@camstack/addon-pipeline 1.2.203 → 1.2.204

package/dist/recorder/index.js

@@ -11498,11 +11498,13 @@ function weightOfUnmeasured(demands) {
 	return measured.length % 2 === 1 ? measured[mid] : (measured[mid - 1] + measured[mid]) / 2;
 }
 /** Normalised weight per location: headroom share, or an even split when no
-*  location reports any headroom (nothing is known yet — never divide by 0). */
+*  location reports any headroom (nothing is known yet — never divide by 0).
+*  An UNMEASURABLE location (`headroomBytes: null`) contributes nothing and
+*  weighs nothing: it keeps what it already holds and attracts no new work. */
 function weightsFor(pool) {
-	const total = pool.reduce((sum, c) => sum + Math.max(0, c.headroomBytes), 0);
+	const total = pool.reduce((sum, c) => sum + Math.max(0, c.headroomBytes ?? 0), 0);
 	const weights = /* @__PURE__ */ new Map();
-	for (const c of pool) weights.set(c.locationId, total > 0 ? Math.max(0, c.headroomBytes) / total : 1 / pool.length);
+	for (const c of pool) weights.set(c.locationId, total > 0 ? Math.max(0, c.headroomBytes ?? 0) / total : 1 / pool.length);
 	return weights;
 }
 /** The location with the largest unmet share of the target, ties broken by the
@@ -12036,6 +12038,9 @@ var PlacementService = class {
 	verified = /* @__PURE__ */ new Set();
 	/** Locations the probe declared unusable — re-probed after a change. */
 	unusable = /* @__PURE__ */ new Set();
+	/** Locations whose capacity could not be read, by reason. One line per
+	*  distinct fault (this is on the 30 s tick) and one when it clears. */
+	capacityFaults = /* @__PURE__ */ new Map();
 	/** Cameras that have already announced "every location is unusable". One line
 	*  per camera per episode: the fault is asked per-camera, and repeating it per
 	*  attach is the noise this state exists to end. */
@@ -12238,7 +12243,7 @@ var PlacementService = class {
 		const byId = new Map(candidates.map((c) => [c.locationId, c.headroomBytes]));
 		return pool.map((location) => {
 			const headroomBytes = byId.get(location.id);
-			return headroomBytes === void 0 ? location : {
+			return headroomBytes === void 0 || headroomBytes === null ? location : {
 				...location,
 				headroomBytes
 			};
@@ -12281,7 +12286,7 @@ var PlacementService = class {
 			return NO_PLAN;
 		}
 		const current = new Map(Object.entries(blob.assignments));
-		const evacuate = new Set(candidates.filter((c) => c.headroomBytes <= 0).map((c) => c.locationId));
+		const evacuate = new Set(candidates.filter((c) => c.headroomBytes !== null && c.headroomBytes <= 0).map((c) => c.locationId));
 		for (const location of pool) if (location.readOnly) evacuate.add(location.id);
 		const plan = planPlacement({
 			candidates,
@@ -12441,8 +12446,20 @@ var PlacementService = class {
 	* `min(free − minFree floor, maxUsedGb − used)`, clamped at zero: the first
 	* term is the per-location free-space guard the storage pressure manager also
 	* enforces, the second an optional operator cap on what recordings may take.
-	* Nothing measurable → zero headroom everywhere, which the planner reads as
-	* "no signal" and splits evenly rather than pretending to know.
+	*
+	* **Nothing measurable is `null`, not zero.** `readLocationCapacity` models
+	* its failure — a NAS that stops answering `statfs` returns nulls AND the
+	* reason. This method used to discard the reason and fold the whole case into
+	* `headroomBytes: 0`, which `recompute` reads as "at its limit" and puts in
+	* `evacuate`: one failed `statfs` moved every camera off a healthy disk, and
+	* not one line was written about it. (The comment that used to sit here
+	* claimed the opposite — "no signal → the planner splits evenly" — which is
+	* true of the PLANNER's weights and was never true of the evacuation set.)
+	*
+	* So an unmeasurable location gets `null`, which is not evacuated and wins no
+	* new work, and the reason is logged against the location — once per distinct
+	* fault, since this runs on the 30 s placement tick, plus one line when it
+	* recovers.
