@camstack/addon-pipeline 1.1.65 → 1.1.66

package/dist/audio-analyzer/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-D6vf50IK.js");
-const require_dist = require("../dist-WW3gH8hF.js");
+const require_dist = require("../dist-D5o9fGxq.js");
 const require_node_topology_platform = require("../node-topology-platform-CFZ7F4xW.js");
 const require_model_download_service_Cp9f4dk6 = require("../model-download-service-Cp9f4dk6-Dv-oFwjN.js");
 let node_fs = require("node:fs");

package/dist/audio-analyzer/index.mjs

@@ -1,5 +1,5 @@
 import { t as __require } from "../chunk-BdkLduGY.mjs";
-import { B as errMsg, K as hydrateSchema, T as mapAudioLabelToMacro, V as BaseAddon, _ as audioAnalyzerCapability, g as audioAnalysisCapability, n as AUDIO_BACKEND_CHOICES, o as DEFAULT_AUDIO_ANALYZER_CONFIG, u as HF_BASE_URL } from "../dist-D6tHM9GA.mjs";
+import { B as errMsg, K as hydrateSchema, T as mapAudioLabelToMacro, V as BaseAddon, _ as audioAnalyzerCapability, g as audioAnalysisCapability, n as AUDIO_BACKEND_CHOICES, o as DEFAULT_AUDIO_ANALYZER_CONFIG, u as HF_BASE_URL } from "../dist-BpWot5-w.mjs";
 import { t as pickNodePlatformArch } from "../node-topology-platform-BkR_k6WT.mjs";
 import { i as downloadFile } from "../model-download-service-Cp9f4dk6-CwUb5v3Y.mjs";
 import * as fs from "node:fs";

package/dist/detection-pipeline/index.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-D6vf50IK.js");
-const require_dist = require("../dist-WW3gH8hF.js");
-const require_step_definitions = require("../step-definitions-CXZpwwT0.js");
+const require_dist = require("../dist-D5o9fGxq.js");
+const require_step_definitions = require("../step-definitions-81eYyJbW.js");
 const require_node_topology_platform = require("../node-topology-platform-CFZ7F4xW.js");
 const require_model_download_service_Cp9f4dk6 = require("../model-download-service-Cp9f4dk6-Dv-oFwjN.js");
 let node_child_process = require("node:child_process");
@@ -952,6 +952,8 @@ function serializeModelConfig(config) {
 		confidence: config.confidence
 	};
 	if (config.nmsIouThreshold !== void 0) result["nmsIouThreshold"] = config.nmsIouThreshold;
+	if (config.inputNormalization !== void 0) result["inputNormalization"] = config.inputNormalization;
+	if (config.outputProbabilities !== void 0) result["outputProbabilities"] = config.outputProbabilities;
 	if (config.inputWidth !== void 0) result["inputWidth"] = config.inputWidth;
 	if (config.inputHeight !== void 0) result["inputHeight"] = config.inputHeight;
 	if (config.inputChannels !== void 0) result["inputChannels"] = config.inputChannels;
@@ -1284,6 +1286,30 @@ var OBJECT_DETECTION_POOL_CONFIDENCE_FLOOR = .05;
 function resolvePoolConfidenceFloor(stepId, defaultConfidence) {
 	return stepId === OBJECT_DETECTION_STEP_ID ? OBJECT_DETECTION_POOL_CONFIDENCE_FLOOR : defaultConfidence;
 }
+/**
+* Load a model's runtime label list from its `-labels.json` extraFile, if any.
+*
+* Accepts BOTH on-disk shapes:
+*   - a flat `string[]` (legacy label files), and
+*   - a `{ "labels": string[], ... }` metadata object (the newer format the
+*     animal / bird / vehicle classifiers ship, which also carries preprocess /
+*     license metadata alongside the label array).
