@camstack/system 1.2.217 → 1.2.218

package/dist/{dist-C85OOASj.js → dist-BOlMCOeT.js}

@@ -9683,6 +9683,17 @@ var coreBlocksCapability = {
 		})) }), { auth: "admin" })
 	}
 };
+/** Strip a catalog to what crosses the wire. Pure; the schemas are not touched. */
+function describeCustomActions(catalog) {
+	const out = {};
+	for (const [name, spec] of Object.entries(catalog)) out[name] = {
+		kind: spec.kind,
+		auth: spec.auth,
+		scope: spec.scope,
+		...spec.caller === "required" ? { caller: "required" } : {}
+	};
+	return out;
+}
 /**
 * `custom-model-registry` — collection cap exposing operator-registered
 * custom detection models. Each provider (today: `addon-model-studio`)
@@ -15189,6 +15200,7 @@ var NcSystemEventKindSchema = zod.z.enum([
 	"addon-crash-loop",
 	"addon-update-available",
 	"server-update-available",
+	"wrapper-update-available",
 	"alarm-triggered",
 	"alarm-armed",
 	"alarm-disarmed",
@@ -22228,6 +22240,97 @@ var ImageContractSchema = zod.z.object({
 	/** One operator-grade sentence: this node runs image X; the contract says Y. */
 	message: zod.z.string()
 });
+/**
+* How this node's SHELL was identified — the process wrapper the node runs
+* inside (a Docker container, the Electron desktop app, a bare host process).
+*
+* ## The rule: observe what you can, declare only what you cannot
+*
+* On 2026-08-02 `check-deployment-templates.ts` proved every day that the
+* templates declared `ghcr.io/camstack/camstack:intel-latest` while the hub
+* actually ran `camstack-server:intel-1.1.74` from a repository that had been
+* renamed and received no builds. The declaration was right; reality was not;
+* nothing compared them. A `CAMSTACK_WRAPPER=docker` written into a template
+* would be exactly that same declaration, so `kind` is NEVER an env var.
+*
+* What can honestly be observed from inside: `/.dockerenv` and `/proc/1/cgroup`
+* (a container), and the platform (a Linux container cannot exist on darwin or
+* win32). What cannot: that the node is a CHILD of an Electron main process —
+* `process.versions.electron` is `undefined` in the child, so the only channel
+* is `CAMSTACK_AGENT_APP_VERSION`, which the main process already writes
+* (`packages/desktop/src/main.ts`). That one declaration is unavoidable, and it
+* is marked as such on every row of {@link WrapperEvidenceSchema}.
+*
+*  - `docker`        — container observed, no Electron declaration.
+*  - `electron`      — Electron declared, no container observed.
+*  - `native`        — the container probe RAN and found nothing, and there is
+*                      no Electron declaration. Exclusion, but only from a
+*                      probe that actually answered.
+*  - `contradictory` — an Electron declaration INSIDE an observed container.
+*                      Reported, never resolved: both proofs stay on
+*                      `evidence` and nothing picks a winner.
+*  - `unknown`       — the container probe could not run (a Linux host that
+*                      denied `/proc/1/cgroup`). Never `native` by default,
+*                      for the same reason `assessImageContract` refuses to
+*                      say `in-sync` without proof.
+*
+* See D437.
+*/
+var WrapperKindSchema = zod.z.enum([
+	"docker",
+	"electron",
+	"native",
+	"contradictory",
+	"unknown"
+]);
+/**
+* One probe and what it returned — including the probes that returned
+* NOTHING. A record listing only the facts that held cannot tell "checked,
+* absent" from "never checked", and that difference is the whole distance
+* between `native` and `unknown`.
+*/
+var WrapperEvidenceSchema = zod.z.object({
+	/** Which probe this row reports. */
+	fact: zod.z.enum([
+		"dockerenv-file",
+		"proc-1-cgroup",
+		"platform",
+		"electron-app-version-env"
+	]),
+	/**
+	* `observed` — this process read it itself. `declared` — the shell told the
+	* process and nothing here can check it. Only the Electron app version is
+	* ever `declared`, and only because a child cannot see its parent.
+	*/
+	mode: zod.z.enum(["observed", "declared"]),
+	/** Did the probe support the fact it names? A `false` row is still evidence. */
+	holds: zod.z.boolean(),
+	/** What was actually read, verbatim enough for an operator to argue with. */
+	detail: zod.z.string()
+});
+/**
+* The shell verdict (see {@link WrapperKindSchema}) with the proofs that
+* produced it.
+*
+* There is deliberately NO `canSelfUpdate` and no apply action: a wrapper
+* update is an ANNOUNCEMENT. The notification body carries the exact command
+* for a `docker` shell and says the app restarts into the new build for
+* `electron`, and that sentence is chosen from `kind` alone — a boolean
+* nothing reads is the defect this repo keeps paying for.
+*/
+var WrapperIdentitySchema = zod.z.object({
+	kind: WrapperKindSchema,
+	/** Every probe that ran, in a stable order. Never empty. */
+	evidence: zod.z.array(WrapperEvidenceSchema),
+	/**
+	* The version of the SHELL, when the shell has one it can state: the
+	* Electron app version it declared, or the baked seed closure that
+	* fingerprints a container / app bundle. `null` for `contradictory` and
+	* `unknown` — which version belongs to the shell is precisely what is not
+	* known there.
+	*/
+	currentVersion: zod.z.string().nullable()
+});
 var ServerRollbackInfoSchema = zod.z.object({
 	/** The version that failed (or was manually rolled back). */
 	fromVersion: zod.z.string(),
@@ -22269,7 +22372,13 @@ var ServerPackageStatusSchema = zod.z.object({
 	* Seed-vs-contract verdict (see {@link ImageContractSchema}). Optional for
 	* version skew: an older provider's payload simply omits it.
 	*/
-	imageContract: ImageContractSchema.optional()
+	imageContract: ImageContractSchema.optional(),
+	/**
+	* What this node runs INSIDE (see {@link WrapperIdentitySchema}). Optional
+	* for version skew: an older provider's payload simply omits it, and an
+	* absent wrapper is unknown — never `native`.
+	*/
+	wrapper: WrapperIdentitySchema.optional()
 });
 var ServerUpdateCheckResultSchema = zod.z.object({
 	packageName: zod.z.string(),
@@ -45628,6 +45737,12 @@ Object.defineProperty(exports, "deriveBatteryPresence", {
 		return deriveBatteryPresence;
 	}
 });
+Object.defineProperty(exports, "describeCustomActions", {
+	enumerable: true,
+	get: function() {
+		return describeCustomActions;
+	}
+});
 Object.defineProperty(exports, "deviceManagerCapability", {
 	enumerable: true,
 	get: function() {

package/dist/{dist-DtDKMSeG.mjs → dist-DigmGsQS.mjs}

@@ -9683,6 +9683,17 @@ var coreBlocksCapability = {
 		})) }), { auth: "admin" })
 	}
 };
+/** Strip a catalog to what crosses the wire. Pure; the schemas are not touched. */
+function describeCustomActions(catalog) {
+	const out = {};
+	for (const [name, spec] of Object.entries(catalog)) out[name] = {
+		kind: spec.kind,
+		auth: spec.auth,
+		scope: spec.scope,
+		...spec.caller === "required" ? { caller: "required" } : {}
+	};
+	return out;
+}
 /**
 * `custom-model-registry` — collection cap exposing operator-registered
 * custom detection models. Each provider (today: `addon-model-studio`)
@@ -15189,6 +15200,7 @@ var NcSystemEventKindSchema = z.enum([
 	"addon-crash-loop",
 	"addon-update-available",
 	"server-update-available",
+	"wrapper-update-available",
 	"alarm-triggered",
 	"alarm-armed",
 	"alarm-disarmed",
@@ -22228,6 +22240,97 @@ var ImageContractSchema = z.object({
 	/** One operator-grade sentence: this node runs image X; the contract says Y. */
 	message: z.string()
 });
+/**
+* How this node's SHELL was identified — the process wrapper the node runs
+* inside (a Docker container, the Electron desktop app, a bare host process).
