@camstack/addon-pipeline 1.1.31 → 1.1.32

package/dist/decoder-ffmpeg/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_dist = require("../dist-Cwc0TUQr.js");
-const require_frame_ring_sink = require("../frame-ring-sink-8LLV-cvH.js");
+const require_frame_ring_sink = require("../frame-ring-sink-DvdhCFr3.js");
 const require_ffmpeg_args = require("../ffmpeg-args-D6h1edXK.js");
 const require_frame_dropper = require("../frame-dropper-DKLM6pMz.js");
 let _camstack_shm_ring = require("@camstack/shm-ring");
@@ -706,6 +706,9 @@ var DecoderFfmpegAddon = class extends require_dist.BaseAddon {
 		}] });
 	}
 	async onInitialize() {
+		if (!this.config.probedBestHwaccel) this.reprobeHwaccel().catch((err) => {
+			this.ctx.logger.warn("ffmpeg: auto-reprobe hwaccel failed", { meta: { error: err instanceof Error ? err.message : String(err) } });
+		});
 		const backend = await require_frame_ring_sink.resolveDecoderBackend(this.ctx.api, this.resolveLocalNodeId(), this.ctx.logger);
 		if (backend !== "ffmpeg") {
 			this.ctx.logger.info("ffmpeg decoder: this node selects a different decoder backend — standing down (no decoder provider registered)", { meta: { selectedBackend: backend } });
@@ -719,9 +722,6 @@ var DecoderFfmpegAddon = class extends require_dist.BaseAddon {
 			filters: [...this.probedGpuScaleFilters],
 			ffmpeg: this.ffmpegPath
 		} });
-		if (!this.config.probedBestHwaccel) this.reprobeHwaccel().catch((err) => {
-			this.ctx.logger.warn("ffmpeg: auto-reprobe hwaccel failed", { meta: { error: err instanceof Error ? err.message : String(err) } });
-		});
 		return [{
 			capability: require_dist.decoderCapability,
 			provider: this

package/dist/decoder-ffmpeg/index.mjs

@@ -1,5 +1,5 @@
 import { B as errMsg, V as BaseAddon, d as HWACCEL_OPTIONS, s as DEFAULT_DECODER_HWACCEL_CONFIG, x as decoderCapability } from "../dist-DjuGmyG9.mjs";
-import { a as resolveDecoderBackend, i as NotifyingRingBuffer, n as RING_BUDGET_MB, o as DEFAULT_DECODER_BACKEND, t as DecoderFrameRingSink } from "../frame-ring-sink-ClEWjiRU.mjs";
+import { a as resolveDecoderBackend, i as NotifyingRingBuffer, n as RING_BUDGET_MB, s as DEFAULT_DECODER_BACKEND, t as DecoderFrameRingSink } from "../frame-ring-sink-sY-8XUsH.mjs";
 import { a as codecToInputFormat, c as maxDecodeWidth, d as pickDecodeHwAccel, f as rankDecodeHwAccels, i as channelsForPixel, l as parseAvailableGpuScaleFilters, m as resolveGpuScaleFilter, n as DEFAULT_VAAPI_RENDER_DEVICE, o as computeOutputGeometry, p as rawPixelForFormat, r as buildFfmpegDecodeArgs, s as isSoftwareHwAccel, t as DECODE_HWACCEL_RANK, u as parseFfmpegOutputDims } from "../ffmpeg-args-C5GPp8Cw.mjs";
 import { t as FrameDropper } from "../frame-dropper-AjheBGMG.mjs";
 import { FrameRingReaderCache } from "@camstack/shm-ring";
@@ -702,6 +702,9 @@ var DecoderFfmpegAddon = class extends BaseAddon {
 		}] });
 	}
 	async onInitialize() {
+		if (!this.config.probedBestHwaccel) this.reprobeHwaccel().catch((err) => {
+			this.ctx.logger.warn("ffmpeg: auto-reprobe hwaccel failed", { meta: { error: err instanceof Error ? err.message : String(err) } });
+		});
 		const backend = await resolveDecoderBackend(this.ctx.api, this.resolveLocalNodeId(), this.ctx.logger);
 		if (backend !== "ffmpeg") {
 			this.ctx.logger.info("ffmpeg decoder: this node selects a different decoder backend — standing down (no decoder provider registered)", { meta: { selectedBackend: backend } });
@@ -715,9 +718,6 @@ var DecoderFfmpegAddon = class extends BaseAddon {
 			filters: [...this.probedGpuScaleFilters],
 			ffmpeg: this.ffmpegPath
 		} });
-		if (!this.config.probedBestHwaccel) this.reprobeHwaccel().catch((err) => {
-			this.ctx.logger.warn("ffmpeg: auto-reprobe hwaccel failed", { meta: { error: err instanceof Error ? err.message : String(err) } });
-		});
 		return [{
 			capability: decoderCapability,
 			provider: this

