camstack 1.2.137 → 1.2.138

package/dist/{launcher-U2UTNMNT.js → launcher-JISZUXK5.js}

@@ -23633,9 +23633,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-BOlMCOeT.js
-var require_dist_BOlMCOeT = __commonJS({
-  "../system/dist/dist-BOlMCOeT.js"(exports) {
+// ../system/dist/dist-B17W9ngu.js
+var require_dist_B17W9ngu = __commonJS({
+  "../system/dist/dist-B17W9ngu.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -44623,8 +44623,8 @@ var require_dist_BOlMCOeT = __commonJS({
           *
           * An **empty array reads NOTHING** — `[]` is an empty page, never
           * "every camera". A request for no devices is a request, not an
-          * omission; same contract as `deviceManager.listFleet` and
-          * `pipelineAnalytics.listRecentTracks`.
+          * omission; same contract as `deviceManager.listAll`'s `deviceIds`
+          * and `pipelineAnalytics.listRecentTracks`.
           *
           * Absent (`undefined`) is the omission, and keeps the cluster-wide view.
           */
@@ -61586,7 +61586,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BOlMCOeT();
+    var require_dist10 = require_dist_B17W9ngu();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -62405,7 +62405,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BOlMCOeT();
+    var require_dist10 = require_dist_B17W9ngu();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -62499,7 +62499,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BOlMCOeT();
+    var require_dist10 = require_dist_B17W9ngu();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -63396,11 +63396,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-xEAlYnv7.js
-var require_retired_settings_keys_xEAlYnv7 = __commonJS({
-  "../system/dist/retired-settings-keys-xEAlYnv7.js"(exports) {
+// ../system/dist/retired-settings-keys-CjvB7Etx.js
+var require_retired_settings_keys_CjvB7Etx = __commonJS({
+  "../system/dist/retired-settings-keys-CjvB7Etx.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_BOlMCOeT();
+    var require_dist10 = require_dist_B17W9ngu();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -65635,8 +65635,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BOlMCOeT();
-    var require_retired_settings_keys = require_retired_settings_keys_xEAlYnv7();
+    var require_dist10 = require_dist_B17W9ngu();
+    var require_retired_settings_keys = require_retired_settings_keys_CjvB7Etx();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -71261,7 +71261,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BOlMCOeT();
+    var require_dist10 = require_dist_B17W9ngu();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -71398,7 +71398,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BOlMCOeT();
+    var require_dist10 = require_dist_B17W9ngu();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -71594,7 +71594,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BOlMCOeT();
+    var require_dist10 = require_dist_B17W9ngu();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -79407,7 +79407,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BOlMCOeT();
+    var require_dist10 = require_dist_B17W9ngu();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -79873,31 +79873,18 @@ var require_loki_logging = __commonJS({
   }
 });
 
-// ../system/dist/resource-monitor-CdnzxBLP.js
-var require_resource_monitor_CdnzxBLP = __commonJS({
-  "../system/dist/resource-monitor-CdnzxBLP.js"(exports) {
+// ../system/dist/resource-monitor-LVE1BoLs.js
+var require_resource_monitor_LVE1BoLs = __commonJS({
+  "../system/dist/resource-monitor-LVE1BoLs.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
+    var require_builtins_native_metrics_native_metrics_addon = require_native_metrics_addon();
     var node_child_process = __require("child_process");
-    var node_fs = __require("fs");
-    node_fs = require_chunk.__toESM(node_fs);
+    var node_os = __require("os");
     var resource_monitor_exports = /* @__PURE__ */ require_chunk.__exportAll({
       getPidStats: () => getPidStats,
       getSinglePidStats: () => getSinglePidStats
     });
-    function readProcRss(pid) {
-      try {
-        const status = node_fs.readFileSync(`/proc/${pid}/status`, "utf8");
-        const anon = status.match(/^RssAnon:\s+(\d+)/m);
-        const file = status.match(/^RssFile:\s+(\d+)/m);
-        return {
-          privateBytes: anon ? parseInt(anon[1], 10) * 1024 : void 0,
-          sharedBytes: file ? parseInt(file[1], 10) * 1024 : void 0
-        };
-      } catch {
-        return {};
-      }
-    }
     function execPsForPids(pids) {
       return new Promise((resolve, reject) => {
         (0, node_child_process.execFile)("ps", [
@@ -79911,6 +79898,11 @@ var require_resource_monitor_CdnzxBLP = __commonJS({
         });
       });
     }
+    var defaultDeps = {
+      platform: (0, node_os.platform)(),
+      reader: require_builtins_native_metrics_native_metrics_addon.nodeProcReader,
+      spawnPs: execPsForPids
+    };
     function parsePsOutput(stdout) {
       const result = /* @__PURE__ */ new Map();
       for (const line of stdout.trim().split("\n")) {
@@ -79924,17 +79916,47 @@ var require_resource_monitor_CdnzxBLP = __commonJS({
         if (isNaN(pid) || isNaN(cpu) || isNaN(rssKb)) continue;
         result.set(pid, {
           cpu: Math.round(cpu * 10) / 10,
-          memory: rssKb * 1024,
-          ...readProcRss(pid)
+          memory: rssKb * 1024
         });
       }
       return result;
     }
-    async function getPidStats(pids) {
+    async function readProcPidStats(pid, uptimeSec, reader) {
+      let stat;
+      let status;
+      try {
+        [stat, status] = await Promise.all([reader.readStat(pid), reader.readStatus(pid)]);
+      } catch {
+        return null;
+      }
+      const parsed = require_builtins_native_metrics_native_metrics_addon.parseProcStat(stat);
+      if (parsed === null) return null;
+      const rss = require_builtins_native_metrics_native_metrics_addon.parseProcStatusRss(status);
+      if (rss.rssBytes === void 0) return null;
+      return {
+        cpu: require_builtins_native_metrics_native_metrics_addon.lifetimeCpuPercent({
+          ticks: parsed.ticks,
+          startTicks: parsed.startTicks,
+          uptimeSec
+        }),
+        memory: rss.rssBytes,
+        privateBytes: rss.privateBytes,
+        sharedBytes: rss.sharedBytes
+      };
+    }
+    async function readProcPidStatsAll(pids, reader) {
+      const uptimeSec = await reader.readUptimeSec();
+      const entries = await Promise.all(pids.map(async (pid) => [pid, await readProcPidStats(pid, uptimeSec, reader)]));
+      const result = /* @__PURE__ */ new Map();
+      for (const [pid, stats] of entries) if (stats !== null) result.set(pid, stats);
+      return result;
+    }
+    async function getPidStats(pids, deps = defaultDeps) {
       const pidArray = typeof pids === "number" ? [pids] : [...pids];
       if (pidArray.length === 0) return /* @__PURE__ */ new Map();
       try {
-        return parsePsOutput(await execPsForPids(pidArray));
+        if (deps.platform === "linux") return await readProcPidStatsAll(pidArray, deps.reader);
+        return parsePsOutput(await deps.spawnPs(pidArray));
       } catch {
         return /* @__PURE__ */ new Map();
       }
@@ -79972,14 +79994,14 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BOlMCOeT();
+    var require_dist10 = require_dist_B17W9ngu();
     var node_fs_promises = __require("fs/promises");
-    var node_child_process = __require("child_process");
-    var node_util = __require("util");
     var node_fs = __require("fs");
     node_fs = require_chunk.__toESM(node_fs);
+    var node_child_process = __require("child_process");
     var node_os = __require("os");
     node_os = require_chunk.__toESM(node_os);
+    var node_util = __require("util");
     var nodeCgroupFileReader = { read(path) {
       try {
         return (0, node_fs.readFileSync)(path, "utf8");
@@ -80825,470 +80847,6 @@ var require_native_metrics_addon = __commonJS({
         }
       }
     };
-    var IS_DARWIN = node_os.platform() === "darwin";
-    var IS_LINUX = node_os.platform() === "linux";
-    var NativeMetricsProvider = class {
-      id = "native";
-      cachedSnapshot = null;
-      samplingTimer = null;
-      macMemTimer = null;
-      prevCpu;
-      diagnostics = null;
-      consecutiveSampleErrors = 0;
-      constructor() {
-        this.prevCpu = aggregateCpuTimes();
-      }
-      /**
-      * Optional diagnostics sink for sampling errors. The first failure and
-      * every Nth failure thereafter are reported so a permanently-broken
-      * collector doesn't spam logs but is still observable.
-      */
-      setDiagnostics(diag) {
-        this.diagnostics = diag;
-      }
-      startSampling(intervalMs) {
-        if (IS_DARWIN) {
-          sampleMacMemory(this);
-          this.macMemTimer = setInterval(() => sampleMacMemory(this), 5e3);
-          if (this.macMemTimer.unref) this.macMemTimer.unref();
-        }
-        this.collectSnapshot().then((s) => {
-          this.cachedSnapshot = s;
-          this.consecutiveSampleErrors = 0;
-        }).catch((err) => this.reportSampleError(err));
-        this.samplingTimer = setInterval(() => {
-          this.collectSnapshot().then((s) => {
-            this.cachedSnapshot = s;
-            this.consecutiveSampleErrors = 0;
-          }).catch((err) => this.reportSampleError(err));
-        }, intervalMs);
-        if (this.samplingTimer.unref) this.samplingTimer.unref();
-      }
-      reportSampleError(err) {
-        this.consecutiveSampleErrors++;
-        if (!this.diagnostics) return;
-        if (!(this.consecutiveSampleErrors === 1 || this.consecutiveSampleErrors % 60 === 0)) return;
-        this.diagnostics.warn("metrics-provider sample failed", {
-          consecutiveErrors: this.consecutiveSampleErrors,
-          error: err instanceof Error ? err.message : String(err)
-        });
-      }
-      stopSampling() {
-        if (this.samplingTimer) {
-          clearInterval(this.samplingTimer);
-          this.samplingTimer = null;
-        }
-        if (this.macMemTimer) {
-          clearInterval(this.macMemTimer);
-          this.macMemTimer = null;
-        }
-      }
-      async collectSnapshot() {
-        const cpu = this.sampleCpu();
-        const memory = this.getMemoryInfo();
-        const processInfo = getProcessResources();
-        const [gpu, network, disk, cpuTemp] = await Promise.all([
-          getGpuInfoInternal().catch(() => null),
-          takeNetworkIoSnapshot(),
-          takeDiskIoSnapshot(),
-          getCpuTemperatureInternal().catch(() => null)
-        ]);
-        const snapshot = {
-          cpu,
-          memory,
-          gpu,
-          network,
-          disk,
-          pressure: {
-            cpu: getPressure("cpu"),
-            memory: getPressure("memory"),
-            io: getPressure("io")
-          },
-          process: processInfo,
-          cpuTemperature: cpuTemp,
-          timestampMs: Date.now()
-        };
-        this.cachedSnapshot = snapshot;
-        return snapshot;
-      }
-      async getCached() {
-        return this.cachedSnapshot;
-      }
-      async getCurrent() {
-        const s = this.cachedSnapshot ?? await this.collectSnapshot();
-        const mb = (bytes) => Math.round(bytes / 1024 / 1024);
-        return {
-          cpuPercent: s.cpu.total,
-          memoryPercent: s.memory.percent,
-          memoryUsedMB: mb(s.memory.usedBytes),
-          memoryTotalMB: mb(s.memory.totalBytes),
-          temperature: s.cpuTemperature ?? void 0,
-          gpuPercent: s.gpu?.utilization,
-          gpuMemoryPercent: s.gpu && s.gpu.memoryTotalBytes > 0 ? Math.round(s.gpu.memoryUsedBytes / s.gpu.memoryTotalBytes * 1e3) / 10 : void 0
-        };
-      }
-      async getDiskSpace(input) {
-        return getDiskSpaceInternal(input.dirPath);
-      }
-      async getGpuInfo() {
-        return getGpuInfoInternal();
-      }
-      async getCpuTemperature() {
-        return getCpuTemperatureInternal();
-      }
-      async getProcessStats(input) {
-        const { getPidStats } = await Promise.resolve().then(() => require_resource_monitor_CdnzxBLP()).then((n) => n.resource_monitor_exports);
-        const raw = await getPidStats(input.pids);
-        const result = [];
-        for (const [pid, s] of raw) result.push({
-          pid,
-          cpu: s.cpu,
-          memory: s.memory,
-          privateBytes: s.privateBytes,
-          sharedBytes: s.sharedBytes
-        });
-        return result;
-      }
-      sampleCpu() {
-        const curr = aggregateCpuTimes();
-        const prev = this.prevCpu;
-        this.prevCpu = curr;
-        const dUser = curr.user - prev.user;
-        const dNice = curr.nice - prev.nice;
-        const dSys = curr.sys - prev.sys;
-        const dIrq = curr.irq - prev.irq;
-        const dIdle = curr.idle - prev.idle;
-        const dTotal = dUser + dNice + dSys + dIrq + dIdle;
-        const pct = (v) => dTotal === 0 ? 0 : Math.round(v / dTotal * 1e3) / 10;
-        return {
-          total: pct(dUser + dNice + dSys + dIrq),
-          user: pct(dUser),
-          system: pct(dSys),
-          irq: pct(dIrq),
-          nice: pct(dNice),
-          loadAvg: node_os.loadavg(),
-          cores: node_os.cpus().length
-        };
-      }
-      /** Cached macOS memory (set by sampleMacMemory timer). */
-      _cachedMacMem = null;
-      getMemoryInfo() {
-        const total = node_os.totalmem();
-        if (total === 0) return {
-          percent: 0,
-          totalBytes: 0,
-          usedBytes: 0,
-          availableBytes: 0,
-          swapUsedBytes: 0,
-          swapTotalBytes: 0
-        };
-        if (IS_DARWIN && this._cachedMacMem !== null) return this._cachedMacMem;
-        const free = node_os.freemem();
-        const used = total - free;
-        let swapUsedBytes = 0;
-        let swapTotalBytes = 0;
-        if (IS_LINUX) try {
-          const meminfo = node_fs.readFileSync("/proc/meminfo", "utf-8");
-          const swapTotal = parseInt(meminfo.match(/SwapTotal:\s+(\d+)/)?.[1] ?? "0", 10) * 1024;
-          const swapFree = parseInt(meminfo.match(/SwapFree:\s+(\d+)/)?.[1] ?? "0", 10) * 1024;
-          swapTotalBytes = swapTotal;
-          swapUsedBytes = swapTotal - swapFree;
-        } catch {
-        }
-        return {
-          percent: Math.round((total - free) / total * 1e3) / 10,
-          totalBytes: total,
-          usedBytes: used,
-          availableBytes: free,
-          swapUsedBytes,
-          swapTotalBytes
-        };
-      }
-    };
-    function aggregateCpuTimes() {
-      const cpus = node_os.cpus();
-      let user = 0, nice = 0, sys = 0, irq = 0, idle = 0;
-      for (const cpu of cpus) {
-        user += cpu.times.user;
-        nice += cpu.times.nice;
-        sys += cpu.times.sys;
-        irq += cpu.times.irq;
-        idle += cpu.times.idle;
-      }
-      return {
-        user,
-        nice,
-        sys,
-        irq,
-        idle
-      };
-    }
-    function sampleMacMemory(provider) {
-      try {
-        const output = (0, node_child_process.execFileSync)("vm_stat", {
-          timeout: 2e3,
-          encoding: "utf-8"
-        });
-        const pageSize = 16384;
-        const parse4 = (label) => {
-          const match = output.match(new RegExp(`${label}:\\s+(\\d+)`));
-          return match ? parseInt(match[1], 10) * pageSize : 0;
-        };
-        const free = parse4("Pages free");
-        const inactive = parse4("Pages inactive");
-        const purgeable = parse4("Pages purgeable");
-        const speculative = parse4("Pages speculative");
-        const available = free + inactive + purgeable + speculative;
-        const total = node_os.totalmem();
-        const used = total - available;
-        let swapUsedBytes = 0;
-        let swapTotalBytes = 0;
-        try {
-          const swapOut = (0, node_child_process.execFileSync)("sysctl", ["-n", "vm.swapusage"], {
-            timeout: 2e3,
-            encoding: "utf-8"
-          });
-          const totalMatch = swapOut.match(/total\s*=\s*([\d.]+)M/);
-          const usedMatch = swapOut.match(/used\s*=\s*([\d.]+)M/);
-          if (totalMatch) swapTotalBytes = parseFloat(totalMatch[1]) * 1024 * 1024;
-          if (usedMatch) swapUsedBytes = parseFloat(usedMatch[1]) * 1024 * 1024;
-        } catch {
-        }
-        provider._cachedMacMem = {
-          percent: Math.round(used / total * 1e3) / 10,
-          totalBytes: total,
-          usedBytes: used,
-          availableBytes: available,
-          swapUsedBytes,
-          swapTotalBytes
-        };
-      } catch {
-        provider._cachedMacMem = null;
-      }
-    }
-    function getDiskSpaceInternal(dirPath) {
-      return new Promise((resolve, reject) => {
-        node_fs.statfs(dirPath, (err, stats) => {
-          if (err) return reject(err);
-          const totalBytes = stats.blocks * stats.bsize;
-          const availableBytes = stats.bavail * stats.bsize;
-          const usedBytes = totalBytes - stats.bfree * stats.bsize;
-          resolve({
-            path: dirPath,
-            totalBytes,
-            usedBytes,
-            availableBytes,
-            percent: totalBytes > 0 ? Math.round(usedBytes / totalBytes * 1e3) / 10 : 0
-          });
-        });
-      });
-    }
-    async function takeDiskIoSnapshot() {
-      const now = Date.now();
-      if (IS_LINUX) try {
-        const data = node_fs.readFileSync("/proc/diskstats", "utf-8");
-        let readOps = 0, readBytes = 0, writeOps = 0, writeBytes = 0;
-        for (const line of data.split("\n")) {
-          const parts = line.trim().split(/\s+/);
-          if (parts.length < 14) continue;
-          const devName = parts[2];
-          if (/\d+$/.test(devName) && !/^nvme\d+n\d+$/.test(devName)) continue;
-          readOps += parseInt(parts[3], 10) || 0;
-          readBytes += (parseInt(parts[5], 10) || 0) * 512;
-          writeOps += parseInt(parts[7], 10) || 0;
-          writeBytes += (parseInt(parts[9], 10) || 0) * 512;
-        }
-        return {
-          readBytes,
-          writeBytes,
-          readOps,
-          writeOps,
-          timestampMs: now
-        };
-      } catch {
-      }
-      return {
-        readBytes: 0,
-        writeBytes: 0,
-        readOps: 0,
-        writeOps: 0,
-        timestampMs: now
-      };
-    }
-    async function takeNetworkIoSnapshot() {
-      const now = Date.now();
-      if (IS_LINUX) try {
-        const data = node_fs.readFileSync("/proc/net/dev", "utf-8");
-        let rxBytes = 0, txBytes = 0, rxPackets = 0, txPackets = 0, rxErrors = 0, txErrors = 0;
-        for (const line of data.split("\n")) {
-          const match = line.match(/^\s*(\w+):\s+(.+)$/);
-          if (!match) continue;
-          if (match[1] === "lo") continue;
-          const cols = match[2].trim().split(/\s+/);
-          rxBytes += parseInt(cols[0], 10) || 0;
-          rxPackets += parseInt(cols[1], 10) || 0;
-          rxErrors += parseInt(cols[2], 10) || 0;
-          txBytes += parseInt(cols[8], 10) || 0;
-          txPackets += parseInt(cols[9], 10) || 0;
-          txErrors += parseInt(cols[10], 10) || 0;
-        }
-        return {
-          rxBytes,
-          txBytes,
-          rxPackets,
-          txPackets,
-          rxErrors,
-          txErrors,
-          timestampMs: now
-        };
-      } catch {
-      }
-      if (IS_DARWIN) try {
-        const stdout = await execAsync("netstat", ["-ib"]);
-        let rxBytes = 0, txBytes = 0, rxPackets = 0, txPackets = 0, rxErrors = 0, txErrors = 0;
-        for (const line of stdout.split("\n")) {
-          const parts = line.trim().split(/\s+/);
-          if (parts.length < 11) continue;
-          if (parts[0] === "lo0" || parts[0] === "Name") continue;
-          if (!parts[2]?.startsWith("Link#")) continue;
-          rxPackets += parseInt(parts[4], 10) || 0;
-          rxErrors += parseInt(parts[5], 10) || 0;
-          rxBytes += parseInt(parts[6], 10) || 0;
-          txPackets += parseInt(parts[7], 10) || 0;
-          txErrors += parseInt(parts[8], 10) || 0;
-          txBytes += parseInt(parts[9], 10) || 0;
-        }
-        return {
-          rxBytes,
-          txBytes,
-          rxPackets,
-          txPackets,
-          rxErrors,
-          txErrors,
-          timestampMs: now
-        };
-      } catch {
-      }
-      return {
-        rxBytes: 0,
-        txBytes: 0,
-        rxPackets: 0,
-        txPackets: 0,
-        rxErrors: 0,
-        txErrors: 0,
-        timestampMs: now
-      };
-    }
-    async function getCpuTemperatureInternal() {
-      if (IS_LINUX) for (const p of ["/sys/class/thermal/thermal_zone0/temp", "/sys/class/hwmon/hwmon0/temp1_input"]) try {
-        const raw = node_fs.readFileSync(p, "utf-8").trim();
-        const millideg = parseInt(raw, 10);
-        if (!isNaN(millideg)) return Math.round(millideg / 100) / 10;
-      } catch {
-        continue;
-      }
-      if (IS_DARWIN) try {
-        const match = (await execAsync("sudo", [
-          "-n",
-          "powermetrics",
-          "--samplers",
-          "smc",
-          "-i",
-          "1",
-          "-n",
-          "1"
-        ], 3e3)).match(/CPU die temperature:\s+([\d.]+)\s*C/);
-        if (match) return Math.round(parseFloat(match[1]) * 10) / 10;
-      } catch {
-      }
-      return null;
-    }
-    async function getGpuInfoInternal() {
-      if (IS_DARWIN) try {
-        const utilMatch = (await execAsync("ioreg", [
-          "-r",
-          "-d",
-          "1",
-          "-c",
-          "IOAccelerator"
-        ])).match(/"GPU Core Utilization"\s*=\s*(\d+)/);
-        const util = utilMatch ? parseInt(utilMatch[1], 10) : 0;
-        const utilPct = util > 1e3 ? Math.round(util / 1e7) : util;
-        return {
-          utilization: Math.min(100, utilPct),
-          model: "Apple Silicon GPU",
-          memoryUsedBytes: 0,
-          memoryTotalBytes: 0,
-          temperature: null
-        };
-      } catch {
-      }
-      if (IS_LINUX) try {
-        const parts = (await execAsync("nvidia-smi", ["--query-gpu=utilization.gpu,name,memory.used,memory.total,temperature.gpu", "--format=csv,noheader,nounits"])).trim().split(",").map((s) => s.trim());
-        if (parts.length >= 5) return {
-          utilization: parseInt(parts[0], 10) || 0,
-          model: parts[1] ?? "Unknown GPU",
-          memoryUsedBytes: (parseInt(parts[2], 10) || 0) * 1024 * 1024,
-          memoryTotalBytes: (parseInt(parts[3], 10) || 0) * 1024 * 1024,
-          temperature: parseInt(parts[4], 10) || null
-        };
-      } catch {
-      }
-      return null;
-    }
-    function getProcessResources() {
-      let openFds = 0;
-      let threadCount = 0;
-      if (IS_LINUX) {
-        try {
-          openFds = node_fs.readdirSync(`/proc/${process.pid}/fd`).length;
-        } catch {
-        }
-        try {
-          const match = node_fs.readFileSync(`/proc/${process.pid}/status`, "utf-8").match(/Threads:\s+(\d+)/);
-          if (match) threadCount = parseInt(match[1], 10);
-        } catch {
-        }
-      }
-      const nodeProcess = process;
-      return {
-        openFds,
-        threadCount,
-        activeHandles: (nodeProcess._getActiveHandles?.() ?? []).length,
-        activeRequests: (nodeProcess._getActiveRequests?.() ?? []).length
-      };
-    }
-    function getPressure(resource) {
-      if (!IS_LINUX) return null;
-      try {
-        const data = node_fs.readFileSync(`/proc/pressure/${resource}`, "utf-8");
-        const parseLine = (prefix) => {
-          const match = data.match(new RegExp(`${prefix} avg10=(\\d+\\.\\d+) avg60=(\\d+\\.\\d+) avg300=(\\d+\\.\\d+)`));
-          if (!match) return null;
-          return {
-            avg10: parseFloat(match[1]),
-            avg60: parseFloat(match[2]),
-            avg300: parseFloat(match[3])
-          };
-        };
-        const some = parseLine("some");
-        if (!some) return null;
-        return {
-          some,
-          full: parseLine("full")
-        };
-      } catch {
-        return null;
-      }
-    }
-    function execAsync(cmd, args, timeoutMs = 5e3) {
-      return new Promise((resolve, reject) => {
-        (0, node_child_process.execFile)(cmd, args, { timeout: timeoutMs }, (err, stdout) => {
-          if (err) return reject(err);
-          resolve(stdout);
-        });
-      });
-    }
     var LOAD_SERIES_COLLECTION = "metrics:node-load-samples";
     var DEFAULT_MAX_ROWS = 5e5;
     var LOAD_SERIES_COLUMNS = [
@@ -81801,6 +81359,657 @@ var require_native_metrics_addon = __commonJS({
         oldestAtMs
       };
     }
+    var nodeAccessCheck = (path) => (0, node_fs_promises.access)(path, node_fs.constants.X_OK);
+    async function findOnPath(binary, pathEnv, check = nodeAccessCheck) {
+      const dirs = (pathEnv ?? "").split(":").filter((dir) => dir.length > 0);
+      for (const dir of dirs) {
+        const candidate = `${dir}/${binary}`;
+        try {
+          await check(candidate);
+          return candidate;
+        } catch {
+        }
+      }
+      return null;
+    }
+    var NVIDIA_SMI_ARGS = ["--query-gpu=utilization.gpu,name,memory.used,memory.total,temperature.gpu", "--format=csv,noheader,nounits"];
+    async function readNvidiaGpu(deps) {
+      const binary = await deps.findOnPath("nvidia-smi");
+      if (binary === null) return null;
+      let stdout;
+      try {
+        stdout = await deps.exec(binary, NVIDIA_SMI_ARGS);
+      } catch {
+        return null;
+      }
+      const parts = stdout.trim().split(",").map((s) => s.trim());
+      if (parts.length < 5) return null;
+      return {
+        utilization: parseInt(parts[0], 10) || 0,
+        model: parts[1] ?? "Unknown GPU",
+        memoryUsedBytes: (parseInt(parts[2], 10) || 0) * 1024 * 1024,
+        memoryTotalBytes: (parseInt(parts[3], 10) || 0) * 1024 * 1024,
+        temperature: parseInt(parts[4], 10) || null
+      };
+    }
+    var IS_DARWIN = node_os.platform() === "darwin";
+    var IS_LINUX = node_os.platform() === "linux";
+    var NativeMetricsProvider = class {
+      id = "native";
+      cachedSnapshot = null;
+      samplingTimer = null;
+      macMemTimer = null;
+      prevCpu;
+      diagnostics = null;
+      consecutiveSampleErrors = 0;
+      constructor() {
+        this.prevCpu = aggregateCpuTimes();
+      }
+      /**
+      * Optional diagnostics sink for sampling errors. The first failure and
+      * every Nth failure thereafter are reported so a permanently-broken
+      * collector doesn't spam logs but is still observable.
