@camstack/addon-pipeline 1.2.268 → 1.2.270

package/dist/{dist-Dm1V0nJX.mjs → dist-Cqf-U6EN.mjs}

@@ -5360,7 +5360,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-GU_us3DG.mjs
+//#region ../types/dist/sleep-CiR4z7r9.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -6556,6 +6556,17 @@ var CAM_PROFILE_ORDER = [
 	"mid",
 	"low"
 ];
+/**
+* Which rung a per-camera consumer listens on: an explicit profile, or `auto`.
+*
+* `auto` is a REAL value, not an absent one — it means "resolve it by the rule
+* that consumer owns". It lives beside `CamProfile` because a rung is the only
+* operator-facing way to name a stream: a cam-stream id is broker-internal and
+* moves when a slot is reassigned, so a stored id silently stops meaning what
+* the operator picked. Today's one user is the audio analyser, whose rule is
+* "the lowest AVAILABLE native rung" (D537).
+*/
+var AudioStreamPickSchema = union([CamProfileSchema, literal("auto")]);
 var CamStreamKindSchema = _enum([
 	"pull-rtsp",
 	"pull-rtmp",
@@ -7577,7 +7588,7 @@ function sleep(ms) {
 	return new Promise((resolve) => setTimeout(resolve, Math.max(0, ms)));
 }
 //#endregion
-//#region ../types/dist/canonical-hash-CvL03d3i.mjs
+//#region ../types/dist/canonical-hash-CPK2Dy60.mjs
 var AUDIO_ENCODER_BY_CODEC = {
 	opus: "libopus",
 	aac: "aac",
@@ -7678,16 +7689,29 @@ function resolveStreamMaps(selection) {
 	};
 }
 /** The `-vf` filter args, or `[]` when a consumer `-vf` already claims the slot. */
-function buildVideoFilterArgs(scale, outputArgs, filterGraph) {
+function buildVideoFilterArgs(scale, outputArgs, filterGraph, hwUpload) {
 	if (filterGraph) {
 		if (scale) throw new Error("FfmpegInvocation: video.scale cannot be combined with a filter graph — scale inside the graph instead (the -vf would feed an output the graph already feeds)");
 		if (outputArgs.some((a) => a === "-vf")) throw new Error("FfmpegInvocation: outputArgs carries a -vf while a filter graph feeds the same output — fold the filter into the graph");
 		return [];
 	}
-	if (!scale) return [];
 	if (outputArgs.some((a) => a === "-vf")) return [];
-	if (scale.mode === "exact") return ["-vf", `scale=${scale.width}:${scale.height}`];
-	return ["-vf", `scale='min(${scale.width},iw)':'min(${scale.height},ih)':force_original_aspect_ratio=decrease:force_divisible_by=2`];
+	if (!scale) return hwUpload.length > 0 ? ["-vf", hwUpload] : [];
+	const suffix = hwUpload.length > 0 ? `,${hwUpload}` : "";
+	if (scale.mode === "exact") return ["-vf", `scale=${scale.width}:${scale.height}${suffix}`];
+	return ["-vf", `scale='min(${scale.width},iw)':'min(${scale.height},ih)':force_original_aspect_ratio=decrease:force_divisible_by=2${suffix}`];
+}
+/**
+* The upload filter a hardware encode needs, or `''`.
+*
+* Nothing is uploaded when the DECODE already left the frames on the GPU
+* (`-hwaccel vaapi`): they are surfaces already, and uploading a surface is an
+* error rather than a no-op.
+*/
+function resolveHwUpload(device, decodeHwAccel) {
+	if (device === void 0) return "";
+	if (!isSoftwareDecode(decodeHwAccel)) return "";
+	return "format=nv12,hwupload";
 }
 /** Rate-control args for an encode plan. */
 function buildRateControlArgs(video) {
@@ -7707,7 +7731,7 @@ function buildRateControlArgs(video) {
 	];
 }
 /** The whole video block (`-vf` … `-c:v` … knobs), after `-i`. */
-function buildVideoArgs(video, outputArgs, filterGraph) {
+function buildVideoArgs(video, outputArgs, filterGraph, hwEncode) {
 	if (video.kind === "raw") {
 		if (filterGraph && video.filter !== void 0) throw new Error("FfmpegInvocation: video.filter cannot be combined with a filter graph — fold the filter into the graph");
 		return [
@@ -7727,8 +7751,10 @@ function buildVideoArgs(video, outputArgs, filterGraph) {
 			...video.bitstreamFilter ? ["-bsf:v", video.bitstreamFilter] : []
 		];
 	}
+	const hwUpload = hwEncode === void 0 ? "" : resolveHwUpload(hwEncode.device, hwEncode.decodeHwAccel);
+	if (hwEncode !== void 0 && filterGraph) throw new Error("FfmpegInvocation: a hardware encode fed by a filter graph must upload INSIDE the graph — hwEncodeDevice cannot be combined with filterGraph");
 	const args = [
-		...buildVideoFilterArgs(video.scale, outputArgs, filterGraph),
+		...buildVideoFilterArgs(video.scale, outputArgs, filterGraph, hwUpload),
 		"-c:v",
 		video.encoder
 	];
@@ -7898,10 +7924,18 @@ function buildAudioSidecarArgs(sidecar) {
