@camstack/system 1.2.185 → 1.2.187

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DE3OH-FG.js");
+const require_dist = require("../../dist-DNwhsXWi.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { Ft as BaseAddon, Pt as errMsg, Qt as hydrateSchema } from "../../dist-CCMYMmkQ.mjs";
+import { Ft as BaseAddon, Pt as errMsg, Qt as hydrateSchema } from "../../dist-C5PkvU4p.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DE3OH-FG.js");
+const require_dist = require("../../dist-DNwhsXWi.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Ft as BaseAddon, ct as logDestinationCapability } from "../../dist-CCMYMmkQ.mjs";
+import { Ft as BaseAddon, ct as logDestinationCapability } from "../../dist-C5PkvU4p.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{dist-CCMYMmkQ.mjs → dist-C5PkvU4p.mjs}

@@ -10594,6 +10594,24 @@ var deviceProviderCapability = {
 		})
 	}
 };
+/**
+* Device Manager capability — hub-side singleton that unifies device persistence,
+* live registry access, and all management operations into a single tRPC surface.
+*
+* Replaces:
+*   - `device-persistence` capability (persistence methods absorbed here)
+*   - `device-management.router.ts` (deleted in Phase 2)
+*   - `device-ops.router.ts` (compat layer — deleted; device-provider ops absorbed here)
+*
+* All device provider addons (rtsp, onvif, frigate, …) are hub-local: they may
+* fork into separate processes but never run on remote cluster agents. Therefore:
+*   - No nodeId routing needed — this is a pure hub singleton.
+*   - The hub's DeviceRegistry is the single source of truth for all live devices.
+*   - No shadow registry or cross-node aggregation required.
+*
+* Forked workers register devices back to the hub via `ctx.devices`
+* (DeviceManagerApi → ctx.api.deviceManager.registerDevice), same as today.
+*/
 /** One child-placement directive on a container's `childLayout`. Structurally
 *  identical to `ChildLayoutEntry` in `device-management.ts` — the cap wire
 *  shape for the same field. The child is identified by its re-sync-stable
@@ -10692,7 +10710,12 @@ var ConfigEntrySchema = z.object({
 	value: z.unknown(),
 	description: z.string().optional()
 });
-var LinkedDevicesModeSchema = z.enum(["auto", "manual"]);
+/**
+* Only `manual` since D356: the operator picks, nothing links itself. The
+* field survives on the wire because a viewer already OTA'd parses it —
+* drop it once no shipped client reads `mode`.
+*/
+var LinkedDevicesModeSchema = z.enum(["manual"]);
 /** One resolved linked device — the compact projection consumers need. */
 var LinkedDeviceSchema = z.object({
 	deviceId: z.number(),
@@ -17535,6 +17558,9 @@ var RetrainStatusSchema = z.enum([
 *
 * `debug` does NOT pin; it is attention, not durability.
 *
+* `debugNote` is the operator's own words about WHAT should be checked on this
+* track, and it lives and dies with `debug` — see {@link MAX_TRACK_DEBUG_NOTE_LEN}.
+*
 * `favourited` IS a BOOLEAN pin (durability bit), not a retrain lifecycle.
 * A favourited track is skipped by retention the same way `staging` is, but
 * it does not enter `none|staging|trained` and has no staging budget.
@@ -17545,6 +17571,21 @@ var TrackFlagFields = {
 	markForTrain: z.boolean().optional(),
 	/** Operator marked this track for diagnostic attention. */
 	debug: z.boolean().optional(),
+	/**
+	* What the operator wants CHECKED on this track, in their own words.
+	*
+	* The flag alone says "look at this" and nothing about what for; a debug set
+	* reviewed hours later is a list of tracks with no question attached. Bound
+	* to `debug` on the WRITE side — the body clears it when `debug` goes off,
+	* and refuses it on a track whose debug is off — so a note can never outlive
+	* the attention it belongs to.
+	*
+	* `''` is a real value ("marked, nothing to add"); the ABSENT key means
+	* "leave whatever is stored alone", which is what lets a surface turn debug
+	* on without a note (a cancelled prompt) and what lets it edit the note
+	* without touching the flag.
