rigscope 0.0.0-stage → 0.1.1

package/docs/stress-2026-11-04/index.jsonl

@@ -0,0 +1,29 @@
+{"pass": true, "reasons": [], "machines": 100, "users": 1, "sseClients": 1, "durationMs": 20000, "committedPerSecond": 100.0, "sampleCadenceRatio": 0.9998, "historyCadenceRatio": 0.9998, "ackP95Ms": 61.13, "historyP95Ms": 11.29, "eventLoopP99Ms": 34.28, "sseNewestSampleP95Ms": 405, "hubCpuPercentOneCore": 12.69, "hubRssPeakMiB": 131.3, "sseMegabytes": 4.5, "report": "docs/stress-2026-11-04/180301-probe-m100-u1-s1-20000ms.json", "resources": "docs/stress-2026-11-04/180301-probe-m100-u1-s1-20000ms.resources.json", "wallSeconds": 34.1, "minimumAvailableMemoryGiB": 109.4, "peakHostCpuPercent": 6.15, "peakTestRssMiB": 274.1, "swapOutDeltaBytes": 0}
+{"pass": true, "reasons": [], "machines": 200, "users": 1, "sseClients": 1, "durationMs": 20000, "committedPerSecond": 199.9, "sampleCadenceRatio": 0.9997, "historyCadenceRatio": 0.9997, "ackP95Ms": 63.33, "historyP95Ms": 13.55, "eventLoopP99Ms": 44.73, "sseNewestSampleP95Ms": 266, "hubCpuPercentOneCore": 20.42, "hubRssPeakMiB": 153.5, "sseMegabytes": 9.1, "report": "docs/stress-2026-11-04/180335-probe-m200-u1-s1-20000ms.json", "resources": "docs/stress-2026-11-04/180335-probe-m200-u1-s1-20000ms.resources.json", "wallSeconds": 34.1, "minimumAvailableMemoryGiB": 109.8, "peakHostCpuPercent": 3.94, "peakTestRssMiB": 272.3, "swapOutDeltaBytes": 0}
+{"pass": true, "reasons": [], "machines": 400, "users": 1, "sseClients": 1, "durationMs": 20000, "committedPerSecond": 399.1, "sampleCadenceRatio": 0.9978, "historyCadenceRatio": 1.0498, "ackP95Ms": 56.62, "historyP95Ms": 30.29, "eventLoopP99Ms": 45.38, "sseNewestSampleP95Ms": 79, "hubCpuPercentOneCore": 34.98, "hubRssPeakMiB": 192.4, "sseMegabytes": 18.2, "report": "docs/stress-2026-11-04/180409-probe-m400-u1-s1-20000ms.json", "resources": "docs/stress-2026-11-04/180409-probe-m400-u1-s1-20000ms.resources.json", "wallSeconds": 34.1, "minimumAvailableMemoryGiB": 109.7, "peakHostCpuPercent": 4.98, "peakTestRssMiB": 366.0, "swapOutDeltaBytes": 0}
+{"pass": false, "reasons": ["SSE admission/delivery incomplete (0/1)"], "machines": 800, "users": 1, "sseClients": 1, "durationMs": 20000, "committedPerSecond": 799.8, "sampleCadenceRatio": 0.9998, "historyCadenceRatio": 1.0498, "ackP95Ms": 53.04, "historyP95Ms": 5.26, "eventLoopP99Ms": 48.37, "sseNewestSampleP95Ms": 133, "hubCpuPercentOneCore": 60.76, "hubRssPeakMiB": 237.6, "sseMegabytes": 1.6, "report": "docs/stress-2026-11-04/180443-probe-m800-u1-s1-20000ms.json", "resources": "docs/stress-2026-11-04/180443-probe-m800-u1-s1-20000ms.resources.json", "wallSeconds": 35.1, "minimumAvailableMemoryGiB": 109.5, "peakHostCpuPercent": 4.76, "peakTestRssMiB": 382.2, "swapOutDeltaBytes": 0}
+{"pass": false, "reasons": ["SSE admission/delivery incomplete (0/1)"], "machines": 600, "users": 1, "sseClients": 1, "durationMs": 20000, "committedPerSecond": 599.8, "sampleCadenceRatio": 0.9996, "historyCadenceRatio": 1.0498, "ackP95Ms": 54.43, "historyP95Ms": 14.49, "eventLoopP99Ms": 46.2, "sseNewestSampleP95Ms": 71, "hubCpuPercentOneCore": 49.28, "hubRssPeakMiB": 214.1, "sseMegabytes": 1.2, "report": "docs/stress-2026-11-04/180518-probe-m600-u1-s1-20000ms.json", "resources": "docs/stress-2026-11-04/180518-probe-m600-u1-s1-20000ms.resources.json", "wallSeconds": 35.1, "minimumAvailableMemoryGiB": 109.6, "peakHostCpuPercent": 4.08, "peakTestRssMiB": 351.9, "swapOutDeltaBytes": 0}
+{"pass": true, "reasons": [], "machines": 500, "users": 1, "sseClients": 1, "durationMs": 20000, "committedPerSecond": 499.9, "sampleCadenceRatio": 0.9997, "historyCadenceRatio": 1.0497, "ackP95Ms": 55.22, "historyP95Ms": 22.71, "eventLoopP99Ms": 56.03, "sseNewestSampleP95Ms": 149, "hubCpuPercentOneCore": 43.76, "hubRssPeakMiB": 212.6, "sseMegabytes": 37.6, "report": "docs/stress-2026-11-04/180553-probe-m500-u1-s1-20000ms.json", "resources": "docs/stress-2026-11-04/180553-probe-m500-u1-s1-20000ms.resources.json", "wallSeconds": 35.1, "minimumAvailableMemoryGiB": 109.6, "peakHostCpuPercent": 4.1, "peakTestRssMiB": 384.7, "swapOutDeltaBytes": 0}
+{"pass": false, "reasons": ["SSE admission/delivery incomplete (0/1)"], "machines": 550, "users": 1, "sseClients": 1, "durationMs": 20000, "committedPerSecond": 549.8, "sampleCadenceRatio": 0.9997, "historyCadenceRatio": 1.0498, "ackP95Ms": 57.6, "historyP95Ms": 6.43, "eventLoopP99Ms": 50.23, "sseNewestSampleP95Ms": 69, "hubCpuPercentOneCore": 46.03, "hubRssPeakMiB": 184.0, "sseMegabytes": 1.1, "report": "docs/stress-2026-11-04/180628-probe-m550-u1-s1-20000ms.json", "resources": "docs/stress-2026-11-04/180628-probe-m550-u1-s1-20000ms.resources.json", "wallSeconds": 35.1, "minimumAvailableMemoryGiB": 109.7, "peakHostCpuPercent": 4.14, "peakTestRssMiB": 322.7, "swapOutDeltaBytes": 0}
+{"pass": true, "reasons": [], "machines": 800, "users": 1, "sseClients": 0, "durationMs": 20000, "committedPerSecond": 799.9, "sampleCadenceRatio": 0.9999, "historyCadenceRatio": 1.0499, "ackP95Ms": 53.46, "historyP95Ms": 10.13, "eventLoopP99Ms": 46.33, "sseNewestSampleP95Ms": 0, "hubCpuPercentOneCore": 61.88, "hubRssPeakMiB": 217.0, "sseMegabytes": 0.0, "report": "docs/stress-2026-11-04/180716-probe-m800-u1-s0-20000ms.json", "resources": "docs/stress-2026-11-04/180716-probe-m800-u1-s0-20000ms.resources.json", "wallSeconds": 35.1, "minimumAvailableMemoryGiB": 109.6, "peakHostCpuPercent": 4.45, "peakTestRssMiB": 383.4, "swapOutDeltaBytes": 0}