 	*/
 	async candidatesFor(pool) {
 		const out = [];
@@ -12450,7 +12467,8 @@ var PlacementService = class {
 			if (location.readOnly) continue;
 			const capacity = await this.deps.capacityFor?.(location) ?? {
 				availableBytes: null,
-				totalBytes: null
+				totalBytes: null,
+				error: "no capacity source is wired on this node"
 			};
 			const limits = [];
 			if (capacity.availableBytes !== null && capacity.totalBytes !== null) {
@@ -12461,15 +12479,45 @@ var PlacementService = class {
 				const used = await this.deps.usedOnLocation?.(location.id) ?? 0;
 				limits.push(require_dist.gbToBytes(location.maxUsedGb) - used);
 			}
+			const headroomBytes = limits.length === 0 ? null : Math.max(0, Math.min(...limits));
+			this.reportCapacitySignal(location, headroomBytes, capacity.error);
 			out.push({
 				locationId: location.id,
 				type: location.type,
-				headroomBytes: limits.length === 0 ? 0 : Math.max(0, Math.min(...limits))
+				headroomBytes
 			});
 		}
 		return out;
 	}
 	/**
+	* Say it out loud when a location's capacity cannot be read, and say it again
+	* when it comes back. Deduplicated by reason because `candidatesFor` runs on
+	* every placement tick — a line per tick is a line nobody reads, and no line
+	* at all is what let a dead NAS look like a full one.
+	*/
+	reportCapacitySignal(location, headroomBytes, error) {
+		const previous = this.capacityFaults.get(location.id);
+		if (headroomBytes !== null) {
+			if (previous !== void 0) {
+				this.capacityFaults.delete(location.id);
+				this.deps.logger.info("recorder placement: capacity readable again — this location is a write target once more", { meta: {
+					locationId: location.id,
+					root: location.root,
+					previousError: previous
+				} });
+			}
+			return;
+		}
+		const reason = error ?? "the capacity read returned no bytes and no reason";
+		if (previous === reason) return;
+		this.capacityFaults.set(location.id, reason);
+		this.deps.logger.warn("recorder placement: capacity UNMEASURABLE — headroom is unknown, so this location is neither evacuated nor given new cameras", { meta: {
+			locationId: location.id,
+			root: location.root,
+			error: reason
+		} });
+	}
+	/**
 	* Volume-check the chosen location, failing the assignment over to a sibling
 	* when the bytes under its root are not the bytes we wrote. The probe runs
 	* ONCE per location per location-set generation — it is a claim, not a poll.
@@ -18304,10 +18352,10 @@ var RecorderV2Addon = class extends require_dist.BaseAddon {
 		const [assignments, candidates] = await Promise.all([placement.currentAssignments(), placement.candidates()]);
 		return {
 			assignments,
-			headroom: candidates.map((candidate) => ({
+			headroom: candidates.flatMap((candidate) => candidate.headroomBytes === null ? [] : [{
 				locationId: candidate.locationId,
 				headroomBytes: candidate.headroomBytes
-			}))
+			}])
 		};
 	}
 	/**

package/dist/recorder/index.mjs

@@ -11492,11 +11492,13 @@ function weightOfUnmeasured(demands) {
 	return measured.length % 2 === 1 ? measured[mid] : (measured[mid - 1] + measured[mid]) / 2;
 }
 /** Normalised weight per location: headroom share, or an even split when no
-*  location reports any headroom (nothing is known yet — never divide by 0). */
+*  location reports any headroom (nothing is known yet — never divide by 0).
+*  An UNMEASURABLE location (`headroomBytes: null`) contributes nothing and
+*  weighs nothing: it keeps what it already holds and attracts no new work. */
 function weightsFor(pool) {
-	const total = pool.reduce((sum, c) => sum + Math.max(0, c.headroomBytes), 0);
+	const total = pool.reduce((sum, c) => sum + Math.max(0, c.headroomBytes ?? 0), 0);
 	const weights = /* @__PURE__ */ new Map();
-	for (const c of pool) weights.set(c.locationId, total > 0 ? Math.max(0, c.headroomBytes) / total : 1 / pool.length);
+	for (const c of pool) weights.set(c.locationId, total > 0 ? Math.max(0, c.headroomBytes ?? 0) / total : 1 / pool.length);
 	return weights;
 }
 /** The location with the largest unmet share of the target, ties broken by the
@@ -12030,6 +12032,9 @@ var PlacementService = class {
 	verified = /* @__PURE__ */ new Set();
 	/** Locations the probe declared unusable — re-probed after a change. */
 	unusable = /* @__PURE__ */ new Set();
+	/** Locations whose capacity could not be read, by reason. One line per
+	*  distinct fault (this is on the 30 s tick) and one when it clears. */
+	capacityFaults = /* @__PURE__ */ new Map();
 	/** Cameras that have already announced "every location is unusable". One line
 	*  per camera per episode: the fault is asked per-camera, and repeating it per
 	*  attach is the noise this state exists to end. */
@@ -12232,7 +12237,7 @@ var PlacementService = class {
 		const byId = new Map(candidates.map((c) => [c.locationId, c.headroomBytes]));
 		return pool.map((location) => {
 			const headroomBytes = byId.get(location.id);
-			return headroomBytes === void 0 ? location : {
+			return headroomBytes === void 0 || headroomBytes === null ? location : {
 				...location,
 				headroomBytes
 			};
@@ -12275,7 +12280,7 @@ var PlacementService = class {
 			return NO_PLAN;
 		}
 		const current = new Map(Object.entries(blob.assignments));
-		const evacuate = new Set(candidates.filter((c) => c.headroomBytes <= 0).map((c) => c.locationId));
+		const evacuate = new Set(candidates.filter((c) => c.headroomBytes !== null && c.headroomBytes <= 0).map((c) => c.locationId));
 		for (const location of pool) if (location.readOnly) evacuate.add(location.id);
 		const plan = planPlacement({
 			candidates,
@@ -12435,8 +12440,20 @@ var PlacementService = class {
 	* `min(free − minFree floor, maxUsedGb − used)`, clamped at zero: the first
 	* term is the per-location free-space guard the storage pressure manager also
 	* enforces, the second an optional operator cap on what recordings may take.