+*
+* ## The rule: observe what you can, declare only what you cannot
+*
+* On 2026-08-02 `check-deployment-templates.ts` proved every day that the
+* templates declared `ghcr.io/camstack/camstack:intel-latest` while the hub
+* actually ran `camstack-server:intel-1.1.74` from a repository that had been
+* renamed and received no builds. The declaration was right; reality was not;
+* nothing compared them. A `CAMSTACK_WRAPPER=docker` written into a template
+* would be exactly that same declaration, so `kind` is NEVER an env var.
+*
+* What can honestly be observed from inside: `/.dockerenv` and `/proc/1/cgroup`
+* (a container), and the platform (a Linux container cannot exist on darwin or
+* win32). What cannot: that the node is a CHILD of an Electron main process —
+* `process.versions.electron` is `undefined` in the child, so the only channel
+* is `CAMSTACK_AGENT_APP_VERSION`, which the main process already writes
+* (`packages/desktop/src/main.ts`). That one declaration is unavoidable, and it
+* is marked as such on every row of {@link WrapperEvidenceSchema}.
+*
+*  - `docker`        — container observed, no Electron declaration.
+*  - `electron`      — Electron declared, no container observed.
+*  - `native`        — the container probe RAN and found nothing, and there is
+*                      no Electron declaration. Exclusion, but only from a
+*                      probe that actually answered.
+*  - `contradictory` — an Electron declaration INSIDE an observed container.
+*                      Reported, never resolved: both proofs stay on
+*                      `evidence` and nothing picks a winner.
+*  - `unknown`       — the container probe could not run (a Linux host that
+*                      denied `/proc/1/cgroup`). Never `native` by default,
+*                      for the same reason `assessImageContract` refuses to
+*                      say `in-sync` without proof.
+*
+* See D437.
+*/
+var WrapperKindSchema = z.enum([
+	"docker",
+	"electron",
+	"native",
+	"contradictory",
+	"unknown"
+]);
+/**
+* One probe and what it returned — including the probes that returned
+* NOTHING. A record listing only the facts that held cannot tell "checked,
+* absent" from "never checked", and that difference is the whole distance
+* between `native` and `unknown`.
+*/
+var WrapperEvidenceSchema = z.object({
+	/** Which probe this row reports. */
+	fact: z.enum([
+		"dockerenv-file",
+		"proc-1-cgroup",
+		"platform",
+		"electron-app-version-env"
+	]),
+	/**
+	* `observed` — this process read it itself. `declared` — the shell told the
+	* process and nothing here can check it. Only the Electron app version is
+	* ever `declared`, and only because a child cannot see its parent.
+	*/
+	mode: z.enum(["observed", "declared"]),
+	/** Did the probe support the fact it names? A `false` row is still evidence. */
+	holds: z.boolean(),
+	/** What was actually read, verbatim enough for an operator to argue with. */
+	detail: z.string()
+});
+/**
+* The shell verdict (see {@link WrapperKindSchema}) with the proofs that
+* produced it.
+*
+* There is deliberately NO `canSelfUpdate` and no apply action: a wrapper
+* update is an ANNOUNCEMENT. The notification body carries the exact command
+* for a `docker` shell and says the app restarts into the new build for
+* `electron`, and that sentence is chosen from `kind` alone — a boolean
+* nothing reads is the defect this repo keeps paying for.
+*/
+var WrapperIdentitySchema = z.object({
+	kind: WrapperKindSchema,
+	/** Every probe that ran, in a stable order. Never empty. */
+	evidence: z.array(WrapperEvidenceSchema),
+	/**
+	* The version of the SHELL, when the shell has one it can state: the
+	* Electron app version it declared, or the baked seed closure that
+	* fingerprints a container / app bundle. `null` for `contradictory` and
+	* `unknown` — which version belongs to the shell is precisely what is not
+	* known there.
+	*/
+	currentVersion: z.string().nullable()
+});
 var ServerRollbackInfoSchema = z.object({
 	/** The version that failed (or was manually rolled back). */
 	fromVersion: z.string(),
@@ -22269,7 +22372,13 @@ var ServerPackageStatusSchema = z.object({
 	* Seed-vs-contract verdict (see {@link ImageContractSchema}). Optional for
 	* version skew: an older provider's payload simply omits it.
 	*/
-	imageContract: ImageContractSchema.optional()
+	imageContract: ImageContractSchema.optional(),
+	/**
+	* What this node runs INSIDE (see {@link WrapperIdentitySchema}). Optional
+	* for version skew: an older provider's payload simply omits it, and an
+	* absent wrapper is unknown — never `native`.
