@camstack/system 1.2.217 → 1.2.219

package/dist/{dist-DtDKMSeG.mjs → dist-Cyz5_i7z.mjs}

@@ -9683,6 +9683,17 @@ var coreBlocksCapability = {
 		})) }), { auth: "admin" })
 	}
 };
+/** Strip a catalog to what crosses the wire. Pure; the schemas are not touched. */
+function describeCustomActions(catalog) {
+	const out = {};
+	for (const [name, spec] of Object.entries(catalog)) out[name] = {
+		kind: spec.kind,
+		auth: spec.auth,
+		scope: spec.scope,
+		...spec.caller === "required" ? { caller: "required" } : {}
+	};
+	return out;
+}
 /**
 * `custom-model-registry` — collection cap exposing operator-registered
 * custom detection models. Each provider (today: `addon-model-studio`)
@@ -15189,6 +15200,7 @@ var NcSystemEventKindSchema = z.enum([
 	"addon-crash-loop",
 	"addon-update-available",
 	"server-update-available",
+	"wrapper-update-available",
 	"alarm-triggered",
 	"alarm-armed",
 	"alarm-disarmed",
@@ -22228,6 +22240,97 @@ var ImageContractSchema = z.object({
 	/** One operator-grade sentence: this node runs image X; the contract says Y. */
 	message: z.string()
 });
+/**
+* How this node's SHELL was identified — the process wrapper the node runs
+* inside (a Docker container, the Electron desktop app, a bare host process).
+*
+* ## The rule: observe what you can, declare only what you cannot
+*
+* On 2026-08-02 `check-deployment-templates.ts` proved every day that the
+* templates declared `ghcr.io/camstack/camstack:intel-latest` while the hub
+* actually ran `camstack-server:intel-1.1.74` from a repository that had been
+* renamed and received no builds. The declaration was right; reality was not;
+* nothing compared them. A `CAMSTACK_WRAPPER=docker` written into a template
+* would be exactly that same declaration, so `kind` is NEVER an env var.
+*
+* What can honestly be observed from inside: `/.dockerenv` and `/proc/1/cgroup`
+* (a container), and the platform (a Linux container cannot exist on darwin or
+* win32). What cannot: that the node is a CHILD of an Electron main process —
+* `process.versions.electron` is `undefined` in the child, so the only channel
+* is `CAMSTACK_AGENT_APP_VERSION`, which the main process already writes
+* (`packages/desktop/src/main.ts`). That one declaration is unavoidable, and it
+* is marked as such on every row of {@link WrapperEvidenceSchema}.
+*
+*  - `docker`        — container observed, no Electron declaration.
+*  - `electron`      — Electron declared, no container observed.
+*  - `native`        — the container probe RAN and found nothing, and there is
+*                      no Electron declaration. Exclusion, but only from a
+*                      probe that actually answered.
+*  - `contradictory` — an Electron declaration INSIDE an observed container.
+*                      Reported, never resolved: both proofs stay on
+*                      `evidence` and nothing picks a winner.
+*  - `unknown`       — the container probe could not run (a Linux host that
+*                      denied `/proc/1/cgroup`). Never `native` by default,
+*                      for the same reason `assessImageContract` refuses to
+*                      say `in-sync` without proof.
+*
+* See D437.
+*/
+var WrapperKindSchema = z.enum([
+	"docker",
+	"electron",
+	"native",
+	"contradictory",
+	"unknown"
+]);
+/**
+* One probe and what it returned — including the probes that returned
+* NOTHING. A record listing only the facts that held cannot tell "checked,
+* absent" from "never checked", and that difference is the whole distance
+* between `native` and `unknown`.
+*/
+var WrapperEvidenceSchema = z.object({
+	/** Which probe this row reports. */
+	fact: z.enum([
+		"dockerenv-file",
+		"proc-1-cgroup",
+		"platform",
+		"electron-app-version-env"
+	]),
+	/**
+	* `observed` — this process read it itself. `declared` — the shell told the
+	* process and nothing here can check it. Only the Electron app version is
+	* ever `declared`, and only because a child cannot see its parent.
+	*/
+	mode: z.enum(["observed", "declared"]),
+	/** Did the probe support the fact it names? A `false` row is still evidence. */
+	holds: z.boolean(),
+	/** What was actually read, verbatim enough for an operator to argue with. */
+	detail: z.string()
+});
+/**
+* The shell verdict (see {@link WrapperKindSchema}) with the proofs that
+* produced it.
+*
+* There is deliberately NO `canSelfUpdate` and no apply action: a wrapper
+* update is an ANNOUNCEMENT. The notification body carries the exact command
+* for a `docker` shell and says the app restarts into the new build for
+* `electron`, and that sentence is chosen from `kind` alone — a boolean
+* nothing reads is the defect this repo keeps paying for.
+*/
+var WrapperIdentitySchema = z.object({
+	kind: WrapperKindSchema,
+	/** Every probe that ran, in a stable order. Never empty. */
+	evidence: z.array(WrapperEvidenceSchema),
+	/**
+	* The version of the SHELL, when the shell has one it can state: the
+	* Electron app version it declared, or the baked seed closure that
+	* fingerprints a container / app bundle. `null` for `contradictory` and
+	* `unknown` — which version belongs to the shell is precisely what is not
+	* known there.
+	*/
+	currentVersion: z.string().nullable()
+});
 var ServerRollbackInfoSchema = z.object({
 	/** The version that failed (or was manually rolled back). */
 	fromVersion: z.string(),
@@ -22269,7 +22372,13 @@ var ServerPackageStatusSchema = z.object({
 	* Seed-vs-contract verdict (see {@link ImageContractSchema}). Optional for
 	* version skew: an older provider's payload simply omits it.
 	*/
-	imageContract: ImageContractSchema.optional()
+	imageContract: ImageContractSchema.optional(),
+	/**
+	* What this node runs INSIDE (see {@link WrapperIdentitySchema}). Optional
+	* for version skew: an older provider's payload simply omits it, and an
+	* absent wrapper is unknown — never `native`.
+	*/
+	wrapper: WrapperIdentitySchema.optional()
 });
 var ServerUpdateCheckResultSchema = z.object({
 	packageName: z.string(),
@@ -26997,8 +27106,8 @@ includeCrops: z.boolean().optional() }).optional(), z.array(IdentitySchema).read
 			*
 			* An **empty array reads NOTHING** — `[]` is an empty page, never
 			* "every camera". A request for no devices is a request, not an
-			* omission; same contract as `deviceManager.listFleet` and
-			* `pipelineAnalytics.listRecentTracks`.
+			* omission; same contract as `deviceManager.listAll`'s `deviceIds`
+			* and `pipelineAnalytics.listRecentTracks`.
 			*
 			* Absent (`undefined`) is the omission, and keeps the cluster-wide view.