 * (`0:a:0?`): the sidecar is defined as the SOURCE's microphone on its own RTP
 * output, not as whatever the main output happens to carry.
 */
+/** The hardware-encode context for this invocation, or `undefined`. */
+function hwEncodeFor(inv) {
+	return inv.hwEncodeDevice === void 0 ? void 0 : {
+		device: inv.hwEncodeDevice,
+		decodeHwAccel: inv.decodeHwAccel
+	};
+}
 function buildFfmpegArgs(inv) {
 	const graph = inv.filterGraph ?? null;
 	const head = [
 		...logBannerArgs(inv.logLevel),
+		...inv.hwEncodeDevice !== void 0 ? ["-vaapi_device", inv.hwEncodeDevice.renderNode] : [],
 		...buildInputArgs(inv.input, inv.decodeHwAccel),
 		...(inv.extraInputs ?? []).flatMap((extra) => buildInputArgs(extra, inv.decodeHwAccel)),
 		...graph ? ["-filter_complex", graph.graph] : []
@@ -7915,7 +7949,7 @@ function buildFfmpegArgs(inv) {
 			"-an",
 			"-map",
 			maps.video ?? "0:v:0",
-			...buildVideoArgs(inv.video, inv.outputArgs, graph),
+			...buildVideoArgs(inv.video, inv.outputArgs, graph, hwEncodeFor(inv)),
 			...threadArgs,
 			...inv.outputArgs,
 			...buildRtpOutputArgs(inv.sink.video)
@@ -7938,7 +7972,7 @@ function buildFfmpegArgs(inv) {
 	return [
 		...head,
 		...videoMapArgs,
-		...buildVideoArgs(inv.video, inv.outputArgs, graph),
+		...buildVideoArgs(inv.video, inv.outputArgs, graph, hwEncodeFor(inv)),
 		...threadArgs,
 		...mutedAudio ? [] : audioMapArgs,
 		...audioArgs,
@@ -22792,6 +22826,7 @@ var MediaFileKindEnum = _enum([
 	"keyFrameSmall",
 	"thumbnailSmall",
 	"confirmationCrop",
+	"debugCrop",
 	"sceneFrame"
 ]);
 /**
@@ -24456,6 +24491,18 @@ var RunnerCameraConfigSchema = object({
 	motionStreamId: string(),
 	detectionStreamId: string(),
 	/**
+	* Which rung this camera's audio analysis listens on — `auto` (the lowest
+	* AVAILABLE native rung) or an explicit one.
+	*
+	* Not consumed by the runner: carried here so it travels with the camera's
+	* config the way `audioMotionWindowMs` does, and so the orchestrator's
+	* watchdog resolves the same stream the audio subscription did. OPTIONAL
+	* with no default — absent means `auto`, which is what every camera written
+	* before this field had, and an absent optional adds nothing to the
+	* generated cap-input defaults (D537).
+	*/
+	audioStreamPick: AudioStreamPickSchema.optional(),
+	/**
 	* Motion sources that can activate the pipeline. At least one must
 	* be present. Multiple sources OR-ed: any one firing arms the
 	* cooldown timer and transitions watching → active. The same
@@ -27182,6 +27229,104 @@ var WebrtcStreamChoiceSchema = object({
 	bitrateKbps: number().nullable()
 });
 /**
+* The last move the adaptive ladder made on this session, and the numbers it
+* rested on. Mirrors `LadderDecision` in the stream-broker's
+* `adaptive-controller.ts` — the log line's evidence, made readable.
+*
+* Nullability is load-bearing: `lossRatio: null` means the loss tracker had
+* no window to report, which is NOT a link with zero loss.
+*/
+var WebrtcLadderDecisionSchema = object({
+	/** `loss` — RTCP / client-reported packet loss; `stall` — the picture
+	*  stopped moving; `healthy` — a promotion. */
+	cause: _enum([
+		"loss",
+		"stall",
+		"healthy"
+	]),
+	/** The rung the ladder moved TO. Null for a move that changed no rung
+	*  (an MTU reduction, a forced transcode-down at the bottom). */
+	tier: CamProfileSchema.nullable(),
+	/** Whether that move forced the egress transcode-down rung. */
+	forcedTranscodeDown: boolean(),
+	/** Loss ratio over the tracker's window at the moment of the decision. */
+	lossRatio: number().nullable(),
+	/** The client's reported downlink at that moment, in kbps. */
+	clientKbps: number().nullable(),
+	/** How long the stall detector had been seeing nothing arrive. */
+	stalledForMs: number().nullable(),
+	/** Whether the broker WAS sending while that was measured — the half that
+	*  separates "the camera stopped" from "the link stopped". */
+	serverSending: boolean().nullable(),
+	/** Epoch ms. The overlay prints its age; a decision from 40 minutes ago
+	*  must not read like one from this second. */
+	at: number()
+});
+/** Per-tier count of MEASURED downgrades this viewer session has suffered. */
+var WebrtcTierFailureSchema = object({
+	tier: CamProfileSchema,
+	failures: number().int().nonnegative()
+});
+/**
+* What the SERVER decided for one WebRTC session — the half the client cannot
