@sonde/packs 0.0.0

package/dist/system/manifest.js

@@ -0,0 +1,39 @@
+export const systemManifest = {
+    name: 'system',
+    version: '0.1.0',
+    description: 'Basic system metrics: disk usage, memory usage, CPU load',
+    requires: {
+        groups: [],
+        files: [],
+        commands: ['df'],
+    },
+    probes: [
+        {
+            name: 'disk.usage',
+            description: 'Disk usage per mounted filesystem',
+            capability: 'observe',
+            timeout: 10_000,
+        },
+        {
+            name: 'memory.usage',
+            description: 'System memory and swap usage',
+            capability: 'observe',
+            timeout: 10_000,
+        },
+        {
+            name: 'cpu.usage',
+            description: 'CPU load averages and core count',
+            capability: 'observe',
+            timeout: 10_000,
+        },
+    ],
+    runbook: {
+        category: 'system',
+        probes: ['disk.usage', 'memory.usage', 'cpu.usage'],
+        parallel: true,
+    },
+    detect: {
+        files: ['/proc/loadavg'],
+    },
+};
+//# sourceMappingURL=manifest.js.map

package/dist/system/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/system/manifest.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,cAAc,GAAiB;IAC1C,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,OAAO;IAChB,WAAW,EAAE,0DAA0D;IACvE,QAAQ,EAAE;QACR,MAAM,EAAE,EAAE;QACV,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,CAAC,IAAI,CAAC;KACjB;IACD,MAAM,EAAE;QACN;YACE,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,mCAAmC;YAChD,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE,MAAM;SAChB;QACD;YACE,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,8BAA8B;YAC3C,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE,MAAM;SAChB;QACD;YACE,IAAI,EAAE,WAAW;YACjB,WAAW,EAAE,kCAAkC;YAC/C,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE,MAAM;SAChB;KACF;IACD,OAAO,EAAE;QACP,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,CAAC,YAAY,EAAE,cAAc,EAAE,WAAW,CAAC;QACnD,QAAQ,EAAE,IAAI;KACf;IACD,MAAM,EAAE;QACN,KAAK,EAAE,CAAC,eAAe,CAAC;KACzB;CACF,CAAC"}

package/dist/system/probes/cpu-usage.d.ts

@@ -0,0 +1,14 @@
+import type { ProbeHandler } from '../../types.js';
+export interface CpuUsageResult {
+    loadAvg1: number;
+    loadAvg5: number;
+    loadAvg15: number;
+    cpuCount: number;
+}
+/**
+ * Reads /proc/loadavg for load averages and `nproc` for CPU count.
+ * Returns load averages and core count so consumers can compute utilization.
+ */
+export declare const cpuUsage: ProbeHandler;
+export declare function parseLoadAvg(loadAvgRaw: string, nprocRaw: string): CpuUsageResult;
+//# sourceMappingURL=cpu-usage.d.ts.map

package/dist/system/probes/cpu-usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cpu-usage.d.ts","sourceRoot":"","sources":["../../../src/system/probes/cpu-usage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,eAAO,MAAM,QAAQ,EAAE,YAMtB,CAAC;AAEF,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,cAAc,CAQjF"}

package/dist/system/probes/cpu-usage.js

@@ -0,0 +1,20 @@
+/**
+ * Reads /proc/loadavg for load averages and `nproc` for CPU count.
+ * Returns load averages and core count so consumers can compute utilization.
+ */
+export const cpuUsage = async (_params, exec) => {
+    const [loadAvgRaw, nprocRaw] = await Promise.all([
+        exec('cat', ['/proc/loadavg']),
+        exec('nproc', []),
+    ]);
+    return parseLoadAvg(loadAvgRaw, nprocRaw);
+};
+export function parseLoadAvg(loadAvgRaw, nprocRaw) {
+    const parts = loadAvgRaw.trim().split(/\s+/);
+    const loadAvg1 = Number(parts[0]);
+    const loadAvg5 = Number(parts[1]);
+    const loadAvg15 = Number(parts[2]);
+    const cpuCount = Number.parseInt(nprocRaw.trim(), 10);
+    return { loadAvg1, loadAvg5, loadAvg15, cpuCount };
+}
+//# sourceMappingURL=cpu-usage.js.map