package/dist/decoder-nodeav/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_dist = require("../dist-Cwc0TUQr.js");
-const require_frame_ring_sink = require("../frame-ring-sink-8LLV-cvH.js");
+const require_frame_ring_sink = require("../frame-ring-sink-DvdhCFr3.js");
 const require_ffmpeg_args = require("../ffmpeg-args-D6h1edXK.js");
 let _camstack_shm_ring = require("@camstack/shm-ring");
 let node_crypto = require("node:crypto");
@@ -955,14 +955,16 @@ var DecoderNodeAvAddon = class extends require_dist.BaseAddon {
 		}];
 	}
 	/**
-	* Resolve the effective hwaccel backend for a new session. Reads
-	* this addon's own `hwaccel` setting first. `'auto'` defers to the
-	* session's local resolver (`ctx.kernel.hwaccel`) which probes the
-	* host and picks. No more orchestrator round-trip — decoder addon
-	* is self-sufficient for this setting as of phase 2d.
+	* Resolve the effective hwaccel backend for a new session. Reads the SHARED
+	* per-node override from the `decoder-ffmpeg` OWNER — the single value the
+	* Pipeline UI edits — exactly as `resolveDecoderBackend` reads the owner's
+	* `backend`. This makes a manual hwaccel override take effect even when
+	* node-av is the active backend (its OWN `hwaccel@node` is never surfaced by
+	* the UI). `'auto'` defers to the session's local resolver
+	* (`ctx.kernel.hwaccel`). Fails safe to `'auto'`.
 	*/
 	resolveHwAccelPref() {
-		return this.config.hwaccel;
+		return require_frame_ring_sink.resolveDecoderHwAccel(this.ctx.api, this.resolveLocalNodeId(), this.ctx.logger);
 	}
 	/**
 	* Re-run the platform probe on this host and persist the detected
@@ -1021,7 +1023,7 @@ var DecoderNodeAvAddon = class extends require_dist.BaseAddon {
 	}
 	async createSession(config) {
 		const sessionId = (0, node_crypto.randomUUID)();
-		const hwaccel = this.resolveHwAccelPref();
+		const hwaccel = await this.resolveHwAccelPref();
 		const { frameSink } = config;
 		const nodeId = this.resolveLocalNodeId();
 		const session = new NodeAvDecoderSession(config, this.ctx.logger, {

