@camstack/addon-pipeline 1.2.218 → 1.2.220

package/dist/{segment-demux-js-D7bjzY8M.js → segment-demux-js-CZefXDLx.js}

@@ -1,7 +1,8 @@
-const require_dist = require("./dist-BbvtiBNc.js");
+const require_chunk = require("./chunk-emK7D4bc.js");
+const require_dist = require("./dist-ByPsWlTa.js");
 let node_child_process = require("node:child_process");
 //#region ../../node_modules/mp4box/dist/mp4box.all.js
-var require_mp4box_all = /* @__PURE__ */ require_dist.__commonJSMin(((exports) => {
+var require_mp4box_all = /* @__PURE__ */ require_chunk.__commonJSMin(((exports) => {
 	var Log = (function() {
 		var start = /* @__PURE__ */ new Date();
 		var LOG_LEVEL_ERROR = 4;
@@ -6569,7 +6570,7 @@ var require_mp4box_all = /* @__PURE__ */ require_dist.__commonJSMin(((exports) =
 }));
 //#endregion
 //#region src/recorder/scrub/fmp4-keyframes.ts
-var import_mp4box_all = /* @__PURE__ */ require_dist.__toESM(require_mp4box_all());
+var import_mp4box_all = /* @__PURE__ */ require_chunk.__toESM(require_mp4box_all());
 /**
 * Normalize an RFC 6381 codec string for WebCodecs HEVC. Apple/WebKit
 * WebCodecs only accepts the `hvc1.*` fourcc — a `hev1.*` string (what mp4box

package/dist/session-decode/decode-worker-child.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_worker_protocol = require("../worker-protocol-C4rh5uiS.js");
-const require_lazy_sharp = require("../lazy-sharp-L9Lcr62v.js");
+const require_worker_protocol = require("../worker-protocol-B2MfQLlu.js");
+const require_lazy_sharp = require("../lazy-sharp-BuwKlQLR.js");
 //#region src/session-decode/color-conversion.ts
 /**
 * Explicit YUV→RGB colorspace/range resolution for the session-decode worker.
@@ -1602,48 +1602,68 @@ var NATIVE_RING_CAP = (() => {
 	return Math.min(4, Math.max(0, Math.floor(raw)));
 })();
 /**
-* The three native-lease knobs in force for THIS worker, resolved once at
-* module load (the lease store and the demand gate are constructed with the
-* worker instance, before the first `start` message).
-*
-* These are **operator settings**, not env vars: they live on
-* `pipeline-orchestrator`'s cluster-wide globals, the pipeline-runner reads them
-* over the hub-routed `addon-settings` cap, and it injects the ones the operator
-* SET into this child's environment at fork time. Precedence is
-* `setting > env > default` — the `CAMSTACK_SESSION_NATIVE_LEASE_*` vars survive
-* as an emergency/dev override for knobs the operator has not touched. The
-* resolved values AND their source are logged once per worker in
-* {@link DecodeWorkerChild.handleStart}. Full contract:
-* `native-lease-config.ts` and `packages/types/src/pipeline/native-lease.ts`.
-*/
-var NATIVE_LEASE_KNOBS = require_worker_protocol.resolveNativeLeaseKnobs(process.env);
-/**
-* Hard RAM budget (bytes) for the native-frame HOLD store — the OOM ceiling,
-* and since 2026-08-13 nothing else. {@link NATIVE_LEASE_HOLD_FRAMES} is what
-* decides how much is held; this is the number above which something is wrong.
-* `0` DISABLES the hold and falls back to the {@link NATIVE_RING_CAP} GPU ring.
-*/
-var NATIVE_LEASE_BUDGET_BYTES = NATIVE_LEASE_KNOBS.values.budgetMb * 1024 * 1024;
-/**
-* How many delivered frames are HELD at once, each waiting for its own
-* detection result. The ordinary exit is `cutTiles` / `releaseNativeLease`; this
-* bound only stops a runner that stopped answering from pinning RAM, and every
-* frame it drops is counted (`holdOverflow`).