+*
+* Returns `undefined` when the model declares no `-labels.json`, the file is
+* absent, or its contents are not a recognised label shape — the caller then
+* falls back to the step's `def.labels`.
+*/
+var LabelsFileSchema = require_dist.union([require_dist.array(require_dist.string()).readonly(), require_dist.object({ labels: require_dist.array(require_dist.string()).readonly() })]);
+function readModelLabels(modelsDir, modelEntry) {
+	const labelsFile = modelEntry.extraFiles?.find((f) => f.filename.endsWith("-labels.json"));
+	if (!labelsFile) return void 0;
+	const labelsPath = node_path.join(modelsDir, labelsFile.filename);
+	if (!node_fs.existsSync(labelsPath)) return void 0;
+	const parsed = LabelsFileSchema.safeParse(JSON.parse(node_fs.readFileSync(labelsPath, "utf8")));
+	if (!parsed.success) return void 0;
+	const data = parsed.data;
+	return "labels" in data ? data.labels : data;
+}
 var EngineFactory = class {
 	pool = null;
 	poolManager = null;
@@ -1451,14 +1477,7 @@ var EngineFactory = class {
 		const inputHeight = modelEntry.inputSize.height;
 		const inputSize = Math.max(inputWidth, inputHeight);
 		const inputChannels = modelEntry.inputChannels ?? 3;
-		let labels = def.labels;
-		if (!labels && modelEntry.extraFiles) {
-			const labelsFile = modelEntry.extraFiles.find((f) => f.filename.endsWith("-labels.json"));
-			if (labelsFile) {
-				const labelsPath = node_path.join(this.opts.modelsDir, labelsFile.filename);
-				if (node_fs.existsSync(labelsPath)) labels = JSON.parse(node_fs.readFileSync(labelsPath, "utf8"));
-			}
-		}
+		const labels = readModelLabels(this.opts.modelsDir, modelEntry) ?? def.labels;
 		return {
 			path: modelPath,
 			inputSize,
@@ -1466,6 +1485,8 @@ var EngineFactory = class {
 			inputHeight,
 			inputChannels,
 			preprocessMode: modelEntry.preprocessMode ?? "letterbox",
+			inputNormalization: modelEntry.inputNormalization,
+			outputProbabilities: modelEntry.outputProbabilities,
 			postprocessor: modelEntry.postprocessor ?? def.postprocessor,
 			confidence: resolvePoolConfidenceFloor(stepId, def.defaultConfidence),
 			nmsIouThreshold: this.opts.nmsIouThreshold ?? .45,
@@ -2584,7 +2605,8 @@ function applyChildOutput(parent, childStep, output, stepLatencyMs, ctx) {
 		case "classifications": {
 			const rawEnabled = childStep.settings?.["enabledClasses"];
 			const enabledSet = Array.isArray(rawEnabled) && rawEnabled.length > 0 ? new Set(rawEnabled.filter((v) => typeof v === "string")) : null;
-			const passesClass = (c) => enabledSet === null || enabledSet.has(c.class);
+			const rejectSet = childStep.definition.rejectClasses && childStep.definition.rejectClasses.length > 0 ? new Set(childStep.definition.rejectClasses.map((c) => c.toLowerCase())) : /* @__PURE__ */ new Set();
+			const passesClass = (c) => (enabledSet === null || enabledSet.has(c.class)) && !rejectSet.has(c.class.toLowerCase());
 			const minConfidence = typeof childStep.settings?.["minConfidence"] === "number" ? childStep.settings["minConfidence"] : 0;
 			const winner = output.classifications[0];
 			if (winner && passesClass(winner) && winner.score >= minConfidence) parent.ownLabels.push({

