@camstack/system 1.2.218 → 1.2.220

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-BOlMCOeT.js");
+const require_dist = require("./dist-CllKpcTd.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_formatter = require("./formatter-DqAKDlvN.js");
@@ -25,25 +25,25 @@ require("./builtins/storage-orchestrator/index.js");
 const require_builtins_system_config_system_config_addon = require("./builtins/system-config/system-config.addon.js");
 require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
-const require_event_loop_stall_monitor = require("./event-loop-stall-monitor-DM9OAzy8.js");
-const require_tls$1 = require("./tls-BxQlomxd.js");
-const require_manifest_system_deps = require("./manifest-system-deps-Bo92lg5u.js");
-const require_resource_monitor = require("./resource-monitor-CdnzxBLP.js");
-const require_custom_action_registry = require("./custom-action-registry-BDwM5qAK.js");
+const require_event_loop_stall_monitor = require("./event-loop-stall-monitor-CAsHdMwP.js");
+const require_tls$1 = require("./tls-BFs4PzoW.js");
+const require_manifest_system_deps = require("./manifest-system-deps-DfpwaXkh.js");
+const require_resource_monitor = require("./resource-monitor-LVE1BoLs.js");
+const require_custom_action_registry = require("./custom-action-registry-B42MC_Pv.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path, 1);
-let node_child_process = require("node:child_process");
-let node_util = require("node:util");
-node_util = require_chunk.__toESM(node_util);
 let node_fs = require("node:fs");
 let node_fs$1 = require_chunk.__toESM(node_fs, 1);
 node_fs = require_chunk.__toESM(node_fs);
+let node_child_process = require("node:child_process");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
+let node_util = require("node:util");
+node_util = require_chunk.__toESM(node_util);
 let node_http = require("node:http");
 let node_vm = require("node:vm");
 node_vm = require_chunk.__toESM(node_vm);
@@ -78885,16 +78885,36 @@ var require_udp_broadcaster = /* @__PURE__ */ require_chunk.__commonJSMin(((expo
 var require_parser = /* @__PURE__ */ require_chunk.__commonJSMin(((exports, module) => {
 	var Writable = require("stream").Writable;
 	var { resolvePacketType } = require_constants();
-	/**
-	* Import types
-	*
-	* @typedef {import("./parser")} ParserClass
-	*/
+	/** Moleculer TCP framing: CRC byte, 4-byte BE total length, type byte, payload. */
+	var HEADER_BYTES = 6;
 	/**
 	* TCP packet parser
 	* @class Parser
 	* @extends {Writable}
 	* @implements {ParserClass}
+	*
+	* ── CamStack patch (D457) — the accumulator is no longer quadratic ─────────
+	*
+	* The shipped `_write` did, ONCE PER SOCKET CHUNK that left a partial packet:
+	*
+	*     packet = Buffer.concat([this.buf, chunk]);   // copies the whole pending
+	*     this.buf = Buffer.from(packet);              // copies it AGAIN
+	*
+	* so a message of M bytes arriving in chunks of c copied ~2·M²/2c bytes on the
+	* receiving event loop — quadratic in the chunk COUNT. On CamStack's hub the
+	* mesh carries base64 JPEG cross-node (`pipelineRunner.getNativeCrop`
+	* with `encodeJpeg`, `pipelineRunner.runStatelessStep{frameJpeg}`) at
+	* `maxPacketSize: 10 MiB`, and a 50 s V8 profile of hub-main put **20.8 % of
+	* its busy main thread inside this one function**.
+	*
+	* The fix is the same one CamStack applied to its own UDS `FrameDecoder`:
+	* hold the pending chunks in a LIST, concatenate ONCE when a whole packet is
+	* available, and never at all while one is still incomplete. Everything else —
+	* the framing, the CRC check and its position, the `maxPacketSize` rule
+	* (accumulated bytes, not the declared length, exactly as before), the `data`
+	* event shape, the error text — is byte-for-byte the original behaviour, and
+	* `packages/system/src/kernel/__tests__/moleculer/mesh-tcp-parser.spec.ts`
+	* asserts each of those cases alongside the copy accounting.
 	*/
 	var Parser = class extends Writable {
 		/**
@@ -78905,32 +78925,44 @@ var require_parser = /* @__PURE__ */ require_chunk.__commonJSMin(((exports, modu
 		constructor(options, maxPacketSize) {
 			super(options);
 			this.maxPacketSize = maxPacketSize;
-			this.buf = null;
+			/** Pending chunks, newest last. Never concatenated until a packet completes. */
+			this.bufs = [];
+			/** Total bytes across `bufs` — the old `this.buf.length`. */
+			this.bufLen = 0;
+		}
+		/** The first `HEADER_BYTES` pending bytes, without flattening the rest. */
+		_header() {
+			const first = this.bufs[0];
+			if (first.length >= HEADER_BYTES) return first;
+			const head = Buffer.allocUnsafe(HEADER_BYTES);
+			let written = 0;
+			for (let i = 0; i < this.bufs.length && written < HEADER_BYTES; i++) {
+				const b = this.bufs[i];
+				const take = Math.min(HEADER_BYTES - written, b.length);
+				b.copy(head, written, 0, take);
+				written += take;
+			}
+			return head;
 		}
 		_write(chunk, encoding, cb) {
-			let packet = chunk;
-			if (this.buf && this.buf.length > 0) {
-				packet = Buffer.concat([this.buf, chunk]);
-				this.buf = null;
-			}
-			while (packet.length > 0) {
-				if (packet.length < 6) {
-					this.buf = Buffer.from(packet);
-					return cb();
-				}
-				if (this.maxPacketSize && packet.length > this.maxPacketSize) return cb(/* @__PURE__ */ new Error(`Incoming packet is larger than the 'maxPacketSize' limit (${packet.length} > ${this.maxPacketSize})!`));
-				const crc = packet[1] ^ packet[2] ^ packet[3] ^ packet[4] ^ packet[5];
-				if (crc !== packet[0]) return cb(/* @__PURE__ */ new Error("Invalid packet CRC! " + crc));
-				const length = packet.readInt32BE(1);
-				if (packet.length >= length) {
-					const msg = packet.slice(6, length);
-					const type = resolvePacketType(packet[5]);
-					this.emit("data", type, msg);
-					packet = packet.slice(length);
-				} else {
-					this.buf = Buffer.from(packet);
-					return cb();
-				}
+			if (this.bufLen > 0) this.bufs.push(chunk);
+			else this.bufs = [chunk];
+			this.bufLen += chunk.length;
+			while (this.bufLen > 0) {
+				if (this.bufLen < HEADER_BYTES) return cb();
+				if (this.maxPacketSize && this.bufLen > this.maxPacketSize) return cb(/* @__PURE__ */ new Error(`Incoming packet is larger than the 'maxPacketSize' limit (${this.bufLen} > ${this.maxPacketSize})!`));
+				const header = this._header();
+				const crc = header[1] ^ header[2] ^ header[3] ^ header[4] ^ header[5];
+				if (crc !== header[0]) return cb(/* @__PURE__ */ new Error("Invalid packet CRC! " + crc));
+				const length = header.readInt32BE(1);
+				if (this.bufLen < length) return cb();
+				const packet = this.bufs.length === 1 ? this.bufs[0] : Buffer.concat(this.bufs, this.bufLen);
+				const msg = packet.slice(HEADER_BYTES, length);
+				const type = resolvePacketType(packet[5]);
+				this.emit("data", type, msg);
+				const rest = packet.slice(length);
+				this.bufs = rest.length > 0 ? [rest] : [];
+				this.bufLen = rest.length;
 			}
 			cb();
 		}
@@ -94700,35 +94732,20 @@ function forceMoleculerDisconnect(broker, nodeId) {
 		nodes.delete(nodeId);
 	} catch {}
 }
-/** Read CPU% and RSS for a set of PIDs via `ps`. */
+/**
+* CPU% and RSS for a set of PIDs — `/proc` on Linux, `ps -p` elsewhere.