 			*/
@@ -45274,4 +45383,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { evictionPolicyOfLocation as $, DeviceRole as $t, addonSettingsCapability as A, resolveLocationMode as At, coreBlockIdFromAddonId as B, storageOccupancyCapability as Bt, ScopedTokenSchema as C, objectInputDeclaresAddonId as Ct, StorageMigrationJobSchema as D, reducePoints as Dt, StorageLocationTypeSchema as E, procedureAuthKey as Et, bareAddonId as F, scoreRuntimes as Ft, deviceManagerCapability as G, vectorStoreCapability as Gt, dataStoreProviderCapability as H, streamQualityLabel as Ht, batteryCapability as I, settingsStoreCapability as It, doorbellCapability as J, BaseAddon as Jt, deviceStateCapability as K, withLocationMode as Kt, buildStreamParamsConfigSchema as L, snapshotCapability as Lt, alertsCapability as M, runtimeStatePolicyFor as Mt, authProviderCapability as N, scopesAllowAddon as Nt, UserRecordSchema as O, resolveBucketMs as Ot, backupCapability as P, scopesAllowDeviceCap as Pt, evaluateSensorEdge as Q, DeviceFeature as Qt, collectSecretConfigKeys as R, storageCapability as Rt, STREAM_PROFILE_META as S, normalizeUnit as St, StorageLocationModeSchema as T, platformProbeCapability as Tt, decodeVectorBase64 as U, userManagementCapability as Ut, coreBlocksCapability as V, storageProviderCapability as Vt, deriveBatteryPresence as W, vectorDimFromBase64 as Wt, enumerateItemArrayFields as X, DEVICE_SETTINGS_CONTRIBUTION_METHODS as Xt, enumerateInferenceDevices as Y, DATAPLANE_SECRET_HEADER as Yt, enumerateSchemaFields as Z, DEVICE_STATUS_METHOD as Zt, RUNTIME_DEFAULTS as _, resolveCapMount as _n, looseSchema as _t, CAMERA_SWITCH_ORDER as a, asNumber as an, isCollectionArrayMethod as at, SOURCE_DEVICE_TYPES as b, EventCategory as bn, metricsProviderCapability as bt, CORE_BLOCK_ADDON_PREFIX as c, emitDownForOwnedCaps as cn, isSameAddonId as ct, DeclaredDevices as d, hydrateSchema as dn, kebabToCamel as dt, DeviceType as en, extractNestedAddonId as et, DeviceStatusSchema as f, isDeviceConfigCap as fn, legacyModeOf as ft, REDACTED_SECRET as g, readinessKey as gn, logLevelAtMost as gt, METHOD_ACCESS_MAP as h, parseJsonUnknown as hn, logDestinationCapability as ht, BatteryStatusSchema as i, asJsonObject as in, isArrayOutputSchema as it, addonWidgetsCapability as j, resolveMethodAuth as jt, addonPagesCapability as k, resolveContainerPrimaryChild as kt, CoreBlockSchema as l, emitReadiness as ln, isSourceCap as lt, LegacyStorageLocationDefaultSchema as m, parseJsonObject as mn, localNetworkCapability as mt, AlertSchema as n, ReadinessTimeoutError as nn, foldSnapshotByFunction as nt, CAP_NAMES_WITH_STATUS as o, asString as on, isLocationEnabled as ot, LOG_LEVEL_RANK as p, nodePin as pn, lifecycleJobSchema as pt, deviceStatusCapability as q, errMsg as qt, ApiKeyRecordSchema as r, WELL_KNOWN_TAB_MAP as rn, gbToBytes as rt, CORE_BLOCKS_ADDON_ID as s, createEvent as sn, isObjectInput as st, ALL_CAPABILITY_DEFINITIONS as t, ReadinessRegistry as tn, filesystemBrowseCapability as tt, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as u, expandCapMethods as un, isVoidInput as ut, RecordingStatusSchema as v, scopeKey as vn, mayReadLocation as vt, StorageCleanupJobSchema as w, parseStreamParamsFormPatch as wt, STORAGE_ACCESS_FALLBACK as x, modeMayWrite as xt, SOURCE_CAPS as y, sleep as yn, mayWriteToLocation as yt, coreBlockAddonId as z, storageMigrationCapability as zt };
+export { evaluateSensorEdge as $, DeviceFeature as $t, addonSettingsCapability as A, resolveContainerPrimaryChild as At, coreBlockIdFromAddonId as B, storageMigrationCapability as Bt, ScopedTokenSchema as C, normalizeUnit as Ct, StorageMigrationJobSchema as D, procedureAuthKey as Dt, StorageLocationTypeSchema as E, platformProbeCapability as Et, bareAddonId as F, scopesAllowDeviceCap as Ft, describeCustomActions as G, vectorDimFromBase64 as Gt, dataStoreProviderCapability as H, storageProviderCapability as Ht, batteryCapability as I, scoreRuntimes as It, deviceStatusCapability as J, errMsg as Jt, deviceManagerCapability as K, vectorStoreCapability as Kt, buildStreamParamsConfigSchema as L, settingsStoreCapability as Lt, alertsCapability as M, resolveMethodAuth as Mt, authProviderCapability as N, runtimeStatePolicyFor as Nt, UserRecordSchema as O, reducePoints as Ot, backupCapability as P, scopesAllowAddon as Pt, enumerateSchemaFields as Q, DEVICE_STATUS_METHOD as Qt, collectSecretConfigKeys as R, snapshotCapability as Rt, STREAM_PROFILE_META as S, modeMayWrite as St, StorageLocationModeSchema as T, parseStreamParamsFormPatch as Tt, decodeVectorBase64 as U, streamQualityLabel as Ut, coreBlocksCapability as V, storageOccupancyCapability as Vt, deriveBatteryPresence as W, userManagementCapability as Wt, enumerateInferenceDevices as X, DATAPLANE_SECRET_HEADER as Xt, doorbellCapability as Y, BaseAddon as Yt, enumerateItemArrayFields as Z, DEVICE_SETTINGS_CONTRIBUTION_METHODS as Zt, RUNTIME_DEFAULTS as _, readinessKey as _n, logLevelAtMost as _t, CAMERA_SWITCH_ORDER as a, asJsonObject as an, isArrayOutputSchema as at, SOURCE_DEVICE_TYPES as b, sleep as bn, mayWriteToLocation as bt, CORE_BLOCK_ADDON_PREFIX as c, createEvent as cn, isObjectInput as ct, DeclaredDevices as d, expandCapMethods as dn, isVoidInput as dt, DeviceRole as en, evictionPolicyOfLocation as et, DeviceStatusSchema as f, hydrateSchema as fn, kebabToCamel as ft, REDACTED_SECRET as g, parseJsonUnknown as gn, logDestinationCapability as gt, METHOD_ACCESS_MAP as h, parseJsonObject as hn, localNetworkCapability as ht, BatteryStatusSchema as i, WELL_KNOWN_TAB_MAP as in, gbToBytes as it, addonWidgetsCapability as j, resolveLocationMode as jt, addonPagesCapability as k, resolveBucketMs as kt, CoreBlockSchema as l, emitDownForOwnedCaps as ln, isSameAddonId as lt, LegacyStorageLocationDefaultSchema as m, nodePin as mn, lifecycleJobSchema as mt, AlertSchema as n, ReadinessRegistry as nn, filesystemBrowseCapability as nt, CAP_NAMES_WITH_STATUS as o, asNumber as on, isCollectionArrayMethod as ot, LOG_LEVEL_RANK as p, isDeviceConfigCap as pn, legacyModeOf as pt, deviceStateCapability as q, withLocationMode as qt, ApiKeyRecordSchema as r, ReadinessTimeoutError as rn, foldSnapshotByFunction as rt, CORE_BLOCKS_ADDON_ID as s, asString as sn, isLocationEnabled as st, ALL_CAPABILITY_DEFINITIONS as t, DeviceType as tn, extractNestedAddonId as tt, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as u, emitReadiness as un, isSourceCap as ut, RecordingStatusSchema as v, resolveCapMount as vn, looseSchema as vt, StorageCleanupJobSchema as w, objectInputDeclaresAddonId as wt, STORAGE_ACCESS_FALLBACK as x, EventCategory as xn, metricsProviderCapability as xt, SOURCE_CAPS as y, scopeKey as yn, mayReadLocation as yt, coreBlockAddonId as z, storageCapability as zt };