+{"pass": true, "reasons": [], "machines": 1600, "users": 1, "sseClients": 0, "durationMs": 20000, "committedPerSecond": 1605.4, "sampleCadenceRatio": 1.0034, "historyCadenceRatio": 1.0499, "ackP95Ms": 59.54, "historyP95Ms": 19.92, "eventLoopP99Ms": 40.99, "sseNewestSampleP95Ms": 0, "hubCpuPercentOneCore": 95.33, "hubRssPeakMiB": 279.9, "sseMegabytes": 0.0, "report": "docs/stress-2026-11-04/180751-probe-m1600-u1-s0-20000ms.json", "resources": "docs/stress-2026-11-04/180751-probe-m1600-u1-s0-20000ms.resources.json", "wallSeconds": 37.1, "minimumAvailableMemoryGiB": 109.5, "peakHostCpuPercent": 4.41, "peakTestRssMiB": 445.5, "swapOutDeltaBytes": 0}
+{"pass": false, "reasons": ["ack p95 3464.84 > 500 ms", "durable sample cadence 37.1% < 95%", "collector rejection, retry, loss, backpressure or send error", "storage queue, write failure or physical pressure"], "machines": 3200, "users": 1, "sseClients": 0, "durationMs": 20000, "committedPerSecond": 1188.7, "sampleCadenceRatio": 0.3715, "historyCadenceRatio": 1.0499, "ackP95Ms": 3464.84, "historyP95Ms": 33.87, "eventLoopP99Ms": 37.98, "sseNewestSampleP95Ms": 0, "hubCpuPercentOneCore": 110.71, "hubRssPeakMiB": 401.6, "sseMegabytes": 0.0, "report": "docs/stress-2026-11-04/180828-probe-m3200-u1-s0-20000ms.json", "resources": "docs/stress-2026-11-04/180828-probe-m3200-u1-s0-20000ms.resources.json", "wallSeconds": 72.3, "minimumAvailableMemoryGiB": 109.2, "peakHostCpuPercent": 5.59, "peakTestRssMiB": 653.5, "swapOutDeltaBytes": 0}
+{"pass": false, "reasons": ["ack p95 2897.57 > 500 ms", "durable sample cadence 61.6% < 95%", "collector rejection, retry, loss, backpressure or send error", "storage queue, write failure or physical pressure"], "machines": 2400, "users": 1, "sseClients": 0, "durationMs": 20000, "committedPerSecond": 1478.3, "sampleCadenceRatio": 0.616, "historyCadenceRatio": 1.0499, "ackP95Ms": 2897.57, "historyP95Ms": 27.21, "eventLoopP99Ms": 31.46, "sseNewestSampleP95Ms": 0, "hubCpuPercentOneCore": 110.85, "hubRssPeakMiB": 339.8, "sseMegabytes": 0.0, "report": "docs/stress-2026-11-04/180941-probe-m2400-u1-s0-20000ms.json", "resources": "docs/stress-2026-11-04/180941-probe-m2400-u1-s0-20000ms.resources.json", "wallSeconds": 50.6, "minimumAvailableMemoryGiB": 109.3, "peakHostCpuPercent": 4.9, "peakTestRssMiB": 543.2, "swapOutDeltaBytes": 0}
+{"pass": false, "reasons": ["ack p95 2524.02 > 500 ms", "durable sample cadence 87.4% < 95%", "collector rejection, retry, loss, backpressure or send error", "storage queue, write failure or physical pressure"], "machines": 2000, "users": 1, "sseClients": 0, "durationMs": 20000, "committedPerSecond": 1747.1, "sampleCadenceRatio": 0.8736, "historyCadenceRatio": 1.05, "ackP95Ms": 2524.02, "historyP95Ms": 20.9, "eventLoopP99Ms": 24.85, "sseNewestSampleP95Ms": 0, "hubCpuPercentOneCore": 111.43, "hubRssPeakMiB": 328.9, "sseMegabytes": 0.0, "report": "docs/stress-2026-11-04/181031-probe-m2000-u1-s0-20000ms.json", "resources": "docs/stress-2026-11-04/181031-probe-m2000-u1-s0-20000ms.resources.json", "wallSeconds": 42.3, "minimumAvailableMemoryGiB": 109.4, "peakHostCpuPercent": 5.37, "peakTestRssMiB": 548.2, "swapOutDeltaBytes": 0}
+{"pass": true, "reasons": [], "machines": 1800, "users": 1, "sseClients": 0, "durationMs": 20000, "committedPerSecond": 1802.1, "sampleCadenceRatio": 1.0012, "historyCadenceRatio": 1.0499, "ackP95Ms": 88.45, "historyP95Ms": 23.84, "eventLoopP99Ms": 31.03, "sseNewestSampleP95Ms": 0, "hubCpuPercentOneCore": 103.43, "hubRssPeakMiB": 291.2, "sseMegabytes": 0.0, "report": "docs/stress-2026-11-04/181114-probe-m1800-u1-s0-20000ms.json", "resources": "docs/stress-2026-11-04/181114-probe-m1800-u1-s0-20000ms.resources.json", "wallSeconds": 38.2, "minimumAvailableMemoryGiB": 109.4, "peakHostCpuPercent": 4.04, "peakTestRssMiB": 469.2, "swapOutDeltaBytes": 0}
+{"pass": true, "reasons": [], "machines": 100, "users": 64, "sseClients": 64, "durationMs": 20000, "committedPerSecond": 99.8, "sampleCadenceRatio": 0.998, "historyCadenceRatio": 1.0472, "ackP95Ms": 60.85, "historyP95Ms": 78.43, "eventLoopP99Ms": 44.89, "sseNewestSampleP95Ms": 544, "hubCpuPercentOneCore": 23.82, "hubRssPeakMiB": 288.0, "sseMegabytes": 290.5, "report": "docs/stress-2026-11-04/181203-probe-m100-u64-s64-20000ms.json", "resources": "docs/stress-2026-11-04/181203-probe-m100-u64-s64-20000ms.resources.json", "wallSeconds": 60.9, "minimumAvailableMemoryGiB": 109.4, "peakHostCpuPercent": 3.36, "peakTestRssMiB": 525.8, "swapOutDeltaBytes": 0}
+{"pass": true, "reasons": [], "machines": 200, "users": 64, "sseClients": 64, "durationMs": 20000, "committedPerSecond": 199.6, "sampleCadenceRatio": 0.9982, "historyCadenceRatio": 1.0091, "ackP95Ms": 69.06, "historyP95Ms": 211.65, "eventLoopP99Ms": 61.31, "sseNewestSampleP95Ms": 764, "hubCpuPercentOneCore": 33.47, "hubRssPeakMiB": 298.1, "sseMegabytes": 582.1, "report": "docs/stress-2026-11-04/181304-probe-m200-u64-s64-20000ms.json", "resources": "docs/stress-2026-11-04/181304-probe-m200-u64-s64-20000ms.resources.json", "wallSeconds": 61.0, "minimumAvailableMemoryGiB": 109.4, "peakHostCpuPercent": 3.31, "peakTestRssMiB": 588.6, "swapOutDeltaBytes": 0}