+* measure. See `getSessionDebug`.
+*/
+var WebrtcSessionDebugSchema = object({
+	sessionId: string(),
+	/** Whether the session still exists here. Everything below is null when
+	*  it does not — a dead session has no measurements, not zero ones. */
+	alive: boolean(),
+	/** Epoch ms this snapshot was taken, so the overlay can show its age. */
+	observedAt: number(),
+	/** The broker actually feeding this session (`<deviceId>/<camStreamId>`). */
+	brokerId: string().nullable(),
+	camStreamId: string().nullable(),
+	/** `derived` = this hub BUILT the rung being served (a transcode/scale of
+	*  another stream); `native` = the camera's own encode. */
+	sourceKind: _enum([
+		"native",
+		"derived",
+		"unknown"
+	]),
+	/** Whether the ladder is running at all (an `adaptive` target). */
+	adaptive: boolean(),
+	/** The rung `auto` ACTUALLY resolved to right now. Null when the broker
+	*  is bound to no profile slot (a manually-activated stream). */
+	servedTier: CamProfileSchema.nullable(),
+	/** Which node ingests the source. Null when unresolved. */
+	ingestNodeId: string().nullable(),
+	/** Whether that node is a remote one (the media crosses a node boundary
+	*  before it reaches this session). Null when unresolved. */
+	ingestIsRemote: boolean().nullable(),
+	/** Codec off the source, and the one negotiated with this client. */
+	sourceCodec: string().nullable(),
+	negotiatedCodec: string().nullable(),
+	/** Whether the EGRESS leg re-encodes for this client or forwards the
+	*  source bytes untouched. */
+	egressLeg: _enum([
+		"copy",
+		"transcode",
+		"unknown"
+	]),
+	/** What the broker itself reports about the rung it is serving. */
+	brokerStatus: string().nullable(),
+	brokerCodec: string().nullable(),
+	brokerBitrateKbps: number().nullable(),
+	brokerInputFps: number().nullable(),
+	brokerUptimeMs: number().nullable(),
+	/** RTP packets this session has sent — the server's own "am I sending?". */
+	rtpPacketsSent: number().nullable(),
+	/** D42: the track may be carrying the recorded feeder, not live. The ladder
+	*  is suspended there, so a frozen picture in `recorded` mode means
+	*  something entirely different. */
+	trackMode: _enum(["live", "recorded"]).nullable(),
+	lastDecision: WebrtcLadderDecisionSchema.nullable(),
+	tierFailures: array(WebrtcTierFailureSchema),
+	/** Successful promotions in this viewer session (drives the progressive
+	*  healthy timer). Null when no ladder is running. */
+	upgradeCount: number().nullable()
+});
+/**
 * WebRTC session — device-scoped facade over the system `webrtc` cap.
 *
 * Exposes per-device signaling (`createSession`, `handleAnswer`,
@@ -27421,7 +27566,27 @@ var webrtcSessionCapability = {
 			* the same answer as "it ended": either way nothing is holding it up.
 			*/
 			alive: boolean()
-		}))
+		})),
+		/**
+		* The SERVER's half of the stream-debug overlay, for one live session.
+		*
+		* The client can measure its own transport (`getStats()`); it cannot see
+		* which rung `auto` actually resolved to, why the ladder last moved, or
+		* whether the rung it is being served is the camera's own encode or
+		* something this hub built. That asymmetry is why "quality is stuck on
+		* low" reports have historically been unanswerable from the viewer alone.
+		*
+		* EVERY measurement here is nullable and `null` means UNKNOWN, never zero
+		* (D393): a session whose ladder has never moved reports
+		* `lastDecision: null`, which is a different fact from a ladder that moved
+		* for `healthy` with a 0 loss ratio.
+		*
+		* Read-only, ~1 Hz, polled by the overlay only while it is visible.
+		*/
+		getSessionDebug: method(object({
+			deviceId: number().int().nonnegative(),
+			sessionId: string()
+		}), WebrtcSessionDebugSchema, { kind: "query" })
 	},
 	/** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
 	mount: { kind: "server-provided" }
@@ -41619,6 +41784,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"webrtcSession.getSessionDebug": {
+		capName: "webrtc-session",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"webrtcSession.getSessionState": {
 		capName: "webrtc-session",
 		capScope: "device",
@@ -43602,6 +43773,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"webrtcSession.getSessionDebug": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"webrtcSession.getSessionState": [{
 		name: "deviceId",
 		form: "single",