+	*/
+	wrapper: WrapperIdentitySchema.optional()
 });
 var ServerUpdateCheckResultSchema = z.object({
 	packageName: z.string(),
@@ -45274,4 +45383,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { evictionPolicyOfLocation as $, DeviceRole as $t, addonSettingsCapability as A, resolveLocationMode as At, coreBlockIdFromAddonId as B, storageOccupancyCapability as Bt, ScopedTokenSchema as C, objectInputDeclaresAddonId as Ct, StorageMigrationJobSchema as D, reducePoints as Dt, StorageLocationTypeSchema as E, procedureAuthKey as Et, bareAddonId as F, scoreRuntimes as Ft, deviceManagerCapability as G, vectorStoreCapability as Gt, dataStoreProviderCapability as H, streamQualityLabel as Ht, batteryCapability as I, settingsStoreCapability as It, doorbellCapability as J, BaseAddon as Jt, deviceStateCapability as K, withLocationMode as Kt, buildStreamParamsConfigSchema as L, snapshotCapability as Lt, alertsCapability as M, runtimeStatePolicyFor as Mt, authProviderCapability as N, scopesAllowAddon as Nt, UserRecordSchema as O, resolveBucketMs as Ot, backupCapability as P, scopesAllowDeviceCap as Pt, evaluateSensorEdge as Q, DeviceFeature as Qt, collectSecretConfigKeys as R, storageCapability as Rt, STREAM_PROFILE_META as S, normalizeUnit as St, StorageLocationModeSchema as T, platformProbeCapability as Tt, decodeVectorBase64 as U, userManagementCapability as Ut, coreBlocksCapability as V, storageProviderCapability as Vt, deriveBatteryPresence as W, vectorDimFromBase64 as Wt, enumerateItemArrayFields as X, DEVICE_SETTINGS_CONTRIBUTION_METHODS as Xt, enumerateInferenceDevices as Y, DATAPLANE_SECRET_HEADER as Yt, enumerateSchemaFields as Z, DEVICE_STATUS_METHOD as Zt, RUNTIME_DEFAULTS as _, resolveCapMount as _n, looseSchema as _t, CAMERA_SWITCH_ORDER as a, asNumber as an, isCollectionArrayMethod as at, SOURCE_DEVICE_TYPES as b, EventCategory as bn, metricsProviderCapability as bt, CORE_BLOCK_ADDON_PREFIX as c, emitDownForOwnedCaps as cn, isSameAddonId as ct, DeclaredDevices as d, hydrateSchema as dn, kebabToCamel as dt, DeviceType as en, extractNestedAddonId as et, DeviceStatusSchema as f, isDeviceConfigCap as fn, legacyModeOf as ft, REDACTED_SECRET as g, readinessKey as gn, logLevelAtMost as gt, METHOD_ACCESS_MAP as h, parseJsonUnknown as hn, logDestinationCapability as ht, BatteryStatusSchema as i, asJsonObject as in, isArrayOutputSchema as it, addonWidgetsCapability as j, resolveMethodAuth as jt, addonPagesCapability as k, resolveContainerPrimaryChild as kt, CoreBlockSchema as l, emitReadiness as ln, isSourceCap as lt, LegacyStorageLocationDefaultSchema as m, parseJsonObject as mn, localNetworkCapability as mt, AlertSchema as n, ReadinessTimeoutError as nn, foldSnapshotByFunction as nt, CAP_NAMES_WITH_STATUS as o, asString as on, isLocationEnabled as ot, LOG_LEVEL_RANK as p, nodePin as pn, lifecycleJobSchema as pt, deviceStatusCapability as q, errMsg as qt, ApiKeyRecordSchema as r, WELL_KNOWN_TAB_MAP as rn, gbToBytes as rt, CORE_BLOCKS_ADDON_ID as s, createEvent as sn, isObjectInput as st, ALL_CAPABILITY_DEFINITIONS as t, ReadinessRegistry as tn, filesystemBrowseCapability as tt, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as u, expandCapMethods as un, isVoidInput as ut, RecordingStatusSchema as v, scopeKey as vn, mayReadLocation as vt, StorageCleanupJobSchema as w, parseStreamParamsFormPatch as wt, STORAGE_ACCESS_FALLBACK as x, modeMayWrite as xt, SOURCE_CAPS as y, sleep as yn, mayWriteToLocation as yt, coreBlockAddonId as z, storageMigrationCapability as zt };
+export { evaluateSensorEdge as $, DeviceFeature as $t, addonSettingsCapability as A, resolveContainerPrimaryChild as At, coreBlockIdFromAddonId as B, storageMigrationCapability as Bt, ScopedTokenSchema as C, normalizeUnit as Ct, StorageMigrationJobSchema as D, procedureAuthKey as Dt, StorageLocationTypeSchema as E, platformProbeCapability as Et, bareAddonId as F, scopesAllowDeviceCap as Ft, describeCustomActions as G, vectorDimFromBase64 as Gt, dataStoreProviderCapability as H, storageProviderCapability as Ht, batteryCapability as I, scoreRuntimes as It, deviceStatusCapability as J, errMsg as Jt, deviceManagerCapability as K, vectorStoreCapability as Kt, buildStreamParamsConfigSchema as L, settingsStoreCapability as Lt, alertsCapability as M, resolveMethodAuth as Mt, authProviderCapability as N, runtimeStatePolicyFor as Nt, UserRecordSchema as O, reducePoints as Ot, backupCapability as P, scopesAllowAddon as Pt, enumerateSchemaFields as Q, DEVICE_STATUS_METHOD as Qt, collectSecretConfigKeys as R, snapshotCapability as Rt, STREAM_PROFILE_META as S, modeMayWrite as St, StorageLocationModeSchema as T, parseStreamParamsFormPatch as Tt, decodeVectorBase64 as U, streamQualityLabel as Ut, coreBlocksCapability as V, storageOccupancyCapability as Vt, deriveBatteryPresence as W, userManagementCapability as Wt, enumerateInferenceDevices as X, DATAPLANE_SECRET_HEADER as Xt, doorbellCapability as Y, BaseAddon as Yt, enumerateItemArrayFields as Z, DEVICE_SETTINGS_CONTRIBUTION_METHODS as Zt, RUNTIME_DEFAULTS as _, readinessKey as _n, logLevelAtMost as _t, CAMERA_SWITCH_ORDER as a, asJsonObject as an, isArrayOutputSchema as at, SOURCE_DEVICE_TYPES as b, sleep as bn, mayWriteToLocation as bt, CORE_BLOCK_ADDON_PREFIX as c, createEvent as cn, isObjectInput as ct, DeclaredDevices as d, expandCapMethods as dn, isVoidInput as dt, DeviceRole as en, evictionPolicyOfLocation as et, DeviceStatusSchema as f, hydrateSchema as fn, kebabToCamel as ft, REDACTED_SECRET as g, parseJsonUnknown as gn, logDestinationCapability as gt, METHOD_ACCESS_MAP as h, parseJsonObject as hn, localNetworkCapability as ht, BatteryStatusSchema as i, WELL_KNOWN_TAB_MAP as in, gbToBytes as it, addonWidgetsCapability as j, resolveLocationMode as jt, addonPagesCapability as k, resolveBucketMs as kt, CoreBlockSchema as l, emitDownForOwnedCaps as ln, isSameAddonId as lt, LegacyStorageLocationDefaultSchema as m, nodePin as mn, lifecycleJobSchema as mt, AlertSchema as n, ReadinessRegistry as nn, filesystemBrowseCapability as nt, CAP_NAMES_WITH_STATUS as o, asNumber as on, isCollectionArrayMethod as ot, LOG_LEVEL_RANK as p, isDeviceConfigCap as pn, legacyModeOf as pt, deviceStateCapability as q, withLocationMode as qt, ApiKeyRecordSchema as r, ReadinessTimeoutError as rn, foldSnapshotByFunction as rt, CORE_BLOCKS_ADDON_ID as s, asString as sn, isLocationEnabled as st, ALL_CAPABILITY_DEFINITIONS as t, DeviceType as tn, extractNestedAddonId as tt, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as u, emitReadiness as un, isSourceCap as ut, RecordingStatusSchema as v, resolveCapMount as vn, looseSchema as vt, StorageCleanupJobSchema as w, objectInputDeclaresAddonId as wt, STORAGE_ACCESS_FALLBACK as x, EventCategory as xn, metricsProviderCapability as xt, SOURCE_CAPS as y, scopeKey as yn, mayReadLocation as yt, coreBlockAddonId as z, storageCapability as zt };