+	*/
+	debugNote: z.string().max(500).optional(),
 	/** Operator favourited this track. Pins it against pruning. */
 	favourited: z.boolean().optional()
 };
@@ -17571,6 +17612,12 @@ var TrackFlagsSchema = z.object({
 	trackId: z.string(),
 	markForTrain: z.boolean(),
 	debug: z.boolean(),
+	/** The note as it STANDS after the write — never absent here (a track with no
+	*  note reports `''`), for the same reason the booleans are required: a
+	*  surface that has just written must be able to render the note it now owns
+	*  without a re-fetch, and an absent key would read as "unchanged" on a
+	*  screen that has no previous value to keep. */
+	debugNote: z.string(),
 	favourited: z.boolean(),
 	/** The lifecycle state the boolean was derived from. Required here (unlike on
 	*  a track row) because this shape is only ever produced by the write body,
@@ -18872,11 +18919,20 @@ var pipelineAnalyticsCapability = {
 		* staging is a deliberate action of the retrain page, which is also the only
 		* thing that produces `trained` in the first place.
 		*
-		* Returns the RESOLVED state of both flags (absent → `false`) plus the
-		* `retrainStatus` they were derived from, so a caller can drive its toggle
-		* — and render a `trained` badge — without a re-fetch. Rejects an unknown
-		* track, a new staging mark on a device already holding its full budget, and
-		* any `markForTrain` write against a trained track.
+		* `debugNote` is the operator's sentence about WHAT to check on this track,
+		* and it is bound to `debug`: writing `debug: false` clears it in the same
+		* statement, and a note sent for a track whose debug is off (and is not
+		* being turned on) is DROPPED with a warning rather than stored where
+		* nothing will ever read it. An omitted `debugNote` leaves the stored one
+		* alone — which is what lets a surface turn debug on when the operator
+		* declined to type anything, without that refusal costing them the flag.
+		*
+		* Returns the RESOLVED state of all three flags (absent → `false`) plus the
+		* note (absent → `''`) and the `retrainStatus` they were derived from, so a
+		* caller can drive its toggle — and render a `trained` badge — without a
+		* re-fetch. Rejects an unknown track, a new staging mark on a device already
+		* holding its full budget, and any `markForTrain` write against a trained
+		* track.
 		*/
 		setTrackFlags: method(z.object({
 			/** Log/audit scope only — the trackId is globally unique on its own. */

package/dist/{dist-DE3OH-FG.js → dist-DNwhsXWi.js}

@@ -10594,6 +10594,24 @@ var deviceProviderCapability = {
 		})
 	}
 };
+/**
+* Device Manager capability — hub-side singleton that unifies device persistence,
+* live registry access, and all management operations into a single tRPC surface.
+*
+* Replaces:
+*   - `device-persistence` capability (persistence methods absorbed here)
+*   - `device-management.router.ts` (deleted in Phase 2)
+*   - `device-ops.router.ts` (compat layer — deleted; device-provider ops absorbed here)
+*
+* All device provider addons (rtsp, onvif, frigate, …) are hub-local: they may
+* fork into separate processes but never run on remote cluster agents. Therefore:
+*   - No nodeId routing needed — this is a pure hub singleton.
+*   - The hub's DeviceRegistry is the single source of truth for all live devices.
+*   - No shadow registry or cross-node aggregation required.
+*
+* Forked workers register devices back to the hub via `ctx.devices`
+* (DeviceManagerApi → ctx.api.deviceManager.registerDevice), same as today.
+*/
 /** One child-placement directive on a container's `childLayout`. Structurally
 *  identical to `ChildLayoutEntry` in `device-management.ts` — the cap wire
 *  shape for the same field. The child is identified by its re-sync-stable
@@ -10692,7 +10710,12 @@ var ConfigEntrySchema = zod.z.object({
 	value: zod.z.unknown(),
 	description: zod.z.string().optional()
 });
-var LinkedDevicesModeSchema = zod.z.enum(["auto", "manual"]);
+/**
+* Only `manual` since D356: the operator picks, nothing links itself. The
+* field survives on the wire because a viewer already OTA'd parses it —
+* drop it once no shipped client reads `mode`.
+*/
+var LinkedDevicesModeSchema = zod.z.enum(["manual"]);
 /** One resolved linked device — the compact projection consumers need. */
 var LinkedDeviceSchema = zod.z.object({
 	deviceId: zod.z.number(),
@@ -17535,6 +17558,9 @@ var RetrainStatusSchema = zod.z.enum([
 *
 * `debug` does NOT pin; it is attention, not durability.
 *
+* `debugNote` is the operator's own words about WHAT should be checked on this
+* track, and it lives and dies with `debug` — see {@link MAX_TRACK_DEBUG_NOTE_LEN}.
+*
 * `favourited` IS a BOOLEAN pin (durability bit), not a retrain lifecycle.