package/dist/system/probes/cpu-usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cpu-usage.js","sourceRoot":"","sources":["../../../src/system/probes/cpu-usage.ts"],"names":[],"mappings":"AASA;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAiB,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;IAC5D,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC/C,IAAI,CAAC,KAAK,EAAE,CAAC,eAAe,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;KAClB,CAAC,CAAC;IACH,OAAO,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;AAC5C,CAAC,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,UAAkB,EAAE,QAAgB;IAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAEtD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACrD,CAAC"}

package/dist/system/probes/cpu-usage.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cpu-usage.test.d.ts.map

package/dist/system/probes/cpu-usage.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cpu-usage.test.d.ts","sourceRoot":"","sources":["../../../src/system/probes/cpu-usage.test.ts"],"names":[],"mappings":""}

package/dist/system/probes/cpu-usage.test.js

@@ -0,0 +1,45 @@
+import { describe, expect, it } from 'vitest';
+import { cpuUsage, parseLoadAvg } from './cpu-usage.js';
+describe('parseLoadAvg', () => {
+    it('parses /proc/loadavg and nproc output', () => {
+        const result = parseLoadAvg('1.52 0.89 0.65 2/345 12345\n', '4\n');
+        expect(result.loadAvg1).toBeCloseTo(1.52);
+        expect(result.loadAvg5).toBeCloseTo(0.89);
+        expect(result.loadAvg15).toBeCloseTo(0.65);
+        expect(result.cpuCount).toBe(4);
+    });
+    it('handles high load values', () => {
+        const result = parseLoadAvg('24.50 18.30 12.10 5/1200 99999\n', '8\n');
+        expect(result.loadAvg1).toBeCloseTo(24.5);
+        expect(result.loadAvg5).toBeCloseTo(18.3);
+        expect(result.loadAvg15).toBeCloseTo(12.1);
+        expect(result.cpuCount).toBe(8);
+    });
+    it('handles single CPU', () => {
+        const result = parseLoadAvg('0.01 0.02 0.00 1/50 100\n', '1\n');
+        expect(result.loadAvg1).toBeCloseTo(0.01);
+        expect(result.cpuCount).toBe(1);
+    });
+});
+describe('cpuUsage handler', () => {
+    it('calls cat /proc/loadavg and nproc, returns parsed result', async () => {
+        const calls = [];
+        const mockExec = async (cmd, args) => {
+            calls.push({ cmd, args });
+            if (cmd === 'cat' && args[0] === '/proc/loadavg') {
+                return '2.10 1.50 0.90 3/400 54321\n';
+            }
+            if (cmd === 'nproc') {
+                return '16\n';
+            }
+            throw new Error(`Unexpected command: ${cmd}`);
+        };
+        const result = (await cpuUsage(undefined, mockExec));
+        expect(result.loadAvg1).toBeCloseTo(2.1);
+        expect(result.loadAvg5).toBeCloseTo(1.5);
+        expect(result.loadAvg15).toBeCloseTo(0.9);
+        expect(result.cpuCount).toBe(16);
+        expect(calls).toHaveLength(2);
+    });
+});
+//# sourceMappingURL=cpu-usage.test.js.map

package/dist/system/probes/cpu-usage.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cpu-usage.test.js","sourceRoot":"","sources":["../../../src/system/probes/cpu-usage.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAG9C,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAExD,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,YAAY,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;QAEnE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,MAAM,GAAG,YAAY,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;QAEvE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC5B,MAAM,MAAM,GAAG,YAAY,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QAEhE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,KAAK,GAA2C,EAAE,CAAC;QAEzD,MAAM,QAAQ,GAAW,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC3C,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1B,IAAI,GAAG,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,eAAe,EAAE,CAAC;gBACjD,OAAO,8BAA8B,CAAC;YACxC,CAAC;YACD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;gBACpB,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAmB,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/system/probes/disk-usage.d.ts

