@camstack/addon-pipeline 1.2.27 → 1.2.29

package/dist/detection-pipeline/index.js

@@ -4,7 +4,7 @@ Object.defineProperties(exports, {
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
 const require_dist = require("../dist-DUHlZcWd.js");
-const require_step_definitions = require("../step-definitions-Bo1hJQQw.js");
+const require_step_definitions = require("../step-definitions-Drb9cWbB.js");
 const require_node_topology_platform = require("../node-topology-platform-CFZ7F4xW.js");
 const require_model_download_service_Cp9f4dk6 = require("../model-download-service-Cp9f4dk6-fsdDExML.js");
 let node_child_process = require("node:child_process");
@@ -2704,19 +2704,25 @@ async function nativeChildCrop(provider, bbox, imageWidth, imageHeight, maxWidth
 * DROPS detections outright, so it sits between that and a hard cut).
 */
 var FULL_FRAME_MAX_CONFIDENCE = .7;
+/** A cut only makes sense in (0, 1); anything else is treated as OFF rather
+*  than dropping every detection on a typo. */
+function isUsableHardAreaCut(ratio) {
+	return Number.isFinite(ratio) && ratio > 0 && ratio < 1;
+}
 /**
 * True when `bbox` is a near-full-frame LOW-confidence phantom that should be
 * DROPPED from the frame's detections (overlay / tracker / events / motion-wake).
 *
 * Rule (drop ⇔ returns true):
-*   (areaRatio ≥ {@link FULL_FRAME_AREA_RATIO}
-*      OR width  ≥ {@link FULL_FRAME_DIMENSION_RATIO} × frameWidth
-*      OR height ≥ {@link FULL_FRAME_DIMENSION_RATIO} × frameHeight)
-*   AND score < `maxConfidence`
+*   areaRatio ≥ `hardAreaRatio`                      ← score-independent, OFF by default
+*   OR (  (areaRatio ≥ {@link FULL_FRAME_AREA_RATIO}
+*          OR width  ≥ {@link FULL_FRAME_DIMENSION_RATIO} × frameWidth
+*          OR height ≥ {@link FULL_FRAME_DIMENSION_RATIO} × frameHeight)
+*         AND score < `maxConfidence` )
 *
-* A high-confidence detection (`score ≥ maxConfidence`) is trusted as a real
-* subject and always survives. Degenerate frame dimensions (≤0) carry no info
-* to reject on → not a phantom.
+* Below the hard cut a high-confidence detection (`score ≥ maxConfidence`) is
+* trusted as a real subject and survives. Degenerate frame dimensions (≤0)
+* carry no info to reject on → not a phantom.
 *
 * @param bbox absolute-pixel `[x1, y1, x2, y2]` box in source-frame coords.
 * @param frameWidth source frame width in px.
@@ -2725,10 +2731,26 @@ var FULL_FRAME_MAX_CONFIDENCE = .7;
 * @param maxConfidence confidence bar below which a full-frame box is a phantom
 *   (defaults to {@link FULL_FRAME_MAX_CONFIDENCE}; overridable by the caller so
 *   the bar can be threaded from detection settings without new cap methods).
+* @param hardAreaRatio area fraction at/above which the box is dropped NO
+*   MATTER the score. Defaults to {@link HARD_AREA_CUT_DISABLED} (off) — it is
+*   armed per camera, because a doorbell close-up legitimately fills the frame
+*   while an overhead courtyard box never does. Threaded from step settings as
+*   `fullFrameGuardHardAreaRatio`.
 */
-function isFullFramePhantomDetection(bbox, frameWidth, frameHeight, score, maxConfidence = FULL_FRAME_MAX_CONFIDENCE) {
+/**
+* True when a box trips the guard's GEOMETRY test (near-full-frame, or
+* edge-to-edge in one axis) but SURVIVES because its score cleared the
+* confidence bar.
+*
+* These are the ones worth counting: on 2026-07-30 device 615 produced six
+* such boxes in a day, at 0.710-0.787, and they were only found by an offline
+* sweep of stored events — nothing in production reported them. Arming the
+* hard-area cut on a camera should be a decision made from this count, not
+* from one incident.