 * A favourited track is skipped by retention the same way `staging` is, but
 * it does not enter `none|staging|trained` and has no staging budget.
@@ -17545,6 +17571,21 @@ var TrackFlagFields = {
 	markForTrain: zod.z.boolean().optional(),
 	/** Operator marked this track for diagnostic attention. */
 	debug: zod.z.boolean().optional(),
+	/**
+	* What the operator wants CHECKED on this track, in their own words.
+	*
+	* The flag alone says "look at this" and nothing about what for; a debug set
+	* reviewed hours later is a list of tracks with no question attached. Bound
+	* to `debug` on the WRITE side — the body clears it when `debug` goes off,
+	* and refuses it on a track whose debug is off — so a note can never outlive
+	* the attention it belongs to.
+	*
+	* `''` is a real value ("marked, nothing to add"); the ABSENT key means
+	* "leave whatever is stored alone", which is what lets a surface turn debug
+	* on without a note (a cancelled prompt) and what lets it edit the note
+	* without touching the flag.
+	*/
+	debugNote: zod.z.string().max(500).optional(),
 	/** Operator favourited this track. Pins it against pruning. */
 	favourited: zod.z.boolean().optional()
 };
@@ -17571,6 +17612,12 @@ var TrackFlagsSchema = zod.z.object({
 	trackId: zod.z.string(),
 	markForTrain: zod.z.boolean(),
 	debug: zod.z.boolean(),
+	/** The note as it STANDS after the write — never absent here (a track with no
+	*  note reports `''`), for the same reason the booleans are required: a
+	*  surface that has just written must be able to render the note it now owns
+	*  without a re-fetch, and an absent key would read as "unchanged" on a
+	*  screen that has no previous value to keep. */
+	debugNote: zod.z.string(),
 	favourited: zod.z.boolean(),
 	/** The lifecycle state the boolean was derived from. Required here (unlike on
 	*  a track row) because this shape is only ever produced by the write body,
@@ -18872,11 +18919,20 @@ var pipelineAnalyticsCapability = {
 		* staging is a deliberate action of the retrain page, which is also the only
 		* thing that produces `trained` in the first place.
 		*
-		* Returns the RESOLVED state of both flags (absent → `false`) plus the
-		* `retrainStatus` they were derived from, so a caller can drive its toggle
-		* — and render a `trained` badge — without a re-fetch. Rejects an unknown
-		* track, a new staging mark on a device already holding its full budget, and
-		* any `markForTrain` write against a trained track.
+		* `debugNote` is the operator's sentence about WHAT to check on this track,
+		* and it is bound to `debug`: writing `debug: false` clears it in the same
+		* statement, and a note sent for a track whose debug is off (and is not
+		* being turned on) is DROPPED with a warning rather than stored where
+		* nothing will ever read it. An omitted `debugNote` leaves the stored one
+		* alone — which is what lets a surface turn debug on when the operator
+		* declined to type anything, without that refusal costing them the flag.
+		*
+		* Returns the RESOLVED state of all three flags (absent → `false`) plus the
+		* note (absent → `''`) and the `retrainStatus` they were derived from, so a
+		* caller can drive its toggle — and render a `trained` badge — without a
+		* re-fetch. Rejects an unknown track, a new staging mark on a device already
+		* holding its full budget, and any `markForTrain` write against a trained
+		* track.