+      */
+      setDiagnostics(diag) {
+        this.diagnostics = diag;
+      }
+      startSampling(intervalMs) {
+        if (IS_DARWIN) {
+          sampleMacMemory(this);
+          this.macMemTimer = setInterval(() => sampleMacMemory(this), 5e3);
+          if (this.macMemTimer.unref) this.macMemTimer.unref();
+        }
+        this.collectSnapshot().then((s) => {
+          this.cachedSnapshot = s;
+          this.consecutiveSampleErrors = 0;
+        }).catch((err) => this.reportSampleError(err));
+        this.samplingTimer = setInterval(() => {
+          this.collectSnapshot().then((s) => {
+            this.cachedSnapshot = s;
+            this.consecutiveSampleErrors = 0;
+          }).catch((err) => this.reportSampleError(err));
+        }, intervalMs);
+        if (this.samplingTimer.unref) this.samplingTimer.unref();
+      }
+      reportSampleError(err) {
+        this.consecutiveSampleErrors++;
+        if (!this.diagnostics) return;
+        if (!(this.consecutiveSampleErrors === 1 || this.consecutiveSampleErrors % 60 === 0)) return;
+        this.diagnostics.warn("metrics-provider sample failed", {
+          consecutiveErrors: this.consecutiveSampleErrors,
+          error: err instanceof Error ? err.message : String(err)
+        });
+      }
+      stopSampling() {
+        if (this.samplingTimer) {
+          clearInterval(this.samplingTimer);
+          this.samplingTimer = null;
+        }
+        if (this.macMemTimer) {
+          clearInterval(this.macMemTimer);
+          this.macMemTimer = null;
+        }
+      }
+      async collectSnapshot() {
+        const cpu = this.sampleCpu();
+        const memory = this.getMemoryInfo();
+        const processInfo = getProcessResources();
+        const [gpu, network, disk, cpuTemp] = await Promise.all([
+          getGpuInfoInternal().catch(() => null),
+          takeNetworkIoSnapshot(),
+          takeDiskIoSnapshot(),
+          getCpuTemperatureInternal().catch(() => null)
+        ]);
+        const snapshot = {
+          cpu,
+          memory,
+          gpu,
+          network,
+          disk,
+          pressure: {
+            cpu: getPressure("cpu"),
+            memory: getPressure("memory"),
+            io: getPressure("io")
+          },
+          process: processInfo,
+          cpuTemperature: cpuTemp,
+          timestampMs: Date.now()
+        };
+        this.cachedSnapshot = snapshot;
+        return snapshot;
+      }
+      async getCached() {
+        return this.cachedSnapshot;
+      }
+      async getCurrent() {
+        const s = this.cachedSnapshot ?? await this.collectSnapshot();
+        const mb = (bytes) => Math.round(bytes / 1024 / 1024);
+        return {
+          cpuPercent: s.cpu.total,
+          memoryPercent: s.memory.percent,
+          memoryUsedMB: mb(s.memory.usedBytes),
+          memoryTotalMB: mb(s.memory.totalBytes),
+          temperature: s.cpuTemperature ?? void 0,
+          gpuPercent: s.gpu?.utilization,
+          gpuMemoryPercent: s.gpu && s.gpu.memoryTotalBytes > 0 ? Math.round(s.gpu.memoryUsedBytes / s.gpu.memoryTotalBytes * 1e3) / 10 : void 0
+        };
+      }
+      async getDiskSpace(input) {
+        return getDiskSpaceInternal(input.dirPath);
+      }
+      async getGpuInfo() {
+        return getGpuInfoInternal();
+      }
+      async getCpuTemperature() {
+        return getCpuTemperatureInternal();
+      }
+      async getProcessStats(input) {
+        const { getPidStats } = await Promise.resolve().then(() => require_resource_monitor_LVE1BoLs()).then((n) => n.resource_monitor_exports);
+        const raw = await getPidStats(input.pids);
+        const result = [];
+        for (const [pid, s] of raw) result.push({
+          pid,
+          cpu: s.cpu,
+          memory: s.memory,
+          privateBytes: s.privateBytes,
+          sharedBytes: s.sharedBytes
+        });
+        return result;
+      }
+      sampleCpu() {
+        const curr = aggregateCpuTimes();
+        const prev = this.prevCpu;
+        this.prevCpu = curr;
+        const dUser = curr.user - prev.user;
+        const dNice = curr.nice - prev.nice;
+        const dSys = curr.sys - prev.sys;
+        const dIrq = curr.irq - prev.irq;
+        const dIdle = curr.idle - prev.idle;
+        const dTotal = dUser + dNice + dSys + dIrq + dIdle;
+        const pct = (v) => dTotal === 0 ? 0 : Math.round(v / dTotal * 1e3) / 10;
+        return {
+          total: pct(dUser + dNice + dSys + dIrq),
+          user: pct(dUser),
+          system: pct(dSys),
+          irq: pct(dIrq),
+          nice: pct(dNice),
+          loadAvg: node_os.loadavg(),
+          cores: node_os.cpus().length
+        };
+      }
+      /** Cached macOS memory (set by sampleMacMemory timer). */
+      _cachedMacMem = null;
+      getMemoryInfo() {
+        const total = node_os.totalmem();
+        if (total === 0) return {
+          percent: 0,
+          totalBytes: 0,
+          usedBytes: 0,
+          availableBytes: 0,
+          swapUsedBytes: 0,
+          swapTotalBytes: 0
+        };
+        if (IS_DARWIN && this._cachedMacMem !== null) return this._cachedMacMem;
+        const free = node_os.freemem();
+        const used = total - free;
+        let swapUsedBytes = 0;
+        let swapTotalBytes = 0;
+        if (IS_LINUX) try {
+          const meminfo = node_fs.readFileSync("/proc/meminfo", "utf-8");
+          const swapTotal = parseInt(meminfo.match(/SwapTotal:\s+(\d+)/)?.[1] ?? "0", 10) * 1024;
+          const swapFree = parseInt(meminfo.match(/SwapFree:\s+(\d+)/)?.[1] ?? "0", 10) * 1024;
+          swapTotalBytes = swapTotal;
+          swapUsedBytes = swapTotal - swapFree;
+        } catch {
+        }
+        return {
+          percent: Math.round((total - free) / total * 1e3) / 10,
+          totalBytes: total,
+          usedBytes: used,
+          availableBytes: free,
+          swapUsedBytes,
+          swapTotalBytes
+        };
+      }
+    };
+    function aggregateCpuTimes() {
+      const cpus = node_os.cpus();
+      let user = 0, nice = 0, sys = 0, irq = 0, idle = 0;
+      for (const cpu of cpus) {
+        user += cpu.times.user;
+        nice += cpu.times.nice;
+        sys += cpu.times.sys;
+        irq += cpu.times.irq;
+        idle += cpu.times.idle;
+      }
+      return {
+        user,
+        nice,
+        sys,
+        irq,
+        idle
+      };
+    }
+    function sampleMacMemory(provider) {
+      try {
+        const output = (0, node_child_process.execFileSync)("vm_stat", {
+          timeout: 2e3,
+          encoding: "utf-8"
+        });
+        const pageSize = 16384;
+        const parse4 = (label) => {
+          const match = output.match(new RegExp(`${label}:\\s+(\\d+)`));
+          return match ? parseInt(match[1], 10) * pageSize : 0;
+        };
+        const free = parse4("Pages free");
+        const inactive = parse4("Pages inactive");
+        const purgeable = parse4("Pages purgeable");
+        const speculative = parse4("Pages speculative");
+        const available = free + inactive + purgeable + speculative;
+        const total = node_os.totalmem();
+        const used = total - available;
+        let swapUsedBytes = 0;
+        let swapTotalBytes = 0;
+        try {
+          const swapOut = (0, node_child_process.execFileSync)("sysctl", ["-n", "vm.swapusage"], {
+            timeout: 2e3,
+            encoding: "utf-8"
+          });
+          const totalMatch = swapOut.match(/total\s*=\s*([\d.]+)M/);
+          const usedMatch = swapOut.match(/used\s*=\s*([\d.]+)M/);
+          if (totalMatch) swapTotalBytes = parseFloat(totalMatch[1]) * 1024 * 1024;
+          if (usedMatch) swapUsedBytes = parseFloat(usedMatch[1]) * 1024 * 1024;
+        } catch {
+        }
+        provider._cachedMacMem = {
+          percent: Math.round(used / total * 1e3) / 10,
+          totalBytes: total,
+          usedBytes: used,
+          availableBytes: available,
+          swapUsedBytes,
+          swapTotalBytes
+        };
+      } catch {
+        provider._cachedMacMem = null;
+      }
+    }
+    function getDiskSpaceInternal(dirPath) {
+      return new Promise((resolve, reject) => {
+        node_fs.statfs(dirPath, (err, stats) => {
+          if (err) return reject(err);
+          const totalBytes = stats.blocks * stats.bsize;
+          const availableBytes = stats.bavail * stats.bsize;
+          const usedBytes = totalBytes - stats.bfree * stats.bsize;
+          resolve({
+            path: dirPath,
+            totalBytes,
+            usedBytes,
+            availableBytes,
+            percent: totalBytes > 0 ? Math.round(usedBytes / totalBytes * 1e3) / 10 : 0
+          });
+        });
+      });
+    }
+    async function takeDiskIoSnapshot() {
+      const now = Date.now();
+      if (IS_LINUX) try {
+        const data = node_fs.readFileSync("/proc/diskstats", "utf-8");
+        let readOps = 0, readBytes = 0, writeOps = 0, writeBytes = 0;
+        for (const line of data.split("\n")) {
+          const parts = line.trim().split(/\s+/);
+          if (parts.length < 14) continue;
+          const devName = parts[2];
+          if (/\d+$/.test(devName) && !/^nvme\d+n\d+$/.test(devName)) continue;
+          readOps += parseInt(parts[3], 10) || 0;
+          readBytes += (parseInt(parts[5], 10) || 0) * 512;
+          writeOps += parseInt(parts[7], 10) || 0;
+          writeBytes += (parseInt(parts[9], 10) || 0) * 512;
+        }
+        return {
+          readBytes,
+          writeBytes,
+          readOps,
+          writeOps,
+          timestampMs: now
+        };
+      } catch {
+      }
+      return {
+        readBytes: 0,
+        writeBytes: 0,
+        readOps: 0,
+        writeOps: 0,
+        timestampMs: now
+      };
+    }
+    async function takeNetworkIoSnapshot() {
+      const now = Date.now();
+      if (IS_LINUX) try {
+        const data = node_fs.readFileSync("/proc/net/dev", "utf-8");
+        let rxBytes = 0, txBytes = 0, rxPackets = 0, txPackets = 0, rxErrors = 0, txErrors = 0;
+        for (const line of data.split("\n")) {
+          const match = line.match(/^\s*(\w+):\s+(.+)$/);
+          if (!match) continue;
+          if (match[1] === "lo") continue;
+          const cols = match[2].trim().split(/\s+/);
+          rxBytes += parseInt(cols[0], 10) || 0;
+          rxPackets += parseInt(cols[1], 10) || 0;
+          rxErrors += parseInt(cols[2], 10) || 0;
+          txBytes += parseInt(cols[8], 10) || 0;
+          txPackets += parseInt(cols[9], 10) || 0;
+          txErrors += parseInt(cols[10], 10) || 0;
+        }
+        return {
+          rxBytes,
+          txBytes,
+          rxPackets,
+          txPackets,
+          rxErrors,
+          txErrors,
+          timestampMs: now
+        };
+      } catch {
+      }
+      if (IS_DARWIN) try {
+        const stdout = await execAsync("netstat", ["-ib"]);
+        let rxBytes = 0, txBytes = 0, rxPackets = 0, txPackets = 0, rxErrors = 0, txErrors = 0;
+        for (const line of stdout.split("\n")) {
+          const parts = line.trim().split(/\s+/);
+          if (parts.length < 11) continue;
+          if (parts[0] === "lo0" || parts[0] === "Name") continue;
+          if (!parts[2]?.startsWith("Link#")) continue;
+          rxPackets += parseInt(parts[4], 10) || 0;
+          rxErrors += parseInt(parts[5], 10) || 0;
+          rxBytes += parseInt(parts[6], 10) || 0;
+          txPackets += parseInt(parts[7], 10) || 0;
+          txErrors += parseInt(parts[8], 10) || 0;
+          txBytes += parseInt(parts[9], 10) || 0;
+        }
+        return {
+          rxBytes,
+          txBytes,
+          rxPackets,
+          txPackets,
+          rxErrors,
+          txErrors,
+          timestampMs: now
+        };
+      } catch {
+      }
+      return {
+        rxBytes: 0,
+        txBytes: 0,
+        rxPackets: 0,
+        txPackets: 0,
+        rxErrors: 0,
+        txErrors: 0,
+        timestampMs: now
+      };
+    }
+    async function getCpuTemperatureInternal() {
+      if (IS_LINUX) for (const p of ["/sys/class/thermal/thermal_zone0/temp", "/sys/class/hwmon/hwmon0/temp1_input"]) try {
+        const raw = node_fs.readFileSync(p, "utf-8").trim();
+        const millideg = parseInt(raw, 10);
+        if (!isNaN(millideg)) return Math.round(millideg / 100) / 10;
+      } catch {
+        continue;
+      }
+      if (IS_DARWIN) try {
+        const match = (await execAsync("sudo", [
+          "-n",
+          "powermetrics",
+          "--samplers",
+          "smc",
+          "-i",
+          "1",
+          "-n",
+          "1"
+        ], 3e3)).match(/CPU die temperature:\s+([\d.]+)\s*C/);
+        if (match) return Math.round(parseFloat(match[1]) * 10) / 10;
+      } catch {
+      }
+      return null;
+    }
+    async function getGpuInfoInternal() {
+      if (IS_DARWIN) try {
+        const utilMatch = (await execAsync("ioreg", [
+          "-r",
+          "-d",
+          "1",
+          "-c",
+          "IOAccelerator"
+        ])).match(/"GPU Core Utilization"\s*=\s*(\d+)/);
+        const util = utilMatch ? parseInt(utilMatch[1], 10) : 0;
+        const utilPct = util > 1e3 ? Math.round(util / 1e7) : util;
+        return {
+          utilization: Math.min(100, utilPct),
+          model: "Apple Silicon GPU",
+          memoryUsedBytes: 0,
+          memoryTotalBytes: 0,
+          temperature: null
+        };
+      } catch {
+      }
+      if (IS_LINUX) return readNvidiaGpu({
+        findOnPath: (binary) => findOnPath(binary, process.env["PATH"]),
+        exec: (command, args) => execAsync(command, [...args])
+      });
+      return null;
+    }
+    function getProcessResources() {
+      let openFds = 0;
+      let threadCount = 0;
+      if (IS_LINUX) {
+        try {
+          openFds = node_fs.readdirSync(`/proc/${process.pid}/fd`).length;
+        } catch {
+        }
+        try {
+          const match = node_fs.readFileSync(`/proc/${process.pid}/status`, "utf-8").match(/Threads:\s+(\d+)/);
+          if (match) threadCount = parseInt(match[1], 10);
+        } catch {
+        }
+      }
+      const nodeProcess = process;
+      return {
+        openFds,
+        threadCount,
+        activeHandles: (nodeProcess._getActiveHandles?.() ?? []).length,
+        activeRequests: (nodeProcess._getActiveRequests?.() ?? []).length
+      };
+    }
+    function getPressure(resource) {
+      if (!IS_LINUX) return null;
+      try {
+        const data = node_fs.readFileSync(`/proc/pressure/${resource}`, "utf-8");
+        const parseLine = (prefix) => {
+          const match = data.match(new RegExp(`${prefix} avg10=(\\d+\\.\\d+) avg60=(\\d+\\.\\d+) avg300=(\\d+\\.\\d+)`));
+          if (!match) return null;
+          return {
+            avg10: parseFloat(match[1]),
+            avg60: parseFloat(match[2]),
+            avg300: parseFloat(match[3])
+          };
+        };
+        const some = parseLine("some");
+        if (!some) return null;
+        return {
+          some,
+          full: parseLine("full")
+        };
+      } catch {
+        return null;
+      }
+    }
+    function execAsync(cmd, args, timeoutMs = 5e3) {
+      return new Promise((resolve, reject) => {
+        (0, node_child_process.execFile)(cmd, args, { timeout: timeoutMs }, (err, stdout) => {
+          if (err) return reject(err);
+          resolve(stdout);
+        });
+      });
+    }
+    function parseProcStat(line) {
+      const close = line.lastIndexOf(")");
+      const open = line.indexOf("(");
+      if (close < 0 || open < 0 || close < open) return null;
+      const pid = Number(line.slice(0, open).trim());
+      const comm = line.slice(open + 1, close);
+      const rest = line.slice(close + 1).trim().split(/\s+/);
+      const state = rest[0];
+      const ppid = Number(rest[1]);
+      const pgid = Number(rest[2]);
+      const utime = Number(rest[11]);
+      const stime = Number(rest[12]);
+      const startTicks = Number(rest[19]);
+      const rssPages = Number(rest[21]);
+      if (state === void 0 || state === "") return null;
+      if (![
+        pid,
+        ppid,
+        pgid,
+        utime,
+        stime,
+        startTicks,
+        rssPages
+      ].every(Number.isFinite)) return null;
+      return {
+        pid,
+        comm,
+        state,
+        ppid,
+        pgid,
+        ticks: utime + stime,
+        startTicks,
+        rssPages
+      };
+    }
+    function statusKb(status, key) {
+      const match = status.match(new RegExp(`^${key}:\\s+(\\d+)`, "m"));
+      return match ? parseInt(match[1], 10) * 1024 : void 0;
+    }
+    function parseProcStatusRss(status) {
+      return {
+        rssBytes: statusKb(status, "VmRSS"),
+        privateBytes: statusKb(status, "RssAnon"),
+        sharedBytes: statusKb(status, "RssFile")
+      };
+    }
+    function elapsedSecSince(input) {
+      return Math.max(0, Math.floor(input.uptimeSec - input.startTicks / 100));
+    }
+    function lifetimeCpuPercent(input) {
+      const elapsedSec = input.uptimeSec - input.startTicks / 100;
+      if (!(elapsedSec > 0)) return 0;
+      const cpuSec = input.ticks / 100;
+      return Math.round(cpuSec / elapsedSec * 1e3) / 10;
+    }
+    var PID_RE = /^\d+$/;
+    var nodeProcReader = {
+      listPids: async () => (await (0, node_fs_promises.readdir)("/proc")).filter((entry) => PID_RE.test(entry)).map((entry) => Number(entry)),
+      readStat: (pid) => (0, node_fs_promises.readFile)(`/proc/${pid}/stat`, "latin1"),
+      readStatus: (pid) => (0, node_fs_promises.readFile)(`/proc/${pid}/status`, "latin1"),
+      readCmdline: (pid) => (0, node_fs_promises.readFile)(`/proc/${pid}/cmdline`, "latin1"),
+      readUptimeSec: async () => {
+        const [first] = (await (0, node_fs_promises.readFile)("/proc/uptime", "latin1")).trim().split(/\s+/);
+        const seconds = Number(first);
+        if (!Number.isFinite(seconds)) throw new Error(`/proc/uptime unreadable: ${String(first)}`);
+        return seconds;
+      }
+    };
+    function commandFromCmdline(cmdline, comm) {
+      const joined = cmdline.split("\0").filter((part) => part.length > 0).join(" ");
+      return joined.length > 0 ? joined : `[${comm}]`;
+    }
+    var execFileAsync = (0, node_util.promisify)(node_child_process.execFile);
+    async function readProcRow(pid, uptimeSec, reader) {
+      let stat;
+      let cmdline;
+      let status;
+      try {
+        [stat, cmdline, status] = await Promise.all([
+          reader.readStat(pid),
+          reader.readCmdline(pid),
+          reader.readStatus(pid)
+        ]);
+      } catch {
+        return null;
+      }
+      const parsed = parseProcStat(stat);
+      if (parsed === null) return null;
+      const rss = parseProcStatusRss(status);
+      return {
+        pid: parsed.pid,
+        ppid: parsed.ppid,
+        pgid: parsed.pgid,
+        cpuPercent: lifetimeCpuPercent({
+          ticks: parsed.ticks,
+          startTicks: parsed.startTicks,
+          uptimeSec
+        }),
+        memoryRssBytes: rss.rssBytes ?? 0,
+        uptimeSec: elapsedSecSince({
+          startTicks: parsed.startTicks,
+          uptimeSec
+        }),
+        command: commandFromCmdline(cmdline, parsed.comm)
+      };
+    }
+    async function readProcProcessTable(reader = nodeProcReader) {
+      const [pids, uptimeSec] = await Promise.all([reader.listPids(), reader.readUptimeSec()]);
+      return (await Promise.all(pids.map((pid) => readProcRow(pid, uptimeSec, reader)))).filter((row) => row !== null);
+    }
+    function parseEtime(etime) {
+      const dashParts = etime.split("-");
+      let days = 0;
+      let hms = etime;
+      if (dashParts.length === 2) {
+        days = parseInt(dashParts[0], 10) || 0;
+        hms = dashParts[1];
+      }
+      const parts = hms.split(":").map((p) => parseInt(p, 10) || 0);
+      let hours = 0;
+      let minutes = 0;
+      let seconds = 0;
+      if (parts.length === 3) [hours, minutes, seconds] = parts;
+      else if (parts.length === 2) [minutes, seconds] = parts;
+      else if (parts.length === 1) [seconds] = parts;
+      return days * 86400 + hours * 3600 + minutes * 60 + seconds;
+    }
+    var PS_ROW_RE = /^(\d+)\s+(\d+)\s+(\d+)\s+([\d.]+)\s+(\d+)\s+(\S+)\s+(.+)$/;
+    function parsePsTable(stdout) {
