for exactly that reason — and it is also what lets the rows come
+			* back `slim` — but the class filter was left behind, so a narrow
+			* selection was still a wide read followed by a wide discard.
+			*
+			* Empty is "show all", not "nothing matches": a chip row with nothing
+			* selected is an operator who has not narrowed anything, and an empty
+			* timeline would read as a camera that saw nothing.
+			*/
+			classes: zod.z.array(zod.z.string()).optional()
 		}), zod.z.array(TrackSchema).readonly()),
 		/**
 		* Batched cluster-wide track listing — ONE call for the events page /
@@ -33741,6 +33733,82 @@ var RUNTIME_DEFAULTS = {
 	"auth.tokenExpiry": "30d"
 };
 /**
+* WHICH child a container stands for — one definition, for every consumer.
+*
+* A CONTAINER device has no controllable surface of its own: it groups entity
+* children (a Gree air-conditioner grouping a climate child plus light, x-fan
+* and health switches). Everything that has to show or act on a container has
+* to answer the same question — which child IS the container — and until now
+* three places answered it separately:
+*
+*   - `ui-library/device-controls/primary-child.ts`   (admin-ui rendering)
+*   - `addon-provider-homeassistant` PARENT_TYPE_PRIORITY (adoption)
+*   - the viewer's own `container-primary.ts`         (linked-devices panel)
+*
+* Each carried the same list and a comment asking the others to stay in sync.
+* This is that list, in the one package all of them already depend on.
+*
+* The rule has two halves and the ORDER matters: an operator's explicit pick
+* wins outright, and only in its absence does type priority decide. The pick is
+* keyed on the child's re-sync-stable `entityId`, not its numeric id, so it
+* survives a re-sync that reallocates ids.
+*/
+/**
+* Type priority, most→least "primary". An actuator (climate / lock / cover / …)
+* outranks a bare `switch` so a container's defining child wins over its
+* auxiliary switches. Unknown or absent types sort after every entry.
+*
+* NB: `siren` deliberately sits BELOW `switch` — it is a switch-family
+* actuator, and a camera's siren must not out-rank the thing the container is.
+*
+* These strings are matched against a child's `DeviceType` VALUE, so they must
+* equal the enum's string values.
+*/
+var CONTAINER_CHILD_PRIORITY = [
+	"media-player",
+	"alarm-panel",
+	"thermostat",
+	"climate",
+	"humidifier",
+	"water-heater",
+	"lock",
+	"cover",
+	"valve",
+	"fan",
+	"vacuum",
+	"lawn-mower",
+	"light",
+	"switch",
+	"siren",
+	"button",
+	"control",
+	"notifier",
+	"script",
+	"automation",
+	"update",
+	"presence",
+	"weather",
+	"image",
+	"sensor"
+];
+function rank(type) {
+	const i = CONTAINER_CHILD_PRIORITY.indexOf(type);
+	return i === -1 ? CONTAINER_CHILD_PRIORITY.length : i;
+}
+/**
+* The child a container stands for: the operator's pick when it still exists,
+* else the highest-priority type. `null` for a childless container — a caller
+* must decide what an empty container means for it, rather than being handed a
+* child that is not there.
+*/
+function resolveContainerPrimaryChild(children, overrideEntityId) {
+	if (overrideEntityId !== void 0 && overrideEntityId !== null) {
+		const picked = children.find((c) => c.entityId === overrideEntityId);
+		if (picked !== void 0) return picked;
+	}
+	return [...children].toSorted((a, b) => rank(a.type) - rank(b.type))[0] ?? null;
+}
+/**
 * Accessory device helpers — shared across drivers.
 *
 * Many vendor-specific drivers register accessory child devices on
@@ -36881,12 +36949,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"metricsProvider.dumpHeapSnapshot": {
-		capName: "metrics-provider",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
 	"metricsProvider.getAddonStats": {
 		capName: "metrics-provider",
 		capScope: "system",
@@ -43674,6 +43736,12 @@ Object.defineProperty(exports, "resolveCapMount", {
 		return resolveCapMount;
 	}
 });
+Object.defineProperty(exports, "resolveContainerPrimaryChild", {
+	enumerable: true,
+	get: function() {
+		return resolveContainerPrimaryChild;
+	}
+});
 Object.defineProperty(exports, "resolveMethodAuth", {
 	enumerable: true,
 	get: function() {

package/dist/{dist-BianbXLH.mjs → dist-DMJ-DM7n.mjs}

@@ -12842,17 +12842,6 @@ var ContainerMemoryPointSchema = z.object({
 	*/
 	gpuShmemBytes: z.number().nullable()
 }).extend({ atMs: z.number() });
-var DumpHeapSnapshotInputSchema = z.object({ 
-/** The addon whose runner should dump a heap snapshot. */
-addonId: z.string() });
-var DumpHeapSnapshotResultSchema = z.object({
-	success: z.boolean(),
-	/** Path of the written .heapsnapshot inside the runner's container/host. */
-	path: z.string().optional(),
-	/** Process pid that was signalled. */
-	pid: z.number().optional(),
-	reason: z.string().optional()
-});
 /**
 * One point of one function's series.
 *
@@ -13041,19 +13030,7 @@ var metricsProviderCapability = {
 		* agent's ring alone (`durable: false`). Empty is a legitimate answer: a
 		* node nobody has heard from has no series, and saying so is the truth.
 		*/
-		getLoadSeries: method(GetLoadSeriesInputSchema, NodeLoadSeriesSchema),
-		/**
-		* Tell the addon's forked runner to write a V8 heap snapshot to disk (via
-		* SIGUSR2 — the runner's diagnostic handler). Also logs its
-		* `process.memoryUsage()` + heap-space breakdown. Resolves the pid from
-		* `$process.list`, so it can only reach a runner this node spawned. Use
-		* for deep per-addon memory attribution; copy the returned path off the
-		* node to analyze.