 		*/
 		setTrackFlags: method(zod.z.object({
 			/** Log/audit scope only — the trackId is globally unique on its own. */

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-DE3OH-FG.js");
+const require_dist = require("./dist-DNwhsXWi.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_formatter = require("./formatter-DqAKDlvN.js");
@@ -27,7 +27,7 @@ require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_file_data_plane = require("./file-data-plane-DO8KbxCe.js");
 const require_tls$1 = require("./tls-BxQlomxd.js");
-const require_manifest_system_deps = require("./manifest-system-deps-DMWd5Ygf.js");
+const require_manifest_system_deps = require("./manifest-system-deps-KBuTXH-y.js");
 const require_resource_monitor = require("./resource-monitor-CdnzxBLP.js");
 const require_custom_action_registry = require("./custom-action-registry-jY0NOZK8.js");
 let zod = require("zod");

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { $ as isArrayOutputSchema, Ct as scopesAllowDeviceCap, D as addonSettingsCapability, Gt as asJsonObject$1, Ht as ReadinessRegistry, It as DATAPLANE_SECRET_HEADER$1, Jt as createEvent, Kt as asNumber, Lt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Pt as errMsg$1, Rt as DEVICE_STATUS_METHOD, St as scopesAllowAddon, Ut as ReadinessTimeoutError, X as extractNestedAddonId, Yt as emitDownForOwnedCaps, Zt as expandCapMethods, an as scopeKey, at as kebabToCamel, bt as resolveMethodAuth, et as isCollectionArrayMethod, g as RUNTIME_DEFAULTS, gt as procedureAuthKey, in as resolveCapMount, it as isVoidInput, lt as logLevelAtMost, m as METHOD_ACCESS_MAP, nn as parseJsonUnknown, ot as lifecycleJobSchema, p as LOG_LEVEL_RANK, pt as objectInputDeclaresAddonId, qt as asString$1, rn as readinessKey, sn as EventCategory$1, t as ALL_CAPABILITY_DEFINITIONS, tn as parseJsonObject, tt as isObjectInput, ut as looseSchema } from "./dist-CCMYMmkQ.mjs";
+import { $ as isArrayOutputSchema, Ct as scopesAllowDeviceCap, D as addonSettingsCapability, Gt as asJsonObject$1, Ht as ReadinessRegistry, It as DATAPLANE_SECRET_HEADER$1, Jt as createEvent, Kt as asNumber, Lt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Pt as errMsg$1, Rt as DEVICE_STATUS_METHOD, St as scopesAllowAddon, Ut as ReadinessTimeoutError, X as extractNestedAddonId, Yt as emitDownForOwnedCaps, Zt as expandCapMethods, an as scopeKey, at as kebabToCamel, bt as resolveMethodAuth, et as isCollectionArrayMethod, g as RUNTIME_DEFAULTS, gt as procedureAuthKey, in as resolveCapMount, it as isVoidInput, lt as logLevelAtMost, m as METHOD_ACCESS_MAP, nn as parseJsonUnknown, ot as lifecycleJobSchema, p as LOG_LEVEL_RANK, pt as objectInputDeclaresAddonId, qt as asString$1, rn as readinessKey, sn as EventCategory$1, t as ALL_CAPABILITY_DEFINITIONS, tn as parseJsonObject, tt as isObjectInput, ut as looseSchema } from "./dist-C5PkvU4p.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";
@@ -26,7 +26,7 @@ import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
 import { a as parseTokenizedUrl, c as collectModelFiles, d as downloadModel, f as ensureModel, h as isModelDownloaded, i as parseRangeHeader, l as deleteModelFromDisk, m as getModelFilePath, n as contentTypeFor, o as resolveFilePath, p as fetchJson, r as createAuthenticatedFileServer, s as ModelDownloadService, t as createFileDataPlaneHandler, u as downloadFile } from "./file-data-plane-BhKdxJgf.mjs";
 import { C as registerLanHttpHandler, S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, b as bindPendingLanHttp, c as loadTlsCert, d as collectCertIdentity, f as CA_VALIDITY_DAYS, g as evaluateExistingCert, h as SERVER_AUTH_OID, i as writeExtraSans, l as reissueTlsLeaf, m as MAX_LEAF_VALIDITY_DAYS, n as readTlsAccessStatus, o as validateUploadedTls, p as LEAF_RENEWAL_WINDOW_DAYS, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, u as CA_COMMON_NAME, v as allFamiliesListenHost, x as closeLanHttp, y as applyLanHttp } from "./tls-DOTmtLCW.mjs";