package/dist/index.d.ts

@@ -49,10 +49,17 @@ export { proxyToUpstream } from './http/reverse-proxy.js';
 export type { ChildFanoutDelta, ChildFanoutRegistry, ChildFanoutSample, CrossNodeEventStats, EventFanoutMode, EventPlaneCounters, EventPlaneReader, EventPlaneSources, EventPlaneWindow, } from './kernel/event-plane-report.js';
 export { createEventPlaneMeter, createEventPlaneReader, diffEventPlane, EVENT_PLANE_TOP_N, formatEventPlane, } from './kernel/event-plane-report.js';
 export type { SocketPeerDelta, SocketPeerSample, SocketPlaneBaseline, SocketPlaneCounters, SocketPlaneMeter, SocketPlaneReader, SocketPlaneRegistry, SocketPlaneRegistryChild, SocketPlaneSources, SocketPlaneWindow, } from './kernel/socket-plane-report.js';
-export { createSocketPlaneMeter, createSocketPlaneReader, diffSocketPlane, EMPTY_SOCKET_PLANE_BASELINE, formatSocketPlane, SOCKET_PLANE_TOP_N, } from './kernel/socket-plane-report.js';
+export { createSocketPlaneMeter, createSocketPlaneReader, diffSocketPlane, EMPTY_SOCKET_PLANE_BASELINE, formatSocketPlane, readSocketQueues, SOCKET_PLANE_TOP_N, SOCKET_QUEUE_TOP_N, } from './kernel/socket-plane-report.js';
+export type { SocketPeerQueue, SocketQueueReading } from './kernel/socket-plane-report.js';
+export type { MeshPeerQueue, MeshQueueReader } from './kernel/moleculer/mesh-queue-report.js';
+export { createMeshQueueReader, formatMeshQueue, MESH_QUEUE_TOP_N, } from './kernel/moleculer/mesh-queue-report.js';
+export type { OutboundQueueGate, OutboundQueueGateOptions, OutboundQueueReading, OutboundQueueVerdict, } from './kernel/outbound-queue-watch.js';
+export { createOutboundQueueGate, formatOutboundQueueVerdict, OUTBOUND_QUEUE_COOLDOWN_MS, OUTBOUND_QUEUE_SUSTAIN_MS, OUTBOUND_QUEUE_THRESHOLD_BYTES, } from './kernel/outbound-queue-watch.js';
 export type { HeapDiagnosticDeps, HeapDiagnosticRequest, HeapSpaceReader, HeapSpaceUsage, } from './kernel/heap-spaces.js';
 export { DECISIVE_HEAP_SPACES, emitHeapDiagnosticReport, formatHeapSpaces, HEAP_SPACE_REPORT_MIN_MB, heapSpaceField, readHeapSpaces, selectReportedSpaces, } from './kernel/heap-spaces.js';
-export type { DeferredHeapWatchSink, HeapReclaimer, HeapReclaimOptions, HeapSample, HeapWatchProbes, HeapWatchSink, LoopDelayMeter, LoopDelaySample, RssBreakdown, RssBudgetOptions, RssBudgetState, RssGrowthShape, RunnerHeapWatchOptions, } from './kernel/heap-watch.js';
+export type { ArrayBufferCensus, ArrayBufferCensusContext, ArrayBufferCensusGate, ArrayBufferCensusGateOptions, ArrayBufferCensusReport, ArrayBufferCensusVerdict, ArrayBufferExactSize, ArrayBufferSizeBucket, } from './kernel/array-buffer-census.js';
+export { ARRAY_BUFFER_CENSUS_COOLDOWN_MS, ARRAY_BUFFER_CENSUS_SUSTAIN_MS, ARRAY_BUFFER_CENSUS_THRESHOLD_MB, ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, createArrayBufferCensusGate, createInspectorArrayBufferCensus, formatArrayBufferCensus, isArrayBufferCensusReport, } from './kernel/array-buffer-census.js';
+export type { ArrayBufferCensusProbe, DeferredHeapWatchSink, HeapReclaimer, HeapReclaimOptions, HeapSample, HeapWatchProbes, HeapWatchSink, LoopDelayMeter, LoopDelaySample, RssBreakdown, RssBudgetOptions, RssBudgetState, RssGrowthShape, RunnerHeapWatchOptions, } from './kernel/heap-watch.js';
 export { buildHeapSample, createDeferredHeapWatchSink, createLoopDelayMeter, createV8Reclaimer, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, hubMainRssBudget, describeRss, nextRssBudgetState, parseRssBudgetMb, reclaimIntervalMs, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, shouldReclaim, startHeapWatch, startRunnerHeapWatch, strandedMb, ZERO_LOOP_DELAY, } from './kernel/heap-watch.js';
 export type { StallVerdict } from './kernel/event-loop-stall-monitor.js';
 export { attributeStall, STALL_REPORT_MS, STALL_TICK_MS, startEventLoopStallMonitor, } from './kernel/event-loop-stall-monitor.js';

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-C85OOASj.js");
+const require_dist = require("./dist-B17W9ngu.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_formatter = require("./formatter-DqAKDlvN.js");
@@ -25,25 +25,25 @@ require("./builtins/storage-orchestrator/index.js");
 const require_builtins_system_config_system_config_addon = require("./builtins/system-config/system-config.addon.js");
 require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
-const require_event_loop_stall_monitor = require("./event-loop-stall-monitor-DM9OAzy8.js");
-const require_tls$1 = require("./tls-BxQlomxd.js");
-const require_manifest_system_deps = require("./manifest-system-deps-DvY1bY_n.js");
-const require_resource_monitor = require("./resource-monitor-CdnzxBLP.js");
-const require_custom_action_registry = require("./custom-action-registry-jY0NOZK8.js");
+const require_event_loop_stall_monitor = require("./event-loop-stall-monitor-CAsHdMwP.js");
+const require_tls$1 = require("./tls-BFs4PzoW.js");
+const require_manifest_system_deps = require("./manifest-system-deps-g_nK0xsF.js");
+const require_resource_monitor = require("./resource-monitor-LVE1BoLs.js");
+const require_custom_action_registry = require("./custom-action-registry-DKWhaWL1.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path, 1);
-let node_child_process = require("node:child_process");
-let node_util = require("node:util");
-node_util = require_chunk.__toESM(node_util);
 let node_fs = require("node:fs");
 let node_fs$1 = require_chunk.__toESM(node_fs, 1);
 node_fs = require_chunk.__toESM(node_fs);
+let node_child_process = require("node:child_process");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
+let node_util = require("node:util");
+node_util = require_chunk.__toESM(node_util);
 let node_http = require("node:http");
 let node_vm = require("node:vm");
 node_vm = require_chunk.__toESM(node_vm);
@@ -94700,35 +94700,20 @@ function forceMoleculerDisconnect(broker, nodeId) {
 		nodes.delete(nodeId);
 	} catch {}
 }
-/** Read CPU% and RSS for a set of PIDs via `ps`. */
+/**
+* CPU% and RSS for a set of PIDs — `/proc` on Linux, `ps -p` elsewhere.
