@camstack/system 1.2.221 → 1.2.223

package/dist/addon-runner.js

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_manifest_system_deps = require("./manifest-system-deps-DfpwaXkh.js");
+const require_manifest_system_deps = require("./manifest-system-deps-YYKKCKSF.js");
 const require_custom_action_registry = require("./custom-action-registry-DvVMHLfJ.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/addon-runner.mjs

@@ -1,4 +1,4 @@
-import { A as createUdsLoggerWithControl, Ft as RUNNER_RSS_BUDGET_ENV, Jt as startRunnerHeapWatch, L as LocalChildClient, a as createUdsAddonContext, bt as resolveAddonClass, it as setWorkerNativeCapsChangeListener, n as installManifestPythonDeps, nt as getWorkerNativeCapSnapshot, on as emitHeapDiagnosticReport, ot as validateProviderRegistrations, t as installManifestSystemDeps, tt as getWorkerNativeCapProvider, yt as installManifestNativeDeps } from "./manifest-system-deps-iadzxSBr.mjs";
+import { A as createUdsLoggerWithControl, Ft as RUNNER_RSS_BUDGET_ENV, Jt as startRunnerHeapWatch, L as LocalChildClient, a as createUdsAddonContext, bt as resolveAddonClass, it as setWorkerNativeCapsChangeListener, n as installManifestPythonDeps, nt as getWorkerNativeCapSnapshot, on as emitHeapDiagnosticReport, ot as validateProviderRegistrations, t as installManifestSystemDeps, tt as getWorkerNativeCapProvider, yt as installManifestNativeDeps } from "./manifest-system-deps-D4cmEnqQ.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-DvtOs-tp.mjs";
 import { register } from "node:module";
 import * as path$1 from "node:path";

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3270,7 +3270,7 @@ var SystemBackupService = class {
 		for (const dbPath of dbPaths) try {
 			const db = new Database(dbPath);
 			try {
-				db.pragma("wal_checkpoint(TRUNCATE)");
+				db.pragma("wal_checkpoint(PASSIVE)");
 			} finally {
 				db.close();
 			}

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -3255,7 +3255,7 @@ var SystemBackupService = class {
 		for (const dbPath of dbPaths) try {
 			const db = new Database(dbPath);
 			try {
-				db.pragma("wal_checkpoint(TRUNCATE)");
+				db.pragma("wal_checkpoint(PASSIVE)");
 			} finally {
 				db.close();
 			}

package/dist/builtins/sqlite-storage/sqlite-settings-backend.d.ts

@@ -401,6 +401,31 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
      * inside that blob and are reached with `json_extract`.
      */
     private shapeOf;
+    /**
+     * Where a declaration LIVES, so it outlives the process that made it.
+     *
+     * `declaredCollections` used to be only an in-memory Map, and the
+     * declarations are made once, by each addon, at that addon's own boot.
+     * On 2026-09-12 this backend died with SIGBUS (a second connection
+     * truncated the WAL under its mmap) and `CrashSupervisor` respawned it: the
+     * new instance knew only the canonical KV collections, every other addon
+     * stayed up and never re-declared, and the cluster failed every settings
+     * read for six hours — the operator could not log in.
+     *
+     * The tables are durable. What the backend knows ABOUT them has to be too,
+     * because nothing in the system re-declares and nothing listens for this
+     * process restarting.
+     */
+    private static readonly DECLARATIONS_TABLE;
+    /** Create the meta table. Idempotent; called before anything reads it. */
+    private ensureDeclarationsTable;
+    /** Persist one declaration, replacing any earlier shape for the same table. */
+    private persistDeclaration;
+    /**
+     * Reload every persisted declaration. Called at init, BEFORE any addon has
+     * had the chance to re-declare — which on a respawn none of them will.
+     */
+    private restorePersistedDeclarations;
     declareCollection(input: {
         namespace?: string;
         collection: string;

package/dist/index.js

@@ -27,7 +27,7 @@ require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_event_loop_stall_monitor = require("./event-loop-stall-monitor-CAsHdMwP.js");
 const require_tls$1 = require("./tls-BFs4PzoW.js");
-const require_manifest_system_deps = require("./manifest-system-deps-DfpwaXkh.js");
+const require_manifest_system_deps = require("./manifest-system-deps-YYKKCKSF.js");
 const require_resource_monitor = require("./resource-monitor-LVE1BoLs.js");
 const require_custom_action_registry = require("./custom-action-registry-DvVMHLfJ.js");
 let zod = require("zod");
@@ -78961,8 +78961,9 @@ var require_parser = /* @__PURE__ */ require_chunk.__commonJSMin(((exports, modu
 				const type = resolvePacketType(packet[5]);
 				this.emit("data", type, msg);
 				const rest = packet.slice(length);
-				this.bufs = rest.length > 0 ? [rest] : [];
-				this.bufLen = rest.length;
+				const carried = rest.length > 0 && rest.length * 8 < rest.buffer.byteLength ? Buffer.from(rest) : rest;
+				this.bufs = carried.length > 0 ? [carried] : [];
+				this.bufLen = carried.length;
 			}
 			cb();
 		}

