@camstack/addon-pipeline 1.1.64 → 1.1.66

package/dist/pipeline-runner/index.js

@@ -3,11 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-D6vf50IK.js");
-const require_dist = require("../dist-B2jTt7Lq.js");
+const require_dist = require("../dist-D5o9fGxq.js");
 const require_remote_restream = require("../remote-restream-CO36Sr30.js");
 const require_sheet_geometry = require("../sheet-geometry-BR-ip0CP.js");
 const require_worker_protocol = require("../worker-protocol-PP4jKHHJ.js");
-const require_step_definitions = require("../step-definitions-DXkY5Zor.js");
+const require_step_definitions = require("../step-definitions-81eYyJbW.js");
 let node_child_process = require("node:child_process");
 let node_url = require("node:url");
 let sharp = require("sharp");
@@ -1248,23 +1248,39 @@ function startGuardedSessionDecode(deps) {
 /** {@link RETAINED_FRAME_BUDGET_MB} in bytes. */
 var RETAINED_FRAME_BUDGET_BYTES = (() => {
 	const raw = Number(process.env["CAMSTACK_SESSION_RETAIN_MB"]);
-	return Number.isFinite(raw) && raw > 0 ? Math.floor(raw) : 32;
+	return Number.isFinite(raw) && raw > 0 ? Math.floor(raw) : 96;
 })() * 1024 * 1024;
+/**
+* How many of each device's MOST RECENT frames are protected from a busy
+* neighbour's budget eviction. Sized to cover the late two-plane / cross-process
+* enrichment horizon (~150-500 ms): 6 frames ≈ 0.6 s @10 fps of guaranteed
+* survival for every active camera. Read ONCE from
+* `CAMSTACK_SESSION_RETAIN_FLOOR`; `0` disables the floor (pure global FIFO — the
+* pre-2026-07-19 behaviour). The hard byte ceiling always overrides the floor,
+* so this can never push retention past {@link RETAINED_FRAME_BUDGET_BYTES}.
+*/
+var RETAINED_FRAME_PER_DEVICE_FLOOR = (() => {
+	const raw = Number(process.env["CAMSTACK_SESSION_RETAIN_FLOOR"]);
+	return Number.isFinite(raw) && raw >= 0 ? Math.floor(raw) : 6;
+})();
 /** Opaque RAM-key prefix stamped into a retained frame's `FrameHandle.shmId`. */
 var RETAINED_FRAME_KEY_PREFIX = "ram:";
 /** A retention frame is uniquely identified by its key + slot + committed seq. */
 function keyOf(handle) {
 	return `${handle.shmId}#${handle.slot}#${handle.seq}`;
 }
-/**
-* Node-level RAM store of retained rgb detection frames, keyed by
-* `FrameHandle` identity. Latest-wins with a byte budget.
-*/
 var RetainedFrameStore = class RetainedFrameStore {
 	nodeId;
 	budgetBytes;
-	/** Insertion-ordered (Map) → oldest is `keys().next()`. */
+	perDeviceFloor;
+	/** Insertion-ordered (Map) → globally oldest is `keys().next()`. */
 	entries = /* @__PURE__ */ new Map();
+	/**
+	* Per-device insertion-ordered keys (oldest→newest). Mirrors {@link entries}
+	* so the floor can be enforced in O(1) per eviction candidate without scanning
+	* the global map for a device's frame count.