-		*/
-		dumpHeapSnapshot: method(DumpHeapSnapshotInputSchema, DumpHeapSnapshotResultSchema, {
-			kind: "mutation",
-			auth: "admin"
-		})
+		getLoadSeries: method(GetLoadSeriesInputSchema, NodeLoadSeriesSchema)
 	}
 };
 var modelConvertCapability = {
@@ -17777,7 +17754,8 @@ var MediaFileKindEnum = z.enum([
 	"plateCrop",
 	"keyFrame",
 	"keyFrameSmall",
-	"thumbnailSmall"
+	"thumbnailSmall",
+	"sceneFrame"
 ]);
 /**
 * One media row ON THE WIRE: what it is, how big it is, and WHERE ITS BYTES
@@ -18441,7 +18419,21 @@ var pipelineAnalyticsCapability = {
 			/** Include stationary-promoted rows (parked objects handed to the
 			*  stationary registry). Default false: the timeline lists passages,
 			*  not parking records (operator decision, 2026-08-15). */
-			includeStationary: z.boolean().optional()
+			includeStationary: z.boolean().optional(),
+			/**
+			* Restrict to these track classes. ABSENT or EMPTY means no filter.
+			*
+			* Added 2026-09-03: the timeline's class chips filtered in the CLIENT,
+			* on a day of rows already downloaded. The zone filter had been moved
+			* here for exactly that reason — and it is also what lets the rows come
+			* back `slim` — but the class filter was left behind, so a narrow
+			* selection was still a wide read followed by a wide discard.
+			*
+			* Empty is "show all", not "nothing matches": a chip row with nothing
+			* selected is an operator who has not narrowed anything, and an empty
+			* timeline would read as a camera that saw nothing.
+			*/
+			classes: z.array(z.string()).optional()
 		}), z.array(TrackSchema).readonly()),
 		/**
 		* Batched cluster-wide track listing — ONE call for the events page /
@@ -33741,6 +33733,82 @@ var RUNTIME_DEFAULTS = {
 	"auth.tokenExpiry": "30d"
 };
 /**
+* WHICH child a container stands for — one definition, for every consumer.
+*
+* A CONTAINER device has no controllable surface of its own: it groups entity
+* children (a Gree air-conditioner grouping a climate child plus light, x-fan
+* and health switches). Everything that has to show or act on a container has
+* to answer the same question — which child IS the container — and until now
+* three places answered it separately:
+*
+*   - `ui-library/device-controls/primary-child.ts`   (admin-ui rendering)
+*   - `addon-provider-homeassistant` PARENT_TYPE_PRIORITY (adoption)
+*   - the viewer's own `container-primary.ts`         (linked-devices panel)
+*
+* Each carried the same list and a comment asking the others to stay in sync.
+* This is that list, in the one package all of them already depend on.
+*
+* The rule has two halves and the ORDER matters: an operator's explicit pick
+* wins outright, and only in its absence does type priority decide. The pick is
+* keyed on the child's re-sync-stable `entityId`, not its numeric id, so it
+* survives a re-sync that reallocates ids.
+*/
+/**
+* Type priority, most→least "primary". An actuator (climate / lock / cover / …)
+* outranks a bare `switch` so a container's defining child wins over its
+* auxiliary switches. Unknown or absent types sort after every entry.
+*
+* NB: `siren` deliberately sits BELOW `switch` — it is a switch-family
+* actuator, and a camera's siren must not out-rank the thing the container is.
+*
+* These strings are matched against a child's `DeviceType` VALUE, so they must
+* equal the enum's string values.
+*/
+var CONTAINER_CHILD_PRIORITY = [
+	"media-player",
+	"alarm-panel",
+	"thermostat",
+	"climate",
+	"humidifier",
+	"water-heater",
+	"lock",
+	"cover",
+	"valve",
+	"fan",
+	"vacuum",
+	"lawn-mower",
+	"light",
+	"switch",
+	"siren",
+	"button",
+	"control",
+	"notifier",
+	"script",
+	"automation",
+	"update",
+	"presence",
+	"weather",
+	"image",
+	"sensor"
+];
+function rank(type) {
+	const i = CONTAINER_CHILD_PRIORITY.indexOf(type);
+	return i === -1 ? CONTAINER_CHILD_PRIORITY.length : i;
+}
+/**
+* The child a container stands for: the operator's pick when it still exists,
+* else the highest-priority type. `null` for a childless container — a caller
+* must decide what an empty container means for it, rather than being handed a
+* child that is not there.
+*/
+function resolveContainerPrimaryChild(children, overrideEntityId) {
+	if (overrideEntityId !== void 0 && overrideEntityId !== null) {
+		const picked = children.find((c) => c.entityId === overrideEntityId);
+		if (picked !== void 0) return picked;
+	}
+	return [...children].toSorted((a, b) => rank(a.type) - rank(b.type))[0] ?? null;
+}
+/**
 * Accessory device helpers — shared across drivers.