package/dist/index.mjs

@@ -26,7 +26,7 @@ import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
 import { _ as fetchJson, a as createFileDataPlaneHandler, c as parseRangeHeader, d as ModelDownloadService, f as collectModelFiles, g as ensureModel, h as downloadModel, i as startEventLoopStallMonitor, l as parseTokenizedUrl, m as downloadFile, n as STALL_TICK_MS, o as contentTypeFor, p as deleteModelFromDisk, r as attributeStall, s as createAuthenticatedFileServer, t as STALL_REPORT_MS, u as resolveFilePath, v as getModelFilePath, y as isModelDownloaded } from "./event-loop-stall-monitor-GPrVvx14.mjs";
 import { C as registerLanHttpHandler, S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, b as bindPendingLanHttp, c as loadTlsCert, d as collectCertIdentity, f as CA_VALIDITY_DAYS, g as evaluateExistingCert, h as SERVER_AUTH_OID, i as writeExtraSans, l as reissueTlsLeaf, m as MAX_LEAF_VALIDITY_DAYS, n as readTlsAccessStatus, o as validateUploadedTls, p as LEAF_RENEWAL_WINDOW_DAYS, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, u as CA_COMMON_NAME, v as allFamiliesListenHost, x as closeLanHttp, y as applyLanHttp } from "./tls-2xbgg78V.mjs";
-import { $ as buildUdsNativeCapProxy, $t as ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, A as createUdsLoggerWithControl, An as sampleSocketDirection, At as HUB_MAIN_RSS_BUDGET_MB, B as readMoleculerFanoutMode, Bn as EVENT_PLANE_TOP_N, Bt as createV8Reclaimer, C as ipcParentLink, Cn as createSocketPlaneReader, Ct as createAddonDataPlaneFacility, D as createUdsEventBus, Dn as EMPTY_SOCKET_DIRECTION, Dt as HEAP_WATCH_INTERVAL_MS, E as createUdsEventBridge, En as readSocketQueues, Et as HEAP_RECLAIM_TRIGGER_MB, F as CapRouteError, Fn as EMPTY_CAP_ACTION_READING, Ft as RUNNER_RSS_BUDGET_ENV, G as createLocalTransport, Gt as reclaimIntervalMs, H as PARENT_ROUTED_PROVIDER_ADDON_ID, Hn as createEventPlaneReader, Ht as hubMainRssBudget, I as classifyCapRoute, In as MAX_CAP_ACTIONS_PER_PEER, It as ZERO_LOOP_DELAY, J as SocketChannel, Jt as startRunnerHeapWatch, K as UdsLocalTransportClient, Kt as shouldReclaim, L as LocalChildClient, Ln as capActionLabel, Lt as buildHeapSample, M as AGENT_CAP_FWD_SERVICE, Mn as socketDirectionMessages, Mt as RSS_BUDGET_REANNOUNCE_MIN_MS, N as CapRouteResolver, Nn as CAP_ACTION_OVERFLOW_LABEL, Nt as RSS_BUDGET_RELEASE_RATIO, O as udsChildLogToWorkerEntry, On as createSocketDirectionCounters, Ot as HEAP_WATCH_WARN_RATIO, P as callWithServiceDiscovery, Pn as CAP_ACTION_UNLABELLED, Pt as RUNNER_HEAP_WATCH_INTERVAL_MS, Q as buildNativeCapProxy, Qt as ARRAY_BUFFER_CENSUS_THRESHOLD_MB, R as LocalChildRegistry, Rn as createCapActionCensus, Rt as createDeferredHeapWatchSink, S as buildLinkChain, Sn as createSocketPlaneMeter, St as runNpm, T as createParentUnownedCallHandler, Tn as formatSocketPlane, Tt as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, U as __resetCapUsageRegistryForTests, Un as diffEventPlane, Ut as nextRssBudgetState, V as CapUsageRegistry, Vn as createEventPlaneMeter, Vt as describeRss, W as getCapUsageRegistry, Wn as formatEventPlane, Wt as parseRssBudgetMb, X as FrameDecoder, Xt as ARRAY_BUFFER_CENSUS_COOLDOWN_MS, Y as localEndpointPath, Yt as strandedMb, Z as encodeFrame, Zt as ARRAY_BUFFER_CENSUS_SUSTAIN_MS, _ as AddonDepsManager, _n as createMeshQueueReader, _t as CapabilityUnavailableError, a as createUdsAddonContext, an as HEAP_SPACE_REPORT_MIN_MB, at as createAddonService, b as brokerCallForCap, bn as SOCKET_PLANE_TOP_N, bt as resolveAddonClass, c as getOrInitReadinessRegistryForClient, cn as heapSpaceField, ct as capActionName, d as clusterEventTopic, dn as OUTBOUND_QUEUE_COOLDOWN_MS, dt as capServiceName, en as createArrayBufferCensusGate, et as createBrokerDeviceManagerApi, f as getBrokerEventBus, fn as OUTBOUND_QUEUE_SUSTAIN_MS, ft as parseCapAction, g as subscribePassthrough, gn as MESH_QUEUE_TOP_N, gt as CapabilityHandle, h as setNodeEventInterest, hn as formatOutboundQueueVerdict, ht as DeviceRegistry, i as createAddonContext, in as DECISIVE_HEAP_SPACES, j as AGENT_CAP_FWD_ACTION, jn as socketDirectionBytes, jt as HUB_RSS_BUDGET_ENV, k as createUdsLogger, kn as recordSocketFrame, kt as HUB_MAIN_HEAP_WATCH_LABEL, l as setHubConnected, ln as readHeapSpaces, lt as capActionSuffix, m as registerEventBusService, mn as createOutboundQueueGate, mt as serializeTypedArrays, n as installManifestPythonDeps, nn as formatArrayBufferCensus, o as getWorkerDeviceRegistry, on as emitHeapDiagnosticReport, ot as validateProviderRegistrations, p as getMoleculerEventStats, pn as OUTBOUND_QUEUE_THRESHOLD_BYTES, pt as deserializeTypedArrays, q as UdsLocalTransportServer, qt as startHeapWatch, r as adaptBrokerToCluster, rn as isArrayBufferCensusReport, rt as mountNativeCapService, s as getOrInitReadinessRegistry, sn as formatHeapSpaces, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestSystemDeps, tn as createInspectorArrayBufferCensus, u as EVENT_TOPIC_PREFIX, un as selectReportedSpaces, ut as capBareAction, v as createKernelHwAccel, vn as formatMeshQueue, vt as copyBundledNativeModules, w as localProviderLink, wn as diffSocketPlane, wt as HEAP_RECLAIM_MIN_INTERVAL_MS, x as brokerTransportLink, xn as SOCKET_QUEUE_TOP_N, xt as resolveNpmInvocation, y as resolveHwAccel, yn as EMPTY_SOCKET_PLANE_BASELINE, yt as installManifestNativeDeps, z as UDS_NO_ROUTE_PREFIX, zn as diffCapActionCensus, zt as createLoopDelayMeter } from "./manifest-system-deps-iadzxSBr.mjs";