package/dist/detection-pipeline/index.mjs

@@ -1,6 +1,6 @@
 import { t as __require } from "../chunk-BdkLduGY.mjs";
-import { $ as sleep, A as pipelineExecutorCapability, B as errMsg, C as evaluateZoneRules, F as runtimeDevices$1, G as createEvent, K as hydrateSchema, R as supportedRuntimes$1, S as detectionPipelineCapability, V as BaseAddon, X as parseJsonUnknown, b as defaultDeviceFor$1, dt as EventCategory, k as nodePin, m as YAMNET_TO_MACRO, t as APPLE_SA_TO_MACRO } from "../dist-D6tHM9GA.mjs";
-import { a as getStepDefinition, i as getStep, n as ALL_STEPS, o as resolveModelForFormat, r as getDefaultModelForFormat, t as ALL_PIPELINE_STEPS } from "../step-definitions-Dbsm64_I.mjs";
+import { $ as sleep, A as pipelineExecutorCapability, B as errMsg, C as evaluateZoneRules, F as runtimeDevices$1, G as createEvent, K as hydrateSchema, R as supportedRuntimes$1, S as detectionPipelineCapability, V as BaseAddon, X as parseJsonUnknown, b as defaultDeviceFor$1, dt as EventCategory, k as nodePin, lt as string, m as YAMNET_TO_MACRO, st as object, t as APPLE_SA_TO_MACRO, tt as array, ut as union } from "../dist-BpWot5-w.mjs";
+import { a as getStepDefinition, i as getStep, n as ALL_STEPS, o as resolveModelForFormat, r as getDefaultModelForFormat, t as ALL_PIPELINE_STEPS } from "../step-definitions-D6R9X0V7.mjs";
 import { t as pickNodePlatformArch } from "../node-topology-platform-BkR_k6WT.mjs";
 import { a as ensureModel, o as isModelDownloaded, r as deleteModelFromDisk } from "../model-download-service-Cp9f4dk6-CwUb5v3Y.mjs";
 import { spawn } from "node:child_process";
@@ -944,6 +944,8 @@ function serializeModelConfig(config) {
 		confidence: config.confidence
 	};
 	if (config.nmsIouThreshold !== void 0) result["nmsIouThreshold"] = config.nmsIouThreshold;
+	if (config.inputNormalization !== void 0) result["inputNormalization"] = config.inputNormalization;
+	if (config.outputProbabilities !== void 0) result["outputProbabilities"] = config.outputProbabilities;
 	if (config.inputWidth !== void 0) result["inputWidth"] = config.inputWidth;
 	if (config.inputHeight !== void 0) result["inputHeight"] = config.inputHeight;
 	if (config.inputChannels !== void 0) result["inputChannels"] = config.inputChannels;
@@ -1276,6 +1278,30 @@ var OBJECT_DETECTION_POOL_CONFIDENCE_FLOOR = .05;
 function resolvePoolConfidenceFloor(stepId, defaultConfidence) {
 	return stepId === OBJECT_DETECTION_STEP_ID ? OBJECT_DETECTION_POOL_CONFIDENCE_FLOOR : defaultConfidence;
 }
+/**
+* Load a model's runtime label list from its `-labels.json` extraFile, if any.
+*
+* Accepts BOTH on-disk shapes:
+*   - a flat `string[]` (legacy label files), and
+*   - a `{ "labels": string[], ... }` metadata object (the newer format the
+*     animal / bird / vehicle classifiers ship, which also carries preprocess /
+*     license metadata alongside the label array).
+*
+* Returns `undefined` when the model declares no `-labels.json`, the file is
+* absent, or its contents are not a recognised label shape — the caller then
+* falls back to the step's `def.labels`.
+*/
+var LabelsFileSchema = union([array(string()).readonly(), object({ labels: array(string()).readonly() })]);
+function readModelLabels(modelsDir, modelEntry) {
+	const labelsFile = modelEntry.extraFiles?.find((f) => f.filename.endsWith("-labels.json"));
+	if (!labelsFile) return void 0;
+	const labelsPath = path$1.join(modelsDir, labelsFile.filename);
+	if (!fs.existsSync(labelsPath)) return void 0;
+	const parsed = LabelsFileSchema.safeParse(JSON.parse(fs.readFileSync(labelsPath, "utf8")));
+	if (!parsed.success) return void 0;
+	const data = parsed.data;
+	return "labels" in data ? data.labels : data;
+}
 var EngineFactory = class {
 	pool = null;
 	poolManager = null;
@@ -1443,14 +1469,7 @@ var EngineFactory = class {
 		const inputHeight = modelEntry.inputSize.height;
 		const inputSize = Math.max(inputWidth, inputHeight);
 		const inputChannels = modelEntry.inputChannels ?? 3;
-		let labels = def.labels;
-		if (!labels && modelEntry.extraFiles) {
-			const labelsFile = modelEntry.extraFiles.find((f) => f.filename.endsWith("-labels.json"));
-			if (labelsFile) {
-				const labelsPath = path$1.join(this.opts.modelsDir, labelsFile.filename);
-				if (fs.existsSync(labelsPath)) labels = JSON.parse(fs.readFileSync(labelsPath, "utf8"));
-			}
-		}
+		const labels = readModelLabels(this.opts.modelsDir, modelEntry) ?? def.labels;
 		return {
 			path: modelPath,
 			inputSize,
@@ -1458,6 +1477,8 @@ var EngineFactory = class {
 			inputHeight,
 			inputChannels,
 			preprocessMode: modelEntry.preprocessMode ?? "letterbox",
+			inputNormalization: modelEntry.inputNormalization,
+			outputProbabilities: modelEntry.outputProbabilities,
 			postprocessor: modelEntry.postprocessor ?? def.postprocessor,
 			confidence: resolvePoolConfidenceFloor(stepId, def.defaultConfidence),
 			nmsIouThreshold: this.opts.nmsIouThreshold ?? .45,
@@ -2576,7 +2597,8 @@ function applyChildOutput(parent, childStep, output, stepLatencyMs, ctx) {
 		case "classifications": {
 			const rawEnabled = childStep.settings?.["enabledClasses"];
 			const enabledSet = Array.isArray(rawEnabled) && rawEnabled.length > 0 ? new Set(rawEnabled.filter((v) => typeof v === "string")) : null;
-			const passesClass = (c) => enabledSet === null || enabledSet.has(c.class);
+			const rejectSet = childStep.definition.rejectClasses && childStep.definition.rejectClasses.length > 0 ? new Set(childStep.definition.rejectClasses.map((c) => c.toLowerCase())) : /* @__PURE__ */ new Set();
+			const passesClass = (c) => (enabledSet === null || enabledSet.has(c.class)) && !rejectSet.has(c.class.toLowerCase());
 			const minConfidence = typeof childStep.settings?.["minConfidence"] === "number" ? childStep.settings["minConfidence"] : 0;
 			const winner = output.classifications[0];
 			if (winner && passesClass(winner) && winner.score >= minConfidence) parent.ownLabels.push({