+*/
+function isFullFrameSurvivor(bbox, frameWidth, frameHeight, score, maxConfidence = FULL_FRAME_MAX_CONFIDENCE) {
 	if (frameWidth <= 0 || frameHeight <= 0) return false;
-	if (score >= maxConfidence) return false;
+	if (score < maxConfidence) return false;
 	const [x1, y1, x2, y2] = bbox;
 	const w = x2 - x1;
 	const h = y2 - y1;
@@ -2737,6 +2759,19 @@ function isFullFramePhantomDetection(bbox, frameWidth, frameHeight, score, maxCo
 	if (h >= frameHeight * .98) return true;
 	return false;
 }
+function isFullFramePhantomDetection(bbox, frameWidth, frameHeight, score, maxConfidence = FULL_FRAME_MAX_CONFIDENCE, hardAreaRatio = 1) {
+	if (frameWidth <= 0 || frameHeight <= 0) return false;
+	const [x1, y1, x2, y2] = bbox;
+	const w = x2 - x1;
+	const h = y2 - y1;
+	const areaRatio = w * h / (frameWidth * frameHeight);
+	if (isUsableHardAreaCut(hardAreaRatio) && areaRatio >= hardAreaRatio) return true;
+	if (score >= maxConfidence) return false;
+	if (areaRatio >= .9) return true;
+	if (w >= frameWidth * .98) return true;
+	if (h >= frameHeight * .98) return true;
+	return false;
+}
 //#endregion
 //#region src/detection-pipeline/pipeline/plate-deskew.ts
 /**
@@ -3584,10 +3619,34 @@ var PipelineExecutor = class {
 					continue;
 				}
 				const fullFrameBar = rootStep.settings?.["fullFrameGuardMaxConfidence"];
-				if (isFullFramePhantomDetection(mutable.bbox, imageWidth, imageHeight, mutable.score, typeof fullFrameBar === "number" ? fullFrameBar : void 0)) {
-					if (debug) console.log(`[executor] drop det macro=${mutable.macroClass} score=${mutable.score} bbox=${JSON.stringify(mutable.bbox)} (full-frame phantom guard)`);
+				const fullFrameHardArea = rootStep.settings?.["fullFrameGuardHardAreaRatio"];
+				if (isFullFramePhantomDetection(mutable.bbox, imageWidth, imageHeight, mutable.score, typeof fullFrameBar === "number" ? fullFrameBar : void 0, typeof fullFrameHardArea === "number" ? fullFrameHardArea : void 0)) {
+					this.opts.logger?.info("full-frame phantom guard: detection dropped", {
+						tags: { deviceId },
+						meta: {
+							macroClass: mutable.macroClass,
+							score: mutable.score,
+							bbox: mutable.bbox,
+							frameWidth: imageWidth,
+							frameHeight: imageHeight,
+							areaRatio: imageWidth > 0 && imageHeight > 0 ? Math.round((mutable.bbox[2] - mutable.bbox[0]) * (mutable.bbox[3] - mutable.bbox[1]) / (imageWidth * imageHeight) * 1e3) / 1e3 : void 0,
+							bar: typeof fullFrameBar === "number" ? fullFrameBar : void 0,
+							hardAreaRatio: typeof fullFrameHardArea === "number" ? fullFrameHardArea : void 0
+						}
+					});
 					continue;
 				}
+				if (isFullFrameSurvivor(mutable.bbox, imageWidth, imageHeight, mutable.score, typeof fullFrameBar === "number" ? fullFrameBar : void 0)) this.opts.logger?.warn("full-frame box SURVIVED the guard on score", {
+					tags: { deviceId },
+					meta: {
+						macroClass: mutable.macroClass,
+						score: mutable.score,
+						bbox: mutable.bbox,
+						areaRatio: imageWidth > 0 && imageHeight > 0 ? Math.round((mutable.bbox[2] - mutable.bbox[0]) * (mutable.bbox[3] - mutable.bbox[1]) / (imageWidth * imageHeight) * 1e3) / 1e3 : void 0,
+						bar: typeof fullFrameBar === "number" ? fullFrameBar : void 0,
+						hint: "arm fullFrameGuardHardAreaRatio on this camera if these are phantoms"
+					}
+				});
 				try {
 					await this.executeChildren(rootStep.children, mutable, fullFrameJpegProvider, imageWidth, imageHeight, traceBuilder, stepTimings, ctx, poolAgg, runOpts?.plane, deviceId, nativeCropProvider);