+{"pass": true, "reasons": [], "machines": 400, "users": 64, "sseClients": 64, "durationMs": 20000, "committedPerSecond": 381.0, "sampleCadenceRatio": 0.9526, "historyCadenceRatio": 0.9425, "ackP95Ms": 407.39, "historyP95Ms": 493.21, "eventLoopP99Ms": 96.4, "sseNewestSampleP95Ms": 963, "hubCpuPercentOneCore": 48.46, "hubRssPeakMiB": 363.2, "sseMegabytes": 1266.4, "report": "docs/stress-2026-11-04/181405-probe-m400-u64-s64-20000ms.json", "resources": "docs/stress-2026-11-04/181405-probe-m400-u64-s64-20000ms.resources.json", "wallSeconds": 62.0, "minimumAvailableMemoryGiB": 109.2, "peakHostCpuPercent": 4.64, "peakTestRssMiB": 840.1, "swapOutDeltaBytes": 0}
+{"pass": false, "reasons": ["ack p95 533.47 > 500 ms", "durable sample cadence 88.7% < 95%", "History cadence 89.9% < 90%"], "machines": 500, "users": 64, "sseClients": 64, "durationMs": 20000, "committedPerSecond": 443.6, "sampleCadenceRatio": 0.8872, "historyCadenceRatio": 0.8987, "ackP95Ms": 533.47, "historyP95Ms": 585.44, "eventLoopP99Ms": 94.24, "sseNewestSampleP95Ms": 1174, "hubCpuPercentOneCore": 49.77, "hubRssPeakMiB": 452.7, "sseMegabytes": 1393.3, "report": "docs/stress-2026-11-04/181507-probe-m500-u64-s64-20000ms.json", "resources": "docs/stress-2026-11-04/181507-probe-m500-u64-s64-20000ms.resources.json", "wallSeconds": 62.0, "minimumAvailableMemoryGiB": 108.8, "peakHostCpuPercent": 4.8, "peakTestRssMiB": 966.3, "swapOutDeltaBytes": 0}
+{"pass": false, "reasons": ["ack p95 560.42 > 500 ms", "durable sample cadence 87.7% < 95%", "History cadence 88.9% < 90%"], "machines": 450, "users": 64, "sseClients": 64, "durationMs": 20000, "committedPerSecond": 394.8, "sampleCadenceRatio": 0.8774, "historyCadenceRatio": 0.8888, "ackP95Ms": 560.42, "historyP95Ms": 541.9, "eventLoopP99Ms": 91.95, "sseNewestSampleP95Ms": 1060, "hubCpuPercentOneCore": 49.71, "hubRssPeakMiB": 369.7, "sseMegabytes": 1310.9, "report": "docs/stress-2026-11-04/181609-probe-m450-u64-s64-20000ms.json", "resources": "docs/stress-2026-11-04/181609-probe-m450-u64-s64-20000ms.resources.json", "wallSeconds": 62.0, "minimumAvailableMemoryGiB": 109.0, "peakHostCpuPercent": 4.33, "peakTestRssMiB": 742.5, "swapOutDeltaBytes": 0}
+{"pass": false, "reasons": ["durable sample cadence 92.8% < 95%"], "machines": 2, "users": 2, "sseClients": 2, "durationMs": 3000, "committedPerSecond": 1.9, "sampleCadenceRatio": 0.9281, "historyCadenceRatio": 1.2375, "ackP95Ms": 31.04, "historyP95Ms": 5.89, "eventLoopP99Ms": 11.32, "sseNewestSampleP95Ms": 848, "hubCpuPercentOneCore": 2.73, "hubRssPeakMiB": 115.9, "sseMegabytes": 0.0, "report": "docs/stress-2026-11-04/181845-probe-m2-u2-s2-3000ms.json", "resources": "docs/stress-2026-11-04/181845-probe-m2-u2-s2-3000ms.resources.json", "wallSeconds": 17.5, "minimumAvailableMemoryGiB": 109.7, "peakHostCpuPercent": 3.33, "peakTestRssMiB": 403.5, "swapOutDeltaBytes": 0}
+{"pass": true, "reasons": [], "machines": 500, "users": 64, "sseClients": 64, "durationMs": 30000, "committedPerSecond": 500.2, "sampleCadenceRatio": 1.0003, "historyCadenceRatio": 1.0325, "ackP95Ms": 172.35, "historyP95Ms": 154.04, "eventLoopP99Ms": 92.6, "sseNewestSampleP95Ms": 384, "hubCpuPercentOneCore": 66.11, "hubRssPeakMiB": 430.0, "sseMegabytes": 3187.7, "report": "docs/stress-2026-11-04/181931-probe-m500-u64-s64-30000ms.json", "resources": "docs/stress-2026-11-04/181931-probe-m500-u64-s64-30000ms.resources.json", "wallSeconds": 73.3, "minimumAvailableMemoryGiB": 108.4, "peakHostCpuPercent": 9.69, "peakTestRssMiB": 1349.9, "swapOutDeltaBytes": 0}
+{"pass": false, "reasons": ["ack p95 3872.03 > 500 ms", "durable sample cadence 74.4% < 95%", "collector rejection, retry, loss, backpressure or send error", "storage queue, write failure or physical pressure"], "machines": 1800, "users": 1, "sseClients": 0, "durationMs": 120000, "committedPerSecond": 1338.8, "sampleCadenceRatio": 0.7438, "historyCadenceRatio": 1.0083, "ackP95Ms": 3872.03, "historyP95Ms": 34.32, "eventLoopP99Ms": 37.75, "sseNewestSampleP95Ms": 0, "hubCpuPercentOneCore": 108.35, "hubRssPeakMiB": 311.0, "sseMegabytes": 0.0, "report": "docs/stress-2026-11-04/182108-probe-m1800-u1-s0-120000ms.json", "resources": "docs/stress-2026-11-04/182108-probe-m1800-u1-s0-120000ms.resources.json", "wallSeconds": 138.4, "minimumAvailableMemoryGiB": 109.2, "peakHostCpuPercent": 5.16, "peakTestRssMiB": 508.7, "swapOutDeltaBytes": 0}
+{"pass": false, "reasons": ["ack p95 2154.32 > 500 ms", "collector rejection, retry, loss, backpressure or send error", "storage queue, write failure or physical pressure"], "machines": 1200, "users": 1, "sseClients": 0, "durationMs": 120000, "committedPerSecond": 1167.0, "sampleCadenceRatio": 0.9725, "historyCadenceRatio": 1.0083, "ackP95Ms": 2154.32, "historyP95Ms": 29.82, "eventLoopP99Ms": 49.51, "sseNewestSampleP95Ms": 0, "hubCpuPercentOneCore": 92.41, "hubRssPeakMiB": 262.4, "sseMegabytes": 0.0, "report": "docs/stress-2026-11-04/182354-probe-m1200-u1-s0-120000ms.json", "resources": "docs/stress-2026-11-04/182354-probe-m1200-u1-s0-120000ms.resources.json", "wallSeconds": 136.4, "minimumAvailableMemoryGiB": 109.3, "peakHostCpuPercent": 4.22, "peakTestRssMiB": 440.1, "swapOutDeltaBytes": 0}