+	*/
+	perDeviceKeys = /* @__PURE__ */ new Map();
 	bytes = 0;
 	seq = 0;
 	/** Ring width used only to spread the `slot` field; the map key is authoritative. */
@@ -1272,6 +1288,7 @@ var RetainedFrameStore = class RetainedFrameStore {
 	constructor(options) {
 		this.nodeId = options.nodeId;
 		this.budgetBytes = options.budgetBytes ?? RETAINED_FRAME_BUDGET_BYTES;
+		this.perDeviceFloor = options.perDeviceFloor ?? RETAINED_FRAME_PER_DEVICE_FLOOR;
 	}
 	/** Number of retained frames (tests / metrics). */
 	get size() {
@@ -1304,14 +1321,21 @@ var RetainedFrameStore = class RetainedFrameStore {
 			nodeId: this.nodeId,
 			slotCount: RetainedFrameStore.SLOT_SPREAD
 		};
-		this.entries.set(keyOf(handle), frame);
+		const key = keyOf(handle);
+		this.entries.set(key, {
+			frame,
+			deviceId
+		});
+		const deviceKeys = this.perDeviceKeys.get(deviceId);
+		if (deviceKeys) deviceKeys.push(key);
+		else this.perDeviceKeys.set(deviceId, [key]);
 		this.bytes += byteLength;
 		this.evictToBudget();
 		return handle;
 	}
 	/** The retained frame for `handle`, or `null` if never retained / already evicted. */
 	getFrame(handle) {
-		return this.entries.get(keyOf(handle)) ?? null;
+		return this.entries.get(keyOf(handle))?.frame ?? null;
 	}
 	/**
 	* Crop (and optionally downscale) the retained rgb frame for `handle` to the
@@ -1322,26 +1346,56 @@ var RetainedFrameStore = class RetainedFrameStore {
 	* decode worker's surface (`getNativeCrop`), not here.
 	*/
 	crop(handle, bbox, maxWidth) {
-		const frame = this.entries.get(keyOf(handle));
-		if (!frame || frame.format !== "rgb") return null;
-		return cropRgb(frame, bbox, maxWidth);
+		const entry = this.entries.get(keyOf(handle));
+		if (!entry || entry.frame.format !== "rgb") return null;
+		return cropRgb(entry.frame, bbox, maxWidth);
 	}
 	/** Drop every retained frame (node/addon shutdown). */
 	clear() {
 		this.entries.clear();
+		this.perDeviceKeys.clear();
 		this.bytes = 0;
 	}
-	/** Evict oldest frames until the retained bytes fit the budget (keep ≥1). */
+	/**
+	* Evict frames until the retained bytes fit the budget (keep ≥1).
+	*
+	* Pass 1 (fairness): walk globally oldest→newest and drop only frames whose
+	* device still holds MORE than {@link perDeviceFloor} frames — so a busy
+	* camera's excess is reclaimed before any camera's protected recent window.
+	* Pass 2 (OOM guard): if still over budget (every remaining frame is
+	* floor-protected yet the ceiling is exhausted), drop globally oldest-first
+	* regardless of the floor. The ceiling ALWAYS wins over fairness.
+	*/
 	evictToBudget() {
-		while (this.bytes > this.budgetBytes && this.entries.size > 1) {
-			const oldest = this.entries.keys().next().value;
-			if (oldest === void 0) break;
-			const evicted = this.entries.get(oldest);
-			this.entries.delete(oldest);
-			if (evicted) this.bytes -= evicted.data.byteLength;
+		if (this.bytes <= this.budgetBytes) return;
+		const oldestFirst = [...this.entries.keys()];
+		for (const key of oldestFirst) {
+			if (this.bytes <= this.budgetBytes || this.entries.size <= 1) break;
+			const entry = this.entries.get(key);
+			if (!entry) continue;
+			const deviceKeys = this.perDeviceKeys.get(entry.deviceId);
+			if (deviceKeys && deviceKeys.length > this.perDeviceFloor) this.dropKey(key);
+		}
+		if (this.bytes <= this.budgetBytes) return;
+		for (const key of oldestFirst) {
+			if (this.bytes <= this.budgetBytes || this.entries.size <= 1) break;
+			this.dropKey(key);
 		}
 		if (this.bytes < 0) this.bytes = 0;
 	}
+	/** Remove one frame by key, keeping the byte tally + per-device index exact. */
+	dropKey(key) {
+		const entry = this.entries.get(key);
+		if (!entry) return;
+		this.entries.delete(key);
+		this.bytes -= entry.frame.data.byteLength;
+		const deviceKeys = this.perDeviceKeys.get(entry.deviceId);
+		if (deviceKeys) {
+			const idx = deviceKeys.indexOf(key);
+			if (idx >= 0) deviceKeys.splice(idx, 1);
+			if (deviceKeys.length === 0) this.perDeviceKeys.delete(entry.deviceId);
+		}
+	}
 };
 /**
 * Nearest-neighbour crop + optional downscale of a packed RGB24 frame to a
@@ -1931,6 +1985,18 @@ function startSessionDecodePump(deps) {
 		iterator.return().catch(() => {});
 	};
 }
+//#endregion
+//#region src/session-decode/native-crop-registry.ts
+/**
+* Default max entries retained across all active decode sessions on a node. Read
+* ONCE from `CAMSTACK_NATIVE_CROP_REGISTRY_CAP`; a non-finite / non-positive
+* value falls back to 256 (was a fixed 64 — too small for a busy multi-camera
+* node, see class doc).
