@camstack/addon-pipeline 1.2.136 → 1.2.138

package/dist/pipeline-runner/index.js

@@ -2,16 +2,17 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-BzLiQ8Ue.js");
-const require_event_loop_stall_monitor = require("../event-loop-stall-monitor-DjV4Bow7.js");
-const require_worker_protocol = require("../worker-protocol-DvTZBvh2.js");
+const require_dist = require("../dist-BuIP0499.js");
+const require_node = require("../node-ChdX9lv7.js");
+const require_event_loop_stall_monitor = require("../event-loop-stall-monitor-Bef2jXMX.js");
+const require_worker_protocol = require("../worker-protocol-Bpz62eyB.js");
 const require_hub_hostname = require("../hub-hostname-DAJXlOgV.js");
-const require_lazy_sharp = require("../lazy-sharp-DxWmhTqk.js");
+const require_lazy_sharp = require("../lazy-sharp-DH2eVehm.js");
 const require_restream_intent = require("../restream-intent-Cv9x3jmu.js");
 const require_remote_restream = require("../remote-restream-CO36Sr30.js");
+let node_child_process = require("node:child_process");
 let sharp = require("sharp");
 sharp = require_dist.__toESM(sharp);
-let node_child_process = require("node:child_process");
 let node_url = require("node:url");
 let node_perf_hooks = require("node:perf_hooks");
 let node_os = require("node:os");
@@ -29,9 +30,18 @@ var KILL_SIGNALS = {
 	SIGKILL: "SIGKILL",
 	SIGTERM: "SIGTERM"
 };
-/** Adapt a Node {@link ChildProcess} to the coordinator's {@link ForkedChildLike}. */
-function wrapChild(child) {
+/**
+* Adapt a Node {@link ChildProcess} to the coordinator's
+* {@link ForkedChildLike}.
+*
+* `onExit` is invoked exactly once, on the child's real exit, before the
+* coordinator's own listener — it is how the cost claim is released. It is a
+* parameter rather than a second `child.on('exit')` in the caller because
+* every listener added out here is one somebody can forget to remove.
+*/
+function wrapChild(child, onExit) {
 	child.on("error", () => void 0);
+	child.on("exit", onExit);
 	return {
 		send: (msg) => {
 			if (!child.connected) return;
@@ -75,14 +85,21 @@ function wrapChild(child) {
 * node-av through `CAMSTACK_FRAMEWORK_DIR` / `CAMSTACK_BUNDLED_ADDONS_DIR` on
 * agents, so a replaced env would silently break decoding off the hub.
 */
-function forkDecodeWorker(_source, leaseOverride = {}) {
-	return wrapChild((0, node_child_process.fork)(CHILD_ENTRY_PATH, [], {
+function forkDecodeWorker(source, leaseOverride = {}, costRegistry) {
+	const child = (0, node_child_process.fork)(CHILD_ENTRY_PATH, [], {
 		serialization: "advanced",
 		env: {
 			...process.env,
 			...require_worker_protocol.nativeLeaseSettingEnv(leaseOverride)
 		}
-	}));
+	});
+	const costClaim = costRegistry?.claim({
+		role: "decode",
+		deviceId: source.deviceId,
+		unit: `${source.deviceId}/decode`,
+		pid: child.pid
+	}) ?? require_node.NO_COST_CLAIM;
+	return wrapChild(child, () => costClaim.release());
 }
 //#endregion
 //#region src/session-decode/guarded-session-decode.ts
@@ -874,10 +891,29 @@ var DEFAULT_FIRST_FRAME_TIMEOUT_MS = 2e4;
 *
 * The first decodable frame is not a fixed cost: it is one IDR interval plus
 * every GOP the decoder has to discard. Measured on device 618 (2560x1440
-* h264, 8.0 s IDR interval, `Invalid NAL unit` / `corrupt decoded frame` in its
-* bitstream), dial → first decoded frame over the broker's own muted restream
-* was 1.8 / 6.5 / 7.0 / 7.2 / 9.2 / 10.0 / 10.8 / 12.9 / 14.9 / 20.0 / 30.3 /
-* >40 s across 12 trials — against a healthy 587's 2.0 s ± 0.02.
+* h264, `Invalid NAL unit` / `corrupt decoded frame` in its bitstream), dial →
+* first decoded frame over the broker's own muted restream was 1.8 / 6.5 / 7.0
+* / 7.2 / 9.2 / 10.0 / 10.8 / 12.9 / 14.9 / 20.0 / 30.3 / >40 s across 12
+* trials — against a healthy 587's 2.0 s ± 0.02.