+* One reader for the whole kernel (`process/resource-monitor.ts`): this used
+* to be a second `ps` fork of its own, from hub-main, on every
+* `$process.list` (D452).
+*/
 async function getPidStats$1(pids) {
-	if (pids.length === 0) return /* @__PURE__ */ new Map();
-	return new Promise((resolve) => {
-		(0, node_child_process.execFile)("ps", [
-			"-o",
-			"pid=,pcpu=,rss=",
-			"-p",
-			pids.join(",")
-		], { timeout: 5e3 }, (err, stdout) => {
-			const result = /* @__PURE__ */ new Map();
-			if (err || !stdout) {
-				resolve(result);
-				return;
-			}
-			for (const line of stdout.trim().split("\n")) {
-				const parts = line.trim().split(/\s+/);
-				if (parts.length < 3) continue;
-				const pid = parseInt(parts[0], 10);
-				const cpu = parseFloat(parts[1]);
-				const rssKb = parseInt(parts[2], 10);
-				if (!isNaN(pid) && !isNaN(cpu) && !isNaN(rssKb)) result.set(pid, {
-					cpu: Math.round(cpu * 10) / 10,
-					memoryRss: rssKb * 1024
-				});
-			}
-			resolve(result);
-		});
+	const stats = await require_resource_monitor.getPidStats(pids);
+	const result = /* @__PURE__ */ new Map();
+	for (const [pid, s] of stats) result.set(pid, {
+		cpu: s.cpu,
+		memoryRss: s.memory
 	});
+	return result;
 }
 var EMPTY_HEAP_DECLARATION = {
 	profile: void 0,
@@ -95792,6 +95809,8 @@ exports.AddonRouteRegistry = AddonRouteRegistry;
 exports.AlertCenterAddon = require_builtins_alerts_alerts_addon.AlertCenterAddon;
 exports.ApiKeyManager = require_builtins_local_auth_local_auth_addon.ApiKeyManager;
 exports.AuthManager = require_builtins_local_auth_local_auth_addon.AuthManager;
+exports.CAP_ACTION_OVERFLOW_LABEL = require_manifest_system_deps.CAP_ACTION_OVERFLOW_LABEL;
+exports.CAP_ACTION_UNLABELLED = require_manifest_system_deps.CAP_ACTION_UNLABELLED;
 exports.CA_COMMON_NAME = require_tls$1.CA_COMMON_NAME;
 exports.CA_VALIDITY_DAYS = require_tls$1.CA_VALIDITY_DAYS;
 exports.CLUSTER_SECRET_MISMATCH_TYPE = CLUSTER_SECRET_MISMATCH_TYPE;
@@ -95819,6 +95838,7 @@ exports.DataPlaneRegistry = DataPlaneRegistry;
 exports.DeviceManagerAddon = require_builtins_device_manager_device_manager_addon.DeviceManagerAddon;
 exports.DeviceRegistry = require_manifest_system_deps.DeviceRegistry;
 exports.DeviceStore = require_builtins_sqlite_storage_index.DeviceStore$1;
+exports.EMPTY_CAP_ACTION_READING = require_manifest_system_deps.EMPTY_CAP_ACTION_READING;
 exports.EMPTY_SOCKET_DIRECTION = require_manifest_system_deps.EMPTY_SOCKET_DIRECTION;
 exports.EMPTY_SOCKET_PLANE_BASELINE = require_manifest_system_deps.EMPTY_SOCKET_PLANE_BASELINE;
 exports.EVENT_PLANE_TOP_N = require_manifest_system_deps.EVENT_PLANE_TOP_N;
@@ -95863,7 +95883,9 @@ exports.LogRingBuffer = LogRingBuffer;
 exports.LoggingGate = LoggingGate;
 exports.LokiDestination = require_builtins_loki_logging_index.LokiDestination$1;
 exports.LokiLoggingAddon = require_builtins_loki_logging_index.LokiLoggingAddon$1;
+exports.MAX_CAP_ACTIONS_PER_PEER = require_manifest_system_deps.MAX_CAP_ACTIONS_PER_PEER;
 exports.MAX_LEAF_VALIDITY_DAYS = require_tls$1.MAX_LEAF_VALIDITY_DAYS;
+exports.MESH_QUEUE_TOP_N = require_manifest_system_deps.MESH_QUEUE_TOP_N;
 exports.METHOD_ACCESS_MAP = require_dist.METHOD_ACCESS_MAP;
 exports.ModelDownloadService = require_event_loop_stall_monitor.ModelDownloadService;
 exports.NATIVE_PROVIDER_SERVICE_INFIX = require_manifest_system_deps.NATIVE_PROVIDER_SERVICE_INFIX;
@@ -95872,6 +95894,9 @@ exports.NativeMetricsAddon = require_builtins_native_metrics_native_metrics_addo
 exports.NativeMetricsProvider = require_builtins_native_metrics_native_metrics_addon.NativeMetricsProvider;
 exports.NetworkQualityTracker = NetworkQualityTracker;
 exports.NotificationService = NotificationService;
+exports.OUTBOUND_QUEUE_COOLDOWN_MS = require_manifest_system_deps.OUTBOUND_QUEUE_COOLDOWN_MS;
+exports.OUTBOUND_QUEUE_SUSTAIN_MS = require_manifest_system_deps.OUTBOUND_QUEUE_SUSTAIN_MS;
+exports.OUTBOUND_QUEUE_THRESHOLD_BYTES = require_manifest_system_deps.OUTBOUND_QUEUE_THRESHOLD_BYTES;
 exports.PARENT_ROUTED_PROVIDER_ADDON_ID = require_manifest_system_deps.PARENT_ROUTED_PROVIDER_ADDON_ID;
 Object.defineProperty(exports, "PYTHON_VERSION", {
 	enumerable: true,
@@ -95895,6 +95920,7 @@ exports.ReplEngine = ReplEngine;
 exports.RingBuffer = RingBuffer;
 exports.SERVER_AUTH_OID = require_tls$1.SERVER_AUTH_OID;
 exports.SOCKET_PLANE_TOP_N = require_manifest_system_deps.SOCKET_PLANE_TOP_N;
+exports.SOCKET_QUEUE_TOP_N = require_manifest_system_deps.SOCKET_QUEUE_TOP_N;
 exports.STALL_REPORT_MS = require_event_loop_stall_monitor.STALL_REPORT_MS;
 exports.STALL_TICK_MS = require_event_loop_stall_monitor.STALL_TICK_MS;
 exports.ScopedLogger = ScopedLogger;
@@ -95946,6 +95972,7 @@ exports.builderMountedCapNames = builderMountedCapNames;
 exports.callRegisterNodeWithRetry = callRegisterNodeWithRetry;
 exports.callWithServiceDiscovery = require_manifest_system_deps.callWithServiceDiscovery;
 exports.canServeDataPlane = canServeDataPlane;
+exports.capActionLabel = require_manifest_system_deps.capActionLabel;