+*/
+var DEFAULT_NATIVE_CROP_REGISTRY_CAP = (() => {
+	const raw = Number(process.env["CAMSTACK_NATIVE_CROP_REGISTRY_CAP"]);
+	return Number.isFinite(raw) && raw > 0 ? Math.floor(raw) : 256;
+})();
 /** Invoke a requester's best-effort `release()`, swallowing any transport error. */
 function safeRelease(request) {
 	try {
@@ -1940,7 +2006,7 @@ function safeRelease(request) {
 var NativeCropRegistry = class {
 	capacity;
 	entries = /* @__PURE__ */ new Map();
-	constructor(capacity = 64) {
+	constructor(capacity = DEFAULT_NATIVE_CROP_REGISTRY_CAP) {
 		this.capacity = capacity;
 	}
 	/** Number of registered handles (tests / metrics). */
@@ -3106,7 +3172,7 @@ var PipelineRunnerAddon = class extends require_dist.BaseAddon {
 	*/
 	async getNativeCrop(input) {
 		const b = input.bbox;
-		if (!(b.x <= .001 && b.y <= .001 && b.w >= .999 && b.h >= .999)) {
+		if (!(b.x <= .001 && b.y <= .001 && b.w >= .999 && b.h >= .999 && input.maxWidth === void 0)) {
 			const requester = this.nativeCropRegistry.get(input.handle);
 			if (requester) {
 				const result = await requester(input.bbox, input.maxWidth);

package/dist/pipeline-runner/index.mjs

@@ -1,8 +1,8 @@
-import { B as errMsg, G as createEvent, V as BaseAddon, dt as EventCategory, et as _enum, it as lazy, j as pipelineRunnerCapability, k as nodePin, lt as string, nt as boolean, ot as number, st as object, tt as array, x as defineCustomActions, y as customAction } from "../dist-BzVZ2I4P.mjs";
+import { B as errMsg, G as createEvent, V as BaseAddon, dt as EventCategory, et as _enum, it as lazy, j as pipelineRunnerCapability, k as nodePin, lt as string, nt as boolean, ot as number, st as object, tt as array, x as defineCustomActions, y as customAction } from "../dist-BpWot5-w.mjs";
 import { n as profileForStreamId, t as isRemoteRestream } from "../remote-restream-BeHi78PZ.mjs";
 import { r as resolveHubHostname } from "../sheet-geometry-DcpuGTCm.mjs";
 import { t as isWorkerReply } from "../worker-protocol-CyVJTZEO.mjs";
-import { a as getStepDefinition } from "../step-definitions-B07M9qhj.mjs";
+import { a as getStepDefinition } from "../step-definitions-D6R9X0V7.mjs";
 import { fork } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import sharp from "sharp";
@@ -1242,23 +1242,39 @@ function startGuardedSessionDecode(deps) {
 /** {@link RETAINED_FRAME_BUDGET_MB} in bytes. */
 var RETAINED_FRAME_BUDGET_BYTES = (() => {
 	const raw = Number(process.env["CAMSTACK_SESSION_RETAIN_MB"]);
-	return Number.isFinite(raw) && raw > 0 ? Math.floor(raw) : 32;
+	return Number.isFinite(raw) && raw > 0 ? Math.floor(raw) : 96;
 })() * 1024 * 1024;
+/**
+* How many of each device's MOST RECENT frames are protected from a busy
+* neighbour's budget eviction. Sized to cover the late two-plane / cross-process
+* enrichment horizon (~150-500 ms): 6 frames ≈ 0.6 s @10 fps of guaranteed
+* survival for every active camera. Read ONCE from
+* `CAMSTACK_SESSION_RETAIN_FLOOR`; `0` disables the floor (pure global FIFO — the
+* pre-2026-07-19 behaviour). The hard byte ceiling always overrides the floor,
+* so this can never push retention past {@link RETAINED_FRAME_BUDGET_BYTES}.