@@ -0,0 +1,19 @@
+import type { ProbeHandler } from '../../types.js';
+export interface FilesystemUsage {
+    filesystem: string;
+    sizeKb: number;
+    usedKb: number;
+    availableKb: number;
+    usePct: number;
+    mountedOn: string;
+}
+export interface DiskUsageResult {
+    filesystems: FilesystemUsage[];
+}
+/**
+ * Runs `df -kP` and parses the output into structured JSON.
+ * `-k` = 1K blocks, `-P` = POSIX portable output format (one line per fs).
+ */
+export declare const diskUsage: ProbeHandler;
+export declare function parseDfOutput(stdout: string): DiskUsageResult;
+//# sourceMappingURL=disk-usage.d.ts.map

package/dist/system/probes/disk-usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"disk-usage.d.ts","sourceRoot":"","sources":["../../../src/system/probes/disk-usage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,eAAe,EAAE,CAAC;CAChC;AAED;;;GAGG;AACH,eAAO,MAAM,SAAS,EAAE,YAGvB,CAAC;AAEF,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CA4B7D"}

package/dist/system/probes/disk-usage.js

@@ -0,0 +1,34 @@
+/**
+ * Runs `df -kP` and parses the output into structured JSON.
+ * `-k` = 1K blocks, `-P` = POSIX portable output format (one line per fs).
+ */
+export const diskUsage = async (_params, exec) => {
+    const stdout = await exec('df', ['-kP']);
+    return parseDfOutput(stdout);
+};
+export function parseDfOutput(stdout) {
+    const lines = stdout.trim().split('\n');
+    // Skip header line
+    const dataLines = lines.slice(1);
+    const filesystems = [];
+    for (const line of dataLines) {
+        const parts = line.trim().split(/\s+/);
+        if (parts.length < 6)
+            continue;
+        const [filesystem, sizeStr, usedStr, availStr, pctStr, mountedOn] = parts;
+        if (!filesystem || !sizeStr || !usedStr || !availStr || !pctStr || !mountedOn)
+            continue;
+        // Skip pseudo-filesystems
+        if (filesystem === 'tmpfs' || filesystem === 'devtmpfs' || filesystem === 'none')
+            continue;
+        const sizeKb = Number(sizeStr);
+        const usedKb = Number(usedStr);
+        const availableKb = Number(availStr);
+        const usePct = Number.parseInt(pctStr.replace('%', ''), 10);
+        if (Number.isNaN(sizeKb) || Number.isNaN(usedKb))
+            continue;
+        filesystems.push({ filesystem, sizeKb, usedKb, availableKb, usePct, mountedOn });
+    }
+    return { filesystems };
+}
+//# sourceMappingURL=disk-usage.js.map

package/dist/system/probes/disk-usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disk-usage.js","sourceRoot":"","sources":["../../../src/system/probes/disk-usage.ts"],"names":[],"mappings":"AAeA;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAiB,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;IAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,mBAAmB;IACnB,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEjC,MAAM,WAAW,GAAsB,EAAE,CAAC;IAE1C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAE/B,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;QAC1E,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS;YAAE,SAAS;QAExF,0BAA0B;QAC1B,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,UAAU,IAAI,UAAU,KAAK,MAAM;YAAE,SAAS;QAE3F,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAE5D,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,SAAS;QAE3D,WAAW,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,CAAC;AACzB,CAAC"}

package/dist/system/probes/disk-usage.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=disk-usage.test.d.ts.map

package/dist/system/probes/disk-usage.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"disk-usage.test.d.ts","sourceRoot":"","sources":["../../../src/system/probes/disk-usage.test.ts"],"names":[],"mappings":""}