package/dist/motion-wasm/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-C7CvyImc.js");
+const require_dist = require("../dist-CkNVb7Zh.js");
 const require_lazy_sharp = require("../lazy-sharp-BuwKlQLR.js");
 let node_fs = require("node:fs");
 let node_path = require("node:path");

package/dist/motion-wasm/index.mjs

@@ -1,4 +1,4 @@
-import { $t as hydrateSchema, Wt as BaseAddon, X as evaluateZoneRules, ft as motionDetectionCapability, qt as DeviceType } from "../dist-Dm1V0nJX.mjs";
+import { $t as hydrateSchema, Wt as BaseAddon, X as evaluateZoneRules, ft as motionDetectionCapability, qt as DeviceType } from "../dist-Cqf-U6EN.mjs";
 import { t as getSharp } from "../lazy-sharp-DXsqwpph.mjs";
 import { readFileSync } from "node:fs";
 import { join } from "node:path";

package/dist/{node-CjN6Vze9.js → node-CqC8R84-.js}

@@ -1,12 +1,120 @@
 const require_chunk = require("./chunk-emK7D4bc.js");
-const require_dist = require("./dist-C7CvyImc.js");
+const require_dist = require("./dist-CkNVb7Zh.js");
 let node_crypto = require("node:crypto");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs, 1);
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path, 1);
-require("node:child_process");
+let node_child_process = require("node:child_process");
 let node_fs_promises = require("node:fs/promises");
+//#region ../types/dist/node.mjs
+/**
+* What an ffmpeg binary can actually DO, asked of the binary itself.
+*
+* ## The failure this exists to end
+*
+* `ensureFfmpeg` prefers a downloaded STATIC build over the system one, and a
+* static build is compiled for portability: no vendor libraries, no VAAPI, no
+* QSV. On a machine with a working Intel iGPU that is precisely backwards, and
+* the symptom does not say so. Measured on the hub, 2026-09-18:
+*
+* ```
+* /data/deps/ffmpeg   7.0.2 johnvansickle static   hwaccels: vdpau
+* /usr/bin/ffmpeg     6.1.1 Ubuntu, in the image   hwaccels: vdpau cuda vaapi qsv drm opencl vulkan
+* ```
+*
+* Every consumer that went through `ensureFfmpeg` — the broker's egress and
+* derived transcodes, the WebRTC transcode leg, the camera grid — asked for
+* `-hwaccel vaapi`, got `Device creation failed: -12`, and fell back to
+* software. `-12` is what fftools prints when `av_hwdevice_ctx_alloc` returns
+* NULL because the type is not in the build: the NAME parses, so the request
+* looks valid and the device simply cannot exist. It reads as a resource
+* problem and is a build property.
+*
+* ## Why asking the kernel was not enough
+*
+* The existing hardware resolver answers from `/dev/dri` presence. That is a
+* correct description of the NODE, and it is what `node-av` needs — the
+* detection workers were on VAAPI the whole time. It says nothing about the
+* separate binary a child will be spawned with, and it was being read as
+* though it did.
+*
+* So: two questions, two answers. What does this node HAVE (the resolver), and
+* what can this BINARY use (here). A backend needs both.