 *
 * Many vendor-specific drivers register accessory child devices on
@@ -36881,12 +36949,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"metricsProvider.dumpHeapSnapshot": {
-		capName: "metrics-provider",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
 	"metricsProvider.getAddonStats": {
 		capName: "metrics-provider",
 		capScope: "system",
@@ -43086,4 +43148,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { isArrayOutputSchema as $, nodePin as $t, authProviderCapability as A, userManagementCapability as At, decodeVectorBase64 as B, DeviceType as Bt, StorageLocationTypeSchema as C, scoreRuntimes as Ct, addonSettingsCapability as D, storageMigrationCapability as Dt, addonPagesCapability as E, storageCapability as Et, collectSecretConfigKeys as F, DATAPLANE_SECRET_HEADER as Ft, doorbellCapability as G, asNumber as Gt, deviceManagerCapability as H, ReadinessTimeoutError as Ht, coreBlockAddonId as I, DEVICE_SETTINGS_CONTRIBUTION_METHODS as It, enumerateSchemaFields as J, emitDownForOwnedCaps as Jt, enumerateInferenceDevices as K, asString as Kt, coreBlockIdFromAddonId as L, DEVICE_STATUS_METHOD as Lt, bareAddonId as M, vectorStoreCapability as Mt, batteryCapability as N, errMsg as Nt, addonWidgetsCapability as O, storageProviderCapability as Ot, buildStreamParamsConfigSchema as P, BaseAddon as Pt, foldSnapshotByFunction as Q, isDeviceConfigCap as Qt, coreBlocksCapability as R, DeviceFeature as Rt, StorageCleanupJobSchema as S, scopesAllowDeviceCap as St, UserRecordSchema as T, snapshotCapability as Tt, deviceStateCapability as U, WELL_KNOWN_TAB_MAP as Ut, deriveBatteryPresence as V, ReadinessRegistry as Vt, deviceStatusCapability as W, asJsonObject as Wt, extractNestedAddonId as X, expandCapMethods as Xt, evaluateSensorEdge as Y, emitReadiness as Yt, filesystemBrowseCapability as Z, hydrateSchema as Zt, SOURCE_CAPS as _, reducePoints as _t, CAMERA_SWITCH_ORDER as a, sleep as an, kebabToCamel as at, STREAM_PROFILE_META as b, runtimeStatePolicyFor as bt, CORE_BLOCK_ADDON_PREFIX as c, logDestinationCapability as ct, DeclaredDevices as d, metricsProviderCapability as dt, parseJsonObject as en, isCollectionArrayMethod as et, DeviceStatusSchema as f, normalizeUnit as ft, RUNTIME_DEFAULTS as g, procedureAuthKey as gt, REDACTED_SECRET as h, platformProbeCapability as ht, BatteryStatusSchema as i, scopeKey as in, isVoidInput as it, backupCapability as j, vectorDimFromBase64 as jt, alertsCapability as k, streamQualityLabel as kt, CoreBlockSchema as l, logLevelAtMost as lt, METHOD_ACCESS_MAP as m, parseStreamParamsFormPatch as mt, AlertSchema as n, readinessKey as nn, isSameAddonId as nt, CAP_NAMES_WITH_STATUS as o, EventCategory as on, lifecycleJobSchema as ot, LOG_LEVEL_RANK as p, objectInputDeclaresAddonId as pt, enumerateItemArrayFields as q, createEvent as qt, ApiKeyRecordSchema as r, resolveCapMount as rn, isSourceCap as rt, CORE_BLOCKS_ADDON_ID as s, localNetworkCapability as st, ALL_CAPABILITY_DEFINITIONS as t, parseJsonUnknown as tn, isObjectInput as tt, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as u, looseSchema as ut, SOURCE_DEVICE_TYPES as v, resolveBucketMs as vt, StorageMigrationJobSchema as w, settingsStoreCapability as wt, ScopedTokenSchema as x, scopesAllowAddon as xt, STORAGE_ACCESS_FALLBACK as y, resolveMethodAuth as yt, dataStoreProviderCapability as z, DeviceRole as zt };
+export { isArrayOutputSchema as $, isDeviceConfigCap as $t, authProviderCapability as A, streamQualityLabel as At, decodeVectorBase64 as B, DeviceRole as Bt, StorageLocationTypeSchema as C, scopesAllowDeviceCap as Ct, addonSettingsCapability as D, storageCapability as Dt, addonPagesCapability as E, snapshotCapability as Et, collectSecretConfigKeys as F, BaseAddon as Ft, doorbellCapability as G, asJsonObject as Gt, deviceManagerCapability as H, ReadinessRegistry as Ht, coreBlockAddonId as I, DATAPLANE_SECRET_HEADER as It, enumerateSchemaFields as J, createEvent as Jt, enumerateInferenceDevices as K, asNumber as Kt, coreBlockIdFromAddonId as L, DEVICE_SETTINGS_CONTRIBUTION_METHODS as Lt, bareAddonId as M, vectorDimFromBase64 as Mt, batteryCapability as N, vectorStoreCapability as Nt, addonWidgetsCapability as O, storageMigrationCapability as Ot, buildStreamParamsConfigSchema as P, errMsg as Pt, foldSnapshotByFunction as Q, hydrateSchema as Qt, coreBlocksCapability as R, DEVICE_STATUS_METHOD as Rt, StorageCleanupJobSchema as S, scopesAllowAddon as St, UserRecordSchema as T, settingsStoreCapability as Tt, deviceStateCapability as U, ReadinessTimeoutError as Ut, deriveBatteryPresence as V, DeviceType as Vt, deviceStatusCapability as W, WELL_KNOWN_TAB_MAP as Wt, extractNestedAddonId as X, emitReadiness as Xt, evaluateSensorEdge as Y, emitDownForOwnedCaps as Yt, filesystemBrowseCapability as Z, expandCapMethods as Zt, SOURCE_CAPS as _, reducePoints as _t, CAMERA_SWITCH_ORDER as a, scopeKey as an, kebabToCamel as at, STREAM_PROFILE_META as b, resolveMethodAuth as bt, CORE_BLOCK_ADDON_PREFIX as c, logDestinationCapability as ct, DeclaredDevices as d, metricsProviderCapability as dt, nodePin as en, isCollectionArrayMethod as et, DeviceStatusSchema as f, normalizeUnit as ft, RUNTIME_DEFAULTS as g, procedureAuthKey as gt, REDACTED_SECRET as h, platformProbeCapability as ht, BatteryStatusSchema as i, resolveCapMount as in, isVoidInput as it, backupCapability as j, userManagementCapability as jt, alertsCapability as k, storageProviderCapability as kt, CoreBlockSchema as l, logLevelAtMost as lt, METHOD_ACCESS_MAP as m, parseStreamParamsFormPatch as mt, AlertSchema as n, parseJsonUnknown as nn, isSameAddonId as nt, CAP_NAMES_WITH_STATUS as o, sleep as on, lifecycleJobSchema as ot, LOG_LEVEL_RANK as p, objectInputDeclaresAddonId as pt, enumerateItemArrayFields as q, asString as qt, ApiKeyRecordSchema as r, readinessKey as rn, isSourceCap as rt, CORE_BLOCKS_ADDON_ID as s, EventCategory as sn, localNetworkCapability as st, ALL_CAPABILITY_DEFINITIONS as t, parseJsonObject as tn, isObjectInput as tt, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as u, looseSchema as ut, SOURCE_DEVICE_TYPES as v, resolveBucketMs as vt, StorageMigrationJobSchema as w, scoreRuntimes as wt, ScopedTokenSchema as x, runtimeStatePolicyFor as xt, STORAGE_ACCESS_FALLBACK as y, resolveContainerPrimaryChild as yt, dataStoreProviderCapability as z, DeviceFeature as zt };