+{"pass": true, "reasons": [], "machines": 900, "users": 1, "sseClients": 0, "durationMs": 120000, "committedPerSecond": 900.0, "sampleCadenceRatio": 0.9999, "historyCadenceRatio": 1.0083, "ackP95Ms": 71.98, "historyP95Ms": 27.25, "eventLoopP99Ms": 60.85, "sseNewestSampleP95Ms": 0, "hubCpuPercentOneCore": 75.13, "hubRssPeakMiB": 225.0, "sseMegabytes": 0.0, "report": "docs/stress-2026-11-04/182625-probe-m900-u1-s0-120000ms.json", "resources": "docs/stress-2026-11-04/182625-probe-m900-u1-s0-120000ms.resources.json", "wallSeconds": 135.3, "minimumAvailableMemoryGiB": 109.4, "peakHostCpuPercent": 6.34, "peakTestRssMiB": 371.3, "swapOutDeltaBytes": 0}
+{"pass": true, "reasons": [], "machines": 1050, "users": 1, "sseClients": 0, "durationMs": 120000, "committedPerSecond": 1046.0, "sseWorkers": 4, "clientWarmupMs": 0, "historyMetricSet": "standard", "historyIntervalMs": 1000, "sampleCadenceRatio": 0.9962, "historyCadenceRatio": 1.0083, "ackP95Ms": 140.06, "historyP95Ms": 27.62, "eventLoopP99Ms": 54.85, "sseNewestSampleP95Ms": 0, "hubCpuPercentOneCore": 82.24, "hubRssPeakMiB": 260.2, "sseMegabytes": 0.0, "report": "docs/stress-2026-11-04/182847-probe-m1050-u1-s0-120000ms.json", "resources": "docs/stress-2026-11-04/182847-probe-m1050-u1-s0-120000ms.resources.json", "wallSeconds": 135.3, "minimumAvailableMemoryGiB": 109.2, "peakHostCpuPercent": 5.34, "peakTestRssMiB": 432.1, "swapOutDeltaBytes": 0}
+{"pass": false, "reasons": ["ack p95 538.2 > 500 ms"], "machines": 1125, "users": 1, "sseClients": 0, "durationMs": 120000, "committedPerSecond": 1113.5, "sseWorkers": 4, "clientWarmupMs": 0, "historyMetricSet": "standard", "historyIntervalMs": 1000, "sampleCadenceRatio": 0.9898, "historyCadenceRatio": 1.0083, "ackP95Ms": 538.2, "historyP95Ms": 30.91, "eventLoopP99Ms": 51.9, "sseNewestSampleP95Ms": 0, "hubCpuPercentOneCore": 86.73, "hubRssPeakMiB": 258.7, "sseMegabytes": 0.0, "report": "docs/stress-2026-11-04/183112-probe-m1125-u1-s0-120000ms.json", "resources": "docs/stress-2026-11-04/183112-probe-m1125-u1-s0-120000ms.resources.json", "wallSeconds": 135.3, "minimumAvailableMemoryGiB": 108.9, "peakHostCpuPercent": 8.98, "peakTestRssMiB": 439.3, "swapOutDeltaBytes": 0}
+{"pass": true, "reasons": [], "machines": 500, "users": 64, "sseClients": 64, "durationMs": 120000, "committedPerSecond": 499.8, "sseWorkers": 4, "clientWarmupMs": 1000, "historyMetricSet": "standard", "historyIntervalMs": 1000, "sampleCadenceRatio": 0.9996, "historyCadenceRatio": 1.0081, "ackP95Ms": 222.83, "historyP95Ms": 180.56, "eventLoopP99Ms": 123.34, "sseNewestSampleP95Ms": 407, "hubCpuPercentOneCore": 74.68, "hubRssPeakMiB": 559.5, "sseMegabytes": 11733.6, "report": "docs/stress-2026-11-04/193608-probe-m500-u64-s64-120000ms.json", "resources": "docs/stress-2026-11-04/193608-probe-m500-u64-s64-120000ms.resources.json", "wallSeconds": 163.0, "minimumAvailableMemoryGiB": 108.2, "peakHostCpuPercent": 8.27, "peakTestRssMiB": 1474.6, "swapOutDeltaBytes": 0}
+{"pass": true, "reasons": [], "machines": 529, "users": 1, "sseClients": 1, "durationMs": 15000, "committedPerSecond": 529.0, "sseWorkers": 1, "clientWarmupMs": 1000, "historyMetricSet": "standard", "historyIntervalMs": 1000, "sampleCadenceRatio": 1.0, "historyCadenceRatio": 1.0665, "ackP95Ms": 57.98, "historyP95Ms": 8.92, "eventLoopP99Ms": 52, "sseNewestSampleP95Ms": 79, "hubCpuPercentOneCore": 45.72, "hubRssPeakMiB": 200.4, "sseMegabytes": 32.5, "report": "docs/stress-2026-11-04/193909-probe-m529-u1-s1-15000ms.json", "resources": "docs/stress-2026-11-04/193909-probe-m529-u1-s1-15000ms.resources.json", "wallSeconds": 31.0, "minimumAvailableMemoryGiB": 109.5, "peakHostCpuPercent": 4.52, "peakTestRssMiB": 465.4, "swapOutDeltaBytes": 0}
+{"pass": false, "reasons": ["SSE admission/delivery incomplete (0/1)", "live update rate below one update per two seconds per viewer"], "machines": 530, "users": 1, "sseClients": 1, "durationMs": 15000, "committedPerSecond": 531.9, "sseWorkers": 1, "clientWarmupMs": 1000, "historyMetricSet": "standard", "historyIntervalMs": 1000, "sampleCadenceRatio": 1.0037, "historyCadenceRatio": 1.0666, "ackP95Ms": 57.67, "historyP95Ms": 18.22, "eventLoopP99Ms": 51.41, "sseNewestSampleP95Ms": 64, "hubCpuPercentOneCore": 45.05, "hubRssPeakMiB": 189.2, "sseMegabytes": 1.0, "report": "docs/stress-2026-11-04/193940-probe-m530-u1-s1-15000ms.json", "resources": "docs/stress-2026-11-04/193940-probe-m530-u1-s1-15000ms.resources.json", "wallSeconds": 31.0, "minimumAvailableMemoryGiB": 109.5, "peakHostCpuPercent": 5.69, "peakTestRssMiB": 418.2, "swapOutDeltaBytes": 0}
+{"pass": false, "reasons": ["SSE admission/delivery incomplete (64/65)"], "machines": 100, "users": 1, "sseClients": 65, "durationMs": 10000, "committedPerSecond": 100.0, "sseWorkers": 4, "clientWarmupMs": 1000, "historyMetricSet": "standard", "historyIntervalMs": 1000, "sampleCadenceRatio": 0.9999, "historyCadenceRatio": 0.9999, "ackP95Ms": 63.78, "historyP95Ms": 5.28, "eventLoopP99Ms": 37.03, "sseNewestSampleP95Ms": 481, "hubCpuPercentOneCore": 15.65, "hubRssPeakMiB": 162.4, "sseMegabytes": 176.8, "report": "docs/stress-2026-11-04/194011-probe-m100-u1-s65-10000ms.json", "resources": "docs/stress-2026-11-04/194011-probe-m100-u1-s65-10000ms.resources.json", "wallSeconds": 24.8, "minimumAvailableMemoryGiB": 109.3, "peakHostCpuPercent": 5.14, "peakTestRssMiB": 772.3, "swapOutDeltaBytes": 0}

