@camstack/addon-pipeline 1.1.22 → 1.1.24

package/dist/stream-broker/{_virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-CLVitFM4.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-BVFAEkIB.mjs}

@@ -18,7 +18,7 @@ var e = {
 	},
 	"@camstack/types": {
 		name: "@camstack/types",
-		version: "1.1.17",
+		version: "1.1.18",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_stream_broker_widgets",

package/dist/stream-broker/{hostInit-B15D9Mjv.mjs → hostInit-DHej3Ep9.mjs}

@@ -36,7 +36,7 @@ async function r() {
 				}
 			},
 			"@camstack/types": {
-				version: "1.1.17",
+				version: "1.1.18",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,

package/dist/stream-broker/index.js

@@ -8904,6 +8904,24 @@ var DEFAULT_HINT_FPS = 5;
 *  broker's 2s `inputFps` window so the two stats are comparable. */
 var DECODE_FPS_WINDOW_MS = 2e3;
 /**
+* Keep-warm grace before a decoder session with no subscribers is torn down.
+*
+* Subscribers flap on ~30s cadences (occupancy recheck bursts, detection
+* motion-gating watch↔active, onboard gray gating). Destroying the
+* ffmpeg/VAAPI decode session the instant the last subscriber leaves spawns +
+* destroys a full session every cycle — wasted setup/teardown. Chosen >30s so
+* consecutive bursts and watch↔active flips reuse the warm session, yet a
+* genuinely idle session still frees its ffmpeg within ~a minute.
+*/
+var SESSION_LINGER_MS = 45e3;
+/**
+* Default retry cooldown after a decoder session lands on a NON-LOCAL node
+* (see `FrameHandlePlaneOptions.sessionRetryCooldownMs`). Long enough to
+* turn a per-packet storm into a slow probe; short enough that the plane
+* recovers within seconds once the local decoder respawns.
+*/
+var SESSION_RETRY_COOLDOWN_MS = 1e4;
+/**
 * Owns the broker's shared-memory frame-handle subscriptions and the
 * per-format `frameSink: 'shm'` decoder sessions that feed them.
 */
@@ -8912,8 +8930,12 @@ var FrameHandlePlane = class {
 	logger;
 	resolveStreamInfo;
 	localNodeId;
+	sessionRetryCooldownMs;
 	subscriptions = /* @__PURE__ */ new Map();
 	sessions = /* @__PURE__ */ new Map();
+	/** Per-format retry gate set when a session lands on a non-local node:
+	*  `ensureSession` skips creation until the epoch-ms deadline passes. */
+	sessionRetryCooldownUntil = /* @__PURE__ */ new Map();
 	/** In-flight `ensureSession` creation per format. Coalesces concurrent
 	*  same-format callers onto ONE decoder session — without it two callers
 	*  both pass the `sessions.get` check, both `createSession` (two ffmpeg),
@@ -8933,6 +8955,7 @@ var FrameHandlePlane = class {
 		this.logger = options.logger;
 		this.resolveStreamInfo = options.resolveStreamInfo;
 		this.localNodeId = options.localNodeId;
+		this.sessionRetryCooldownMs = options.sessionRetryCooldownMs ?? SESSION_RETRY_COOLDOWN_MS;
 	}
 	/** Number of active handle subscriptions — surfaced for diagnostics. */
 	get subscriberCount() {
@@ -8966,8 +8989,13 @@ var FrameHandlePlane = class {
 				nodeId: session.nodeId