-import { $ as buildUdsNativeCapProxy, $t as formatHeapSpaces, A as createUdsLoggerWithControl, At as HUB_MAIN_RSS_BUDGET_MB, B as readMoleculerFanoutMode, Bt as createV8Reclaimer, C as ipcParentLink, Ct as createAddonDataPlaneFacility, D as createUdsEventBus, Dt as HEAP_WATCH_INTERVAL_MS, E as createUdsEventBridge, Et as HEAP_RECLAIM_TRIGGER_MB, F as AGENT_CAP_FWD_SERVICE, Ft as RUNNER_RSS_BUDGET_ENV, G as createLocalTransport, Gt as reclaimIntervalMs, H as PARENT_ROUTED_PROVIDER_ADDON_ID, Ht as hubMainRssBudget, I as CapRouteResolver, It as ZERO_LOOP_DELAY, J as SocketChannel, Jt as startRunnerHeapWatch, K as UdsLocalTransportClient, Kt as shouldReclaim, L as CapRouteError, Lt as buildHeapSample, M as LocalChildRegistry, Mt as RSS_BUDGET_REANNOUNCE_MIN_MS, N as UDS_NO_ROUTE_PREFIX, Nt as RSS_BUDGET_RELEASE_RATIO, O as udsChildLogToWorkerEntry, Ot as HEAP_WATCH_WARN_RATIO, P as AGENT_CAP_FWD_ACTION, Pt as RUNNER_HEAP_WATCH_INTERVAL_MS, Q as buildNativeCapProxy, Qt as emitHeapDiagnosticReport, R as classifyCapRoute, Rt as createDeferredHeapWatchSink, S as buildLinkChain, St as runNpm, T as createParentUnownedCallHandler, Tt as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, U as __resetCapUsageRegistryForTests, Ut as nextRssBudgetState, V as CapUsageRegistry, Vt as describeRss, W as getCapUsageRegistry, Wt as parseRssBudgetMb, X as FrameDecoder, Xt as DECISIVE_HEAP_SPACES, Y as localEndpointPath, Yt as strandedMb, Z as encodeFrame, Zt as HEAP_SPACE_REPORT_MIN_MB, _ as AddonDepsManager, _n as createEventPlaneReader, _t as CapabilityUnavailableError, a as createUdsAddonContext, an as createSocketPlaneMeter, at as createAddonService, b as brokerCallForCap, bt as resolveAddonClass, c as getOrInitReadinessRegistryForClient, cn as formatSocketPlane, ct as capActionName, d as clusterEventTopic, dn as recordSocketFrame, dt as capServiceName, en as heapSpaceField, et as createBrokerDeviceManagerApi, f as getBrokerEventBus, fn as sampleSocketDirection, ft as parseCapAction, g as subscribePassthrough, gn as createEventPlaneMeter, gt as CapabilityHandle, h as setNodeEventInterest, hn as EVENT_PLANE_TOP_N, ht as DeviceRegistry, i as createAddonContext, in as SOCKET_PLANE_TOP_N, j as LocalChildClient, jt as HUB_RSS_BUDGET_ENV, k as createUdsLogger, kt as HUB_MAIN_HEAP_WATCH_LABEL, l as setHubConnected, ln as EMPTY_SOCKET_DIRECTION, lt as capActionSuffix, m as registerEventBusService, mn as socketDirectionMessages, mt as serializeTypedArrays, n as installManifestPythonDeps, nn as selectReportedSpaces, o as getWorkerDeviceRegistry, on as createSocketPlaneReader, ot as validateProviderRegistrations, p as getMoleculerEventStats, pn as socketDirectionBytes, pt as deserializeTypedArrays, q as UdsLocalTransportServer, qt as startHeapWatch, r as adaptBrokerToCluster, rn as EMPTY_SOCKET_PLANE_BASELINE, rt as mountNativeCapService, s as getOrInitReadinessRegistry, sn as diffSocketPlane, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestSystemDeps, tn as readHeapSpaces, u as EVENT_TOPIC_PREFIX, un as createSocketDirectionCounters, ut as capBareAction, v as createKernelHwAccel, vn as diffEventPlane, vt as copyBundledNativeModules, w as localProviderLink, wt as HEAP_RECLAIM_MIN_INTERVAL_MS, x as brokerTransportLink, xt as resolveNpmInvocation, y as resolveHwAccel, yn as formatEventPlane, yt as installManifestNativeDeps, z as callWithServiceDiscovery, zt as createLoopDelayMeter } from "./manifest-system-deps-BmXFnBQZ.mjs";
+import { $ as buildUdsNativeCapProxy, $t as formatHeapSpaces, A as createUdsLoggerWithControl, At as HUB_MAIN_RSS_BUDGET_MB, B as readMoleculerFanoutMode, Bt as createV8Reclaimer, C as ipcParentLink, Ct as createAddonDataPlaneFacility, D as createUdsEventBus, Dt as HEAP_WATCH_INTERVAL_MS, E as createUdsEventBridge, Et as HEAP_RECLAIM_TRIGGER_MB, F as AGENT_CAP_FWD_SERVICE, Ft as RUNNER_RSS_BUDGET_ENV, G as createLocalTransport, Gt as reclaimIntervalMs, H as PARENT_ROUTED_PROVIDER_ADDON_ID, Ht as hubMainRssBudget, I as CapRouteResolver, It as ZERO_LOOP_DELAY, J as SocketChannel, Jt as startRunnerHeapWatch, K as UdsLocalTransportClient, Kt as shouldReclaim, L as CapRouteError, Lt as buildHeapSample, M as LocalChildRegistry, Mt as RSS_BUDGET_REANNOUNCE_MIN_MS, N as UDS_NO_ROUTE_PREFIX, Nt as RSS_BUDGET_RELEASE_RATIO, O as udsChildLogToWorkerEntry, Ot as HEAP_WATCH_WARN_RATIO, P as AGENT_CAP_FWD_ACTION, Pt as RUNNER_HEAP_WATCH_INTERVAL_MS, Q as buildNativeCapProxy, Qt as