@camstack/addon-pipeline-orchestrator 1.1.15 → 1.1.16

package/dist/{_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_orchestrator_widgets-9JducZh4.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_orchestrator_widgets-C2Ftp01d.mjs}

@@ -18,7 +18,7 @@ var e = {
 	},
 	"@camstack/types": {
 		name: "@camstack/types",
-		version: "1.1.17",
+		version: "1.1.18",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_pipeline_orchestrator_widgets",

package/dist/{hostInit-Dh1lreoG.mjs → hostInit-DuphCRk3.mjs}

@@ -36,7 +36,7 @@ async function r() {
 				}
 			},
 			"@camstack/types": {
-				version: "1.1.17",
+				version: "1.1.18",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,

package/dist/index.js

@@ -23037,6 +23037,25 @@ function computeDispatchGap(desired, known) {
 	return [...desired].filter((id) => !known.has(id));
 }
 //#endregion
+//#region src/frame-source-eligibility.ts
+/**
+* The set of nodes that can obtain a given camera's decoded frames.
+*
+* - No `sourceOwnerNodeId` → `enabledDecoderNodes` unchanged (today's
+*   semantics; `remoteSourcingNodes` cannot restrict anything when no owner
+*   restricts first — it only ever WIDENS an owner-restricted set).
+* - With an owner → `enabledDecoderNodes ∩ ({owner} ∪ remoteSourcingNodes)`.
+*
+* Pure: never mutates its inputs; result preserves `enabledDecoderNodes`
+* order.
+*/
+function computeFrameSourceNodes(input) {
+	const { enabledDecoderNodes, sourceOwnerNodeId, remoteSourcingNodes } = input;
+	if (sourceOwnerNodeId === void 0) return enabledDecoderNodes;
+	const remote = remoteSourcingNodes ?? [];
+	return enabledDecoderNodes.filter((nodeId) => nodeId === sourceOwnerNodeId || remote.includes(nodeId));
+}
+//#endregion
 //#region src/load-balancer.ts
 /**
 * Compute the L2 capacity score for a runner node. Lower is better.
@@ -24526,7 +24545,7 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 			nodes: await this.collectAgentLoad({ onlyEnabled: true }),
 			preferredAgent,
 			nodeCaps: await this.buildNodeCaps(),
-			eligibleNodes: this.detectionEligibleNodes()
+			eligibleNodes: this.detectionEligibleNodes(runnerConfig.deviceId)
 		});
 		if (!decision) throw new Error(`dispatchCamera: no runner available for ${runnerConfig.deviceId}`);
 		if (decision.kind === "pending") {
@@ -24591,7 +24610,7 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 	}
 	async assignPipeline(input) {
 		if (!this.ctx) throw new Error("PipelineOrchestrator: assignPipeline called before initialize");
-		const eligible = this.detectionEligibleNodes();
+		const eligible = this.detectionEligibleNodes(input.deviceId);
 		if (!eligible.includes(input.agentNodeId)) throw new Error(`Cannot pin camera ${input.deviceId} detection to '${input.agentNodeId}': the node cannot obtain this camera's decoded frames (frame-source nodes: ${eligible.join(", ") || "none"}). Add it to Enabled Decoder Nodes first.`);
 		await this.ctx.settings?.writeDeviceStore(input.deviceId, { [PREFERRED_AGENT_SETTING]: input.agentNodeId }).catch((err) => {
 			const msg = errMsg(err);
@@ -24639,7 +24658,7 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 				nodes: await this.collectAgentLoad({ onlyEnabled: true }),
 				preferredAgent: null,
 				nodeCaps: await this.buildNodeCaps(),
-				eligibleNodes: this.detectionEligibleNodes()
+				eligibleNodes: this.detectionEligibleNodes(input.deviceId)
 			});
 			if (!decision) this.ctx.logger.warn("unassignPipeline: no runner available, leaving unassigned", { tags: { deviceId: input.deviceId } });
 			else if (decision.kind === "pending") {
@@ -24695,7 +24714,7 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 				nodes: loads,
 				preferredAgent: await this.readPreferredAgent(deviceId),
 				nodeCaps,
-				eligibleNodes: this.detectionEligibleNodes()
+				eligibleNodes: this.detectionEligibleNodes(deviceId)
 			});
 			if (!decision) continue;
 			if (decision.kind === "pending") {
@@ -24910,34 +24929,54 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 		return this.enabledNodes.includes(nodeId);
 	}
 	/**