+*/
+/** How long a probe may take before the binary counts as unusable. */
+var PROBE_TIMEOUT_MS = 5e3;
+function run(path, args) {
+	return new Promise((resolve) => {
+		(0, node_child_process.execFile)(path, [...args], { timeout: PROBE_TIMEOUT_MS }, (error, stdout) => {
+			resolve(error ? "" : stdout);
+		});
+	});
+}
+/**
+* `-hwaccels` prints a header line and then one name per line. Anything with a
+* space in it is prose, not a name.
+*/
+function parseNames(output) {
+	const names = /* @__PURE__ */ new Set();
+	for (const raw of output.split("\n")) {
+		const line = raw.trim();
+		if (line.length === 0 || line.includes(" ")) continue;
+		names.add(line);
+	}
+	return names;
+}
+/**
+* `-encoders` prints a LEGEND and then a table, separated by a dashed line:
+*
+* ```
+* Encoders:
+*  V..... = Video
+*  .F.... = Frame-level multithreading
+*  ------
+*  V....D h264_vaapi           H.264/AVC (VAAPI) (codec h264)
+* ```
+*
+* The legend rows have the SAME leading flag shape as the table rows, so a
+* pattern alone matches ` V..... = Video` and yields `=` as an encoder name.
+* Verified against the hub's own output on 2026-09-18, which is how that was
+* caught. So the separator is the parser's state: nothing counts before it.
+*/
+function parseEncoders(output) {
+	const names = /* @__PURE__ */ new Set();
+	let inTable = false;
+	for (const raw of output.split("\n")) {
+		if (!inTable) {
+			if (raw.trim().startsWith("---")) inTable = true;
+			continue;
+		}
+		const match = /^\s[VAS][.F][.S][.X][.B][.D]\s+(\S+)/.exec(raw);
+		if (match?.[1] !== void 0) names.add(match[1]);
+	}
+	return names;
+}
+/**
+* Turn three raw outputs into capabilities. Separated from the spawning so the
+* parsers can be held against what ffmpeg REALLY prints — which is how the
+* legend rows were caught being read as encoder names.
+*/
+function parseFfmpegCapabilities(path, versionOut, hwaccelOut, encoderOut) {
+	return {
+		path,
+		version: versionOut.split("\n")[0]?.trim() ?? "",
+		hwaccels: parseNames(hwaccelOut),
+		encoders: parseEncoders(encoderOut)
+	};
+}
+/** Ask one binary what it can do. Never throws — an unusable binary answers empty. */
+async function probeFfmpegBinary(path) {
+	const [versionOut, hwaccelOut, encoderOut] = await Promise.all([
+		run(path, ["-hide_banner", "-version"]),
+		run(path, ["-hide_banner", "-hwaccels"]),
+		run(path, ["-hide_banner", "-encoders"])
+	]);
+	return parseFfmpegCapabilities(path, versionOut, hwaccelOut, encoderOut);
+}
 var DEFAULT_FIRST_UNIT_TIMEOUT_MS = 12e3;
 /** Heartbeat cadence — ~2 minutes of 4 s fragments. */
 var FRAGMENT_LOG_EVERY = 30;
@@ -759,6 +867,12 @@ Object.defineProperty(exports, "physicalRootOf", {
 		return physicalRootOf;
 	}
 });
+Object.defineProperty(exports, "probeFfmpegBinary", {
+	enumerable: true,
+	get: function() {
+		return probeFfmpegBinary;
+	}
+});
 Object.defineProperty(exports, "readProcessCost", {
 	enumerable: true,
 	get: function() {