package/dist/{dist-D6tHM9GA.mjs → dist-BpWot5-w.mjs}

@@ -7207,6 +7207,17 @@ var ModelCatalogEntrySchema = object({
 		"imagenet",
 		"none"
 	]).optional(),
+	/**
+	* The model already applies softmax IN-GRAPH — its raw output is a
+	* probability distribution, not logits. When set, the `softmax`
+	* postprocessor must NOT re-apply softmax: re-softmaxing an already-normalised
+	* probability vector collapses it toward uniform (top-1 score craters far
+	* below its true value, making every confidence gate meaningless). Absent ⇒
+	* the output is raw logits and the postprocessor applies softmax (the normal
+	* case). Set on the Google AIY Birds `bird-classifier` (softmax baked into the
+	* TF graph). Threaded to the Python pool via `PoolModelConfig.outputProbabilities`.
+	*/
+	outputProbabilities: boolean().optional(),
 	preprocessMode: _enum(["letterbox", "resize"]).optional(),
 	/**
 	* Per-MODEL postprocessor override. Absent ⇒ the step's own
@@ -14087,6 +14098,8 @@ method(_void(), _void(), { kind: "mutation" }), method(_void(), _void(), { kind:
 	kind: "mutation",
 	auth: "admin"
 });
+DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Camera, DeviceType.Hub, DeviceType.Switch, DeviceType.Siren, DeviceType.Light, DeviceType.Fan, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder;
+new Set(Object.values(DeviceType));
 /**
 * Evaluate `rules` against `items`. Returns the items partitioned
 * into `passed` (kept by the gate) and `excluded` (dropped). When

package/dist/{dist-WW3gH8hF.js → dist-D5o9fGxq.js}

@@ -7207,6 +7207,17 @@ var ModelCatalogEntrySchema = object({
 		"imagenet",
 		"none"
 	]).optional(),
+	/**
+	* The model already applies softmax IN-GRAPH — its raw output is a
+	* probability distribution, not logits. When set, the `softmax`
+	* postprocessor must NOT re-apply softmax: re-softmaxing an already-normalised
+	* probability vector collapses it toward uniform (top-1 score craters far
+	* below its true value, making every confidence gate meaningless). Absent ⇒
+	* the output is raw logits and the postprocessor applies softmax (the normal
+	* case). Set on the Google AIY Birds `bird-classifier` (softmax baked into the
+	* TF graph). Threaded to the Python pool via `PoolModelConfig.outputProbabilities`.
+	*/
+	outputProbabilities: boolean().optional(),
 	preprocessMode: _enum(["letterbox", "resize"]).optional(),
 	/**
 	* Per-MODEL postprocessor override. Absent ⇒ the step's own
@@ -14087,6 +14098,8 @@ method(_void(), _void(), { kind: "mutation" }), method(_void(), _void(), { kind:
 	kind: "mutation",
 	auth: "admin"
 });
+DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Camera, DeviceType.Hub, DeviceType.Switch, DeviceType.Siren, DeviceType.Light, DeviceType.Fan, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder;
+new Set(Object.values(DeviceType));
 /**
 * Evaluate `rules` against `items`. Returns the items partitioned
 * into `passed` (kept by the gate) and `excluded` (dropped). When

package/dist/motion-wasm/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-WW3gH8hF.js");
+const require_dist = require("../dist-D5o9fGxq.js");
 let node_fs = require("node:fs");
 let node_path = require("node:path");
 //#region src/motion-wasm/wasm-motion-detector.ts

package/dist/motion-wasm/index.mjs

@@ -1,4 +1,4 @@
-import { C as evaluateZoneRules, K as hydrateSchema, O as motionDetectionCapability, V as BaseAddon, W as DeviceType } from "../dist-D6tHM9GA.mjs";
+import { C as evaluateZoneRules, K as hydrateSchema, O as motionDetectionCapability, V as BaseAddon, W as DeviceType } from "../dist-BpWot5-w.mjs";
 import { readFileSync } from "node:fs";
 import { join } from "node:path";
 //#region src/motion-wasm/wasm-motion-detector.ts

