@camstack/system 1.2.445 → 1.2.447

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,10 +1,10 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { Bi as makeSecretMarker, Di as defineRecordKinds, E as DEVICE_NONCE_TTL_MS, Li as isSecretMarker, Rr as BaseAddon, T as DEVICE_ENROLLMENT_TTL_MS, Vt as deviceCredentialsCapability, a as ApiKeyRecordSchema, ct as UserRecordSchema, et as ScopedTokenSchema, hr as userManagementCapability, nn as formatDeviceRevoker, nt as SsoBridgeClaimsSchema, pt as authProviderCapability, sa as userError, st as TokenScopeSchema, vt as buildDeviceEnrollmentLink, yt as buildDeviceSignatureMessage } from "../../dist-BNunRyXT.mjs";
+import { Bi as makeSecretMarker, Di as defineRecordKinds, E as DEVICE_NONCE_TTL_MS, Li as isSecretMarker, Rr as BaseAddon, T as DEVICE_ENROLLMENT_TTL_MS, Vt as deviceCredentialsCapability, a as ApiKeyRecordSchema, ct as UserRecordSchema, et as ScopedTokenSchema, hr as userManagementCapability, nn as formatDeviceRevoker, nt as SsoBridgeClaimsSchema, pt as authProviderCapability, sa as userError, st as TokenScopeSchema, vt as buildDeviceEnrollmentLink, yt as buildDeviceSignatureMessage } from "../../dist-CkZIrsAP.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
 import { t as require_ms } from "../../ms-CgH2OFlD.mjs";
-import { _ as setProcessJwtSigningKey, a as importDevicePublicKey, c as rebuildDeviceCaCertificate, d as JWT_SIGNING_KEY_REF, g as processJwtSigningKey, h as loadJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, r as DEVICE_CA_SETTINGS_SECTION, s as loadDeviceCa, t as DEVICE_CA_FIELD, u as verifyDeviceSignature } from "../../device-ca-T8osSMos.mjs";
-import { t as resolvePhase6UseRecordsPathForHub } from "../../phase6-declare-gate-tkKOEitw.mjs";
+import { _ as setProcessJwtSigningKey, a as importDevicePublicKey, c as rebuildDeviceCaCertificate, d as JWT_SIGNING_KEY_REF, g as processJwtSigningKey, h as loadJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, r as DEVICE_CA_SETTINGS_SECTION, s as loadDeviceCa, t as DEVICE_CA_FIELD, u as verifyDeviceSignature } from "../../device-ca-Bh_ClxMO.mjs";
+import { t as resolvePhase6UseRecordsPathForHub } from "../../phase6-declare-gate-BDWZuB2n.mjs";
 import { z } from "zod";
 import * as crypto$1 from "node:crypto";
 import { X509Certificate, createHash, randomUUID, timingSafeEqual } from "node:crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DgOG8flk.js");
-const require_hub_mdns_ciao = require("../../hub-mdns-ciao-BIkTHq-n.js");
+const require_dist = require("../../dist-BkNfEJKa.js");
+const require_hub_mdns_ciao = require("../../hub-mdns-ciao-m5LIr4oA.js");
 let zod = require("zod");
 let node_net = require("node:net");
 let node_os = require("node:os");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,5 +1,5 @@
-import { Fn as pickAppLinkHub, Jn as resolveHubAddressRoles, L as HUB_MDNS_SERVICE_TYPE, R as HUB_MDNS_TXT_KEYS, Rr as BaseAddon, Wn as resolveAppConnections, Zn as resolveNotificationTapAddress, _r as validateCustomAddress, l as CAMSTACK_APP_LINK_ORIGIN, la as EventCategory, ln as isDefaultAppConnectionEndpoint, on as isAppLinkBase, q as NetworkTunnelStartedDataSchema, wt as checkRoleAddress, yn as localNetworkCapability } from "../../dist-BNunRyXT.mjs";
-import { P as readLanHttpState, a as storeUploadedCertificate, d as servedHttpsLeafFingerprint, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, r as regenerateCertificate, t as createCiaoPublisher, v as writeExtraSans, w as ensureTlsCert } from "../../hub-mdns-ciao-D16oRQ9K.mjs";
+import { Fn as pickAppLinkHub, Jn as resolveHubAddressRoles, L as HUB_MDNS_SERVICE_TYPE, R as HUB_MDNS_TXT_KEYS, Rr as BaseAddon, Wn as resolveAppConnections, Zn as resolveNotificationTapAddress, _r as validateCustomAddress, l as CAMSTACK_APP_LINK_ORIGIN, la as EventCategory, ln as isDefaultAppConnectionEndpoint, on as isAppLinkBase, q as NetworkTunnelStartedDataSchema, wt as checkRoleAddress, yn as localNetworkCapability } from "../../dist-CkZIrsAP.mjs";
+import { P as readLanHttpState, a as storeUploadedCertificate, d as servedHttpsLeafFingerprint, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, r as regenerateCertificate, t as createCiaoPublisher, v as writeExtraSans, w as ensureTlsCert } from "../../hub-mdns-ciao-CoyIUWHC.mjs";
 import { z } from "zod";
 import { isIP } from "node:net";
 import * as os$1 from "node:os";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DgOG8flk.js");
+const require_dist = require("../../dist-BkNfEJKa.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Rr as BaseAddon, xn as logDestinationCapability } from "../../dist-BNunRyXT.mjs";
+import { Rr as BaseAddon, xn as logDestinationCapability } from "../../dist-CkZIrsAP.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/container-memory-ring.d.ts