package/dist/{node-B5haKIVa.mjs → node-jLmcbaar.mjs}

@@ -1,9 +1,117 @@
-import { Bt as buildFfmpegArgs, Ht as isSoftwareDecode, Lt as errMsg, zt as Fmp4BoxSplitter } from "./dist-Dm1V0nJX.mjs";
+import { Bt as buildFfmpegArgs, Ht as isSoftwareDecode, Lt as errMsg, zt as Fmp4BoxSplitter } from "./dist-Cqf-U6EN.mjs";
 import { randomUUID } from "node:crypto";
 import { realpathSync } from "node:fs";
 import path from "node:path";
-import "node:child_process";
+import { execFile } from "node:child_process";
 import { readFile } from "node:fs/promises";
+//#region ../types/dist/node.mjs
+/**
+* What an ffmpeg binary can actually DO, asked of the binary itself.
+*
+* ## The failure this exists to end
+*
+* `ensureFfmpeg` prefers a downloaded STATIC build over the system one, and a
+* static build is compiled for portability: no vendor libraries, no VAAPI, no
+* QSV. On a machine with a working Intel iGPU that is precisely backwards, and
+* the symptom does not say so. Measured on the hub, 2026-09-18:
+*
+* ```
+* /data/deps/ffmpeg   7.0.2 johnvansickle static   hwaccels: vdpau
+* /usr/bin/ffmpeg     6.1.1 Ubuntu, in the image   hwaccels: vdpau cuda vaapi qsv drm opencl vulkan
+* ```
+*
+* Every consumer that went through `ensureFfmpeg` — the broker's egress and
+* derived transcodes, the WebRTC transcode leg, the camera grid — asked for
+* `-hwaccel vaapi`, got `Device creation failed: -12`, and fell back to
+* software. `-12` is what fftools prints when `av_hwdevice_ctx_alloc` returns
+* NULL because the type is not in the build: the NAME parses, so the request
+* looks valid and the device simply cannot exist. It reads as a resource
+* problem and is a build property.
+*
+* ## Why asking the kernel was not enough
+*
+* The existing hardware resolver answers from `/dev/dri` presence. That is a
+* correct description of the NODE, and it is what `node-av` needs — the
+* detection workers were on VAAPI the whole time. It says nothing about the
+* separate binary a child will be spawned with, and it was being read as
+* though it did.
+*
+* So: two questions, two answers. What does this node HAVE (the resolver), and
+* what can this BINARY use (here). A backend needs both.
+*/
+/** How long a probe may take before the binary counts as unusable. */
+var PROBE_TIMEOUT_MS = 5e3;
+function run(path, args) {
+	return new Promise((resolve) => {
+		execFile(path, [...args], { timeout: PROBE_TIMEOUT_MS }, (error, stdout) => {
+			resolve(error ? "" : stdout);
+		});
+	});
+}
+/**
+* `-hwaccels` prints a header line and then one name per line. Anything with a
+* space in it is prose, not a name.
+*/
+function parseNames(output) {
+	const names = /* @__PURE__ */ new Set();
+	for (const raw of output.split("\n")) {
+		const line = raw.trim();
+		if (line.length === 0 || line.includes(" ")) continue;
+		names.add(line);
+	}
+	return names;
+}
+/**
+* `-encoders` prints a LEGEND and then a table, separated by a dashed line:
+*
+* ```
+* Encoders:
+*  V..... = Video
+*  .F.... = Frame-level multithreading
+*  ------
+*  V....D h264_vaapi           H.264/AVC (VAAPI) (codec h264)
+* ```
+*
+* The legend rows have the SAME leading flag shape as the table rows, so a
+* pattern alone matches ` V..... = Video` and yields `=` as an encoder name.
+* Verified against the hub's own output on 2026-09-18, which is how that was
+* caught. So the separator is the parser's state: nothing counts before it.
+*/
+function parseEncoders(output) {
+	const names = /* @__PURE__ */ new Set();
+	let inTable = false;
+	for (const raw of output.split("\n")) {
+		if (!inTable) {
+			if (raw.trim().startsWith("---")) inTable = true;
+			continue;
+		}
+		const match = /^\s[VAS][.F][.S][.X][.B][.D]\s+(\S+)/.exec(raw);
+		if (match?.[1] !== void 0) names.add(match[1]);
+	}
+	return names;
+}
+/**
+* Turn three raw outputs into capabilities. Separated from the spawning so the
+* parsers can be held against what ffmpeg REALLY prints — which is how the
+* legend rows were caught being read as encoder names.
+*/
+function parseFfmpegCapabilities(path, versionOut, hwaccelOut, encoderOut) {
+	return {
+		path,
+		version: versionOut.split("\n")[0]?.trim() ?? "",
+		hwaccels: parseNames(hwaccelOut),
+		encoders: parseEncoders(encoderOut)
+	};
+}
+/** Ask one binary what it can do. Never throws — an unusable binary answers empty. */
+async function probeFfmpegBinary(path) {
+	const [versionOut, hwaccelOut, encoderOut] = await Promise.all([
+		run(path, ["-hide_banner", "-version"]),
+		run(path, ["-hide_banner", "-hwaccels"]),
+		run(path, ["-hide_banner", "-encoders"])
+	]);
+	return parseFfmpegCapabilities(path, versionOut, hwaccelOut, encoderOut);
+}
 var DEFAULT_FIRST_UNIT_TIMEOUT_MS = 12e3;
 /** Heartbeat cadence — ~2 minutes of 4 s fragments. */
 var FRAGMENT_LOG_EVERY = 30;
@@ -726,4 +834,4 @@ function physicalRootOf(root, realpath = realpathSync) {
 	}
 }
 //#endregion
-export { physicalRootOf as a, NO_COST_CLAIM as i, Fmp4FragmentChild as n, readProcessCost as o, Fmp4FragmentPlane as r, ChildCostRegistry as t };
+export { physicalRootOf as a, NO_COST_CLAIM as i, Fmp4FragmentChild as n, probeFfmpegBinary as o, Fmp4FragmentPlane as r, readProcessCost as s, ChildCostRegistry as t };