package/dist/decoder-nodeav/index.mjs

@@ -1,5 +1,5 @@
 import { B as errMsg, V as BaseAddon, d as HWACCEL_OPTIONS, s as DEFAULT_DECODER_HWACCEL_CONFIG, x as decoderCapability } from "../dist-DjuGmyG9.mjs";
-import { a as resolveDecoderBackend, i as NotifyingRingBuffer, n as RING_BUDGET_MB, r as makeSegmentName, t as DecoderFrameRingSink } from "../frame-ring-sink-ClEWjiRU.mjs";
+import { a as resolveDecoderBackend, i as NotifyingRingBuffer, n as RING_BUDGET_MB, o as resolveDecoderHwAccel, r as makeSegmentName, t as DecoderFrameRingSink } from "../frame-ring-sink-sY-8XUsH.mjs";
 import { f as rankDecodeHwAccels } from "../ffmpeg-args-C5GPp8Cw.mjs";
 import { FrameRingReaderCache } from "@camstack/shm-ring";
 import { randomUUID } from "node:crypto";
@@ -951,14 +951,16 @@ var DecoderNodeAvAddon = class extends BaseAddon {
 		}];
 	}
 	/**
-	* Resolve the effective hwaccel backend for a new session. Reads
-	* this addon's own `hwaccel` setting first. `'auto'` defers to the
-	* session's local resolver (`ctx.kernel.hwaccel`) which probes the
-	* host and picks. No more orchestrator round-trip — decoder addon
-	* is self-sufficient for this setting as of phase 2d.
+	* Resolve the effective hwaccel backend for a new session. Reads the SHARED
+	* per-node override from the `decoder-ffmpeg` OWNER — the single value the
+	* Pipeline UI edits — exactly as `resolveDecoderBackend` reads the owner's
+	* `backend`. This makes a manual hwaccel override take effect even when
+	* node-av is the active backend (its OWN `hwaccel@node` is never surfaced by
+	* the UI). `'auto'` defers to the session's local resolver
+	* (`ctx.kernel.hwaccel`). Fails safe to `'auto'`.
 	*/
 	resolveHwAccelPref() {
-		return this.config.hwaccel;
+		return resolveDecoderHwAccel(this.ctx.api, this.resolveLocalNodeId(), this.ctx.logger);
 	}
 	/**
 	* Re-run the platform probe on this host and persist the detected
@@ -1017,7 +1019,7 @@ var DecoderNodeAvAddon = class extends BaseAddon {
 	}
 	async createSession(config) {
 		const sessionId = randomUUID();
-		const hwaccel = this.resolveHwAccelPref();
+		const hwaccel = await this.resolveHwAccelPref();
 		const { frameSink } = config;
 		const nodeId = this.resolveLocalNodeId();
 		const session = new NodeAvDecoderSession(config, this.ctx.logger, {

package/dist/detection-pipeline/index.js

@@ -185,6 +185,35 @@ function pickBestRuntime(env, bestBackendHint) {
 		device: defaultDeviceFor(chosen)
 	};
 }
+/**
+* The ordered device candidates a runtime will try for an `'auto'`/`'all'`
+* device pick — mirrors what the python inference pool actually resolves
+* (openvino `_resolve_ov_devices`: NPU>GPU>CPU; coreml compute-units `all`:
+* ANE>GPU>CPU). Surfaced in `probedBestEngine` so the UI shows the real
+* accelerator order (`openvino/auto [NPU, GPU, CPU]`) instead of a bare `auto`
+* tag. Returns `[]` for runtimes with a single fixed device (onnx → CPU) — the
+* caller then keeps the plain `backend/device` label.
+*/
+function engineDeviceSequence(runtimeId, env) {
+	const hw = env.hardware;
+	switch (runtimeId) {
+		case "openvino": {
+			const seq = [];
+			if (hw?.npu?.type === "intel-npu") seq.push("NPU");
+			if (hw?.gpu?.type === "intel") seq.push("GPU");
+			seq.push("CPU");
+			return seq;
+		}
+		case "coreml": {
+			const seq = [];
+			if (hw?.npu?.type === "apple-ane") seq.push("ANE");
+			if (hw?.gpu != null) seq.push("GPU");
+			seq.push("CPU");
+			return seq;
+		}
+		default: return [];
+	}
+}
 //#endregion
 //#region src/detection-pipeline/engine-store-keys.ts
 /**
@@ -6423,14 +6452,16 @@ var DetectionPipelineProvider = class DetectionPipelineProvider {
 		try {
 			hardware = await this.addonCtx?.kernel?.inferenceEngine?.resolveHardware() ?? null;
 		} catch {}
-		const pick = pickBestRuntime(runtimeEnvFromProcess(hardware ? toProbedHardware(hardware) : null), null);
+		const env = runtimeEnvFromProcess(hardware ? toProbedHardware(hardware) : null);
+		const pick = pickBestRuntime(env, null);
 		const best = {
 			runtime: "python",
 			backend: pick.runtimeId,
 			format: modelFormatFor(pick.runtimeId),
 			device: pick.device
 		};
-		const probedLabel = `${best.backend}/${best.device ?? "default"}`;
+		const deviceSeq = engineDeviceSequence(pick.runtimeId, env);
+		const probedLabel = deviceSeq.length > 1 ? `${best.backend}/${best.device ?? "default"} [${deviceSeq.join(", ")}]` : `${best.backend}/${best.device ?? "default"}`;
 		const rpNode = this.localProbeNodeId();
 		if (pick.runtimeId !== "onnx" || hardware !== null) {
 			await this.writeStore({ [nodeEngineKey("probedBestEngine", rpNode)]: probedLabel });