-*/
-var NATIVE_LEASE_HOLD_FRAMES = NATIVE_LEASE_KNOBS.values.holdFrames;
-/**
-* Hard RAM budget (bytes) for the SUBJECT TILE store — what survives a frame.
-* `0` turns tiles off and restores the pre-2026-08-13 miss profile.
-*/
-var NATIVE_TILE_BUDGET_BYTES = NATIVE_LEASE_KNOBS.values.tileBudgetMb * 1024 * 1024;
-/**
-* Hard RAM budget (bytes) for the SCENE TILE store — one JPEG of the whole
-* native frame per detection-bearing frame, which is the only thing that can
-* answer a FULL-FRAME native request after the hold ends. Separate from the
-* subject budget so a key frame can never evict a face tile. `0` disables the
-* rung. See `scene-tile.ts` for the measurements that sized it.
-*/
-var NATIVE_SCENE_BUDGET_BYTES = NATIVE_LEASE_KNOBS.values.sceneBudgetMb * 1024 * 1024;
+* The native-lease knobs — hold depth, hold RAM ceiling, demand window,
+* admission mode, subject-tile budget, scene-tile budget — ARRIVE ON `start`
+* (`WorkerRequest.lease`, D453). They are **operator settings** living on
+* `pipeline-orchestrator`'s cluster-wide globals; the pipeline-runner reads
+* them and resolves `setting > env > default` in ITS process
+* (`native-lease-config.ts`), and this worker builds its stores from the
+* resolved values in {@link DecodeWorkerChild.handleStart}, before the first
+* packet. Until then it retains nothing ({@link UNSTARTED_LEASE_KNOBS}).
+*
+* Nothing here reads the environment for them any more. The child used to,
+* from `*_SETTING` vars the parent wrote at fork — which needed the Zod schemas
+* (the whole `@camstack/types` index) inside this bundle and cost every fork
+* ~130 ms and ~140 MB, measured; and it bound a worker to the knobs it was
+* FORKED with, which a pre-forked worker (`decode-worker-pool.ts`) cannot be.
+* The values AND their sources are logged once per session at `start`.
+*
+* What each knob means, in the store it sizes:
+* - `budgetMb` — hard RAM ceiling (bytes) for the native-frame HOLD store, the
+*   OOM ceiling and since 2026-08-13 nothing else; `holdFrames` is what decides
+*   how much is held. `0` DISABLES the hold and falls back to the
+*   {@link NATIVE_RING_CAP} GPU ring.
+* - `holdFrames` — how many delivered frames are HELD at once, each waiting for
+*   its own detection result. The ordinary exit is `cutTiles` /
+*   `releaseNativeLease`; this bound only stops a runner that stopped answering
+*   from pinning RAM, and every frame it drops is counted (`holdOverflow`).
+* - `tileBudgetMb` — the SUBJECT TILE store, what survives a frame. `0` turns
+*   tiles off and restores the pre-2026-08-13 miss profile.
+* - `sceneBudgetMb` — the SCENE TILE store, one JPEG of the whole native frame
+*   per detection-bearing frame, the only thing that can answer a FULL-FRAME
+*   request after the hold ends. Separate from the subject budget so a key
+*   frame can never evict a face tile. `0` disables the rung.
+* - `activityMs` — the {@link LeaseActivityGate} demand window: eager per-frame
+*   native downloads run only within it. `0` disables the GATE (always-on eager
+*   capture) — it does not disable retention.
+*/
+var MB = 1024 * 1024;
+/**
+* What a worker holds BEFORE a session claims it: nothing. Hold off (`budgetMb`
+* 0 routes to the GPU ring, whose cap is env-only), tiles off, scenes off, the
+* gate open only because there is nothing behind it to open. Not the shipped
+* defaults on purpose — those live in `@camstack/types`, which this bundle no
+* longer carries, and a pre-forked worker that silently held the defaults would
+* be a worker with a configuration nobody handed it.