+import { $ as buildUdsNativeCapProxy, $t as ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, A as createUdsLoggerWithControl, An as sampleSocketDirection, At as HUB_MAIN_RSS_BUDGET_MB, B as readMoleculerFanoutMode, Bn as EVENT_PLANE_TOP_N, Bt as createV8Reclaimer, C as ipcParentLink, Cn as createSocketPlaneReader, Ct as createAddonDataPlaneFacility, D as createUdsEventBus, Dn as EMPTY_SOCKET_DIRECTION, Dt as HEAP_WATCH_INTERVAL_MS, E as createUdsEventBridge, En as readSocketQueues, Et as HEAP_RECLAIM_TRIGGER_MB, F as CapRouteError, Fn as EMPTY_CAP_ACTION_READING, Ft as RUNNER_RSS_BUDGET_ENV, G as createLocalTransport, Gt as reclaimIntervalMs, H as PARENT_ROUTED_PROVIDER_ADDON_ID, Hn as createEventPlaneReader, Ht as hubMainRssBudget, I as classifyCapRoute, In as MAX_CAP_ACTIONS_PER_PEER, It as ZERO_LOOP_DELAY, J as SocketChannel, Jt as startRunnerHeapWatch, K as UdsLocalTransportClient, Kt as shouldReclaim, L as LocalChildClient, Ln as capActionLabel, Lt as buildHeapSample, M as AGENT_CAP_FWD_SERVICE, Mn as socketDirectionMessages, Mt as RSS_BUDGET_REANNOUNCE_MIN_MS, N as CapRouteResolver, Nn as CAP_ACTION_OVERFLOW_LABEL, Nt as RSS_BUDGET_RELEASE_RATIO, O as udsChildLogToWorkerEntry, On as createSocketDirectionCounters, Ot as HEAP_WATCH_WARN_RATIO, P as callWithServiceDiscovery, Pn as CAP_ACTION_UNLABELLED, Pt as RUNNER_HEAP_WATCH_INTERVAL_MS, Q as buildNativeCapProxy, Qt as ARRAY_BUFFER_CENSUS_THRESHOLD_MB, R as LocalChildRegistry, Rn as createCapActionCensus, Rt as createDeferredHeapWatchSink, S as buildLinkChain, Sn as createSocketPlaneMeter, St as runNpm, T as createParentUnownedCallHandler, Tn as formatSocketPlane, Tt as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, U as __resetCapUsageRegistryForTests, Un as diffEventPlane, Ut as nextRssBudgetState, V as CapUsageRegistry, Vn as createEventPlaneMeter, Vt as describeRss, W as getCapUsageRegistry, Wn as formatEventPlane, Wt as parseRssBudgetMb, X as FrameDecoder, Xt as ARRAY_BUFFER_CENSUS_COOLDOWN_MS, Y as localEndpointPath, Yt as strandedMb, Z as encodeFrame, Zt as ARRAY_BUFFER_CENSUS_SUSTAIN_MS, _ as AddonDepsManager, _n as createMeshQueueReader, _t as CapabilityUnavailableError, a as createUdsAddonContext, an as HEAP_SPACE_REPORT_MIN_MB, at as createAddonService, b as brokerCallForCap, bn as SOCKET_PLANE_TOP_N, bt as resolveAddonClass, c as getOrInitReadinessRegistryForClient, cn as heapSpaceField, ct as capActionName, d as clusterEventTopic, dn as OUTBOUND_QUEUE_COOLDOWN_MS, dt as capServiceName, en as createArrayBufferCensusGate, et as createBrokerDeviceManagerApi, f as getBrokerEventBus, fn as OUTBOUND_QUEUE_SUSTAIN_MS, ft as parseCapAction, g as subscribePassthrough, gn as MESH_QUEUE_TOP_N, gt as CapabilityHandle, h as setNodeEventInterest, hn as formatOutboundQueueVerdict, ht as DeviceRegistry, i as createAddonContext, in as DECISIVE_HEAP_SPACES, j as AGENT_CAP_FWD_ACTION, jn as socketDirectionBytes, jt as HUB_RSS_BUDGET_ENV, k as createUdsLogger, kn as recordSocketFrame, kt as HUB_MAIN_HEAP_WATCH_LABEL, l as setHubConnected, ln as readHeapSpaces, lt as capActionSuffix, m as registerEventBusService, mn as createOutboundQueueGate, mt as serializeTypedArrays, n as installManifestPythonDeps, nn as formatArrayBufferCensus, o as getWorkerDeviceRegistry, on as emitHeapDiagnosticReport, ot as validateProviderRegistrations, p as getMoleculerEventStats, pn as OUTBOUND_QUEUE_THRESHOLD_BYTES, pt as deserializeTypedArrays, q as UdsLocalTransportServer, qt as startHeapWatch, r as adaptBrokerToCluster, rn as isArrayBufferCensusReport, rt as mountNativeCapService, s as getOrInitReadinessRegistry, sn as formatHeapSpaces, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestSystemDeps, tn as createInspectorArrayBufferCensus, u as EVENT_TOPIC_PREFIX, un as selectReportedSpaces, ut as capBareAction, v as createKernelHwAccel, vn as formatMeshQueue, vt as copyBundledNativeModules, w as localProviderLink, wn as diffSocketPlane, wt as HEAP_RECLAIM_MIN_INTERVAL_MS, x as brokerTransportLink, xn as SOCKET_QUEUE_TOP_N, xt as resolveNpmInvocation, y as resolveHwAccel, yn as EMPTY_SOCKET_PLANE_BASELINE, yt as installManifestNativeDeps, z as UDS_NO_ROUTE_PREFIX, zn as diffCapActionCensus, zt as createLoopDelayMeter } from "./manifest-system-deps-D4cmEnqQ.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-Vp0bPV3U.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-DvtOs-tp.mjs";
 import { z } from "zod";
@@ -78954,8 +78954,9 @@ var require_parser = /* @__PURE__ */ __commonJSMin$1(((exports, module) => {
 				const type = resolvePacketType(packet[5]);
 				this.emit("data", type, msg);
 				const rest = packet.slice(length);
-				this.bufs = rest.length > 0 ? [rest] : [];
-				this.bufLen = rest.length;
+				const carried = rest.length > 0 && rest.length * 8 < rest.buffer.byteLength ? Buffer.from(rest) : rest;
+				this.bufs = carried.length > 0 ? [carried] : [];
+				this.bufLen = carried.length;
 			}
 			cb();
 		}