 			} });
 			await this.destroySession(session);
-			await this.startSessionDecoder(session);
-			rotated += 1;
+			let restarted = false;
+			try {
+				restarted = await this.startSessionDecoder(session);
+			} finally {
+				if (!restarted) this.sessions.delete(session.format);
+			}
+			if (restarted) rotated += 1;
 		}
 		return rotated;
 	}
@@ -9022,17 +9050,18 @@ var FrameHandlePlane = class {
 	* underlying decoder session is destroyed (and its shm segment unlinked
 	* by the decoder). Returns `true` when a known subscription was released.
 	*/
-	async unsubscribe(subscriptionId) {
+	async unsubscribe(subscriptionId, immediate = false) {
 		const subscription = this.subscriptions.get(subscriptionId);
 		if (!subscription) return false;
 		this.subscriptions.delete(subscriptionId);
 		const session = this.sessions.get(subscription.format);
 		if (session) {
 			session.subscriberIds.delete(subscriptionId);
-			if (session.subscriberIds.size === 0) {
+			if (session.subscriberIds.size === 0) if (immediate) {
+				this.clearLinger(session);
 				this.sessions.delete(subscription.format);
 				await this.destroySession(session);
-			}
+			} else this.scheduleLinger(session);
 		}
 		this.logger?.info("frame-handle subscription removed", { meta: {
 			subscriptionId,
@@ -9041,6 +9070,32 @@ var FrameHandlePlane = class {
 		return true;
 	}
 	/**
+	* Arm the keep-warm teardown timer for a session whose last subscriber just
+	* left. Clears any existing timer first (idempotent). On fire it re-checks
+	* `subscriberIds.size === 0` — a subscriber may have returned in the interim,
+	* in which case the timer is a no-op — and only then removes the session and
+	* destroys the decoder. The timer is `unref`'d so a lingering warm session
+	* never keeps the process alive.
+	*/
+	scheduleLinger(session) {
+		this.clearLinger(session);
+		const timer = setTimeout(() => {
+			session.lingerTimer = null;
+			if (session.subscriberIds.size > 0) return;
+			this.sessions.delete(session.format);
+			this.destroySession(session).catch(() => {});
+		}, SESSION_LINGER_MS);
+		timer.unref?.();
+		session.lingerTimer = timer;
+	}
+	/** Cancel a session's pending keep-warm teardown timer, if any. */
+	clearLinger(session) {
+		if (session.lingerTimer) {
+			clearTimeout(session.lingerTimer);
+			session.lingerTimer = null;
+		}
+	}
+	/**
 	* Forward a video `EncodedPacket` to every active shm decoder session.
 	* Push-mode decoders consume this; a pull-mode decoder ignores it (it
 	* reads its own pipe via `openStream`). Audio packets are not forwarded.
@@ -9162,7 +9217,7 @@ var FrameHandlePlane = class {
 	*/
 	async killByTag(tag) {
 		const victims = [...this.subscriptions.values()].filter((s) => s.tag === tag).map((s) => s.id);
-		for (const id of victims) await this.unsubscribe(id);
+		for (const id of victims) await this.unsubscribe(id, true);
 		return victims.length;
 	}
 	/** Tear down every subscription + decoder session. Idempotent. */