@@ -0,0 +1,18 @@
+/**
+* Hot-tier container memory readings — adapter over {@link NodeLoadRing}.
+*/
+import type { ContainerMemoryPoint, ContainerMemorySnapshot } from "@camstack/types";
+export declare const CONTAINER_MEMORY_SAMPLES_PER_NODE = 180;
+export declare const CONTAINER_MEMORY_MAX_TOTAL_ROWS: number;
+export interface ContainerMemoryRingOptions {
+	readonly samplesPerNode?: number;
+	readonly now?: () => number;
+}
+export declare class ContainerMemoryRing {
+	private readonly ring;
+	constructor(options?: ContainerMemoryRingOptions);
+	record(nodeId: string, atMs: number, snapshot: ContainerMemorySnapshot): boolean;
+	read(nodeId: string, sinceMs?: number): readonly ContainerMemoryPoint[];
+}
+export declare function reduceContainerMemory(points: readonly ContainerMemoryPoint[], bucketMs: number, origin: number): readonly ContainerMemoryPoint[];
+export declare function mergeContainerMemory(cold: readonly ContainerMemoryPoint[], hot: readonly ContainerMemoryPoint[]): readonly ContainerMemoryPoint[];

package/dist/builtins/native-metrics/load-series-config.d.ts

@@ -1,3 +1,40 @@
+/**
+* The two knobs of the durable load series, and the arithmetic that makes them
+* honest.
+*
+* ## Where they live, and why there
+*
+* In `native-metrics`'s OWN global settings document — the one that already
+* exists and already carries `samplingIntervalMs`. Fields on a document, never
+* a method per knob: `system.getLoggingSettings` / `setLoggingSettings` set
+* that precedent and it holds here.
+*
+* They are NOT in the logging document, and that is a decision rather than an
+* omission. That document is about levels and diagnostic windows; a metrics
+* cadence and a table's retention are neither. Two documents that both claim a
+* knob is how this repo has already shipped a switch nobody read.
+*
+* They are cluster-wide, not per-node. Every node emits on the same cadence or
+* the fleet's series cannot be laid over each other, and the table is single
+* and hub-resident, so a per-node retention would be a promise nothing could
+* keep.
+*
+* ## Refused, not clamped
+*
+* A cadence outside 5-60 s is REFUSED. Clamping would silently store 10 when
+* the operator typed 2 and then report 10 back as though it had been accepted
+* — the failure mode where a knob and its readback agree on a value nobody
+* chose. The schema advertises the bounds; this refuses anything else.
+*/
+/** Measured bytes per row (legacy load table); still used for cost projection copy. */
+export declare const MEASURED_BYTES_PER_ROW = 87;
+export declare const MIN_CADENCE_SEC = 5;
+export declare const MAX_CADENCE_SEC = 60;
+export declare const DEFAULT_CADENCE_SEC = 10;
+export declare const DEFAULT_RETENTION_HOURS = 6;
+export declare const MIN_RETENTION_HOURS = 1;
+export declare const MAX_RETENTION_HOURS = 72;
+export declare const DEFAULT_MAX_ROWS = 5e5;
 /** The resolved, in-force configuration. */
 export interface LoadSeriesConfig {
 	readonly cadenceSec: number;
@@ -35,7 +72,7 @@ export interface LoadSeriesProjection {
 * This is what makes the knob honest: an operator raising retention to three
 * days sees the row count and the megabytes BEFORE applying it, rather than
 * discovering them afterwards. `MEASURED_BYTES_PER_ROW` is measured, not
-* guessed — see `load-series-store.ts`.
+* guessed — see `node-metrics-history-recorder.ts`.
 */
 export declare function projectLoadSeriesCost(input: {
 	readonly config: LoadSeriesConfig;