+      const rows = [];
+      for (const line of stdout.split("\n")) {
+        const match = line.trim().match(PS_ROW_RE);
+        if (!match) continue;
+        const [, pidS, ppidS, pgidS, cpuS, rssS, etimeS, command] = match;
+        rows.push({
+          pid: parseInt(pidS, 10),
+          ppid: parseInt(ppidS, 10),
+          pgid: parseInt(pgidS, 10),
+          cpuPercent: Math.round(parseFloat(cpuS) * 10) / 10,
+          memoryRssBytes: parseInt(rssS, 10) * 1024,
+          uptimeSec: parseEtime(etimeS),
+          command
+        });
+      }
+      return rows;
+    }
+    async function spawnPsTable() {
+      const { stdout } = await execFileAsync("ps", ["-eo", "pid=,ppid=,pgid=,pcpu=,rss=,etime=,command="], {
+        timeout: 5e3,
+        maxBuffer: 8 * 1024 * 1024
+      });
+      return parsePsTable(stdout);
+    }
+    var defaultDeps = {
+      platform: (0, node_os.platform)(),
+      reader: nodeProcReader,
+      spawnPs: spawnPsTable
+    };
+    function readProcessTable(deps = defaultDeps) {
+      return deps.platform === "linux" ? readProcProcessTable(deps.reader) : deps.spawnPs();
+    }
     var CAMSTACK_CMD_RE = /(camstack|tsx\s+watch\s.*launcher\.ts|packages\/agent\/dist\/cli\.js|inference_pool\.py|bench-(inference-pool|nodeav)|node .*\/packages\/)/;
     function classifyProcess(pid, selfPid, managed) {
       if (pid === selfPid) return "root";
@@ -81933,7 +82142,6 @@ var require_native_metrics_addon = __commonJS({
         return out;
       }
     };
-    var execFileAsync = (0, node_util.promisify)(node_child_process.execFile);
     var METRICS_SNAPSHOT_INTERVAL_MS = 5e3;
     var METRICS_SNAPSHOT_HEARTBEAT_MS = 6e4;
     function coarsenResourcesSnapshot(snapshot) {
@@ -82241,7 +82449,23 @@ var require_native_metrics_addon = __commonJS({
           } });
         }
       }
-      /** (Re)arm the fixed-cadence process-tree timer at the configured interval. */
+      /**
+      * (Re)arm the process-tree timer at the configured interval.
+      *
+      * The process-tree snapshot is FIXED-CADENCE, and its cadence is the
+      * operator's `loadSeriesCadenceSec` (5-60 s, 10 by default).
+      *
+      * It used to emit only ON A CHANGE, with a 60 s fallback heartbeat, and the
+      * dedup is gone rather than tuned. A conditional emit makes a hole in the
+      * series mean two different things — "nothing changed" and "nobody reported"
+      * — and telling those apart is the entire reason an operator opens this chart
+      * after a spike. Now a gap means exactly one thing.
+      *
+      * It is not free: the emit rate is deterministic, so the durable table's row
+      * count is too (nodes x processes / cadence, no discount for a quiet fleet).
+      * The measured cost of that is in `docs/architecture/load-ledger.md`, and it
+      * is why the retention default is six hours rather than three days.
+      */
       startProcessSnapshotTimer() {
         if (this.processSnapshotTimer) clearInterval(this.processSnapshotTimer);
         this.processSnapshotTimer = setInterval(() => this.emitProcessesSnapshot(), this.loadConfig.cadenceSec * 1e3);
@@ -82304,7 +82528,8 @@ var require_native_metrics_addon = __commonJS({
       /**
       * Emit one `metrics.node-processes-snapshot` for this node.
       *
-      * Heavy — a full OS `ps -eo` scan plus a `$process.list` broker call — and
+      * Heavy — a full process-table read (`/proc` on Linux, `ps -eo` elsewhere;
+      * `proc-process-table.ts`) plus a `$process.list` broker call — and
       * UNCONDITIONAL. The change-detection that used to guard it is gone: with a
       * fixed cadence a missing interval means exactly one thing, and that is the
       * property an operator investigating a spike is actually looking for.
@@ -82408,34 +82633,18 @@ var require_native_metrics_addon = __commonJS({
           cpuSplits
         });
       }
-      /** Raw `ps` scan returning every pid + command + resource stats. */
+      /**
+      * Every pid + command + resource stats on this node.
+      *
+      * From `/proc` on Linux — no fork. This used to be a `ps -eo` child on every
+      * tick, i.e. a synchronous `fork()` of hub-main at p50 91 ms (D441, D452).
+      * `ps` remains the source only on a platform without `/proc`.
+      */
       async runPs() {
         try {
-          const { stdout } = await execFileAsync("ps", ["-eo", "pid=,ppid=,pgid=,pcpu=,rss=,etime=,command="], {
-            timeout: 5e3,
-            maxBuffer: 8 * 1024 * 1024
-          });
-          const lines = stdout.split("\n");
-          const rows = [];
-          for (const line of lines) {
-            const trimmed = line.trim();
-            if (!trimmed) continue;
-            const match = trimmed.match(/^(\d+)\s+(\d+)\s+(\d+)\s+([\d.]+)\s+(\d+)\s+(\S+)\s+(.+)$/);
-            if (!match) continue;
-            const [, pidS, ppidS, pgidS, cpuS, rssS, etimeS, command] = match;
-            rows.push({
-              pid: parseInt(pidS, 10),
-              ppid: parseInt(ppidS, 10),
-              pgid: parseInt(pgidS, 10),
-              cpuPercent: Math.round(parseFloat(cpuS) * 10) / 10,
-              memoryRssBytes: parseInt(rssS, 10) * 1024,
-              uptimeSec: parseEtime(etimeS),
-              command
-            });
-          }
-          return rows;
+          return await readProcessTable();
         } catch (err) {
-          this.ctx.logger.warn("ps scan failed", { meta: { error: err instanceof Error ? err.message : String(err) } });
+          this.ctx.logger.warn("process table read failed", { meta: { error: err instanceof Error ? err.message : String(err) } });
           return [];
         }
       }
@@ -82520,23 +82729,12 @@ var require_native_metrics_addon = __commonJS({
         }] });
       }
     };
-    function parseEtime(etime) {
-      const dashParts = etime.split("-");
-      let days = 0;
-      let hms = etime;
-      if (dashParts.length === 2) {
-        days = parseInt(dashParts[0], 10) || 0;
-        hms = dashParts[1];
-      }
-      const parts = hms.split(":").map((p) => parseInt(p, 10) || 0);
-      let hours = 0, minutes = 0, seconds = 0;
-      if (parts.length === 3) [hours, minutes, seconds] = parts;
-      else if (parts.length === 2) [minutes, seconds] = parts;
-      else if (parts.length === 1) [seconds] = parts;
-      return days * 86400 + hours * 3600 + minutes * 60 + seconds;
-    }
     exports.NativeMetricsProvider = NativeMetricsProvider;
     exports.default = NativeMetricsAddon;
+    exports.lifetimeCpuPercent = lifetimeCpuPercent;
+    exports.nodeProcReader = nodeProcReader;
+    exports.parseProcStat = parseProcStat;
+    exports.parseProcStatusRss = parseProcStatusRss;
   }
 });
 
@@ -82549,7 +82747,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BOlMCOeT();
+    var require_dist10 = require_dist_B17W9ngu();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -82882,6 +83080,117 @@ var require_filesystem_storage_addon = __commonJS({
   }
 });
 
+// ../system/dist/wal-checkpoint-policy-CCJZngds.js
+var require_wal_checkpoint_policy_CCJZngds = __commonJS({
+  "../system/dist/wal-checkpoint-policy-CCJZngds.js"(exports) {
+    "use strict";
+    var WAL_CHECKPOINT_MAX_INTERVAL_MS = 6e4;
+    var WAL_CHECKPOINT_POLL_MS = 1e3;
+    var WAL_CHECKPOINT_SLOW_MS = 1e3;
+    function decideCheckpoint(input) {
+      const intervalDue = input.sinceLastRunMs >= WAL_CHECKPOINT_MAX_INTERVAL_MS;
+      if (input.mxFrame === null || input.nBackfill === null) return intervalDue ? {
+        run: true,
+        reason: "unknown-interval",
+        pendingFrames: null
+      } : {
+        run: false,
+        reason: "unknown-below-interval",
+        pendingFrames: null
+      };
+      const pendingFrames = Math.max(0, input.mxFrame - input.nBackfill);
+      if (pendingFrames === 0) return {
+        run: false,
+        reason: "nothing-pending",
+        pendingFrames
+      };
+      if (pendingFrames >= 1e3) return {
+        run: true,
+        reason: "threshold",
+        pendingFrames
+      };
+      if (intervalDue) return {
+        run: true,
+        reason: "interval",
+        pendingFrames
+      };
+      return {
+        run: false,
+        reason: "below-threshold",
+        pendingFrames
+      };
+    }
+    var WAL_INDEX_MXFRAME_OFFSET = 16;
+    var WAL_INDEX_HDR_SIZE = 48;
+    var WAL_INDEX_NBACKFILL_OFFSET = 96;
+    function parseWalIndexHeader(buffer) {
+      if (buffer.length < 100) return null;
+      const copy1 = buffer.subarray(0, WAL_INDEX_HDR_SIZE);
+      const copy2 = buffer.subarray(WAL_INDEX_HDR_SIZE, WAL_INDEX_HDR_SIZE * 2);
+      if (!copy1.equals(copy2)) return null;
+      return {
+        mxFrame: buffer.readUInt32LE(WAL_INDEX_MXFRAME_OFFSET),
+        nBackfill: buffer.readUInt32LE(WAL_INDEX_NBACKFILL_OFFSET)
+      };
+    }
+    function isRecord(value) {
+      return typeof value === "object" && value !== null;
+    }
+    function isWorkerMessage(value) {
+      if (!isRecord(value)) return false;
+      switch (value["kind"]) {
+        case "ready":
+          return true;
+        case "failed":
+          return typeof value["error"] === "string";
+        case "checkpointed":
+          return typeof value["reason"] === "string" && (typeof value["pendingFrames"] === "number" || value["pendingFrames"] === null) && typeof value["walFrames"] === "number" && typeof value["checkpointedFrames"] === "number" && typeof value["busy"] === "boolean" && typeof value["ms"] === "number";
+        default:
+          return false;
+      }
+    }
+    function isWorkerStop(value) {
+      return isRecord(value) && value["kind"] === "stop";
+    }
+    Object.defineProperty(exports, "WAL_CHECKPOINT_POLL_MS", {
+      enumerable: true,
+      get: function() {
+        return WAL_CHECKPOINT_POLL_MS;
+      }
+    });
+    Object.defineProperty(exports, "WAL_CHECKPOINT_SLOW_MS", {
+      enumerable: true,
+      get: function() {
+        return WAL_CHECKPOINT_SLOW_MS;
+      }
+    });
+    Object.defineProperty(exports, "decideCheckpoint", {
+      enumerable: true,
+      get: function() {
+        return decideCheckpoint;
+      }
+    });
+    Object.defineProperty(exports, "isWorkerMessage", {
+      enumerable: true,
+      get: function() {
+        return isWorkerMessage;
+      }
+    });
+    Object.defineProperty(exports, "isWorkerStop", {
+      enumerable: true,
+      get: function() {
+        return isWorkerStop;
+      }
+    });
+    Object.defineProperty(exports, "parseWalIndexHeader", {
+      enumerable: true,
+      get: function() {
+        return parseWalIndexHeader;
+      }
+    });
+  }
+});
+
 // ../../node_modules/better-sqlite3/lib/util.js
 var require_util2 = __commonJS({
   "../../node_modules/better-sqlite3/lib/util.js"(exports) {
@@ -83665,13 +83974,17 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BOlMCOeT();
-    var require_retired_settings_keys = require_retired_settings_keys_xEAlYnv7();
+    var require_dist10 = require_dist_B17W9ngu();
+    var require_retired_settings_keys = require_retired_settings_keys_CjvB7Etx();
+    var require_wal_checkpoint_policy = require_wal_checkpoint_policy_CCJZngds();
     var node_crypto = __require("crypto");
+    var node_path = __require("path");
+    node_path = require_chunk.__toESM(node_path);
     var node_fs = __require("fs");
     var node_module = __require("module");
     var better_sqlite3 = require_lib();
     better_sqlite3 = require_chunk.__toESM(better_sqlite3);
+    var node_worker_threads = __require("worker_threads");
     var memo = /* @__PURE__ */ new Map();
     function sqlShape(sql, collection) {
       const key = `${collection}\0${sql}`;
@@ -83900,6 +84213,7 @@ var require_sqlite_settings_addon = __commonJS({
     var SQLITE_PAGE_CACHE_FLOOR_KIB = -65536;
     var SQLITE_MMAP_FLOOR_BYTES = 268435456;
     var SQLITE_JOURNAL_SIZE_LIMIT_BYTES = 67108864;
+    var SQLITE_WAL_AUTOCHECKPOINT_BOUND_PAGES = 1e4;
     var MIB = 1048576;
     var MMAP_SIZE_MULTIPLE = 1.25;
     var SQLITE_MMAP_CEILING_BYTES = 2 * 1024 * MIB;
@@ -84331,6 +84645,7 @@ var require_sqlite_settings_addon = __commonJS({
         this.db.pragma(`cache_size = ${pageCacheKib}`);
         this.db.pragma(`mmap_size = ${mmapSizeBytes}`);
         this.db.pragma(`journal_size_limit = ${SQLITE_JOURNAL_SIZE_LIMIT_BYTES}`);
+        this.db.pragma(`wal_autocheckpoint = ${SQLITE_WAL_AUTOCHECKPOINT_BOUND_PAGES}`);
         const occupancy = sqliteOccupancy({
           pageCount: this.readPragmaNumber("page_count"),
           freelistCount: this.readPragmaNumber("freelist_count"),
@@ -85719,6 +86034,154 @@ var require_sqlite_settings_addon = __commonJS({
       if (modelId !== null) out["modelId"] = modelId;
       return out;
     }
+    var EMPTY_STATS = {
+      checkpoints: 0,
+      frames: 0,
+      slow: 0,
+      maxMs: 0,
+      totalMs: 0,
+      busy: 0
+    };
+    function defaultWorkerPath() {
+      const require_ = (0, node_module.createRequire)(__require("url").pathToFileURL(__filename).href);
+      const packageRoot = node_path.default.dirname(require_.resolve("@camstack/system/package.json"));
+      return node_path.default.join(packageRoot, "dist", "wal-checkpoint-worker.js");
+    }
+    var WalCheckpointer = class {
+      dbPath;
+      logger;
+      pollMs;
+      slowMs;
+      summaryIntervalMs;
+      spawn;
+      worker = null;
+      summaryTimer = null;
+      stopping = false;
+      statsValue = EMPTY_STATS;
+      constructor(options) {
+        this.dbPath = options.dbPath;
+        this.logger = options.logger;
+        this.pollMs = options.pollMs ?? 1e3;
+        this.slowMs = options.slowMs ?? 1e3;
+        this.summaryIntervalMs = options.summaryIntervalMs ?? 6e5;
+        const workerPath = options.workerPath ?? defaultWorkerPath();
+        const execArgv = options.workerExecArgv;
+        this.spawn = options.workerFactory ?? ((workerData) => new node_worker_threads.Worker(workerPath, {
+          workerData,
+          ...execArgv !== void 0 ? { execArgv: [...execArgv] } : {}
+        }));
+      }
+      /** Totals since the last summary line. */
+      get stats() {
+        return this.statsValue;
+      }
+      isRunning() {
+        return this.worker !== null;
+      }
+      start() {
+        if (this.worker !== null) return;
+        this.stopping = false;
+        const worker2 = this.spawn({
+          dbPath: this.dbPath,
+          pollMs: this.pollMs
+        });
+        this.worker = worker2;
+        worker2.on("message", (message) => this.onMessage(message));
+        worker2.on("error", (err) => {
+          this.logger.error("WAL checkpoint worker threw", { meta: { error: require_dist10.errMsg(err) } });
+        });
+        worker2.on("exit", (code) => this.onExit(code));
+        const summaryTimer = setInterval(() => this.logSummary(), this.summaryIntervalMs);
+        summaryTimer.unref?.();
+        this.summaryTimer = summaryTimer;
+        this.logger.info("WAL checkpoint worker armed", { meta: {
+          pollMs: this.pollMs,
+          slowMs: this.slowMs
+        } });
+      }
+      /** Ask the thread to close its connection and exit; resolves when it has. */
+      async stop() {
+        const worker2 = this.worker;
+        if (worker2 === null) return;
+        this.stopping = true;
+        if (this.summaryTimer !== null) {
+          clearInterval(this.summaryTimer);
+          this.summaryTimer = null;
+        }
+        const stop = { kind: "stop" };
+        const exited = new Promise((resolve) => worker2.once("exit", () => resolve()));
+        worker2.postMessage(stop);
+        await exited;
+        this.worker = null;
+      }
+      /** One message off the port. Public so the spec can feed it directly. */
+      onMessage(message) {
+        if (!require_wal_checkpoint_policy.isWorkerMessage(message)) {
+          this.logger.warn("WAL checkpoint worker sent an unreadable message", { meta: { message: String(message) } });
+          return;
+        }
+        this.handle(message);
+      }
+      handle(message) {
+        switch (message.kind) {
+          case "ready":
+            return;
+          case "failed":
+            this.logger.warn("WAL checkpoint failed on the worker", { meta: { error: message.error } });
+            return;
+          case "checkpointed":
+            this.record(message);
+            return;
+        }
+      }
+      record(report) {
+        const slow = report.ms >= this.slowMs;
+        const prev = this.statsValue;
+        this.statsValue = {
+          checkpoints: prev.checkpoints + 1,
+          frames: prev.frames + report.checkpointedFrames,
+          slow: prev.slow + (slow ? 1 : 0),
+          maxMs: Math.max(prev.maxMs, report.ms),
+          totalMs: prev.totalMs + report.ms,
+          busy: prev.busy + (report.busy ? 1 : 0)
+        };
+        if (slow) this.logger.warn("WAL checkpoint held the worker", { meta: {
+          ms: report.ms,
+          reason: report.reason,
+          pendingFrames: report.pendingFrames,
+          walFrames: report.walFrames,
+          checkpointedFrames: report.checkpointedFrames,
+          busy: report.busy
+        } });
+      }
+      logSummary() {
+        const stats = this.statsValue;
+        this.statsValue = EMPTY_STATS;
+        if (stats.checkpoints === 0) return;
+        this.logger.info("WAL checkpoints on the worker", { meta: {
+          windowMs: this.summaryIntervalMs,
+          checkpoints: stats.checkpoints,
+          frames: stats.frames,
+          slow: stats.slow,
+          maxMs: stats.maxMs,
+          totalMs: stats.totalMs,
+          busy: stats.busy
+        } });
+      }
+      onExit(code) {
+        const wasStopping = this.stopping;
+        this.worker = null;
+        if (this.summaryTimer !== null) {
+          clearInterval(this.summaryTimer);
+          this.summaryTimer = null;
+        }
+        if (wasStopping) return;
+        this.logger.error("WAL checkpoint worker died \u2014 the engine autocheckpoint bound is now the only checkpoint", { meta: {
+          exitCode: code,
+          dbPath: this.dbPath
+        } });
+      }
+    };
     var WAL_HIGH_WATER_BYTES = 67108864;
     var WAL_IDLE_QUIET_MS = 3e4;
     var WAL_CHECKPOINT_BUSY_TIMEOUT_MS = 250;
@@ -85869,6 +86332,7 @@ var require_sqlite_settings_addon = __commonJS({
       backend = null;
       vectorIndex = null;
       walMaintenance = null;
+      walCheckpointer = null;
       constructor() {
         super({});
       }
@@ -85941,6 +86405,12 @@ var require_sqlite_settings_addon = __commonJS({
           maintenance.start();
           this.walMaintenance = maintenance;
         }
+        const checkpointer = new WalCheckpointer({
+          dbPath,
+          logger: this.ctx.logger.child("WalCheckpoint")
+        });
+        checkpointer.start();
+        this.walCheckpointer = checkpointer;
         this.ctx.logger.info("Initialized successfully");
         return [{
           capability: require_dist10.dataStoreProviderCapability,
@@ -85953,6 +86423,8 @@ var require_sqlite_settings_addon = __commonJS({
       async onShutdown() {
         this.walMaintenance?.stop();
         this.walMaintenance = null;
+        await this.walCheckpointer?.stop();
+        this.walCheckpointer = null;
         await this.backend?.shutdown();
       }
       getBackend() {
@@ -86170,7 +86642,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BOlMCOeT();
+    var require_dist10 = require_dist_B17W9ngu();
     var require_hub_cap_forward = require_hub_cap_forward_DmHNjbB0();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -89820,7 +90292,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BOlMCOeT();
+    var require_dist10 = require_dist_B17W9ngu();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -107881,7 +108353,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BOlMCOeT();
+    var require_dist10 = require_dist_B17W9ngu();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -108018,17 +108490,17 @@ var require_winston_logging = __commonJS({
   }
 });
 
-// ../system/dist/event-loop-stall-monitor-DM9OAzy8.js
-var require_event_loop_stall_monitor_DM9OAzy8 = __commonJS({
-  "../system/dist/event-loop-stall-monitor-DM9OAzy8.js"(exports) {