+*
+* **The "8.0 s IDR interval" this used to attribute 618's spread to was wrong,
+* and is corrected here rather than deleted** (2026-08-28): a stated number
+* nobody re-derived reads as verification, and this one was used to argue that
+* 618 was an encoder outlier. The fleet runs 100-frame GOPs at 25 fps — a
+* **4 000 ms** IDR interval — and two independent readings of 6 h of live logs
+* agree with the operator rather than with this docblock. First, the join-burst
+* span logged on `restream prime (lat-probe)` is the time since the last IDR,
+* uniform in `[0, IDR]` and censored at `PRIME_MAX_SPAN_MS`: its median is
+* ~1 000 ms on eleven cameras, which is what `uniform[0, 4000]` conditioned on
+* `≤2000` predicts. Second, `detectionIntentServed` over detection dials puts
+* the SERVED fraction at 44-61 % on the bulk of the fleet, i.e. the ~50 %
+* `P(span > 2000)` a 4 000 ms interval implies. 618 measures 51 %, which is the
+* fleet norm. The genuine long-GOP outlier is **637** at 30 % served (⇒ ~6.7 s).
+*
+* So the spread is not this camera's encoder. It is D57's fixed 2 000 ms bound
+* withholding the join burst WHOLE on roughly half of every 4 s-GOP camera's
+* dials — see `join-burst-bound.ts`, which states the arithmetic, and
+* `docs/architecture/load-ledger.md` (2026-08-28) for the measurement.
 *
 * Abandoning at 20 s was therefore not a timeout, it was a coin flip, and the
 * recovery made it worse: ending the session RE-DIALS, which throws the
@@ -913,6 +949,7 @@ var SessionDecodeSession = class {
 	firstFrameTimeoutMs;
 	frameTimeoutMs;
 	firstFrameMaxWaitMs;
+	onDialTiming;
 	pendingPull = null;
 	pendingToBuffers = /* @__PURE__ */ new Map();
 	/** Outstanding `nativeCrop` requests, keyed by the monotonic `requestId`. */
@@ -926,13 +963,14 @@ var SessionDecodeSession = class {
 	firstFrameReceived = false;
 	/** `Date.now()` of the FIRST `pull` — the origin of the cold-start ceiling. */
 	firstPullAt = 0;
-	constructor(child, logger, deviceId, firstFrameTimeoutMs, frameTimeoutMs, firstFrameMaxWaitMs) {
+	constructor(child, logger, deviceId, firstFrameTimeoutMs, frameTimeoutMs, firstFrameMaxWaitMs, onDialTiming) {
 		this.child = child;
 		this.logger = logger;
 		this.deviceId = deviceId;
 		this.firstFrameTimeoutMs = firstFrameTimeoutMs;
 		this.frameTimeoutMs = frameTimeoutMs;
 		this.firstFrameMaxWaitMs = firstFrameMaxWaitMs;
+		this.onDialTiming = onDialTiming;
 		this.child.on("message", (m) => this.handleMessage(m));
 		this.child.on("exit", (m) => this.handleExit(toWorkerExitInfo(m)));
 	}
@@ -1108,6 +1146,15 @@ var SessionDecodeSession = class {
 			case "log":
 				this.logger[raw.level](raw.message);
 				return;
+			case "dialTiming":
+				this.onDialTiming?.({
+					hwContextMs: raw.hwContextMs,
+					demuxerOpenMs: raw.demuxerOpenMs,
+					decoderCreateMs: raw.decoderCreateMs,
+					firstDecodeMs: raw.firstDecodeMs,
+					streamInfoProbed: raw.streamInfoProbed
+				});
+				return;
 		}
 	}
 	handleExit(info) {
@@ -1332,7 +1379,7 @@ function createSessionDecodeCoordinator(deps) {
 	const frameTimeoutMs = deps.frameTimeoutMs ?? DEFAULT_FRAME_TIMEOUT_MS;
 	const firstFrameMaxWaitMs = Math.max(deps.firstFrameMaxWaitMs ?? DEFAULT_FIRST_FRAME_MAX_WAIT_MS, firstFrameTimeoutMs);
 	return { async *generateVideoFrames(source, opts) {
-		const session = new SessionDecodeSession(deps.fork(source), deps.logger, source.deviceId, firstFrameTimeoutMs, frameTimeoutMs, firstFrameMaxWaitMs);