package/dist/builtins/native-metrics/load-series-reader.d.ts

@@ -1,8 +1,8 @@
 /**
 * The ONE reader over both retention tiers.
 *
-* The hot window is the in-memory ring; the cold one is
-* `metrics:node-load-samples`. A caller never learns which tier a point came
+* The hot window is the in-memory ring; the cold one is device-history raw
+* points. A caller never learns which tier a point came
 * from, and that is a hard requirement rather than a nicety: a second reader
 * is how two charts start disagreeing about the same node, and it is how "the
 * ring says X, the table says Y" becomes a question nobody can answer.
@@ -25,7 +25,7 @@
 * interval means one thing — nobody reported — and nothing here fills it in.
 */
 import { type LoadPoint } from "@camstack/types";
-import type { RetainedSample } from "./load-series-store.js";
+import type { RetainedSample } from "./load-series-types.js";
 /** One function's assembled series, before it is shaped for the wire. */
 export interface FoldedSeries {
 	readonly key: string;

package/dist/builtins/native-metrics/load-series-types.d.ts

@@ -0,0 +1,14 @@
+/** Shared shapes for the load series reader (hot ring + device-history cold tier). */
+export interface RetainedProcess {
+	readonly pid: number;
+	readonly addonId: string | null;
+	readonly classification: string;
+	readonly cpuPercent: number;
+	readonly memoryRssBytes: number;
+	readonly cpuMainPercent: number | null;
+	readonly cpuGcPercent: number | null;
+}
+export interface RetainedSample {
+	readonly atMs: number;
+	readonly processes: readonly RetainedProcess[];
+}

package/dist/builtins/native-metrics/native-metrics.addon.d.ts

@@ -7,8 +7,8 @@ interface NativeMetricsConfig {
 	* outside — `load-series-config.ts` explains why refused and not clamped.
 	*/
 	readonly loadSeriesCadenceSec: number;
-	/** How long the durable series is KEPT, in hours. The intention; the row
-	*  cap in `load-series-store.ts` is the guarantee. */
+	/** How long the durable series is KEPT, in hours. Retention is enforced by
+	*  device-history (see `node-metrics-history-recorder.ts`). */
 	readonly loadSeriesRetentionHours: number;
 }
 /**
@@ -48,7 +48,7 @@ export default class NativeMetricsAddon extends BaseAddon<NativeMetricsConfig> {
 	* the `settings-store` singleton would ship its rows over Moleculer, once
 	* per sample, to reach that very same table.
 	*/
-	private loadStore;
+	private metricsHistory;
 	/**
 	* The container's OWN memory, sampled on the process-snapshot tick.
 	*
@@ -60,10 +60,8 @@ export default class NativeMetricsAddon extends BaseAddon<NativeMetricsConfig> {
 	*/
 	private memoryProbe;
 	private pidsProbe;
-	/** Hot tier for the container reading. Bounds in `container-memory-series.ts`. */
+	/** Hot tier for the container reading. Bounds in `container-memory-ring.ts`. */
 	private readonly memoryRing;
-	/** Cold tier, HUB only — same reasoning as `loadStore`. */
-	private memoryStore;
 	/** The resolved knobs. Re-resolved on every settings write. */
 	private loadConfig;
 	/**
@@ -96,7 +94,7 @@ export default class NativeMetricsAddon extends BaseAddon<NativeMetricsConfig> {
 	* this node has already delivered, and only an accepted sample reaches the
 	* table. That is what makes the append idempotent without a unique index
 	* over two million rows — the composite key it replaces was measured at ~40
-	* bytes per row (`load-series-store.ts`).
+	* bytes per row (measured on the old SQLite tier; see D850).
 	*
 	* The durable append is fire-and-forget: a storage stall must cost a gap in
 	* the cold window, never a blocked event-bus handler. Every failure logs.