package/dist/system/probes/disk-usage.test.js

@@ -0,0 +1,62 @@
+import { describe, expect, it } from 'vitest';
+import { diskUsage, parseDfOutput } from './disk-usage.js';
+const SAMPLE_DF_OUTPUT = `Filesystem     1024-blocks      Used Available Capacity Mounted on
+/dev/sda1         51474044  31285940  17548392      65% /
+/dev/sdb1        103081248  45234112  52579600      47% /data
+tmpfs              8152560         0   8152560       0% /dev/shm
+`;
+describe('parseDfOutput', () => {
+    it('parses df -kP output into structured data', () => {
+        const result = parseDfOutput(SAMPLE_DF_OUTPUT);
+        expect(result.filesystems).toHaveLength(2);
+        expect(result.filesystems[0]).toEqual({
+            filesystem: '/dev/sda1',
+            sizeKb: 51474044,
+            usedKb: 31285940,
+            availableKb: 17548392,
+            usePct: 65,
+            mountedOn: '/',
+        });
+        expect(result.filesystems[1]).toEqual({
+            filesystem: '/dev/sdb1',
+            sizeKb: 103081248,
+            usedKb: 45234112,
+            availableKb: 52579600,
+            usePct: 47,
+            mountedOn: '/data',
+        });
+    });
+    it('filters out tmpfs and devtmpfs', () => {
+        const result = parseDfOutput(SAMPLE_DF_OUTPUT);
+        const names = result.filesystems.map((f) => f.filesystem);
+        expect(names).not.toContain('tmpfs');
+        expect(names).not.toContain('devtmpfs');
+    });
+    it('handles single filesystem output', () => {
+        const output = `Filesystem     1024-blocks  Used Available Capacity Mounted on
+/dev/vda1         25671908 5432100  19912300      22% /
+`;
+        const result = parseDfOutput(output);
+        expect(result.filesystems).toHaveLength(1);
+        expect(result.filesystems[0]?.usePct).toBe(22);
+    });
+    it('returns empty array for header-only output', () => {
+        const output = `Filesystem     1024-blocks  Used Available Capacity Mounted on
+`;
+        const result = parseDfOutput(output);
+        expect(result.filesystems).toHaveLength(0);
+    });
+});
+describe('diskUsage handler', () => {
+    it('calls df -kP and returns parsed result', async () => {
+        const mockExec = async (cmd, args) => {
+            expect(cmd).toBe('df');
+            expect(args).toEqual(['-kP']);
+            return SAMPLE_DF_OUTPUT;
+        };
+        const result = (await diskUsage(undefined, mockExec));
+        expect(result.filesystems).toHaveLength(2);
+        expect(result.filesystems[0]?.mountedOn).toBe('/');
+    });
+});
+//# sourceMappingURL=disk-usage.test.js.map

package/dist/system/probes/disk-usage.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disk-usage.test.js","sourceRoot":"","sources":["../../../src/system/probes/disk-usage.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAG9C,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAE3D,MAAM,gBAAgB,GAAG;;;;CAIxB,CAAC;AAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAE/C,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAE3C,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACpC,UAAU,EAAE,WAAW;YACvB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,QAAQ;YACrB,MAAM,EAAE,EAAE;YACV,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACpC,UAAU,EAAE,WAAW;YACvB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,QAAQ;YACrB,MAAM,EAAE,EAAE;YACV,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,MAAM,GAAG,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG;;CAElB,CAAC;QACE,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,MAAM,GAAG;CAClB,CAAC;QACE,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,QAAQ,GAAW,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC3C,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9B,OAAO,gBAAgB,CAAC;QAC1B,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAoB,CAAC;QACzE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/system/probes/memory-usage.d.ts

@@ -0,0 +1,19 @@
+import type { ProbeHandler } from '../../types.js';
+export interface MemoryUsageResult {
+    totalBytes: number;
+    usedBytes: number;
+    freeBytes: number;
+    availableBytes: number;
+    swap: {
+        totalBytes: number;
+        usedBytes: number;
+        freeBytes: number;
+    };
+}
+/**
+ * Runs `free -b` and parses the output into structured JSON.
+ * `-b` = output in bytes.
+ */
+export declare const memoryUsage: ProbeHandler;
+export declare function parseFreeOutput(stdout: string): MemoryUsageResult;
+//# sourceMappingURL=memory-usage.d.ts.map

package/dist/system/probes/memory-usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-usage.d.ts","sourceRoot":"","sources":["../../../src/system/probes/memory-usage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE;QACJ,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED;;;GAGG;AACH,eAAO,MAAM,WAAW,EAAE,YAGzB,CAAC;AAEF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,CAuCjE"}