-	* The set of nodes that can OBTAIN a camera's decoded frames.
+	* The node that owns `deviceId`'s source pull (dials the real RTSP, hosts
+	* the broker). **P2a (today): intentionally `undefined`** — per-camera
+	* source ownership is not modeled yet, and an absent owner makes
+	* `computeFrameSourceNodes` collapse to the global `enabledDecoderNodes`
+	* (bit-identical to pre-P2a behavior, the safe-rollout invariant).
 	*
-	* **Phase 1 (today):** detection HARD-requires that the runner is itself a
-	* decoder node — a node can only run detection where it can read the shm
-	* frame ring locally. So the frame-source set is exactly
-	* `enabledDecoderNodes`.
+	* Deliberately NOT `'hub'` yet: with an owner set and no
+	* `remoteSourcingNodes`, the predicate would restrict eligibility to the
+	* hub even when agents are decoder-enabled — a behavior change reserved for
+	* P2d, which backs this seam with the `assignSource`/`getSourceAssignment`
+	* cap surface (restream-owner design §2.3).
+	*/
+	sourceOwner(_deviceId) {}
+	/**
+	* The set of nodes that can OBTAIN a camera's decoded frames — PER-CAMERA
+	* since P2a (restream-owner design §2.3), delegating to the pure
+	* `computeFrameSourceNodes` predicate: a node qualifies iff it can decode
+	* locally (`enabledDecoderNodes`) AND (it owns the camera's source pull OR
+	* it may dial the owner's restream — `remoteSourcingNodes`, a P2c/P2d
+	* rollout knob not wired yet).
 	*
-	* **Phase 2 (T10):** this becomes per-camera source/decoder ownership — a
-	* detection node will be able to source a camera's frames from a co-located
-	* OR a remote restream/decoder leg. Replace this body then; every predicate
-	* change edits this ONE method (and `detectionEligibleNodes`).
-	*/
-	frameSourceNodes() {
-		return this.enabledDecoderNodes;
+	* **Today's effective value:** `sourceOwner()` returns `undefined` for
+	* every camera, so this is exactly `enabledDecoderNodes` — identical to the
+	* pre-P2a global predicate. Every predicate change edits the pure module
+	* (and this ONE method); `deviceId` is threaded from all placement sites so
+	* later phases turn per-camera without re-touching call sites.
+	*/
+	frameSourceNodes(deviceId) {
+		return computeFrameSourceNodes({
+			enabledDecoderNodes: this.enabledDecoderNodes,
+			sourceOwnerNodeId: this.sourceOwner(deviceId)
+		});
 	}
 	/**
 	* Nodes eligible to run a camera's detection pipeline: the whitelist of
 	* detection-enabled nodes (`enabledNodes`) intersected with the nodes that
-	* can obtain the camera's frames (`frameSourceNodes()`). A node that is
-	* detection-enabled but cannot source frames (or vice-versa) is NEVER a
-	* valid placement — the balancer receives this as `eligibleNodes` and treats
-	* anything outside it as unassignable (`no-frame-source`).
+	* can obtain the camera's frames (`frameSourceNodes(deviceId)`). A node
+	* that is detection-enabled but cannot source frames (or vice-versa) is
+	* NEVER a valid placement — the balancer receives this as `eligibleNodes`
+	* and treats anything outside it as unassignable (`no-frame-source`).
 	*
 	* Single choke point for T2/T10: passed to every `balance()` call site and
-	* enforced by `assignPipeline` before persisting a pin.
+	* enforced by `assignPipeline` before persisting a pin. `deviceId` is
+	* optional only for node-scoped checks (reconnect-restore guard); camera
+	* placement sites always pass it.
 	*/
-	detectionEligibleNodes() {
-		const frameSource = this.frameSourceNodes();
+	detectionEligibleNodes(deviceId) {
+		const frameSource = this.frameSourceNodes(deviceId);
 		return this.enabledNodes.filter((nodeId) => frameSource.includes(nodeId));
 	}
 	/**
@@ -25192,7 +25231,7 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 				nodes: loads,
 				preferredAgent: null,
 				nodeCaps: await this.buildNodeCaps(),
-				eligibleNodes: this.detectionEligibleNodes()
+				eligibleNodes: this.detectionEligibleNodes(deviceId)
 			});
 			if (!decision) {
 				this.ctx.logger.error("Failover: no online runner", { tags: { deviceId } });