+// ../system/dist/event-loop-stall-monitor-CAsHdMwP.js
+var require_event_loop_stall_monitor_CAsHdMwP = __commonJS({
+  "../system/dist/event-loop-stall-monitor-CAsHdMwP.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
     var node_crypto = __require("crypto");
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
-    var node_util = __require("util");
     var node_fs = __require("fs");
     node_fs = require_chunk.__toESM(node_fs);
+    var node_util = __require("util");
     var node_http = __require("http");
     var node_zlib = __require("zlib");
     var node_perf_hooks = __require("perf_hooks");
@@ -109004,19 +109476,19 @@ var require_event_loop_stall_monitor_DM9OAzy8 = __commonJS({
   }
 });
 
-// ../system/dist/tls-BxQlomxd.js
-var require_tls_BxQlomxd = __commonJS({
-  "../system/dist/tls-BxQlomxd.js"(exports) {
+// ../system/dist/tls-BFs4PzoW.js
+var require_tls_BFs4PzoW = __commonJS({
+  "../system/dist/tls-BFs4PzoW.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
-    var node_child_process = __require("child_process");
-    var node_util = __require("util");
     var node_fs = __require("fs");
+    var node_child_process = __require("child_process");
     var node_os = __require("os");
     node_os = require_chunk.__toESM(node_os);
+    var node_util = __require("util");
     var node_http = __require("http");
     var node_net = __require("net");
     var DEFAULT_HTTP_PORT = 4480;
@@ -120515,9 +120987,9 @@ var require_dist2 = __commonJS({
   }
 });
 
-// ../system/dist/manifest-system-deps-Bo92lg5u.js
-var require_manifest_system_deps_Bo92lg5u = __commonJS({
-  "../system/dist/manifest-system-deps-Bo92lg5u.js"(exports) {
+// ../system/dist/manifest-system-deps-g_nK0xsF.js
+var require_manifest_system_deps_g_nK0xsF = __commonJS({
+  "../system/dist/manifest-system-deps-g_nK0xsF.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
     require_hub_cap_forward_DmHNjbB0();
@@ -120527,12 +120999,12 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
-    var node_child_process = __require("child_process");
-    var node_util = __require("util");
     var node_fs = __require("fs");
     node_fs = require_chunk.__toESM(node_fs);
+    var node_child_process = __require("child_process");
     var node_os = __require("os");
     node_os = require_chunk.__toESM(node_os);
+    var node_util = __require("util");
     var node_http = __require("http");
     var node_v8 = __require("v8");
     node_v8 = require_chunk.__toESM(node_v8);
@@ -120688,12 +121160,15 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
             peers.push({
               peerId: child.childId,
               tx: traffic.tx,
-              rx: traffic.rx
+              rx: traffic.rx,
+              queuedBytes: registry.getChildQueuedBytes(child.childId)
             });
           }
+          const forward = registry.readForwardCensus?.();
           return {
             peers,
-            peersConnected: listed.length
+            peersConnected: listed.length,
+            ...forward === void 0 ? {} : { forward }
           };
         } catch {
           return;
@@ -120701,7 +121176,36 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
       };
     }
     var SOCKET_PLANE_TOP_N = 5;
+    var SOCKET_QUEUE_TOP_N = 3;
+    function readSocketQueues(current) {
+      let totalBytes = 0;
+      let unmeasured = 0;
+      const holding = [];
+      for (const peer of current.peers) {
+        if (peer.queuedBytes === null) {
+          unmeasured += 1;
+          continue;
+        }
+        totalBytes += peer.queuedBytes;
+        if (peer.queuedBytes > 0) holding.push({
+          peerId: peer.peerId,
+          bytes: peer.queuedBytes
+        });
+      }
+      return {
+        totalBytes,
+        unmeasured,
+        top: holding.toSorted((a, b) => b.bytes - a.bytes || a.peerId.localeCompare(b.peerId)).slice(0, 3)
+      };
+    }
     var EMPTY_SOCKET_PLANE_BASELINE = { peers: /* @__PURE__ */ new Map() };
+    function diffForward(current, before) {
+      if (current === void 0) return void 0;
+      return {
+        raw: Math.max(0, current.raw - (before?.raw ?? 0)),
+        decoded: Math.max(0, current.decoded - (before?.decoded ?? 0))
+      };
+    }
     function diffDirection(current, before) {
       const previous = before ?? EMPTY_SOCKET_DIRECTION;
       return {
@@ -120726,6 +121230,9 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
     function peerMessages(delta) {
       return socketDirectionMessages(delta.tx) + socketDirectionMessages(delta.rx);
     }
+    function peerBytes(delta) {
+      return socketDirectionBytes(delta.tx) + socketDirectionBytes(delta.rx);
+    }
     function diffSocketPlane(baseline, current, topN = 5) {
       const deltas = [];
       let tx = EMPTY_SOCKET_DIRECTION;
@@ -120741,12 +121248,16 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
         rx = addDirection(rx, delta.rx);
         if (peerMessages(delta) > 0) deltas.push(delta);
       }
+      const forward = diffForward(current.forward, baseline.forward);
       return {
         peersConnected: current.peersConnected,
         peersMeasured: current.peers.length,
         tx,
         rx,
-        top: deltas.toSorted((a, b) => peerMessages(b) - peerMessages(a) || a.peerId.localeCompare(b.peerId)).slice(0, topN)
+        top: deltas.toSorted((a, b) => peerMessages(b) - peerMessages(a) || a.peerId.localeCompare(b.peerId)).slice(0, topN),
+        topBytes: deltas.toSorted((a, b) => peerBytes(b) - peerBytes(a) || a.peerId.localeCompare(b.peerId)).slice(0, topN),
+        queued: readSocketQueues(current),
+        ...forward === void 0 ? {} : { forward }
       };
     }
     function createSocketPlaneMeter(reader, topN = 5) {
@@ -120755,23 +121266,166 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
         const current = reader();
         if (current === void 0) return void 0;
         const window2 = diffSocketPlane(baseline, current, topN);
-        baseline = { peers: new Map(current.peers.map((p) => [p.peerId, p])) };
+        baseline = {
+          peers: new Map(current.peers.map((p) => [p.peerId, p])),
+          ...current.forward === void 0 ? {} : { forward: current.forward }
+        };
         return window2;
       } };
     }
-    function kb(bytes) {
+    function kb$1(bytes) {
       return Math.round(bytes / 1024);
     }
     function formatDirection(sample) {
-      return `req:${sample.reqMessages}/${kb(sample.reqBytes)}kB,res:${sample.resMessages}/${kb(sample.resBytes)}kB,evt:${sample.evtMessages}/${kb(sample.evtBytes)}kB`;
+      return `req:${sample.reqMessages}/${kb$1(sample.reqBytes)}kB,res:${sample.resMessages}/${kb$1(sample.resBytes)}kB,evt:${sample.evtMessages}/${kb$1(sample.evtBytes)}kB`;
+    }
+    function formatPeerBytes(sample) {
+      return `${kb$1(sample.reqBytes)}/${kb$1(sample.resBytes)}/${kb$1(sample.evtBytes)}`;
     }
     function formatPeer(delta) {
-      return `${delta.peerId}:tx=${delta.tx.reqMessages}/${delta.tx.resMessages}/${delta.tx.evtMessages}:rx=${delta.rx.reqMessages}/${delta.rx.resMessages}/${delta.rx.evtMessages}:kB=${kb(socketDirectionBytes(delta.tx))}/${kb(socketDirectionBytes(delta.rx))}`;
+      return `${delta.peerId}:tx=${delta.tx.reqMessages}/${delta.tx.resMessages}/${delta.tx.evtMessages}:rx=${delta.rx.reqMessages}/${delta.rx.resMessages}/${delta.rx.evtMessages}:txkB=${formatPeerBytes(delta.tx)}:rxkB=${formatPeerBytes(delta.rx)}`;
     }
     function formatSocketPlane(window2) {
       if (window2 === void 0) return "";
       const top = window2.top.map(formatPeer).join(",");
-      return ` socketPeers=${window2.peersMeasured}/${window2.peersConnected} socketTx=${formatDirection(window2.tx)} socketRx=${formatDirection(window2.rx)}` + (top.length === 0 ? "" : ` socketTop=${top}`);
+      const named = new Set(window2.top.map((p) => p.peerId));
+      const topBytes = window2.topBytes.filter((p) => !named.has(p.peerId)).map(formatPeer).join(",");
+      const queuedTop = window2.queued.top.map((p) => `${p.peerId}:${kb$1(p.bytes)}`).join(",");
+      return ` socketPeers=${window2.peersMeasured}/${window2.peersConnected} socketTx=${formatDirection(window2.tx)} socketRx=${formatDirection(window2.rx)}` + (top.length === 0 ? "" : ` socketTop=${top}`) + (topBytes.length === 0 ? "" : ` socketTopBytes=${topBytes}`) + ` socketQueued=${kb$1(window2.queued.totalBytes)}kB` + (window2.queued.unmeasured === 0 ? "" : ` socketQueuedUnmeasured=${window2.queued.unmeasured}`) + (queuedTop.length === 0 ? "" : ` socketQueuedTop=${queuedTop}`) + (window2.forward === void 0 ? "" : ` socketFwd=${window2.forward.raw}/${window2.forward.decoded}`);
+    }
+    function isRecord$1(value) {
+      return typeof value === "object" && value !== null;
+    }
+    function writerSocketsOf(broker) {
+      if (!isRecord$1(broker)) return void 0;
+      const transit = broker["transit"];
+      if (!isRecord$1(transit)) return void 0;
+      const transporter = transit["tx"];
+      if (!isRecord$1(transporter)) return void 0;
+      const writer = transporter["writer"];
+      if (!isRecord$1(writer)) return void 0;
+      const sockets = writer["sockets"];
+      return sockets instanceof Map ? sockets : void 0;
+    }
+    function readSocket(nodeId, socket) {
+      if (typeof nodeId !== "string" || !isRecord$1(socket)) return void 0;
+      const queuedBytes = socket["writableLength"];
+      const bytesWritten = socket["bytesWritten"];
+      if (typeof queuedBytes !== "number" || typeof bytesWritten !== "number") return void 0;
+      return {
+        nodeId,
+        queuedBytes,
+        bytesWritten
+      };
+    }
+    function createMeshQueueReader(getBroker) {
+      return () => {
+        try {
+          const sockets = writerSocketsOf(getBroker());
+          if (sockets === void 0) return void 0;
+          const peers = [];
+          for (const [nodeId, socket] of sockets) {
+            const peer = readSocket(nodeId, socket);
+            if (peer !== void 0) peers.push(peer);
+          }
+          return peers;
+        } catch {
+          return;
+        }
+      };
+    }
+    var MESH_QUEUE_TOP_N = 3;
+    function kb(bytes) {
+      return Math.round(bytes / 1024);
+    }
+    function formatMeshQueue(peers) {
+      if (peers === void 0) return "";
+      const total = peers.reduce((sum, p) => sum + p.queuedBytes, 0);
+      const top = peers.filter((p) => p.queuedBytes > 0).toSorted((a, b) => b.queuedBytes - a.queuedBytes || a.nodeId.localeCompare(b.nodeId)).slice(0, 3).map((p) => `${p.nodeId}:${kb(p.queuedBytes)}`).join(",");
+      return ` meshQueued=${kb(total)}kB` + (top.length === 0 ? "" : ` meshQueuedTop=${top}`);
+    }
+    var OUTBOUND_QUEUE_THRESHOLD_BYTES = 64 * 1024 * 1024;
+    var OUTBOUND_QUEUE_SUSTAIN_MS = 6e4;
+    var OUTBOUND_QUEUE_COOLDOWN_MS = 10 * 6e4;
+    var RELEASE_RATIO = 0.5;
+    function createOutboundQueueGate(options = {}) {
+      const thresholdBytes = options.thresholdBytes ?? 67108864;
+      const sustainMs = options.sustainMs ?? 6e4;
+      const cooldownMs = options.cooldownMs ?? 6e5;
+      const tracked = /* @__PURE__ */ new Map();
+      const judgeOne = (peerId, bytes, at) => {
+        const state = tracked.get(peerId);
+        if (bytes >= thresholdBytes) {
+          const next = state === void 0 ? {
+            aboveSince: at,
+            peakBytes: bytes,
+            lastNamedAt: null
+          } : {
+            ...state,
+            peakBytes: Math.max(state.peakBytes, bytes)
+          };
+          const heldForMs = at - next.aboveSince;
+          const due = heldForMs >= sustainMs && (next.lastNamedAt === null || at - next.lastNamedAt >= cooldownMs);
+          tracked.set(peerId, due ? {
+            ...next,
+            lastNamedAt: at
+          } : next);
+          return due ? {
+            kind: "sustained",
+            peerId,
+            bytes,
+            peakBytes: next.peakBytes,
+            heldForMs
+          } : void 0;
+        }
+        if (state === void 0) return void 0;
+        if (bytes >= thresholdBytes * RELEASE_RATIO) return void 0;
+        tracked.delete(peerId);
+        if (state.lastNamedAt === null) return void 0;
+        return {
+          kind: "released",
+          peerId,
+          peakBytes: state.peakBytes,
+          toBytes: bytes,
+          heldForMs: at - state.aboveSince,
+          gone: false
+        };
+      };
+      return { observe(readings, at) {
+        const verdicts = [];
+        const seen = /* @__PURE__ */ new Set();
+        for (const reading of readings) {
+          seen.add(reading.peerId);
+          const verdict = judgeOne(reading.peerId, reading.bytes, at);
+          if (verdict !== void 0) verdicts.push(verdict);
+        }
+        for (const [peerId, state] of tracked) {
+          if (seen.has(peerId)) continue;
+          tracked.delete(peerId);
+          if (state.lastNamedAt === null) continue;
+          verdicts.push({
+            kind: "released",
+            peerId,
+            peakBytes: state.peakBytes,
+            toBytes: 0,
+            heldForMs: at - state.aboveSince,
+            gone: true
+          });
+        }
+        return verdicts;
+      } };
+    }
+    var BYTES_PER_MB$1 = 1048576;
+    function mb$2(bytes) {
+      return Math.round(bytes / BYTES_PER_MB$1);
+    }
+    function duration(ms) {
+      const seconds = Math.round(ms / 1e3);
+      return seconds < 120 ? `${seconds}s` : `${Math.round(seconds / 60)}m`;
+    }
+    function formatOutboundQueueVerdict(label, verdict) {
+      if (verdict.kind === "sustained") return `[mem] ${label} outbound queue to ${verdict.peerId} has held ${mb$2(verdict.bytes)}MB (peak ${mb$2(verdict.peakBytes)}MB) for ${duration(verdict.heldForMs)} \u2014 the peer is not draining what this process writes to it. This is socket.writableLength on the channel itself; a sum over _getActiveHandles() does not list an unref'd socket and would miss it.`;
+      return `[mem] ${label} outbound queue to ${verdict.peerId} RELEASED \u2014 ${mb$2(verdict.peakBytes)}MB at peak, ${mb$2(verdict.toBytes)}MB now, held ${duration(verdict.heldForMs)}` + (verdict.gone ? " (peer gone: the socket closed and dropped its queue)" : " (drained)");
     }
     var DECISIVE_HEAP_SPACES = ["old_space", "large_object_space"];
     var HEAP_SPACE_REPORT_MIN_MB = 32;
@@ -121097,6 +121751,21 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
       if (loop === void 0) return `${line}${suffix}`;
       return `${line} loopP50=${loop.p50Ms}ms loopP99=${loop.p99Ms}ms loopMax=${loop.maxMs}ms${suffix}`;
     }
+    function outboundQueueReadings(uds, mesh) {
+      const readings = [];
+      for (const peer of uds?.peers ?? []) {
+        if (peer.queuedBytes === null) continue;
+        readings.push({
+          peerId: `uds:${peer.peerId}`,
+          bytes: peer.queuedBytes
+        });
+      }
+      for (const node of mesh ?? []) readings.push({
+        peerId: `mesh:${node.nodeId}`,
+        bytes: node.queuedBytes
+      });
+      return readings;
+    }
     function startHeapWatch(label = HUB_MAIN_HEAP_WATCH_LABEL, sink = consoleSink, intervalMs = HEAP_WATCH_INTERVAL_MS, reclaimOptions, loopDelay = createLoopDelayMeter(), execArgv = process.execArgv, announceCeilingOrigin = true, rssBudget, probes) {
       const readSpaces = probes?.readSpaces ?? readHeapSpaces;
       const eventPlane = probes?.eventPlane === void 0 ? void 0 : createEventPlaneMeter(probes.eventPlane);
@@ -121178,7 +121847,7 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
           const due = at - lastLoggedAt >= intervalMs;
           if (mode === "escalated" || due) {
             lastLoggedAt = at;
-            const line = format2(label, sample, loopDelay?.read(), budgetMb, `${formatHeapSpaces(readSpaces())}${formatEventPlane(eventPlane?.read())}` + formatSocketPlane(socketPlane?.read()));
+            const line = format2(label, sample, loopDelay?.read(), budgetMb, `${formatHeapSpaces(readSpaces())}${formatEventPlane(eventPlane?.read())}` + formatSocketPlane(socketPlane?.read()) + formatMeshQueue(meshQueue?.()));
             if (sample.nearLimit) sink.warn(`${line} \u2014 APPROACHING HEAP LIMIT`);
             else if (mode === "escalated") sink.warn(`${line} \u2014 heap elevated, sampling every ${probeIntervalMs}ms`);
             else sink.info(line);
@@ -121187,9 +121856,18 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
           checkRssBudget(sample, at);
           maybeReclaim(sample);
           judgeArrayBuffers(sample, at);
+          judgeOutboundQueues(at);
         } catch {
         }
       };
+      const meshQueue = probes?.meshQueue;
+      const queueReader = probes?.socketPlane;
+      const queueGate = queueReader === void 0 && meshQueue === void 0 ? void 0 : createOutboundQueueGate(probes?.outboundQueue);
+      const judgeOutboundQueues = (at) => {
+        if (queueGate === void 0) return;
+        const readings = outboundQueueReadings(queueReader?.(), meshQueue?.());
+        for (const verdict of queueGate.observe(readings, at)) sink.warn(formatOutboundQueueVerdict(label, verdict));
+      };
       const censusProbe = probes?.arrayBufferCensus;
       const censusGate = censusProbe === void 0 ? void 0 : createArrayBufferCensusGate(censusProbe);
       let censusInFlight = false;
@@ -124414,6 +125092,32 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
       Buffer.from(body.buffer, body.byteOffset, body.byteLength).copy(out, 4);
       return out;
     }
+    var PAYLOAD_KEY_BYTES = Buffer.from([162, ...Buffer.from("pl")]);
+    var BIN32_MARKER = 198;
+    var FIXMAP_BASE = 128;
+    var FIXMAP_MAX_COUNT = 15;
+    function encodeFrameHead(frame, payload) {
+      const envelope = encode(frame, ENCODE_OPTIONS);
+      const first = envelope[0];
+      if (envelope.byteLength === 0 || first === void 0 || first < FIXMAP_BASE || first > 142) throw new Error(`encodeFrameHead: envelope must be a msgpack fixmap with at most ${FIXMAP_MAX_COUNT - 1} keys (got leading byte 0x${(first ?? 0).toString(16)})`);
+      const bodyLength = envelope.byteLength + PAYLOAD_KEY_BYTES.byteLength + 5 + payload.byteLength;
+      const head = Buffer.allocUnsafe(HEADER_BYTES + envelope.byteLength + PAYLOAD_KEY_BYTES.byteLength + 5);
+      head.writeUInt32BE(bodyLength, 0);
+      Buffer.from(envelope.buffer, envelope.byteOffset, envelope.byteLength).copy(head, HEADER_BYTES);
+      head[HEADER_BYTES] = first + 1;
+      let at = HEADER_BYTES + envelope.byteLength;
+      PAYLOAD_KEY_BYTES.copy(head, at);
+      at += PAYLOAD_KEY_BYTES.byteLength;
+      head[at] = BIN32_MARKER;
+      head.writeUInt32BE(payload.byteLength, at + 1);
+      return head;
+    }
+    function packPayload(value) {
+      return encode(value, ENCODE_OPTIONS);
+    }
+    function unpackPayload(bytes) {
+      return decode(bytes);
+    }
     var HEADER_BYTES = 4;
     var SLAB_WASTE_MAX_BYTES = 4096;
     var FrameDecoder = class {
@@ -124531,6 +125235,14 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
       if (process.platform === "win32") return `\\\\.\\pipe\\camstack-${safe}`;
       return (0, node_path.join)((0, node_os.tmpdir)(), `camstack-${safe}.sock`);
     }
+    var PayloadReply = class {
+      body;
+      payload;
+      constructor(body, payload) {
+        this.body = body;
+        this.payload = payload;
+      }
+    };
     var SocketChannel = class {
       socket;
       nextId = 1;
@@ -124590,7 +125302,7 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
             k: "req",
             id,
             body
-          });
+          }, opts?.payload);
         });
       }
       emit(body) {
@@ -124630,11 +125342,38 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
           rx: sampleSocketDirection(this.rxCounters)
         };
       }
-      send(frame) {
+      /**
+      * Bytes handed to the socket that the kernel has not taken yet — the
+      * `Writable` buffer plus the write in flight. Read LIVE, never cached: this
+      * is the number that says whether the peer is draining what we write, and
+      * it is read on every heartbeat probe (D446). An unref'd socket keeps it
+      * exactly like a ref'd one, which is why it is read here and not summed
+      * over `_getActiveHandles()`.