package/dist/detection-pipeline/index.mjs

@@ -178,6 +178,35 @@ function pickBestRuntime(env, bestBackendHint) {
 		device: defaultDeviceFor(chosen)
 	};
 }
+/**
+* The ordered device candidates a runtime will try for an `'auto'`/`'all'`
+* device pick — mirrors what the python inference pool actually resolves
+* (openvino `_resolve_ov_devices`: NPU>GPU>CPU; coreml compute-units `all`:
+* ANE>GPU>CPU). Surfaced in `probedBestEngine` so the UI shows the real
+* accelerator order (`openvino/auto [NPU, GPU, CPU]`) instead of a bare `auto`
+* tag. Returns `[]` for runtimes with a single fixed device (onnx → CPU) — the
+* caller then keeps the plain `backend/device` label.
+*/
+function engineDeviceSequence(runtimeId, env) {
+	const hw = env.hardware;
+	switch (runtimeId) {
+		case "openvino": {
+			const seq = [];
+			if (hw?.npu?.type === "intel-npu") seq.push("NPU");
+			if (hw?.gpu?.type === "intel") seq.push("GPU");
+			seq.push("CPU");
+			return seq;
+		}
+		case "coreml": {
+			const seq = [];
+			if (hw?.npu?.type === "apple-ane") seq.push("ANE");
+			if (hw?.gpu != null) seq.push("GPU");
+			seq.push("CPU");
+			return seq;
+		}
+		default: return [];
+	}
+}
 //#endregion
 //#region src/detection-pipeline/engine-store-keys.ts
 /**
@@ -6416,14 +6445,16 @@ var DetectionPipelineProvider = class DetectionPipelineProvider {
 		try {
 			hardware = await this.addonCtx?.kernel?.inferenceEngine?.resolveHardware() ?? null;
 		} catch {}
-		const pick = pickBestRuntime(runtimeEnvFromProcess(hardware ? toProbedHardware(hardware) : null), null);
+		const env = runtimeEnvFromProcess(hardware ? toProbedHardware(hardware) : null);
+		const pick = pickBestRuntime(env, null);
 		const best = {
 			runtime: "python",
 			backend: pick.runtimeId,
 			format: modelFormatFor(pick.runtimeId),
 			device: pick.device
 		};
-		const probedLabel = `${best.backend}/${best.device ?? "default"}`;
+		const deviceSeq = engineDeviceSequence(pick.runtimeId, env);
+		const probedLabel = deviceSeq.length > 1 ? `${best.backend}/${best.device ?? "default"} [${deviceSeq.join(", ")}]` : `${best.backend}/${best.device ?? "default"}`;
 		const rpNode = this.localProbeNodeId();
 		if (pick.runtimeId !== "onnx" || hardware !== null) {
 			await this.writeStore({ [nodeEngineKey("probedBestEngine", rpNode)]: probedLabel });