package/docs/stress-2026-11-04/manifest.json

@@ -0,0 +1,13 @@
+{
+  "baseRevision": "3b77feaed4afc9ebd9af156008c78bd0278f9015",
+  "attemptCount": 29,
+  "resourceAborts": [],
+  "remainingTemporaryDirectories": [],
+  "totalWriteFailuresAcrossCases": 0,
+  "largestFinalDatabaseMiB": 320.3,
+  "sourceSha256": {
+    "scripts/scale-harness.ts": "8d67637bee926bfea6458536828939b95be4919edfec78f1c8b562f05b3c2f30",
+    "scripts/stress-hub.py": "1519a5868c0654eec76eab66df0c38f486c7aa4e88b235bcba83017b9f1ad7e6",
+    "tests/scale-harness.test.ts": "f87279588b95f02a78bf12861d27086131033ad5eca8191900004635d645584e"
+  }
+}

package/docs/stress-2026-11-04/results.html

@@ -0,0 +1,22 @@
+<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Rigscope hub stress results</title><style>
+#stress-results {font-family:var(--font-sans, system-ui);color:var(--foreground, CanvasText);font-size:14px;line-height:1.45}
+#stress-results h2 {font-size:16px;font-weight:500;margin:0 0 4px}
+#stress-results p {margin:0 0 18px;color:var(--muted-foreground, GrayText);font-size:12px}
+#stress-results .axis,#stress-results .row {display:grid;grid-template-columns:70px minmax(60px,1fr) 118px;gap:12px;align-items:center}
+#stress-results .axis {font-size:11px;color:var(--muted-foreground, GrayText);margin-bottom:8px}
+#stress-results .axis-scale {position:relative;display:flex;justify-content:space-between}
+#stress-results .axis-scale b {position:absolute;left:20%;transform:translateX(-50%);font-weight:400;white-space:nowrap;color:var(--foreground, CanvasText)}
+#stress-results .row {height:44px;font-variant-numeric:tabular-nums}
+#stress-results .track {position:relative;height:20px;background:color-mix(in srgb,var(--foreground, CanvasText) 6%,transparent);border-radius:3px}
+#stress-results .bar {height:20px;border-radius:3px;min-width:3px}
+#stress-results .pass {background:var(--chart-1, Highlight)}
+#stress-results .fail {background:var(--chart-2, GrayText)}
+#stress-results .limit {position:absolute;top:-7px;bottom:-7px;left:20%;border-left:1px dashed var(--foreground, CanvasText);opacity:.6}
+#stress-results .value {text-align:right}
+#stress-results small {display:block;font-size:11px;color:var(--muted-foreground, GrayText)}
+#stress-results .mixed {margin-top:22px;padding-top:14px;border-top:1px solid var(--border, GrayText)}
+#stress-results .metrics {display:flex;flex-wrap:wrap;gap:14px 32px;margin-top:10px}
+#stress-results .metric {font-variant-numeric:tabular-nums}
+#stress-results .metric strong {font-size:18px;font-weight:500}
+@media(max-width:440px){#stress-results .axis,#stress-results .row{grid-template-columns:55px minmax(55px,1fr) 94px;gap:8px}#stress-results .axis-scale b{top:-16px}#stress-results .axis{margin-top:28px}}
+</style></head><body><div id="stress-results"><h2>Ingestion gets slower near 1,100 collectors</h2><p>Two-minute runs · one sample per collector per second · no live viewers</p><div class="axis"><span>Collectors</span><span class="axis-scale"><span>0</span><b>500 ms limit</b><span>2,500 ms</span></span><span style="text-align:right">Ack p95</span></div><div class="row" aria-label="900 collectors, acknowledgment p95 72 milliseconds, Pass"><span>900</span><div class="track"><div class="bar pass" style="width:2.88%"></div><span class="limit"></span></div><span class="value">72 ms <small>Pass</small></span></div><div class="row" aria-label="1050 collectors, acknowledgment p95 140 milliseconds, Pass"><span>1,050</span><div class="track"><div class="bar pass" style="width:5.60%"></div><span class="limit"></span></div><span class="value">140 ms <small>Pass</small></span></div><div class="row" aria-label="1125 collectors, acknowledgment p95 538 milliseconds, Over threshold"><span>1,125</span><div class="track"><div class="bar fail" style="width:21.53%"></div><span class="limit"></span></div><span class="value">538 ms <small>Over threshold</small></span></div><div class="row" aria-label="1200 collectors, acknowledgment p95 2154 milliseconds, Over threshold"><span>1,200</span><div class="track"><div class="bar fail" style="width:86.17%"></div><span class="limit"></span></div><span class="value">2,154 ms <small>Over threshold</small></span></div><div class="mixed"><h2>500 collectors + 64 live sessions passed for two minutes</h2><div class="metrics"><div class="metric"><strong>223 ms</strong><small>Acknowledgment p95</small></div><div class="metric"><strong>181 ms</strong><small>History p95 · 64 polls/s</small></div><div class="metric"><strong>560 MiB</strong><small>Hub memory peak</small></div></div></div></div></body></html>