@@ -9190,6 +9245,7 @@ var FrameHandlePlane = class {
 	async ensureSession(format, subscriptionId) {
 		const existing = this.sessions.get(format);
 		if (existing) {
+			this.clearLinger(existing);
 			existing.subscriberIds.add(subscriptionId);
 			return;
 		}
@@ -9199,6 +9255,7 @@ var FrameHandlePlane = class {
 			this.sessions.get(format)?.subscriberIds.add(subscriptionId);
 			return;
 		}
+		if (Date.now() < (this.sessionRetryCooldownUntil.get(format) ?? 0)) return;
 		const creation = (async () => {
 			const subscriberIds = new Set([subscriptionId]);
 			for (const subscription of this.subscriptions.values()) if (subscription.format === format) subscriberIds.add(subscription.id);
@@ -9206,9 +9263,17 @@ var FrameHandlePlane = class {
 				format,
 				proxy: null,
 				nodeId: null,
-				subscriberIds
+				subscriberIds,
+				lingerTimer: null
 			};
-			if (await this.startSessionDecoder(session)) this.sessions.set(format, session);
+			let started = false;
+			try {
+				started = await this.startSessionDecoder(session);
+			} catch (err) {
+				this.sessionRetryCooldownUntil.set(format, Date.now() + this.sessionRetryCooldownMs);
+				throw err;
+			}
+			if (started) this.sessions.set(format, session);
 		})();
 		this.sessionCreating.set(format, creation);
 		try {
@@ -9248,11 +9313,13 @@ var FrameHandlePlane = class {
 			tag: `${info.tag}:shm:${format}`
 		});
 		if (!isDecoderNodeColocated(this.localNodeId, nodeId)) {
+			this.sessionRetryCooldownUntil.set(format, Date.now() + this.sessionRetryCooldownMs);
 			this.logger?.warn("frame-handle plane: decoder session landed on a non-local node — destroying (shm ring is node-local)", { meta: {
 				format,
 				requestedNode: this.localNodeId,
 				gotNode: nodeId,
-				sessionId
+				sessionId,
+				retryInMs: this.sessionRetryCooldownMs
 			} });
 			await this.decoderApi.destroySession({ sessionId }).catch((err) => {
 				this.logger?.warn("frame-handle plane: failed to destroy mis-placed decoder session", { meta: {
@@ -9263,6 +9330,7 @@ var FrameHandlePlane = class {
 			});
 			return false;
 		}
+		this.sessionRetryCooldownUntil.delete(format);
 		const proxy = new DecoderSessionProxy(this.decoderApi, sessionId);
 		session.proxy = proxy;
 		session.nodeId = nodeId;
@@ -9299,6 +9367,7 @@ var FrameHandlePlane = class {
 	}
 	/** Destroy a decoder session, swallowing teardown errors. */
 	async destroySession(session) {
+		this.clearLinger(session);
 		const proxy = session.proxy;
 		session.proxy = null;
 		session.nodeId = null;
@@ -10579,12 +10648,12 @@ var StreamBroker = class StreamBroker {
 	async subscribeFrameHandles(input) {
 		const plane = this.ensureFrameHandlePlane();
 		if (!plane) throw new Error("stream-broker: no decoder available for frame-handle subscription");
-		this.checkDemand();
 		const { subscriptionId, maxFps } = await plane.subscribe({
 			format: input.format,
 			maxFps: input.maxFps,
 			tag: input.tag
 		});
+		this.checkDemand();
 		return {
 			subscriptionId,
 			maxFps