+      */
+      queuedBytes() {
+        return this.socket.writableLength;
+      }
+      /**
+      * Write one frame. With a payload the head and the tail are two `write`
+      * calls under `cork()` — the kernel sees one `writev`, and the payload bytes
+      * are never copied into the head. A forwarded payload is a view into the
+      * frame it arrived on, and that frame's buffer is never mutated, so handing
+      * the view to the socket is safe.
+      */
+      send(frame, payload) {
         if (this.closed) return;
-        const encoded = encodeFrame(frame);
-        recordSocketFrame(this.txCounters, frame.k, encoded.byteLength);
-        this.socket.write(encoded);
+        if (payload === void 0) {
+          const encoded = encodeFrame(frame);
+          recordSocketFrame(this.txCounters, frame.k, encoded.byteLength);
+          this.socket.write(encoded);
+          return;
+        }
+        const head = encodeFrameHead(frame, payload);
+        recordSocketFrame(this.txCounters, frame.k, head.byteLength + payload.byteLength);
+        this.socket.cork();
+        this.socket.write(head);
+        this.socket.write(payload);
+        this.socket.uncork();
       }
       onData(chunk) {
         const frames = this.decoder.push(chunk);
@@ -124654,8 +125393,14 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
         recordSocketFrame(this.rxCounters, frame.k, wireBytes);
         if (frame.k === "req") {
           try {
-            const result = await this.requestHandler(frame.body);
-            this.send({
+            const result = await this.requestHandler(frame.body, frame.pl);
+            if (result instanceof PayloadReply) this.send({
+              k: "res",
+              id: frame.id,
+              ok: true,
+              body: result.body
+            }, result.payload);
+            else this.send({
               k: "res",
               id: frame.id,
               ok: true,
@@ -124676,8 +125421,9 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
           if (!p) return;
           this.pending.delete(frame.id);
           if (p.timer !== null) clearTimeout(p.timer);
-          if (frame.ok) p.resolve(frame.body);
-          else p.reject(new Error(frame.err));
+          if (!frame.ok) p.reject(new Error(frame.err));
+          else if (frame.pl !== void 0) p.resolve(new PayloadReply(frame.body, frame.pl));
+          else p.resolve(frame.body);
           return;
         }
         this.eventHandler(frame.body);
@@ -125066,397 +125812,15 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
         }
       }
     }
-    var DISCOVERY_ERROR_TYPES = /* @__PURE__ */ new Set(["SERVICE_NOT_FOUND", "SERVICE_NOT_AVAILABLE"]);
-    var DEFAULT_DISCOVERY_TIMEOUT_MS$1 = 3e4;
-    function isDiscoveryError(err) {
-      if (typeof err !== "object" || err === null) return false;
-      const type = err.type;
-      return typeof type === "string" && DISCOVERY_ERROR_TYPES.has(type);
-    }
-    async function callWithServiceDiscovery(broker, serviceName, action, params, opts, discoveryTimeoutMs = DEFAULT_DISCOVERY_TIMEOUT_MS$1) {
-      try {
-        return await broker.call(action, params, opts);
-      } catch (err) {
-        if (!isDiscoveryError(err)) throw err;
-        await broker.waitForServices([serviceName], discoveryTimeoutMs);
-        return await broker.call(action, params, opts);
-      }
-    }
-    function buildMessage(capName, method, detail) {
-      const call = method !== void 0 ? `${capName}.${method}` : capName;
-      const target = detail.nodeId !== void 0 ? ` to node ${detail.nodeId}` : "";
-      const rejectedStr = detail.rejected.map((r) => `${r.kind}=${r.why}`).join("; ");
-      const rejectedClause = rejectedStr.length > 0 ? ` (rejected: ${rejectedStr})` : "";
-      return `${call} not routable${target}: ${detail.reason}${rejectedClause}`;
-    }
-    var CapRouteError = class extends Error {
-      reason;
-      nodeId;
-      rejected;
-      /**
-      * @param cause  Optional original error that triggered this routing failure.
-      *               Stored as `Error.cause` (TC39 standard option, Node 16.9+).
-      *               Dispatchers wrapping transport errors MUST pass the original.
-      */
-      constructor(capName, method, detail, cause) {
-        super(buildMessage(capName, method, detail), cause !== void 0 ? { cause } : void 0);
-        this.name = "CapRouteError";
-        this.reason = detail.reason;
-        this.nodeId = detail.nodeId;
-        this.rejected = detail.rejected;
-      }
-    };
-    function classifyCapRoute(capName, opts, snapshot) {
-      const rejected = [];
-      if (opts.nodeId !== void 0) return classifyExplicitNode(capName, opts.nodeId, opts.deviceId, snapshot, rejected);
-      return classifySingleton(capName, opts.deviceId, snapshot, rejected);
-    }
-    function classifyExplicitNode(capName, nodeId, deviceId, snap, rejected) {
-      if (nodeId === snap.hubNodeId) {
-        const residentProvides = snap.hubResidentProvides;
-        const providesOnHub = residentProvides ?? snap.hubInProcessProvides;
-        const getRef = residentProvides !== void 0 ? snap.getHubResidentProviderRef : snap.getInProcessProviderRef;
-        if (providesOnHub(capName)) {
-          const ref = getRef?.(capName) ?? null;
-          if (ref !== null) return {
-            kind: "hub-in-process",
-            capName,
-            ref
-          };
-          rejected.push({
-            kind: "hub-in-process",
-            why: "provider ref not available in snapshot"
-          });
-          throw new CapRouteError(capName, void 0, {
-            reason: "no-provider",
-            nodeId,
-            rejected
-          });
-        }
-        if (snap.hubLocalChildProvides(capName, deviceId)) {
-          const childId = snap.getHubLocalChildId?.(capName, deviceId) ?? null;
-          if (childId !== null) return {
-            kind: "hub-local-uds",
-            capName,
-            childId
-          };
-          rejected.push({
-            kind: "hub-local-uds",
-            why: "child id not resolvable from snapshot"
-          });
-          throw new CapRouteError(capName, void 0, {
-            reason: "no-provider",
-            nodeId,
-            rejected
-          });
-        }
-        rejected.push({
-          kind: "hub-in-process",
-          why: "hub does not provide this cap in-process"
-        });
-        rejected.push({
-          kind: "hub-local-uds",
-          why: "no hub-local child provides this cap"
-        });
-        throw new CapRouteError(capName, void 0, {
-          reason: "no-provider",
-          nodeId,
-          rejected
-        });
-      }
-      if (!snap.nodeOnline(nodeId)) {
-        rejected.push({
-          kind: "remote-moleculer",
-          why: `node ${nodeId} is offline`
-        });
-        throw new CapRouteError(capName, void 0, {
-          reason: "node-offline",
-          nodeId,
-          rejected
-        });
-      }
-      if (snap.nodeIsAgent(nodeId)) {
-        if (snap.nodeKnowsCap(nodeId, capName)) return {
-          kind: "agent-child-forward",
-          capName,
-          agentNodeId: nodeId,
-          childId: snap.getAgentChildId?.(nodeId, capName) ?? void 0
-        };
-        rejected.push({
-          kind: "agent-child-forward",
-          why: `agent ${nodeId} does not know cap ${capName}`
-        });
-        throw new CapRouteError(capName, void 0, {
-          reason: "no-provider",
-          nodeId,
-          rejected
-        });
-      }
-      return {
-        kind: "remote-moleculer",
-        capName,
-        nodeId
-      };
-    }
-    function classifySingleton(capName, deviceId, snap, rejected) {
-      if (snap.hubInProcessProvides(capName)) {
-        const ref = snap.getInProcessProviderRef?.(capName) ?? null;
-        if (ref !== null) return {
-          kind: "hub-in-process",
-          capName,
-          ref
-        };
-        rejected.push({
-          kind: "hub-in-process",
-          why: "provider ref not available in snapshot"
-        });
-      } else rejected.push({
-        kind: "hub-in-process",
-        why: "hub does not provide this cap in-process"
-      });
-      if (snap.hubLocalChildProvides(capName, deviceId)) {
-        const childId = snap.getHubLocalChildId?.(capName, deviceId) ?? null;
-        if (childId !== null) return {
-          kind: "hub-local-uds",
-          capName,
-          childId
-        };
-        rejected.push({
-          kind: "hub-local-uds",
-          why: "child id not resolvable from snapshot"
-        });
-      } else rejected.push({
-        kind: "hub-local-uds",
-        why: "no hub-local child provides this cap"
-      });
-      const knownNodes = snap.listKnownNodeIds?.() ?? [];
-      for (const nodeId of knownNodes) if (nodeId !== snap.hubNodeId && snap.nodeOnline(nodeId) && snap.nodeKnowsCap(nodeId, capName)) return {
-        kind: "remote-moleculer",
-        capName,
-        nodeId
-      };
-      rejected.push({
-        kind: "remote-moleculer",
-        why: "no online remote node knows this cap"
-      });
-      throw new CapRouteError(capName, void 0, {
-        reason: "no-provider",
-        rejected
-      });
-    }
-    var AGENT_CAP_FWD_SERVICE = "$agent-cap-fwd";
-    var AGENT_CAP_FWD_ACTION = `${AGENT_CAP_FWD_SERVICE}.forward`;
-    var REMOTE_CALL_TIMEOUT_MS = 6e4;
-    function extractDeviceId(args) {
-      if (args === null || typeof args !== "object") return void 0;
-      const raw = Reflect.get(args, "deviceId");
-      return typeof raw === "number" ? raw : void 0;
-    }
-    function extractNodeId(args) {
-      if (args === null || typeof args !== "object") return void 0;
-      const raw = Reflect.get(args, "nodeId");
-      return typeof raw === "string" && raw.length > 0 ? raw : void 0;
-    }
-    function withCallerAddonId(args, callerAddonId) {
-      if (callerAddonId === void 0) return args;
-      if (args === null || typeof args !== "object" || Array.isArray(args)) return args;
+    function liftRoutingHints(args) {
+      if (args === null || typeof args !== "object" || Array.isArray(args)) return {};
+      const nodeId = Reflect.get(args, "nodeId");
+      const addonId = Reflect.get(args, "addonId");
       return {
-        ...args,
-        callerAddonId
+        ...typeof nodeId === "string" && nodeId.length > 0 ? { nodeId } : {},
+        ...typeof addonId === "string" && addonId.length > 0 ? { addonId } : {}
       };
     }
-    var CapRouteResolver = class {
-      hubNodeId;
-      broker;
-      hubLocalRegistry;
-      nodeAuthority;
-      inProcessProviders;
-      hubResidentProviders;
-      capTimeoutMs;
-      snapshot;
-      constructor(deps) {
-        this.hubNodeId = deps.hubNodeId;
-        this.broker = deps.broker;
-        this.hubLocalRegistry = deps.hubLocalRegistry;
-        this.nodeAuthority = deps.nodeAuthority;
-        this.inProcessProviders = deps.inProcessProviders;
-        this.hubResidentProviders = deps.hubResidentProviders;
-        this.capTimeoutMs = deps.capTimeoutMs;
-        this.snapshot = this.buildSnapshot();
-      }
-      /** Per-call RPC timeout: the cap method's declared override, else the default. */
-      callTimeout(capName, method) {
-        return this.capTimeoutMs?.(capName, method) ?? REMOTE_CALL_TIMEOUT_MS;
-      }
-      resolveCapRoute(capName, opts) {
-        return classifyCapRoute(capName, opts, this.snapshot);
-      }
-      /**
-      * Resolve the hub-local-uds route for a cap owned by a forked hub-local
-      * child, IGNORING any in-hub provider registered for the same cap name.
-      *
-      * `resolveCapRoute` gives Priority 1 to `hub-in-process`: when an in-hub
-      * provider (e.g. a wrapper) is registered for the cap, the route always
-      * classifies as `hub-in-process` and the hub-local-uds NATIVE child is never
-      * reached. That is correct for the generic dispatch path (the wrapper is the
-      * active provider), but WRONG for the native-cap fallback
-      * (`setNativeFallback`), whose contract is to reach the NATIVE provider in
-      * the forked vendor child so a wrapper can delegate to it. A wrapper cap
-      * with a forked native (today: `snapshot`) otherwise resolves to the wrapper
-      * itself, the native is never invoked, and the wrapper silently falls
-      * through to its secondary strategy.
-      *
-      * This method consults ONLY the hub-local-child authority
-      * (`hubLocalChildProvides` + `getHubLocalChildId`, both deviceId-aware), so
-      * it returns the native child route regardless of any in-process shadow.
-      * Returns null when no hub-local child owns `(capName, deviceId)` — the
-      * caller then falls through to its remote-resolution branch.
-      */
-      resolveHubLocalUdsRoute(capName, deviceId) {
-        if (!this.snapshot.hubLocalChildProvides(capName, deviceId)) return null;
-        const childId = this.snapshot.getHubLocalChildId?.(capName, deviceId) ?? null;
-        if (childId === null) return null;
-        return {
-          kind: "hub-local-uds",
-          capName,
-          childId
-        };
-      }
-      /**
-      * @param addonId Optional out-of-band PROVIDER-selection hint (Task 7.5a):
-      *   the addonId of the provider the CALLER already resolved (e.g.
-      *   `buildCapCallFn`'s `deps.addonId` for a registered grouped-runner
-      *   provider). Only meaningful for `agent-child-forward` — a `remote-moleculer`
-      *   route already encodes the provider in its action name
-      *   (`${addonId}.${cap}.${method}`, via `NodeCapAuthority.getAddonId`), and a
-      *   `hub-local-uds` caller that already knows the addonId (`buildCapCallFn`)
-      *   talks to `LocalChildRegistry.callCapOnChild` directly rather than through
-      *   `dispatch`.
-      * @param callerAddonId Optional out-of-band CALLER-identity hint — the
-      *   addon that ORIGINATED the call, distinct from `addonId` above (which
-      *   names the resolved PROVIDER, not the caller). Set by
-      *   `onUnownedCall` from `CapCallInput.callerAddonId`
-      *   (`LocalChildRegistry` stamped it off the registered `childId`). Only
-      *   the `hub-in-process` branch consumes it — merged into `args` so a
-      *   diagnostic tool deep in that provider (e.g. device-manager's
-      *   fleet-read census) can read it without every provider method changing
-      *   signature, the same "extra field the provider destructures or
-      *   ignores" convention `nodeId` already uses on this path.
-      */
-      async dispatch(route, method, args, addonId, callerAddonId) {
-        try {
-          return await this.dispatchInner(route, method, args, addonId, callerAddonId);
-        } catch (err) {
-          if (err instanceof CapRouteError) throw err;
-          const nodeId = this.routeNodeId(route);
-          const cause = err instanceof Error ? err : new Error(String(err));
-          throw new CapRouteError(route.capName, method, {
-            reason: "transport-failed",
-            nodeId,
-            rejected: [{
-              kind: route.kind,
-              why: cause.message
-            }]
-          }, cause);
-        }
-      }
-      /**
-      * Inner dispatch: may throw CapRouteError (validation failures) or arbitrary
-      * transport errors. The outer `dispatch` wraps non-CapRouteErrors.