package/docs/system-installation.md

@@ -0,0 +1,195 @@
+# System installation
+
+System installation runs Rigscope under dedicated service accounts and starts
+at boot without user lingering. For the default per-user npm setup, use the
+[installation guide](installation.md).
+
+Review the plan before applying changes. Commands that change the installation
+require root and `--apply`; otherwise they only print the proposed changes.
+The installed `rigscope system` command and `dist/system.cjs` use the same code.
+
+| Task | Section |
+| --- | --- |
+| Review paths and permissions | [Generated layout](#scope-and-generated-layout) |
+| Install or control services | [Component lifecycle](#system-component-lifecycle) |
+| Enroll with another hub | [Connect to a hub](#connecting-to-an-independent-hub) |
+| Grant package-energy access | [CPU package power](#cpu-package-power) |
+
+### Scope and generated layout
+
+```text
+/opt/rigscope/                         root:root 0755
+  releases/<version>/                  immutable root-owned release
+  current -> releases/<version>
+  previous -> releases/<previous>      retained for rollback
+  node/node                            root-owned Node 26 when the selected binary was not root-owned
+/etc/rigscope/
+  hub.env                              root:root 0600 (credentials, never printed)
+  collector.env                        root:root 0600
+/var/lib/rigscope/
+  hub/telemetry.sqlite                 rigscope-hub 0600, private 0700 directory
+  hub/enrollment.json                  rigscope-hub 0600
+  hub/run/hub.sock                     private Unix socket (remote mode)
+  collector/state.json                 rigscope-collector 0600
+  collector/outbox/                    durable collector outboxes
+  backups/                             root:root 0700, pre-upgrade/pre-rollback SQLite copies
+  system-install.json                  root:root 0600, version 2 component state/versions/backups/adoption
+  power-access.json                    root:root 0600, original counter modes for reversal
+/etc/systemd/system/rigscope-hub.service       root:root 0644, hub boot unit
+/etc/systemd/system/rigscope-collector.service root:root 0644, collector boot unit
+/etc/sysusers.d/rigscope.conf          root:root 0644, both nologin accounts
+/etc/sysusers.d/rigscope-rapl.conf     root:root 0644, collector-only power membership
+/etc/udev/rules.d/90-rigscope-rapl.rules root:root 0644
+```
+
+Build the checkout before using `dist/system.cjs`; an installed package exposes the same commands through `rigscope system`. Reference copies are in `packaging/system/`. They are for review only; the
+renderer in `src/cli/system.ts` is authoritative.
+
+`systemd-sysusers` creates `rigscope-hub` and `rigscope-collector` as nologin
+system accounts even when one component is disabled, so the other can be
+enabled later without reinstalling. The hub and collector never run as root.
+The units set `NoNewPrivileges=yes`, `ProtectSystem=strict`,
+`ProtectHome=yes`, an empty `CapabilityBoundingSet=`/`AmbientCapabilities=`,
+`UMask=0077`, explicit writable state paths and a read-only release tree. The
+collector uses `--await-connection` to exit cleanly when no destinations are
+configured, including after an interrupted enrollment. The
+collector does **not** use `PrivateDevices=yes` because GPU telemetry still
+needs real device nodes. The hub does.
+
+### System component lifecycle
+
+All mutating commands require `--apply` and root. Without `--apply`, the exact
+files and command sequence are printed and nothing is written. Every component
+operation touches only its own unit; enabling or starting one component never
+stops or restarts the other.
+
+```sh
+# Package first (from a built checkout).
+node scripts/package-release.cjs --output /var/tmp/rigscope-<version>.tar.gz
+
+# Review a release before granting sudo.
+node dist/system.cjs plan \
+  --source /var/tmp/rigscope-<version>.tar.gz --role local --node /usr/bin/node
+
+# Install one complete package. --role selects the initial enabled preset.
+sudo node dist/system.cjs install \
+  --source /var/tmp/rigscope-<version>.tar.gz --role hub \
+  --node /usr/bin/node --install-deps --enable --apply
+
+# Add the other component later; no reinstall and no new package are needed.
+sudo node dist/system.cjs enable collector --apply
+sudo node dist/system.cjs enable hub --apply
+
+# Component-specific lifecycle when both exist.
+sudo node dist/system.cjs disable collector --apply
+sudo node dist/system.cjs restart hub --apply
+sudo node dist/system.cjs restart collector --apply
+sudo node dist/system.cjs restart --apply   # enabled components only
+
+# Component-specific status and logs.
+node dist/system.cjs status
+node dist/system.cjs status collector --json
+node dist/system.cjs logs hub --follow
+```
+
+`install` stages a complete release, verifies both runtimes and UI artifacts,
+copies a non-root-owned Node executable into the root-owned prefix, installs
+production dependencies when `--install-deps` is given, writes private
+configuration and both units, creates both accounts, then switches `current`.
+Staging happens before any service is stopped.
+
+- With `--enable`, `--role local` initially enables both components.
+- With `--enable`, `--role hub` initially enables only the hub.
+- With `--enable`, `--role collector` initially enables only the collector.
+- Without `--enable`, both components are installed but disabled.
+- `--start` starts only the requested preset and verifies those components.
+- `--without-power` skips the collector RAPL grant at that mutation.
+
+`enable hub` creates the owner account once when `HUB_BROWSER_USERS` is empty
+and prints the password only in that mutation. It is never stored in plaintext
+or printed again. `enable collector` completes the collector account, unit,
+identity and RAPL grant. With no destination it tries the colocated hub:
+
+- A live configured hub gets a short-lived, single-use grant in its
+  authoritative SQLite registry. The collector then enrolls through the normal
+  hub API, which updates the live registry without stopping or restarting the
+  hub.
+- A stopped hub gets the identity written to the authoritative registry (or a
+  static `HUB_COLLECTORS` bootstrap when the registry is not initialized yet);
+  enabling the collector never starts the hub.
+- If there is no configured hub, the collector is enabled but stays dormant and
+  reports `Awaiting connection`. Its unit uses `--await-connection` to exit
+  cleanly before collection until a destination is saved.
+
+Configured remote destinations and credentials are never overwritten. Re-running
+`enable collector` leaves its destination, token, identity and outboxes intact.
+
+### Connecting to an independent hub
+
+For a hub-first test where the hub and collector are separate installations,
+create a connection grant in the hub's admin Collectors panel. Save the grant to
+a private file and connect the system collector:
+
+```sh
+# On the collector host; the grant file must be root-owned and 0600.
+sudo install -m 0600 /dev/null /root/collector-grant
+sudoedit /root/collector-grant        # paste the single-use grant, save, quit
+sudo node dist/system.cjs connect https://<hub-host> \
+  --token-file /root/collector-grant --apply
+sudo rm /root/collector-grant
+```
+
+`connect` stops only the collector while it enrolls, calls the hub's normal
+enrollment API, persists the issued credential under
+`/var/lib/rigscope/collector/state.json`, and starts the collector if it is
+enabled. The grant is never printed. Re-running `connect` on a configured
+collector is refused rather than replacing a remote destination.
+
+Status reports each component independently:
+
+```text
+Components:
+  hub: installed, enabled, active, ready
+  collector: installed, enabled, active, ready, 1 destination(s)
+```
+
+`readiness` is `ready`, `stopped`, `unconfigured`, `awaiting-connection`,
+`invalid-config`, `invalid-state` or `missing`.
+
+### CPU package power
+
+`collector/sampling/hwmon.ts` already reads top-level RAPL package counters,
+sums multiple sockets, handles wrap/reset and returns unavailable rather than
+zero. On hosts where `energy_uj` is root-only, system scope grants a narrow
+read path instead of elevating Node.
+
+```sh
+node dist/system.cjs power status
+sudo node dist/system.cjs power grant --apply
+sudo node dist/system.cjs power revoke --apply
+```
+
+Mechanism:
+
+- `/etc/sysusers.d/rigscope-rapl.conf` creates `rigscope-rapl` and adds only
+  `rigscope-collector`; the hub is not a member.
+- A `powercap` udev rule matches only top-level `intel-rapl:N` devices named
+  `package*` and changes only `energy_uj` and `max_energy_range_uj` to
+  `0440 root:rigscope-rapl`. Subdomains, constraint files and power-limit
+  writes are untouched.
+- `udevadm trigger --subsystem-match=powercap --action=change` applies the rule
+  immediately. Because the rule lives in `/etc/udev/rules.d`, device
+  recreation and boot reapply it.
+- The collector unit adds `SupplementaryGroups=rigscope-rapl`; it does not use
+  file capabilities, ambient capabilities or a privileged Node helper.
+- Grant records each existing counter's original mode/uid/gid in
+  `/var/lib/rigscope/power-access.json`. Revoke removes the rule and group
+  membership and restores those recorded values (defaults `0400` for
+  `energy_uj` and `0444` for `max_energy_range_uj` when no record exists).
+- `power status` reports driver modules, package domains, collector
+  readability, persistence, world readability and every problem. A missing
+  counter is reported unavailable, never as zero watts.
+
+Verify real watts in History after granting access and restarting the collector;
+do not treat a mocked value or a one-time manual `chmod` as installation
+evidence. Unsupported hardware remains unavailable.