emitHeapDiagnosticReport, R as classifyCapRoute, Rt as createDeferredHeapWatchSink, S as buildLinkChain, St as runNpm, T as createParentUnownedCallHandler, Tt as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, U as __resetCapUsageRegistryForTests, Ut as nextRssBudgetState, V as CapUsageRegistry, Vt as describeRss, W as getCapUsageRegistry, Wt as parseRssBudgetMb, X as FrameDecoder, Xt as DECISIVE_HEAP_SPACES, Y as localEndpointPath, Yt as strandedMb, Z as encodeFrame, Zt as HEAP_SPACE_REPORT_MIN_MB, _ as AddonDepsManager, _n as createEventPlaneReader, _t as CapabilityUnavailableError, a as createUdsAddonContext, an as createSocketPlaneMeter, at as createAddonService, b as brokerCallForCap, bt as resolveAddonClass, c as getOrInitReadinessRegistryForClient, cn as formatSocketPlane, ct as capActionName, d as clusterEventTopic, dn as recordSocketFrame, dt as capServiceName, en as heapSpaceField, et as createBrokerDeviceManagerApi, f as getBrokerEventBus, fn as sampleSocketDirection, ft as parseCapAction, g as subscribePassthrough, gn as createEventPlaneMeter, gt as CapabilityHandle, h as setNodeEventInterest, hn as EVENT_PLANE_TOP_N, ht as DeviceRegistry, i as createAddonContext, in as SOCKET_PLANE_TOP_N, j as LocalChildClient, jt as HUB_RSS_BUDGET_ENV, k as createUdsLogger, kt as HUB_MAIN_HEAP_WATCH_LABEL, l as setHubConnected, ln as EMPTY_SOCKET_DIRECTION, lt as capActionSuffix, m as registerEventBusService, mn as socketDirectionMessages, mt as serializeTypedArrays, n as installManifestPythonDeps, nn as selectReportedSpaces, o as getWorkerDeviceRegistry, on as createSocketPlaneReader, ot as validateProviderRegistrations, p as getMoleculerEventStats, pn as socketDirectionBytes, pt as deserializeTypedArrays, q as UdsLocalTransportServer, qt as startHeapWatch, r as adaptBrokerToCluster, rn as EMPTY_SOCKET_PLANE_BASELINE, rt as mountNativeCapService, s as getOrInitReadinessRegistry, sn as diffSocketPlane, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestSystemDeps, tn as readHeapSpaces, u as EVENT_TOPIC_PREFIX, un as createSocketDirectionCounters, ut as capBareAction, v as createKernelHwAccel, vn as diffEventPlane, vt as copyBundledNativeModules, w as localProviderLink, wt as HEAP_RECLAIM_MIN_INTERVAL_MS, x as brokerTransportLink, xt as resolveNpmInvocation, y as resolveHwAccel, yn as formatEventPlane, yt as installManifestNativeDeps, z as callWithServiceDiscovery, zt as createLoopDelayMeter } from "./manifest-system-deps-BF-C5NDL.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-BWmQ5i-o.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-F__gp_VX.mjs";
 import { z } from "zod";

package/dist/{manifest-system-deps-BmXFnBQZ.mjs → manifest-system-deps-BF-C5NDL.mjs}

@@ -1,4 +1,3 @@
-import "./dist-CCMYMmkQ.mjs";
 import "./hub-cap-forward-BdT320dq.mjs";
 import * as crypto$1 from "node:crypto";
 import { randomBytes, randomUUID } from "node:crypto";
@@ -16,7 +15,7 @@ import { createServer } from "node:http";
 import * as v8 from "node:v8";
 import { monitorEventLoopDelay } from "node:perf_hooks";
 import * as vm from "node:vm";
-import { BOOT_RECOVERY_BACKOFF_MS, DATAPLANE_SECRET_HEADER, DeviceType, DisposerChain, EventCategory, ReadinessRegistry, asJsonObject, asString, createDeviceProxy, createEventBusSliceSource, deviceOpsCapability, emitReadiness, errMsg, expandCapMethods, readNodePin, scopeKey, sleep, withCapInputDefaults } from "@camstack/types/addon";
+import { BOOT_RECOVERY_BACKOFF_MS, DATAPLANE_SECRET_HEADER, DEVICE_CHILDREN_BATCH_MAX, DeviceType, DisposerChain, EventCategory, ReadinessRegistry, asJsonObject, asString, createDeviceProxy, createEventBusSliceSource, deviceOpsCapability, emitReadiness, errMsg, expandCapMethods, readNodePin, scopeKey, sleep, withCapInputDefaults } from "@camstack/types/addon";
 import { connect, createConnection, createServer as createServer$1 } from "node:net";
 import { TRPCClientError, createTRPCClient } from "@trpc/client";
 //#region src/kernel/event-plane-report.ts
@@ -2627,58 +2626,6 @@ async function readModifyWrite(input) {
 //#endregion
 //#region src/kernel/moleculer/children-batch-loader.ts
 /**
-* "Who are my children?" asked by a thousand devices, answered in a handful of
-* calls.