package/dist/index.d.ts

@@ -52,7 +52,9 @@ export type { SocketPeerDelta, SocketPeerSample, SocketPlaneBaseline, SocketPlan
 export { createSocketPlaneMeter, createSocketPlaneReader, diffSocketPlane, EMPTY_SOCKET_PLANE_BASELINE, formatSocketPlane, SOCKET_PLANE_TOP_N, } from './kernel/socket-plane-report.js';
 export type { HeapDiagnosticDeps, HeapDiagnosticRequest, HeapSpaceReader, HeapSpaceUsage, } from './kernel/heap-spaces.js';
 export { DECISIVE_HEAP_SPACES, emitHeapDiagnosticReport, formatHeapSpaces, HEAP_SPACE_REPORT_MIN_MB, heapSpaceField, readHeapSpaces, selectReportedSpaces, } from './kernel/heap-spaces.js';
-export type { DeferredHeapWatchSink, HeapReclaimer, HeapReclaimOptions, HeapSample, HeapWatchProbes, HeapWatchSink, LoopDelayMeter, LoopDelaySample, RssBreakdown, RssBudgetOptions, RssBudgetState, RssGrowthShape, RunnerHeapWatchOptions, } from './kernel/heap-watch.js';
+export type { ArrayBufferCensus, ArrayBufferCensusContext, ArrayBufferCensusGate, ArrayBufferCensusGateOptions, ArrayBufferCensusReport, ArrayBufferCensusVerdict, ArrayBufferExactSize, ArrayBufferSizeBucket, } from './kernel/array-buffer-census.js';
+export { ARRAY_BUFFER_CENSUS_COOLDOWN_MS, ARRAY_BUFFER_CENSUS_SUSTAIN_MS, ARRAY_BUFFER_CENSUS_THRESHOLD_MB, ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, createArrayBufferCensusGate, createInspectorArrayBufferCensus, formatArrayBufferCensus, isArrayBufferCensusReport, } from './kernel/array-buffer-census.js';
+export type { ArrayBufferCensusProbe, DeferredHeapWatchSink, HeapReclaimer, HeapReclaimOptions, HeapSample, HeapWatchProbes, HeapWatchSink, LoopDelayMeter, LoopDelaySample, RssBreakdown, RssBudgetOptions, RssBudgetState, RssGrowthShape, RunnerHeapWatchOptions, } from './kernel/heap-watch.js';
 export { buildHeapSample, createDeferredHeapWatchSink, createLoopDelayMeter, createV8Reclaimer, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, hubMainRssBudget, describeRss, nextRssBudgetState, parseRssBudgetMb, reclaimIntervalMs, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, shouldReclaim, startHeapWatch, startRunnerHeapWatch, strandedMb, ZERO_LOOP_DELAY, } from './kernel/heap-watch.js';
 export type { StallVerdict } from './kernel/event-loop-stall-monitor.js';
 export { attributeStall, STALL_REPORT_MS, STALL_TICK_MS, startEventLoopStallMonitor, } from './kernel/event-loop-stall-monitor.js';

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-C85OOASj.js");
+const require_dist = require("./dist-BOlMCOeT.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_formatter = require("./formatter-DqAKDlvN.js");
@@ -27,9 +27,9 @@ require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_event_loop_stall_monitor = require("./event-loop-stall-monitor-DM9OAzy8.js");
 const require_tls$1 = require("./tls-BxQlomxd.js");
-const require_manifest_system_deps = require("./manifest-system-deps-DvY1bY_n.js");
+const require_manifest_system_deps = require("./manifest-system-deps-Bo92lg5u.js");
 const require_resource_monitor = require("./resource-monitor-CdnzxBLP.js");
-const require_custom_action_registry = require("./custom-action-registry-jY0NOZK8.js");
+const require_custom_action_registry = require("./custom-action-registry-BDwM5qAK.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
@@ -95777,6 +95777,10 @@ exports.AGENT_CAP_FWD_ACTION = require_manifest_system_deps.AGENT_CAP_FWD_ACTION
 exports.AGENT_CAP_FWD_SERVICE = require_manifest_system_deps.AGENT_CAP_FWD_SERVICE;
 exports.AGENT_READINESS_SERVICE_NAME = AGENT_READINESS_SERVICE_NAME;
 exports.ALL_CAPABILITY_DEFINITIONS = require_dist.ALL_CAPABILITY_DEFINITIONS;
+exports.ARRAY_BUFFER_CENSUS_COOLDOWN_MS = require_manifest_system_deps.ARRAY_BUFFER_CENSUS_COOLDOWN_MS;
+exports.ARRAY_BUFFER_CENSUS_SUSTAIN_MS = require_manifest_system_deps.ARRAY_BUFFER_CENSUS_SUSTAIN_MS;
+exports.ARRAY_BUFFER_CENSUS_THRESHOLD_MB = require_manifest_system_deps.ARRAY_BUFFER_CENSUS_THRESHOLD_MB;
+exports.ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO = require_manifest_system_deps.ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO;
 exports.AddonApiFactory = AddonApiFactory;
 exports.AddonDepsManager = require_manifest_system_deps.AddonDepsManager;
 exports.AddonEngineManager = AddonEngineManager;
@@ -95960,6 +95964,7 @@ exports.copyExtraFileDirs = copyExtraFileDirs;
 exports.createAddonContext = require_manifest_system_deps.createAddonContext;
 exports.createAddonDataPlaneFacility = require_manifest_system_deps.createAddonDataPlaneFacility;
 exports.createAddonService = require_manifest_system_deps.createAddonService;
+exports.createArrayBufferCensusGate = require_manifest_system_deps.createArrayBufferCensusGate;
 exports.createAuthenticatedFileServer = require_event_loop_stall_monitor.createAuthenticatedFileServer;
 exports.createBroker = createBroker;
 exports.createBrokerDeviceManagerApi = require_manifest_system_deps.createBrokerDeviceManagerApi;
@@ -95971,6 +95976,7 @@ exports.createEventPlaneReader = require_manifest_system_deps.createEventPlaneRe
 exports.createFileDataPlaneHandler = require_event_loop_stall_monitor.createFileDataPlaneHandler;
 exports.createHubCapForwardService = require_hub_cap_forward.createHubCapForwardService;
 exports.createHubService = createHubService;
+exports.createInspectorArrayBufferCensus = require_manifest_system_deps.createInspectorArrayBufferCensus;
 exports.createKernelHwAccel = require_manifest_system_deps.createKernelHwAccel;
 exports.createLocalTransport = require_manifest_system_deps.createLocalTransport;
 exports.createLoopDelayMeter = require_manifest_system_deps.createLoopDelayMeter;
@@ -96040,6 +96046,7 @@ Object.defineProperty(exports, "findInPath", {
 		return _camstack_types_node.findInPath;
 	}
 });
+exports.formatArrayBufferCensus = require_manifest_system_deps.formatArrayBufferCensus;
 exports.formatEventPlane = require_manifest_system_deps.formatEventPlane;
 exports.formatHeapSpaces = require_manifest_system_deps.formatHeapSpaces;
 exports.formatLogLine = require_formatter.formatLogLine;
@@ -96095,6 +96102,7 @@ Object.defineProperty(exports, "installPythonRequirements", {
 });
 exports.ipcParentLink = require_manifest_system_deps.ipcParentLink;
 exports.isAddonDeploySource = isAddonDeploySource;
+exports.isArrayBufferCensusReport = require_manifest_system_deps.isArrayBufferCensusReport;
 exports.isArrayOutputSchema = require_dist.isArrayOutputSchema;
 exports.isClusterSecretMismatchError = isClusterSecretMismatchError;