package/next.config.js

@@ -0,0 +1,38 @@
+const { PHASE_DEVELOPMENT_SERVER } = require("next/constants");
+const { availableParallelism } = require("node:os");
+
+const workers = Number(process.env.RIGSCOPE_BUILD_WORKERS ?? Math.min(4, availableParallelism()));
+if (!Number.isInteger(workers) || workers < 1 || workers > 64) {
+  throw new Error(
+    `RIGSCOPE_BUILD_WORKERS must be an integer from 1 to 64 (received ${JSON.stringify(process.env.RIGSCOPE_BUILD_WORKERS)}). ` +
+      "Set it to the number of build workers, or leave it unset to auto-select up to four.",
+  );
+}
+
+/** @param {string} phase @returns {import("next").NextConfig} */
+const nextConfig = (phase) => ({
+  // Keep dev writes separate from the packaged hub's production artifact.
+  // Use a small static-generation worker pool for this six-page scaffold.
+  distDir: phase === PHASE_DEVELOPMENT_SERVER ? ".next-dev" : ".next",
+  experimental: { cpus: workers },
+  // Remote development goes through an outer TLS terminator and a Unix
+  // socket, so the browser's Origin hostname is the configured public origin,
+  // not localhost. Keep an explicit hostname allowlist for /_next assets and
+  // HMR (Next also adds the createNextApp hostname). Configuring this list
+  // makes Next's dev guard block unlisted origins instead of only warning.
+  // The hub validates the full exact origin before delegation.
+  allowedDevOrigins: phase === PHASE_DEVELOPMENT_SERVER ? publicDevOrigin() : undefined,
+});
+
+function publicDevOrigin() {
+  const value = process.env.HUB_PUBLIC_ORIGIN;
+  if (value === undefined || value === "") return undefined;
+  try {
+    const origin = new URL(value);
+    return origin.protocol === "https:" ? [origin.hostname] : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+module.exports = nextConfig;

package/package.json

@@ -1,6 +1,119 @@
 {
   "name": "rigscope",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.1",
+  "rigscopeConfigVersion": 2,
+  "private": false,
+  "engines": {
+    "node": ">=26.0.0"
+  },
+  "os": [
+    "linux"
+  ],
+  "scripts": {
+    "dev": "NODE_ENV=development tsx src/hub/main.ts",
+    "build": "npm run build:ui && npm run build:runtime",
+    "build:runtime": "node scripts/build-runtime.cjs",
+    "start": "node dist/hub.cjs",
+    "collector:mock": "COLLECTOR_MODE=mock tsx collector/main.ts",
+    "collector:enroll": "tsx collector/main.ts --enroll",
+    "collector:start": "node dist/collector.cjs",
+    "ops": "node dist/ops.cjs",
+    "package:release": "npm run build && node scripts/package-release.cjs",
+    "typecheck": "tsc --noEmit",
+    "test": "node scripts/test.cjs",
+    "test:runtime": "npm run build:runtime && node scripts/test-runtime.cjs",
+    "test:dev": "npm run build:runtime && node scripts/test.cjs --suite development",
+    "validate:https": "node scripts/validate-https.cjs",
+    "build:ui": "next build --webpack",
+    "rigscope": "node bin/rigscope.cjs",
+    "verify:build": "node scripts/verify-build.cjs",
+    "verify:package": "node scripts/verify-package.cjs",
+    "verify:installed": "node scripts/verify-installed-package.cjs",
+    "prepack": "node scripts/prepack.cjs",
+    "package:npm": "npm pack",
+    "notices": "node scripts/third-party-notices.cjs"
+  },
+  "dependencies": {
+    "lucide-react": "^0.475.0",
+    "next": "^16.4.5",
+    "next-themes": "^0.4.6",
+    "react": "^19.1.0",
+    "react-dom": "^19.1.0",
+    "ws": "^8.22.1"
+  },
+  "devDependencies": {
+    "@tailwindcss/postcss": "^4.1.0",
+    "@types/node": "^22.13.0",
+    "@types/react": "^19.1.0",
+    "@types/react-dom": "^19.1.0",
+    "@types/ws": "^8.18.2",
+    "esbuild": "^0.28.2",
+    "postcss": "^8.5.23",
+    "tailwindcss": "^4.1.0",
+    "tsx": "^4.23.15",
+    "typescript": "^5.7.0"
+  },
+  "description": "Your machines, in view. A self-hosted Linux system and process monitor.",
+  "bin": {
+    "rigscope": "bin/rigscope.cjs"
+  },
+  "files": [
+    "bin/",
+    "dist/",
+    ".next/BUILD_ID",
+    ".next/*.json",
+    ".next/server/",
+    ".next/static/",
+    "next.config.js",
+    "README.md",
+    "CHANGELOG.md",
+    "docs/installation.md",
+    "docs/system-installation.md",
+    "docs/configuration.md",
+    "docs/monitoring.md",
+    "docs/operations.md",
+    "docs/bottlenecks.md",
+    "docs/exports.md",
+    "docs/development.md",
+    "docs/releasing.md",
+    "docs/scale-validation.md",
+    "docs/scale-validation.json",
+    "docs/scale-acceptance.json",
+    "docs/stress-2026-11-04/README.md",
+    "docs/stress-2026-11-04/index.jsonl",
+    "docs/stress-2026-11-04/manifest.json",
+    "docs/stress-2026-11-04/results.html",
+    "docs/stress-2026-11-04/*ms.json",
+    "ARCHITECTURE.md",
+    "DESIGN.md",
+    "LICENSE",
+    "SECURITY.md",
+    "THIRD_PARTY_NOTICES.md",
+    "packaging/"
+  ],
+  "license": "MIT",
+  "author": {
+    "name": "Triet (@Triet1402)",
+    "url": "https://github.com/Triet1402"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Triet1402/rigscope.git"
+  },
+  "homepage": "https://github.com/Triet1402/rigscope#readme",
+  "bugs": {
+    "url": "https://github.com/Triet1402/rigscope/issues"
+  },
+  "keywords": [
+    "linux",
+    "monitoring",
+    "system-monitor",
+    "process-monitor",
+    "self-hosted",
+    "gpu"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  }
+}

package/packaging/README.md

@@ -0,0 +1,5 @@
+# Packaging reference files
+
+The `.env.example` files contain public examples, never deployment credentials. Copy configuration to private files (0600) outside the source tree and generate fresh credentials. No configuration starts a production deployment by itself.
+
+Use [installation](../docs/installation.md) for managed user/system installs, [operations](../docs/operations.md) for manifest archives and recovery, and [releasing](../docs/releasing.md) for package validation. System reference units are in [system](system/README.md). Generated units in the installer source are authoritative.