package/dist/kernel/event-plane-report.d.ts

@@ -63,6 +63,25 @@
  * — the same discipline the loop-delay histogram already follows, for the same
  * reason.
  *
+ * ## The unit trap (D467)
+ *
+ * `fanoutSent` / `fanoutSuppressed` are **(event × child) pairs**, not events:
+ * `broadcastEventToChildren` increments them inside the per-child loop, so on a
+ * 39-child node ONE emit produces up to 38 increments. A 2026-09-12 reading of
+ * `fanoutSuppressed=433461` was read as "433k events a minute, 97% discarded";
+ * the real production was **~11 700 events/min**. The line proves it itself —
+ * every pure-consumer child's `sent + suppressed` converges on 11 730, because
+ * that sum IS the distinct broadcast count, and the two rows that fall short
+ * (`pipeline-orchestrator`, `pipeline-analytics`) fall short by exactly what
+ * they originated. `fanoutEvents` is the production rate, counted once per emit
+ * outside that loop, and it is printed so the pair counters can never be read as
+ * one again.
+ *
+ * `fanoutCats` names PRODUCERS (`fanoutTop` names subscribers) and
+ * `fanoutOrphans` counts what was serialised and walked across every child with
+ * zero subscribers. A suppressed pair was measured at **255 ns** — 1.84 ms/s of
+ * event loop at this rate — so the filter is not the cost; the emit is.
+ *
  * ## What this is NOT evidence of
  *
  * `shadow` is the CROSS-NODE plane. The local UDS plane defaults to `filter` and
@@ -93,11 +112,24 @@ export interface ChildFanoutRegistryStats {
     readonly sent: number;
     readonly suppressed: number;
 }
+/**
+ * D467 — one PRODUCED category, cumulative, as the registry keeps it.
+ *
+ * `broadcasts` is EMITS, not deliveries; `wanted` is the number of child
+ * subscriptions that matched, summed over those emits.
+ */
+export interface CategoryFanoutSample {
+    readonly category: string;
+    readonly broadcasts: number;
+    readonly wanted: number;
+}
 export interface ChildFanoutRegistry {
     readonly listChildren: () => readonly ChildFanoutRegistryChild[];
     readonly getChildEventStats: (childId: string) => ChildFanoutRegistryStats | null;
     readonly undeclaredChildCount: () => number;
     readonly eventFanoutMode: EventFanoutMode;
+    readonly categoryFanout: () => readonly CategoryFanoutSample[];
+    readonly categoryCensusOverflow: () => number;
 }
 /** What `getMoleculerEventStats` returns, structurally. */
 export interface CrossNodeEventStats {
@@ -113,6 +145,8 @@ export interface EventPlaneCounters {
     readonly childrenUndeclared: number;
     readonly crossNodeDelivered: number;
     readonly crossNodeSuppressed: number;
+    readonly categories: readonly CategoryFanoutSample[];
+    readonly categoryOverflow: number;
 }
 /** `undefined` = this process has no event plane to report (every forked
  *  runner, and hub-main before the registry exists). */
@@ -159,12 +193,30 @@ export interface EventPlaneWindow {
     readonly crossNodeSuppressed: number;
     /** Largest `sent` first, at most {@link EVENT_PLANE_TOP_N} entries. */
     readonly top: readonly ChildFanoutDelta[];
+    /** Events PRODUCED in the window — emits, summed over categories. */
+    readonly categoryBroadcasts: number;
+    /** Produced events no child subscribed to. Pure waste. */
+    readonly orphanBroadcasts: number;
+    /** Largest `broadcasts` first, at most {@link EVENT_PLANE_TOP_N} entries. */
+    readonly topCategories: readonly CategoryFanoutDelta[];
+    /** The orphans alone, largest first, at most {@link EVENT_PLANE_TOP_N}. */
+    readonly topOrphans: readonly CategoryFanoutDelta[];
+    /** Broadcasts the census could not attribute because it was full. */
+    readonly categoryOverflow: number;
+}
+/** One category's production over the window since the previous read. */
+export interface CategoryFanoutDelta {
+    readonly category: string;
+    readonly broadcasts: number;
+    readonly wanted: number;
 }
 /** Previous cumulative reading, kept between lines. */
 export interface EventPlaneBaseline {
     readonly children: ReadonlyMap<string, ChildFanoutSample>;
+    readonly categories: ReadonlyMap<string, CategoryFanoutSample>;
     readonly crossNodeDelivered: number;
     readonly crossNodeSuppressed: number;
+    readonly categoryOverflow: number;
 }
 /** A process that has never read a plane. */
 export declare const EMPTY_EVENT_PLANE_BASELINE: EventPlaneBaseline;