package/dist/stream-broker/index.mjs

@@ -8900,6 +8900,24 @@ var DEFAULT_HINT_FPS = 5;
 *  broker's 2s `inputFps` window so the two stats are comparable. */
 var DECODE_FPS_WINDOW_MS = 2e3;
 /**
+* Keep-warm grace before a decoder session with no subscribers is torn down.
+*
+* Subscribers flap on ~30s cadences (occupancy recheck bursts, detection
+* motion-gating watch↔active, onboard gray gating). Destroying the
+* ffmpeg/VAAPI decode session the instant the last subscriber leaves spawns +
+* destroys a full session every cycle — wasted setup/teardown. Chosen >30s so
+* consecutive bursts and watch↔active flips reuse the warm session, yet a
+* genuinely idle session still frees its ffmpeg within ~a minute.
+*/
+var SESSION_LINGER_MS = 45e3;
+/**
+* Default retry cooldown after a decoder session lands on a NON-LOCAL node
+* (see `FrameHandlePlaneOptions.sessionRetryCooldownMs`). Long enough to
+* turn a per-packet storm into a slow probe; short enough that the plane
+* recovers within seconds once the local decoder respawns.
+*/
+var SESSION_RETRY_COOLDOWN_MS = 1e4;
+/**
 * Owns the broker's shared-memory frame-handle subscriptions and the
 * per-format `frameSink: 'shm'` decoder sessions that feed them.
 */
@@ -8908,8 +8926,12 @@ var FrameHandlePlane = class {
 	logger;
 	resolveStreamInfo;
 	localNodeId;
+	sessionRetryCooldownMs;
 	subscriptions = /* @__PURE__ */ new Map();
 	sessions = /* @__PURE__ */ new Map();
+	/** Per-format retry gate set when a session lands on a non-local node:
+	*  `ensureSession` skips creation until the epoch-ms deadline passes. */
+	sessionRetryCooldownUntil = /* @__PURE__ */ new Map();
 	/** In-flight `ensureSession` creation per format. Coalesces concurrent
 	*  same-format callers onto ONE decoder session — without it two callers
 	*  both pass the `sessions.get` check, both `createSession` (two ffmpeg),
@@ -8929,6 +8951,7 @@ var FrameHandlePlane = class {
 		this.logger = options.logger;
 		this.resolveStreamInfo = options.resolveStreamInfo;
 		this.localNodeId = options.localNodeId;
+		this.sessionRetryCooldownMs = options.sessionRetryCooldownMs ?? SESSION_RETRY_COOLDOWN_MS;
 	}
 	/** Number of active handle subscriptions — surfaced for diagnostics. */
 	get subscriberCount() {
@@ -8962,8 +8985,13 @@ var FrameHandlePlane = class {
 				nodeId: session.nodeId
 			} });
 			await this.destroySession(session);
-			await this.startSessionDecoder(session);
-			rotated += 1;
+			let restarted = false;
+			try {
+				restarted = await this.startSessionDecoder(session);
+			} finally {
+				if (!restarted) this.sessions.delete(session.format);
+			}
+			if (restarted) rotated += 1;
 		}
 		return rotated;
 	}
@@ -9018,17 +9046,18 @@ var FrameHandlePlane = class {
 	* underlying decoder session is destroyed (and its shm segment unlinked
 	* by the decoder). Returns `true` when a known subscription was released.
 	*/
-	async unsubscribe(subscriptionId) {
+	async unsubscribe(subscriptionId, immediate = false) {
 		const subscription = this.subscriptions.get(subscriptionId);
 		if (!subscription) return false;
 		this.subscriptions.delete(subscriptionId);
 		const session = this.sessions.get(subscription.format);
 		if (session) {
 			session.subscriberIds.delete(subscriptionId);
-			if (session.subscriberIds.size === 0) {
+			if (session.subscriberIds.size === 0) if (immediate) {
+				this.clearLinger(session);
 				this.sessions.delete(subscription.format);
 				await this.destroySession(session);
-			}
+			} else this.scheduleLinger(session);
 		}
 		this.logger?.info("frame-handle subscription removed", { meta: {
 			subscriptionId,
@@ -9037,6 +9066,32 @@ var FrameHandlePlane = class {
 		return true;
 	}
 	/**
+	* Arm the keep-warm teardown timer for a session whose last subscriber just
+	* left. Clears any existing timer first (idempotent). On fire it re-checks
+	* `subscriberIds.size === 0` — a subscriber may have returned in the interim,
+	* in which case the timer is a no-op — and only then removes the session and
+	* destroys the decoder. The timer is `unref`'d so a lingering warm session
+	* never keeps the process alive.
+	*/
+	scheduleLinger(session) {
+		this.clearLinger(session);
+		const timer = setTimeout(() => {
+			session.lingerTimer = null;
+			if (session.subscriberIds.size > 0) return;
+			this.sessions.delete(session.format);
+			this.destroySession(session).catch(() => {});
+		}, SESSION_LINGER_MS);
+		timer.unref?.();
+		session.lingerTimer = timer;
+	}