package/packaging/collector.env.example

@@ -0,0 +1,24 @@
+# Collector environment example
+#
+# Copy what you need into the private collector.env created by the installer
+# (mode 0600). The generated file starts with every value commented out: with
+# no destinations the collector fails closed and delivers nothing.
+#
+# PUBLIC DEMO VALUES ONLY. demo-token-local is a deliberately public local test
+# string, not a credential for any real deployment.
+
+# COLLECTOR_MODE=real
+# COLLECTOR_STATE_FILE=/home/operator/.local/state/rigscope/collector/collector.json
+# COLLECTOR_INTERVAL_MS=1000
+# COLLECTOR_HOSTNAME=rig-01
+
+# Enroll once against the hub, then remove the one-use grant from the hub.
+# COLLECTOR_ENROLL_URL=ws://127.0.0.1:8081/api/collector/connect
+# COLLECTOR_ENROLL_TOKEN=<one-use grant from the hub>
+
+# Or supply destinations explicitly (enrollment writes these into private state
+# for real installations). Full websocket URL including the connect path:
+# COLLECTOR_HUBS=[{"url":"ws://127.0.0.1:8081/api/collector/connect","token":"demo-token-local"}]
+
+# Per-destination sharing policy can withhold sensitive families. Defaults are
+# CPU/memory only; process details remain request-scoped and are never spooled.

package/packaging/hub.env.example

@@ -0,0 +1,31 @@
+# Hub environment example
+#
+# Copy the values you need into the private hub.env created by the installer
+# (mode 0600), not into a repository file. The generated hub.env starts with
+# every value commented out: no browser users and no collector credentials
+# means protected browser data fails closed.
+#
+# PUBLIC DEMO VALUES ONLY below. Never use demo-token-local for a real host,
+# never reuse a demo browser password, and never put credentials in URLs.
+
+# Loopback-only development listener.
+# HUB_HOST=127.0.0.1
+# HUB_PORT=8081
+
+# Remote mode is selected only when both are set. The socket must live under a
+# private directory (the installer's state directory is writable by the unit).
+# HUB_PUBLIC_ORIGIN=https://monitor.example.invalid
+# HUB_SOCKET_PATH=/home/operator/.local/state/rigscope/run/hub.sock
+
+# Browser access fails closed without this. Generate the real hash locally with
+# scripts/hash-browser-password.cjs; never paste a plaintext password here.
+# HUB_BROWSER_USERS=[{"username":"operator","passwordHash":"<private hash>","machineIds":"*"}]
+
+# Static collector credentials (public demo shape/token).
+# HUB_COLLECTORS=[{"collectorId":"demo-collector","machineId":"demo-machine","token":"demo-token-local"}]
+
+# Enrollment/registry state. The installer sets HUB_DATABASE_PATH in the unit;
+# keep enrollment state outside the repository, and HUB_STATE_FILE also serves
+# as the recovery import source for previously enrolled collectors.
+# HUB_STATE_FILE=/home/operator/.local/state/rigscope/hub/enrollment.json
+# HUB_ENROLLMENT_GRANTS=[{"token":"<one-use grant>","expiresAt":"<ISO timestamp>"}]

package/packaging/system/90-rigscope-rapl.rules

@@ -0,0 +1,7 @@
+# Managed by Rigscope: read-only package energy/range counters for the collector group.
+# Top-level package devices only; subdomains and constraint files are not touched.
+SUBSYSTEM=="powercap", ACTION=="add|change", KERNEL=="intel-rapl:[0-9]*", KERNEL!="intel-rapl:*:*", ATTR{name}=="package*", \
+  RUN+="/usr/bin/chgrp rigscope-rapl /sys%p/energy_uj", \
+  RUN+="/usr/bin/chmod 0440 /sys%p/energy_uj", \
+  RUN+="/usr/bin/chgrp rigscope-rapl /sys%p/max_energy_range_uj", \
+  RUN+="/usr/bin/chmod 0440 /sys%p/max_energy_range_uj"

package/packaging/system/README.md

@@ -0,0 +1,5 @@
+# System installation references
+
+These files illustrate dedicated `rigscope-hub` and `rigscope-collector` accounts, systemd units and read-only package-energy access. The renderer in `src/cli/system.ts` is authoritative; do not install examples blindly.
+
+See [System installation](../../docs/system-installation.md) for planning, `--apply`, component controls and CPU package-power permissions. The collector needs GPU device access and does not use `PrivateDevices=yes`; the hub does. Both run without root privileges.

package/packaging/system/rigscope-collector.service.example

@@ -0,0 +1,53 @@
+# Managed by `rigscope system`. Enable explicitly after enrollment.
+# Independent component: enabling or restarting this unit never touches the hub.
+# The collector is nologin and has no capability grants.
+# Package power reads use the private group rule installed separately.
+# Node receives no capabilities, no root, and no device-control access.
+[Unit]
+Description=Rigscope collector (system scope)
+Documentation=file:/opt/rigscope/current/README.md
+After=network-online.target
+Wants=network-online.target
+StartLimitIntervalSec=60
+StartLimitBurst=5
+
+[Service]
+Type=simple
+User=rigscope-collector
+Group=rigscope-collector
+WorkingDirectory=/opt/rigscope/current
+EnvironmentFile=/etc/rigscope/collector.env
+Environment=NODE_ENV=production
+Restart=on-failure
+RestartSec=2s
+KillSignal=SIGTERM
+UMask=0077
+NoNewPrivileges=yes
+PrivateTmp=yes
+ProtectSystem=strict
+ProtectHome=yes
+ProtectKernelTunables=yes
+ProtectKernelModules=yes
+ProtectKernelLogs=yes
+ProtectControlGroups=yes
+RestrictRealtime=yes
+RestrictSUIDSGID=yes
+RestrictNamespaces=yes
+LockPersonality=yes
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+CapabilityBoundingSet=
+AmbientCapabilities=
+ExecStart="/opt/rigscope/node/node" "/opt/rigscope/current/dist/collector.cjs" --await-connection
+SupplementaryGroups=rigscope-rapl
+Environment="COLLECTOR_MODE=real"
+Environment="COLLECTOR_STATE_FILE=/var/lib/rigscope/collector/state.json"
+Environment="COLLECTOR_HEALTH_FILE=/var/lib/rigscope/collector/health.json"
+ReadWritePaths="/var/lib/rigscope/collector"
+ReadOnlyPaths="/opt/rigscope/current"
+TimeoutStopSec=10s
+StandardOutput=journal
+StandardError=journal
+SyslogIdentifier=rigscope-collector
+
+[Install]
+WantedBy=multi-user.target