-*
-* ## The number
-*
-* Every `BaseDevice` inherits a `getAccessoryChildren()` that returns `[]`, so
-* the accessory reconcile in `device-cap-proxy.ts` runs its orphan-prune step
-* for EVERY registered device — including the leaf accessories that can never
-* own one. Each pass asked `device-manager.getChildren` for its own id.
-* Measured on the live hub 2026-08-27, 120-second boot window, 1 017 devices:
-* **1 024 calls returning 919 rows in total**. A thousand round-trips, and a
-* thousand indexed scans behind them, to move less than one row each.
-*
-* ## Why a loader and not a caller that loops
-*
-* There is no loop to unroll. Reconcile is per-device by construction: it runs
-* inside `register()`, and again whenever a late feature-probe writes the
-* slice. The repetition is a THOUSAND INDEPENDENT CALLERS, not one caller
-* asking a thousand times — so the collapse has to happen between them.
-*
-* ## Why the batch is self-clocking, with no window to tune
-*
-* At most ONE batch call is in flight. Anything that arrives while it is in
-* flight lands in the next batch, dispatched the moment the current one
-* settles. That makes the batch size adapt to the arrival rate on its own:
-*
-*  - Idle: the first caller flushes on the next macrotask. No added wait, and
-*    no timer to pick a value for and be wrong about.
-*  - Boot: `BaseDeviceProvider.onRestoreDevices` issues every top-level
-*    `create()` at once and `runBounded(specs, 12)` spawns accessory children
-*    twelve wide, so reconciles arrive in bursts — measured as 2 372 device
-*    log lines in one 5-second bucket at boot+16s, against 62 at boot+142s.
-*    Every arrival inside one round-trip collapses into the next call.
-*  - Worst case: arrivals slower than a round-trip give batches of one, which
-*    is exactly today's cost. The loader can never be worse than what it
-*    replaces.
-*
-* A fixed debounce window would have to be guessed against that distribution,
-* and would tax the idle case to pay for the busy one.
-*
-* ## Degrading, rather than breaking, against an older hub
-*
-* `getChildrenBatch` is a NEW method: a hub that predates it rejects the call
-* (it does not silently strip the input and answer a different question, which
-* is what adding a `parentDeviceIds` FIELD to `getChildren` would have done).
-* Every waiter in a failed batch is then answered by the per-parent
-* `getChildren` it would have used anyway, so the reconcile is never denied
-* its answer. A rejection that names the method as unknown latches the
-* fallback permanently — re-probing a method the hub will never have, once per
-* batch for a whole boot, is the storm this exists to remove.
-*/
-/**
 * Narrow an untyped cap answer to the fields the reconcile reads.
 *
 * `callDeviceManager` is an untyped boundary, and the answer may come from a
@@ -2737,7 +2684,7 @@ function looksLikeUnknownMethod(err) {
 	return lowered.includes("not_found") || lowered.includes("no procedure") || lowered.includes("unknown method") || lowered.includes("no such method") || lowered.includes("not available");
 }
 function createChildrenBatchLoader(opts) {
-	const maxBatch = Math.max(1, opts.maxBatch ?? 256);
+	const maxBatch = Math.max(1, opts.maxBatch ?? DEVICE_CHILDREN_BATCH_MAX);
 	let pending = [];
 	let flushScheduled = false;
 	let flushing = false;

package/dist/{manifest-system-deps-DMWd5Ygf.js → manifest-system-deps-KBuTXH-y.js}

@@ -1,5 +1,4 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-require("./dist-DE3OH-FG.js");
 require("./hub-cap-forward-DmHNjbB0.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
@@ -2630,58 +2629,6 @@ async function readModifyWrite(input) {
 //#endregion
 //#region src/kernel/moleculer/children-batch-loader.ts
 /**
-* "Who are my children?" asked by a thousand devices, answered in a handful of
-* calls.