+* One reader for the whole kernel (`process/resource-monitor.ts`): this used
+* to be a second `ps` fork of its own, from hub-main, on every
+* `$process.list` (D452).
+*/
 async function getPidStats$1(pids) {
-	if (pids.length === 0) return /* @__PURE__ */ new Map();
-	return new Promise((resolve) => {
-		(0, node_child_process.execFile)("ps", [
-			"-o",
-			"pid=,pcpu=,rss=",
-			"-p",
-			pids.join(",")
-		], { timeout: 5e3 }, (err, stdout) => {
-			const result = /* @__PURE__ */ new Map();
-			if (err || !stdout) {
-				resolve(result);
-				return;
-			}
-			for (const line of stdout.trim().split("\n")) {
-				const parts = line.trim().split(/\s+/);
-				if (parts.length < 3) continue;
-				const pid = parseInt(parts[0], 10);
-				const cpu = parseFloat(parts[1]);
-				const rssKb = parseInt(parts[2], 10);
-				if (!isNaN(pid) && !isNaN(cpu) && !isNaN(rssKb)) result.set(pid, {
-					cpu: Math.round(cpu * 10) / 10,
-					memoryRss: rssKb * 1024
-				});
-			}
-			resolve(result);
-		});
+	const stats = await require_resource_monitor.getPidStats(pids);
+	const result = /* @__PURE__ */ new Map();
+	for (const [pid, s] of stats) result.set(pid, {
+		cpu: s.cpu,
+		memoryRss: s.memory
 	});
+	return result;
 }
 var EMPTY_HEAP_DECLARATION = {
 	profile: void 0,
@@ -95777,6 +95762,10 @@ exports.AGENT_CAP_FWD_ACTION = require_manifest_system_deps.AGENT_CAP_FWD_ACTION
 exports.AGENT_CAP_FWD_SERVICE = require_manifest_system_deps.AGENT_CAP_FWD_SERVICE;
 exports.AGENT_READINESS_SERVICE_NAME = AGENT_READINESS_SERVICE_NAME;
 exports.ALL_CAPABILITY_DEFINITIONS = require_dist.ALL_CAPABILITY_DEFINITIONS;
+exports.ARRAY_BUFFER_CENSUS_COOLDOWN_MS = require_manifest_system_deps.ARRAY_BUFFER_CENSUS_COOLDOWN_MS;
+exports.ARRAY_BUFFER_CENSUS_SUSTAIN_MS = require_manifest_system_deps.ARRAY_BUFFER_CENSUS_SUSTAIN_MS;
+exports.ARRAY_BUFFER_CENSUS_THRESHOLD_MB = require_manifest_system_deps.ARRAY_BUFFER_CENSUS_THRESHOLD_MB;
+exports.ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO = require_manifest_system_deps.ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO;
 exports.AddonApiFactory = AddonApiFactory;
 exports.AddonDepsManager = require_manifest_system_deps.AddonDepsManager;
 exports.AddonEngineManager = AddonEngineManager;
@@ -95860,6 +95849,7 @@ exports.LoggingGate = LoggingGate;
 exports.LokiDestination = require_builtins_loki_logging_index.LokiDestination$1;
 exports.LokiLoggingAddon = require_builtins_loki_logging_index.LokiLoggingAddon$1;
 exports.MAX_LEAF_VALIDITY_DAYS = require_tls$1.MAX_LEAF_VALIDITY_DAYS;
+exports.MESH_QUEUE_TOP_N = require_manifest_system_deps.MESH_QUEUE_TOP_N;
 exports.METHOD_ACCESS_MAP = require_dist.METHOD_ACCESS_MAP;
 exports.ModelDownloadService = require_event_loop_stall_monitor.ModelDownloadService;
 exports.NATIVE_PROVIDER_SERVICE_INFIX = require_manifest_system_deps.NATIVE_PROVIDER_SERVICE_INFIX;
@@ -95868,6 +95858,9 @@ exports.NativeMetricsAddon = require_builtins_native_metrics_native_metrics_addo
 exports.NativeMetricsProvider = require_builtins_native_metrics_native_metrics_addon.NativeMetricsProvider;
 exports.NetworkQualityTracker = NetworkQualityTracker;
 exports.NotificationService = NotificationService;
+exports.OUTBOUND_QUEUE_COOLDOWN_MS = require_manifest_system_deps.OUTBOUND_QUEUE_COOLDOWN_MS;
+exports.OUTBOUND_QUEUE_SUSTAIN_MS = require_manifest_system_deps.OUTBOUND_QUEUE_SUSTAIN_MS;
+exports.OUTBOUND_QUEUE_THRESHOLD_BYTES = require_manifest_system_deps.OUTBOUND_QUEUE_THRESHOLD_BYTES;
 exports.PARENT_ROUTED_PROVIDER_ADDON_ID = require_manifest_system_deps.PARENT_ROUTED_PROVIDER_ADDON_ID;
 Object.defineProperty(exports, "PYTHON_VERSION", {
 	enumerable: true,
@@ -95891,6 +95884,7 @@ exports.ReplEngine = ReplEngine;
 exports.RingBuffer = RingBuffer;
 exports.SERVER_AUTH_OID = require_tls$1.SERVER_AUTH_OID;
 exports.SOCKET_PLANE_TOP_N = require_manifest_system_deps.SOCKET_PLANE_TOP_N;
+exports.SOCKET_QUEUE_TOP_N = require_manifest_system_deps.SOCKET_QUEUE_TOP_N;
 exports.STALL_REPORT_MS = require_event_loop_stall_monitor.STALL_REPORT_MS;
 exports.STALL_TICK_MS = require_event_loop_stall_monitor.STALL_TICK_MS;
 exports.ScopedLogger = ScopedLogger;
@@ -95960,6 +95954,7 @@ exports.copyExtraFileDirs = copyExtraFileDirs;
 exports.createAddonContext = require_manifest_system_deps.createAddonContext;
 exports.createAddonDataPlaneFacility = require_manifest_system_deps.createAddonDataPlaneFacility;
 exports.createAddonService = require_manifest_system_deps.createAddonService;
+exports.createArrayBufferCensusGate = require_manifest_system_deps.createArrayBufferCensusGate;
 exports.createAuthenticatedFileServer = require_event_loop_stall_monitor.createAuthenticatedFileServer;
 exports.createBroker = createBroker;
 exports.createBrokerDeviceManagerApi = require_manifest_system_deps.createBrokerDeviceManagerApi;
@@ -95971,9 +95966,12 @@ exports.createEventPlaneReader = require_manifest_system_deps.createEventPlaneRe
 exports.createFileDataPlaneHandler = require_event_loop_stall_monitor.createFileDataPlaneHandler;
 exports.createHubCapForwardService = require_hub_cap_forward.createHubCapForwardService;
 exports.createHubService = createHubService;
+exports.createInspectorArrayBufferCensus = require_manifest_system_deps.createInspectorArrayBufferCensus;
 exports.createKernelHwAccel = require_manifest_system_deps.createKernelHwAccel;
 exports.createLocalTransport = require_manifest_system_deps.createLocalTransport;
 exports.createLoopDelayMeter = require_manifest_system_deps.createLoopDelayMeter;
+exports.createMeshQueueReader = require_manifest_system_deps.createMeshQueueReader;