package/dist/index.d.ts

@@ -51,7 +51,7 @@ export { createEventPlaneMeter, createEventPlaneReader, diffEventPlane, EVENT_PL
 export type { SocketPeerDelta, SocketPeerSample, SocketPlaneBaseline, SocketPlaneCounters, SocketPlaneMeter, SocketPlaneReader, SocketPlaneRegistry, SocketPlaneRegistryChild, SocketPlaneSources, SocketPlaneWindow, } from './kernel/socket-plane-report.js';
 export { createSocketPlaneMeter, createSocketPlaneReader, diffSocketPlane, EMPTY_SOCKET_PLANE_BASELINE, formatSocketPlane, SOCKET_PLANE_TOP_N, } from './kernel/socket-plane-report.js';
 export type { HeapDiagnosticDeps, HeapDiagnosticRequest, HeapSpaceReader, HeapSpaceUsage, } from './kernel/heap-spaces.js';
-export { DECISIVE_HEAP_SPACES, emitHeapDiagnosticReport, formatHeapSpaces, HEAP_SPACE_REPORT_MIN_MB, heapSnapshotAuthorised, heapSpaceField, readHeapSpaces, RUNNER_HEAP_SNAPSHOT_ENV, selectReportedSpaces, } from './kernel/heap-spaces.js';
+export { DECISIVE_HEAP_SPACES, emitHeapDiagnosticReport, formatHeapSpaces, HEAP_SPACE_REPORT_MIN_MB, heapSpaceField, readHeapSpaces, selectReportedSpaces, } from './kernel/heap-spaces.js';
 export type { DeferredHeapWatchSink, HeapReclaimer, HeapReclaimOptions, HeapSample, HeapWatchProbes, HeapWatchSink, LoopDelayMeter, LoopDelaySample, RssBreakdown, RssBudgetOptions, RssBudgetState, RssGrowthShape, RunnerHeapWatchOptions, } from './kernel/heap-watch.js';
 export { buildHeapSample, createDeferredHeapWatchSink, createLoopDelayMeter, createV8Reclaimer, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, hubMainRssBudget, describeRss, nextRssBudgetState, parseRssBudgetMb, reclaimIntervalMs, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, shouldReclaim, startHeapWatch, startRunnerHeapWatch, strandedMb, ZERO_LOOP_DELAY, } from './kernel/heap-watch.js';
 export type { AddonDataPlaneFacility, DataPlaneSink, } from './kernel/moleculer/addon-data-plane-facility.js';

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-KItAWyKG.js");
+const require_dist = require("./dist-C0IXtI_E.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_formatter = require("./formatter-DqAKDlvN.js");
@@ -27,7 +27,7 @@ require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_file_data_plane = require("./file-data-plane-DO8KbxCe.js");
 const require_tls$1 = require("./tls-BxQlomxd.js");
-const require_manifest_system_deps = require("./manifest-system-deps-DU0BvqV-.js");
+const require_manifest_system_deps = require("./manifest-system-deps-D6ncx0jA.js");
 const require_resource_monitor = require("./resource-monitor-CdnzxBLP.js");
 const require_custom_action_registry = require("./custom-action-registry-jY0NOZK8.js");
 let zod = require("zod");
@@ -95354,7 +95354,6 @@ exports.QUARANTINE_DIRNAME = QUARANTINE_DIRNAME;
 exports.RESTART_MARKER_FILE = RESTART_MARKER_FILE;
 exports.RSS_BUDGET_REANNOUNCE_MIN_MS = require_manifest_system_deps.RSS_BUDGET_REANNOUNCE_MIN_MS;
 exports.RSS_BUDGET_RELEASE_RATIO = require_manifest_system_deps.RSS_BUDGET_RELEASE_RATIO;
-exports.RUNNER_HEAP_SNAPSHOT_ENV = require_manifest_system_deps.RUNNER_HEAP_SNAPSHOT_ENV;
 exports.RUNNER_HEAP_WATCH_INTERVAL_MS = require_manifest_system_deps.RUNNER_HEAP_WATCH_INTERVAL_MS;
 exports.RUNNER_RSS_BUDGET_ENV = require_manifest_system_deps.RUNNER_RSS_BUDGET_ENV;
 exports.RUNTIME_DEFAULTS = require_dist.RUNTIME_DEFAULTS;
@@ -95545,7 +95544,6 @@ exports.getSinglePidStats = require_resource_monitor.getSinglePidStats;
 exports.getWorkerDeviceRegistry = require_manifest_system_deps.getWorkerDeviceRegistry;
 exports.hasDotNode = hasDotNode;
 exports.hashClusterSecret = hashClusterSecret;
-exports.heapSnapshotAuthorised = require_manifest_system_deps.heapSnapshotAuthorised;
 exports.heapSpaceField = require_manifest_system_deps.heapSpaceField;
 exports.hubMainRssBudget = require_manifest_system_deps.hubMainRssBudget;
 exports.installManifestNativeDeps = require_manifest_system_deps.installManifestNativeDeps;

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { $ as isArrayOutputSchema, D as addonSettingsCapability, Ft as DATAPLANE_SECRET_HEADER$1, Gt as asNumber, Ht as ReadinessTimeoutError, It as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Jt as emitDownForOwnedCaps, Kt as asString$1, Lt as DEVICE_STATUS_METHOD, Nt as errMsg$1, St as scopesAllowDeviceCap, Vt as ReadinessRegistry, Wt as asJsonObject$1, X as extractNestedAddonId, Xt as expandCapMethods, at as kebabToCamel, en as parseJsonObject, et as isCollectionArrayMethod, g as RUNTIME_DEFAULTS, gt as procedureAuthKey, in as scopeKey, it as isVoidInput, lt as logLevelAtMost, m as METHOD_ACCESS_MAP, nn as readinessKey, on as EventCategory$1, ot as lifecycleJobSchema, p as LOG_LEVEL_RANK, pt as objectInputDeclaresAddonId, qt as createEvent, rn as resolveCapMount, t as ALL_CAPABILITY_DEFINITIONS, tn as parseJsonUnknown, tt as isObjectInput, ut as looseSchema, xt as scopesAllowAddon, yt as resolveMethodAuth } from "./dist-BianbXLH.mjs";