package/dist/kernel/transport/local-child-registry.d.ts

@@ -44,6 +44,36 @@ export interface ChildEventStats {
     sent: number;
     suppressed: number;
 }
+/**
+ * D467 — one PRODUCED category over the life of the process.
+ *
+ * `broadcasts` counts emits, not deliveries: one call to
+ * {@link LocalChildRegistry.broadcastEventToChildren} is one broadcast no
+ * matter how many children are connected. This is the number the per-child
+ * `sent`/`suppressed` counters cannot give — those are (event × child) pairs,
+ * so on a 39-child node they read ~38x the production rate and a reader who
+ * sums them concludes the cluster emits an order of magnitude more than it does.
+ *
+ * `wanted` is the number of (event × child) pairs whose SUBSCRIPTION matched —
+ * the gate answer, not the delivery answer, so `broadcast`/`shadow` mode (which
+ * deliver regardless) still report the truth. `wanted === 0` over a window means
+ * the category was serialised and walked across every child and **nobody asked
+ * for it**: pure waste, and the one finding worth acting on.
+ */
+export interface CategoryFanoutSample {
+    readonly category: string;
+    readonly broadcasts: number;
+    readonly wanted: number;
+}
+/**
+ * Cap on the census map. `EventCategory` is a closed enum of ~120 members, so
+ * 256 holds every legitimate category twice over; the cap exists because a
+ * hand-rolled topic (forbidden, but this is the meter that would SEE one) could
+ * otherwise grow the map without bound in a long-lived process. Overflow is not
+ * silent — {@link LocalChildRegistry.categoryCensusOverflow} counts it and the
+ * heartbeat prints it.
+ */
+export declare const CATEGORY_CENSUS_MAX = 256;
 /**
  * Sentinel prefix used in the no-route error thrown when `cap-call-out` has no
  * local sibling and no `onUnownedCall` fallback. `ipcParentLink` detects this
@@ -252,6 +282,12 @@ export declare class LocalChildRegistry {
     private readonly fanoutMode;
     /** Per-child event fan-out counters (sent / suppressed). */
     private readonly childEventStats;
+    /** D467: per-category production census (cumulative). See {@link CategoryFanoutSample}. */
+    private readonly categoryStats;
+    /** Broadcasts whose category did not fit in {@link CATEGORY_CENSUS_MAX}. */
+    private categoryOverflow;
+    /** One INFO line the first time the census cap trips, never per event. */
+    private categoryOverflowLogged;
     /** Last pattern-set string logged per child, to dedup the INFO line. */
     private readonly loggedPatternSet;
     /**
@@ -279,6 +315,15 @@ export declare class LocalChildRegistry {
      * surface (shadow burn-in + operator debug).
      */
     getChildEventStats(childId: string): ChildEventStats | null;
+    /**
+     * D467: every category this node has broadcast, with its emit count and how
+     * many child subscriptions matched. Cumulative for the life of the process —
+     * the heartbeat differences it, the same discipline as the per-child
+     * counters. Largest `broadcasts` first.
+     */
+    categoryFanout(): readonly CategoryFanoutSample[];
+    /** Broadcasts the census could not attribute because it was full (cumulative). */
+    categoryCensusOverflow(): number;
     /**
      * This child's socket traffic — bytes and messages, both directions, split by
      * frame kind — or `null` when the child is gone or its channel keeps no
@@ -348,6 +393,15 @@ export declare class LocalChildRegistry {
      * that explicitly subscribes to a ring-denied category must still RECEIVE it.
      */
     private childWantsEvent;
+    /**
+     * The SUBSCRIPTION answer alone, with no fan-out-mode override.
+     *
+     * {@link childWantsEvent} answers "will this child be sent the event", which
+     * under `broadcast` is `true` for everything and therefore cannot say whether
+     * anyone actually asked. The D467 census needs the second question, so the
+     * two are separate functions and `broadcast` mode overrides only the first.
+     */
+    private childSubscribesTo;
     /**
      * D2: this node's aggregate cross-node event interest — the UNION of every
      * connected child's declared category patterns. Consumed by the parent's
@@ -513,6 +567,11 @@ export declare class LocalChildRegistry {
      * one (the originating child, to avoid echo). Fire-and-forget.
      */
     broadcastEventToChildren(event: SystemEvent, sourceNodeId: string, exceptChildId?: string): void;
+    /**
+     * Record one PRODUCED event against its category. Called once per broadcast,
+     * outside the per-child loop, because production is what the census measures.
+     */
+    private recordCategoryBroadcast;
     /**
      * E2: Send a `set-log-level` control message to a specific child.
      * Returns `true` if the child is currently connected and the message was

package/dist/{manifest-system-deps-iadzxSBr.mjs → manifest-system-deps-D4cmEnqQ.mjs}