+exports.createOutboundQueueGate = require_manifest_system_deps.createOutboundQueueGate;
 exports.createParentUnownedCallHandler = require_manifest_system_deps.createParentUnownedCallHandler;
 exports.createProcessService = createProcessService;
 exports.createReadinessService = createReadinessService;
@@ -96040,9 +96038,12 @@ Object.defineProperty(exports, "findInPath", {
 		return _camstack_types_node.findInPath;
 	}
 });
+exports.formatArrayBufferCensus = require_manifest_system_deps.formatArrayBufferCensus;
 exports.formatEventPlane = require_manifest_system_deps.formatEventPlane;
 exports.formatHeapSpaces = require_manifest_system_deps.formatHeapSpaces;
 exports.formatLogLine = require_formatter.formatLogLine;
+exports.formatMeshQueue = require_manifest_system_deps.formatMeshQueue;
+exports.formatOutboundQueueVerdict = require_manifest_system_deps.formatOutboundQueueVerdict;
 exports.formatSocketPlane = require_manifest_system_deps.formatSocketPlane;
 exports.getBrokerEventBus = require_manifest_system_deps.getBrokerEventBus;
 exports.getCapUsageRegistry = require_manifest_system_deps.getCapUsageRegistry;
@@ -96095,6 +96096,7 @@ Object.defineProperty(exports, "installPythonRequirements", {
 });
 exports.ipcParentLink = require_manifest_system_deps.ipcParentLink;
 exports.isAddonDeploySource = isAddonDeploySource;
+exports.isArrayBufferCensusReport = require_manifest_system_deps.isArrayBufferCensusReport;
 exports.isArrayOutputSchema = require_dist.isArrayOutputSchema;
 exports.isClusterSecretMismatchError = isClusterSecretMismatchError;
 exports.isCollectionArrayMethod = require_dist.isCollectionArrayMethod;
@@ -96119,6 +96121,7 @@ exports.readHeapSpaces = require_manifest_system_deps.readHeapSpaces;
 exports.readLanHttpState = require_tls$1.readLanHttpState;
 exports.readMoleculerFanoutMode = require_manifest_system_deps.readMoleculerFanoutMode;
 exports.readPendingRestart = readPendingRestart;
+exports.readSocketQueues = require_manifest_system_deps.readSocketQueues;
 exports.readTlsAccessStatus = require_tls$1.readTlsAccessStatus;
 exports.readTlsMode = require_tls$1.readTlsMode;
 exports.readinessKey = require_dist.readinessKey;

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { A as addonSettingsCapability, Ct as objectInputDeclaresAddonId, Et as procedureAuthKey, Nt as scopesAllowAddon, Pt as scopesAllowDeviceCap, Xt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Yt as DATAPLANE_SECRET_HEADER$1, Zt as DEVICE_STATUS_METHOD, _ as RUNTIME_DEFAULTS, _n as resolveCapMount, _t as looseSchema, an as asNumber, at as isCollectionArrayMethod, bn as EventCategory$1, cn as emitDownForOwnedCaps, dt as kebabToCamel, et as extractNestedAddonId, gn as readinessKey, gt as logLevelAtMost, h as METHOD_ACCESS_MAP, hn as parseJsonUnknown, in as asJsonObject$1, it as isArrayOutputSchema, jt as resolveMethodAuth, mn as parseJsonObject, nn as ReadinessTimeoutError, on as asString$1, p as LOG_LEVEL_RANK, pt as lifecycleJobSchema, qt as errMsg$1, sn as createEvent, st as isObjectInput, t as ALL_CAPABILITY_DEFINITIONS, tn as ReadinessRegistry, un as expandCapMethods, ut as isVoidInput, vn as scopeKey } from "./dist-DtDKMSeG.mjs";
+import { A as addonSettingsCapability, Dt as procedureAuthKey, Ft as scopesAllowDeviceCap, Jt as errMsg$1, Mt as resolveMethodAuth, Pt as scopesAllowAddon, Qt as DEVICE_STATUS_METHOD, Xt as DATAPLANE_SECRET_HEADER$1, Zt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, _ as RUNTIME_DEFAULTS, _n as readinessKey, _t as logLevelAtMost, an as asJsonObject$1, at as isArrayOutputSchema, cn as createEvent, ct as isObjectInput, dn as expandCapMethods, dt as isVoidInput, ft as kebabToCamel, gn as parseJsonUnknown, h as METHOD_ACCESS_MAP, hn as parseJsonObject, ln as emitDownForOwnedCaps, mt as lifecycleJobSchema, nn as ReadinessRegistry, on as asNumber, ot as isCollectionArrayMethod, p as LOG_LEVEL_RANK, rn as ReadinessTimeoutError, sn as asString$1, t as ALL_CAPABILITY_DEFINITIONS, tt as extractNestedAddonId, vn as resolveCapMount, vt as looseSchema, wt as objectInputDeclaresAddonId, xn as EventCategory$1, yn as scopeKey } from "./dist-Cyz5_i7z.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";
@@ -14,7 +14,7 @@ import "./builtins/liveness-monitor/index.mjs";
 import { LocalAuthAddon, a as require_safe_buffer, i as require_ms, n as ScopedTokenManager, o as ApiKeyManager, r as AuthManager, t as UserManager } from "./builtins/local-auth/local-auth.addon.mjs";
 import "./builtins/local-auth/index.mjs";
 import { LokiDestination, LokiLoggingAddon } from "./builtins/loki-logging/index.mjs";
-import NativeMetricsAddon, { t as NativeMetricsProvider } from "./builtins/native-metrics/native-metrics.addon.mjs";
+import NativeMetricsAddon, { a as NativeMetricsProvider } from "./builtins/native-metrics/native-metrics.addon.mjs";
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./builtins/sqlite-storage/filesystem-storage.addon.mjs";
 import { SqliteSettingsAddon, o as SqliteSettingsBackend, s as prefixRange } from "./builtins/sqlite-storage/sqlite-settings.addon.mjs";
 import { ConfigStore, DeviceStore } from "./builtins/sqlite-storage/index.mjs";
@@ -24,23 +24,23 @@ import "./builtins/storage-orchestrator/index.mjs";
 import { SystemConfigAddon } from "./builtins/system-config/system-config.addon.mjs";
 import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