package/dist/{frame-ring-sink-8LLV-cvH.js → frame-ring-sink-DvdhCFr3.js}

@@ -18,8 +18,75 @@ function normalizeDecoderNodeId(rawNodeId) {
 }
 //#endregion
 //#region src/shared/decoder-backend.ts
+/**
+* Decoder backend selection — decides which decoder addon registers the
+* `decoder` cap on a node.
+*
+* Two decoder addons ship in this bundle: `decoder-ffmpeg` (subprocess
+* decode; a decode crash is isolated to the child) and `decoder-nodeav`
+* (in-process decode via FFmpeg native bindings; no subprocess lifecycle).
+* Both are installed on every node, but only ONE may provide the `decoder`
+* cap at a time.
+*
+* ## Why selection happens at REGISTRATION time (race-free by construction)
+*
+* The `decoder` cap is a singleton. Historically both decoder addons
+* registered a provider and the active slot was resolved AFTER the fact —
+* which exposed a boot-order race: whichever addon's runner initialised
+* first briefly held the active slot, and any consumer that resolved the
+* cap inside that window was dispatched to the wrong backend (the
+* cap-declared `preferredProvider` override only corrects the slot when
+* the preferred addon's registration eventually lands).
+*
+* This module removes the race by construction instead of arbitrating it:
+* each decoder addon calls {@link resolveDecoderBackend} at the START of
+* its `onInitialize` and registers its provider ONLY when it is the
+* selected backend — the other addon returns no registrations at all. At
+* most one `decoder` provider ever exists per node, so no resolution layer
+* (kernel `CapabilityRegistry`, route resolver, UDS child preference) can
+* pick a wrong one, regardless of boot order or timing.
+*
+* ## The setting
+*
+* The per-node selection lives in the `decoder-ffmpeg` OWNER addon's global
+* settings — the standard `addon-settings` surface, visible in the admin UI
+* as the owner's `backend` select field. The store is hub-central and the
+* value is persisted node-scoped as `backend@<nodeId>`
+* (`decoder-backend-keys.ts`); the owner's `getGlobalSettings` projects the
+* requested node's value onto the bare `backend` field.
+*
+* Both decoder addons read it the SAME way, placement-agnostically: via
+* `ctx.api.addonSettings.getGlobalSettings({ addonId: 'decoder-ffmpeg',
+* nodeId })`. The `addon-settings` cap is hub-routed at the system level
+* (`AddonCallGateway.classify` sends settings calls to the addon's base
+* node — the hub instance answers for every node), so an agent addon
+* transparently reads the hub-central store with no placement branching.
+* NOT used: `ctx.settings.getSection` (node-local — empty on an agent, the
+* original bug), the raw settings-store cap, or any custom side channel.
+*
+* Resolution: the node's scoped value → the built-in default
+* {@link DEFAULT_DECODER_BACKEND} (`'ffmpeg'`). There is deliberately NO
+* bare-key fallback (see `decoder-backend-keys.ts`), and any read failure
+* resolves to the default so the safe backend still comes up.
+*
+* ## Switching backends
+*
+* Because registration is decided once at addon init, changing the setting
+* takes effect on the next restart of the two decoder addons on the
+* affected node (addon restart / redeploy / node reboot). This is the
+* price of race-freedom: there is deliberately NO live re-arbitration
+* path — a live hand-off would reintroduce a window with two providers.
+*/
 /** The addon whose global settings OWN the per-node `backend` field. */
 var DECODER_OWNER_ADDON_ID = "decoder-ffmpeg";
+/** Fail-safe when the owner's hwaccel can't be read: defer to the local probe. */
+var DEFAULT_DECODER_HWACCEL = "auto";
+/** Narrow an arbitrary stored value to a known {@link HwAccelChoice}, else null. */
+function parseDecoderHwAccel(raw) {
+	if (typeof raw !== "string") return null;
+	const match = require_dist.HWACCEL_OPTIONS.find((o) => o.value === raw);
+	return match ? match.value : null;
+}
 function isHydratedField(entry) {
 	return typeof entry === "object" && entry !== null && "key" in entry;
 }
@@ -72,6 +139,37 @@ async function resolveDecoderBackend(api, nodeId, logger) {
 		return DEFAULT_DECODER_BACKEND;
 	}
 }
+/**
+* Pure selection of the owner's `hwaccel` field from an already-read hydrated
+* settings payload. Missing/invalid/null → {@link DEFAULT_DECODER_HWACCEL}.
+*/
+function pickDecoderHwAccelFromSettings(view) {
+	if (view === null) return DEFAULT_DECODER_HWACCEL;
+	for (const section of view.sections) for (const entry of section.fields) {
+		if (!isHydratedField(entry) || entry.key !== "hwaccel") continue;
+		return parseDecoderHwAccel(entry.value) ?? "auto";
+	}
+	return DEFAULT_DECODER_HWACCEL;
+}
+/**
+* Resolve the effective decoder hwaccel override for a node by reading the
+* `decoder-ffmpeg` OWNER's `hwaccel@<node>` setting — the exact same
+* hub-routed, placement-agnostic read as {@link resolveDecoderBackend}, so
+* node-av and ffmpeg honour ONE per-node value (the one the UI edits). Fails
+* safe to {@link DEFAULT_DECODER_HWACCEL} (`'auto'` → the session's local probe).
+*/
+async function resolveDecoderHwAccel(api, nodeId, logger) {
+	if (!api) return DEFAULT_DECODER_HWACCEL;
+	try {
+		return pickDecoderHwAccelFromSettings(await api.addonSettings.getGlobalSettings.query({
+			addonId: DECODER_OWNER_ADDON_ID,
+			nodeId: normalizeDecoderNodeId(nodeId)
+		}));
+	} catch (err) {
+		logger.warn("decoder-hwaccel: owner settings read failed — deferring to local probe", { meta: { error: err instanceof Error ? err.message : String(err) } });
+		return DEFAULT_DECODER_HWACCEL;
+	}
+}
 //#endregion
 //#region src/shared/notifying-ring-buffer.ts
 /**
@@ -442,3 +540,9 @@ Object.defineProperty(exports, "resolveDecoderBackend", {
 		return resolveDecoderBackend;
 	}
 });
+Object.defineProperty(exports, "resolveDecoderHwAccel", {
+	enumerable: true,
+	get: function() {
+		return resolveDecoderHwAccel;
+	}
+});