+*/
+var RETAINED_FRAME_PER_DEVICE_FLOOR = (() => {
+	const raw = Number(process.env["CAMSTACK_SESSION_RETAIN_FLOOR"]);
+	return Number.isFinite(raw) && raw >= 0 ? Math.floor(raw) : 6;
+})();
 /** Opaque RAM-key prefix stamped into a retained frame's `FrameHandle.shmId`. */
 var RETAINED_FRAME_KEY_PREFIX = "ram:";
 /** A retention frame is uniquely identified by its key + slot + committed seq. */
 function keyOf(handle) {
 	return `${handle.shmId}#${handle.slot}#${handle.seq}`;
 }
-/**
-* Node-level RAM store of retained rgb detection frames, keyed by
-* `FrameHandle` identity. Latest-wins with a byte budget.
-*/
 var RetainedFrameStore = class RetainedFrameStore {
 	nodeId;
 	budgetBytes;
-	/** Insertion-ordered (Map) → oldest is `keys().next()`. */
+	perDeviceFloor;
+	/** Insertion-ordered (Map) → globally oldest is `keys().next()`. */
 	entries = /* @__PURE__ */ new Map();
+	/**
+	* Per-device insertion-ordered keys (oldest→newest). Mirrors {@link entries}
+	* so the floor can be enforced in O(1) per eviction candidate without scanning
+	* the global map for a device's frame count.
+	*/
+	perDeviceKeys = /* @__PURE__ */ new Map();
 	bytes = 0;
 	seq = 0;
 	/** Ring width used only to spread the `slot` field; the map key is authoritative. */
@@ -1266,6 +1282,7 @@ var RetainedFrameStore = class RetainedFrameStore {
 	constructor(options) {
 		this.nodeId = options.nodeId;
 		this.budgetBytes = options.budgetBytes ?? RETAINED_FRAME_BUDGET_BYTES;
+		this.perDeviceFloor = options.perDeviceFloor ?? RETAINED_FRAME_PER_DEVICE_FLOOR;
 	}
 	/** Number of retained frames (tests / metrics). */
 	get size() {
@@ -1298,14 +1315,21 @@ var RetainedFrameStore = class RetainedFrameStore {
 			nodeId: this.nodeId,
 			slotCount: RetainedFrameStore.SLOT_SPREAD
 		};
-		this.entries.set(keyOf(handle), frame);
+		const key = keyOf(handle);
+		this.entries.set(key, {
+			frame,
+			deviceId
+		});
+		const deviceKeys = this.perDeviceKeys.get(deviceId);
+		if (deviceKeys) deviceKeys.push(key);
+		else this.perDeviceKeys.set(deviceId, [key]);
 		this.bytes += byteLength;
 		this.evictToBudget();
 		return handle;
 	}
 	/** The retained frame for `handle`, or `null` if never retained / already evicted. */
 	getFrame(handle) {
-		return this.entries.get(keyOf(handle)) ?? null;
+		return this.entries.get(keyOf(handle))?.frame ?? null;
 	}
 	/**
 	* Crop (and optionally downscale) the retained rgb frame for `handle` to the
@@ -1316,26 +1340,56 @@ var RetainedFrameStore = class RetainedFrameStore {
 	* decode worker's surface (`getNativeCrop`), not here.
 	*/
 	crop(handle, bbox, maxWidth) {
-		const frame = this.entries.get(keyOf(handle));
-		if (!frame || frame.format !== "rgb") return null;
-		return cropRgb(frame, bbox, maxWidth);
+		const entry = this.entries.get(keyOf(handle));
+		if (!entry || entry.frame.format !== "rgb") return null;
+		return cropRgb(entry.frame, bbox, maxWidth);
 	}
 	/** Drop every retained frame (node/addon shutdown). */
 	clear() {
 		this.entries.clear();
+		this.perDeviceKeys.clear();
 		this.bytes = 0;
 	}
-	/** Evict oldest frames until the retained bytes fit the budget (keep ≥1). */
+	/**
+	* Evict frames until the retained bytes fit the budget (keep ≥1).
+	*
+	* Pass 1 (fairness): walk globally oldest→newest and drop only frames whose
+	* device still holds MORE than {@link perDeviceFloor} frames — so a busy
+	* camera's excess is reclaimed before any camera's protected recent window.