package/dist/index.mjs

@@ -23033,6 +23033,25 @@ function computeDispatchGap(desired, known) {
 	return [...desired].filter((id) => !known.has(id));
 }
 //#endregion
+//#region src/frame-source-eligibility.ts
+/**
+* The set of nodes that can obtain a given camera's decoded frames.
+*
+* - No `sourceOwnerNodeId` → `enabledDecoderNodes` unchanged (today's
+*   semantics; `remoteSourcingNodes` cannot restrict anything when no owner
+*   restricts first — it only ever WIDENS an owner-restricted set).
+* - With an owner → `enabledDecoderNodes ∩ ({owner} ∪ remoteSourcingNodes)`.
+*
+* Pure: never mutates its inputs; result preserves `enabledDecoderNodes`
+* order.
+*/
+function computeFrameSourceNodes(input) {
+	const { enabledDecoderNodes, sourceOwnerNodeId, remoteSourcingNodes } = input;
+	if (sourceOwnerNodeId === void 0) return enabledDecoderNodes;
+	const remote = remoteSourcingNodes ?? [];
+	return enabledDecoderNodes.filter((nodeId) => nodeId === sourceOwnerNodeId || remote.includes(nodeId));
+}
+//#endregion
 //#region src/load-balancer.ts
 /**
 * Compute the L2 capacity score for a runner node. Lower is better.
@@ -24522,7 +24541,7 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 			nodes: await this.collectAgentLoad({ onlyEnabled: true }),
 			preferredAgent,
 			nodeCaps: await this.buildNodeCaps(),
-			eligibleNodes: this.detectionEligibleNodes()
+			eligibleNodes: this.detectionEligibleNodes(runnerConfig.deviceId)
 		});
 		if (!decision) throw new Error(`dispatchCamera: no runner available for ${runnerConfig.deviceId}`);
 		if (decision.kind === "pending") {
@@ -24587,7 +24606,7 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 	}
 	async assignPipeline(input) {
 		if (!this.ctx) throw new Error("PipelineOrchestrator: assignPipeline called before initialize");
-		const eligible = this.detectionEligibleNodes();
+		const eligible = this.detectionEligibleNodes(input.deviceId);
 		if (!eligible.includes(input.agentNodeId)) throw new Error(`Cannot pin camera ${input.deviceId} detection to '${input.agentNodeId}': the node cannot obtain this camera's decoded frames (frame-source nodes: ${eligible.join(", ") || "none"}). Add it to Enabled Decoder Nodes first.`);
 		await this.ctx.settings?.writeDeviceStore(input.deviceId, { [PREFERRED_AGENT_SETTING]: input.agentNodeId }).catch((err) => {
 			const msg = errMsg(err);
@@ -24635,7 +24654,7 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 				nodes: await this.collectAgentLoad({ onlyEnabled: true }),
 				preferredAgent: null,
 				nodeCaps: await this.buildNodeCaps(),
-				eligibleNodes: this.detectionEligibleNodes()
+				eligibleNodes: this.detectionEligibleNodes(input.deviceId)
 			});
 			if (!decision) this.ctx.logger.warn("unassignPipeline: no runner available, leaving unassigned", { tags: { deviceId: input.deviceId } });
 			else if (decision.kind === "pending") {
@@ -24691,7 +24710,7 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 				nodes: loads,
 				preferredAgent: await this.readPreferredAgent(deviceId),
 				nodeCaps,
-				eligibleNodes: this.detectionEligibleNodes()
+				eligibleNodes: this.detectionEligibleNodes(deviceId)
 			});
 			if (!decision) continue;
 			if (decision.kind === "pending") {
@@ -24906,34 +24925,54 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 		return this.enabledNodes.includes(nodeId);
 	}
 	/**
-	* The set of nodes that can OBTAIN a camera's decoded frames.
+	* The node that owns `deviceId`'s source pull (dials the real RTSP, hosts
+	* the broker). **P2a (today): intentionally `undefined`** — per-camera
+	* source ownership is not modeled yet, and an absent owner makes
+	* `computeFrameSourceNodes` collapse to the global `enabledDecoderNodes`
+	* (bit-identical to pre-P2a behavior, the safe-rollout invariant).
 	*
-	* **Phase 1 (today):** detection HARD-requires that the runner is itself a
-	* decoder node — a node can only run detection where it can read the shm
-	* frame ring locally. So the frame-source set is exactly
-	* `enabledDecoderNodes`.