package/dist/system/probes/memory-usage.js

@@ -0,0 +1,46 @@
+/**
+ * Runs `free -b` and parses the output into structured JSON.
+ * `-b` = output in bytes.
+ */
+export const memoryUsage = async (_params, exec) => {
+    const stdout = await exec('free', ['-b']);
+    return parseFreeOutput(stdout);
+};
+export function parseFreeOutput(stdout) {
+    const lines = stdout.trim().split('\n');
+    let totalBytes = 0;
+    let usedBytes = 0;
+    let freeBytes = 0;
+    let availableBytes = 0;
+    let swapTotal = 0;
+    let swapUsed = 0;
+    let swapFree = 0;
+    for (const line of lines) {
+        const parts = line.trim().split(/\s+/);
+        const label = parts[0]?.toLowerCase();
+        if (label === 'mem:') {
+            totalBytes = Number(parts[1]);
+            usedBytes = Number(parts[2]);
+            freeBytes = Number(parts[3]);
+            // "available" is the last column in modern `free` output
+            availableBytes = Number(parts[parts.length - 1]);
+        }
+        else if (label === 'swap:') {
+            swapTotal = Number(parts[1]);
+            swapUsed = Number(parts[2]);
+            swapFree = Number(parts[3]);
+        }
+    }
+    return {
+        totalBytes,
+        usedBytes,
+        freeBytes,
+        availableBytes,
+        swap: {
+            totalBytes: swapTotal,
+            usedBytes: swapUsed,
+            freeBytes: swapFree,
+        },
+    };
+}
+//# sourceMappingURL=memory-usage.js.map

package/dist/system/probes/memory-usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-usage.js","sourceRoot":"","sources":["../../../src/system/probes/memory-usage.ts"],"names":[],"mappings":"AAcA;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAiB,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;IAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1C,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAExC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QAEtC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,yDAAyD;YACzD,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC;aAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YAC7B,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5B,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,OAAO;QACL,UAAU;QACV,SAAS;QACT,SAAS;QACT,cAAc;QACd,IAAI,EAAE;YACJ,UAAU,EAAE,SAAS;YACrB,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,QAAQ;SACpB;KACF,CAAC;AACJ,CAAC"}

package/dist/system/probes/memory-usage.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=memory-usage.test.d.ts.map

package/dist/system/probes/memory-usage.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-usage.test.d.ts","sourceRoot":"","sources":["../../../src/system/probes/memory-usage.test.ts"],"names":[],"mappings":""}

package/dist/system/probes/memory-usage.test.js

@@ -0,0 +1,50 @@
+import { describe, expect, it } from 'vitest';
+import { memoryUsage, parseFreeOutput } from './memory-usage.js';
+const SAMPLE_FREE_OUTPUT = `              total        used        free      shared  buff/cache   available
+Mem:    16595034112  8234127360  1021071360   348321792  7339835392 10543906816
+Swap:    8589930496  1073741824  7516188672
+`;
+describe('parseFreeOutput', () => {
+    it('parses free -b output into structured data', () => {
+        const result = parseFreeOutput(SAMPLE_FREE_OUTPUT);
+        expect(result.totalBytes).toBe(16595034112);
+        expect(result.usedBytes).toBe(8234127360);
+        expect(result.freeBytes).toBe(1021071360);
+        expect(result.availableBytes).toBe(10543906816);
+        expect(result.swap.totalBytes).toBe(8589930496);
+        expect(result.swap.usedBytes).toBe(1073741824);
+        expect(result.swap.freeBytes).toBe(7516188672);
+    });
+    it('handles no swap', () => {
+        const output = `              total        used        free      shared  buff/cache   available
+Mem:     4153344000  2076672000   512000000   100000000  1564672000  2576672000
+Swap:             0           0           0
+`;
+        const result = parseFreeOutput(output);
+        expect(result.totalBytes).toBe(4153344000);
+        expect(result.swap.totalBytes).toBe(0);
+        expect(result.swap.usedBytes).toBe(0);
+        expect(result.swap.freeBytes).toBe(0);
+    });
+    it('handles minimal output format', () => {
+        const output = `              total        used        free      shared  buff/cache   available
+Mem:     8000000000  4000000000  2000000000   500000000  1500000000  5000000000
+`;
+        const result = parseFreeOutput(output);
+        expect(result.totalBytes).toBe(8000000000);
+        expect(result.swap.totalBytes).toBe(0);
+    });
+});
+describe('memoryUsage handler', () => {
+    it('calls free -b and returns parsed result', async () => {
+        const mockExec = async (cmd, args) => {
+            expect(cmd).toBe('free');
+            expect(args).toEqual(['-b']);
+            return SAMPLE_FREE_OUTPUT;
+        };
+        const result = (await memoryUsage(undefined, mockExec));
+        expect(result.totalBytes).toBe(16595034112);
+        expect(result.swap.freeBytes).toBe(7516188672);
+    });
+});
+//# sourceMappingURL=memory-usage.test.js.map