+*/
+var UNSTARTED_LEASE_KNOBS = {
+	values: {
+		holdFrames: 1,
+		budgetMb: 0,
+		activityMs: 0,
+		admission: "inferred",
+		tileBudgetMb: 0,
+		sceneBudgetMb: 0
+	},
+	sources: {
+		holdFrames: "default",
+		budgetMb: "default",
+		activityMs: "default",
+		admission: "default",
+		tileBudgetMb: "default",
+		sceneBudgetMb: "default"
+	}
+};
 /**
 * How long a subject tile is served. A TTL is honest HERE and dishonest on the
 * hold: nothing is waiting on a tile, it is speculative retention against a
@@ -1690,13 +1710,6 @@ var TILE_CUT_WAIT_MS = (() => {
 	const raw = Number(process.env["CAMSTACK_SESSION_TILE_CUT_WAIT_MS"]);
 	return Number.isFinite(raw) && raw >= 0 ? Math.floor(raw) : 500;
 })();
-/**
-* Demand window (ms) for the lease-capture {@link LeaseActivityGate}: eager
-* per-frame native downloads run only within this window of the last
-* native-crop request (or dial start). `0` disables the GATE (legacy always-on
-* eager capture) — it does not disable retention. Default 15000.
-*/
-var NATIVE_LEASE_ACTIVITY_WINDOW_MS = NATIVE_LEASE_KNOBS.values.activityMs;
 /** How many early-withdrawn frame ids the worker remembers for the miss line. */
 var UNMARKED_MEMORY = 256;
 /**
@@ -1818,13 +1831,47 @@ async function importNodeAv(bareSpecifier) {
 		throw bareErr;
 	}
 }
+var _navLoading = null;
+var _constsLoading = null;
 async function getNodeAv() {
-	if (!_nav) _nav = await importNodeAv("node-av");
-	return _nav;
+	if (_nav) return _nav;
+	_navLoading ??= importNodeAv("node-av").then((mod) => {
+		_nav = mod;
+		return mod;
+	});
+	try {
+		return await _navLoading;
+	} catch (err) {
+		_navLoading = null;
+		throw err;
+	}
 }
 async function getConstants() {
-	if (!_consts) _consts = await importNodeAv("node-av/constants");
-	return _consts;
+	if (_consts) return _consts;
+	_constsLoading ??= importNodeAv("node-av/constants").then((mod) => {
+		_consts = mod;
+		return mod;
+	});
+	try {
+		return await _constsLoading;
+	} catch (err) {
+		_constsLoading = null;
+		throw err;
+	}
+}
+/** The HOLD store, sized from one session's knobs. */
+function buildLeaseStore(lease) {
+	return new NativeLeaseStore({
+		budgetBytes: lease.values.budgetMb * MB,
+		maxFrames: lease.values.holdFrames
+	});
+}
+/** A TILE store (subject or scene) under `budgetMb`, on the shared tile TTL. */
+function buildTileStore(budgetMb) {
+	return new NativeTileStore({
+		budgetBytes: budgetMb * MB,
+		ttlMs: NATIVE_TILE_TTL_MS
+	});
 }
 function errMessage(err) {
 	if (err instanceof Error) return err.message;
@@ -2011,20 +2058,14 @@ var DecodeWorkerChild = class {
 	* DOWNLOADED (system-memory) frames, retaining a large window has no VAAPI
 	* surface-pool starvation risk. Cleared on every re-dial + teardown.
 	*/
-	leaseStore = new NativeLeaseStore({
-		budgetBytes: NATIVE_LEASE_BUDGET_BYTES,
-		maxFrames: NATIVE_LEASE_HOLD_FRAMES
-	});
+	leaseStore = buildLeaseStore(UNSTARTED_LEASE_KNOBS);
 	/**
 	* What SURVIVES a held frame: one compressed native tile per subject, cut at
 	* the instant the frame's detection result arrived. Every late native crop
 	* that the hold can no longer serve is served from here — which measurement
 	* says is the ordinary case, not the exception. See `native-tile-store.ts`.