package/dist/pipeline-runner/index.js

@@ -3,11 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-D6vf50IK.js");
-const require_dist = require("../dist-WW3gH8hF.js");
+const require_dist = require("../dist-D5o9fGxq.js");
 const require_remote_restream = require("../remote-restream-CO36Sr30.js");
 const require_sheet_geometry = require("../sheet-geometry-BR-ip0CP.js");
 const require_worker_protocol = require("../worker-protocol-PP4jKHHJ.js");
-const require_step_definitions = require("../step-definitions-CXZpwwT0.js");
+const require_step_definitions = require("../step-definitions-81eYyJbW.js");
 let node_child_process = require("node:child_process");
 let node_url = require("node:url");
 let sharp = require("sharp");
@@ -1248,23 +1248,39 @@ function startGuardedSessionDecode(deps) {
 /** {@link RETAINED_FRAME_BUDGET_MB} in bytes. */
 var RETAINED_FRAME_BUDGET_BYTES = (() => {
 	const raw = Number(process.env["CAMSTACK_SESSION_RETAIN_MB"]);
-	return Number.isFinite(raw) && raw > 0 ? Math.floor(raw) : 32;
+	return Number.isFinite(raw) && raw > 0 ? Math.floor(raw) : 96;
 })() * 1024 * 1024;
+/**
+* How many of each device's MOST RECENT frames are protected from a busy
+* neighbour's budget eviction. Sized to cover the late two-plane / cross-process
+* enrichment horizon (~150-500 ms): 6 frames ≈ 0.6 s @10 fps of guaranteed
+* survival for every active camera. Read ONCE from
+* `CAMSTACK_SESSION_RETAIN_FLOOR`; `0` disables the floor (pure global FIFO — the
+* pre-2026-07-19 behaviour). The hard byte ceiling always overrides the floor,
+* so this can never push retention past {@link RETAINED_FRAME_BUDGET_BYTES}.
+*/
+var RETAINED_FRAME_PER_DEVICE_FLOOR = (() => {
+	const raw = Number(process.env["CAMSTACK_SESSION_RETAIN_FLOOR"]);
+	return Number.isFinite(raw) && raw >= 0 ? Math.floor(raw) : 6;
+})();
 /** Opaque RAM-key prefix stamped into a retained frame's `FrameHandle.shmId`. */
 var RETAINED_FRAME_KEY_PREFIX = "ram:";
 /** A retention frame is uniquely identified by its key + slot + committed seq. */
 function keyOf(handle) {
 	return `${handle.shmId}#${handle.slot}#${handle.seq}`;
 }
-/**
-* Node-level RAM store of retained rgb detection frames, keyed by
-* `FrameHandle` identity. Latest-wins with a byte budget.
-*/
 var RetainedFrameStore = class RetainedFrameStore {
 	nodeId;
 	budgetBytes;
-	/** Insertion-ordered (Map) → oldest is `keys().next()`. */
+	perDeviceFloor;
+	/** Insertion-ordered (Map) → globally oldest is `keys().next()`. */
 	entries = /* @__PURE__ */ new Map();
+	/**
+	* Per-device insertion-ordered keys (oldest→newest). Mirrors {@link entries}
+	* so the floor can be enforced in O(1) per eviction candidate without scanning
+	* the global map for a device's frame count.
+	*/
+	perDeviceKeys = /* @__PURE__ */ new Map();
 	bytes = 0;
 	seq = 0;
 	/** Ring width used only to spread the `slot` field; the map key is authoritative. */
@@ -1272,6 +1288,7 @@ var RetainedFrameStore = class RetainedFrameStore {
 	constructor(options) {
 		this.nodeId = options.nodeId;
 		this.budgetBytes = options.budgetBytes ?? RETAINED_FRAME_BUDGET_BYTES;
+		this.perDeviceFloor = options.perDeviceFloor ?? RETAINED_FRAME_PER_DEVICE_FLOOR;
 	}
 	/** Number of retained frames (tests / metrics). */
 	get size() {
@@ -1304,14 +1321,21 @@ var RetainedFrameStore = class RetainedFrameStore {
 			nodeId: this.nodeId,
 			slotCount: RetainedFrameStore.SLOT_SPREAD
 		};
-		this.entries.set(keyOf(handle), frame);
+		const key = keyOf(handle);
+		this.entries.set(key, {
+			frame,
+			deviceId
+		});
+		const deviceKeys = this.perDeviceKeys.get(deviceId);
+		if (deviceKeys) deviceKeys.push(key);
+		else this.perDeviceKeys.set(deviceId, [key]);
 		this.bytes += byteLength;
 		this.evictToBudget();
 		return handle;
 	}
 	/** The retained frame for `handle`, or `null` if never retained / already evicted. */
 	getFrame(handle) {
-		return this.entries.get(keyOf(handle)) ?? null;
+		return this.entries.get(keyOf(handle))?.frame ?? null;
 	}
 	/**
 	* Crop (and optionally downscale) the retained rgb frame for `handle` to the
@@ -1322,26 +1346,56 @@ var RetainedFrameStore = class RetainedFrameStore {
 	* decode worker's surface (`getNativeCrop`), not here.