-import { _ as fetchJson, a as createFileDataPlaneHandler, c as parseRangeHeader, d as ModelDownloadService, f as collectModelFiles, g as ensureModel, h as downloadModel, i as startEventLoopStallMonitor, l as parseTokenizedUrl, m as downloadFile, n as STALL_TICK_MS, o as contentTypeFor, p as deleteModelFromDisk, r as attributeStall, s as createAuthenticatedFileServer, t as STALL_REPORT_MS, u as resolveFilePath, v as getModelFilePath, y as isModelDownloaded } from "./event-loop-stall-monitor-B3CFd9tM.mjs";
-import { C as registerLanHttpHandler, S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, b as bindPendingLanHttp, c as loadTlsCert, d as collectCertIdentity, f as CA_VALIDITY_DAYS, g as evaluateExistingCert, h as SERVER_AUTH_OID, i as writeExtraSans, l as reissueTlsLeaf, m as MAX_LEAF_VALIDITY_DAYS, n as readTlsAccessStatus, o as validateUploadedTls, p as LEAF_RENEWAL_WINDOW_DAYS, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, u as CA_COMMON_NAME, v as allFamiliesListenHost, x as closeLanHttp, y as applyLanHttp } from "./tls-DOTmtLCW.mjs";
-import { $ as buildUdsNativeCapProxy, $t as formatHeapSpaces, A as createUdsLoggerWithControl, At as HUB_MAIN_RSS_BUDGET_MB, B as readMoleculerFanoutMode, Bt as createV8Reclaimer, C as ipcParentLink, Ct as createAddonDataPlaneFacility, D as createUdsEventBus, Dt as HEAP_WATCH_INTERVAL_MS, E as createUdsEventBridge, Et as HEAP_RECLAIM_TRIGGER_MB, F as AGENT_CAP_FWD_SERVICE, Ft as RUNNER_RSS_BUDGET_ENV, G as createLocalTransport, Gt as reclaimIntervalMs, H as PARENT_ROUTED_PROVIDER_ADDON_ID, Ht as hubMainRssBudget, I as CapRouteResolver, It as ZERO_LOOP_DELAY, J as SocketChannel, Jt as startRunnerHeapWatch, K as UdsLocalTransportClient, Kt as shouldReclaim, L as CapRouteError, Lt as buildHeapSample, M as LocalChildRegistry, Mt as RSS_BUDGET_REANNOUNCE_MIN_MS, N as UDS_NO_ROUTE_PREFIX, Nt as RSS_BUDGET_RELEASE_RATIO, O as udsChildLogToWorkerEntry, Ot as HEAP_WATCH_WARN_RATIO, P as AGENT_CAP_FWD_ACTION, Pt as RUNNER_HEAP_WATCH_INTERVAL_MS, Q as buildNativeCapProxy, Qt as emitHeapDiagnosticReport, R as classifyCapRoute, Rt as createDeferredHeapWatchSink, S as buildLinkChain, St as runNpm, T as createParentUnownedCallHandler, Tt as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, U as __resetCapUsageRegistryForTests, Ut as nextRssBudgetState, V as CapUsageRegistry, Vt as describeRss, W as getCapUsageRegistry, Wt as parseRssBudgetMb, X as FrameDecoder, Xt as DECISIVE_HEAP_SPACES, Y as localEndpointPath, Yt as strandedMb, Z as encodeFrame, Zt as HEAP_SPACE_REPORT_MIN_MB, _ as AddonDepsManager, _n as createEventPlaneReader, _t as CapabilityUnavailableError, a as createUdsAddonContext, an as createSocketPlaneMeter, at as createAddonService, b as brokerCallForCap, bt as resolveAddonClass, c as getOrInitReadinessRegistryForClient, cn as formatSocketPlane, ct as capActionName, d as clusterEventTopic, dn as recordSocketFrame, dt as capServiceName, en as heapSpaceField, et as createBrokerDeviceManagerApi, f as getBrokerEventBus, fn as sampleSocketDirection, ft as parseCapAction, g as subscribePassthrough, gn as createEventPlaneMeter, gt as CapabilityHandle, h as setNodeEventInterest, hn as EVENT_PLANE_TOP_N, ht as DeviceRegistry, i as createAddonContext, in as SOCKET_PLANE_TOP_N, j as LocalChildClient, jt as HUB_RSS_BUDGET_ENV, k as createUdsLogger, kt as HUB_MAIN_HEAP_WATCH_LABEL, l as setHubConnected, ln as EMPTY_SOCKET_DIRECTION, lt as capActionSuffix, m as registerEventBusService, mn as socketDirectionMessages, mt as serializeTypedArrays, n as installManifestPythonDeps, nn as selectReportedSpaces, o as getWorkerDeviceRegistry, on as createSocketPlaneReader, ot as validateProviderRegistrations, p as getMoleculerEventStats, pn as socketDirectionBytes, pt as deserializeTypedArrays, q as UdsLocalTransportServer, qt as startHeapWatch, r as adaptBrokerToCluster, rn as EMPTY_SOCKET_PLANE_BASELINE, rt as mountNativeCapService, s as getOrInitReadinessRegistry, sn as diffSocketPlane, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestSystemDeps, tn as readHeapSpaces, u as EVENT_TOPIC_PREFIX, un as createSocketDirectionCounters, ut as capBareAction, v as createKernelHwAccel, vn as diffEventPlane, vt as copyBundledNativeModules, w as localProviderLink, wt as HEAP_RECLAIM_MIN_INTERVAL_MS, x as brokerTransportLink, xt as resolveNpmInvocation, y as resolveHwAccel, yn as formatEventPlane, yt as installManifestNativeDeps, z as callWithServiceDiscovery, zt as createLoopDelayMeter } from "./manifest-system-deps-726RBOX7.mjs";
-import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-BWmQ5i-o.mjs";
-import { t as CustomActionRegistry } from "./custom-action-registry-F__gp_VX.mjs";
+import { _ as fetchJson, a as createFileDataPlaneHandler, c as parseRangeHeader, d as ModelDownloadService, f as collectModelFiles, g as ensureModel, h as downloadModel, i as startEventLoopStallMonitor, l as parseTokenizedUrl, m as downloadFile, n as STALL_TICK_MS, o as contentTypeFor, p as deleteModelFromDisk, r as attributeStall, s as createAuthenticatedFileServer, t as STALL_REPORT_MS, u as resolveFilePath, v as getModelFilePath, y as isModelDownloaded } from "./event-loop-stall-monitor-GPrVvx14.mjs";
+import { C as registerLanHttpHandler, S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, b as bindPendingLanHttp, c as loadTlsCert, d as collectCertIdentity, f as CA_VALIDITY_DAYS, g as evaluateExistingCert, h as SERVER_AUTH_OID, i as writeExtraSans, l as reissueTlsLeaf, m as MAX_LEAF_VALIDITY_DAYS, n as readTlsAccessStatus, o as validateUploadedTls, p as LEAF_RENEWAL_WINDOW_DAYS, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, u as CA_COMMON_NAME, v as allFamiliesListenHost, x as closeLanHttp, y as applyLanHttp } from "./tls-2xbgg78V.mjs";