 exports.capActionName = require_manifest_system_deps.capActionName;
 exports.capActionSuffix = require_manifest_system_deps.capActionSuffix;
 exports.capBareAction = require_manifest_system_deps.capBareAction;
@@ -95968,6 +95995,7 @@ exports.createArrayBufferCensusGate = require_manifest_system_deps.createArrayBu
 exports.createAuthenticatedFileServer = require_event_loop_stall_monitor.createAuthenticatedFileServer;
 exports.createBroker = createBroker;
 exports.createBrokerDeviceManagerApi = require_manifest_system_deps.createBrokerDeviceManagerApi;
+exports.createCapActionCensus = require_manifest_system_deps.createCapActionCensus;
 exports.createCoreCapService = createCoreCapService;
 exports.createDeferredHeapWatchSink = require_manifest_system_deps.createDeferredHeapWatchSink;
 exports.createDoorSettingsView = createDoorSettingsView;
@@ -95980,6 +96008,8 @@ exports.createInspectorArrayBufferCensus = require_manifest_system_deps.createIn
 exports.createKernelHwAccel = require_manifest_system_deps.createKernelHwAccel;
 exports.createLocalTransport = require_manifest_system_deps.createLocalTransport;
 exports.createLoopDelayMeter = require_manifest_system_deps.createLoopDelayMeter;
+exports.createMeshQueueReader = require_manifest_system_deps.createMeshQueueReader;
+exports.createOutboundQueueGate = require_manifest_system_deps.createOutboundQueueGate;
 exports.createParentUnownedCallHandler = require_manifest_system_deps.createParentUnownedCallHandler;
 exports.createProcessService = createProcessService;
 exports.createReadinessService = createReadinessService;
@@ -96000,6 +96030,7 @@ exports.deriveAgentListenPort = deriveAgentListenPort;
 exports.describeProviderKindDrift = describeProviderKindDrift;
 exports.describeRss = require_manifest_system_deps.describeRss;
 exports.detectWorkspacePackagesDir = detectWorkspacePackagesDir;
+exports.diffCapActionCensus = require_manifest_system_deps.diffCapActionCensus;
 exports.diffEventPlane = require_manifest_system_deps.diffEventPlane;
 exports.diffSocketPlane = require_manifest_system_deps.diffSocketPlane;
 Object.defineProperty(exports, "downloadBinary", {
@@ -96050,6 +96081,8 @@ exports.formatArrayBufferCensus = require_manifest_system_deps.formatArrayBuffer
 exports.formatEventPlane = require_manifest_system_deps.formatEventPlane;
 exports.formatHeapSpaces = require_manifest_system_deps.formatHeapSpaces;
 exports.formatLogLine = require_formatter.formatLogLine;
+exports.formatMeshQueue = require_manifest_system_deps.formatMeshQueue;
+exports.formatOutboundQueueVerdict = require_manifest_system_deps.formatOutboundQueueVerdict;
 exports.formatSocketPlane = require_manifest_system_deps.formatSocketPlane;
 exports.getBrokerEventBus = require_manifest_system_deps.getBrokerEventBus;
 exports.getCapUsageRegistry = require_manifest_system_deps.getCapUsageRegistry;
@@ -96127,6 +96160,7 @@ exports.readHeapSpaces = require_manifest_system_deps.readHeapSpaces;
 exports.readLanHttpState = require_tls$1.readLanHttpState;
 exports.readMoleculerFanoutMode = require_manifest_system_deps.readMoleculerFanoutMode;
 exports.readPendingRestart = readPendingRestart;
+exports.readSocketQueues = require_manifest_system_deps.readSocketQueues;
 exports.readTlsAccessStatus = require_tls$1.readTlsAccessStatus;
 exports.readTlsMode = require_tls$1.readTlsMode;
 exports.readinessKey = require_dist.readinessKey;

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { A as addonSettingsCapability, Dt as procedureAuthKey, Ft as scopesAllowDeviceCap, Jt as errMsg$1, Mt as resolveMethodAuth, Pt as scopesAllowAddon, Qt as DEVICE_STATUS_METHOD, Xt as DATAPLANE_SECRET_HEADER$1, Zt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, _ as RUNTIME_DEFAULTS, _n as readinessKey, _t as logLevelAtMost, an as asJsonObject$1, at as isArrayOutputSchema, cn as createEvent, ct as isObjectInput, dn as expandCapMethods, dt as isVoidInput, ft as kebabToCamel, gn as parseJsonUnknown, h as METHOD_ACCESS_MAP, hn as parseJsonObject, ln as emitDownForOwnedCaps, mt as lifecycleJobSchema, nn as ReadinessRegistry, on as asNumber, ot as isCollectionArrayMethod, p as LOG_LEVEL_RANK, rn as ReadinessTimeoutError, sn as asString$1, t as ALL_CAPABILITY_DEFINITIONS, tt as extractNestedAddonId, vn as resolveCapMount, vt as looseSchema, wt as objectInputDeclaresAddonId, xn as EventCategory$1, yn as scopeKey } from "./dist-DigmGsQS.mjs";
+import { A as addonSettingsCapability, Dt as procedureAuthKey, Ft as scopesAllowDeviceCap, Jt as errMsg$1, Mt as resolveMethodAuth, Pt as scopesAllowAddon, Qt as DEVICE_STATUS_METHOD, Xt as DATAPLANE_SECRET_HEADER$1, Zt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, _ as RUNTIME_DEFAULTS, _n as readinessKey, _t as logLevelAtMost, an as asJsonObject$1, at as isArrayOutputSchema, cn as createEvent, ct as isObjectInput, dn as expandCapMethods, dt as isVoidInput, ft as kebabToCamel, gn as parseJsonUnknown, h as METHOD_ACCESS_MAP, hn as parseJsonObject, ln as emitDownForOwnedCaps, mt as lifecycleJobSchema, nn as ReadinessRegistry, on as asNumber, ot as isCollectionArrayMethod, p as LOG_LEVEL_RANK, rn as ReadinessTimeoutError, sn as asString$1, t as ALL_CAPABILITY_DEFINITIONS, tt as extractNestedAddonId, vn as resolveCapMount, vt as looseSchema, wt as objectInputDeclaresAddonId, xn as EventCategory$1, yn as scopeKey } from "./dist-Ca_jaxXs.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";