 	*/
 	crop(handle, bbox, maxWidth) {
-		const frame = this.entries.get(keyOf(handle));
-		if (!frame || frame.format !== "rgb") return null;
-		return cropRgb(frame, bbox, maxWidth);
+		const entry = this.entries.get(keyOf(handle));
+		if (!entry || entry.frame.format !== "rgb") return null;
+		return cropRgb(entry.frame, bbox, maxWidth);
 	}
 	/** Drop every retained frame (node/addon shutdown). */
 	clear() {
 		this.entries.clear();
+		this.perDeviceKeys.clear();
 		this.bytes = 0;
 	}
-	/** Evict oldest frames until the retained bytes fit the budget (keep ≥1). */
+	/**
+	* Evict frames until the retained bytes fit the budget (keep ≥1).
+	*
+	* Pass 1 (fairness): walk globally oldest→newest and drop only frames whose
+	* device still holds MORE than {@link perDeviceFloor} frames — so a busy
+	* camera's excess is reclaimed before any camera's protected recent window.
+	* Pass 2 (OOM guard): if still over budget (every remaining frame is
+	* floor-protected yet the ceiling is exhausted), drop globally oldest-first
+	* regardless of the floor. The ceiling ALWAYS wins over fairness.
+	*/
 	evictToBudget() {
-		while (this.bytes > this.budgetBytes && this.entries.size > 1) {
-			const oldest = this.entries.keys().next().value;
-			if (oldest === void 0) break;
-			const evicted = this.entries.get(oldest);
-			this.entries.delete(oldest);
-			if (evicted) this.bytes -= evicted.data.byteLength;
+		if (this.bytes <= this.budgetBytes) return;
+		const oldestFirst = [...this.entries.keys()];
+		for (const key of oldestFirst) {
+			if (this.bytes <= this.budgetBytes || this.entries.size <= 1) break;
+			const entry = this.entries.get(key);
+			if (!entry) continue;
+			const deviceKeys = this.perDeviceKeys.get(entry.deviceId);
+			if (deviceKeys && deviceKeys.length > this.perDeviceFloor) this.dropKey(key);
+		}
+		if (this.bytes <= this.budgetBytes) return;
+		for (const key of oldestFirst) {
+			if (this.bytes <= this.budgetBytes || this.entries.size <= 1) break;
+			this.dropKey(key);
 		}
 		if (this.bytes < 0) this.bytes = 0;
 	}
+	/** Remove one frame by key, keeping the byte tally + per-device index exact. */
+	dropKey(key) {
+		const entry = this.entries.get(key);
+		if (!entry) return;
+		this.entries.delete(key);
+		this.bytes -= entry.frame.data.byteLength;
+		const deviceKeys = this.perDeviceKeys.get(entry.deviceId);
+		if (deviceKeys) {
+			const idx = deviceKeys.indexOf(key);
+			if (idx >= 0) deviceKeys.splice(idx, 1);
+			if (deviceKeys.length === 0) this.perDeviceKeys.delete(entry.deviceId);
+		}
+	}
 };
 /**
 * Nearest-neighbour crop + optional downscale of a packed RGB24 frame to a
@@ -1931,6 +1985,18 @@ function startSessionDecodePump(deps) {
 		iterator.return().catch(() => {});
 	};
 }
+//#endregion
+//#region src/session-decode/native-crop-registry.ts
+/**
+* Default max entries retained across all active decode sessions on a node. Read
+* ONCE from `CAMSTACK_NATIVE_CROP_REGISTRY_CAP`; a non-finite / non-positive
+* value falls back to 256 (was a fixed 64 — too small for a busy multi-camera
+* node, see class doc).
+*/
+var DEFAULT_NATIVE_CROP_REGISTRY_CAP = (() => {
+	const raw = Number(process.env["CAMSTACK_NATIVE_CROP_REGISTRY_CAP"]);
+	return Number.isFinite(raw) && raw > 0 ? Math.floor(raw) : 256;
+})();
 /** Invoke a requester's best-effort `release()`, swallowing any transport error. */
 function safeRelease(request) {
 	try {
@@ -1940,7 +2006,7 @@ function safeRelease(request) {
 var NativeCropRegistry = class {
 	capacity;
 	entries = /* @__PURE__ */ new Map();
-	constructor(capacity = 64) {
+	constructor(capacity = DEFAULT_NATIVE_CROP_REGISTRY_CAP) {
 		this.capacity = capacity;
 	}
 	/** Number of registered handles (tests / metrics). */
@@ -3106,7 +3172,7 @@ var PipelineRunnerAddon = class extends require_dist.BaseAddon {
 	*/
 	async getNativeCrop(input) {
 		const b = input.bbox;
-		if (!(b.x <= .001 && b.y <= .001 && b.w >= .999 && b.h >= .999)) {
+		if (!(b.x <= .001 && b.y <= .001 && b.w >= .999 && b.h >= .999 && input.maxWidth === void 0)) {
 			const requester = this.nativeCropRegistry.get(input.handle);
 			if (requester) {
 				const result = await requester(input.bbox, input.maxWidth);