-      */
-      async dispatchInner(route, method, args, addonId, callerAddonId) {
-        switch (route.kind) {
-          case "hub-in-process":
-            return route.ref.invoke(method, withCallerAddonId(args, callerAddonId));
-          case "hub-local-uds": {
-            const registry = this.hubLocalRegistry;
-            if (registry === null) throw new CapRouteError(route.capName, method, {
-              reason: "no-provider",
-              rejected: [{
-                kind: "hub-local-uds",
-                why: "UDS registry not available"
-              }]
-            });
-            const deviceId = extractDeviceId(args);
-            const input = {
-              capName: route.capName,
-              method,
-              args,
-              ...deviceId !== void 0 ? { deviceId } : {}
-            };
-            return registry.callCapOnChild(route.childId, input);
-          }
-          case "remote-moleculer": {
-            const addonId2 = this.nodeAuthority.getAddonId(route.nodeId, route.capName);
-            if (addonId2 === null) throw new CapRouteError(route.capName, method, {
-              reason: "no-provider",
-              nodeId: route.nodeId,
-              rejected: [{
-                kind: "remote-moleculer",
-                why: `no addonId known for ${route.nodeId}/${route.capName}`
-              }]
-            });
-            const deviceId = extractDeviceId(args);
-            const isNative = this.nodeAuthority.isNativeCap(route.nodeId, route.capName, deviceId);
-            const action = capActionName(addonId2, route.capName, method, isNative);
-            return callWithServiceDiscovery(this.broker, addonId2, action, args, {
-              nodeID: route.nodeId,
-              timeout: this.callTimeout(route.capName, method)
-            });
-          }
-          case "agent-child-forward": {
-            const deviceId = extractDeviceId(args);
-            const params = {
-              capName: route.capName,
-              method,
-              args,
-              ...route.childId !== void 0 ? { childId: route.childId } : {},
-              ...deviceId !== void 0 ? { deviceId } : {},
-              ...addonId !== void 0 ? { addonId } : {}
-            };
-            return callWithServiceDiscovery(this.broker, AGENT_CAP_FWD_SERVICE, AGENT_CAP_FWD_ACTION, params, {
-              nodeID: route.agentNodeId,
-              timeout: this.callTimeout(route.capName, method)
-            });
-          }
-        }
-      }
-      buildSnapshot() {
-        const hubLocalRegistry = this.hubLocalRegistry;
-        const nodeAuthority = this.nodeAuthority;
-        const inProcessProviders = this.inProcessProviders;
-        const hubResidentProviders = this.hubResidentProviders;
-        return {
-          hubNodeId: this.hubNodeId,
-          hubInProcessProvides: (cap) => inProcessProviders(cap) !== null,
-          ...hubResidentProviders !== void 0 ? {
-            hubResidentProvides: (cap) => hubResidentProviders(cap) !== null,
-            getHubResidentProviderRef: (cap) => hubResidentProviders(cap)
-          } : {},
-          hubLocalChildProvides: (cap, deviceId) => hubLocalRegistry !== null && hubLocalRegistry.resolveChildId(cap, deviceId) !== null,
-          nodeKnowsCap: (nodeId, cap) => nodeAuthority.nodeKnowsCap(nodeId, cap),
-          nodeIsAgent: (nodeId) => nodeAuthority.nodeIsAgent(nodeId),
-          nodeOnline: (nodeId) => nodeAuthority.nodeOnline(nodeId),
-          listKnownNodeIds: () => nodeAuthority.listNodeIds(),
-          getInProcessProviderRef: (cap) => inProcessProviders(cap),
-          getHubLocalChildId: (cap, deviceId) => hubLocalRegistry !== null ? hubLocalRegistry.resolveChildId(cap, deviceId) : null,
-          getAgentChildId: (agentNodeId, cap) => nodeAuthority.getAgentChildId(agentNodeId, cap)
-        };
-      }
-      /** Extract a nodeId string from a route for error reporting, or undefined. */
-      routeNodeId(route) {
-        switch (route.kind) {
-          case "hub-in-process":
-            return this.hubNodeId;
-          case "hub-local-uds":
-            return `${this.hubNodeId}/${route.childId}`;
-          case "remote-moleculer":
-            return route.nodeId;
-          case "agent-child-forward":
-            return route.agentNodeId;
-        }
-      }
-    };
     function readFanoutMode() {
       const raw = process.env.CAMSTACK_UDS_EVENT_FANOUT;
       if (raw === "shadow" || raw === "broadcast") return raw;
@@ -125484,6 +125848,9 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
       /** See {@link LocalChildRegistryOptions.isAggregatedCollectionMethod}. */
       isAggregatedCollectionMethod;
       isAddonPinnedCall;
+      /** See {@link ForwardCensus}. Mutable counters on the hot path, by design. */
+      forwardedRaw = 0;
+      forwardedDecoded = 0;
       /** See {@link LocalChildRegistryOptions.capTimeoutMs}. */
       capTimeoutMs;
       /** See {@link LocalChildRegistryOptions.capUsageObserver}. */
@@ -125559,6 +125926,24 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
         return entry.channel.readTraffic?.() ?? null;
       }
       /**
+      * Bytes this process has written to a child that the child has not yet
+      * taken, live, or `null` when the channel keeps no such reading. Read on
+      * every heartbeat probe (D446) — a child that stops draining is the shape
+      * of an outbound-queue episode, and the number lives on the channel.
+      */
+      getChildQueuedBytes(childId) {
+        const entry = this.children.get(childId);
+        if (entry === void 0) return null;
+        return entry.channel.queuedBytes?.() ?? null;
+      }
+      /** Cumulative {@link ForwardCensus} of this parent's `cap-call-out` routing. */
+      readForwardCensus() {
+        return {
+          raw: this.forwardedRaw,
+          decoded: this.forwardedDecoded
+        };
+      }
+      /**
       * The regime the counters above were produced under, read once from
       * `CAMSTACK_UDS_EVENT_FANOUT` at construction.
       *
@@ -125937,7 +126322,7 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
             return;
           }
         });
-        channel.onRequest(async (body) => {
+        channel.onRequest(async (body, payload) => {
           const msg = body;
           if (msg.kind === "register") {
             if (childId !== null && childId !== msg.childId) throw new Error(`child attempted to change identity from "${childId}" to "${msg.childId}"`);
@@ -125954,7 +126339,8 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
               channel,
               caps: msg.caps,
               eventPatterns,
-              incarnation
+              incarnation,
+              rawForward: msg.rawForward === true
             });
             this.logPatternSet(msg.childId, eventPatterns);
             this.registeredHandler({
@@ -125963,23 +126349,28 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
               incarnation,
               ...msg.customActions !== void 0 ? { customActions: msg.customActions } : {}
             });
-            return { ok: true };
+            return {
+              ok: true,
+              rawForward: true
+            };
           }
           if (msg.kind === "cap-call-out") {
             const out = msg;
-            const input = {
+            const hints = out.hints ?? liftRoutingHints(out.args);
+            const materialise = () => payload !== void 0 ? unpackPayload(payload) : out.args;
+            const buildInput = () => ({
               capName: out.capName,
               method: out.method,
-              args: out.args,
+              args: materialise(),
               ...out.deviceId !== void 0 ? { deviceId: out.deviceId } : {},
               ...out.nodeId !== void 0 ? { nodeId: out.nodeId } : {},
               ...out.native === true ? { native: true } : {},
               ...childId !== null ? { callerAddonId: childId } : {}
-            };
-            const pinnedNodeId = out.nodeId ?? extractNodeId(out.args);
+            });
+            const pinnedNodeId = out.nodeId ?? hints.nodeId;
             const pinTargetsThisNode = pinnedNodeId !== void 0 && this.ownNodeId !== void 0 && pinnedNodeId === this.ownNodeId;
             const aggregated = pinnedNodeId === void 0 && this.isAggregatedCollectionMethod?.(out.capName, out.method) === true;
-            const addonPinned = pinnedNodeId === void 0 && this.isAddonPinnedCall?.(out.capName, out.method, out.args) === true;
+            const addonPinned = pinnedNodeId === void 0 && this.isAddonPinnedCall?.(out.capName, out.method, hints) === true;
             const target = !(out.native === true) && !aggregated && !addonPinned && (pinnedNodeId === void 0 || pinTargetsThisNode) ? this.resolveChildId(out.capName, out.deviceId) : null;
             this.recordCapUsage(childId, target, out.capName, out.method);
             if (target !== null) {
@@ -125987,9 +126378,27 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
                 this.egressRoutedCaps.add(out.capName);
                 this.logger?.info("routed child egress over UDS", { capName: out.capName });
               }
-              return this.callCap(input);
+              const entry = this.children.get(target);
+              if (payload !== void 0 && entry !== void 0 && entry.rawForward) {
+                this.forwardedRaw += 1;
+                const forward = {
+                  kind: "cap-call",
+                  capName: out.capName,
+                  method: out.method,
+                  args: void 0,
+                  ...out.deviceId !== void 0 ? { deviceId: out.deviceId } : {}
+                };
+                const declared = this.capTimeoutMs?.(out.capName, out.method);
+                return entry.channel.request(forward, {
+                  ...typeof declared === "number" ? { timeoutMs: declared } : {},
+                  payload
+                });
+              }
+              this.forwardedDecoded += 1;
+              return this.callCap(buildInput());
             }
-            if (this.onUnownedCall !== void 0) return this.onUnownedCall(input);
+            this.forwardedDecoded += 1;
+            if (this.onUnownedCall !== void 0) return this.onUnownedCall(buildInput());
             throw new Error(`${UDS_NO_ROUTE_PREFIX}: cap-call-out has no local provider for "${out.capName}" and no fallback`);
           }
           if (msg.kind === "readiness-request") return {
@@ -126017,6 +126426,10 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
         });
       }
     };
+    function ackAcceptsRawForward(ack) {
+      if (ack === null || typeof ack !== "object") return false;
+      return ack.rawForward === true;
+    }
     var LocalChildClient = class {
       options;
       client = null;
@@ -126057,6 +126470,13 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
       latestCustomActions = null;
       /** Events and logs queued while the channel is not yet open. */
       pendingEmits = [];
+      /**
+      * Whether the parent acknowledged raw-forward at `register`. Until it has,
+      * `callOut` sends args inline exactly as every child always did — a legacy
+      * parent would decode a payload-borne call to `args: undefined` and run the
+      * provider on nothing, silently. Re-read on every re-register.
+      */
+      parentRawForward = false;
       /** Handler for parent→child events. Registered via `onEvent`. */
       eventHandler = null;
       /**
@@ -126164,15 +126584,20 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
         if (this.client !== null) throw new Error("LocalChildClient: already started \u2014 call close() first");
         const client = createLocalTransport().createClient(this.options.nodeId);
         const channel = await client.connect();
-        channel.onRequest(async (body) => {
+        channel.onRequest(async (body, payload) => {
           const msg = body;
-          if (msg.kind === "cap-call") return this.options.dispatch({
-            capName: msg.capName,
-            method: msg.method,
-            args: msg.args,
-            ...msg.deviceId !== void 0 ? { deviceId: msg.deviceId } : {},
-            ...msg.addonId !== void 0 ? { addonId: msg.addonId } : {}
-          });
+          if (msg.kind === "cap-call") {
+            const args = payload !== void 0 ? unpackPayload(payload) : msg.args;
+            const result = await this.options.dispatch({
+              capName: msg.capName,
+              method: msg.method,
+              args,
+              ...msg.deviceId !== void 0 ? { deviceId: msg.deviceId } : {},
+              ...msg.addonId !== void 0 ? { addonId: msg.addonId } : {}
+            });
+            if (payload !== void 0 && result !== void 0) return new PayloadReply(void 0, packPayload(result));
+            return result;
+          }
           if (msg.kind === "addon-call") {
             if (this.addonCallHandler === null) throw new Error(`LocalChildClient: addon-call for "${msg.addonId}" arrived but no onAddonCall handler is registered`);
             return this.addonCallHandler({
@@ -126196,7 +126621,7 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
         });
         const register = this.registerFrame(this.latestCaps);
         try {
-          await channel.request(register);
+          this.parentRawForward = ackAcceptsRawForward(await channel.request(register));
         } catch (err) {
           await client.close();
           throw err;
@@ -126224,7 +126649,7 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
         this.latestCaps = caps;
         if (customActions !== void 0) this.latestCustomActions = customActions;
         if (this.channel === null) return;
-        await this.channel.request(this.registerFrame(caps));
+        this.parentRawForward = ackAcceptsRawForward(await this.channel.request(this.registerFrame(caps)));
       }
       /**
       * The register frame: caps, plus everything a re-register must atomically
@@ -126238,7 +126663,8 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
           childId: this.options.childId,
           caps,
           ...this.hasDeclaredEventPatterns ? { eventPatterns: this.latestEventPatterns } : {},
-          ...this.latestCustomActions !== null ? { customActions: this.latestCustomActions } : {}
+          ...this.latestCustomActions !== null ? { customActions: this.latestCustomActions } : {},
+          rawForward: true
         };
       }
       /**
@@ -126289,14 +126715,29 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
       */
       async callOut(input) {
         if (this.channel === null) throw new Error("LocalChildClient: callOut before start");
+        const routing = {
+          ...input.deviceId !== void 0 ? { deviceId: input.deviceId } : {},
+          ...input.nodeId !== void 0 ? { nodeId: input.nodeId } : {},
+          ...input.native === true ? { native: true } : {}
+        };
+        if (this.parentRawForward && input.args !== void 0) {
+          const hints = liftRoutingHints(input.args);
+          const msg2 = {
+            kind: "cap-call-out",
+            capName: input.capName,
+            method: input.method,
+            ...Object.keys(hints).length > 0 ? { hints } : {},
+            ...routing
+          };
+          const reply = await this.channel.request(msg2, { payload: packPayload(input.args) });
+          return reply instanceof PayloadReply ? unpackPayload(reply.payload) : reply;
+        }
         const msg = {
           kind: "cap-call-out",
           capName: input.capName,
           method: input.method,
           args: input.args,
-          ...input.deviceId !== void 0 ? { deviceId: input.deviceId } : {},
-          ...input.nodeId !== void 0 ? { nodeId: input.nodeId } : {},
-          ...input.native === true ? { native: true } : {}
+          ...routing
         };
         return this.channel.request(msg);
       }
@@ -126307,6 +126748,397 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
         this.channel = null;
       }
     };
+    function buildMessage(capName, method, detail) {
+      const call = method !== void 0 ? `${capName}.${method}` : capName;
+      const target = detail.nodeId !== void 0 ? ` to node ${detail.nodeId}` : "";
+      const rejectedStr = detail.rejected.map((r) => `${r.kind}=${r.why}`).join("; ");
+      const rejectedClause = rejectedStr.length > 0 ? ` (rejected: ${rejectedStr})` : "";
+      return `${call} not routable${target}: ${detail.reason}${rejectedClause}`;
+    }
+    var CapRouteError = class extends Error {
+      reason;
+      nodeId;
+      rejected;
+      /**
+      * @param cause  Optional original error that triggered this routing failure.
+      *               Stored as `Error.cause` (TC39 standard option, Node 16.9+).
+      *               Dispatchers wrapping transport errors MUST pass the original.
+      */
+      constructor(capName, method, detail, cause) {
+        super(buildMessage(capName, method, detail), cause !== void 0 ? { cause } : void 0);
+        this.name = "CapRouteError";
+        this.reason = detail.reason;
+        this.nodeId = detail.nodeId;
+        this.rejected = detail.rejected;
+      }
+    };
+    function classifyCapRoute(capName, opts, snapshot) {
+      const rejected = [];
+      if (opts.nodeId !== void 0) return classifyExplicitNode(capName, opts.nodeId, opts.deviceId, snapshot, rejected);
+      return classifySingleton(capName, opts.deviceId, snapshot, rejected);
+    }
+    function classifyExplicitNode(capName, nodeId, deviceId, snap, rejected) {
+      if (nodeId === snap.hubNodeId) {
+        const residentProvides = snap.hubResidentProvides;
+        const providesOnHub = residentProvides ?? snap.hubInProcessProvides;
+        const getRef = residentProvides !== void 0 ? snap.getHubResidentProviderRef : snap.getInProcessProviderRef;
+        if (providesOnHub(capName)) {
+          const ref = getRef?.(capName) ?? null;
+          if (ref !== null) return {
+            kind: "hub-in-process",
+            capName,
+            ref
+          };
+          rejected.push({
+            kind: "hub-in-process",
+            why: "provider ref not available in snapshot"
+          });
+          throw new CapRouteError(capName, void 0, {
+            reason: "no-provider",
+            nodeId,
+            rejected
+          });
+        }
+        if (snap.hubLocalChildProvides(capName, deviceId)) {
+          const childId = snap.getHubLocalChildId?.(capName, deviceId) ?? null;
+          if (childId !== null) return {
+            kind: "hub-local-uds",
+            capName,
+            childId
+          };
+          rejected.push({
+            kind: "hub-local-uds",
+            why: "child id not resolvable from snapshot"
+          });
+          throw new CapRouteError(capName, void 0, {
+            reason: "no-provider",
+            nodeId,
+            rejected
+          });
+        }
+        rejected.push({
+          kind: "hub-in-process",
+          why: "hub does not provide this cap in-process"
+        });
+        rejected.push({
+          kind: "hub-local-uds",
+          why: "no hub-local child provides this cap"
+        });
+        throw new CapRouteError(capName, void 0, {
+          reason: "no-provider",
+          nodeId,
+          rejected
+        });
+      }
+      if (!snap.nodeOnline(nodeId)) {
+        rejected.push({
+          kind: "remote-moleculer",
+          why: `node ${nodeId} is offline`
+        });
+        throw new CapRouteError(capName, void 0, {
+          reason: "node-offline",
+          nodeId,
+          rejected
+        });
+      }
+      if (snap.nodeIsAgent(nodeId)) {
+        if (snap.nodeKnowsCap(nodeId, capName)) return {
+          kind: "agent-child-forward",
+          capName,
+          agentNodeId: nodeId,
+          childId: snap.getAgentChildId?.(nodeId, capName) ?? void 0
+        };
+        rejected.push({
+          kind: "agent-child-forward",
+          why: `agent ${nodeId} does not know cap ${capName}`
+        });
+        throw new CapRouteError(capName, void 0, {
+          reason: "no-provider",
+          nodeId,
+          rejected
+        });
+      }
+      return {
+        kind: "remote-moleculer",
+        capName,
+        nodeId
+      };
+    }
+    function classifySingleton(capName, deviceId, snap, rejected) {
+      if (snap.hubInProcessProvides(capName)) {
+        const ref = snap.getInProcessProviderRef?.(capName) ?? null;
+        if (ref !== null) return {
+          kind: "hub-in-process",
+          capName,
+          ref
+        };
+        rejected.push({
+          kind: "hub-in-process",
+          why: "provider ref not available in snapshot"
+        });
+      } else rejected.push({
+        kind: "hub-in-process",
+        why: "hub does not provide this cap in-process"
+      });
+      if (snap.hubLocalChildProvides(capName, deviceId)) {
+        const childId = snap.getHubLocalChildId?.(capName, deviceId) ?? null;
+        if (childId !== null) return {
+          kind: "hub-local-uds",
+          capName,
+          childId
+        };
+        rejected.push({
+          kind: "hub-local-uds",
+          why: "child id not resolvable from snapshot"
+        });
+      } else rejected.push({
+        kind: "hub-local-uds",
+        why: "no hub-local child provides this cap"
+      });
+      const knownNodes = snap.listKnownNodeIds?.() ?? [];
+      for (const nodeId of knownNodes) if (nodeId !== snap.hubNodeId && snap.nodeOnline(nodeId) && snap.nodeKnowsCap(nodeId, capName)) return {
+        kind: "remote-moleculer",
+        capName,
+        nodeId
+      };
+      rejected.push({
+        kind: "remote-moleculer",
+        why: "no online remote node knows this cap"
+      });
+      throw new CapRouteError(capName, void 0, {
+        reason: "no-provider",
+        rejected
+      });
+    }
+    var DISCOVERY_ERROR_TYPES = /* @__PURE__ */ new Set(["SERVICE_NOT_FOUND", "SERVICE_NOT_AVAILABLE"]);
+    var DEFAULT_DISCOVERY_TIMEOUT_MS$1 = 3e4;
+    function isDiscoveryError(err) {
+      if (typeof err !== "object" || err === null) return false;
+      const type = err.type;
+      return typeof type === "string" && DISCOVERY_ERROR_TYPES.has(type);
+    }
+    async function callWithServiceDiscovery(broker, serviceName, action, params, opts, discoveryTimeoutMs = DEFAULT_DISCOVERY_TIMEOUT_MS$1) {
+      try {
+        return await broker.call(action, params, opts);
+      } catch (err) {
+        if (!isDiscoveryError(err)) throw err;
+        await broker.waitForServices([serviceName], discoveryTimeoutMs);
+        return await broker.call(action, params, opts);
+      }
+    }
+    var AGENT_CAP_FWD_SERVICE = "$agent-cap-fwd";
+    var AGENT_CAP_FWD_ACTION = `${AGENT_CAP_FWD_SERVICE}.forward`;
+    var REMOTE_CALL_TIMEOUT_MS = 6e4;
+    function extractDeviceId(args) {
+      if (args === null || typeof args !== "object") return void 0;
+      const raw = Reflect.get(args, "deviceId");
+      return typeof raw === "number" ? raw : void 0;
+    }
+    function extractNodeId(args) {
+      if (args === null || typeof args !== "object") return void 0;
+      const raw = Reflect.get(args, "nodeId");
+      return typeof raw === "string" && raw.length > 0 ? raw : void 0;
+    }
+    function withCallerAddonId(args, callerAddonId) {
+      if (callerAddonId === void 0) return args;
+      if (args === null || typeof args !== "object" || Array.isArray(args)) return args;
+      return {
+        ...args,
+        callerAddonId
+      };
+    }
+    var CapRouteResolver = class {
+      hubNodeId;
+      broker;
+      hubLocalRegistry;
+      nodeAuthority;
+      inProcessProviders;
+      hubResidentProviders;
+      capTimeoutMs;
+      snapshot;
+      constructor(deps) {
+        this.hubNodeId = deps.hubNodeId;
+        this.broker = deps.broker;
+        this.hubLocalRegistry = deps.hubLocalRegistry;
+        this.nodeAuthority = deps.nodeAuthority;
+        this.inProcessProviders = deps.inProcessProviders;
+        this.hubResidentProviders = deps.hubResidentProviders;
+        this.capTimeoutMs = deps.capTimeoutMs;
+        this.snapshot = this.buildSnapshot();
+      }
+      /** Per-call RPC timeout: the cap method's declared override, else the default. */
+      callTimeout(capName, method) {
+        return this.capTimeoutMs?.(capName, method) ?? REMOTE_CALL_TIMEOUT_MS;
+      }
+      resolveCapRoute(capName, opts) {
+        return classifyCapRoute(capName, opts, this.snapshot);
+      }
+      /**
+      * Resolve the hub-local-uds route for a cap owned by a forked hub-local
+      * child, IGNORING any in-hub provider registered for the same cap name.
+      *
+      * `resolveCapRoute` gives Priority 1 to `hub-in-process`: when an in-hub
+      * provider (e.g. a wrapper) is registered for the cap, the route always
+      * classifies as `hub-in-process` and the hub-local-uds NATIVE child is never
+      * reached. That is correct for the generic dispatch path (the wrapper is the
+      * active provider), but WRONG for the native-cap fallback
+      * (`setNativeFallback`), whose contract is to reach the NATIVE provider in
+      * the forked vendor child so a wrapper can delegate to it. A wrapper cap
+      * with a forked native (today: `snapshot`) otherwise resolves to the wrapper
+      * itself, the native is never invoked, and the wrapper silently falls
+      * through to its secondary strategy.