-*
-* ## The number
-*
-* Every `BaseDevice` inherits a `getAccessoryChildren()` that returns `[]`, so
-* the accessory reconcile in `device-cap-proxy.ts` runs its orphan-prune step
-* for EVERY registered device — including the leaf accessories that can never
-* own one. Each pass asked `device-manager.getChildren` for its own id.
-* Measured on the live hub 2026-08-27, 120-second boot window, 1 017 devices:
-* **1 024 calls returning 919 rows in total**. A thousand round-trips, and a
-* thousand indexed scans behind them, to move less than one row each.
-*
-* ## Why a loader and not a caller that loops
-*
-* There is no loop to unroll. Reconcile is per-device by construction: it runs
-* inside `register()`, and again whenever a late feature-probe writes the
-* slice. The repetition is a THOUSAND INDEPENDENT CALLERS, not one caller
-* asking a thousand times — so the collapse has to happen between them.
-*
-* ## Why the batch is self-clocking, with no window to tune
-*
-* At most ONE batch call is in flight. Anything that arrives while it is in
-* flight lands in the next batch, dispatched the moment the current one
-* settles. That makes the batch size adapt to the arrival rate on its own:
-*
-*  - Idle: the first caller flushes on the next macrotask. No added wait, and
-*    no timer to pick a value for and be wrong about.
-*  - Boot: `BaseDeviceProvider.onRestoreDevices` issues every top-level
-*    `create()` at once and `runBounded(specs, 12)` spawns accessory children
-*    twelve wide, so reconciles arrive in bursts — measured as 2 372 device
-*    log lines in one 5-second bucket at boot+16s, against 62 at boot+142s.
-*    Every arrival inside one round-trip collapses into the next call.
-*  - Worst case: arrivals slower than a round-trip give batches of one, which
-*    is exactly today's cost. The loader can never be worse than what it
-*    replaces.
-*
-* A fixed debounce window would have to be guessed against that distribution,
-* and would tax the idle case to pay for the busy one.
-*
-* ## Degrading, rather than breaking, against an older hub
-*
-* `getChildrenBatch` is a NEW method: a hub that predates it rejects the call
-* (it does not silently strip the input and answer a different question, which
-* is what adding a `parentDeviceIds` FIELD to `getChildren` would have done).
-* Every waiter in a failed batch is then answered by the per-parent
-* `getChildren` it would have used anyway, so the reconcile is never denied
-* its answer. A rejection that names the method as unknown latches the
-* fallback permanently — re-probing a method the hub will never have, once per
-* batch for a whole boot, is the storm this exists to remove.
-*/
-/**
 * Narrow an untyped cap answer to the fields the reconcile reads.
 *
 * `callDeviceManager` is an untyped boundary, and the answer may come from a
@@ -2740,7 +2687,7 @@ function looksLikeUnknownMethod(err) {
 	return lowered.includes("not_found") || lowered.includes("no procedure") || lowered.includes("unknown method") || lowered.includes("no such method") || lowered.includes("not available");
 }
 function createChildrenBatchLoader(opts) {
-	const maxBatch = Math.max(1, opts.maxBatch ?? 256);
+	const maxBatch = Math.max(1, opts.maxBatch ?? _camstack_types_addon.DEVICE_CHILDREN_BATCH_MAX);
 	let pending = [];
 	let flushScheduled = false;
 	let flushing = false;

package/dist/{retired-settings-keys-C0uslzAd.mjs → retired-settings-keys-BZU4lIH7.mjs}

@@ -1,4 +1,4 @@
-import { Gt as asJsonObject } from "./dist-CCMYMmkQ.mjs";
+import { Gt as asJsonObject } from "./dist-C5PkvU4p.mjs";
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/dist/{retired-settings-keys-BgUS9Rr3.js → retired-settings-keys-CUXClAIQ.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-DE3OH-FG.js");
+const require_dist = require("./dist-DNwhsXWi.js");
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.185",
+  "version": "1.2.187",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",