+	* Pass 2 (OOM guard): if still over budget (every remaining frame is
+	* floor-protected yet the ceiling is exhausted), drop globally oldest-first
+	* regardless of the floor. The ceiling ALWAYS wins over fairness.
+	*/
 	evictToBudget() {
-		while (this.bytes > this.budgetBytes && this.entries.size > 1) {
-			const oldest = this.entries.keys().next().value;
-			if (oldest === void 0) break;
-			const evicted = this.entries.get(oldest);
-			this.entries.delete(oldest);
-			if (evicted) this.bytes -= evicted.data.byteLength;
+		if (this.bytes <= this.budgetBytes) return;
+		const oldestFirst = [...this.entries.keys()];
+		for (const key of oldestFirst) {
+			if (this.bytes <= this.budgetBytes || this.entries.size <= 1) break;
+			const entry = this.entries.get(key);
+			if (!entry) continue;
+			const deviceKeys = this.perDeviceKeys.get(entry.deviceId);
+			if (deviceKeys && deviceKeys.length > this.perDeviceFloor) this.dropKey(key);
+		}
+		if (this.bytes <= this.budgetBytes) return;
+		for (const key of oldestFirst) {
+			if (this.bytes <= this.budgetBytes || this.entries.size <= 1) break;
+			this.dropKey(key);
 		}
 		if (this.bytes < 0) this.bytes = 0;
 	}
+	/** Remove one frame by key, keeping the byte tally + per-device index exact. */
+	dropKey(key) {
+		const entry = this.entries.get(key);
+		if (!entry) return;
+		this.entries.delete(key);
+		this.bytes -= entry.frame.data.byteLength;
+		const deviceKeys = this.perDeviceKeys.get(entry.deviceId);
+		if (deviceKeys) {
+			const idx = deviceKeys.indexOf(key);
+			if (idx >= 0) deviceKeys.splice(idx, 1);
+			if (deviceKeys.length === 0) this.perDeviceKeys.delete(entry.deviceId);
+		}
+	}
 };
 /**
 * Nearest-neighbour crop + optional downscale of a packed RGB24 frame to a
@@ -1925,6 +1979,18 @@ function startSessionDecodePump(deps) {
 		iterator.return().catch(() => {});
 	};
 }
+//#endregion
+//#region src/session-decode/native-crop-registry.ts
+/**
+* Default max entries retained across all active decode sessions on a node. Read
+* ONCE from `CAMSTACK_NATIVE_CROP_REGISTRY_CAP`; a non-finite / non-positive
+* value falls back to 256 (was a fixed 64 — too small for a busy multi-camera
+* node, see class doc).
+*/
+var DEFAULT_NATIVE_CROP_REGISTRY_CAP = (() => {
+	const raw = Number(process.env["CAMSTACK_NATIVE_CROP_REGISTRY_CAP"]);
+	return Number.isFinite(raw) && raw > 0 ? Math.floor(raw) : 256;
+})();
 /** Invoke a requester's best-effort `release()`, swallowing any transport error. */
 function safeRelease(request) {
 	try {
@@ -1934,7 +2000,7 @@ function safeRelease(request) {
 var NativeCropRegistry = class {
 	capacity;
 	entries = /* @__PURE__ */ new Map();
-	constructor(capacity = 64) {
+	constructor(capacity = DEFAULT_NATIVE_CROP_REGISTRY_CAP) {
 		this.capacity = capacity;
 	}
 	/** Number of registered handles (tests / metrics). */
@@ -3100,7 +3166,7 @@ var PipelineRunnerAddon = class extends BaseAddon {
 	*/
 	async getNativeCrop(input) {
 		const b = input.bbox;
-		if (!(b.x <= .001 && b.y <= .001 && b.w >= .999 && b.h >= .999)) {
+		if (!(b.x <= .001 && b.y <= .001 && b.w >= .999 && b.h >= .999 && input.maxWidth === void 0)) {
 			const requester = this.nativeCropRegistry.get(input.handle);
 			if (requester) {
 				const result = await requester(input.bbox, input.maxWidth);

package/dist/recorder/index.js

@@ -1,5 +1,5 @@
 const require_chunk = require("../chunk-D6vf50IK.js");
-const require_dist = require("../dist-B2jTt7Lq.js");
+const require_dist = require("../dist-D5o9fGxq.js");
 const require_sheet_geometry = require("../sheet-geometry-BR-ip0CP.js");
 const require_model_download_service_Cp9f4dk6 = require("../model-download-service-Cp9f4dk6-Dv-oFwjN.js");
 let node_child_process = require("node:child_process");
@@ -2593,6 +2593,122 @@ function makeBrokerCall(handle) {
 	return (fn) => handle.call(fn, BROKER_READY_TIMEOUT_MS);
 }
 //#endregion
+//#region src/recorder/addon/retention-sweep.ts
+/**
+* Periodic footage-retention sweep (recording-spec §6).