 exports.isCollectionArrayMethod = require_dist.isCollectionArrayMethod;

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { A as addonSettingsCapability, Ct as objectInputDeclaresAddonId, Et as procedureAuthKey, Nt as scopesAllowAddon, Pt as scopesAllowDeviceCap, Xt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Yt as DATAPLANE_SECRET_HEADER$1, Zt as DEVICE_STATUS_METHOD, _ as RUNTIME_DEFAULTS, _n as resolveCapMount, _t as looseSchema, an as asNumber, at as isCollectionArrayMethod, bn as EventCategory$1, cn as emitDownForOwnedCaps, dt as kebabToCamel, et as extractNestedAddonId, gn as readinessKey, gt as logLevelAtMost, h as METHOD_ACCESS_MAP, hn as parseJsonUnknown, in as asJsonObject$1, it as isArrayOutputSchema, jt as resolveMethodAuth, mn as parseJsonObject, nn as ReadinessTimeoutError, on as asString$1, p as LOG_LEVEL_RANK, pt as lifecycleJobSchema, qt as errMsg$1, sn as createEvent, st as isObjectInput, t as ALL_CAPABILITY_DEFINITIONS, tn as ReadinessRegistry, un as expandCapMethods, ut as isVoidInput, vn as scopeKey } from "./dist-DtDKMSeG.mjs";
+import { A as addonSettingsCapability, Dt as procedureAuthKey, Ft as scopesAllowDeviceCap, Jt as errMsg$1, Mt as resolveMethodAuth, Pt as scopesAllowAddon, Qt as DEVICE_STATUS_METHOD, Xt as DATAPLANE_SECRET_HEADER$1, Zt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, _ as RUNTIME_DEFAULTS, _n as readinessKey, _t as logLevelAtMost, an as asJsonObject$1, at as isArrayOutputSchema, cn as createEvent, ct as isObjectInput, dn as expandCapMethods, dt as isVoidInput, ft as kebabToCamel, gn as parseJsonUnknown, h as METHOD_ACCESS_MAP, hn as parseJsonObject, ln as emitDownForOwnedCaps, mt as lifecycleJobSchema, nn as ReadinessRegistry, on as asNumber, ot as isCollectionArrayMethod, p as LOG_LEVEL_RANK, rn as ReadinessTimeoutError, sn as asString$1, t as ALL_CAPABILITY_DEFINITIONS, tt as extractNestedAddonId, vn as resolveCapMount, vt as looseSchema, wt as objectInputDeclaresAddonId, xn as EventCategory$1, yn as scopeKey } from "./dist-DigmGsQS.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";
@@ -26,9 +26,9 @@ import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
 import { _ as fetchJson, a as createFileDataPlaneHandler, c as parseRangeHeader, d as ModelDownloadService, f as collectModelFiles, g as ensureModel, h as downloadModel, i as startEventLoopStallMonitor, l as parseTokenizedUrl, m as downloadFile, n as STALL_TICK_MS, o as contentTypeFor, p as deleteModelFromDisk, r as attributeStall, s as createAuthenticatedFileServer, t as STALL_REPORT_MS, u as resolveFilePath, v as getModelFilePath, y as isModelDownloaded } from "./event-loop-stall-monitor-B3CFd9tM.mjs";
 import { C as registerLanHttpHandler, S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, b as bindPendingLanHttp, c as loadTlsCert, d as collectCertIdentity, f as CA_VALIDITY_DAYS, g as evaluateExistingCert, h as SERVER_AUTH_OID, i as writeExtraSans, l as reissueTlsLeaf, m as MAX_LEAF_VALIDITY_DAYS, n as readTlsAccessStatus, o as validateUploadedTls, p as LEAF_RENEWAL_WINDOW_DAYS, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, u as CA_COMMON_NAME, v as allFamiliesListenHost, x as closeLanHttp, y as applyLanHttp } from "./tls-DOTmtLCW.mjs";
-import { $ as buildUdsNativeCapProxy, $t as formatHeapSpaces, A as createUdsLoggerWithControl, At as HUB_MAIN_RSS_BUDGET_MB, B as readMoleculerFanoutMode, Bt as createV8Reclaimer, C as ipcParentLink, Ct as createAddonDataPlaneFacility, D as createUdsEventBus, Dt as HEAP_WATCH_INTERVAL_MS, E as createUdsEventBridge, Et as HEAP_RECLAIM_TRIGGER_MB, F as AGENT_CAP_FWD_SERVICE, Ft as RUNNER_RSS_BUDGET_ENV, G as createLocalTransport, Gt as reclaimIntervalMs, H as PARENT_ROUTED_PROVIDER_ADDON_ID, Ht as hubMainRssBudget, I as CapRouteResolver, It as ZERO_LOOP_DELAY, J as SocketChannel, Jt as startRunnerHeapWatch, K as UdsLocalTransportClient, Kt as shouldReclaim, L as CapRouteError, Lt as buildHeapSample, M as LocalChildRegistry, Mt as RSS_BUDGET_REANNOUNCE_MIN_MS, N as UDS_NO_ROUTE_PREFIX, Nt as RSS_BUDGET_RELEASE_RATIO, O as udsChildLogToWorkerEntry, Ot as HEAP_WATCH_WARN_RATIO, P as AGENT_CAP_FWD_ACTION, Pt as RUNNER_HEAP_WATCH_INTERVAL_MS, Q as buildNativeCapProxy, Qt as emitHeapDiagnosticReport, R as classifyCapRoute, Rt as createDeferredHeapWatchSink, S as buildLinkChain, St as runNpm, T as createParentUnownedCallHandler, Tt as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, U as __resetCapUsageRegistryForTests, Ut as nextRssBudgetState, V as CapUsageRegistry, Vt as describeRss, W as getCapUsageRegistry, Wt as parseRssBudgetMb, X as FrameDecoder, Xt as DECISIVE_HEAP_SPACES, Y as localEndpointPath, Yt as strandedMb, Z as encodeFrame, Zt as HEAP_SPACE_REPORT_MIN_MB, _ as AddonDepsManager, _n as createEventPlaneReader, _t as CapabilityUnavailableError, a as createUdsAddonContext, an as createSocketPlaneMeter, at as createAddonService, b as brokerCallForCap, bt as resolveAddonClass, c as getOrInitReadinessRegistryForClient, cn as formatSocketPlane, ct as capActionName, d as clusterEventTopic, dn as recordSocketFrame, dt as capServiceName, en as heapSpaceField, et as createBrokerDeviceManagerApi, f as getBrokerEventBus, fn as sampleSocketDirection, ft as parseCapAction, g as subscribePassthrough, gn as createEventPlaneMeter, gt as CapabilityHandle, h as setNodeEventInterest, hn as EVENT_PLANE_TOP_N, ht as DeviceRegistry, i as createAddonContext, in as SOCKET_PLANE_TOP_N, j as LocalChildClient, jt as HUB_RSS_BUDGET_ENV, k as createUdsLogger, kt as HUB_MAIN_HEAP_WATCH_LABEL, l as setHubConnected, ln as EMPTY_SOCKET_DIRECTION, lt as capActionSuffix, m as registerEventBusService, mn as socketDirectionMessages, mt as serializeTypedArrays, n as installManifestPythonDeps, nn as selectReportedSpaces, o as getWorkerDeviceRegistry, on as createSocketPlaneReader, ot as validateProviderRegistrations, p as getMoleculerEventStats, pn as socketDirectionBytes, pt as deserializeTypedArrays, q as UdsLocalTransportServer, qt as startHeapWatch, r as adaptBrokerToCluster, rn as EMPTY_SOCKET_PLANE_BASELINE, rt as mountNativeCapService, s as getOrInitReadinessRegistry, sn as diffSocketPlane, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestSystemDeps, tn as readHeapSpaces, u as EVENT_TOPIC_PREFIX, un as createSocketDirectionCounters, ut as capBareAction, v as createKernelHwAccel, vn as diffEventPlane, vt as copyBundledNativeModules, w as localProviderLink, wt as HEAP_RECLAIM_MIN_INTERVAL_MS, x as brokerTransportLink, xt as resolveNpmInvocation, y as resolveHwAccel, yn as formatEventPlane, yt as installManifestNativeDeps, z as callWithServiceDiscovery, zt as createLoopDelayMeter } from "./manifest-system-deps-726RBOX7.mjs";