+		const session = new SessionDecodeSession(deps.fork(source), deps.logger, source.deviceId, firstFrameTimeoutMs, frameTimeoutMs, firstFrameMaxWaitMs, deps.onDialTiming);
 		session.start(source, opts);
 		try {
 			while (true) {
@@ -1386,9 +1433,13 @@ async function toDecodedFrame(frame, format, viewSpec) {
 */
 function startSessionDecodePump(deps) {
 	const format = deps.opts.format ?? "rgb";
+	let dialTiming = null;
 	const iterator = createSessionDecodeCoordinator({
 		fork: deps.fork,
 		logger: deps.logger,
+		onDialTiming: (timing) => {
+			dialTiming = timing;
+		},
 		...deps.firstFrameTimeoutMs !== void 0 ? { firstFrameTimeoutMs: deps.firstFrameTimeoutMs } : {},
 		...deps.frameTimeoutMs !== void 0 ? { frameTimeoutMs: deps.frameTimeoutMs } : {}
 	}).generateVideoFrames(deps.source, deps.opts);
@@ -1419,9 +1470,11 @@ function startSessionDecodePump(deps) {
 				if (!firstFrameSeen) {
 					firstFrameSeen = true;
 					releaseSpawnSlotOnce();
+					const dial = dialTiming;
 					deps.onFirstFrame?.({
 						spawnWaitMs: spawnGrantedAt - pumpStartedAt,
-						forkToFrameMs: Date.now() - spawnGrantedAt
+						forkToFrameMs: Date.now() - spawnGrantedAt,
+						...dial !== null ? { dial } : {}
 					});
 				}
 				if (stopped) {
@@ -5210,6 +5263,12 @@ var METRICS_HEARTBEAT_MS = 3e4;
 var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAddon {
 	runner = null;
 	/**
+	* The decode-worker children this addon forked, claimed at the fork and
+	* released at their exit. One registry per PROCESS; it dies with the
+	* process, which is correct — those workers were this process's children.
+	*/
+	costRegistry = new require_node.ChildCostRegistry();
+	/**
 	* Per-runner (per-node) decode-worker SPAWN-CONCURRENCY GATE (P5). A single
 	* counting semaphore every session-decode fork (detection + motion, all
 	* cameras on this node) passes through, sized to
@@ -5511,6 +5570,9 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAdd
 			providers: [{
 				capability: require_dist.pipelineRunnerCapability,
 				provider: this
+			}, {
+				capability: require_dist.loadContributionCapability,
+				provider: { list: () => this.costRegistry.contributions() }
 			}],
 			customActions: pipelineRunnerBenchActions,
 			actionHandlers: {
@@ -6660,7 +6722,7 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAdd
 	* knobs are read at spawn, so a changed setting reaches NEW sessions and
 	* leaves running ones alone (a live session would have to be re-dialled).
 	*/
-	forkDecodeWorkerWithLease = (source) => forkDecodeWorker(source, this.nativeLease.current());
+	forkDecodeWorkerWithLease = (source) => forkDecodeWorker(source, this.nativeLease.current(), this.costRegistry);
 	/**
 	* Refresh the lease knobs before a decode worker is spawned. Awaited on the
 	* `acquire` leg of `startGuardedSessionDecode` (which always completes before
@@ -7320,6 +7382,13 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAdd
 								dialMs,
 								spawnWaitMs: timing.spawnWaitMs,
 								forkToFrameMs: timing.forkToFrameMs,
+								...timing.dial ? {
+									hwContextMs: timing.dial.hwContextMs,
+									demuxerOpenMs: timing.dial.demuxerOpenMs,
+									decoderCreateMs: timing.dial.decoderCreateMs,
+									firstDecodeMs: timing.dial.firstDecodeMs,
+									streamInfoProbed: timing.dial.streamInfoProbed
+								} : {},