package/dist/system/probes/memory-usage.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-usage.test.js","sourceRoot":"","sources":["../../../src/system/probes/memory-usage.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAG9C,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEjE,MAAM,kBAAkB,GAAG;;;CAG1B,CAAC;AAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,MAAM,GAAG,eAAe,CAAC,kBAAkB,CAAC,CAAC;QAEnD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iBAAiB,EAAE,GAAG,EAAE;QACzB,MAAM,MAAM,GAAG;;;CAGlB,CAAC;QACE,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,MAAM,GAAG;;CAElB,CAAC;QACE,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,QAAQ,GAAW,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC3C,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7B,OAAO,kBAAkB,CAAC;QAC5B,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,MAAM,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAsB,CAAC;QAC7E,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/systemd/index.d.ts

@@ -0,0 +1,3 @@
+import type { Pack } from '../types.js';
+export declare const systemdPack: Pack;
+//# sourceMappingURL=index.d.ts.map

package/dist/systemd/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/systemd/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAMxC,eAAO,MAAM,WAAW,EAAE,IAOzB,CAAC"}

package/dist/systemd/index.js

@@ -0,0 +1,13 @@
+import { systemdManifest } from './manifest.js';
+import { journalQuery } from './probes/journal-query.js';
+import { serviceStatus } from './probes/service-status.js';
+import { servicesList } from './probes/services-list.js';
+export const systemdPack = {
+    manifest: systemdManifest,
+    handlers: {
+        'systemd.services.list': servicesList,
+        'systemd.service.status': serviceStatus,
+        'systemd.journal.query': journalQuery,
+    },
+};
+//# sourceMappingURL=index.js.map

package/dist/systemd/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/systemd/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAEzD,MAAM,CAAC,MAAM,WAAW,GAAS;IAC/B,QAAQ,EAAE,eAAe;IACzB,QAAQ,EAAE;QACR,uBAAuB,EAAE,YAAY;QACrC,wBAAwB,EAAE,aAAa;QACvC,uBAAuB,EAAE,YAAY;KACtC;CACF,CAAC"}

package/dist/systemd/manifest.d.ts

@@ -0,0 +1,3 @@
+import type { PackManifest } from '@sonde/shared';
+export declare const systemdManifest: PackManifest;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/systemd/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/systemd/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,eAAO,MAAM,eAAe,EAAE,YAiD7B,CAAC"}

package/dist/systemd/manifest.js

@@ -0,0 +1,51 @@
+export const systemdManifest = {
+    name: 'systemd',
+    version: '0.1.0',
+    description: 'systemd service and journal probes',
+    requires: {
+        groups: [],
+        files: [],
+        commands: ['systemctl'],
+    },
+    probes: [
+        {
+            name: 'services.list',
+            description: 'List all systemd service units',
+            capability: 'observe',
+            timeout: 10_000,
+        },
+        {
+            name: 'service.status',
+            description: 'Detailed status of a specific service',
+            capability: 'observe',
+            params: {
+                service: { type: 'string', description: 'Service unit name', required: true },
+            },
+            timeout: 10_000,
+        },
+        {
+            name: 'journal.query',
+            description: 'Query journal logs for a unit',
+            capability: 'observe',
+            params: {
+                unit: { type: 'string', description: 'Systemd unit name', required: true },
+                lines: {
+                    type: 'number',
+                    description: 'Number of log entries',
+                    required: false,
+                    default: 50,
+                },
+            },
+            timeout: 15_000,
+        },
+    ],
+    runbook: {
+        category: 'systemd',
+        probes: ['services.list'],
+        parallel: true,
+    },
+    detect: {
+        files: ['/run/systemd/system'],
+    },
+};
+//# sourceMappingURL=manifest.js.map

package/dist/systemd/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/systemd/manifest.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,eAAe,GAAiB;IAC3C,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,OAAO;IAChB,WAAW,EAAE,oCAAoC;IACjD,QAAQ,EAAE;QACR,MAAM,EAAE,EAAE;QACV,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,CAAC,WAAW,CAAC;KACxB;IACD,MAAM,EAAE;QACN;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,gCAAgC;YAC7C,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE,MAAM;SAChB;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,WAAW,EAAE,uCAAuC;YACpD,UAAU,EAAE,SAAS;YACrB,MAAM,EAAE;gBACN,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC9E;YACD,OAAO,EAAE,MAAM;SAChB;QACD;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,+BAA+B;YAC5C,UAAU,EAAE,SAAS;YACrB,MAAM,EAAE;gBACN,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC1E,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,uBAAuB;oBACpC,QAAQ,EAAE,KAAK;oBACf,OAAO,EAAE,EAAE;iBACZ;aACF;YACD,OAAO,EAAE,MAAM;SAChB;KACF;IACD,OAAO,EAAE;QACP,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,CAAC,eAAe,CAAC;QACzB,QAAQ,EAAE,IAAI;KACf;IACD,MAAM,EAAE;QACN,KAAK,EAAE,CAAC,qBAAqB,CAAC;KAC/B;CACF,CAAC"}