@@ -56,7 +56,9 @@ function createEventPlaneReader(sources) {
 				childrenConnected: listed.length,
 				childrenUndeclared: registry.undeclaredChildCount(),
 				crossNodeDelivered: crossNode?.delivered ?? 0,
-				crossNodeSuppressed: crossNode?.suppressed ?? 0
+				crossNodeSuppressed: crossNode?.suppressed ?? 0,
+				categories: registry.categoryFanout(),
+				categoryOverflow: registry.categoryCensusOverflow()
 			};
 		} catch {
 			return;
@@ -76,8 +78,10 @@ var EVENT_PLANE_TOP_N = 5;
 /** A process that has never read a plane. */
 var EMPTY_EVENT_PLANE_BASELINE = {
 	children: /* @__PURE__ */ new Map(),
+	categories: /* @__PURE__ */ new Map(),
 	crossNodeDelivered: 0,
-	crossNodeSuppressed: 0
+	crossNodeSuppressed: 0,
+	categoryOverflow: 0
 };
 /**
 * Subtract the previous cumulative reading from the current one.
@@ -104,6 +108,23 @@ function diffEventPlane(baseline, current, topN = 5) {
 			suppressed
 		});
 	}
+	const categoryDeltas = [];
+	let categoryBroadcasts = 0;
+	let orphanBroadcasts = 0;
+	for (const sample of current.categories) {
+		const before = baseline.categories.get(sample.category);
+		const broadcasts = Math.max(0, sample.broadcasts - (before?.broadcasts ?? 0));
+		if (broadcasts === 0) continue;
+		const wanted = Math.max(0, sample.wanted - (before?.wanted ?? 0));
+		categoryBroadcasts += broadcasts;
+		if (wanted === 0) orphanBroadcasts += broadcasts;
+		categoryDeltas.push({
+			category: sample.category,
+			broadcasts,
+			wanted
+		});
+	}
+	const byBroadcasts = categoryDeltas.toSorted((a, b) => b.broadcasts - a.broadcasts || a.category.localeCompare(b.category));
 	return {
 		udsMode: current.udsMode,
 		crossNodeMode: current.crossNodeMode,
@@ -113,7 +134,12 @@ function diffEventPlane(baseline, current, topN = 5) {
 		fanoutSuppressed,
 		crossNodeDelivered: Math.max(0, current.crossNodeDelivered - baseline.crossNodeDelivered),
 		crossNodeSuppressed: Math.max(0, current.crossNodeSuppressed - baseline.crossNodeSuppressed),
-		top: deltas.toSorted((a, b) => b.sent - a.sent || a.childId.localeCompare(b.childId)).slice(0, topN)
+		top: deltas.toSorted((a, b) => b.sent - a.sent || a.childId.localeCompare(b.childId)).slice(0, topN),
+		categoryBroadcasts,
+		orphanBroadcasts,
+		topCategories: byBroadcasts.slice(0, topN),
+		topOrphans: byBroadcasts.filter((c) => c.wanted === 0).slice(0, topN),
+		categoryOverflow: Math.max(0, current.categoryOverflow - baseline.categoryOverflow)
 	};
 }
 function createEventPlaneMeter(reader, topN = 5) {
@@ -124,8 +150,10 @@ function createEventPlaneMeter(reader, topN = 5) {
 		const window = diffEventPlane(baseline, current, topN);
 		baseline = {
 			children: new Map(current.children.map((s) => [s.childId, s])),
+			categories: new Map(current.categories.map((c) => [c.category, c])),
 			crossNodeDelivered: current.crossNodeDelivered,
-			crossNodeSuppressed: current.crossNodeSuppressed
+			crossNodeSuppressed: current.crossNodeSuppressed,
+			categoryOverflow: current.categoryOverflow
 		};
 		return window;
 	} };
@@ -149,7 +177,9 @@ function createEventPlaneMeter(reader, topN = 5) {
 function formatEventPlane(window) {
 	if (window === void 0) return "";
 	const top = window.top.map((d) => `${d.childId}:${d.sent}/${d.suppressed}`).join(",");
-	return ` fanoutMode=uds:${window.udsMode}/cross-node:${window.crossNodeMode} children=${window.childrenConnected} childrenUndeclared=${window.childrenUndeclared} fanoutSent=${window.fanoutSent} fanoutSuppressed=${window.fanoutSuppressed} crossNodeDelivered=${window.crossNodeDelivered} crossNodeSuppressed=${window.crossNodeSuppressed}` + (top.length === 0 ? "" : ` fanoutTop=${top}`);
+	const cats = window.topCategories.map((c) => `${c.category}:${c.broadcasts}/${c.wanted}`).join(",");
+	const orphans = window.topOrphans.map((c) => `${c.category}:${c.broadcasts}`).join(",");
+	return ` fanoutMode=uds:${window.udsMode}/cross-node:${window.crossNodeMode} children=${window.childrenConnected} childrenUndeclared=${window.childrenUndeclared} fanoutSent=${window.fanoutSent} fanoutSuppressed=${window.fanoutSuppressed} crossNodeDelivered=${window.crossNodeDelivered} crossNodeSuppressed=${window.crossNodeSuppressed} fanoutEvents=${window.categoryBroadcasts} fanoutOrphans=${window.orphanBroadcasts} fanoutCatsDropped=${window.categoryOverflow}` + (top.length === 0 ? "" : ` fanoutTop=${top}`) + (cats.length === 0 ? "" : ` fanoutCats=${cats}`) + (orphans.length === 0 ? "" : ` fanoutOrphanTop=${orphans}`);
 }
 //#endregion
 //#region src/kernel/transport/cap-action-census.ts
@@ -7107,6 +7137,12 @@ var LocalChildRegistry = class {
 	fanoutMode = readFanoutMode();
 	/** Per-child event fan-out counters (sent / suppressed). */
 	childEventStats = /* @__PURE__ */ new Map();
+	/** D467: per-category production census (cumulative). See {@link CategoryFanoutSample}. */
+	categoryStats = /* @__PURE__ */ new Map();
+	/** Broadcasts whose category did not fit in {@link CATEGORY_CENSUS_MAX}. */
+	categoryOverflow = 0;
+	/** One INFO line the first time the census cap trips, never per event. */
+	categoryOverflowLogged = false;
 	/** Last pattern-set string logged per child, to dedup the INFO line. */
 	loggedPatternSet = /* @__PURE__ */ new Map();
 	/**
@@ -7162,6 +7198,25 @@ var LocalChildRegistry = class {
 		};
 	}
 	/**
+	* D467: every category this node has broadcast, with its emit count and how
+	* many child subscriptions matched. Cumulative for the life of the process —
+	* the heartbeat differences it, the same discipline as the per-child
+	* counters. Largest `broadcasts` first.
+	*/
+	categoryFanout() {
+		const out = [];
+		for (const [category, s] of this.categoryStats) out.push({
+			category,
+			broadcasts: s.broadcasts,
+			wanted: s.wanted
+		});
+		return out.toSorted((a, b) => b.broadcasts - a.broadcasts || a.category.localeCompare(b.category));
+	}
+	/** Broadcasts the census could not attribute because it was full (cumulative). */
+	categoryCensusOverflow() {
+		return this.categoryOverflow;
+	}
+	/**
 	* This child's socket traffic — bytes and messages, both directions, split by
 	* frame kind — or `null` when the child is gone or its channel keeps no
 	* counters (an in-process or test transport).
@@ -7252,6 +7307,17 @@ var LocalChildRegistry = class {
 	*/
 	childWantsEvent(entry, category) {
 		if (this.fanoutMode === "broadcast") return true;
+		return this.childSubscribesTo(entry, category);
+	}
+	/**
+	* The SUBSCRIPTION answer alone, with no fan-out-mode override.
+	*
+	* {@link childWantsEvent} answers "will this child be sent the event", which
+	* under `broadcast` is `true` for everything and therefore cannot say whether
+	* anyone actually asked. The D467 census needs the second question, so the
+	* two are separate functions and `broadcast` mode overrides only the first.
+	*/
+	childSubscribesTo(entry, category) {
 		if (entry.eventPatterns === null) return true;
 		return entry.eventPatterns.some((p) => matchesPattern(p, category));
 	}
@@ -7553,8 +7619,10 @@ var LocalChildRegistry = class {
 			event,
 			sourceNodeId
 		};
+		let subscribed = 0;
 		for (const entry of this.children.values()) {
 			if (entry.childId === exceptChildId) continue;
+			if (this.childSubscribesTo(entry, event.category)) subscribed += 1;
 			const wants = this.childWantsEvent(entry, event.category);
 			const stats = this.statsFor(entry.childId);
 			if (!wants) stats.suppressed++;
@@ -7563,6 +7631,34 @@ var LocalChildRegistry = class {
 				entry.channel.emit(msg);
 			}
 		}
+		this.recordCategoryBroadcast(event.category, subscribed);
+	}
+	/**
+	* Record one PRODUCED event against its category. Called once per broadcast,
+	* outside the per-child loop, because production is what the census measures.
+	*/
+	recordCategoryBroadcast(category, subscribed) {
+		const existing = this.categoryStats.get(category);
+		if (existing !== void 0) {
+			existing.broadcasts += 1;
+			existing.wanted += subscribed;
+			return;
+		}
+		if (this.categoryStats.size >= 256) {
+			this.categoryOverflow += 1;
+			if (!this.categoryOverflowLogged) {
+				this.categoryOverflowLogged = true;
+				this.logger?.info("event category census full — further new categories are unattributed", {
+					max: 256,
+					firstDropped: category
+				});
+			}
+			return;
+		}
+		this.categoryStats.set(category, {
+			broadcasts: 1,
+			wanted: subscribed
+		});
 	}
 	/**
 	* E2: Send a `set-log-level` control message to a specific child.