+import { $ as isArrayOutputSchema, Ct as scopesAllowDeviceCap, D as addonSettingsCapability, Gt as asJsonObject$1, Ht as ReadinessRegistry, It as DATAPLANE_SECRET_HEADER$1, Jt as createEvent, Kt as asNumber, Lt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Pt as errMsg$1, Rt as DEVICE_STATUS_METHOD, St as scopesAllowAddon, Ut as ReadinessTimeoutError, X as extractNestedAddonId, Yt as emitDownForOwnedCaps, Zt as expandCapMethods, an as scopeKey, at as kebabToCamel, bt as resolveMethodAuth, et as isCollectionArrayMethod, g as RUNTIME_DEFAULTS, gt as procedureAuthKey, in as resolveCapMount, it as isVoidInput, lt as logLevelAtMost, m as METHOD_ACCESS_MAP, nn as parseJsonUnknown, ot as lifecycleJobSchema, p as LOG_LEVEL_RANK, pt as objectInputDeclaresAddonId, qt as asString$1, rn as readinessKey, sn as EventCategory$1, t as ALL_CAPABILITY_DEFINITIONS, tn as parseJsonObject, tt as isObjectInput, ut as looseSchema } from "./dist-DMJ-DM7n.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";
@@ -26,7 +26,7 @@ import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
 import { a as parseTokenizedUrl, c as collectModelFiles, d as downloadModel, f as ensureModel, h as isModelDownloaded, i as parseRangeHeader, l as deleteModelFromDisk, m as getModelFilePath, n as contentTypeFor, o as resolveFilePath, p as fetchJson, r as createAuthenticatedFileServer, s as ModelDownloadService, t as createFileDataPlaneHandler, u as downloadFile } from "./file-data-plane-BhKdxJgf.mjs";
 import { C as registerLanHttpHandler, S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, b as bindPendingLanHttp, c as loadTlsCert, d as collectCertIdentity, f as CA_VALIDITY_DAYS, g as evaluateExistingCert, h as SERVER_AUTH_OID, i as writeExtraSans, l as reissueTlsLeaf, m as MAX_LEAF_VALIDITY_DAYS, n as readTlsAccessStatus, o as validateUploadedTls, p as LEAF_RENEWAL_WINDOW_DAYS, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, u as CA_COMMON_NAME, v as allFamiliesListenHost, x as closeLanHttp, y as applyLanHttp } from "./tls-DOTmtLCW.mjs";
-import { $ as buildUdsNativeCapProxy, $t as emitHeapDiagnosticReport, A as createUdsLoggerWithControl, At as HUB_MAIN_RSS_BUDGET_MB, B as readMoleculerFanoutMode, Bt as createV8Reclaimer, C as ipcParentLink, Ct as createAddonDataPlaneFacility, D as createUdsEventBus, Dt as HEAP_WATCH_INTERVAL_MS, E as createUdsEventBridge, Et as HEAP_RECLAIM_TRIGGER_MB, F as AGENT_CAP_FWD_SERVICE, Ft as RUNNER_RSS_BUDGET_ENV, G as createLocalTransport, Gt as reclaimIntervalMs, H as PARENT_ROUTED_PROVIDER_ADDON_ID, Ht as hubMainRssBudget, I as CapRouteResolver, It as ZERO_LOOP_DELAY, J as SocketChannel, Jt as startRunnerHeapWatch, K as UdsLocalTransportClient, Kt as shouldReclaim, L as CapRouteError, Lt as buildHeapSample, M as LocalChildRegistry, Mt as RSS_BUDGET_REANNOUNCE_MIN_MS, N as UDS_NO_ROUTE_PREFIX, Nt as RSS_BUDGET_RELEASE_RATIO, O as udsChildLogToWorkerEntry, Ot as HEAP_WATCH_WARN_RATIO, P as AGENT_CAP_FWD_ACTION, Pt as RUNNER_HEAP_WATCH_INTERVAL_MS, Q as buildNativeCapProxy, Qt as RUNNER_HEAP_SNAPSHOT_ENV, R as classifyCapRoute, Rt as createDeferredHeapWatchSink, S as buildLinkChain, St as runNpm, T as createParentUnownedCallHandler, Tt as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, U as __resetCapUsageRegistryForTests, Ut as nextRssBudgetState, V as CapUsageRegistry, Vt as describeRss, W as getCapUsageRegistry, Wt as parseRssBudgetMb, X as FrameDecoder, Xt as DECISIVE_HEAP_SPACES, Y as localEndpointPath, Yt as strandedMb, Z as encodeFrame, Zt as HEAP_SPACE_REPORT_MIN_MB, _ as AddonDepsManager, _n as EVENT_PLANE_TOP_N, _t as CapabilityUnavailableError, a as createUdsAddonContext, an as EMPTY_SOCKET_PLANE_BASELINE, at as createAddonService, b as brokerCallForCap, bn as diffEventPlane, bt as resolveAddonClass, c as getOrInitReadinessRegistryForClient, cn as createSocketPlaneReader, ct as capActionName, d as clusterEventTopic, dn as EMPTY_SOCKET_DIRECTION, dt as capServiceName, en as formatHeapSpaces, et as createBrokerDeviceManagerApi, f as getBrokerEventBus, fn as createSocketDirectionCounters, ft as parseCapAction, g as subscribePassthrough, gn as socketDirectionMessages, gt as CapabilityHandle, h as setNodeEventInterest, hn as socketDirectionBytes, ht as DeviceRegistry, i as createAddonContext, in as selectReportedSpaces, j as LocalChildClient, jt as HUB_RSS_BUDGET_ENV, k as createUdsLogger, kt as HUB_MAIN_HEAP_WATCH_LABEL, l as setHubConnected, ln as diffSocketPlane, lt as capActionSuffix, m as registerEventBusService, mn as sampleSocketDirection, mt as serializeTypedArrays, n as installManifestPythonDeps, nn as heapSpaceField, o as getWorkerDeviceRegistry, on as SOCKET_PLANE_TOP_N, ot as validateProviderRegistrations, p as getMoleculerEventStats, pn as recordSocketFrame, pt as deserializeTypedArrays, q as UdsLocalTransportServer, qt as startHeapWatch, r as adaptBrokerToCluster, rn as readHeapSpaces, rt as mountNativeCapService, s as getOrInitReadinessRegistry, sn as createSocketPlaneMeter, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestSystemDeps, tn as heapSnapshotAuthorised, u as EVENT_TOPIC_PREFIX, un as formatSocketPlane, ut as capBareAction, v as createKernelHwAccel, vn as createEventPlaneMeter, vt as copyBundledNativeModules, w as localProviderLink, wt as HEAP_RECLAIM_MIN_INTERVAL_MS, x as brokerTransportLink, xn as formatEventPlane, xt as resolveNpmInvocation, y as resolveHwAccel, yn as createEventPlaneReader, yt as installManifestNativeDeps, z as callWithServiceDiscovery, zt as createLoopDelayMeter } from "./manifest-system-deps-BPpzK6cH.mjs";