+      *
+      * This method consults ONLY the hub-local-child authority
+      * (`hubLocalChildProvides` + `getHubLocalChildId`, both deviceId-aware), so
+      * it returns the native child route regardless of any in-process shadow.
+      * Returns null when no hub-local child owns `(capName, deviceId)` — the
+      * caller then falls through to its remote-resolution branch.
+      */
+      resolveHubLocalUdsRoute(capName, deviceId) {
+        if (!this.snapshot.hubLocalChildProvides(capName, deviceId)) return null;
+        const childId = this.snapshot.getHubLocalChildId?.(capName, deviceId) ?? null;
+        if (childId === null) return null;
+        return {
+          kind: "hub-local-uds",
+          capName,
+          childId
+        };
+      }
+      /**
+      * @param addonId Optional out-of-band PROVIDER-selection hint (Task 7.5a):
+      *   the addonId of the provider the CALLER already resolved (e.g.
+      *   `buildCapCallFn`'s `deps.addonId` for a registered grouped-runner
+      *   provider). Only meaningful for `agent-child-forward` — a `remote-moleculer`
+      *   route already encodes the provider in its action name
+      *   (`${addonId}.${cap}.${method}`, via `NodeCapAuthority.getAddonId`), and a
+      *   `hub-local-uds` caller that already knows the addonId (`buildCapCallFn`)
+      *   talks to `LocalChildRegistry.callCapOnChild` directly rather than through
+      *   `dispatch`.
+      * @param callerAddonId Optional out-of-band CALLER-identity hint — the
+      *   addon that ORIGINATED the call, distinct from `addonId` above (which
+      *   names the resolved PROVIDER, not the caller). Set by
+      *   `onUnownedCall` from `CapCallInput.callerAddonId`
+      *   (`LocalChildRegistry` stamped it off the registered `childId`). Only
+      *   the `hub-in-process` branch consumes it — merged into `args` so a
+      *   diagnostic tool deep in that provider (e.g. device-manager's
+      *   fleet-read census) can read it without every provider method changing
+      *   signature, the same "extra field the provider destructures or
+      *   ignores" convention `nodeId` already uses on this path.
+      */
+      async dispatch(route, method, args, addonId, callerAddonId) {
+        try {
+          return await this.dispatchInner(route, method, args, addonId, callerAddonId);
+        } catch (err) {
+          if (err instanceof CapRouteError) throw err;
+          const nodeId = this.routeNodeId(route);
+          const cause = err instanceof Error ? err : new Error(String(err));
+          throw new CapRouteError(route.capName, method, {
+            reason: "transport-failed",
+            nodeId,
+            rejected: [{
+              kind: route.kind,
+              why: cause.message
+            }]
+          }, cause);
+        }
+      }
+      /**
+      * Inner dispatch: may throw CapRouteError (validation failures) or arbitrary
+      * transport errors. The outer `dispatch` wraps non-CapRouteErrors.
+      */
+      async dispatchInner(route, method, args, addonId, callerAddonId) {
+        switch (route.kind) {
+          case "hub-in-process":
+            return route.ref.invoke(method, withCallerAddonId(args, callerAddonId));
+          case "hub-local-uds": {
+            const registry = this.hubLocalRegistry;
+            if (registry === null) throw new CapRouteError(route.capName, method, {
+              reason: "no-provider",
+              rejected: [{
+                kind: "hub-local-uds",
+                why: "UDS registry not available"
+              }]
+            });
+            const deviceId = extractDeviceId(args);
+            const input = {
+              capName: route.capName,
+              method,
+              args,
+              ...deviceId !== void 0 ? { deviceId } : {}
+            };
+            return registry.callCapOnChild(route.childId, input);
+          }
+          case "remote-moleculer": {
+            const addonId2 = this.nodeAuthority.getAddonId(route.nodeId, route.capName);
+            if (addonId2 === null) throw new CapRouteError(route.capName, method, {
+              reason: "no-provider",
+              nodeId: route.nodeId,
+              rejected: [{
+                kind: "remote-moleculer",
+                why: `no addonId known for ${route.nodeId}/${route.capName}`
+              }]
+            });
+            const deviceId = extractDeviceId(args);
+            const isNative = this.nodeAuthority.isNativeCap(route.nodeId, route.capName, deviceId);
+            const action = capActionName(addonId2, route.capName, method, isNative);
+            return callWithServiceDiscovery(this.broker, addonId2, action, args, {
+              nodeID: route.nodeId,
+              timeout: this.callTimeout(route.capName, method)
+            });
+          }
+          case "agent-child-forward": {
+            const deviceId = extractDeviceId(args);
+            const params = {
+              capName: route.capName,
+              method,
+              args,
+              ...route.childId !== void 0 ? { childId: route.childId } : {},
+              ...deviceId !== void 0 ? { deviceId } : {},
+              ...addonId !== void 0 ? { addonId } : {}
+            };
+            return callWithServiceDiscovery(this.broker, AGENT_CAP_FWD_SERVICE, AGENT_CAP_FWD_ACTION, params, {
+              nodeID: route.agentNodeId,
+              timeout: this.callTimeout(route.capName, method)
+            });
+          }
+        }
+      }
+      buildSnapshot() {
+        const hubLocalRegistry = this.hubLocalRegistry;
+        const nodeAuthority = this.nodeAuthority;
+        const inProcessProviders = this.inProcessProviders;
+        const hubResidentProviders = this.hubResidentProviders;
+        return {
+          hubNodeId: this.hubNodeId,
+          hubInProcessProvides: (cap) => inProcessProviders(cap) !== null,
+          ...hubResidentProviders !== void 0 ? {
+            hubResidentProvides: (cap) => hubResidentProviders(cap) !== null,
+            getHubResidentProviderRef: (cap) => hubResidentProviders(cap)
+          } : {},
+          hubLocalChildProvides: (cap, deviceId) => hubLocalRegistry !== null && hubLocalRegistry.resolveChildId(cap, deviceId) !== null,
+          nodeKnowsCap: (nodeId, cap) => nodeAuthority.nodeKnowsCap(nodeId, cap),
+          nodeIsAgent: (nodeId) => nodeAuthority.nodeIsAgent(nodeId),
+          nodeOnline: (nodeId) => nodeAuthority.nodeOnline(nodeId),
+          listKnownNodeIds: () => nodeAuthority.listNodeIds(),
+          getInProcessProviderRef: (cap) => inProcessProviders(cap),
+          getHubLocalChildId: (cap, deviceId) => hubLocalRegistry !== null ? hubLocalRegistry.resolveChildId(cap, deviceId) : null,
+          getAgentChildId: (agentNodeId, cap) => nodeAuthority.getAgentChildId(agentNodeId, cap)
+        };
+      }
+      /** Extract a nodeId string from a route for error reporting, or undefined. */
+      routeNodeId(route) {
+        switch (route.kind) {
+          case "hub-in-process":
+            return this.hubNodeId;
+          case "hub-local-uds":
+            return `${this.hubNodeId}/${route.childId}`;
+          case "remote-moleculer":
+            return route.nodeId;
+          case "agent-child-forward":
+            return route.agentNodeId;
+        }
+      }
+    };
     var LEVEL_ORDER = {
       debug: 0,
       info: 1,
@@ -128380,12 +129212,36 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
         return LocalChildRegistry;
       }
     });
+    Object.defineProperty(exports, "MESH_QUEUE_TOP_N", {
+      enumerable: true,
+      get: function() {
+        return MESH_QUEUE_TOP_N;
+      }
+    });
     Object.defineProperty(exports, "NATIVE_PROVIDER_SERVICE_INFIX", {
       enumerable: true,
       get: function() {
         return NATIVE_PROVIDER_SERVICE_INFIX;
       }
     });
+    Object.defineProperty(exports, "OUTBOUND_QUEUE_COOLDOWN_MS", {
+      enumerable: true,
+      get: function() {
+        return OUTBOUND_QUEUE_COOLDOWN_MS;
+      }
+    });
+    Object.defineProperty(exports, "OUTBOUND_QUEUE_SUSTAIN_MS", {
+      enumerable: true,
+      get: function() {
+        return OUTBOUND_QUEUE_SUSTAIN_MS;
+      }
+    });
+    Object.defineProperty(exports, "OUTBOUND_QUEUE_THRESHOLD_BYTES", {
+      enumerable: true,
+      get: function() {
+        return OUTBOUND_QUEUE_THRESHOLD_BYTES;
+      }
+    });
     Object.defineProperty(exports, "PARENT_ROUTED_PROVIDER_ADDON_ID", {
       enumerable: true,
       get: function() {
@@ -128422,6 +129278,12 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
         return SOCKET_PLANE_TOP_N;
       }
     });
+    Object.defineProperty(exports, "SOCKET_QUEUE_TOP_N", {
+      enumerable: true,
+      get: function() {
+        return SOCKET_QUEUE_TOP_N;
+      }
+    });
     Object.defineProperty(exports, "SocketChannel", {
       enumerable: true,
       get: function() {
@@ -128620,6 +129482,18 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
         return createLoopDelayMeter;
       }
     });
+    Object.defineProperty(exports, "createMeshQueueReader", {
+      enumerable: true,
+      get: function() {
+        return createMeshQueueReader;
+      }
+    });
+    Object.defineProperty(exports, "createOutboundQueueGate", {
+      enumerable: true,
+      get: function() {
+        return createOutboundQueueGate;
+      }
+    });
     Object.defineProperty(exports, "createParentUnownedCallHandler", {
       enumerable: true,
       get: function() {
@@ -128734,6 +129608,18 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
         return formatHeapSpaces;
       }
     });
+    Object.defineProperty(exports, "formatMeshQueue", {
+      enumerable: true,
+      get: function() {
+        return formatMeshQueue;
+      }
+    });
+    Object.defineProperty(exports, "formatOutboundQueueVerdict", {
+      enumerable: true,
+      get: function() {
+        return formatOutboundQueueVerdict;
+      }
+    });
     Object.defineProperty(exports, "formatSocketPlane", {
       enumerable: true,
       get: function() {
@@ -128878,6 +129764,12 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
         return readMoleculerFanoutMode;
       }
     });
+    Object.defineProperty(exports, "readSocketQueues", {
+      enumerable: true,
+      get: function() {
+        return readSocketQueues;
+      }
+    });
     Object.defineProperty(exports, "reclaimIntervalMs", {
       enumerable: true,
       get: function() {
@@ -129013,11 +129905,11 @@ var require_manifest_system_deps_Bo92lg5u = __commonJS({
   }
 });
 
-// ../system/dist/custom-action-registry-BDwM5qAK.js
-var require_custom_action_registry_BDwM5qAK = __commonJS({
-  "../system/dist/custom-action-registry-BDwM5qAK.js"(exports) {
+// ../system/dist/custom-action-registry-DKWhaWL1.js
+var require_custom_action_registry_DKWhaWL1 = __commonJS({
+  "../system/dist/custom-action-registry-DKWhaWL1.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_BOlMCOeT();
+    var require_dist10 = require_dist_B17W9ngu();
     var CustomActionRegistry = class {
       byAddon = /* @__PURE__ */ new Map();
       registerAddon(addonId, catalog, handler) {
@@ -132831,7 +133723,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BOlMCOeT();
+    var require_dist10 = require_dist_B17W9ngu();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -132856,25 +133748,25 @@ var require_dist3 = __commonJS({
     var require_builtins_system_config_system_config_addon = require_system_config_addon();
     require_system_config();
     var require_builtins_winston_logging_index = require_winston_logging();
-    var require_event_loop_stall_monitor = require_event_loop_stall_monitor_DM9OAzy8();
-    var require_tls$1 = require_tls_BxQlomxd();
-    var require_manifest_system_deps = require_manifest_system_deps_Bo92lg5u();
-    var require_resource_monitor = require_resource_monitor_CdnzxBLP();
-    var require_custom_action_registry = require_custom_action_registry_BDwM5qAK();
+    var require_event_loop_stall_monitor = require_event_loop_stall_monitor_CAsHdMwP();
+    var require_tls$1 = require_tls_BFs4PzoW();
+    var require_manifest_system_deps = require_manifest_system_deps_g_nK0xsF();
+    var require_resource_monitor = require_resource_monitor_LVE1BoLs();
+    var require_custom_action_registry = require_custom_action_registry_DKWhaWL1();
     var zod = require_zod();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path, 1);
-    var node_child_process = __require("child_process");
-    var node_util = __require("util");
-    node_util = require_chunk.__toESM(node_util);
     var node_fs = __require("fs");
     var node_fs$1 = require_chunk.__toESM(node_fs, 1);
     node_fs = require_chunk.__toESM(node_fs);
+    var node_child_process = __require("child_process");
     var node_os = __require("os");
     node_os = require_chunk.__toESM(node_os);
+    var node_util = __require("util");
+    node_util = require_chunk.__toESM(node_util);
     var node_http = __require("http");
     var node_vm = __require("vm");
     node_vm = require_chunk.__toESM(node_vm);
@@ -212614,33 +213506,13 @@ globstar while`, t, d, e, f, m), this.matchOne(t.slice(d), e.slice(f), s)) retur
       }
     }
     async function getPidStats$1(pids) {
-      if (pids.length === 0) return /* @__PURE__ */ new Map();
-      return new Promise((resolve) => {
-        (0, node_child_process.execFile)("ps", [
-          "-o",
-          "pid=,pcpu=,rss=",
-          "-p",
-          pids.join(",")
-        ], { timeout: 5e3 }, (err, stdout) => {
-          const result = /* @__PURE__ */ new Map();
-          if (err || !stdout) {
-            resolve(result);
-            return;
-          }
-          for (const line of stdout.trim().split("\n")) {
-            const parts = line.trim().split(/\s+/);
-            if (parts.length < 3) continue;
-            const pid = parseInt(parts[0], 10);
-            const cpu = parseFloat(parts[1]);
-            const rssKb = parseInt(parts[2], 10);
-            if (!isNaN(pid) && !isNaN(cpu) && !isNaN(rssKb)) result.set(pid, {
-              cpu: Math.round(cpu * 10) / 10,
-              memoryRss: rssKb * 1024
-            });
-          }
-          resolve(result);
-        });
+      const stats = await require_resource_monitor.getPidStats(pids);
+      const result = /* @__PURE__ */ new Map();
+      for (const [pid, s] of stats) result.set(pid, {
+        cpu: s.cpu,
+        memoryRss: s.memory
       });
+      return result;
     }
     var EMPTY_HEAP_DECLARATION = {
       profile: void 0,
@@ -213629,6 +214501,7 @@ globstar while`, t, d, e, f, m), this.matchOne(t.slice(d), e.slice(f), s)) retur
     exports.LokiDestination = require_builtins_loki_logging_index.LokiDestination$1;
     exports.LokiLoggingAddon = require_builtins_loki_logging_index.LokiLoggingAddon$1;
     exports.MAX_LEAF_VALIDITY_DAYS = require_tls$1.MAX_LEAF_VALIDITY_DAYS;
+    exports.MESH_QUEUE_TOP_N = require_manifest_system_deps.MESH_QUEUE_TOP_N;
     exports.METHOD_ACCESS_MAP = require_dist10.METHOD_ACCESS_MAP;
     exports.ModelDownloadService = require_event_loop_stall_monitor.ModelDownloadService;
     exports.NATIVE_PROVIDER_SERVICE_INFIX = require_manifest_system_deps.NATIVE_PROVIDER_SERVICE_INFIX;
@@ -213637,6 +214510,9 @@ globstar while`, t, d, e, f, m), this.matchOne(t.slice(d), e.slice(f), s)) retur
     exports.NativeMetricsProvider = require_builtins_native_metrics_native_metrics_addon.NativeMetricsProvider;
     exports.NetworkQualityTracker = NetworkQualityTracker;
     exports.NotificationService = NotificationService;
+    exports.OUTBOUND_QUEUE_COOLDOWN_MS = require_manifest_system_deps.OUTBOUND_QUEUE_COOLDOWN_MS;
+    exports.OUTBOUND_QUEUE_SUSTAIN_MS = require_manifest_system_deps.OUTBOUND_QUEUE_SUSTAIN_MS;
+    exports.OUTBOUND_QUEUE_THRESHOLD_BYTES = require_manifest_system_deps.OUTBOUND_QUEUE_THRESHOLD_BYTES;
     exports.PARENT_ROUTED_PROVIDER_ADDON_ID = require_manifest_system_deps.PARENT_ROUTED_PROVIDER_ADDON_ID;
     Object.defineProperty(exports, "PYTHON_VERSION", {
       enumerable: true,
@@ -213660,6 +214536,7 @@ globstar while`, t, d, e, f, m), this.matchOne(t.slice(d), e.slice(f), s)) retur
     exports.RingBuffer = RingBuffer;
     exports.SERVER_AUTH_OID = require_tls$1.SERVER_AUTH_OID;
     exports.SOCKET_PLANE_TOP_N = require_manifest_system_deps.SOCKET_PLANE_TOP_N;
+    exports.SOCKET_QUEUE_TOP_N = require_manifest_system_deps.SOCKET_QUEUE_TOP_N;
     exports.STALL_REPORT_MS = require_event_loop_stall_monitor.STALL_REPORT_MS;
     exports.STALL_TICK_MS = require_event_loop_stall_monitor.STALL_TICK_MS;
     exports.ScopedLogger = ScopedLogger;
@@ -213745,6 +214622,8 @@ globstar while`, t, d, e, f, m), this.matchOne(t.slice(d), e.slice(f), s)) retur
     exports.createKernelHwAccel = require_manifest_system_deps.createKernelHwAccel;
     exports.createLocalTransport = require_manifest_system_deps.createLocalTransport;
     exports.createLoopDelayMeter = require_manifest_system_deps.createLoopDelayMeter;
+    exports.createMeshQueueReader = require_manifest_system_deps.createMeshQueueReader;
+    exports.createOutboundQueueGate = require_manifest_system_deps.createOutboundQueueGate;
     exports.createParentUnownedCallHandler = require_manifest_system_deps.createParentUnownedCallHandler;
     exports.createProcessService = createProcessService;
     exports.createReadinessService = createReadinessService;
@@ -213815,6 +214694,8 @@ globstar while`, t, d, e, f, m), this.matchOne(t.slice(d), e.slice(f), s)) retur
     exports.formatEventPlane = require_manifest_system_deps.formatEventPlane;
     exports.formatHeapSpaces = require_manifest_system_deps.formatHeapSpaces;
     exports.formatLogLine = require_formatter.formatLogLine;
+    exports.formatMeshQueue = require_manifest_system_deps.formatMeshQueue;
+    exports.formatOutboundQueueVerdict = require_manifest_system_deps.formatOutboundQueueVerdict;
     exports.formatSocketPlane = require_manifest_system_deps.formatSocketPlane;
     exports.getBrokerEventBus = require_manifest_system_deps.getBrokerEventBus;
     exports.getCapUsageRegistry = require_manifest_system_deps.getCapUsageRegistry;
@@ -213892,6 +214773,7 @@ globstar while`, t, d, e, f, m), this.matchOne(t.slice(d), e.slice(f), s)) retur
     exports.readLanHttpState = require_tls$1.readLanHttpState;
     exports.readMoleculerFanoutMode = require_manifest_system_deps.readMoleculerFanoutMode;
     exports.readPendingRestart = readPendingRestart;
+    exports.readSocketQueues = require_manifest_system_deps.readSocketQueues;
     exports.readTlsAccessStatus = require_tls$1.readTlsAccessStatus;
     exports.readTlsMode = require_tls$1.readTlsMode;
     exports.readinessKey = require_dist10.readinessKey;
@@ -235898,8 +236780,8 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           *
           * An **empty array reads NOTHING** — `[]` is an empty page, never
           * "every camera". A request for no devices is a request, not an
-          * omission; same contract as `deviceManager.listFleet` and
-          * `pipelineAnalytics.listRecentTracks`.
+          * omission; same contract as `deviceManager.listAll`'s `deviceIds`
+          * and `pipelineAnalytics.listRecentTracks`.
           *
           * Absent (`undefined`) is the omission, and keeps the cluster-wide view.