+*
+* The disk-pressure eviction path only fires when a volume is TOO FULL
+* (`shouldSaveDiskSpace` + `minFreePercent`); it never enforces a camera's
+* age/size policy. This sweeper closes that gap: on an hourly cadence it prunes
+* footage for every device whose operator set an actionable `retention` policy,
+* delegating the actual selection + delete to the `recording` cap's
+* `pruneFootage` (which owns the retention FLOOR via `selectEvictions` — this
+* sweeper only decides WHICH devices to prune and WHEN).
+*
+* Owns its own timer + single-flight guard so a slow sweep is never overlapped
+* by the next tick — the same subsystem-owns-its-timer shape as
+* `ThumbnailService`. Pure over injected deps (config read + prune + logger +
+* clock via `setInterval`), so it is unit-testable with fake timers and a mock
+* `prune`. Every pass is best-effort: a per-device prune failure is logged and
+* never aborts the rest, and the sweep never throws.
+*/
+/**
+* True when the operator set an ACTIONABLE retention policy on a device — at
+* least one of `maxAgeDays` / `maxSizeGb` is present and positive. Mirrors the
+* `> 0` guards `selectEvictions` itself applies, so a `0`/absent limit (which
+* inherits the node default = "keep forever") is treated as NO policy and the
+* device is skipped. NEVER prune a device without an explicit policy — that
+* would delete footage the operator never asked to age out.
+*/
+function hasRetentionPolicy(config) {
+	const retention = config.retention;
+	if (!retention) return false;
+	const byAge = retention.maxAgeDays != null && retention.maxAgeDays > 0;
+	const bySize = retention.maxSizeGb != null && retention.maxSizeGb > 0;
+	return byAge || bySize;
+}
+var RetentionSweeper = class {
+	deps;
+	timer = null;
+	/** Single-flight guard: true while a sweep is in flight. */
+	sweeping = false;
+	constructor(deps) {
+		this.deps = deps;
+	}
+	/**
+	* Arm the sweep: run immediately, then on the interval. Idempotent — a second
+	* `start()` while already armed is a no-op. The timer is `unref`'d so it never
+	* keeps the process alive.
+	*/
+	start() {
+		if (this.timer !== null) return;
+		const tick = () => {
+			this.sweep();
+		};
+		tick();
+		this.timer = setInterval(tick, this.deps.intervalMs);
+		this.timer.unref?.();
+	}
+	/** Stop the sweep timer. Idempotent. An in-flight sweep still completes. */
+	stop() {
+		if (this.timer !== null) {
+			clearInterval(this.timer);
+			this.timer = null;
+		}
+	}
+	/**
+	* One retention pass. Single-flighted: a call that fires while a previous
+	* sweep is still running is a no-op. Never throws — a config-read failure
+	* aborts THIS pass (logged); a per-device prune failure is logged and the
+	* sweep continues with the remaining devices.