 								firstFrameMs: Date.now() - requestedAt,
 								...phaseActiveAt !== void 0 ? { sincePhaseActiveMs: Date.now() - phaseActiveAt } : {}
 							}

package/dist/pipeline-runner/index.mjs

@@ -1,12 +1,13 @@
-import { $t as EventCategory, B as defineCustomActions, H as deriveDetailCropRect, Ht as _enum, Jt as number, Kt as lazy, L as customAction, Lt as nodePin, Mt as createEvent, Ot as BaseAddon, St as errMsg, Ut as array, Wt as boolean, Yt as object, Zt as string, ct as pickNativeLeaseOverride, m as DEVICE_BACKEND_TO_FORMAT, p as DEFAULT_NATIVE_LEASE_SETTINGS, qt as literal, st as pickDetailCropConvention, u as DEFAULT_DETAIL_CROP_CONVENTION, ut as pipelineRunnerCapability } from "../dist-C1dXLLQq.mjs";
-import { i as resolveFrameViewGeometry, r as localFrameRegistry, t as attributeStall, u as getStepDefinition } from "../event-loop-stall-monitor-CU-xxX5c.mjs";
-import { a as nativeLeaseSettingEnv, t as isWorkerReply } from "../worker-protocol-DxsVx0G7.mjs";
+import { $ as loadContributionCapability, $t as string, At as BaseAddon, B as defineCustomActions, Ct as errMsg, Gt as array, H as deriveDetailCropRect, Jt as lazy, Kt as boolean, L as customAction, Pt as createEvent, Wt as _enum, Xt as number, Yt as literal, Zt as object, ct as pickDetailCropConvention, dt as pipelineRunnerCapability, lt as pickNativeLeaseOverride, m as DEVICE_BACKEND_TO_FORMAT, p as DEFAULT_NATIVE_LEASE_SETTINGS, tn as EventCategory, u as DEFAULT_DETAIL_CROP_CONVENTION, zt as nodePin } from "../dist-CmEYRK7G.mjs";
+import { i as NO_COST_CLAIM, t as ChildCostRegistry } from "../node-J07GBWT3.mjs";
+import { i as resolveFrameViewGeometry, r as localFrameRegistry, t as attributeStall, u as getStepDefinition } from "../event-loop-stall-monitor-JGTFb0Uv.mjs";
+import { a as nativeLeaseSettingEnv, t as isWorkerReply } from "../worker-protocol-wMS29PG9.mjs";
 import { t as resolveHubHostname } from "../hub-hostname-cCknRYKj.mjs";
-import { t as getSharp } from "../lazy-sharp-BtT5x-qP.mjs";
+import { t as getSharp } from "../lazy-sharp-DXsqwpph.mjs";
 import { n as withDetectionIntent } from "../restream-intent-B4BXZra7.mjs";
 import { n as profileForStreamId, t as isRemoteRestream } from "../remote-restream-BeHi78PZ.mjs";
-import sharp from "sharp";
 import { fork } from "node:child_process";
+import sharp from "sharp";
 import { fileURLToPath } from "node:url";
 import { PerformanceObserver } from "node:perf_hooks";
 import * as os from "node:os";
@@ -23,9 +24,18 @@ var KILL_SIGNALS = {
 	SIGKILL: "SIGKILL",
 	SIGTERM: "SIGTERM"
 };
-/** Adapt a Node {@link ChildProcess} to the coordinator's {@link ForkedChildLike}. */
-function wrapChild(child) {
+/**
+* Adapt a Node {@link ChildProcess} to the coordinator's
+* {@link ForkedChildLike}.
+*
+* `onExit` is invoked exactly once, on the child's real exit, before the
+* coordinator's own listener — it is how the cost claim is released. It is a
+* parameter rather than a second `child.on('exit')` in the caller because
+* every listener added out here is one somebody can forget to remove.
+*/
+function wrapChild(child, onExit) {
 	child.on("error", () => void 0);
+	child.on("exit", onExit);
 	return {
 		send: (msg) => {
 			if (!child.connected) return;
@@ -69,14 +79,21 @@ function wrapChild(child) {
 * node-av through `CAMSTACK_FRAMEWORK_DIR` / `CAMSTACK_BUNDLED_ADDONS_DIR` on
 * agents, so a replaced env would silently break decoding off the hub.