+import { $ as buildUdsNativeCapProxy, $t as ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, A as createUdsLoggerWithControl, At as HUB_MAIN_RSS_BUDGET_MB, B as readMoleculerFanoutMode, Bt as createV8Reclaimer, C as ipcParentLink, Cn as EVENT_PLANE_TOP_N, Ct as createAddonDataPlaneFacility, D as createUdsEventBus, Dn as formatEventPlane, Dt as HEAP_WATCH_INTERVAL_MS, E as createUdsEventBridge, En as diffEventPlane, Et as HEAP_RECLAIM_TRIGGER_MB, F as AGENT_CAP_FWD_SERVICE, Ft as RUNNER_RSS_BUDGET_ENV, G as createLocalTransport, Gt as reclaimIntervalMs, H as PARENT_ROUTED_PROVIDER_ADDON_ID, Ht as hubMainRssBudget, I as CapRouteResolver, It as ZERO_LOOP_DELAY, J as SocketChannel, Jt as startRunnerHeapWatch, K as UdsLocalTransportClient, Kt as shouldReclaim, L as CapRouteError, Lt as buildHeapSample, M as LocalChildRegistry, Mt as RSS_BUDGET_REANNOUNCE_MIN_MS, N as UDS_NO_ROUTE_PREFIX, Nt as RSS_BUDGET_RELEASE_RATIO, O as udsChildLogToWorkerEntry, Ot as HEAP_WATCH_WARN_RATIO, P as AGENT_CAP_FWD_ACTION, Pt as RUNNER_HEAP_WATCH_INTERVAL_MS, Q as buildNativeCapProxy, Qt as ARRAY_BUFFER_CENSUS_THRESHOLD_MB, R as classifyCapRoute, Rt as createDeferredHeapWatchSink, S as buildLinkChain, Sn as socketDirectionMessages, St as runNpm, T as createParentUnownedCallHandler, Tn as createEventPlaneReader, Tt as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, U as __resetCapUsageRegistryForTests, Ut as nextRssBudgetState, V as CapUsageRegistry, Vt as describeRss, W as getCapUsageRegistry, Wt as parseRssBudgetMb, X as FrameDecoder, Xt as ARRAY_BUFFER_CENSUS_COOLDOWN_MS, Y as localEndpointPath, Yt as strandedMb, Z as encodeFrame, Zt as ARRAY_BUFFER_CENSUS_SUSTAIN_MS, _ as AddonDepsManager, _n as EMPTY_SOCKET_DIRECTION, _t as CapabilityUnavailableError, a as createUdsAddonContext, an as HEAP_SPACE_REPORT_MIN_MB, at as createAddonService, b as brokerCallForCap, bn as sampleSocketDirection, bt as resolveAddonClass, c as getOrInitReadinessRegistryForClient, cn as heapSpaceField, ct as capActionName, d as clusterEventTopic, dn as EMPTY_SOCKET_PLANE_BASELINE, dt as capServiceName, en as createArrayBufferCensusGate, et as createBrokerDeviceManagerApi, f as getBrokerEventBus, fn as SOCKET_PLANE_TOP_N, ft as parseCapAction, g as subscribePassthrough, gn as formatSocketPlane, gt as CapabilityHandle, h as setNodeEventInterest, hn as diffSocketPlane, ht as DeviceRegistry, i as createAddonContext, in as DECISIVE_HEAP_SPACES, j as LocalChildClient, jt as HUB_RSS_BUDGET_ENV, k as createUdsLogger, kt as HUB_MAIN_HEAP_WATCH_LABEL, l as setHubConnected, ln as readHeapSpaces, lt as capActionSuffix, m as registerEventBusService, mn as createSocketPlaneReader, mt as serializeTypedArrays, n as installManifestPythonDeps, nn as formatArrayBufferCensus, o as getWorkerDeviceRegistry, on as emitHeapDiagnosticReport, ot as validateProviderRegistrations, p as getMoleculerEventStats, pn as createSocketPlaneMeter, pt as deserializeTypedArrays, q as UdsLocalTransportServer, qt as startHeapWatch, r as adaptBrokerToCluster, rn as isArrayBufferCensusReport, rt as mountNativeCapService, s as getOrInitReadinessRegistry, sn as formatHeapSpaces, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestSystemDeps, tn as createInspectorArrayBufferCensus, u as EVENT_TOPIC_PREFIX, un as selectReportedSpaces, ut as capBareAction, v as createKernelHwAccel, vn as createSocketDirectionCounters, vt as copyBundledNativeModules, w as localProviderLink, wn as createEventPlaneMeter, wt as HEAP_RECLAIM_MIN_INTERVAL_MS, x as brokerTransportLink, xn as socketDirectionBytes, xt as resolveNpmInvocation, y as resolveHwAccel, yn as recordSocketFrame, yt as installManifestNativeDeps, z as callWithServiceDiscovery, zt as createLoopDelayMeter } from "./manifest-system-deps-D--wyMD9.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-BWmQ5i-o.mjs";
-import { t as CustomActionRegistry } from "./custom-action-registry-F__gp_VX.mjs";
+import { t as CustomActionRegistry } from "./custom-action-registry-CsONUlhC.mjs";
 import { z } from "zod";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import { PYTHON_VERSION, buildBinaryPath, downloadBinary, ensureBinary, ensureFfmpeg, ensurePython, findInPath, getFfmpegDownloadUrl, getPlatformInfo, getPythonDownloadUrl, installPythonPackages, installPythonRequirements } from "@camstack/types/node";
@@ -95766,4 +95766,4 @@ var LifecycleJobEngine = class {
 	}
 };
 //#endregion
-export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CA_COMMON_NAME, CA_VALIDITY_DAYS, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DECISIVE_HEAP_SPACES, DEFAULT_DATA_PATH, DEFAULT_LAN_HTTP_PORT, DEFAULT_LOG_LEVEL, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EMPTY_SOCKET_DIRECTION, EMPTY_SOCKET_PLANE_BASELINE, EVENT_PLANE_TOP_N, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_SPACE_REPORT_MIN_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LEAF_RENEWAL_WINDOW_DAYS, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LoggingGate, LokiDestination, LokiLoggingAddon, MAX_LEAF_VALIDITY_DAYS, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PARENT_ROUTED_PROVIDER_ADDON_ID, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, QUARANTINE_DIRNAME, RESTART_MARKER_FILE, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, SERVER_AUTH_OID, SOCKET_PLANE_TOP_N, STALL_REPORT_MS, STALL_TICK_MS, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, ZERO_LOOP_DELAY, __resetCapUsageRegistryForTests, __resetLoggingGateForTests, adaptBrokerToCluster, addonSettingsCapability, allFamiliesListenHost, applyLanHttp, attributeStall, bindPendingLanHttp, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, canServeDataPlane, capActionName, capActionSuffix, capBareAction, capServiceName, classifyAddonDir, classifyCapRoute, clearPendingRestart, closeLanHttp, clusterEventTopic, clusterSecretMatches, collectCertIdentity, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createDeferredHeapWatchSink, createDoorSettingsView, createEventPlaneMeter, createEventPlaneReader, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createKernelHwAccel, createLocalTransport, createLoopDelayMeter, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createSocketDirectionCounters, createSocketPlaneMeter, createSocketPlaneReader, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, describeRss, detectWorkspacePackagesDir, diffEventPlane, diffSocketPlane, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, emitHeapDiagnosticReport, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, evaluateExistingCert, expandCapMethods, fetchJson, findInPath, formatEventPlane, formatHeapSpaces, formatLogLine, formatSocketPlane, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getLoggingGate, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, heapSpaceField, hubMainRssBudget, installManifestNativeDeps, installManifestPythonDeps, installManifestSystemDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcParentLink, isAddonDeploySource, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, isolatedBuiltinPhase, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, nextRssBudgetState, parseCapAction, parseRangeHeader, parseRssBudgetMb, parseTokenizedUrl, partitionIsolatedBuiltinIds, proxyToUpstream, quarantineAddonResidue, readExtraSans, readHeapSpaces, readLanHttpState, readMoleculerFanoutMode, readPendingRestart, readTlsAccessStatus, readTlsMode, readinessKey, reclaimIntervalMs, recordSocketFrame, registerEventBusService, registerLanHttpHandler, reissueTlsLeaf, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runHubAddonBoot, runNpm, sampleSocketDirection, scheduleSelfRestart, scopeKey, scopesAllowAddon, scopesAllowDeviceCap, selectAddonResidue, selectReportedSpaces, serializeTypedArrays, setHubConnected, setNodeEventInterest, shouldReclaim, socketDirectionBytes, socketDirectionMessages, startEventLoopStallMonitor, startHeapWatch, startRunnerHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, validateUploadedTls, waitUntilReady, writeExtraSans, writePendingRestart, writeTlsMode };
+export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, ARRAY_BUFFER_CENSUS_COOLDOWN_MS, ARRAY_BUFFER_CENSUS_SUSTAIN_MS, ARRAY_BUFFER_CENSUS_THRESHOLD_MB, ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CA_COMMON_NAME, CA_VALIDITY_DAYS, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DECISIVE_HEAP_SPACES, DEFAULT_DATA_PATH, DEFAULT_LAN_HTTP_PORT, DEFAULT_LOG_LEVEL, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EMPTY_SOCKET_DIRECTION, EMPTY_SOCKET_PLANE_BASELINE, EVENT_PLANE_TOP_N, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_SPACE_REPORT_MIN_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LEAF_RENEWAL_WINDOW_DAYS, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LoggingGate, LokiDestination, LokiLoggingAddon, MAX_LEAF_VALIDITY_DAYS, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PARENT_ROUTED_PROVIDER_ADDON_ID, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, QUARANTINE_DIRNAME, RESTART_MARKER_FILE, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, SERVER_AUTH_OID, SOCKET_PLANE_TOP_N, STALL_REPORT_MS, STALL_TICK_MS, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, ZERO_LOOP_DELAY, __resetCapUsageRegistryForTests, __resetLoggingGateForTests, adaptBrokerToCluster, addonSettingsCapability, allFamiliesListenHost, applyLanHttp, attributeStall, bindPendingLanHttp, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, canServeDataPlane, capActionName, capActionSuffix, capBareAction, capServiceName, classifyAddonDir, classifyCapRoute, clearPendingRestart, closeLanHttp, clusterEventTopic, clusterSecretMatches, collectCertIdentity, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createArrayBufferCensusGate, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createDeferredHeapWatchSink, createDoorSettingsView, createEventPlaneMeter, createEventPlaneReader, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createInspectorArrayBufferCensus, createKernelHwAccel, createLocalTransport, createLoopDelayMeter, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createSocketDirectionCounters, createSocketPlaneMeter, createSocketPlaneReader, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, describeRss, detectWorkspacePackagesDir, diffEventPlane, diffSocketPlane, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, emitHeapDiagnosticReport, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, evaluateExistingCert, expandCapMethods, fetchJson, findInPath, formatArrayBufferCensus, formatEventPlane, formatHeapSpaces, formatLogLine, formatSocketPlane, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getLoggingGate, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, heapSpaceField, hubMainRssBudget, installManifestNativeDeps, installManifestPythonDeps, installManifestSystemDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcParentLink, isAddonDeploySource, isArrayBufferCensusReport, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, isolatedBuiltinPhase, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, nextRssBudgetState, parseCapAction, parseRangeHeader, parseRssBudgetMb, parseTokenizedUrl, partitionIsolatedBuiltinIds, proxyToUpstream, quarantineAddonResidue, readExtraSans, readHeapSpaces, readLanHttpState, readMoleculerFanoutMode, readPendingRestart, readTlsAccessStatus, readTlsMode, readinessKey, reclaimIntervalMs, recordSocketFrame, registerEventBusService, registerLanHttpHandler, reissueTlsLeaf, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runHubAddonBoot, runNpm, sampleSocketDirection, scheduleSelfRestart, scopeKey, scopesAllowAddon, scopesAllowDeviceCap, selectAddonResidue, selectReportedSpaces, serializeTypedArrays, setHubConnected, setNodeEventInterest, shouldReclaim, socketDirectionBytes, socketDirectionMessages, startEventLoopStallMonitor, startHeapWatch, startRunnerHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, validateUploadedTls, waitUntilReady, writeExtraSans, writePendingRestart, writeTlsMode };

package/dist/kernel/array-buffer-census.d.ts

@@ -0,0 +1,122 @@
+/** One power-of-two bucket of the live set: every buffer with `byteLength <= upToBytes`
+ *  and above the previous bucket. */
+export interface ArrayBufferSizeBucket {
+    readonly upToBytes: number;
+    readonly count: number;
+    readonly bytes: number;
+}
+/** One exact byteLength and how much of the live set it accounts for. */
+export interface ArrayBufferExactSize {
+    readonly byteLength: number;
+    readonly count: number;
+    readonly bytes: number;
+}
+export interface ArrayBufferCensusReport {
+    /** Live `ArrayBuffer` objects reachable after the census's own GC. */
+    readonly count: number;
+    /** Their total `byteLength`. */
+    readonly bytes: number;
+    /** Buffers whose backing store is gone (`byteLength === 0`, detached). */
+    readonly detached: number;
+    /** Largest buckets first, by bytes. */
+    readonly buckets: readonly ArrayBufferSizeBucket[];
+    /** Largest exact sizes first, by bytes. */
+    readonly topSizes: readonly ArrayBufferExactSize[];
+}
+/** Take a census. Injectable so the heartbeat's gating is testable without an inspector. */
+export type ArrayBufferCensus = () => Promise<ArrayBufferCensusReport>;
+/**
+ * Take the census once `arrayBuffers` has been at or above this for
+ * {@link ARRAY_BUFFER_CENSUS_SUSTAIN_MS}.