@@ -14,7 +14,7 @@ import "./builtins/liveness-monitor/index.mjs";
 import { LocalAuthAddon, a as require_safe_buffer, i as require_ms, n as ScopedTokenManager, o as ApiKeyManager, r as AuthManager, t as UserManager } from "./builtins/local-auth/local-auth.addon.mjs";
 import "./builtins/local-auth/index.mjs";
 import { LokiDestination, LokiLoggingAddon } from "./builtins/loki-logging/index.mjs";
-import NativeMetricsAddon, { t as NativeMetricsProvider } from "./builtins/native-metrics/native-metrics.addon.mjs";
+import NativeMetricsAddon, { a as NativeMetricsProvider } from "./builtins/native-metrics/native-metrics.addon.mjs";
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./builtins/sqlite-storage/filesystem-storage.addon.mjs";
 import { SqliteSettingsAddon, o as SqliteSettingsBackend, s as prefixRange } from "./builtins/sqlite-storage/sqlite-settings.addon.mjs";
 import { ConfigStore, DeviceStore } from "./builtins/sqlite-storage/index.mjs";
@@ -24,23 +24,23 @@ import "./builtins/storage-orchestrator/index.mjs";
 import { SystemConfigAddon } from "./builtins/system-config/system-config.addon.mjs";
 import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
-import { _ as fetchJson, a as createFileDataPlaneHandler, c as parseRangeHeader, d as ModelDownloadService, f as collectModelFiles, g as ensureModel, h as downloadModel, i as startEventLoopStallMonitor, l as parseTokenizedUrl, m as downloadFile, n as STALL_TICK_MS, o as contentTypeFor, p as deleteModelFromDisk, r as attributeStall, s as createAuthenticatedFileServer, t as STALL_REPORT_MS, u as resolveFilePath, v as getModelFilePath, y as isModelDownloaded } from "./event-loop-stall-monitor-B3CFd9tM.mjs";
-import { C as registerLanHttpHandler, S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, b as bindPendingLanHttp, c as loadTlsCert, d as collectCertIdentity, f as CA_VALIDITY_DAYS, g as evaluateExistingCert, h as SERVER_AUTH_OID, i as writeExtraSans, l as reissueTlsLeaf, m as MAX_LEAF_VALIDITY_DAYS, n as readTlsAccessStatus, o as validateUploadedTls, p as LEAF_RENEWAL_WINDOW_DAYS, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, u as CA_COMMON_NAME, v as allFamiliesListenHost, x as closeLanHttp, y as applyLanHttp } from "./tls-DOTmtLCW.mjs";
-import { $ as buildUdsNativeCapProxy, $t as ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, A as createUdsLoggerWithControl, At as HUB_MAIN_RSS_BUDGET_MB, B as readMoleculerFanoutMode, Bt as createV8Reclaimer, C as ipcParentLink, Cn as EVENT_PLANE_TOP_N, Ct as createAddonDataPlaneFacility, D as createUdsEventBus, Dn as formatEventPlane, Dt as HEAP_WATCH_INTERVAL_MS, E as createUdsEventBridge, En as diffEventPlane, Et as HEAP_RECLAIM_TRIGGER_MB, F as AGENT_CAP_FWD_SERVICE, Ft as RUNNER_RSS_BUDGET_ENV, G as createLocalTransport, Gt as reclaimIntervalMs, H as PARENT_ROUTED_PROVIDER_ADDON_ID, Ht as hubMainRssBudget, I as CapRouteResolver, It as ZERO_LOOP_DELAY, J as SocketChannel, Jt as startRunnerHeapWatch, K as UdsLocalTransportClient, Kt as shouldReclaim, L as CapRouteError, Lt as buildHeapSample, M as LocalChildRegistry, Mt as RSS_BUDGET_REANNOUNCE_MIN_MS, N as UDS_NO_ROUTE_PREFIX, Nt as RSS_BUDGET_RELEASE_RATIO, O as udsChildLogToWorkerEntry, Ot as HEAP_WATCH_WARN_RATIO, P as AGENT_CAP_FWD_ACTION, Pt as RUNNER_HEAP_WATCH_INTERVAL_MS, Q as buildNativeCapProxy, Qt as ARRAY_BUFFER_CENSUS_THRESHOLD_MB, R as classifyCapRoute, Rt as createDeferredHeapWatchSink, S as buildLinkChain, Sn as socketDirectionMessages, St as runNpm, T as createParentUnownedCallHandler, Tn as createEventPlaneReader, Tt as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, U as __resetCapUsageRegistryForTests, Ut as nextRssBudgetState, V as CapUsageRegistry, Vt as describeRss, W as getCapUsageRegistry, Wt as parseRssBudgetMb, X as FrameDecoder, Xt as ARRAY_BUFFER_CENSUS_COOLDOWN_MS, Y as localEndpointPath, Yt as strandedMb, Z as encodeFrame, Zt as ARRAY_BUFFER_CENSUS_SUSTAIN_MS, _ as AddonDepsManager, _n as EMPTY_SOCKET_DIRECTION, _t as CapabilityUnavailableError, a as createUdsAddonContext, an as HEAP_SPACE_REPORT_MIN_MB, at as createAddonService, b as brokerCallForCap, bn as sampleSocketDirection, bt as resolveAddonClass, c as getOrInitReadinessRegistryForClient, cn as heapSpaceField, ct as capActionName, d as clusterEventTopic, dn as EMPTY_SOCKET_PLANE_BASELINE, dt as capServiceName, en as createArrayBufferCensusGate, et as createBrokerDeviceManagerApi, f as getBrokerEventBus, fn as SOCKET_PLANE_TOP_N, ft as parseCapAction, g as subscribePassthrough, gn as formatSocketPlane, gt as CapabilityHandle, h as setNodeEventInterest, hn as diffSocketPlane, ht as DeviceRegistry, i as