 */
-function forkDecodeWorker(_source, leaseOverride = {}) {
-	return wrapChild(fork(CHILD_ENTRY_PATH, [], {
+function forkDecodeWorker(source, leaseOverride = {}, costRegistry) {
+	const child = fork(CHILD_ENTRY_PATH, [], {
 		serialization: "advanced",
 		env: {
 			...process.env,
 			...nativeLeaseSettingEnv(leaseOverride)
 		}
-	}));
+	});
+	const costClaim = costRegistry?.claim({
+		role: "decode",
+		deviceId: source.deviceId,
+		unit: `${source.deviceId}/decode`,
+		pid: child.pid
+	}) ?? NO_COST_CLAIM;
+	return wrapChild(child, () => costClaim.release());
 }
 //#endregion
 //#region src/session-decode/guarded-session-decode.ts
@@ -868,10 +885,29 @@ var DEFAULT_FIRST_FRAME_TIMEOUT_MS = 2e4;
 *
 * The first decodable frame is not a fixed cost: it is one IDR interval plus
 * every GOP the decoder has to discard. Measured on device 618 (2560x1440
-* h264, 8.0 s IDR interval, `Invalid NAL unit` / `corrupt decoded frame` in its
-* bitstream), dial → first decoded frame over the broker's own muted restream
-* was 1.8 / 6.5 / 7.0 / 7.2 / 9.2 / 10.0 / 10.8 / 12.9 / 14.9 / 20.0 / 30.3 /
-* >40 s across 12 trials — against a healthy 587's 2.0 s ± 0.02.
+* h264, `Invalid NAL unit` / `corrupt decoded frame` in its bitstream), dial →
+* first decoded frame over the broker's own muted restream was 1.8 / 6.5 / 7.0
+* / 7.2 / 9.2 / 10.0 / 10.8 / 12.9 / 14.9 / 20.0 / 30.3 / >40 s across 12
+* trials — against a healthy 587's 2.0 s ± 0.02.
+*
+* **The "8.0 s IDR interval" this used to attribute 618's spread to was wrong,
+* and is corrected here rather than deleted** (2026-08-28): a stated number
+* nobody re-derived reads as verification, and this one was used to argue that
+* 618 was an encoder outlier. The fleet runs 100-frame GOPs at 25 fps — a
+* **4 000 ms** IDR interval — and two independent readings of 6 h of live logs
+* agree with the operator rather than with this docblock. First, the join-burst
+* span logged on `restream prime (lat-probe)` is the time since the last IDR,
+* uniform in `[0, IDR]` and censored at `PRIME_MAX_SPAN_MS`: its median is
+* ~1 000 ms on eleven cameras, which is what `uniform[0, 4000]` conditioned on
+* `≤2000` predicts. Second, `detectionIntentServed` over detection dials puts
+* the SERVED fraction at 44-61 % on the bulk of the fleet, i.e. the ~50 %
+* `P(span > 2000)` a 4 000 ms interval implies. 618 measures 51 %, which is the
+* fleet norm. The genuine long-GOP outlier is **637** at 30 % served (⇒ ~6.7 s).
+*
+* So the spread is not this camera's encoder. It is D57's fixed 2 000 ms bound
+* withholding the join burst WHOLE on roughly half of every 4 s-GOP camera's
+* dials — see `join-burst-bound.ts`, which states the arithmetic, and
+* `docs/architecture/load-ledger.md` (2026-08-28) for the measurement.
 *
 * Abandoning at 20 s was therefore not a timeout, it was a coin flip, and the
 * recovery made it worse: ending the session RE-DIALS, which throws the
@@ -907,6 +943,7 @@ var SessionDecodeSession = class {
 	firstFrameTimeoutMs;
 	frameTimeoutMs;
 	firstFrameMaxWaitMs;
+	onDialTiming;
 	pendingPull = null;
 	pendingToBuffers = /* @__PURE__ */ new Map();
 	/** Outstanding `nativeCrop` requests, keyed by the monotonic `requestId`. */
@@ -920,13 +957,14 @@ var SessionDecodeSession = class {
 	firstFrameReceived = false;
 	/** `Date.now()` of the FIRST `pull` — the origin of the cold-start ceiling. */
 	firstPullAt = 0;
-	constructor(child, logger, deviceId, firstFrameTimeoutMs, frameTimeoutMs, firstFrameMaxWaitMs) {
+	constructor(child, logger, deviceId, firstFrameTimeoutMs, frameTimeoutMs, firstFrameMaxWaitMs, onDialTiming) {
 		this.child = child;
 		this.logger = logger;
 		this.deviceId = deviceId;