+import { $ as buildUdsNativeCapProxy, $t as formatHeapSpaces, A as createUdsLoggerWithControl, At as HUB_MAIN_RSS_BUDGET_MB, B as readMoleculerFanoutMode, Bt as createV8Reclaimer, C as ipcParentLink, Ct as createAddonDataPlaneFacility, D as createUdsEventBus, Dt as HEAP_WATCH_INTERVAL_MS, E as createUdsEventBridge, Et as HEAP_RECLAIM_TRIGGER_MB, F as AGENT_CAP_FWD_SERVICE, Ft as RUNNER_RSS_BUDGET_ENV, G as createLocalTransport, Gt as reclaimIntervalMs, H as PARENT_ROUTED_PROVIDER_ADDON_ID, Ht as hubMainRssBudget, I as CapRouteResolver, It as ZERO_LOOP_DELAY, J as SocketChannel, Jt as startRunnerHeapWatch, K as UdsLocalTransportClient, Kt as shouldReclaim, L as CapRouteError, Lt as buildHeapSample, M as LocalChildRegistry, Mt as RSS_BUDGET_REANNOUNCE_MIN_MS, N as UDS_NO_ROUTE_PREFIX, Nt as RSS_BUDGET_RELEASE_RATIO, O as udsChildLogToWorkerEntry, Ot as HEAP_WATCH_WARN_RATIO, P as AGENT_CAP_FWD_ACTION, Pt as RUNNER_HEAP_WATCH_INTERVAL_MS, Q as buildNativeCapProxy, Qt as emitHeapDiagnosticReport, R as classifyCapRoute, Rt as createDeferredHeapWatchSink, S as buildLinkChain, St as runNpm, T as createParentUnownedCallHandler, Tt as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, U as __resetCapUsageRegistryForTests, Ut as nextRssBudgetState, V as CapUsageRegistry, Vt as describeRss, W as getCapUsageRegistry, Wt as parseRssBudgetMb, X as FrameDecoder, Xt as DECISIVE_HEAP_SPACES, Y as localEndpointPath, Yt as strandedMb, Z as encodeFrame, Zt as HEAP_SPACE_REPORT_MIN_MB, _ as AddonDepsManager, _n as createEventPlaneReader, _t as CapabilityUnavailableError, a as createUdsAddonContext, an as createSocketPlaneMeter, at as createAddonService, b as brokerCallForCap, bt as resolveAddonClass, c as getOrInitReadinessRegistryForClient, cn as formatSocketPlane, ct as capActionName, d as clusterEventTopic, dn as recordSocketFrame, dt as capServiceName, en as heapSpaceField, et as createBrokerDeviceManagerApi, f as getBrokerEventBus, fn as sampleSocketDirection, ft as parseCapAction, g as subscribePassthrough, gn as createEventPlaneMeter, gt as CapabilityHandle, h as setNodeEventInterest, hn as EVENT_PLANE_TOP_N, ht as DeviceRegistry, i as createAddonContext, in as SOCKET_PLANE_TOP_N, j as LocalChildClient, jt as HUB_RSS_BUDGET_ENV, k as createUdsLogger, kt as HUB_MAIN_HEAP_WATCH_LABEL, l as setHubConnected, ln as EMPTY_SOCKET_DIRECTION, lt as capActionSuffix, m as registerEventBusService, mn as socketDirectionMessages, mt as serializeTypedArrays, n as installManifestPythonDeps, nn as selectReportedSpaces, o as getWorkerDeviceRegistry, on as createSocketPlaneReader, ot as validateProviderRegistrations, p as getMoleculerEventStats, pn as socketDirectionBytes, pt as deserializeTypedArrays, q as UdsLocalTransportServer, qt as startHeapWatch, r as adaptBrokerToCluster, rn as EMPTY_SOCKET_PLANE_BASELINE, rt as mountNativeCapService, s as getOrInitReadinessRegistry, sn as diffSocketPlane, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestSystemDeps, tn as readHeapSpaces, u as EVENT_TOPIC_PREFIX, un as createSocketDirectionCounters, ut as capBareAction, v as createKernelHwAccel, vn as diffEventPlane, vt as copyBundledNativeModules, w as localProviderLink, wt as HEAP_RECLAIM_MIN_INTERVAL_MS, x as brokerTransportLink, xt as resolveNpmInvocation, y as resolveHwAccel, yn as formatEventPlane, yt as installManifestNativeDeps, z as callWithServiceDiscovery, zt as createLoopDelayMeter } from "./manifest-system-deps-BMD6YE4f.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-BWmQ5i-o.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-F__gp_VX.mjs";
 import { z } from "zod";
@@ -95238,4 +95238,4 @@ var LifecycleJobEngine = class {
 	}
 };
 //#endregion
-export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CA_COMMON_NAME, CA_VALIDITY_DAYS, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DECISIVE_HEAP_SPACES, DEFAULT_DATA_PATH, DEFAULT_LAN_HTTP_PORT, DEFAULT_LOG_LEVEL, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EMPTY_SOCKET_DIRECTION, EMPTY_SOCKET_PLANE_BASELINE, EVENT_PLANE_TOP_N, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_SPACE_REPORT_MIN_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LEAF_RENEWAL_WINDOW_DAYS, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LoggingGate, LokiDestination, LokiLoggingAddon, MAX_LEAF_VALIDITY_DAYS, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PARENT_ROUTED_PROVIDER_ADDON_ID, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, QUARANTINE_DIRNAME, RESTART_MARKER_FILE, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_SNAPSHOT_ENV, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, SERVER_AUTH_OID, SOCKET_PLANE_TOP_N, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, ZERO_LOOP_DELAY, __resetCapUsageRegistryForTests, __resetLoggingGateForTests, adaptBrokerToCluster, addonSettingsCapability, allFamiliesListenHost, applyLanHttp, bindPendingLanHttp, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, canServeDataPlane, capActionName, capActionSuffix, capBareAction, capServiceName, classifyAddonDir, classifyCapRoute, clearPendingRestart, closeLanHttp, clusterEventTopic, clusterSecretMatches, collectCertIdentity, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createDeferredHeapWatchSink, createDoorSettingsView, createEventPlaneMeter, createEventPlaneReader, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createKernelHwAccel, createLocalTransport, createLoopDelayMeter, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createSocketDirectionCounters, createSocketPlaneMeter, createSocketPlaneReader, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, describeRss, detectWorkspacePackagesDir, diffEventPlane, diffSocketPlane, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, emitHeapDiagnosticReport, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, evaluateExistingCert, expandCapMethods, fetchJson, findInPath, formatEventPlane, formatHeapSpaces, formatLogLine, formatSocketPlane, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getLoggingGate, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, heapSnapshotAuthorised, heapSpaceField, hubMainRssBudget, installManifestNativeDeps, installManifestPythonDeps, installManifestSystemDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcParentLink, isAddonDeploySource, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, isolatedBuiltinPhase, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, nextRssBudgetState, parseCapAction, parseRangeHeader, parseRssBudgetMb, parseTokenizedUrl, partitionIsolatedBuiltinIds, proxyToUpstream, quarantineAddonResidue, readExtraSans, readHeapSpaces, readLanHttpState, readMoleculerFanoutMode, readPendingRestart, readTlsAccessStatus, readTlsMode, readinessKey, reclaimIntervalMs, recordSocketFrame, registerEventBusService, registerLanHttpHandler, reissueTlsLeaf, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runHubAddonBoot, runNpm, sampleSocketDirection, scheduleSelfRestart, scopeKey, scopesAllowAddon, scopesAllowDeviceCap, selectAddonResidue, selectReportedSpaces, serializeTypedArrays, setHubConnected, setNodeEventInterest, shouldReclaim, socketDirectionBytes, socketDirectionMessages, startHeapWatch, startRunnerHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, validateUploadedTls, waitUntilReady, writeExtraSans, writePendingRestart, writeTlsMode };
+export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CA_COMMON_NAME, CA_VALIDITY_DAYS, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DECISIVE_HEAP_SPACES, DEFAULT_DATA_PATH, DEFAULT_LAN_HTTP_PORT, DEFAULT_LOG_LEVEL, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EMPTY_SOCKET_DIRECTION, EMPTY_SOCKET_PLANE_BASELINE, EVENT_PLANE_TOP_N, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_SPACE_REPORT_MIN_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LEAF_RENEWAL_WINDOW_DAYS, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LoggingGate, LokiDestination, LokiLoggingAddon, MAX_LEAF_VALIDITY_DAYS, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PARENT_ROUTED_PROVIDER_ADDON_ID, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, QUARANTINE_DIRNAME, RESTART_MARKER_FILE, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, SERVER_AUTH_OID, SOCKET_PLANE_TOP_N, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, ZERO_LOOP_DELAY, __resetCapUsageRegistryForTests, __resetLoggingGateForTests, adaptBrokerToCluster, addonSettingsCapability, allFamiliesListenHost, applyLanHttp, bindPendingLanHttp, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, canServeDataPlane, capActionName, capActionSuffix, capBareAction, capServiceName, classifyAddonDir, classifyCapRoute, clearPendingRestart, closeLanHttp, clusterEventTopic, clusterSecretMatches, collectCertIdentity, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createDeferredHeapWatchSink, createDoorSettingsView, createEventPlaneMeter, createEventPlaneReader, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createKernelHwAccel, createLocalTransport, createLoopDelayMeter, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createSocketDirectionCounters, createSocketPlaneMeter, createSocketPlaneReader, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, describeRss, detectWorkspacePackagesDir, diffEventPlane, diffSocketPlane, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, emitHeapDiagnosticReport, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, evaluateExistingCert, expandCapMethods, fetchJson, findInPath, formatEventPlane, formatHeapSpaces, formatLogLine, formatSocketPlane, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getLoggingGate, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, heapSpaceField, hubMainRssBudget, installManifestNativeDeps, installManifestPythonDeps, installManifestSystemDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcParentLink, isAddonDeploySource, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, isolatedBuiltinPhase, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, nextRssBudgetState, parseCapAction, parseRangeHeader, parseRssBudgetMb, parseTokenizedUrl, partitionIsolatedBuiltinIds, proxyToUpstream, quarantineAddonResidue, readExtraSans, readHeapSpaces, readLanHttpState, readMoleculerFanoutMode, readPendingRestart, readTlsAccessStatus, readTlsMode, readinessKey, reclaimIntervalMs, recordSocketFrame, registerEventBusService, registerLanHttpHandler, reissueTlsLeaf, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runHubAddonBoot, runNpm, sampleSocketDirection, scheduleSelfRestart, scopeKey, scopesAllowAddon, scopesAllowDeviceCap, selectAddonResidue, selectReportedSpaces, serializeTypedArrays, setHubConnected, setNodeEventInterest, shouldReclaim, socketDirectionBytes, socketDirectionMessages, startHeapWatch, startRunnerHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, validateUploadedTls, waitUntilReady, writeExtraSans, writePendingRestart, writeTlsMode };

package/dist/kernel/heap-allocation-sample.d.ts

@@ -0,0 +1,107 @@
+/**
+ * WHERE the bytes come from, without stopping the process.
+ *
+ * A heap SNAPSHOT answers "what is retained" and costs a stop-the-world walk
+ * plus a multi-gigabyte write. On this hub that took the machine down twice;
+ * the second attempt did not even finish — it left a 0-byte file and an
+ * unresponsive host that had to be rebooted. The remotely-triggerable command
+ * is gone (`scripts/check-no-heap-dump-command.ts`).
+ *
+ * V8's SAMPLING heap profiler answers a cheaper, different question: which
+ * allocation SITES the bytes came from, statistically, with no pause and
+ * nothing written. Measured locally: 51 ms for a window that allocated 200 000
+ * objects.
+ *
+ * ## What this is NOT
+ *
+ * It is not retention analysis. It says where bytes were BORN, not what is
+ * holding them alive, and a leak is about the second. It is still the right
+ * first instrument for the recorder's ~900 MB of large objects that "no
+ * allocation site in its tree can produce" — because naming the sites is
+ * exactly the claim under test, and if the sites turn out to be ordinary, the
+ * retention question is the one that survives.