package/dist/{manifest-system-deps-DfpwaXkh.js → manifest-system-deps-YYKKCKSF.js}

@@ -59,7 +59,9 @@ function createEventPlaneReader(sources) {
 				childrenConnected: listed.length,
 				childrenUndeclared: registry.undeclaredChildCount(),
 				crossNodeDelivered: crossNode?.delivered ?? 0,
-				crossNodeSuppressed: crossNode?.suppressed ?? 0
+				crossNodeSuppressed: crossNode?.suppressed ?? 0,
+				categories: registry.categoryFanout(),
+				categoryOverflow: registry.categoryCensusOverflow()
 			};
 		} catch {
 			return;
@@ -79,8 +81,10 @@ var EVENT_PLANE_TOP_N = 5;
 /** A process that has never read a plane. */
 var EMPTY_EVENT_PLANE_BASELINE = {
 	children: /* @__PURE__ */ new Map(),
+	categories: /* @__PURE__ */ new Map(),
 	crossNodeDelivered: 0,
-	crossNodeSuppressed: 0
+	crossNodeSuppressed: 0,
+	categoryOverflow: 0
 };
 /**
 * Subtract the previous cumulative reading from the current one.
@@ -107,6 +111,23 @@ function diffEventPlane(baseline, current, topN = 5) {
 			suppressed
 		});
 	}
+	const categoryDeltas = [];
+	let categoryBroadcasts = 0;
+	let orphanBroadcasts = 0;
+	for (const sample of current.categories) {
+		const before = baseline.categories.get(sample.category);
+		const broadcasts = Math.max(0, sample.broadcasts - (before?.broadcasts ?? 0));
+		if (broadcasts === 0) continue;
+		const wanted = Math.max(0, sample.wanted - (before?.wanted ?? 0));
+		categoryBroadcasts += broadcasts;
+		if (wanted === 0) orphanBroadcasts += broadcasts;
+		categoryDeltas.push({
+			category: sample.category,
+			broadcasts,
+			wanted
+		});
+	}
+	const byBroadcasts = categoryDeltas.toSorted((a, b) => b.broadcasts - a.broadcasts || a.category.localeCompare(b.category));
 	return {
 		udsMode: current.udsMode,
 		crossNodeMode: current.crossNodeMode,
@@ -116,7 +137,12 @@ function diffEventPlane(baseline, current, topN = 5) {
 		fanoutSuppressed,
 		crossNodeDelivered: Math.max(0, current.crossNodeDelivered - baseline.crossNodeDelivered),
 		crossNodeSuppressed: Math.max(0, current.crossNodeSuppressed - baseline.crossNodeSuppressed),
-		top: deltas.toSorted((a, b) => b.sent - a.sent || a.childId.localeCompare(b.childId)).slice(0, topN)
+		top: deltas.toSorted((a, b) => b.sent - a.sent || a.childId.localeCompare(b.childId)).slice(0, topN),
+		categoryBroadcasts,
+		orphanBroadcasts,
+		topCategories: byBroadcasts.slice(0, topN),
+		topOrphans: byBroadcasts.filter((c) => c.wanted === 0).slice(0, topN),
+		categoryOverflow: Math.max(0, current.categoryOverflow - baseline.categoryOverflow)
 	};
 }
 function createEventPlaneMeter(reader, topN = 5) {
@@ -127,8 +153,10 @@ function createEventPlaneMeter(reader, topN = 5) {
 		const window = diffEventPlane(baseline, current, topN);
 		baseline = {
 			children: new Map(current.children.map((s) => [s.childId, s])),
+			categories: new Map(current.categories.map((c) => [c.category, c])),
 			crossNodeDelivered: current.crossNodeDelivered,
-			crossNodeSuppressed: current.crossNodeSuppressed
+			crossNodeSuppressed: current.crossNodeSuppressed,
+			categoryOverflow: current.categoryOverflow
 		};
 		return window;
 	} };
@@ -152,7 +180,9 @@ function createEventPlaneMeter(reader, topN = 5) {
 function formatEventPlane(window) {
 	if (window === void 0) return "";
 	const top = window.top.map((d) => `${d.childId}:${d.sent}/${d.suppressed}`).join(",");
-	return ` fanoutMode=uds:${window.udsMode}/cross-node:${window.crossNodeMode} children=${window.childrenConnected} childrenUndeclared=${window.childrenUndeclared} fanoutSent=${window.fanoutSent} fanoutSuppressed=${window.fanoutSuppressed} crossNodeDelivered=${window.crossNodeDelivered} crossNodeSuppressed=${window.crossNodeSuppressed}` + (top.length === 0 ? "" : ` fanoutTop=${top}`);
+	const cats = window.topCategories.map((c) => `${c.category}:${c.broadcasts}/${c.wanted}`).join(",");
+	const orphans = window.topOrphans.map((c) => `${c.category}:${c.broadcasts}`).join(",");
+	return ` fanoutMode=uds:${window.udsMode}/cross-node:${window.crossNodeMode} children=${window.childrenConnected} childrenUndeclared=${window.childrenUndeclared} fanoutSent=${window.fanoutSent} fanoutSuppressed=${window.fanoutSuppressed} crossNodeDelivered=${window.crossNodeDelivered} crossNodeSuppressed=${window.crossNodeSuppressed} fanoutEvents=${window.categoryBroadcasts} fanoutOrphans=${window.orphanBroadcasts} fanoutCatsDropped=${window.categoryOverflow}` + (top.length === 0 ? "" : ` fanoutTop=${top}`) + (cats.length === 0 ? "" : ` fanoutCats=${cats}`) + (orphans.length === 0 ? "" : ` fanoutOrphanTop=${orphans}`);