package/dist/{frame-ring-sink-ClEWjiRU.mjs → frame-ring-sink-sY-8XUsH.mjs}

@@ -1,4 +1,4 @@
-import { p as RingBuffer } from "./dist-DjuGmyG9.mjs";
+import { d as HWACCEL_OPTIONS, p as RingBuffer } from "./dist-DjuGmyG9.mjs";
 import { FrameRingWriter, MIN_RING_SLOTS, computeSegmentSize, computeSlotByteLength, createSegment, deriveSlotCount } from "@camstack/shm-ring";
 //#region src/shared/decoder-backend-keys.ts
 /** Built-in default when a node has no selection — the subprocess decoder. */
@@ -18,8 +18,75 @@ function normalizeDecoderNodeId(rawNodeId) {
 }
 //#endregion
 //#region src/shared/decoder-backend.ts
+/**
+* Decoder backend selection — decides which decoder addon registers the
+* `decoder` cap on a node.
+*
+* Two decoder addons ship in this bundle: `decoder-ffmpeg` (subprocess
+* decode; a decode crash is isolated to the child) and `decoder-nodeav`
+* (in-process decode via FFmpeg native bindings; no subprocess lifecycle).
+* Both are installed on every node, but only ONE may provide the `decoder`
+* cap at a time.
+*
+* ## Why selection happens at REGISTRATION time (race-free by construction)
+*
+* The `decoder` cap is a singleton. Historically both decoder addons
+* registered a provider and the active slot was resolved AFTER the fact —
+* which exposed a boot-order race: whichever addon's runner initialised
+* first briefly held the active slot, and any consumer that resolved the
+* cap inside that window was dispatched to the wrong backend (the
+* cap-declared `preferredProvider` override only corrects the slot when
+* the preferred addon's registration eventually lands).
+*
+* This module removes the race by construction instead of arbitrating it:
+* each decoder addon calls {@link resolveDecoderBackend} at the START of
+* its `onInitialize` and registers its provider ONLY when it is the
+* selected backend — the other addon returns no registrations at all. At
+* most one `decoder` provider ever exists per node, so no resolution layer
+* (kernel `CapabilityRegistry`, route resolver, UDS child preference) can
+* pick a wrong one, regardless of boot order or timing.
+*
+* ## The setting
+*
+* The per-node selection lives in the `decoder-ffmpeg` OWNER addon's global
+* settings — the standard `addon-settings` surface, visible in the admin UI
+* as the owner's `backend` select field. The store is hub-central and the
+* value is persisted node-scoped as `backend@<nodeId>`
+* (`decoder-backend-keys.ts`); the owner's `getGlobalSettings` projects the
+* requested node's value onto the bare `backend` field.
+*
+* Both decoder addons read it the SAME way, placement-agnostically: via
+* `ctx.api.addonSettings.getGlobalSettings({ addonId: 'decoder-ffmpeg',
+* nodeId })`. The `addon-settings` cap is hub-routed at the system level
+* (`AddonCallGateway.classify` sends settings calls to the addon's base
+* node — the hub instance answers for every node), so an agent addon
+* transparently reads the hub-central store with no placement branching.
+* NOT used: `ctx.settings.getSection` (node-local — empty on an agent, the
+* original bug), the raw settings-store cap, or any custom side channel.
+*
+* Resolution: the node's scoped value → the built-in default
+* {@link DEFAULT_DECODER_BACKEND} (`'ffmpeg'`). There is deliberately NO
+* bare-key fallback (see `decoder-backend-keys.ts`), and any read failure
+* resolves to the default so the safe backend still comes up.