 		this.firstFrameTimeoutMs = firstFrameTimeoutMs;
 		this.frameTimeoutMs = frameTimeoutMs;
 		this.firstFrameMaxWaitMs = firstFrameMaxWaitMs;
+		this.onDialTiming = onDialTiming;
 		this.child.on("message", (m) => this.handleMessage(m));
 		this.child.on("exit", (m) => this.handleExit(toWorkerExitInfo(m)));
 	}
@@ -1102,6 +1140,15 @@ var SessionDecodeSession = class {
 			case "log":
 				this.logger[raw.level](raw.message);
 				return;
+			case "dialTiming":
+				this.onDialTiming?.({
+					hwContextMs: raw.hwContextMs,
+					demuxerOpenMs: raw.demuxerOpenMs,
+					decoderCreateMs: raw.decoderCreateMs,
+					firstDecodeMs: raw.firstDecodeMs,
+					streamInfoProbed: raw.streamInfoProbed
+				});
+				return;
 		}
 	}
 	handleExit(info) {
@@ -1326,7 +1373,7 @@ function createSessionDecodeCoordinator(deps) {
 	const frameTimeoutMs = deps.frameTimeoutMs ?? DEFAULT_FRAME_TIMEOUT_MS;
 	const firstFrameMaxWaitMs = Math.max(deps.firstFrameMaxWaitMs ?? DEFAULT_FIRST_FRAME_MAX_WAIT_MS, firstFrameTimeoutMs);
 	return { async *generateVideoFrames(source, opts) {
-		const session = new SessionDecodeSession(deps.fork(source), deps.logger, source.deviceId, firstFrameTimeoutMs, frameTimeoutMs, firstFrameMaxWaitMs);
+		const session = new SessionDecodeSession(deps.fork(source), deps.logger, source.deviceId, firstFrameTimeoutMs, frameTimeoutMs, firstFrameMaxWaitMs, deps.onDialTiming);
 		session.start(source, opts);
 		try {
 			while (true) {
@@ -1380,9 +1427,13 @@ async function toDecodedFrame(frame, format, viewSpec) {
 */
 function startSessionDecodePump(deps) {
 	const format = deps.opts.format ?? "rgb";
+	let dialTiming = null;
 	const iterator = createSessionDecodeCoordinator({
 		fork: deps.fork,
 		logger: deps.logger,
+		onDialTiming: (timing) => {
+			dialTiming = timing;
+		},
 		...deps.firstFrameTimeoutMs !== void 0 ? { firstFrameTimeoutMs: deps.firstFrameTimeoutMs } : {},
 		...deps.frameTimeoutMs !== void 0 ? { frameTimeoutMs: deps.frameTimeoutMs } : {}
 	}).generateVideoFrames(deps.source, deps.opts);
@@ -1413,9 +1464,11 @@ function startSessionDecodePump(deps) {
 				if (!firstFrameSeen) {
 					firstFrameSeen = true;
 					releaseSpawnSlotOnce();
+					const dial = dialTiming;
 					deps.onFirstFrame?.({
 						spawnWaitMs: spawnGrantedAt - pumpStartedAt,
-						forkToFrameMs: Date.now() - spawnGrantedAt
+						forkToFrameMs: Date.now() - spawnGrantedAt,
+						...dial !== null ? { dial } : {}
 					});
 				}
 				if (stopped) {
@@ -5203,6 +5256,12 @@ var METRICS_HEARTBEAT_MS = 3e4;
 var PipelineRunnerAddon = class PipelineRunnerAddon extends BaseAddon {
 	runner = null;
 	/**
+	* The decode-worker children this addon forked, claimed at the fork and
+	* released at their exit. One registry per PROCESS; it dies with the
+	* process, which is correct — those workers were this process's children.
+	*/
+	costRegistry = new ChildCostRegistry();
+	/**
 	* Per-runner (per-node) decode-worker SPAWN-CONCURRENCY GATE (P5). A single
 	* counting semaphore every session-decode fork (detection + motion, all
 	* cameras on this node) passes through, sized to
@@ -5504,6 +5563,9 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends BaseAddon {
 			providers: [{
 				capability: pipelineRunnerCapability,
 				provider: this
+			}, {
+				capability: loadContributionCapability,
+				provider: { list: () => this.costRegistry.contributions() }
 			}],
 			customActions: pipelineRunnerBenchActions,
 			actionHandlers: {
@@ -6653,7 +6715,7 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends BaseAddon {
 	* knobs are read at spawn, so a changed setting reaches NEW sessions and
 	* leaves running ones alone (a live session would have to be re-dialled).