+	* Deliberately NOT `'hub'` yet: with an owner set and no
+	* `remoteSourcingNodes`, the predicate would restrict eligibility to the
+	* hub even when agents are decoder-enabled — a behavior change reserved for
+	* P2d, which backs this seam with the `assignSource`/`getSourceAssignment`
+	* cap surface (restream-owner design §2.3).
+	*/
+	sourceOwner(_deviceId) {}
+	/**
+	* The set of nodes that can OBTAIN a camera's decoded frames — PER-CAMERA
+	* since P2a (restream-owner design §2.3), delegating to the pure
+	* `computeFrameSourceNodes` predicate: a node qualifies iff it can decode
+	* locally (`enabledDecoderNodes`) AND (it owns the camera's source pull OR
+	* it may dial the owner's restream — `remoteSourcingNodes`, a P2c/P2d
+	* rollout knob not wired yet).
 	*
-	* **Phase 2 (T10):** this becomes per-camera source/decoder ownership — a
-	* detection node will be able to source a camera's frames from a co-located
-	* OR a remote restream/decoder leg. Replace this body then; every predicate
-	* change edits this ONE method (and `detectionEligibleNodes`).
-	*/
-	frameSourceNodes() {
-		return this.enabledDecoderNodes;
+	* **Today's effective value:** `sourceOwner()` returns `undefined` for
+	* every camera, so this is exactly `enabledDecoderNodes` — identical to the
+	* pre-P2a global predicate. Every predicate change edits the pure module
+	* (and this ONE method); `deviceId` is threaded from all placement sites so
+	* later phases turn per-camera without re-touching call sites.
+	*/
+	frameSourceNodes(deviceId) {
+		return computeFrameSourceNodes({
+			enabledDecoderNodes: this.enabledDecoderNodes,
+			sourceOwnerNodeId: this.sourceOwner(deviceId)
+		});
 	}
 	/**
 	* Nodes eligible to run a camera's detection pipeline: the whitelist of
 	* detection-enabled nodes (`enabledNodes`) intersected with the nodes that
-	* can obtain the camera's frames (`frameSourceNodes()`). A node that is
-	* detection-enabled but cannot source frames (or vice-versa) is NEVER a
-	* valid placement — the balancer receives this as `eligibleNodes` and treats
-	* anything outside it as unassignable (`no-frame-source`).
+	* can obtain the camera's frames (`frameSourceNodes(deviceId)`). A node
+	* that is detection-enabled but cannot source frames (or vice-versa) is
+	* NEVER a valid placement — the balancer receives this as `eligibleNodes`
+	* and treats anything outside it as unassignable (`no-frame-source`).
 	*
 	* Single choke point for T2/T10: passed to every `balance()` call site and
-	* enforced by `assignPipeline` before persisting a pin.
+	* enforced by `assignPipeline` before persisting a pin. `deviceId` is
+	* optional only for node-scoped checks (reconnect-restore guard); camera
+	* placement sites always pass it.
 	*/
-	detectionEligibleNodes() {
-		const frameSource = this.frameSourceNodes();
+	detectionEligibleNodes(deviceId) {
+		const frameSource = this.frameSourceNodes(deviceId);
 		return this.enabledNodes.filter((nodeId) => frameSource.includes(nodeId));
 	}
 	/**
@@ -25188,7 +25227,7 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 				nodes: loads,
 				preferredAgent: null,
 				nodeCaps: await this.buildNodeCaps(),
-				eligibleNodes: this.detectionEligibleNodes()
+				eligibleNodes: this.detectionEligibleNodes(deviceId)
 			});
 			if (!decision) {
 				this.ctx.logger.error("Failover: no online runner", { tags: { deviceId } });

package/dist/remoteEntry.js

@@ -30,7 +30,7 @@ async function d(e) {
 	}
 }
 async function f() {
-	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_orchestrator_widgets-9JducZh4.mjs")).catch((e) => {
+	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_orchestrator_widgets-C2Ftp01d.mjs")).catch((e) => {
 		throw l = void 0, e;
 	}), l;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-pipeline-orchestrator",
-  "version": "1.1.15",
+  "version": "1.1.16",
   "description": "Hub-side camera-to-agent load balancer — tracks runner capacity and dispatches attachCamera calls to the optimal pipeline-runner instance",
   "keywords": [
     "camstack",