package/dist/systemd/probes/journal-query.d.ts

@@ -0,0 +1,19 @@
+import type { ProbeHandler } from '../../types.js';
+export interface JournalEntry {
+    timestamp: string;
+    priority: number;
+    message: string;
+    pid: string;
+    uid: string;
+}
+export interface JournalQueryResult {
+    unit: string;
+    entries: JournalEntry[];
+    entryCount: number;
+}
+/**
+ * Runs `journalctl -u <unit> -n <lines> --no-pager -o json` and parses each JSON line.
+ */
+export declare const journalQuery: ProbeHandler;
+export declare function parseJournalQuery(unit: string, stdout: string): JournalQueryResult;
+//# sourceMappingURL=journal-query.d.ts.map

package/dist/systemd/probes/journal-query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal-query.d.ts","sourceRoot":"","sources":["../../../src/systemd/probes/journal-query.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,YAc1B,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,kBAAkB,CAoBlF"}

package/dist/systemd/probes/journal-query.js

@@ -0,0 +1,37 @@
+/**
+ * Runs `journalctl -u <unit> -n <lines> --no-pager -o json` and parses each JSON line.
+ */
+export const journalQuery = async (params, exec) => {
+    const unit = params?.unit;
+    const lines = params?.lines ?? 50;
+    const stdout = await exec('journalctl', [
+        '-u',
+        unit,
+        '-n',
+        String(lines),
+        '--no-pager',
+        '-o',
+        'json',
+    ]);
+    return parseJournalQuery(unit, stdout);
+};
+export function parseJournalQuery(unit, stdout) {
+    const lines = stdout.trim().split('\n').filter(Boolean);
+    const entries = [];
+    for (const line of lines) {
+        const raw = JSON.parse(line);
+        entries.push({
+            timestamp: raw.__REALTIME_TIMESTAMP ?? raw._SOURCE_REALTIME_TIMESTAMP ?? '',
+            priority: Number(raw.PRIORITY ?? 6),
+            message: raw.MESSAGE ?? '',
+            pid: raw._PID ?? '',
+            uid: raw._UID ?? '',
+        });
+    }
+    return {
+        unit,
+        entries,
+        entryCount: entries.length,
+    };
+}
+//# sourceMappingURL=journal-query.js.map

package/dist/systemd/probes/journal-query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal-query.js","sourceRoot":"","sources":["../../../src/systemd/probes/journal-query.ts"],"names":[],"mappings":"AAgBA;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAiB,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;IAC/D,MAAM,IAAI,GAAG,MAAM,EAAE,IAAc,CAAC;IACpC,MAAM,KAAK,GAAI,MAAM,EAAE,KAAgB,IAAI,EAAE,CAAC;IAE9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE;QACtC,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,MAAM,CAAC,KAAK,CAAC;QACb,YAAY;QACZ,IAAI;QACJ,MAAM;KACP,CAAC,CAAC;IACH,OAAO,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,MAAc;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC;YACX,SAAS,EAAE,GAAG,CAAC,oBAAoB,IAAI,GAAG,CAAC,0BAA0B,IAAI,EAAE;YAC3E,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;YACnC,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;YAC1B,GAAG,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE;YACnB,GAAG,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE;SACpB,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,IAAI;QACJ,OAAO;QACP,UAAU,EAAE,OAAO,CAAC,MAAM;KAC3B,CAAC;AACJ,CAAC"}

package/dist/systemd/probes/journal-query.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=journal-query.test.d.ts.map

package/dist/systemd/probes/journal-query.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal-query.test.d.ts","sourceRoot":"","sources":["../../../src/systemd/probes/journal-query.test.ts"],"names":[],"mappings":""}