           */
@@ -416020,6 +416902,355 @@ var require_auth_whoami = __commonJS({
   }
 });
 
+// ../../server/backend/dist/api/backup-download-pump.js
+var require_backup_download_pump = __commonJS({
+  "../../server/backend/dist/api/backup-download-pump.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.BACKUP_DOWNLOAD_DRAIN_GRACE_MS = exports.BACKUP_DOWNLOAD_CHUNK_BYTES = void 0;
+    exports.pumpDownload = pumpDownload;
+    exports.BACKUP_DOWNLOAD_CHUNK_BYTES = 8 * 1024 * 1024;
+    exports.BACKUP_DOWNLOAD_DRAIN_GRACE_MS = 6e4;
+    function waitForDrain(sink, graceMs) {
+      return new Promise((resolve) => {
+        const settle = (outcome) => {
+          sink.off("drain", onDrain);
+          sink.off("close", onClose);
+          clearTimeout(timer);
+          resolve(outcome);
+        };
+        const onDrain = () => settle("drained");
+        const onClose = () => settle("closed");
+        const timer = setTimeout(() => settle("timeout"), graceMs);
+        sink.on("drain", onDrain);
+        sink.on("close", onClose);
+      });
+    }
+    function errorOf(err) {
+      return err instanceof Error ? err : new Error(String(err));
+    }
+    async function pumpDownload(options) {
+      const { sizeBytes, read, sink } = options;
+      const chunkBytes = options.chunkBytes ?? exports.BACKUP_DOWNLOAD_CHUNK_BYTES;
+      const graceMs = options.graceMs ?? exports.BACKUP_DOWNLOAD_DRAIN_GRACE_MS;
+      const now = options.now ?? (() => Date.now());
+      const startedAt = now();
+      let offset = 0;
+      let drainWaits = 0;
+      let drainWaitMaxMs = 0;
+      const counters = () => ({
+        bytesWritten: offset,
+        drainWaits,
+        drainWaitMaxMs,
+        durationMs: now() - startedAt
+      });
+      while (offset < sizeBytes) {
+        if (sink.destroyed)
+          return { status: "peer-gone", ...counters() };
+        const length = Math.min(chunkBytes, sizeBytes - offset);
+        let chunk;
+        try {
+          chunk = await read(offset, length);
+        } catch (err) {
+          const error = errorOf(err);
+          sink.destroy(error);
+          return { status: "source-failed", error: error.message, ...counters() };
+        }
+        if (chunk.byteLength === 0) {
+          const error = new Error(`backup download: empty chunk at offset ${offset}/${sizeBytes}`);
+          sink.destroy(error);
+          return { status: "source-failed", error: error.message, ...counters() };
+        }
+        if (sink.destroyed)
+          return { status: "peer-gone", ...counters() };
+        const accepted = sink.write(chunk);
+        offset += chunk.byteLength;
+        if (accepted)
+          continue;
+        const waitStartedAt = now();
+        const outcome = await waitForDrain(sink, graceMs);
+        const waitedMs = now() - waitStartedAt;
+        drainWaits += 1;
+        if (waitedMs > drainWaitMaxMs)
+          drainWaitMaxMs = waitedMs;
+        if (outcome === "closed")
+          return { status: "peer-gone", ...counters() };
+        if (outcome === "timeout") {
+          const queuedBytes = sink.writableLength;
+          sink.destroy(new Error(`backup download: client stopped reading \u2014 ${queuedBytes} bytes queued for ${waitedMs} ms`));
+          return { status: "drain-timeout", heldForMs: waitedMs, queuedBytes, ...counters() };
+        }
+      }
+      sink.end();
+      return { status: "completed", ...counters() };
+    }
+  }
+});
+
+// ../../server/backend/dist/api/trpc/client-ip.js
+var require_client_ip = __commonJS({
+  "../../server/backend/dist/api/trpc/client-ip.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.extractClientIp = extractClientIp;
+    exports.extractCfConnectingIp = extractCfConnectingIp;
+    exports.extractPeerIp = extractPeerIp;
+    exports.extractUserAgent = extractUserAgent;
+    exports.ipClass = ipClass;
+    exports.classifyClient = classifyClient;
+    exports.classifyClientRequest = classifyClientRequest;
+    exports.deriveRelayOnly = deriveRelayOnly;
+    exports.isRemoteClientIp = isRemoteClientIp;
+    function extractClientIp(req) {
+      if (!req)
+        return null;
+      const xff = req.headers["x-forwarded-for"];
+      const xffValue = Array.isArray(xff) ? xff[0] : xff;
+      if (typeof xffValue === "string" && xffValue.length > 0) {
+        const first = xffValue.split(",")[0]?.trim();
+        if (first)
+          return normalizeIp(first);
+      }
+      if ("ip" in req && typeof req.ip === "string" && req.ip.length > 0) {
+        return normalizeIp(req.ip);
+      }
+      const remote = req.socket?.remoteAddress;
+      if (typeof remote === "string" && remote.length > 0) {
+        return normalizeIp(remote);
+      }
+      return null;
+    }
+    function extractCfConnectingIp(req) {
+      if (!req)
+        return null;
+      const raw = req.headers["cf-connecting-ip"];
+      const value = Array.isArray(raw) ? raw[0] : raw;
+      if (typeof value === "string" && value.length > 0)
+        return normalizeIp(value.trim());
+      return null;
+    }
+    function extractPeerIp(req) {
+      if (!req)
+        return null;
+      const remote = req.socket?.remoteAddress;
+      if (typeof remote === "string" && remote.length > 0)
+        return normalizeIp(remote);
+      return null;
+    }
+    function extractUserAgent(req) {
+      if (!req)
+        return null;
+      const ua = req.headers["user-agent"];
+      const value = Array.isArray(ua) ? ua[0] : ua;
+      if (typeof value === "string" && value.length > 0)
+        return value;
+      return null;
+    }
+    function normalizeIp(ip) {
+      let out = ip.trim();
+      if (out.startsWith("::ffff:"))
+        out = out.slice("::ffff:".length);
+      const pct = out.indexOf("%");
+      if (pct !== -1)
+        out = out.slice(0, pct);
+      return out;
+    }
+    function ipClass(ip) {
+      if (!ip)
+        return "lan";
+      if (ip.includes(":")) {
+        if (isTailscaleIpv6(ip))
+          return "vpn";
+        if (isPrivateIpv6(ip))
+          return "lan";
+        return "remote";
+      }
+      if (isIpv4(ip)) {
+        if (isTailscaleIpv4(ip))
+          return "vpn";
+        if (isPrivateIpv4(ip))
+          return "lan";
+        return "remote";
+      }
+      return "lan";
+    }
+    function classifyClient(args) {
+      if (args.peerIsLocal && args.cfConnectingIp)
+        return ipClass(args.cfConnectingIp);
+      return ipClass(args.clientIp);
+    }
+    function classifyClientRequest(req) {
+      if (!req)
+        return null;
+      const clientIp = extractClientIp(req);
+      const cfConnectingIp = extractCfConnectingIp(req);
+      const peerIp = extractPeerIp(req);
+      const peerIsLocal = peerIp !== null && ipClass(peerIp) !== "remote";
+      return classifyClient({ clientIp, cfConnectingIp, peerIsLocal });
+    }
+    function deriveRelayOnly(clientClass) {
+      return clientClass === "remote";
+    }
+    function isRemoteClientIp(ip) {
+      return ipClass(ip) === "remote";
+    }
+    function isIpv4(ip) {
+      const parts = ip.split(".");
+      if (parts.length !== 4)
+        return false;
+      return parts.every((p) => {
+        if (!/^\d{1,3}$/.test(p))
+          return false;
+        const n = Number.parseInt(p, 10);
+        return n >= 0 && n <= 255;
+      });
+    }
+    function isTailscaleIpv4(ip) {
+      const parts = ip.split(".").map((p) => Number.parseInt(p, 10));
+      const [a, b] = parts;
+      if (a === void 0 || b === void 0)
+        return false;
+      return a === 100 && b >= 64 && b <= 127;
+    }
+    function isPrivateIpv4(ip) {
+      const parts = ip.split(".").map((p) => Number.parseInt(p, 10));
+      const [a, b] = parts;
+      if (a === void 0 || b === void 0)
+        return false;
+      if (a === 10)
+        return true;
+      if (a === 127)
+        return true;
+      if (a === 172 && b >= 16 && b <= 31)
+        return true;
+      if (a === 192 && b === 168)
+        return true;
+      if (a === 169 && b === 254)
+        return true;
+      return false;
+    }
+    function isTailscaleIpv6(ip) {
+      return ip.toLowerCase().startsWith("fd7a:115c:a1e0:");
+    }
+    function isPrivateIpv6(ip) {
+      const lower = ip.toLowerCase();
+      if (lower === "::1")
+        return true;
+      if (lower === "::")
+        return true;
+      if (lower.startsWith("fe80"))
+        return true;
+      if (lower.startsWith("fc") || lower.startsWith("fd"))
+        return true;
+      return false;
+    }
+  }
+});
+
+// ../../server/backend/dist/api/backup-download.js
+var require_backup_download = __commonJS({
+  "../../server/backend/dist/api/backup-download.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.registerBackupDownloadRoute = registerBackupDownloadRoute;
+    var backup_download_pump_js_1 = require_backup_download_pump();
+    var client_ip_js_1 = require_client_ip();
+    function safeAttachmentName(name) {
+      return name.replace(/[\r\n"]/g, "_");
+    }
+    function registerBackupDownloadRoute(fastify, options) {
+      const { verifier, capabilities, logger } = options;
+      const chunkBytes = options.chunkBytes ?? backup_download_pump_js_1.BACKUP_DOWNLOAD_CHUNK_BYTES;
+      const graceMs = options.graceMs ?? backup_download_pump_js_1.BACKUP_DOWNLOAD_DRAIN_GRACE_MS;
+      fastify.get("/api/backup/download/:locationId/:archiveId", async (request, reply) => {
+        const authHeader = request.headers.authorization;
+        if (!authHeader) {
+          return reply.status(401).send({ error: "Unauthorized" });
+        }
+        try {
+          const payload = verifier.verifyToken(authHeader.replace("Bearer ", ""));
+          if (!payload.isAdmin) {
+            return reply.status(403).send({ error: "Admin required" });
+          }
+        } catch {
+          return reply.status(401).send({ error: "Invalid token" });
+        }
+        const { locationId, archiveId } = request.params;
+        const backup = capabilities.getSingleton("backup");
+        if (!backup?.listArchives) {
+          return reply.status(503).send({ error: "Backup orchestrator unavailable" });
+        }
+        const archives = await backup.listArchives({ destinationId: locationId });
+        const archive = archives.find((a) => a.id === archiveId);
+        if (!archive) {
+          return reply.status(404).send({ error: "Archive not found" });
+        }
+        const storage = capabilities.getSingleton("storage");
+        if (!storage?.beginDownload) {
+          return reply.status(503).send({ error: "Storage cap unavailable" });
+        }
+        const { downloadId, sizeBytes } = await storage.beginDownload({
+          location: locationId,
+          relativePath: archive.filename
+        });
+        reply.hijack();
+        reply.raw.writeHead(200, {
+          "content-type": "application/gzip",
+          "content-length": String(sizeBytes),
+          "content-disposition": `attachment; filename="${safeAttachmentName(`${archive.label ?? archive.id}.tar.gz`)}"`
+        });
+        const facts = {
+          locationId,
+          archiveId,
+          filename: archive.filename,
+          sizeBytes,
+          ip: (0, client_ip_js_1.extractClientIp)(request.raw) ?? "(unidentified)",
+          chunkBytes,
+          graceMs
+        };
+        let result;
+        try {
+          result = await (0, backup_download_pump_js_1.pumpDownload)({
+            sizeBytes,
+            chunkBytes,
+            graceMs,
+            sink: reply.raw,
+            read: (offset, length) => storage.readChunk({ downloadId, offset, length })
+          });
+        } finally {
+          try {
+            await storage.endDownload({ downloadId });
+          } catch (err) {
+            logger.warn("backup archive download: the storage cap refused to close the handle", {
+              meta: { ...facts, error: err instanceof Error ? err.message : String(err) }
+            });
+          }
+        }
+        logOutcome(logger, facts, result);
+      });
+    }
+    function logOutcome(logger, facts, result) {
+      const meta = { ...facts, ...result };
+      switch (result.status) {
+        case "completed":
+          logger.info("backup archive download completed", { meta });
+          return;
+        case "peer-gone":
+          logger.info("backup archive download abandoned \u2014 the client closed the connection", { meta });
+          return;
+        case "drain-timeout":
+          logger.warn("backup archive download cut \u2014 the client stopped reading and the response queue stayed unsent for the whole grace period (nothing more is read; the queue is released)", { meta });
+          return;
+        case "source-failed":
+          logger.warn("backup archive download failed \u2014 the storage cap could not serve the archive", {
+            meta
+          });
+          return;
+      }
+    }
+  }
+});
+
 // ../../server/backend/dist/auth/session-cookie.js
 var require_session_cookie = __commonJS({
   "../../server/backend/dist/auth/session-cookie.js"(exports) {
@@ -422314,166 +423545,6 @@ var require_core_cap_bridge = __commonJS({
   }
 });
 
-// ../../server/backend/dist/api/trpc/client-ip.js
-var require_client_ip = __commonJS({
-  "../../server/backend/dist/api/trpc/client-ip.js"(exports) {
-    "use strict";
-    Object.defineProperty(exports, "__esModule", { value: true });
-    exports.extractClientIp = extractClientIp;
-    exports.extractCfConnectingIp = extractCfConnectingIp;
-    exports.extractPeerIp = extractPeerIp;
-    exports.extractUserAgent = extractUserAgent;
-    exports.ipClass = ipClass;
-    exports.classifyClient = classifyClient;
-    exports.classifyClientRequest = classifyClientRequest;
-    exports.deriveRelayOnly = deriveRelayOnly;
-    exports.isRemoteClientIp = isRemoteClientIp;
-    function extractClientIp(req) {
-      if (!req)
-        return null;
-      const xff = req.headers["x-forwarded-for"];
-      const xffValue = Array.isArray(xff) ? xff[0] : xff;
-      if (typeof xffValue === "string" && xffValue.length > 0) {
-        const first = xffValue.split(",")[0]?.trim();
-        if (first)
-          return normalizeIp(first);
-      }
-      if ("ip" in req && typeof req.ip === "string" && req.ip.length > 0) {
-        return normalizeIp(req.ip);
-      }
-      const remote = req.socket?.remoteAddress;
-      if (typeof remote === "string" && remote.length > 0) {
-        return normalizeIp(remote);
-      }
-      return null;
-    }
-    function extractCfConnectingIp(req) {
-      if (!req)
-        return null;
-      const raw = req.headers["cf-connecting-ip"];
-      const value = Array.isArray(raw) ? raw[0] : raw;
-      if (typeof value === "string" && value.length > 0)
-        return normalizeIp(value.trim());
-      return null;
-    }
-    function extractPeerIp(req) {
-      if (!req)
-        return null;
-      const remote = req.socket?.remoteAddress;
-      if (typeof remote === "string" && remote.length > 0)
-        return normalizeIp(remote);
-      return null;
-    }
-    function extractUserAgent(req) {
-      if (!req)
-        return null;
-      const ua = req.headers["user-agent"];
-      const value = Array.isArray(ua) ? ua[0] : ua;
-      if (typeof value === "string" && value.length > 0)
-        return value;
-      return null;
-    }
-    function normalizeIp(ip) {
-      let out = ip.trim();
-      if (out.startsWith("::ffff:"))
-        out = out.slice("::ffff:".length);
-      const pct = out.indexOf("%");
-      if (pct !== -1)
-        out = out.slice(0, pct);
-      return out;
-    }
-    function ipClass(ip) {
-      if (!ip)
-        return "lan";
-      if (ip.includes(":")) {
-        if (isTailscaleIpv6(ip))
-          return "vpn";
-        if (isPrivateIpv6(ip))
-          return "lan";
-        return "remote";
-      }
-      if (isIpv4(ip)) {
-        if (isTailscaleIpv4(ip))
-          return "vpn";
-        if (isPrivateIpv4(ip))
-          return "lan";
-        return "remote";
-      }
-      return "lan";
-    }
-    function classifyClient(args) {
-      if (args.peerIsLocal && args.cfConnectingIp)
-        return ipClass(args.cfConnectingIp);
-      return ipClass(args.clientIp);
-    }
-    function classifyClientRequest(req) {
-      if (!req)
-        return null;
-      const clientIp = extractClientIp(req);
-      const cfConnectingIp = extractCfConnectingIp(req);
-      const peerIp = extractPeerIp(req);
-      const peerIsLocal = peerIp !== null && ipClass(peerIp) !== "remote";
-      return classifyClient({ clientIp, cfConnectingIp, peerIsLocal });
-    }
-    function deriveRelayOnly(clientClass) {
-      return clientClass === "remote";
-    }
-    function isRemoteClientIp(ip) {
-      return ipClass(ip) === "remote";
-    }
-    function isIpv4(ip) {
-      const parts = ip.split(".");
-      if (parts.length !== 4)
-        return false;
-      return parts.every((p) => {
-        if (!/^\d{1,3}$/.test(p))
-          return false;
-        const n = Number.parseInt(p, 10);
-        return n >= 0 && n <= 255;
-      });
-    }
-    function isTailscaleIpv4(ip) {
-      const parts = ip.split(".").map((p) => Number.parseInt(p, 10));
-      const [a, b] = parts;
-      if (a === void 0 || b === void 0)
-        return false;
-      return a === 100 && b >= 64 && b <= 127;
-    }
-    function isPrivateIpv4(ip) {
-      const parts = ip.split(".").map((p) => Number.parseInt(p, 10));
-      const [a, b] = parts;
-      if (a === void 0 || b === void 0)
-        return false;
-      if (a === 10)
-        return true;
-      if (a === 127)
-        return true;
-      if (a === 172 && b >= 16 && b <= 31)
-        return true;
-      if (a === 192 && b === 168)
-        return true;
-      if (a === 169 && b === 254)
-        return true;
-      return false;
-    }
-    function isTailscaleIpv6(ip) {
-      return ip.toLowerCase().startsWith("fd7a:115c:a1e0:");
-    }
-    function isPrivateIpv6(ip) {
-      const lower = ip.toLowerCase();
-      if (lower === "::1")
-        return true;
-      if (lower === "::")
-        return true;
-      if (lower.startsWith("fe80"))
-        return true;
-      if (lower.startsWith("fc") || lower.startsWith("fd"))
-        return true;
-      return false;
-    }
-  }
-});
-
 // ../../server/backend/dist/api/trpc/http-request-census-hook.js
 var require_http_request_census_hook = __commonJS({
   "../../server/backend/dist/api/trpc/http-request-census-hook.js"(exports) {
@@ -433254,6 +434325,7 @@ var require_main4 = __commonJS({
     var ws_2 = require_ws();
     var addon_upload_1 = require_addon_upload();
     var auth_whoami_1 = require_auth_whoami();
+    var backup_download_js_1 = require_backup_download();
     var health_routes_1 = require_health_routes();
     var adaptive_probe_routes_1 = require_adaptive_probe_routes();
     var model_distributor_js_1 = require_model_distributor();
@@ -433401,6 +434473,12 @@ var require_main4 = __commonJS({
         socketPlane: (0, system_1.createSocketPlaneReader)({
           registry: () => moleculerForEventPlane?.childRegistry ?? null
         }),
+        // The write queue to every peer NODE, from Moleculer's own writer
+        // sockets. Those are unref'd (`TcpWriter.connect`), so the 2026-09-10
+        // exclusion of "every socket queue" — a sum over `_getActiveHandles()` —
+        // never saw them. With the UDS queues above, every outbound plane this
+        // process writes to is now on the line and judged on every probe (D446).
+        meshQueue: (0, system_1.createMeshQueueReader)(() => moleculerForEventPlane?.broker ?? null),
         // The ArrayBuffer census, armed by the probe itself. Twice on 2026-09-10
         // this process's `arrayBuffers` climbed linearly for an hour (to 1.3 GB
         // and to 5 GB, both LIVE across a forced compaction) and released in one
@@ -433716,70 +434794,10 @@ var require_main4 = __commonJS({
             });
           }
         });
-        fastify.get("/api/backup/download/:locationId/:archiveId", async (request, reply) => {
-          const authHeader = request.headers.authorization;
-          if (!authHeader) {
-            return reply.status(401).send({ error: "Unauthorized" });
-          }
-          try {
-            const token2 = authHeader.replace("Bearer ", "");
-            const downloadAuth = app.get(auth_service_1.AuthService);
-            const payload = downloadAuth.verifyToken(token2);
-            if (!payload.isAdmin) {
-              return reply.status(403).send({ error: "Admin required" });
-            }
-          } catch {
-            return reply.status(401).send({ error: "Invalid token" });
-          }
-          const { locationId, archiveId } = request.params;
-          const backupSingleton = capabilityRegistry.getSingleton("backup");
-          if (!backupSingleton?.listArchives) {
-            return reply.status(503).send({ error: "Backup orchestrator unavailable" });
-          }
-          const archives = await backupSingleton.listArchives({ destinationId: locationId });
-          const archive = archives.find((a) => a.id === archiveId);
-          if (!archive) {
-            return reply.status(404).send({ error: "Archive not found" });
-          }
-          const storage = capabilityRegistry.getSingleton("storage");
-          if (!storage?.beginDownload) {
-            return reply.status(503).send({ error: "Storage cap unavailable" });
-          }
-          const downloadName = `${archive.label ?? archive.id}.tar.gz`;
-          const safeName = downloadName.replace(/[\r\n"]/g, "_");
-          reply.header("content-type", "application/gzip");
-          reply.header("content-length", String(archive.sizeBytes));
-          reply.header("content-disposition", `attachment; filename="${safeName}"`);
-          const { downloadId, sizeBytes } = await storage.beginDownload({
-            location: locationId,
-            relativePath: archive.filename
-          });
-          const CHUNK = 8 * 1024 * 1024;
-          try {
-            let offset = 0;
-            while (offset < sizeBytes) {
-              const len = Math.min(CHUNK, sizeBytes - offset);
-              const chunk = await storage.readChunk({ downloadId, offset, length: len });
-              if (chunk.byteLength === 0) {
-                throw new Error(`backup download: empty chunk at offset ${offset}/${sizeBytes}`);
-              }
-              reply.raw.write(chunk);
-              offset += chunk.byteLength;
-            }
-            reply.raw.end();
-          } catch (err) {
-            console.error("[backup-download] stream failed:", err);
-            if (!reply.raw.headersSent) {
-              return reply.status(500).send({ error: "Download failed" });
-            }
-            reply.raw.destroy(err instanceof Error ? err : new Error(String(err)));
-          } finally {
-            try {
-              await storage.endDownload({ downloadId });
-            } catch {
-            }
-          }
-          return reply;
+        (0, backup_download_js_1.registerBackupDownloadRoute)(fastify, {
+          verifier: app.get(auth_service_1.AuthService),
+          capabilities: capabilityRegistry,
+          logger: app.get(logging_service_1.LoggingService).createLogger("backup-download")
         });
         fastify.post("/api/auth/session", async (request, reply) => {
           const token2 = request.body?.token;