+import { $ as buildUdsNativeCapProxy, $t as ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, A as createUdsLoggerWithControl, An as sampleSocketDirection, At as HUB_MAIN_RSS_BUDGET_MB, B as readMoleculerFanoutMode, Bt as createV8Reclaimer, C as ipcParentLink, Cn as createSocketPlaneReader, Ct as createAddonDataPlaneFacility, D as createUdsEventBus, Dn as EMPTY_SOCKET_DIRECTION, Dt as HEAP_WATCH_INTERVAL_MS, E as createUdsEventBridge, En as readSocketQueues, Et as HEAP_RECLAIM_TRIGGER_MB, F as CapRouteError, Fn as createEventPlaneReader, Ft as RUNNER_RSS_BUDGET_ENV, G as createLocalTransport, Gt as reclaimIntervalMs, H as PARENT_ROUTED_PROVIDER_ADDON_ID, Ht as hubMainRssBudget, I as classifyCapRoute, In as diffEventPlane, It as ZERO_LOOP_DELAY, J as SocketChannel, Jt as startRunnerHeapWatch, K as UdsLocalTransportClient, Kt as shouldReclaim, L as LocalChildClient, Ln as formatEventPlane, Lt as buildHeapSample, M as AGENT_CAP_FWD_SERVICE, Mn as socketDirectionMessages, Mt as RSS_BUDGET_REANNOUNCE_MIN_MS, N as CapRouteResolver, Nn as EVENT_PLANE_TOP_N, Nt as RSS_BUDGET_RELEASE_RATIO, O as udsChildLogToWorkerEntry, On as createSocketDirectionCounters, Ot as HEAP_WATCH_WARN_RATIO, P as callWithServiceDiscovery, Pn as createEventPlaneMeter, Pt as RUNNER_HEAP_WATCH_INTERVAL_MS, Q as buildNativeCapProxy, Qt as ARRAY_BUFFER_CENSUS_THRESHOLD_MB, R as LocalChildRegistry, Rt as createDeferredHeapWatchSink, S as buildLinkChain, Sn as createSocketPlaneMeter, St as runNpm, T as createParentUnownedCallHandler, Tn as formatSocketPlane, Tt as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, U as __resetCapUsageRegistryForTests, Ut as nextRssBudgetState, V as CapUsageRegistry, Vt as describeRss, W as getCapUsageRegistry, Wt as parseRssBudgetMb, X as FrameDecoder, Xt as ARRAY_BUFFER_CENSUS_COOLDOWN_MS, Y as localEndpointPath, Yt as strandedMb, Z as encodeFrame, Zt as ARRAY_BUFFER_CENSUS_SUSTAIN_MS, _ as AddonDepsManager, _n as createMeshQueueReader, _t as CapabilityUnavailableError, a as createUdsAddonContext, an as HEAP_SPACE_REPORT_MIN_MB, at as createAddonService, b as brokerCallForCap, bn as SOCKET_PLANE_TOP_N, bt as resolveAddonClass, c as getOrInitReadinessRegistryForClient, cn as heapSpaceField, ct as capActionName, d as clusterEventTopic, dn as OUTBOUND_QUEUE_COOLDOWN_MS, dt as capServiceName, en as createArrayBufferCensusGate, et as createBrokerDeviceManagerApi, f as getBrokerEventBus, fn as OUTBOUND_QUEUE_SUSTAIN_MS, ft as parseCapAction, g as subscribePassthrough, gn as MESH_QUEUE_TOP_N, gt as CapabilityHandle, h as setNodeEventInterest, hn as formatOutboundQueueVerdict, ht as DeviceRegistry, i as createAddonContext, in as DECISIVE_HEAP_SPACES, j as AGENT_CAP_FWD_ACTION, jn as socketDirectionBytes, jt as HUB_RSS_BUDGET_ENV, k as createUdsLogger, kn as recordSocketFrame, kt as HUB_MAIN_HEAP_WATCH_LABEL, l as setHubConnected, ln as readHeapSpaces, lt as capActionSuffix, m as registerEventBusService, mn as createOutboundQueueGate, mt as serializeTypedArrays, n as installManifestPythonDeps, nn as formatArrayBufferCensus, o as getWorkerDeviceRegistry, on as emitHeapDiagnosticReport, ot as validateProviderRegistrations, p as getMoleculerEventStats, pn as OUTBOUND_QUEUE_THRESHOLD_BYTES, pt as deserializeTypedArrays, q as UdsLocalTransportServer, qt as startHeapWatch, r as adaptBrokerToCluster, rn as isArrayBufferCensusReport, rt as mountNativeCapService, s as getOrInitReadinessRegistry, sn as formatHeapSpaces, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestSystemDeps, tn as createInspectorArrayBufferCensus, u as EVENT_TOPIC_PREFIX, un as selectReportedSpaces, ut as capBareAction, v as createKernelHwAccel, vn as formatMeshQueue, vt as copyBundledNativeModules, w as localProviderLink, wn as diffSocketPlane, wt as HEAP_RECLAIM_MIN_INTERVAL_MS, x as brokerTransportLink, xn as SOCKET_QUEUE_TOP_N, xt as resolveNpmInvocation, y as resolveHwAccel, yn as EMPTY_SOCKET_PLANE_BASELINE, yt as installManifestNativeDeps, z as UDS_NO_ROUTE_PREFIX, zt as createLoopDelayMeter } from "./manifest-system-deps-C7dihwWT.mjs";
+import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-Vp0bPV3U.mjs";
+import { t as CustomActionRegistry } from "./custom-action-registry-B6gOtUWA.mjs";
 import { z } from "zod";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import { PYTHON_VERSION, buildBinaryPath, downloadBinary, ensureBinary, ensureFfmpeg, ensurePython, findInPath, getFfmpegDownloadUrl, getPlatformInfo, getPythonDownloadUrl, installPythonPackages, installPythonRequirements } from "@camstack/types/node";
 import { lstat, readdir, readlink, realpath } from "node:fs/promises";
 import * as path$39 from "node:path";
 import { dirname, isAbsolute, join, posix, resolve, win32 } from "node:path";
-import { execFile, spawn } from "node:child_process";
-import * as util$10 from "node:util";
-import { promisify } from "node:util";
 import * as fs$17 from "node:fs";
 import { accessSync, constants, existsSync } from "node:fs";
+import { execFile, spawn } from "node:child_process";
 import * as os$18 from "node:os";
+import * as util$10 from "node:util";
+import { promisify } from "node:util";
 import { request } from "node:http";
 import * as vm from "node:vm";
 import { asJsonObject, errMsg } from "@camstack/types/addon";
@@ -94693,35 +94693,20 @@ function forceMoleculerDisconnect(broker, nodeId) {
 		nodes.delete(nodeId);
 	} catch {}
 }
-/** Read CPU% and RSS for a set of PIDs via `ps`. */
+/**
+* CPU% and RSS for a set of PIDs — `/proc` on Linux, `ps -p` elsewhere.
+* One reader for the whole kernel (`process/resource-monitor.ts`): this used
+* to be a second `ps` fork of its own, from hub-main, on every
+* `$process.list` (D452).