+*
+* ## Switching backends
+*
+* Because registration is decided once at addon init, changing the setting
+* takes effect on the next restart of the two decoder addons on the
+* affected node (addon restart / redeploy / node reboot). This is the
+* price of race-freedom: there is deliberately NO live re-arbitration
+* path — a live hand-off would reintroduce a window with two providers.
+*/
 /** The addon whose global settings OWN the per-node `backend` field. */
 var DECODER_OWNER_ADDON_ID = "decoder-ffmpeg";
+/** Fail-safe when the owner's hwaccel can't be read: defer to the local probe. */
+var DEFAULT_DECODER_HWACCEL = "auto";
+/** Narrow an arbitrary stored value to a known {@link HwAccelChoice}, else null. */
+function parseDecoderHwAccel(raw) {
+	if (typeof raw !== "string") return null;
+	const match = HWACCEL_OPTIONS.find((o) => o.value === raw);
+	return match ? match.value : null;
+}
 function isHydratedField(entry) {
 	return typeof entry === "object" && entry !== null && "key" in entry;
 }
@@ -72,6 +139,37 @@ async function resolveDecoderBackend(api, nodeId, logger) {
 		return DEFAULT_DECODER_BACKEND;
 	}
 }
+/**
+* Pure selection of the owner's `hwaccel` field from an already-read hydrated
+* settings payload. Missing/invalid/null → {@link DEFAULT_DECODER_HWACCEL}.
+*/
+function pickDecoderHwAccelFromSettings(view) {
+	if (view === null) return DEFAULT_DECODER_HWACCEL;
+	for (const section of view.sections) for (const entry of section.fields) {
+		if (!isHydratedField(entry) || entry.key !== "hwaccel") continue;
+		return parseDecoderHwAccel(entry.value) ?? "auto";
+	}
+	return DEFAULT_DECODER_HWACCEL;
+}
+/**
+* Resolve the effective decoder hwaccel override for a node by reading the
+* `decoder-ffmpeg` OWNER's `hwaccel@<node>` setting — the exact same
+* hub-routed, placement-agnostic read as {@link resolveDecoderBackend}, so
+* node-av and ffmpeg honour ONE per-node value (the one the UI edits). Fails
+* safe to {@link DEFAULT_DECODER_HWACCEL} (`'auto'` → the session's local probe).
+*/
+async function resolveDecoderHwAccel(api, nodeId, logger) {
+	if (!api) return DEFAULT_DECODER_HWACCEL;
+	try {
+		return pickDecoderHwAccelFromSettings(await api.addonSettings.getGlobalSettings.query({
+			addonId: DECODER_OWNER_ADDON_ID,
+			nodeId: normalizeDecoderNodeId(nodeId)
+		}));
+	} catch (err) {
+		logger.warn("decoder-hwaccel: owner settings read failed — deferring to local probe", { meta: { error: err instanceof Error ? err.message : String(err) } });
+		return DEFAULT_DECODER_HWACCEL;
+	}
+}
 //#endregion
 //#region src/shared/notifying-ring-buffer.ts
 /**
@@ -406,4 +504,4 @@ var DecoderFrameRingSink = class {
 	}
 };
 //#endregion
-export { resolveDecoderBackend as a, NotifyingRingBuffer as i, RING_BUDGET_MB as n, DEFAULT_DECODER_BACKEND as o, makeSegmentName as r, DecoderFrameRingSink as t };
+export { resolveDecoderBackend as a, NotifyingRingBuffer as i, RING_BUDGET_MB as n, resolveDecoderHwAccel as o, makeSegmentName as r, DEFAULT_DECODER_BACKEND as s, DecoderFrameRingSink as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-pipeline",
-  "version": "1.1.31",
+  "version": "1.1.32",
   "description": "CamStack Pipeline bundle — runner, detection, motion, decoders, audio + stream broker. Multi-entry npm package shipping 7 addons under a single bundle.",
   "keywords": [
     "camstack",