package/dist/pipeline-runner/index.mjs

@@ -1,8 +1,8 @@
-import { B as errMsg, G as createEvent, V as BaseAddon, dt as EventCategory, et as _enum, it as lazy, j as pipelineRunnerCapability, k as nodePin, lt as string, nt as boolean, ot as number, st as object, tt as array, x as defineCustomActions, y as customAction } from "../dist-D6tHM9GA.mjs";
+import { B as errMsg, G as createEvent, V as BaseAddon, dt as EventCategory, et as _enum, it as lazy, j as pipelineRunnerCapability, k as nodePin, lt as string, nt as boolean, ot as number, st as object, tt as array, x as defineCustomActions, y as customAction } from "../dist-BpWot5-w.mjs";
 import { n as profileForStreamId, t as isRemoteRestream } from "../remote-restream-BeHi78PZ.mjs";
 import { r as resolveHubHostname } from "../sheet-geometry-DcpuGTCm.mjs";
 import { t as isWorkerReply } from "../worker-protocol-CyVJTZEO.mjs";
-import { a as getStepDefinition } from "../step-definitions-Dbsm64_I.mjs";
+import { a as getStepDefinition } from "../step-definitions-D6R9X0V7.mjs";
 import { fork } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import sharp from "sharp";
@@ -1242,23 +1242,39 @@ function startGuardedSessionDecode(deps) {
 /** {@link RETAINED_FRAME_BUDGET_MB} in bytes. */
 var RETAINED_FRAME_BUDGET_BYTES = (() => {
 	const raw = Number(process.env["CAMSTACK_SESSION_RETAIN_MB"]);
-	return Number.isFinite(raw) && raw > 0 ? Math.floor(raw) : 32;
+	return Number.isFinite(raw) && raw > 0 ? Math.floor(raw) : 96;
 })() * 1024 * 1024;
+/**
+* How many of each device's MOST RECENT frames are protected from a busy
+* neighbour's budget eviction. Sized to cover the late two-plane / cross-process
+* enrichment horizon (~150-500 ms): 6 frames ≈ 0.6 s @10 fps of guaranteed
+* survival for every active camera. Read ONCE from
+* `CAMSTACK_SESSION_RETAIN_FLOOR`; `0` disables the floor (pure global FIFO — the
+* pre-2026-07-19 behaviour). The hard byte ceiling always overrides the floor,
+* so this can never push retention past {@link RETAINED_FRAME_BUDGET_BYTES}.
+*/
+var RETAINED_FRAME_PER_DEVICE_FLOOR = (() => {
+	const raw = Number(process.env["CAMSTACK_SESSION_RETAIN_FLOOR"]);
+	return Number.isFinite(raw) && raw >= 0 ? Math.floor(raw) : 6;
+})();
 /** Opaque RAM-key prefix stamped into a retained frame's `FrameHandle.shmId`. */
 var RETAINED_FRAME_KEY_PREFIX = "ram:";
 /** A retention frame is uniquely identified by its key + slot + committed seq. */
 function keyOf(handle) {
 	return `${handle.shmId}#${handle.slot}#${handle.seq}`;
 }
-/**
-* Node-level RAM store of retained rgb detection frames, keyed by
-* `FrameHandle` identity. Latest-wins with a byte budget.
-*/
 var RetainedFrameStore = class RetainedFrameStore {
 	nodeId;
 	budgetBytes;
-	/** Insertion-ordered (Map) → oldest is `keys().next()`. */
+	perDeviceFloor;
+	/** Insertion-ordered (Map) → globally oldest is `keys().next()`. */
 	entries = /* @__PURE__ */ new Map();
+	/**
+	* Per-device insertion-ordered keys (oldest→newest). Mirrors {@link entries}
+	* so the floor can be enforced in O(1) per eviction candidate without scanning
+	* the global map for a device's frame count.
+	*/
+	perDeviceKeys = /* @__PURE__ */ new Map();
 	bytes = 0;
 	seq = 0;
 	/** Ring width used only to spread the `slot` field; the map key is authoritative. */
@@ -1266,6 +1282,7 @@ var RetainedFrameStore = class RetainedFrameStore {
 	constructor(options) {
 		this.nodeId = options.nodeId;
 		this.budgetBytes = options.budgetBytes ?? RETAINED_FRAME_BUDGET_BYTES;
+		this.perDeviceFloor = options.perDeviceFloor ?? RETAINED_FRAME_PER_DEVICE_FLOOR;
 	}
 	/** Number of retained frames (tests / metrics). */
 	get size() {
@@ -1298,14 +1315,21 @@ var RetainedFrameStore = class RetainedFrameStore {
 			nodeId: this.nodeId,
 			slotCount: RetainedFrameStore.SLOT_SPREAD
 		};
-		this.entries.set(keyOf(handle), frame);
+		const key = keyOf(handle);
+		this.entries.set(key, {
+			frame,
+			deviceId
+		});
+		const deviceKeys = this.perDeviceKeys.get(deviceId);
+		if (deviceKeys) deviceKeys.push(key);
+		else this.perDeviceKeys.set(deviceId, [key]);
 		this.bytes += byteLength;
 		this.evictToBudget();
 		return handle;
 	}
 	/** The retained frame for `handle`, or `null` if never retained / already evicted. */
 	getFrame(handle) {
-		return this.entries.get(keyOf(handle)) ?? null;
+		return this.entries.get(keyOf(handle))?.frame ?? null;
 	}
 	/**