 	*/
-	forkDecodeWorkerWithLease = (source) => forkDecodeWorker(source, this.nativeLease.current());
+	forkDecodeWorkerWithLease = (source) => forkDecodeWorker(source, this.nativeLease.current(), this.costRegistry);
 	/**
 	* Refresh the lease knobs before a decode worker is spawned. Awaited on the
 	* `acquire` leg of `startGuardedSessionDecode` (which always completes before
@@ -7313,6 +7375,13 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends BaseAddon {
 								dialMs,
 								spawnWaitMs: timing.spawnWaitMs,
 								forkToFrameMs: timing.forkToFrameMs,
+								...timing.dial ? {
+									hwContextMs: timing.dial.hwContextMs,
+									demuxerOpenMs: timing.dial.demuxerOpenMs,
+									decoderCreateMs: timing.dial.decoderCreateMs,
+									firstDecodeMs: timing.dial.firstDecodeMs,
+									streamInfoProbed: timing.dial.streamInfoProbed
+								} : {},
 								firstFrameMs: Date.now() - requestedAt,
 								...phaseActiveAt !== void 0 ? { sincePhaseActiveMs: Date.now() - phaseActiveAt } : {}
 							}

package/dist/{process-memory-CZK3D3kM.js → process-memory-CJoZemF4.js}

@@ -1,7 +1,7 @@
-const require_dist = require("./dist-BzLiQ8Ue.js");
-let node_child_process = require("node:child_process");
+const require_dist = require("./dist-BuIP0499.js");
 let node_fs = require("node:fs");
 node_fs = require_dist.__toESM(node_fs);
+let node_child_process = require("node:child_process");
 //#region src/shared/node-topology-platform.ts
 /**
 * Pick a node's `{ platform, arch }` from the cluster topology. Returns an empty

package/dist/{process-memory-CaEwi5Cd.mjs → process-memory-DAKxUb9d.mjs}

@@ -1,6 +1,6 @@
-import { it as parseProcStatus } from "./dist-C1dXLLQq.mjs";
-import { execFile } from "node:child_process";
+import { at as parseProcStatus } from "./dist-CmEYRK7G.mjs";
 import * as fs from "node:fs";
+import { execFile } from "node:child_process";
 //#region src/shared/node-topology-platform.ts
 /**
 * Pick a node's `{ platform, arch }` from the cluster topology. Returns an empty

package/dist/recorder/index.js

@@ -1,14 +1,15 @@
-const require_dist = require("../dist-BzLiQ8Ue.js");
+const require_dist = require("../dist-BuIP0499.js");
+const require_node = require("../node-ChdX9lv7.js");
 const require_hub_hostname = require("../hub-hostname-DAJXlOgV.js");
 const require_restream_intent = require("../restream-intent-Cv9x3jmu.js");
-const require_addon_utils = require("../addon-utils-CKf8kbwh.js");
 const require_retire_root_keys = require("../retire-root-keys-KE6D6Xh_.js");
 let node_crypto = require("node:crypto");
-let node_child_process = require("node:child_process");
+let node_fs = require("node:fs");
 let node_path = require("node:path");
 node_path = require_dist.__toESM(node_path);
-let node_fs = require("node:fs");
+let node_child_process = require("node:child_process");
 let node_fs_promises = require("node:fs/promises");
+let _camstack_system_addon_utils = require("@camstack/system/addon-utils");
 //#region src/recorder/event-capture.ts
 function markerFromMotion(data, pad) {
 	if (!data.detected) return null;
@@ -6225,6 +6226,7 @@ Object.freeze({
 		"listProfiles",
 		"listRuntimeNodes"
 	],
+	"load-contribution": ["list"],
 	"log-channels": ["list"],
 	"log-destination": ["query"],
 	"login-method": ["getLoginMethods"],
@@ -8785,6 +8787,12 @@ var SegmentWriter = class {
 	startedAt = 0;
 	exitWait = null;
 	resolveExit = null;
+	/**
+	* The cost claim for the CURRENT ffmpeg generation. Taken in `start()` and
+	* released in `onTermination()` — the two edges of one process, so a restart
+	* storm cannot accumulate claims for children that are already gone.
+	*/
+	costClaim = require_node.NO_COST_CLAIM;
 	constructor(cfg, deps) {
 		this.cfg = cfg;
 		this.deps = deps;
@@ -8798,6 +8806,7 @@ var SegmentWriter = class {
 			this.resolveExit = resolve;
 		});
 		this.startedAt = Date.now();
+		this.costClaim = this.deps.claimCost?.(proc.pid) ?? require_node.NO_COST_CLAIM;
 		const stderrTail = [];
 		proc.stderr?.on("data", (chunk) => {
 			const text = chunk instanceof Buffer ? chunk.toString("utf8") : String(chunk);
@@ -8839,6 +8848,8 @@ var SegmentWriter = class {
 	* recording one camera must be greppable by that camera.