+ *
+ * 512 MB. The two 2026-09-10 episodes crossed it 25 and 8 minutes in; the
+ * routine reading in six hours of 2-second samples around them was 18–100 MB
+ * with single-sample spikes to 479 MB, and the process's floor after every
+ * compaction is 12–18 MB. A dead-buffer sawtooth between major GCs (measured
+ * up to 3.65 GB on 2026-08-08 when the heap had 4 GB of headroom) cannot reach
+ * it while GC runs every few seconds — and if one did, the census would SAY
+ * so: it reports the live total after its own GC next to the raw reading.
+ */
+export declare const ARRAY_BUFFER_CENSUS_THRESHOLD_MB = 512;
+/**
+ * How long the reading must stay above the threshold before a census is taken.
+ *
+ * 60 s = 30 probes at the 2 s cadence. A burst that a scavenge or the next
+ * major GC returns never pays a forced GC; an episode climbing at the slowest
+ * rate measured (20 MB/min) is still 20 MB higher by the time it is measured,
+ * which is nothing against the threshold.
+ */
+export declare const ARRAY_BUFFER_CENSUS_SUSTAIN_MS = 60000;
+/**
+ * Minimum spacing between two censuses.
+ *
+ * 30 minutes: the second episode ran 76 minutes, so it would have produced
+ * three readings — enough to see the shape change (or not) as it grew — at a
+ * cost the router already pays six times an hour for the reclaim pass.
+ */
+export declare const ARRAY_BUFFER_CENSUS_COOLDOWN_MS: number;
+/**
+ * A drop of at least this share of the threshold between two consecutive
+ * probes, from a reading that had been SUSTAINED above the threshold, is a
+ * RELEASE — the boundary both episodes crossed with no line, and the one line
+ * that lets the release be correlated with whatever else the process logged
+ * that second. Sustained, not merely above: a one-probe spike that the next
+ * scavenge sweeps (a 1.3 GB burst in 11 s was measured on 2026-08-29) is not
+ * an episode ending, and a WARN for every one of those would bury the line
+ * this exists to produce.
+ */
+export declare const ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO = 0.5;
+export interface ArrayBufferCensusGateOptions {
+    readonly thresholdMb?: number;
+    readonly sustainMs?: number;
+    readonly cooldownMs?: number;
+}
+/** What one probe reading means to the gate. */
+export type ArrayBufferCensusVerdict = {
+    readonly kind: 'hold';
+}
+/** Take a census now. `reason` is printed on the resulting line. */
+ | {
+    readonly kind: 'take';
+    readonly reason: string;
+}
+/** The live set was released between this probe and the previous one. */
+ | {
+    readonly kind: 'released';
+    readonly fromMb: number;
+    readonly toMb: number;
+};
+export interface ArrayBufferCensusGate {
+    /** Judge one reading. A `take` verdict starts the cooldown. */
+    readonly observe: (arrayBuffersMb: number, at: number) => ArrayBufferCensusVerdict;
+}
+/**
+ * The pure decision: threshold, sustain, cooldown, release — testable without
+ * allocating a gigabyte or forcing a GC.
+ */
+export declare function createArrayBufferCensusGate(options?: ArrayBufferCensusGateOptions): ArrayBufferCensusGate;
+/** The inspector answers `unknown`; the report is trusted only once it has this shape. */
+export declare function isArrayBufferCensusReport(value: unknown): value is ArrayBufferCensusReport;
+/**
+ * The real census: an in-process inspector session, opened for the call and
+ * closed after it, so no session is left listening between censuses.
+ *
+ * Every remote object it creates is released before the session closes; a
+ * failure anywhere still disconnects. The session is in-process — nothing
+ * listens on a port, nothing outside this process can reach it.
+ */
+export declare function createInspectorArrayBufferCensus(): ArrayBufferCensus;
+/** What a census line needs beyond the report. */
+export interface ArrayBufferCensusContext {
+    /** `process.memoryUsage().arrayBuffers` at the probe that triggered it. */
+    readonly rawMb: number;
+    readonly tookMs: number;
+    /** The gate's `take` reason. */
+    readonly reason: string;
+}
+/**
+ * The census line. `live` is what survived the census's own GC; `raw` is the
+ * reading that triggered it — when they disagree by a lot, the growth was dead
+ * buffers awaiting a sweep, not a retention, and the line says which.
+ */
+export declare function formatArrayBufferCensus(label: string, report: ArrayBufferCensusReport, context: ArrayBufferCensusContext): string;

package/dist/kernel/custom-action-registry.d.ts

@@ -1,4 +1,4 @@
-import { CustomActionCaller, CustomActionSpec, CustomActionsSpec } from '@camstack/types';
+import { ChildCustomActionCatalogs, CustomActionCaller, CustomActionSpec, CustomActionsSpec } from '@camstack/types';
 type Handler = (action: string, input: unknown, caller?: CustomActionCaller) => Promise<unknown>;
 export interface CustomActionEntry {
     readonly spec: CustomActionSpec;
@@ -19,5 +19,14 @@ export declare class CustomActionRegistry {
     resolve(addonId: string, action: string): CustomActionEntry | null;
     listActions(addonId: string): readonly string[];
     listAddons(): readonly string[];
+    /**
+     * Every registered catalog with its schemas stripped, keyed by addon id —
+     * what a runner puts in its register frame so the hub learns the catalogs
+     * from the process that owns them (D444). `hostedAddonIds` are the addons
+     * this runner hosts: each is present in the result, with an EMPTY catalog
+     * when it registered none, so the parent can say "declares no actions" per
+     * addon instead of guessing from an absent key.
+     */
+    describeAll(hostedAddonIds: readonly string[]): ChildCustomActionCatalogs;
 }
 export {};

package/dist/kernel/heap-watch.d.ts

@@ -1,6 +1,7 @@
 import { EventPlaneReader } from './event-plane-report.js';
 import { SocketPlaneReader } from './socket-plane-report.js';
 import { HeapSpaceReader } from './heap-spaces.js';
+import { ArrayBufferCensus, ArrayBufferCensusGateOptions } from './array-buffer-census.js';
 /**
  * What hub-main calls itself in a `[mem]` line.
  *
@@ -606,6 +607,20 @@ export interface HeapWatchProbes {
      * from the parent's side. Only hub-main and an agent's main pass one.
      */
     readonly socketPlane?: SocketPlaneReader;
+    /**
+     * The ArrayBuffer census that ARMS ITSELF. No default: it costs a forced
+     * full GC when it fires, and only hub-main has an episode on record (two
+     * silent linear climbs to 1.3 GB and 5 GB on 2026-09-10, each released in
+     * one instant with no line, the second two hours before the OOM). A runner
+     * that legitimately holds gigabytes of ArrayBuffers (`hub/stream-broker`,
+     * ~900 MB of RTP pre-roll rings) would fire it forever. See
+     * `array-buffer-census.ts` for the gate, the cost and what it is NOT.
+     */
+    readonly arrayBufferCensus?: ArrayBufferCensusProbe;
+}
+/** How the census is wired: the census itself plus the gate's thresholds. */
+export interface ArrayBufferCensusProbe extends ArrayBufferCensusGateOptions {
+    readonly census: ArrayBufferCensus;
 }
 /**
  * Start the heartbeat. Returns a stop function.