-	* Nothing measurable → zero headroom everywhere, which the planner reads as
-	* "no signal" and splits evenly rather than pretending to know.
+	*
+	* **Nothing measurable is `null`, not zero.** `readLocationCapacity` models
+	* its failure — a NAS that stops answering `statfs` returns nulls AND the
+	* reason. This method used to discard the reason and fold the whole case into
+	* `headroomBytes: 0`, which `recompute` reads as "at its limit" and puts in
+	* `evacuate`: one failed `statfs` moved every camera off a healthy disk, and
+	* not one line was written about it. (The comment that used to sit here
+	* claimed the opposite — "no signal → the planner splits evenly" — which is
+	* true of the PLANNER's weights and was never true of the evacuation set.)
+	*
+	* So an unmeasurable location gets `null`, which is not evacuated and wins no
+	* new work, and the reason is logged against the location — once per distinct
+	* fault, since this runs on the 30 s placement tick, plus one line when it
+	* recovers.
 	*/
 	async candidatesFor(pool) {
 		const out = [];
@@ -12444,7 +12461,8 @@ var PlacementService = class {
 			if (location.readOnly) continue;
 			const capacity = await this.deps.capacityFor?.(location) ?? {
 				availableBytes: null,
-				totalBytes: null
+				totalBytes: null,
+				error: "no capacity source is wired on this node"
 			};
 			const limits = [];
 			if (capacity.availableBytes !== null && capacity.totalBytes !== null) {
@@ -12455,15 +12473,45 @@ var PlacementService = class {
 				const used = await this.deps.usedOnLocation?.(location.id) ?? 0;
 				limits.push(gbToBytes(location.maxUsedGb) - used);
 			}
+			const headroomBytes = limits.length === 0 ? null : Math.max(0, Math.min(...limits));
+			this.reportCapacitySignal(location, headroomBytes, capacity.error);
 			out.push({
 				locationId: location.id,
 				type: location.type,
-				headroomBytes: limits.length === 0 ? 0 : Math.max(0, Math.min(...limits))
+				headroomBytes
 			});
 		}
 		return out;
 	}
 	/**
+	* Say it out loud when a location's capacity cannot be read, and say it again
+	* when it comes back. Deduplicated by reason because `candidatesFor` runs on
+	* every placement tick — a line per tick is a line nobody reads, and no line
+	* at all is what let a dead NAS look like a full one.
+	*/
+	reportCapacitySignal(location, headroomBytes, error) {
+		const previous = this.capacityFaults.get(location.id);
+		if (headroomBytes !== null) {
+			if (previous !== void 0) {
+				this.capacityFaults.delete(location.id);
+				this.deps.logger.info("recorder placement: capacity readable again — this location is a write target once more", { meta: {
+					locationId: location.id,
+					root: location.root,
+					previousError: previous
+				} });
+			}
+			return;
+		}
+		const reason = error ?? "the capacity read returned no bytes and no reason";
+		if (previous === reason) return;
+		this.capacityFaults.set(location.id, reason);
+		this.deps.logger.warn("recorder placement: capacity UNMEASURABLE — headroom is unknown, so this location is neither evacuated nor given new cameras", { meta: {
+			locationId: location.id,
+			root: location.root,
+			error: reason
+		} });
+	}
+	/**
 	* Volume-check the chosen location, failing the assignment over to a sibling
 	* when the bytes under its root are not the bytes we wrote. The probe runs
 	* ONCE per location per location-set generation — it is a claim, not a poll.
@@ -18298,10 +18346,10 @@ var RecorderV2Addon = class extends BaseAddon {
 		const [assignments, candidates] = await Promise.all([placement.currentAssignments(), placement.candidates()]);
 		return {
 			assignments,
-			headroom: candidates.map((candidate) => ({
+			headroom: candidates.flatMap((candidate) => candidate.headroomBytes === null ? [] : [{
 				locationId: candidate.locationId,
 				headroomBytes: candidate.headroomBytes
-			}))
+			}])
 		};
 	}
 	/**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-pipeline",
-  "version": "1.2.203",
+  "version": "1.2.204",
   "description": "Pipeline bundle — runner, detection, motion, audio + stream broker. Multi-entry npm package shipping pipeline addons under a single bundle.",
   "keywords": [
     "camstack",