 	* Crop (and optionally downscale) the retained rgb frame for `handle` to the
@@ -1316,26 +1340,56 @@ var RetainedFrameStore = class RetainedFrameStore {
 	* decode worker's surface (`getNativeCrop`), not here.
 	*/
 	crop(handle, bbox, maxWidth) {
-		const frame = this.entries.get(keyOf(handle));
-		if (!frame || frame.format !== "rgb") return null;
-		return cropRgb(frame, bbox, maxWidth);
+		const entry = this.entries.get(keyOf(handle));
+		if (!entry || entry.frame.format !== "rgb") return null;
+		return cropRgb(entry.frame, bbox, maxWidth);
 	}
 	/** Drop every retained frame (node/addon shutdown). */
 	clear() {
 		this.entries.clear();
+		this.perDeviceKeys.clear();
 		this.bytes = 0;
 	}
-	/** Evict oldest frames until the retained bytes fit the budget (keep ≥1). */
+	/**
+	* Evict frames until the retained bytes fit the budget (keep ≥1).
+	*
+	* Pass 1 (fairness): walk globally oldest→newest and drop only frames whose
+	* device still holds MORE than {@link perDeviceFloor} frames — so a busy
+	* camera's excess is reclaimed before any camera's protected recent window.
+	* Pass 2 (OOM guard): if still over budget (every remaining frame is
+	* floor-protected yet the ceiling is exhausted), drop globally oldest-first
+	* regardless of the floor. The ceiling ALWAYS wins over fairness.
+	*/
 	evictToBudget() {
-		while (this.bytes > this.budgetBytes && this.entries.size > 1) {
-			const oldest = this.entries.keys().next().value;
-			if (oldest === void 0) break;
-			const evicted = this.entries.get(oldest);
-			this.entries.delete(oldest);
-			if (evicted) this.bytes -= evicted.data.byteLength;
+		if (this.bytes <= this.budgetBytes) return;
+		const oldestFirst = [...this.entries.keys()];
+		for (const key of oldestFirst) {
+			if (this.bytes <= this.budgetBytes || this.entries.size <= 1) break;
+			const entry = this.entries.get(key);
+			if (!entry) continue;
+			const deviceKeys = this.perDeviceKeys.get(entry.deviceId);
+			if (deviceKeys && deviceKeys.length > this.perDeviceFloor) this.dropKey(key);
+		}
+		if (this.bytes <= this.budgetBytes) return;
+		for (const key of oldestFirst) {
+			if (this.bytes <= this.budgetBytes || this.entries.size <= 1) break;
+			this.dropKey(key);
 		}
 		if (this.bytes < 0) this.bytes = 0;
 	}
+	/** Remove one frame by key, keeping the byte tally + per-device index exact. */
+	dropKey(key) {
+		const entry = this.entries.get(key);
+		if (!entry) return;
+		this.entries.delete(key);
+		this.bytes -= entry.frame.data.byteLength;
+		const deviceKeys = this.perDeviceKeys.get(entry.deviceId);
+		if (deviceKeys) {
+			const idx = deviceKeys.indexOf(key);
+			if (idx >= 0) deviceKeys.splice(idx, 1);
+			if (deviceKeys.length === 0) this.perDeviceKeys.delete(entry.deviceId);
+		}
+	}
 };
 /**
 * Nearest-neighbour crop + optional downscale of a packed RGB24 frame to a
@@ -1925,6 +1979,18 @@ function startSessionDecodePump(deps) {
 		iterator.return().catch(() => {});
 	};
 }
+//#endregion
+//#region src/session-decode/native-crop-registry.ts
+/**
+* Default max entries retained across all active decode sessions on a node. Read
+* ONCE from `CAMSTACK_NATIVE_CROP_REGISTRY_CAP`; a non-finite / non-positive
+* value falls back to 256 (was a fixed 64 — too small for a busy multi-camera
+* node, see class doc).
+*/
+var DEFAULT_NATIVE_CROP_REGISTRY_CAP = (() => {
+	const raw = Number(process.env["CAMSTACK_NATIVE_CROP_REGISTRY_CAP"]);
+	return Number.isFinite(raw) && raw > 0 ? Math.floor(raw) : 256;
+})();
 /** Invoke a requester's best-effort `release()`, swallowing any transport error. */
 function safeRelease(request) {
 	try {
@@ -1934,7 +2000,7 @@ function safeRelease(request) {
 var NativeCropRegistry = class {
 	capacity;
 	entries = /* @__PURE__ */ new Map();
-	constructor(capacity = 64) {
+	constructor(capacity = DEFAULT_NATIVE_CROP_REGISTRY_CAP) {
 		this.capacity = capacity;
 	}
 	/** Number of registered handles (tests / metrics). */
@@ -3100,7 +3166,7 @@ var PipelineRunnerAddon = class extends BaseAddon {
 	*/
 	async getNativeCrop(input) {
 		const b = input.bbox;
-		if (!(b.x <= .001 && b.y <= .001 && b.w >= .999 && b.h >= .999)) {
+		if (!(b.x <= .001 && b.y <= .001 && b.w >= .999 && b.h >= .999 && input.maxWidth === void 0)) {
 			const requester = this.nativeCropRegistry.get(input.handle);
 			if (requester) {
 				const result = await requester(input.bbox, input.maxWidth);