+ *
+ * This module is the PURE half: it folds the profile V8 hands back. The
+ * sampling belongs to the caller, so the fold is testable without a profiler.
+ */
+/** One frame as the inspector protocol reports it. */
+export interface AllocationCallFrame {
+    readonly functionName: string;
+    readonly url: string;
+    readonly lineNumber: number;
+}
+/** One node of `HeapProfiler.stopSampling`'s profile tree. */
+export interface AllocationProfileNode {
+    readonly selfSize: number;
+    readonly callFrame: AllocationCallFrame;
+    readonly children?: readonly AllocationProfileNode[];
+}
+export interface AllocationSite {
+    readonly functionName: string;
+    /** `file.js:line` — what a human reads in a log line. */
+    readonly site: string;
+    readonly bytes: number;
+}
+/**
+ * Fold the tree into the biggest allocation sites.
+ *
+ * Sites are SUMMED across call paths: one site reached from two callers is one
+ * site, and reporting it twice at half the size is how a dominant allocator
+ * hides in a long tail. Identity is (function, url, line) — the same line of
+ * two files is two sites.
+ */
+export declare function summariseAllocationProfile(head: AllocationProfileNode, limit: number): readonly AllocationSite[];
+/**
+ * The inspector session slice this needs. Injected so the sampler is testable
+ * without an inspector, and so nothing here reaches for a global.
+ */
+export interface HeapProfilerSession {
+    connect: () => void;
+    disconnect: () => void;
+    post: (method: string, paramsOrCb: unknown, maybeCb?: unknown) => void;
+}
+export interface SampleHeapAllocationsInput {
+    readonly session: HeapProfilerSession;
+    /** How long to sample. Bounded by the caller; this module never loops. */
+    readonly durationMs: number;
+    readonly limit: number;
+    readonly wait: (ms: number) => Promise<void>;
+    /** Bytes between samples. Larger = cheaper and coarser. */
+    readonly samplingInterval?: number;
+}
+/**
+ * Sample allocations for a bounded window and answer with the top sites.
+ *
+ * Writes NOTHING and pauses nothing. The profiler is stopped and the session
+ * disconnected in a `finally`, because a sampler left running is a tax on the
+ * process that outlives whoever enabled it — and the failure that made this
+ * module necessary was a diagnostic nobody could turn off from outside.
+ */
+export declare function sampleHeapAllocations(input: SampleHeapAllocationsInput): Promise<readonly AllocationSite[]>;
+/**
+ * Per-runner opt-in for allocation sampling.
+ *
+ * Explicit `'on'` only — the same discipline the snapshot flag had. The
+ * DIFFERENCE is what it authorises: that flag allowed a stop-the-world walk and
+ * a multi-gigabyte write, so leaving it on in production (which is exactly what
+ * happened) was an outage waiting for a signal. This one allows ~50 ms of
+ * statistical sampling and one log line, so a runner left with it on is simply
+ * a runner that reports where its bytes come from.
+ */
+export declare const RUNNER_ALLOC_SAMPLE_ENV = "CAMSTACK_RUNNER_ALLOC_SAMPLE";
+export declare function allocationSamplingEnabled(env?: NodeJS.ProcessEnv): boolean;
+/** Sample on every Nth heartbeat — one sample per ~10 minutes at a 60 s beat. */
+export declare const ALLOCATION_SAMPLE_EVERY_N_BEATS = 10;
+/** How long one sample runs. Short enough that two can never overlap. */
+export declare const ALLOCATION_SAMPLE_WINDOW_MS = 5000;
+/** How many sites one log line carries. */
+export declare const ALLOCATION_SAMPLE_TOP_N = 8;
+/**
+ * Is this the beat that samples?
+ *
+ * Beat 0 never samples: a runner that has just booted has allocated nothing
+ * worth ranking. A non-positive cadence samples NEVER rather than always — a
+ * misconfigured `0` must not turn a diagnostic into a permanent load, which is
+ * the failure mode this whole module exists because of.
+ */
+export declare function shouldSampleAllocations(beat: number, everyN: number): boolean;

package/dist/kernel/heap-spaces.d.ts

@@ -97,7 +97,6 @@ export declare function formatHeapSpaces(spaces: readonly HeapSpaceUsage[], minM
  * seconds. The per-space breakdown is ~1.2 µs and changes nothing. Welding them
  * to one signal priced the free answer at the cost of the expensive one.
  */
-export declare const RUNNER_HEAP_SNAPSHOT_ENV = "CAMSTACK_RUNNER_HEAP_SNAPSHOT";
 /**
  * Whether the operator has authorised the snapshot half of SIGUSR2.
  *
@@ -105,26 +104,22 @@ export declare const RUNNER_HEAP_SNAPSHOT_ENV = "CAMSTACK_RUNNER_HEAP_SNAPSHOT";
  * authorisation: a multi-GB stop-the-world write must never be reachable by a
  * value someone set for a different purpose.
  */
-export declare function heapSnapshotAuthorised(env?: NodeJS.ProcessEnv): boolean;
 /** What a diagnostic report is ABOUT. */
 export interface HeapDiagnosticRequest {
     /** The runner's nodeId, so the line groups with its `[mem]` heartbeat. */
     readonly label: string;
     readonly addons: readonly string[];
     readonly sink: HeapWatchSink;
-    /** Where a snapshot would be written, if one is authorised. */
-    readonly snapshotPath: string;
 }
 /** Everything the report READS. Injected so the split itself is testable. */
 export interface HeapDiagnosticDeps {
     readonly readMemory: () => NodeJS.MemoryUsage;
     readonly readSpaces: HeapSpaceReader;
-    readonly writeSnapshot: (path: string) => void;
     readonly env: NodeJS.ProcessEnv;
 }
 /**
  * The SIGUSR2 report — memory + the FULL per-space breakdown, always; the
- * snapshot only when {@link heapSnapshotAuthorised}.
+ * snapshot NEVER — see the note in the body.
  *
  * The breakdown here keeps every non-empty space at 0.1 MB, unlike the
  * heartbeat's filtered whole-MB pair: this is a hand-fired diagnostic read once