+*/
 async function getPidStats$1(pids) {
-	if (pids.length === 0) return /* @__PURE__ */ new Map();
-	return new Promise((resolve) => {
-		execFile("ps", [
-			"-o",
-			"pid=,pcpu=,rss=",
-			"-p",
-			pids.join(",")
-		], { timeout: 5e3 }, (err, stdout) => {
-			const result = /* @__PURE__ */ new Map();
-			if (err || !stdout) {
-				resolve(result);
-				return;
-			}
-			for (const line of stdout.trim().split("\n")) {
-				const parts = line.trim().split(/\s+/);
-				if (parts.length < 3) continue;
-				const pid = parseInt(parts[0], 10);
-				const cpu = parseFloat(parts[1]);
-				const rssKb = parseInt(parts[2], 10);
-				if (!isNaN(pid) && !isNaN(cpu) && !isNaN(rssKb)) result.set(pid, {
-					cpu: Math.round(cpu * 10) / 10,
-					memoryRss: rssKb * 1024
-				});
-			}
-			resolve(result);
-		});
+	const stats = await getPidStats(pids);
+	const result = /* @__PURE__ */ new Map();
+	for (const [pid, s] of stats) result.set(pid, {
+		cpu: s.cpu,
+		memoryRss: s.memory
 	});
+	return result;
 }
 var EMPTY_HEAP_DECLARATION = {
 	profile: void 0,
@@ -95766,4 +95751,4 @@ var LifecycleJobEngine = class {
 	}
 };
 //#endregion
-export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CA_COMMON_NAME, CA_VALIDITY_DAYS, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DECISIVE_HEAP_SPACES, DEFAULT_DATA_PATH, DEFAULT_LAN_HTTP_PORT, DEFAULT_LOG_LEVEL, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EMPTY_SOCKET_DIRECTION, EMPTY_SOCKET_PLANE_BASELINE, EVENT_PLANE_TOP_N, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_SPACE_REPORT_MIN_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LEAF_RENEWAL_WINDOW_DAYS, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LoggingGate, LokiDestination, LokiLoggingAddon, MAX_LEAF_VALIDITY_DAYS, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PARENT_ROUTED_PROVIDER_ADDON_ID, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, QUARANTINE_DIRNAME, RESTART_MARKER_FILE, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, SERVER_AUTH_OID, SOCKET_PLANE_TOP_N, STALL_REPORT_MS, STALL_TICK_MS, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, ZERO_LOOP_DELAY, __resetCapUsageRegistryForTests, __resetLoggingGateForTests, adaptBrokerToCluster, addonSettingsCapability, allFamiliesListenHost, applyLanHttp, attributeStall, bindPendingLanHttp, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, canServeDataPlane, capActionName, capActionSuffix, capBareAction, capServiceName, classifyAddonDir, classifyCapRoute, clearPendingRestart, closeLanHttp, clusterEventTopic, clusterSecretMatches, collectCertIdentity, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createDeferredHeapWatchSink, createDoorSettingsView, createEventPlaneMeter, createEventPlaneReader, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createKernelHwAccel, createLocalTransport, createLoopDelayMeter, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createSocketDirectionCounters, createSocketPlaneMeter, createSocketPlaneReader, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, describeRss, detectWorkspacePackagesDir, diffEventPlane, diffSocketPlane, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, emitHeapDiagnosticReport, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, evaluateExistingCert, expandCapMethods, fetchJson, findInPath, formatEventPlane, formatHeapSpaces, formatLogLine, formatSocketPlane, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getLoggingGate, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, heapSpaceField, hubMainRssBudget, installManifestNativeDeps, installManifestPythonDeps, installManifestSystemDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcParentLink, isAddonDeploySource, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, isolatedBuiltinPhase, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, nextRssBudgetState, parseCapAction, parseRangeHeader, parseRssBudgetMb, parseTokenizedUrl, partitionIsolatedBuiltinIds, proxyToUpstream, quarantineAddonResidue, readExtraSans, readHeapSpaces, readLanHttpState, readMoleculerFanoutMode, readPendingRestart, readTlsAccessStatus, readTlsMode, readinessKey, reclaimIntervalMs, recordSocketFrame, registerEventBusService, registerLanHttpHandler, reissueTlsLeaf, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runHubAddonBoot, runNpm, sampleSocketDirection, scheduleSelfRestart, scopeKey, scopesAllowAddon, scopesAllowDeviceCap, selectAddonResidue, selectReportedSpaces, serializeTypedArrays, setHubConnected, setNodeEventInterest, shouldReclaim, socketDirectionBytes, socketDirectionMessages, startEventLoopStallMonitor, startHeapWatch, startRunnerHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, validateUploadedTls, waitUntilReady, writeExtraSans, writePendingRestart, writeTlsMode };
+export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, ARRAY_BUFFER_CENSUS_COOLDOWN_MS, ARRAY_BUFFER_CENSUS_SUSTAIN_MS, ARRAY_BUFFER_CENSUS_THRESHOLD_MB, ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CA_COMMON_NAME, CA_VALIDITY_DAYS, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DECISIVE_HEAP_SPACES, DEFAULT_DATA_PATH, DEFAULT_LAN_HTTP_PORT, DEFAULT_LOG_LEVEL, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EMPTY_SOCKET_DIRECTION, EMPTY_SOCKET_PLANE_BASELINE, EVENT_PLANE_TOP_N, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_SPACE_REPORT_MIN_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LEAF_RENEWAL_WINDOW_DAYS, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LoggingGate, LokiDestination, LokiLoggingAddon, MAX_LEAF_VALIDITY_DAYS, MESH_QUEUE_TOP_N, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, OUTBOUND_QUEUE_COOLDOWN_MS, OUTBOUND_QUEUE_SUSTAIN_MS, OUTBOUND_QUEUE_THRESHOLD_BYTES, PARENT_ROUTED_PROVIDER_ADDON_ID, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, QUARANTINE_DIRNAME, RESTART_MARKER_FILE, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, SERVER_AUTH_OID, SOCKET_PLANE_TOP_N, SOCKET_QUEUE_TOP_N, STALL_REPORT_MS, STALL_TICK_MS, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, ZERO_LOOP_DELAY, __resetCapUsageRegistryForTests, __resetLoggingGateForTests, adaptBrokerToCluster, addonSettingsCapability, allFamiliesListenHost, applyLanHttp, attributeStall, bindPendingLanHttp, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, canServeDataPlane, capActionName, capActionSuffix, capBareAction, capServiceName, classifyAddonDir, classifyCapRoute, clearPendingRestart, closeLanHttp, clusterEventTopic, clusterSecretMatches, collectCertIdentity, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createArrayBufferCensusGate, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createDeferredHeapWatchSink, createDoorSettingsView, createEventPlaneMeter, createEventPlaneReader, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createInspectorArrayBufferCensus, createKernelHwAccel, createLocalTransport, createLoopDelayMeter, createMeshQueueReader, createOutboundQueueGate, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createSocketDirectionCounters, createSocketPlaneMeter, createSocketPlaneReader, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, describeRss, detectWorkspacePackagesDir, diffEventPlane, diffSocketPlane, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, emitHeapDiagnosticReport, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, evaluateExistingCert, expandCapMethods, fetchJson, findInPath, formatArrayBufferCensus, formatEventPlane, formatHeapSpaces, formatLogLine, formatMeshQueue, formatOutboundQueueVerdict, formatSocketPlane, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getLoggingGate, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, heapSpaceField, hubMainRssBudget, installManifestNativeDeps, installManifestPythonDeps, installManifestSystemDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcParentLink, isAddonDeploySource, isArrayBufferCensusReport, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, isolatedBuiltinPhase, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, nextRssBudgetState, parseCapAction, parseRangeHeader, parseRssBudgetMb, parseTokenizedUrl, partitionIsolatedBuiltinIds, proxyToUpstream, quarantineAddonResidue, readExtraSans, readHeapSpaces, readLanHttpState, readMoleculerFanoutMode, readPendingRestart, readSocketQueues, readTlsAccessStatus, readTlsMode, readinessKey, reclaimIntervalMs, recordSocketFrame, registerEventBusService, registerLanHttpHandler, reissueTlsLeaf, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runHubAddonBoot, runNpm, sampleSocketDirection, scheduleSelfRestart, scopeKey, scopesAllowAddon, scopesAllowDeviceCap, selectAddonResidue, selectReportedSpaces, serializeTypedArrays, setHubConnected, setNodeEventInterest, shouldReclaim, socketDirectionBytes, socketDirectionMessages, startEventLoopStallMonitor, startHeapWatch, startRunnerHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, validateUploadedTls, waitUntilReady, writeExtraSans, writePendingRestart, writeTlsMode };