 	*/
-	tileStore = new NativeTileStore({
-		budgetBytes: NATIVE_TILE_BUDGET_BYTES,
-		ttlMs: NATIVE_TILE_TTL_MS
-	});
+	tileStore = buildTileStore(UNSTARTED_LEASE_KNOBS.values.tileBudgetMb);
 	/**
 	* What survives a held frame for a FULL-FRAME request: one JPEG of the whole
 	* native raster, cut in the SAME synchronous read phase as the subject tiles.
@@ -2034,10 +2075,7 @@ var DecodeWorkerChild = class {
 	* key frames evict the face/plate tiles the recognisers live on. Two stores
 	* make starving that tier impossible rather than unlikely.
 	*/
-	sceneStore = new NativeTileStore({
-		budgetBytes: NATIVE_SCENE_BUDGET_BYTES,
-		ttlMs: NATIVE_TILE_TTL_MS
-	});
+	sceneStore = buildTileStore(UNSTARTED_LEASE_KNOBS.values.sceneBudgetMb);
 	/** Tiles cut / served / refused-for-containment, on the throughput line. */
 	tilesCut = 0;
 	tileHits = 0;
@@ -2081,7 +2119,7 @@ var DecodeWorkerChild = class {
 	* per-frame native-res GPU→RAM download (the N100 saturation source) stops
 	* on cameras nothing is cropping. See `lease-activity-gate.ts`.
 	*/
-	leaseGate = new LeaseActivityGate(NATIVE_LEASE_ACTIVITY_WINDOW_MS);
+	leaseGate = new LeaseActivityGate(UNSTARTED_LEASE_KNOBS.values.activityMs);
 	/**
 	* WHICH delivered frames are worth a native lease — the runner marks the ones
 	* it admitted to inference (`markInferred`), and in `inferred` mode only
@@ -2090,7 +2128,14 @@ var DecodeWorkerChild = class {
 	* filter rests on is measured on live traffic rather than argued. See
 	* `lease-admission-ledger.ts`.
 	*/
-	admission = new LeaseAdmissionLedger({ mode: NATIVE_LEASE_KNOBS.values.admission });
+	admission = new LeaseAdmissionLedger({ mode: UNSTARTED_LEASE_KNOBS.values.admission });
+	/**
+	* The knobs this session runs under — `null` until `start` hands them over.
+	* The stores above are REBUILT from them at that moment (they are empty then:
+	* nothing is captured before a dial), and never again: a knob that changes
+	* after the first frame is a knob with two values during a session.
+	*/
+	lease = null;
 	/**
 	* DEDICATED full-frame GPU→system download filtergraph
 	* (`scale_<be>=iw:ih,hwdownload,format=nv12,format=yuv420p`) used ONLY to
@@ -2251,7 +2296,7 @@ var DecodeWorkerChild = class {
 		}
 		switch (message.kind) {
 			case "start":
-				this.handleStart(message.source, message.opts);
+				this.handleStart(message.source, message.opts, message.lease);
 				return;
 			case "pull":
 				this.handlePull();
@@ -2331,7 +2376,7 @@ var DecodeWorkerChild = class {
 		const skipped = this.framesSkipped + this.frames.droppedCount;
 		const rssMb = Math.round(process.memoryUsage().rss / 1048576);
 		const ageS = Math.round((now - this.startedAt) / 1e3);