package/dist/pipeline-runner/index.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-C7CvyImc.js");
-const require_node = require("../node-CjN6Vze9.js");
-const require_default_detection_model = require("../default-detection-model-CKNqjjRy.js");
+const require_dist = require("../dist-CkNVb7Zh.js");
+const require_node = require("../node-CqC8R84-.js");
+const require_default_detection_model = require("../default-detection-model-BfMsW_XK.js");
 const require_worker_protocol = require("../worker-protocol-B2MfQLlu.js");
 const require_hub_hostname = require("../hub-hostname-DAJXlOgV.js");
 const require_lazy_sharp = require("../lazy-sharp-BuwKlQLR.js");

package/dist/pipeline-runner/index.mjs

@@ -1,6 +1,6 @@
-import { $ as failureContributionCapability, Lt as errMsg, S as NativeLeaseSettingsSchema, U as deriveDetailCropRect, Wt as BaseAddon, Xt as customAction, Yt as createEvent, Zt as defineCustomActions, _ as FailureCounters, _t as pickDetailCropConvention, b as MOTION_CLOSE_AFTER_MS, bn as EventCategory, bt as pipelineRunnerCapability, cn as _enum, fn as lazy, hn as object, it as loadContributionCapability, ln as array, m as DEVICE_BACKEND_TO_FORMAT, mn as number, p as DEFAULT_NATIVE_LEASE_SETTINGS, pn as literal, rn as nodePin, u as DEFAULT_DETAIL_CROP_CONVENTION, un as boolean, vn as string, vt as pickNativeLeaseOverride, x as NativeLeaseAdmissionSchema } from "../dist-Dm1V0nJX.mjs";
-import { i as NO_COST_CLAIM, t as ChildCostRegistry } from "../node-B5haKIVa.mjs";
-import { a as localFrameRegistry, d as getStepDefinition, i as rootObjectGate, o as resolveFrameViewGeometry, r as macroGateVerdict } from "../default-detection-model--x95ODoz.mjs";
+import { $ as failureContributionCapability, Lt as errMsg, S as NativeLeaseSettingsSchema, U as deriveDetailCropRect, Wt as BaseAddon, Xt as customAction, Yt as createEvent, Zt as defineCustomActions, _ as FailureCounters, _t as pickDetailCropConvention, b as MOTION_CLOSE_AFTER_MS, bn as EventCategory, bt as pipelineRunnerCapability, cn as _enum, fn as lazy, hn as object, it as loadContributionCapability, ln as array, m as DEVICE_BACKEND_TO_FORMAT, mn as number, p as DEFAULT_NATIVE_LEASE_SETTINGS, pn as literal, rn as nodePin, u as DEFAULT_DETAIL_CROP_CONVENTION, un as boolean, vn as string, vt as pickNativeLeaseOverride, x as NativeLeaseAdmissionSchema } from "../dist-Cqf-U6EN.mjs";
+import { i as NO_COST_CLAIM, t as ChildCostRegistry } from "../node-jLmcbaar.mjs";
+import { a as localFrameRegistry, d as getStepDefinition, i as rootObjectGate, o as resolveFrameViewGeometry, r as macroGateVerdict } from "../default-detection-model-pXamampo.mjs";
 import { t as isWorkerReply } from "../worker-protocol-C_W-P_g-.mjs";
 import { t as resolveHubHostname } from "../hub-hostname-cCknRYKj.mjs";
 import { t as getSharp } from "../lazy-sharp-DXsqwpph.mjs";

package/dist/{process-memory-BMCVwJcT.mjs → process-memory-B1YHg1_g.mjs}

@@ -1,4 +1,4 @@
-import { mt as parseProcStatus } from "./dist-Dm1V0nJX.mjs";
+import { mt as parseProcStatus } from "./dist-Cqf-U6EN.mjs";
 import * as fs from "node:fs";
 import { execFile } from "node:child_process";
 //#region src/shared/node-topology-platform.ts

package/dist/{process-memory-CaFOThD9.js → process-memory-D7LlWXty.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-emK7D4bc.js");
-const require_dist = require("./dist-C7CvyImc.js");
+const require_dist = require("./dist-CkNVb7Zh.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_child_process = require("node:child_process");

package/dist/recorder/index.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-C7CvyImc.js");
-const require_node = require("../node-CjN6Vze9.js");
+const require_dist = require("../dist-CkNVb7Zh.js");
+const require_node = require("../node-CqC8R84-.js");
 const require_hub_hostname = require("../hub-hostname-DAJXlOgV.js");
 const require_restream_intent = require("../restream-intent-7uDNqMKs.js");
 const require_retire_root_keys = require("../retire-root-keys-Csb8z2f3.js");