+	*/
+	async sweep() {
+		if (this.sweeping) {
+			this.deps.logger.debug("recorder: retention sweep already running — skipping this tick");
+			return;
+		}
+		this.sweeping = true;
+		try {
+			let configs;
+			try {
+				configs = await this.deps.readConfigs();
+			} catch (err) {
+				this.deps.logger.warn("recorder: retention sweep could not read device configs", { meta: { error: require_dist.errMsg(err) } });
+				return;
+			}
+			let devicesSwept = 0;
+			let devicesSkipped = 0;
+			let bucketsPruned = 0;
+			let bytesReclaimed = 0;
+			for (const [deviceId, config] of configs) {
+				if (!hasRetentionPolicy(config)) {
+					devicesSkipped += 1;
+					continue;
+				}
+				try {
+					const result = await this.deps.prune(deviceId);
+					devicesSwept += 1;
+					bucketsPruned += result.deletedBuckets;
+					bytesReclaimed += result.reclaimedBytes;
+				} catch (err) {
+					this.deps.logger.warn("recorder: retention prune failed for device", {
+						tags: { deviceId },
+						meta: { error: require_dist.errMsg(err) }
+					});
+				}
+			}
+			this.deps.logger.info("recorder: retention sweep complete", { meta: {
+				devicesSwept,
+				devicesSkipped,
+				bucketsPruned,
+				bytesReclaimed
+			} });
+		} finally {
+			this.sweeping = false;
+		}
+	}
+};
+//#endregion
 //#region src/recorder/addon/recording-hub-host.ts
 /**
 * Resolve the host a REMOTE recording node should use to dial the hub-only
@@ -3599,6 +3715,12 @@ var PLAYBACK_PREFIX = "playback";
 var EXPORTS_PREFIX = "exports";
 /** How often the export janitor sweeps expired exports. */
 var EXPORT_SWEEP_INTERVAL_MS = 5 * 6e4;
+/** How often the retention sweep prunes footage past each camera's per-device
+*  age/size policy. Retention is NOT time-critical (footage ages out over days,
+*  and the disk-pressure eviction path already bounds the worst case), so an
+*  hourly cadence keeps the storage.list/evict cost negligible while honouring
+*  the recording-spec §6 periodic retention. */
+var RETENTION_SWEEP_INTERVAL_MS = 60 * 6e4;
 /** Grace after a completed download before a `deleteAfterDownload` file is removed. */
 var EXPORT_DELETE_GRACE_MS = 6e4;
 /** Only `.mp4` export ids matching this shape are servable (traversal guard). */
@@ -3634,6 +3756,12 @@ var RecorderV2Addon = class extends require_dist.BaseAddon {
 	exportEngine = null;
 	/** Periodic export-expiry sweep timer. Cleared on shutdown. */
 	exportSweepTimer = null;
+	/** The `recording` cap provider — retained so the periodic retention sweep can
+	*  call its `pruneFootage`. Null until built in `onInitialize`. */
+	recordingProvider = null;
+	/** Periodic footage-retention sweep (owns its timer + single-flight guard).
+	*  Constructed + started in `onHubReachable`, stopped on shutdown. */
+	retentionSweeper = null;
 	constructor() {
 		super({ ...DEFAULT_CONFIG });
 	}
@@ -3742,6 +3870,7 @@ var RecorderV2Addon = class extends require_dist.BaseAddon {
 			}
 		};
 		const recordingProvider = buildRecordingProvider(recordingDeps);
+		this.recordingProvider = recordingProvider;
 		const evictableProvider = new StorageEvictableProvider({
 			index: this.index,
 			store: this.segmentStore
@@ -3839,7 +3968,10 @@ var RecorderV2Addon = class extends require_dist.BaseAddon {
 			clearInterval(this.exportSweepTimer);
 			this.exportSweepTimer = null;
 		}
+		this.retentionSweeper?.stop();
+		this.retentionSweeper = null;
 		this.exportEngine = null;
+		this.recordingProvider = null;
 	}
 	/**
 	* Boot hydrate: once the hub is reachable (`ctx.api.*` safe), resolve the
@@ -3898,6 +4030,14 @@ var RecorderV2Addon = class extends require_dist.BaseAddon {
 			this.ctx.logger.warn("recorder: thumbnail service start failed", { meta: { error: require_dist.errMsg(err) } });
 		}
 		await this.bootstrapExports();
+		const provider = this.recordingProvider;
+		if (provider && this.retentionSweeper === null) this.retentionSweeper = new RetentionSweeper({
+			prune: (deviceId) => provider.pruneFootage({ deviceId }),
+			readConfigs: () => readDeviceConfigs(this.configStore()),
+			logger: this.ctx.logger,
+			intervalMs: RETENTION_SWEEP_INTERVAL_MS
+		});
+		this.retentionSweeper?.start();
 	}
 	/**
 	* Resume interrupted exports and arm the expiry sweep. A row left `rendering`