-		this.emitStderr(`session-decode metrics {framesDecoded:${this.framesDecoded}, framesSkipped:${skipped}, deliveredFps:${deliveredFps}, nativeCropHits:${this.nativeCropHits}, nativeCropMisses:${this.nativeCropMisses}, leaseOffered:${this.admission.offered}, leaseAdmitted:${this.admission.admitted}, leaseMarks:${this.admission.marks}, leaseUnmarkedCrops:${this.admission.unmarkedCrops}, leaseAdmission:${NATIVE_LEASE_KNOBS.values.admission}, leaseMb:${Math.round(this.leaseStore.totalBytes / 1048576)}, leaseFrames:${this.leaseStore.size}, holdOverflow:${this.leaseStore.overflowCount}, leaseReleased:${this.leaseReleased}, leaseReleaseMisses:${this.leaseReleaseMisses}, leaseReleasedEarly:${this.leaseReleasedEarly}, tilesCut:${this.tilesCut}, tileHits:${this.tileHits}, tileMisses:${this.tileMisses}, tileCutFailures:${this.tileCutFailures}, tileMissesResolvedByWait:${this.tileMissesResolvedByWait}, tileWaitTimeouts:${this.tileWaitTimeouts}, cutLatencyMsP50:${formatLatency(this.pendingCuts.latencyMs(50))}, cutLatencyMsP95:${formatLatency(this.pendingCuts.latencyMs(95))}, cutsInFlight:${this.pendingCuts.inFlight}, tileMb:${Math.round(this.tileStore.totalBytes / 1048576)}, tileFrames:${this.tileStore.frameCount}, scenesCut:${this.scenesCut}, sceneHits:${this.sceneHits}, sceneRefused:${this.sceneRefused}, sceneUnclassified:${this.sceneUnclassified}, sceneEvicted:${this.sceneStore.evictedCount}, sceneMb:${Math.round(this.sceneStore.totalBytes / 1048576)}, sceneFrames:${this.sceneStore.frameCount}, rssMb:${rssMb}, ageS:${ageS}}${final ? " (final)" : ""}\n`);
+		this.emitStderr(`session-decode metrics {framesDecoded:${this.framesDecoded}, framesSkipped:${skipped}, deliveredFps:${deliveredFps}, nativeCropHits:${this.nativeCropHits}, nativeCropMisses:${this.nativeCropMisses}, leaseOffered:${this.admission.offered}, leaseAdmitted:${this.admission.admitted}, leaseMarks:${this.admission.marks}, leaseUnmarkedCrops:${this.admission.unmarkedCrops}, leaseAdmission:${this.lease?.values.admission ?? "unstarted"}, leaseMb:${Math.round(this.leaseStore.totalBytes / 1048576)}, leaseFrames:${this.leaseStore.size}, holdOverflow:${this.leaseStore.overflowCount}, leaseReleased:${this.leaseReleased}, leaseReleaseMisses:${this.leaseReleaseMisses}, leaseReleasedEarly:${this.leaseReleasedEarly}, tilesCut:${this.tilesCut}, tileHits:${this.tileHits}, tileMisses:${this.tileMisses}, tileCutFailures:${this.tileCutFailures}, tileMissesResolvedByWait:${this.tileMissesResolvedByWait}, tileWaitTimeouts:${this.tileWaitTimeouts}, cutLatencyMsP50:${formatLatency(this.pendingCuts.latencyMs(50))}, cutLatencyMsP95:${formatLatency(this.pendingCuts.latencyMs(95))}, cutsInFlight:${this.pendingCuts.inFlight}, tileMb:${Math.round(this.tileStore.totalBytes / 1048576)}, tileFrames:${this.tileStore.frameCount}, scenesCut:${this.scenesCut}, sceneHits:${this.sceneHits}, sceneRefused:${this.sceneRefused}, sceneUnclassified:${this.sceneUnclassified}, sceneEvicted:${this.sceneStore.evictedCount}, sceneMb:${Math.round(this.sceneStore.totalBytes / 1048576)}, sceneFrames:${this.sceneStore.frameCount}, rssMb:${rssMb}, ageS:${ageS}}${final ? " (final)" : ""}\n`);
 		this.lastMetricsAt = now;
 		this.lastDeliveredSnapshot = this.framesDelivered;
 		if (!this.warnedLarge && rssMb >= WORKER_RSS_WARN_MB) {
@@ -2339,14 +2384,20 @@ var DecodeWorkerChild = class {
 			this.emitStderr(`decode-worker-child: WORKER IS LARGE — rssMb=${rssMb} ageS=${ageS} framesDecoded=${this.framesDecoded}. Siblings normally recycle in ~30s; a worker this size at this age is how the host ran out of memory on 2026-08-05.\n`);