createAddonContext, in as DECISIVE_HEAP_SPACES, j as LocalChildClient, jt as HUB_RSS_BUDGET_ENV, k as createUdsLogger, kt as HUB_MAIN_HEAP_WATCH_LABEL, l as setHubConnected, ln as readHeapSpaces, lt as capActionSuffix, m as registerEventBusService, mn as createSocketPlaneReader, mt as serializeTypedArrays, n as installManifestPythonDeps, nn as formatArrayBufferCensus, o as getWorkerDeviceRegistry, on as emitHeapDiagnosticReport, ot as validateProviderRegistrations, p as getMoleculerEventStats, pn as createSocketPlaneMeter, pt as deserializeTypedArrays, q as UdsLocalTransportServer, qt as startHeapWatch, r as adaptBrokerToCluster, rn as isArrayBufferCensusReport, rt as mountNativeCapService, s as getOrInitReadinessRegistry, sn as formatHeapSpaces, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestSystemDeps, tn as createInspectorArrayBufferCensus, u as EVENT_TOPIC_PREFIX, un as selectReportedSpaces, ut as capBareAction, v as createKernelHwAccel, vn as createSocketDirectionCounters, vt as copyBundledNativeModules, w as localProviderLink, wn as createEventPlaneMeter, wt as HEAP_RECLAIM_MIN_INTERVAL_MS, x as brokerTransportLink, xn as socketDirectionBytes, xt as resolveNpmInvocation, y as resolveHwAccel, yn as recordSocketFrame, yt as installManifestNativeDeps, z as callWithServiceDiscovery, zt as createLoopDelayMeter } from "./manifest-system-deps-D--wyMD9.mjs";
-import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-BWmQ5i-o.mjs";
-import { t as CustomActionRegistry } from "./custom-action-registry-CsONUlhC.mjs";
+import { _ as fetchJson, a as createFileDataPlaneHandler, c as parseRangeHeader, d as ModelDownloadService, f as collectModelFiles, g as ensureModel, h as downloadModel, i as startEventLoopStallMonitor, l as parseTokenizedUrl, m as downloadFile, n as STALL_TICK_MS, o as contentTypeFor, p as deleteModelFromDisk, r as attributeStall, s as createAuthenticatedFileServer, t as STALL_REPORT_MS, u as resolveFilePath, v as getModelFilePath, y as isModelDownloaded } from "./event-loop-stall-monitor-GPrVvx14.mjs";
+import { C as registerLanHttpHandler, S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, b as bindPendingLanHttp, c as loadTlsCert, d as collectCertIdentity, f as CA_VALIDITY_DAYS, g as evaluateExistingCert, h as SERVER_AUTH_OID, i as writeExtraSans, l as reissueTlsLeaf, m as MAX_LEAF_VALIDITY_DAYS, n as readTlsAccessStatus, o as validateUploadedTls, p as LEAF_RENEWAL_WINDOW_DAYS, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, u as CA_COMMON_NAME, v as allFamiliesListenHost, x as closeLanHttp, y as applyLanHttp } from "./tls-2xbgg78V.mjs";
+import { $ as buildUdsNativeCapProxy, $t as ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, A as createUdsLoggerWithControl, An as sampleSocketDirection, At as HUB_MAIN_RSS_BUDGET_MB, B as readMoleculerFanoutMode, Bn as EVENT_PLANE_TOP_N, Bt as createV8Reclaimer, C as ipcParentLink, Cn as createSocketPlaneReader, Ct as createAddonDataPlaneFacility, D as createUdsEventBus, Dn as EMPTY_SOCKET_DIRECTION, Dt as HEAP_WATCH_INTERVAL_MS, E as createUdsEventBridge, En as readSocketQueues, Et as HEAP_RECLAIM_TRIGGER_MB, F as CapRouteError, Fn as EMPTY_CAP_ACTION_READING, Ft as RUNNER_RSS_BUDGET_ENV, G as createLocalTransport, Gt as reclaimIntervalMs, H as PARENT_ROUTED_PROVIDER_ADDON_ID, Hn as createEventPlaneReader, Ht as hubMainRssBudget, I as classifyCapRoute, In as MAX_CAP_ACTIONS_PER_PEER, It as ZERO_LOOP_DELAY, J as SocketChannel, Jt as startRunnerHeapWatch, K as UdsLocalTransportClient, Kt as shouldReclaim, L as LocalChildClient, Ln as capActionLabel, Lt as buildHeapSample, M as AGENT_CAP_FWD_SERVICE, Mn as socketDirectionMessages, Mt as RSS_BUDGET_REANNOUNCE_MIN_MS, N as CapRouteResolver, Nn as CAP_ACTION_OVERFLOW_LABEL, Nt as RSS_BUDGET_RELEASE_RATIO, O as udsChildLogToWorkerEntry, On as createSocketDirectionCounters, Ot as HEAP_WATCH_WARN_RATIO, P as callWithServiceDiscovery, Pn as CAP_ACTION_UNLABELLED, Pt as RUNNER_HEAP_WATCH_INTERVAL_MS, Q as buildNativeCapProxy, Qt as ARRAY_BUFFER_CENSUS_THRESHOLD_MB, R as LocalChildRegistry, Rn as createCapActionCensus, Rt as createDeferredHeapWatchSink, S as buildLinkChain, Sn as createSocketPlaneMeter, St as runNpm, T as createParentUnownedCallHandler, Tn as formatSocketPlane, Tt as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, U as __resetCapUsageRegistryForTests, Un as diffEventPlane, Ut as nextRssBudgetState, V as CapUsageRegistry, Vn as createEventPlaneMeter, Vt as describeRss, W as getCapUsageRegistry, Wn as formatEventPlane, Wt as parseRssBudgetMb, X as FrameDecoder, Xt as ARRAY_BUFFER_CENSUS_COOLDOWN_MS, Y as localEndpointPath, Yt as strandedMb, Z as encodeFrame, Zt as ARRAY_BUFFER_CENSUS_SUSTAIN_MS, _ as AddonDepsManager, _n as createMeshQueueReader, _t as CapabilityUnavailableError, a as createUdsAddonContext, an as HEAP_SPACE_REPORT_MIN_MB, at as createAddonService, b as brokerCallForCap, bn as SOCKET_PLANE_TOP_N, bt as resolveAddonClass, c as getOrInitReadinessRegistryForClient, cn as heapSpaceField, ct as