 }
 //#endregion
 //#region src/kernel/transport/cap-action-census.ts
@@ -7110,6 +7140,12 @@ var LocalChildRegistry = class {
 	fanoutMode = readFanoutMode();
 	/** Per-child event fan-out counters (sent / suppressed). */
 	childEventStats = /* @__PURE__ */ new Map();
+	/** D467: per-category production census (cumulative). See {@link CategoryFanoutSample}. */
+	categoryStats = /* @__PURE__ */ new Map();
+	/** Broadcasts whose category did not fit in {@link CATEGORY_CENSUS_MAX}. */
+	categoryOverflow = 0;
+	/** One INFO line the first time the census cap trips, never per event. */
+	categoryOverflowLogged = false;
 	/** Last pattern-set string logged per child, to dedup the INFO line. */
 	loggedPatternSet = /* @__PURE__ */ new Map();
 	/**
@@ -7165,6 +7201,25 @@ var LocalChildRegistry = class {
 		};
 	}
 	/**
+	* D467: every category this node has broadcast, with its emit count and how
+	* many child subscriptions matched. Cumulative for the life of the process —
+	* the heartbeat differences it, the same discipline as the per-child
+	* counters. Largest `broadcasts` first.
+	*/
+	categoryFanout() {
+		const out = [];
+		for (const [category, s] of this.categoryStats) out.push({
+			category,
+			broadcasts: s.broadcasts,
+			wanted: s.wanted
+		});
+		return out.toSorted((a, b) => b.broadcasts - a.broadcasts || a.category.localeCompare(b.category));
+	}
+	/** Broadcasts the census could not attribute because it was full (cumulative). */
+	categoryCensusOverflow() {
+		return this.categoryOverflow;
+	}
+	/**
 	* This child's socket traffic — bytes and messages, both directions, split by
 	* frame kind — or `null` when the child is gone or its channel keeps no
 	* counters (an in-process or test transport).
@@ -7255,6 +7310,17 @@ var LocalChildRegistry = class {
 	*/
 	childWantsEvent(entry, category) {
 		if (this.fanoutMode === "broadcast") return true;
+		return this.childSubscribesTo(entry, category);
+	}
+	/**
+	* The SUBSCRIPTION answer alone, with no fan-out-mode override.
+	*
+	* {@link childWantsEvent} answers "will this child be sent the event", which
+	* under `broadcast` is `true` for everything and therefore cannot say whether
+	* anyone actually asked. The D467 census needs the second question, so the
+	* two are separate functions and `broadcast` mode overrides only the first.
+	*/
+	childSubscribesTo(entry, category) {
 		if (entry.eventPatterns === null) return true;
 		return entry.eventPatterns.some((p) => matchesPattern(p, category));
 	}
@@ -7556,8 +7622,10 @@ var LocalChildRegistry = class {
 			event,
 			sourceNodeId
 		};
+		let subscribed = 0;
 		for (const entry of this.children.values()) {
 			if (entry.childId === exceptChildId) continue;
+			if (this.childSubscribesTo(entry, event.category)) subscribed += 1;
 			const wants = this.childWantsEvent(entry, event.category);
 			const stats = this.statsFor(entry.childId);
 			if (!wants) stats.suppressed++;
@@ -7566,6 +7634,34 @@ var LocalChildRegistry = class {
 				entry.channel.emit(msg);
 			}
 		}
+		this.recordCategoryBroadcast(event.category, subscribed);
+	}
+	/**
+	* Record one PRODUCED event against its category. Called once per broadcast,
+	* outside the per-child loop, because production is what the census measures.
+	*/
+	recordCategoryBroadcast(category, subscribed) {
+		const existing = this.categoryStats.get(category);
+		if (existing !== void 0) {
+			existing.broadcasts += 1;
+			existing.wanted += subscribed;
+			return;
+		}
+		if (this.categoryStats.size >= 256) {
+			this.categoryOverflow += 1;
+			if (!this.categoryOverflowLogged) {
+				this.categoryOverflowLogged = true;
+				this.logger?.info("event category census full — further new categories are unattributed", {
+					max: 256,
+					firstDropped: category
+				});
+			}
+			return;
+		}
+		this.categoryStats.set(category, {
+			broadcasts: 1,
+			wanted: subscribed
+		});
 	}
 	/**
 	* E2: Send a `set-log-level` control message to a specific child.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.221",
+  "version": "1.2.223",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",