 		}
 	}
-	handleStart(source, opts) {
+	handleStart(source, opts, lease) {
 		if (this.started) {
 			this.emitStderr("decode-worker-child: duplicate start ignored\n");
 			return;
 		}
 		this.started = true;
 		this.deviceId = source.deviceId;
-		this.emitStderr(`decode-worker-child: ${require_worker_protocol.formatNativeLeaseKnobs(NATIVE_LEASE_KNOBS)}\n`, "info");
+		this.lease = lease;
+		this.leaseStore = buildLeaseStore(lease);
+		this.tileStore = buildTileStore(lease.values.tileBudgetMb);
+		this.sceneStore = buildTileStore(lease.values.sceneBudgetMb);
+		this.leaseGate = new LeaseActivityGate(lease.values.activityMs);
+		this.admission = new LeaseAdmissionLedger({ mode: lease.values.admission });
+		this.emitStderr(`decode-worker-child: ${require_worker_protocol.formatNativeLeaseKnobs(lease)}\n`, "info");
 		this.sessionFormat = opts.format ?? "rgb";
 		this.minIntervalMs = opts.fps && opts.fps > 0 ? 1e3 / opts.fps : 0;
 		this.preRollMs = opts.preRollMs && opts.preRollMs > 0 ? opts.preRollMs : 0;
@@ -2400,7 +2451,7 @@ var DecodeWorkerChild = class {
 				reservedFrameId: this.frames.reservedFrameId,
 				marked: this.admission.isMarked(frameId),
 				leaseFrames: this.leaseStore.size,
-				holdFrames: NATIVE_LEASE_HOLD_FRAMES,
+				holdFrames: this.lease?.values.holdFrames ?? UNSTARTED_LEASE_KNOBS.values.holdFrames,
 				holdOverflow: this.leaseStore.overflowCount,
 				...this.unmarkedBy.has(frameId) ? { unmarkedBy: this.unmarkedBy.get(frameId) } : {}
 			}), frameId);
@@ -3562,6 +3613,35 @@ var DecodeWorkerChild = class {
 		this.demuxer?.[Symbol.dispose]?.();
 		this.demuxer = null;
 	}
+	/**
+	* Load the native modules BEFORE any session, then say so. This is what a
+	* pre-forked worker in the zygote pool (`decode-worker-pool.ts`) spends its
+	* idle on — node-av's `dlopen` measured ~50 ms on the hub, and after D453
+	* removed the types chunk it is the largest piece of a cold boot that is left.
+	* It touches no stream, no demuxer, no GPU: a warm worker costs RSS and
+	* nothing else, which is the property the pool exists for and the exact
+	* inverse of the keep-warm D282 measured.
+	*
+	* A failure is reported, not fatal: `start` re-runs the same import and
+	* fails the session the way it always has, so a node where node-av cannot
+	* load is no worse off than before — it just is not warm.
+	*/
+	async warm() {
+		try {
+			await getNodeAv();
+			await getConstants();
+			this.send({
+				kind: "ready",
+				warm: true
+			});
+		} catch (err) {
+			this.emitStderr(`decode-worker-child: native module preload failed — ${errMessage(err)}\n`, "warn");
+			this.send({
+				kind: "ready",
+				warm: false
+			});
+		}
+	}
 	send(reply) {
 		process.send?.(reply);
 	}
@@ -3619,6 +3699,7 @@ require_lazy_sharp.setSharpWarnSink((message) => {
 process.on("message", (message) => {
 	worker.handleMessage(message);
 });
+worker.warm();
 process.on("disconnect", () => {
 	worker.teardown();
 	process.exit(0);