capActionName, d as clusterEventTopic, dn as OUTBOUND_QUEUE_COOLDOWN_MS, dt as capServiceName, en as createArrayBufferCensusGate, et as createBrokerDeviceManagerApi, f as getBrokerEventBus, fn as OUTBOUND_QUEUE_SUSTAIN_MS, ft as parseCapAction, g as subscribePassthrough, gn as MESH_QUEUE_TOP_N, gt as CapabilityHandle, h as setNodeEventInterest, hn as formatOutboundQueueVerdict, ht as DeviceRegistry, i as createAddonContext, in as DECISIVE_HEAP_SPACES, j as AGENT_CAP_FWD_ACTION, jn as socketDirectionBytes, jt as HUB_RSS_BUDGET_ENV, k as createUdsLogger, kn as recordSocketFrame, kt as HUB_MAIN_HEAP_WATCH_LABEL, l as setHubConnected, ln as readHeapSpaces, lt as capActionSuffix, m as registerEventBusService, mn as createOutboundQueueGate, mt as serializeTypedArrays, n as installManifestPythonDeps, nn as formatArrayBufferCensus, o as getWorkerDeviceRegistry, on as emitHeapDiagnosticReport, ot as validateProviderRegistrations, p as getMoleculerEventStats, pn as OUTBOUND_QUEUE_THRESHOLD_BYTES, pt as deserializeTypedArrays, q as UdsLocalTransportServer, qt as startHeapWatch, r as adaptBrokerToCluster, rn as isArrayBufferCensusReport, rt as mountNativeCapService, s as getOrInitReadinessRegistry, sn as formatHeapSpaces, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestSystemDeps, tn as createInspectorArrayBufferCensus, u as EVENT_TOPIC_PREFIX, un as selectReportedSpaces, ut as capBareAction, v as createKernelHwAccel, vn as formatMeshQueue, vt as copyBundledNativeModules, w as localProviderLink, wn as diffSocketPlane, wt as HEAP_RECLAIM_MIN_INTERVAL_MS, x as brokerTransportLink, xn as SOCKET_QUEUE_TOP_N, xt as resolveNpmInvocation, y as resolveHwAccel, yn as EMPTY_SOCKET_PLANE_BASELINE, yt as installManifestNativeDeps, z as UDS_NO_ROUTE_PREFIX, zn as diffCapActionCensus, zt as createLoopDelayMeter } from "./manifest-system-deps-iadzxSBr.mjs";
+import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-Vp0bPV3U.mjs";
+import { t as CustomActionRegistry } from "./custom-action-registry-CpR58DXT.mjs";
 import { z } from "zod";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import { PYTHON_VERSION, buildBinaryPath, downloadBinary, ensureBinary, ensureFfmpeg, ensurePython, findInPath, getFfmpegDownloadUrl, getPlatformInfo, getPythonDownloadUrl, installPythonPackages, installPythonRequirements } from "@camstack/types/node";
 import { lstat, readdir, readlink, realpath } from "node:fs/promises";
 import * as path$39 from "node:path";
 import { dirname, isAbsolute, join, posix, resolve, win32 } from "node:path";
-import { execFile, spawn } from "node:child_process";
-import * as util$10 from "node:util";
-import { promisify } from "node:util";
 import * as fs$17 from "node:fs";
 import { accessSync, constants, existsSync } from "node:fs";
+import { execFile, spawn } from "node:child_process";
 import * as os$18 from "node:os";
+import * as util$10 from "node:util";
+import { promisify } from "node:util";
 import { request } from "node:http";
 import * as vm from "node:vm";
 import { asJsonObject, errMsg } from "@camstack/types/addon";
@@ -78878,16 +78878,36 @@ var require_udp_broadcaster = /* @__PURE__ */ __commonJSMin$1(((exports, module)
 var require_parser = /* @__PURE__ */ __commonJSMin$1(((exports, module) => {
 	var Writable = __require("stream").Writable;
 	var { resolvePacketType } = require_constants();
-	/**
-	* Import types
-	*
-	* @typedef {import("./parser")} ParserClass
-	*/
+	/** Moleculer TCP framing: CRC byte, 4-byte BE total length, type byte, payload. */
+	var HEADER_BYTES = 6;
 	/**
 	* TCP packet parser
 	* @class Parser
 	* @extends {Writable}
 	* @implements {ParserClass}
+	*
+	* ── CamStack patch (D457) — the accumulator is no longer quadratic ─────────
+	*
+	* The shipped `_write` did, ONCE PER SOCKET CHUNK that left a partial packet:
+	*
+	*     packet = Buffer.concat([this.buf, chunk]);   // copies the whole pending
+	*     this.buf = Buffer.from(packet);              // copies it AGAIN
+	*
+	* so a message of M bytes arriving in chunks of c copied ~2·M²/2c bytes on the
+	* receiving event loop — quadratic in the chunk COUNT. On CamStack's hub the
+	* mesh carries base64 JPEG cross-node (`pipelineRunner.getNativeCrop`
+	* with `encodeJpeg`, `pipelineRunner.runStatelessStep{frameJpeg}`) at
+	* `maxPacketSize: 10 MiB`, and a 50 s V8 profile of hub-main put **20.8 % of
+	* its busy main thread inside this one function**.
+	*
+	* The fix is the same one CamStack applied to its own UDS `FrameDecoder`:
+	* hold the pending chunks in a LIST, concatenate ONCE when a whole packet is
+	* available, and never at all while one is still incomplete. Everything else —
+	* the framing, the CRC check and its position, the `maxPacketSize` rule
+	* (accumulated bytes, not the declared length, exactly as before), the `data`
+	* event shape, the error text — is byte-for-byte the original behaviour, and
+	* `packages/system/src/kernel/__tests__/moleculer/mesh-tcp-parser.spec.ts`
+	* asserts each of those cases alongside the copy accounting.