+	/** Cancel a session's pending keep-warm teardown timer, if any. */
+	clearLinger(session) {
+		if (session.lingerTimer) {
+			clearTimeout(session.lingerTimer);
+			session.lingerTimer = null;
+		}
+	}
+	/**
 	* Forward a video `EncodedPacket` to every active shm decoder session.
 	* Push-mode decoders consume this; a pull-mode decoder ignores it (it
 	* reads its own pipe via `openStream`). Audio packets are not forwarded.
@@ -9158,7 +9213,7 @@ var FrameHandlePlane = class {
 	*/
 	async killByTag(tag) {
 		const victims = [...this.subscriptions.values()].filter((s) => s.tag === tag).map((s) => s.id);
-		for (const id of victims) await this.unsubscribe(id);
+		for (const id of victims) await this.unsubscribe(id, true);
 		return victims.length;
 	}
 	/** Tear down every subscription + decoder session. Idempotent. */
@@ -9186,6 +9241,7 @@ var FrameHandlePlane = class {
 	async ensureSession(format, subscriptionId) {
 		const existing = this.sessions.get(format);
 		if (existing) {
+			this.clearLinger(existing);
 			existing.subscriberIds.add(subscriptionId);
 			return;
 		}
@@ -9195,6 +9251,7 @@ var FrameHandlePlane = class {
 			this.sessions.get(format)?.subscriberIds.add(subscriptionId);
 			return;
 		}
+		if (Date.now() < (this.sessionRetryCooldownUntil.get(format) ?? 0)) return;
 		const creation = (async () => {
 			const subscriberIds = new Set([subscriptionId]);
 			for (const subscription of this.subscriptions.values()) if (subscription.format === format) subscriberIds.add(subscription.id);
@@ -9202,9 +9259,17 @@ var FrameHandlePlane = class {
 				format,
 				proxy: null,
 				nodeId: null,
-				subscriberIds
+				subscriberIds,
+				lingerTimer: null
 			};
-			if (await this.startSessionDecoder(session)) this.sessions.set(format, session);
+			let started = false;
+			try {
+				started = await this.startSessionDecoder(session);
+			} catch (err) {
+				this.sessionRetryCooldownUntil.set(format, Date.now() + this.sessionRetryCooldownMs);
+				throw err;
+			}
+			if (started) this.sessions.set(format, session);
 		})();
 		this.sessionCreating.set(format, creation);
 		try {
@@ -9244,11 +9309,13 @@ var FrameHandlePlane = class {
 			tag: `${info.tag}:shm:${format}`
 		});
 		if (!isDecoderNodeColocated(this.localNodeId, nodeId)) {
+			this.sessionRetryCooldownUntil.set(format, Date.now() + this.sessionRetryCooldownMs);
 			this.logger?.warn("frame-handle plane: decoder session landed on a non-local node — destroying (shm ring is node-local)", { meta: {
 				format,
 				requestedNode: this.localNodeId,
 				gotNode: nodeId,
-				sessionId
+				sessionId,
+				retryInMs: this.sessionRetryCooldownMs
 			} });
 			await this.decoderApi.destroySession({ sessionId }).catch((err) => {
 				this.logger?.warn("frame-handle plane: failed to destroy mis-placed decoder session", { meta: {
@@ -9259,6 +9326,7 @@ var FrameHandlePlane = class {
 			});
 			return false;
 		}
+		this.sessionRetryCooldownUntil.delete(format);
 		const proxy = new DecoderSessionProxy(this.decoderApi, sessionId);
 		session.proxy = proxy;
 		session.nodeId = nodeId;
@@ -9295,6 +9363,7 @@ var FrameHandlePlane = class {
 	}
 	/** Destroy a decoder session, swallowing teardown errors. */
 	async destroySession(session) {
+		this.clearLinger(session);
 		const proxy = session.proxy;
 		session.proxy = null;
 		session.nodeId = null;
@@ -10575,12 +10644,12 @@ var StreamBroker = class StreamBroker {
 	async subscribeFrameHandles(input) {
 		const plane = this.ensureFrameHandlePlane();
 		if (!plane) throw new Error("stream-broker: no decoder available for frame-handle subscription");
-		this.checkDemand();
 		const { subscriptionId, maxFps } = await plane.subscribe({
 			format: input.format,
 			maxFps: input.maxFps,
 			tag: input.tag
 		});
+		this.checkDemand();
 		return {
 			subscriptionId,
 			maxFps

package/dist/stream-broker/remoteEntry.js

@@ -30,7 +30,7 @@ async function d(e) {
 	}
 }
 async function f() {
-	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-CLVitFM4.mjs")).catch((e) => {
+	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-BVFAEkIB.mjs")).catch((e) => {
 		throw l = void 0, e;
 	}), l;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-pipeline",
-  "version": "1.1.22",
+  "version": "1.1.24",
   "description": "CamStack Pipeline bundle — runner, detection, motion, decoders, audio + stream broker. Multi-entry npm package shipping 7 addons under a single bundle.",
   "keywords": [
     "camstack",