package/dist/recorder/index.mjs

@@ -1,5 +1,5 @@
-import { $t as hydrateSchema, C as OpsLogEntrySchema, Ct as recordingExportCapability, D as RECORDING_EXPORT_MAX_READ_BYTES, Dt as resolveLocationMode, H as deriveBatteryPresence, I as batteryCapability, Kt as DeviceFeature, Lt as errMsg, Mt as storageOccupancyCapability, O as RecordingConfigSchema, Pt as stripRetiredBandPreBufferSec, Q as evictionPolicyOfLocation, St as recordingCapability, W as deriveRecordingMode, Wt as BaseAddon, Xt as customAction, Y as evaluateSensorEdge, Z as evictionPolicyForMode, Zt as defineCustomActions, _n as record, bn as EventCategory, cn as _enum, ct as mayReadLocation, d as DEFAULT_EVENTS_BAND_BUFFER_SEC, dt as modeMayWrite, et as gbToBytes, g as ExportRecordSchema, gn as preprocess, hn as object, i as BatteryStatusSchema, it as loadContributionCapability, jt as storageEvictableCapability, k as RecordingSignalStatusSchema, kt as resolveRecordingProfiles, ln as array, lt as mayWriteToLocation, mn as number, on as selectAssignedProfileSlots, qt as DeviceType, rn as nodePin, rt as isFirstLevelMacroClass, sn as sleep$1, un as boolean, ut as migrateLegacyDeviceSignalConfig, vn as string, wt as recordingSignalCapability } from "../dist-Dm1V0nJX.mjs";
-import { a as physicalRootOf, i as NO_COST_CLAIM, t as ChildCostRegistry } from "../node-B5haKIVa.mjs";
+import { $t as hydrateSchema, C as OpsLogEntrySchema, Ct as recordingExportCapability, D as RECORDING_EXPORT_MAX_READ_BYTES, Dt as resolveLocationMode, H as deriveBatteryPresence, I as batteryCapability, Kt as DeviceFeature, Lt as errMsg, Mt as storageOccupancyCapability, O as RecordingConfigSchema, Pt as stripRetiredBandPreBufferSec, Q as evictionPolicyOfLocation, St as recordingCapability, W as deriveRecordingMode, Wt as BaseAddon, Xt as customAction, Y as evaluateSensorEdge, Z as evictionPolicyForMode, Zt as defineCustomActions, _n as record, bn as EventCategory, cn as _enum, ct as mayReadLocation, d as DEFAULT_EVENTS_BAND_BUFFER_SEC, dt as modeMayWrite, et as gbToBytes, g as ExportRecordSchema, gn as preprocess, hn as object, i as BatteryStatusSchema, it as loadContributionCapability, jt as storageEvictableCapability, k as RecordingSignalStatusSchema, kt as resolveRecordingProfiles, ln as array, lt as mayWriteToLocation, mn as number, on as selectAssignedProfileSlots, qt as DeviceType, rn as nodePin, rt as isFirstLevelMacroClass, sn as sleep$1, un as boolean, ut as migrateLegacyDeviceSignalConfig, vn as string, wt as recordingSignalCapability } from "../dist-Cqf-U6EN.mjs";
+import { a as physicalRootOf, i as NO_COST_CLAIM, t as ChildCostRegistry } from "../node-jLmcbaar.mjs";
 import { t as resolveHubHostname } from "../hub-hostname-cCknRYKj.mjs";
 import { d as PREBUFFER_MAX_MS, l as withRecordingIntent, r as RECORDING_PRE_ROLL_REQUEST_MS } from "../restream-intent-DyGmLAU9.mjs";
 import { n as RowMapStore, t as retireRootKeys } from "../retire-root-keys-DZvlso2l.mjs";

package/dist/{segment-demux-js-BaWzAeJu.mjs → segment-demux-js-B2TLcR_g.mjs}

@@ -1,5 +1,5 @@
 import { r as __toESM, t as __commonJSMin } from "./chunk-DnnnRqeS.mjs";
-import { Lt as errMsg } from "./dist-Dm1V0nJX.mjs";
+import { Lt as errMsg } from "./dist-Cqf-U6EN.mjs";
 import { spawn } from "node:child_process";
 //#region ../../node_modules/mp4box/dist/mp4box.all.js
 var require_mp4box_all = /* @__PURE__ */ __commonJSMin(((exports) => {