 	*/
 	var Parser = class extends Writable {
 		/**
@@ -78898,32 +78918,44 @@ var require_parser = /* @__PURE__ */ __commonJSMin$1(((exports, module) => {
 		constructor(options, maxPacketSize) {
 			super(options);
 			this.maxPacketSize = maxPacketSize;
-			this.buf = null;
+			/** Pending chunks, newest last. Never concatenated until a packet completes. */
+			this.bufs = [];
+			/** Total bytes across `bufs` — the old `this.buf.length`. */
+			this.bufLen = 0;
+		}
+		/** The first `HEADER_BYTES` pending bytes, without flattening the rest. */
+		_header() {
+			const first = this.bufs[0];
+			if (first.length >= HEADER_BYTES) return first;
+			const head = Buffer.allocUnsafe(HEADER_BYTES);
+			let written = 0;
+			for (let i = 0; i < this.bufs.length && written < HEADER_BYTES; i++) {
+				const b = this.bufs[i];
+				const take = Math.min(HEADER_BYTES - written, b.length);
+				b.copy(head, written, 0, take);
+				written += take;
+			}
+			return head;
 		}
 		_write(chunk, encoding, cb) {
-			let packet = chunk;
-			if (this.buf && this.buf.length > 0) {
-				packet = Buffer.concat([this.buf, chunk]);
-				this.buf = null;
-			}
-			while (packet.length > 0) {
-				if (packet.length < 6) {
-					this.buf = Buffer.from(packet);
-					return cb();
-				}
-				if (this.maxPacketSize && packet.length > this.maxPacketSize) return cb(/* @__PURE__ */ new Error(`Incoming packet is larger than the 'maxPacketSize' limit (${packet.length} > ${this.maxPacketSize})!`));
-				const crc = packet[1] ^ packet[2] ^ packet[3] ^ packet[4] ^ packet[5];
-				if (crc !== packet[0]) return cb(/* @__PURE__ */ new Error("Invalid packet CRC! " + crc));
-				const length = packet.readInt32BE(1);
-				if (packet.length >= length) {
-					const msg = packet.slice(6, length);
-					const type = resolvePacketType(packet[5]);
-					this.emit("data", type, msg);
-					packet = packet.slice(length);
-				} else {
-					this.buf = Buffer.from(packet);
-					return cb();
-				}
+			if (this.bufLen > 0) this.bufs.push(chunk);
+			else this.bufs = [chunk];
+			this.bufLen += chunk.length;
+			while (this.bufLen > 0) {
+				if (this.bufLen < HEADER_BYTES) return cb();
+				if (this.maxPacketSize && this.bufLen > this.maxPacketSize) return cb(/* @__PURE__ */ new Error(`Incoming packet is larger than the 'maxPacketSize' limit (${this.bufLen} > ${this.maxPacketSize})!`));
+				const header = this._header();
+				const crc = header[1] ^ header[2] ^ header[3] ^ header[4] ^ header[5];
+				if (crc !== header[0]) return cb(/* @__PURE__ */ new Error("Invalid packet CRC! " + crc));
+				const length = header.readInt32BE(1);
+				if (this.bufLen < length) return cb();
+				const packet = this.bufs.length === 1 ? this.bufs[0] : Buffer.concat(this.bufs, this.bufLen);
+				const msg = packet.slice(HEADER_BYTES, length);
+				const type = resolvePacketType(packet[5]);
+				this.emit("data", type, msg);
+				const rest = packet.slice(length);
+				this.bufs = rest.length > 0 ? [rest] : [];
+				this.bufLen = rest.length;
 			}
 			cb();
 		}
@@ -94693,35 +94725,20 @@ function forceMoleculerDisconnect(broker, nodeId) {
 		nodes.delete(nodeId);
 	} catch {}
 }
-/** Read CPU% and RSS for a set of PIDs via `ps`. */
+/**
+* CPU% and RSS for a set of PIDs — `/proc` on Linux, `ps -p` elsewhere.
+* One reader for the whole kernel (`process/resource-monitor.ts`): this used
+* to be a second `ps` fork of its own, from hub-main, on every
+* `$process.list` (D452).
+*/
 async function getPidStats$1(pids) {
-	if (pids.length === 0) return /* @__PURE__ */ new Map();
-	return new Promise((resolve) => {
-		execFile("ps", [
-			"-o",
-			"pid=,pcpu=,rss=",
-			"-p",
-			pids.join(",")
-		], { timeout: 5e3 }, (err, stdout) => {
-			const result = /* @__PURE__ */ new Map();
-			if (err || !stdout) {
-				resolve(result);
-				return;
-			}
-			for (const line of stdout.trim().split("\n")) {
-				const parts = line.trim().split(/\s+/);
-				if (parts.length < 3) continue;
-				const pid = parseInt(parts[0], 10);
-				const cpu = parseFloat(parts[1]);
-				const rssKb = parseInt(parts[2], 10);
-				if (!isNaN(pid) && !isNaN(cpu) && !isNaN(rssKb)) result.set(pid, {
-					cpu: Math.round(cpu * 10) / 10,
-					memoryRss: rssKb * 1024
-				});
-			}
-			resolve(result);
-		});
+	const stats = await getPidStats(pids);
+	const result = /* @__PURE__ */ new Map();
+	for (const [pid, s] of stats) result.set(pid, {
+		cpu: s.cpu,
+		memoryRss: s.memory
 	});
+	return result;
 }
 var EMPTY_HEAP_DECLARATION = {
 	profile: void 0,
@@ -95766,4 +95783,4 @@ var LifecycleJobEngine = class {
 	}
 };
 //#endregion
-export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, ARRAY_BUFFER_CENSUS_COOLDOWN_MS, ARRAY_BUFFER_CENSUS_SUSTAIN_MS, ARRAY_BUFFER_CENSUS_THRESHOLD_MB, ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CA_COMMON_NAME, CA_VALIDITY_DAYS, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DECISIVE_HEAP_SPACES, DEFAULT_DATA_PATH, DEFAULT_LAN_HTTP_PORT, DEFAULT_LOG_LEVEL, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EMPTY_SOCKET_DIRECTION, EMPTY_SOCKET_PLANE_BASELINE, EVENT_PLANE_TOP_N, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_SPACE_REPORT_MIN_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LEAF_RENEWAL_WINDOW_DAYS, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LoggingGate, LokiDestination, LokiLoggingAddon, MAX_LEAF_VALIDITY_DAYS, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PARENT_ROUTED_PROVIDER_ADDON_ID, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, QUARANTINE_DIRNAME, RESTART_MARKER_FILE, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, SERVER_AUTH_OID, SOCKET_PLANE_TOP_N, STALL_REPORT_MS, STALL_TICK_MS, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, ZERO_LOOP_DELAY, __resetCapUsageRegistryForTests, __resetLoggingGateForTests, adaptBrokerToCluster, addonSettingsCapability, allFamiliesListenHost, applyLanHttp, attributeStall, bindPendingLanHttp, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, canServeDataPlane, capActionName, capActionSuffix, capBareAction, capServiceName, classifyAddonDir, classifyCapRoute, clearPendingRestart, closeLanHttp, clusterEventTopic, clusterSecretMatches, collectCertIdentity, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createArrayBufferCensusGate, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createDeferredHeapWatchSink, createDoorSettingsView, createEventPlaneMeter, createEventPlaneReader, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createInspectorArrayBufferCensus, createKernelHwAccel, createLocalTransport, createLoopDelayMeter, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createSocketDirectionCounters, createSocketPlaneMeter, createSocketPlaneReader, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, describeRss, detectWorkspacePackagesDir, diffEventPlane, diffSocketPlane, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, emitHeapDiagnosticReport, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, evaluateExistingCert, expandCapMethods, fetchJson, findInPath, formatArrayBufferCensus, formatEventPlane, formatHeapSpaces, formatLogLine, formatSocketPlane, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getLoggingGate, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, heapSpaceField, hubMainRssBudget, installManifestNativeDeps, installManifestPythonDeps, installManifestSystemDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcParentLink, isAddonDeploySource, isArrayBufferCensusReport, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, isolatedBuiltinPhase, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, nextRssBudgetState, parseCapAction, parseRangeHeader, parseRssBudgetMb, parseTokenizedUrl, partitionIsolatedBuiltinIds, proxyToUpstream, quarantineAddonResidue, readExtraSans, readHeapSpaces, readLanHttpState, readMoleculerFanoutMode, readPendingRestart, readTlsAccessStatus, readTlsMode, readinessKey, reclaimIntervalMs, recordSocketFrame, registerEventBusService, registerLanHttpHandler, reissueTlsLeaf, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runHubAddonBoot, runNpm, sampleSocketDirection, scheduleSelfRestart, scopeKey, scopesAllowAddon, scopesAllowDeviceCap, selectAddonResidue, selectReportedSpaces, serializeTypedArrays, setHubConnected, setNodeEventInterest, shouldReclaim, socketDirectionBytes, socketDirectionMessages, startEventLoopStallMonitor, startHeapWatch, startRunnerHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, validateUploadedTls, waitUntilReady, writeExtraSans, writePendingRestart, writeTlsMode };
+export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, ARRAY_BUFFER_CENSUS_COOLDOWN_MS, ARRAY_BUFFER_CENSUS_SUSTAIN_MS, ARRAY_BUFFER_CENSUS_THRESHOLD_MB, ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CAP_ACTION_OVERFLOW_LABEL, CAP_ACTION_UNLABELLED, CA_COMMON_NAME, CA_VALIDITY_DAYS, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DECISIVE_HEAP_SPACES, DEFAULT_DATA_PATH, DEFAULT_LAN_HTTP_PORT, DEFAULT_LOG_LEVEL, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EMPTY_CAP_ACTION_READING, EMPTY_SOCKET_DIRECTION, EMPTY_SOCKET_PLANE_BASELINE, EVENT_PLANE_TOP_N, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_SPACE_REPORT_MIN_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LEAF_RENEWAL_WINDOW_DAYS, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LoggingGate, LokiDestination, LokiLoggingAddon, MAX_CAP_ACTIONS_PER_PEER, MAX_LEAF_VALIDITY_DAYS, MESH_QUEUE_TOP_N, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, OUTBOUND_QUEUE_COOLDOWN_MS, OUTBOUND_QUEUE_SUSTAIN_MS, OUTBOUND_QUEUE_THRESHOLD_BYTES, PARENT_ROUTED_PROVIDER_ADDON_ID, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, QUARANTINE_DIRNAME, RESTART_MARKER_FILE, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, SERVER_AUTH_OID, SOCKET_PLANE_TOP_N, SOCKET_QUEUE_TOP_N, STALL_REPORT_MS, STALL_TICK_MS, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, ZERO_LOOP_DELAY, __resetCapUsageRegistryForTests, __resetLoggingGateForTests, adaptBrokerToCluster, addonSettingsCapability, allFamiliesListenHost, applyLanHttp, attributeStall, bindPendingLanHttp, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, canServeDataPlane, capActionLabel, capActionName, capActionSuffix, capBareAction, capServiceName, classifyAddonDir, classifyCapRoute, clearPendingRestart, closeLanHttp, clusterEventTopic, clusterSecretMatches, collectCertIdentity, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createArrayBufferCensusGate, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCapActionCensus, createCoreCapService, createDeferredHeapWatchSink, createDoorSettingsView, createEventPlaneMeter, createEventPlaneReader, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createInspectorArrayBufferCensus, createKernelHwAccel, createLocalTransport, createLoopDelayMeter, createMeshQueueReader, createOutboundQueueGate, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createSocketDirectionCounters, createSocketPlaneMeter, createSocketPlaneReader, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, describeRss, detectWorkspacePackagesDir, diffCapActionCensus, diffEventPlane, diffSocketPlane, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, emitHeapDiagnosticReport, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, evaluateExistingCert, expandCapMethods, fetchJson, findInPath, formatArrayBufferCensus, formatEventPlane, formatHeapSpaces, formatLogLine, formatMeshQueue, formatOutboundQueueVerdict, formatSocketPlane, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getLoggingGate, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, heapSpaceField, hubMainRssBudget, installManifestNativeDeps, installManifestPythonDeps, installManifestSystemDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcParentLink, isAddonDeploySource, isArrayBufferCensusReport, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, isolatedBuiltinPhase, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, nextRssBudgetState, parseCapAction, parseRangeHeader, parseRssBudgetMb, parseTokenizedUrl, partitionIsolatedBuiltinIds, proxyToUpstream, quarantineAddonResidue, readExtraSans, readHeapSpaces, readLanHttpState, readMoleculerFanoutMode, readPendingRestart, readSocketQueues, readTlsAccessStatus, readTlsMode, readinessKey, reclaimIntervalMs, recordSocketFrame, registerEventBusService, registerLanHttpHandler, reissueTlsLeaf, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runHubAddonBoot, runNpm, sampleSocketDirection, scheduleSelfRestart, scopeKey, scopesAllowAddon, scopesAllowDeviceCap, selectAddonResidue, selectReportedSpaces, serializeTypedArrays, setHubConnected, setNodeEventInterest, shouldReclaim, socketDirectionBytes, socketDirectionMessages, startEventLoopStallMonitor, startHeapWatch, startRunnerHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, validateUploadedTls, waitUntilReady, writeExtraSans, writePendingRestart, writeTlsMode };