 	*/
 	onTermination(termination, stderrTail) {
+		this.costClaim.release();
+		this.costClaim = require_node.NO_COST_CLAIM;
 		this.resolveExit?.();
 		this.resolveExit = null;
 		this.proc = null;
@@ -10195,6 +10206,12 @@ var RecordingController = class {
 			spawn: this.deps.spawn,
 			logger: deviceLog,
 			deviceId,
+			claimCost: (pid) => this.deps.costRegistry?.claim({
+				role: "recording",
+				deviceId,
+				unit: `${deviceId}/${profile}`,
+				pid
+			}) ?? require_node.NO_COST_CLAIM,
 			onGaveUp: () => {
 				this.recoverWriterGaveUp(deviceId, profile);
 			},
@@ -12418,6 +12435,16 @@ function isSegmentStoreLogExtras(extras) {
 }
 var RecorderV2Addon = class extends require_dist.BaseAddon {
 	nodeId = "hub";
+	/**
+	* The children this addon started, claimed at the spawn site and released at
+	* their exit. It is what `load-contribution` reports: the recorder knows it
+	* ran an ffmpeg for camera 615 profile `high`, so nobody else has to work it
+	* out from a process table.
+	*
+	* One registry per PROCESS, and it dies with the process — which is correct,
+	* because those children were this process's children.
+	*/
+	costRegistry = new require_node.ChildCostRegistry();
 	/** True when THIS node is the designated recording node (`recordingNodeId`).
 	*  Every other node stays fully inert — registers no providers, serves no
 	*  playback, runs no controller. Resolved in `onInitialize`. */
@@ -12764,6 +12791,7 @@ var RecorderV2Addon = class extends require_dist.BaseAddon {
 			placeProfile: (deviceId, profile) => this.placeProfile(deviceId, profile),
 			onPlacementTick: (deviceIds) => this.recomputePlacement(deviceIds),
 			spawn: node_child_process.spawn,
+			costRegistry: this.costRegistry,
 			segmentSeconds: this.config.segmentSeconds,
 			watchIntervalMs: this.config.watchIntervalMs,
 			...consumerHostname !== void 0 ? { consumerHostname } : {},
@@ -12944,7 +12972,7 @@ var RecorderV2Addon = class extends require_dist.BaseAddon {
 				source: this.calendar,
 				mfraFor: (deviceId, profile, startMs) => this.mfraTables.get(deviceId, profile, startMs),
 				onLog: (msg, meta) => this.ctx.logger.debug(msg, { meta })
-			}, require_addon_utils.createFileDataPlaneHandler({ getRoots: () => this.playbackRoots() }));
+			}, (0, _camstack_system_addon_utils.createFileDataPlaneHandler)({ getRoots: () => this.playbackRoots() }));
 			const served = await this.ctx.dataPlane?.serve({
 				prefix: PLAYBACK_PREFIX,
 				access: "authenticated",
@@ -13012,6 +13040,10 @@ var RecorderV2Addon = class extends require_dist.BaseAddon {
 				{
 					capability: require_dist.recordingExportCapability,
 					provider: exportProvider
+				},
+				{
+					capability: require_dist.loadContributionCapability,
+					provider: { list: () => this.costRegistry.contributions() }
 				}
 			],
 			customActions: recorderDebugActions,
@@ -13784,11 +13816,11 @@ var RecorderV2Addon = class extends require_dist.BaseAddon {
 			return;
 		}
 		const baseHeaders = {
-			"content-type": require_addon_utils.contentTypeFor(absPath),
+			"content-type": (0, _camstack_system_addon_utils.contentTypeFor)(absPath),
 			"accept-ranges": "bytes",
 			"cache-control": "no-cache"
 		};
-		const range = require_addon_utils.parseRangeHeader(req.headers.range, size);
+		const range = (0, _camstack_system_addon_utils.parseRangeHeader)(req.headers.range, size);
 		const servesFinalByte = range ? range.end === size - 1 : true;
 		const recordDownloadOnFinish = () => {
 			if (req.method !== "GET" || !servesFinalByte) return;