 				} catch (err) {

package/dist/detection-pipeline/index.mjs

@@ -1,6 +1,6 @@
 import { n as __require } from "../chunk-DnnnRqeS.mjs";
 import { B as errMsg, E as evaluateZoneRules, F as runtimeDevices$1, G as createEvent, K as hydrateSchema, R as supportedRuntimes$1, T as enumerateInferenceDevices, V as BaseAddon, X as nodePin, Z as parseJsonUnknown, ct as object, dt as union, et as sleep, ft as EventCategory, h as YAMNET_TO_MACRO, j as pipelineExecutorCapability, nt as array, s as DEVICE_BACKEND_TO_FORMAT, t as APPLE_SA_TO_MACRO, ut as string, w as detectionPipelineCapability, x as defaultDeviceFor$1 } from "../dist-CsKaXmP8.mjs";
-import { a as getStepDefinition, i as getStep, n as ALL_STEPS, o as resolveModelForFormat, r as getDefaultModelForFormat, t as ALL_PIPELINE_STEPS } from "../step-definitions-C8A78dBi.mjs";
+import { a as getStepDefinition, i as getStep, n as ALL_STEPS, o as resolveModelForFormat, r as getDefaultModelForFormat, t as ALL_PIPELINE_STEPS } from "../step-definitions-1GIwU6R8.mjs";
 import { t as pickNodePlatformArch } from "../node-topology-platform-BkR_k6WT.mjs";
 import { a as ensureModel, o as isModelDownloaded, r as deleteModelFromDisk } from "../model-download-service-Cp9f4dk6-CwUb5v3Y.mjs";
 import { spawn } from "node:child_process";
@@ -2696,19 +2696,25 @@ async function nativeChildCrop(provider, bbox, imageWidth, imageHeight, maxWidth
 * DROPS detections outright, so it sits between that and a hard cut).
 */
 var FULL_FRAME_MAX_CONFIDENCE = .7;
+/** A cut only makes sense in (0, 1); anything else is treated as OFF rather
+*  than dropping every detection on a typo. */
+function isUsableHardAreaCut(ratio) {
+	return Number.isFinite(ratio) && ratio > 0 && ratio < 1;
+}
 /**
 * True when `bbox` is a near-full-frame LOW-confidence phantom that should be
 * DROPPED from the frame's detections (overlay / tracker / events / motion-wake).
 *
 * Rule (drop ⇔ returns true):
-*   (areaRatio ≥ {@link FULL_FRAME_AREA_RATIO}
-*      OR width  ≥ {@link FULL_FRAME_DIMENSION_RATIO} × frameWidth
-*      OR height ≥ {@link FULL_FRAME_DIMENSION_RATIO} × frameHeight)
-*   AND score < `maxConfidence`
+*   areaRatio ≥ `hardAreaRatio`                      ← score-independent, OFF by default
+*   OR (  (areaRatio ≥ {@link FULL_FRAME_AREA_RATIO}
+*          OR width  ≥ {@link FULL_FRAME_DIMENSION_RATIO} × frameWidth
+*          OR height ≥ {@link FULL_FRAME_DIMENSION_RATIO} × frameHeight)
+*         AND score < `maxConfidence` )
 *
-* A high-confidence detection (`score ≥ maxConfidence`) is trusted as a real
-* subject and always survives. Degenerate frame dimensions (≤0) carry no info
-* to reject on → not a phantom.
+* Below the hard cut a high-confidence detection (`score ≥ maxConfidence`) is
+* trusted as a real subject and survives. Degenerate frame dimensions (≤0)
+* carry no info to reject on → not a phantom.
 *
 * @param bbox absolute-pixel `[x1, y1, x2, y2]` box in source-frame coords.
 * @param frameWidth source frame width in px.
@@ -2717,10 +2723,26 @@ var FULL_FRAME_MAX_CONFIDENCE = .7;
 * @param maxConfidence confidence bar below which a full-frame box is a phantom
 *   (defaults to {@link FULL_FRAME_MAX_CONFIDENCE}; overridable by the caller so
 *   the bar can be threaded from detection settings without new cap methods).
+* @param hardAreaRatio area fraction at/above which the box is dropped NO
+*   MATTER the score. Defaults to {@link HARD_AREA_CUT_DISABLED} (off) — it is
+*   armed per camera, because a doorbell close-up legitimately fills the frame
+*   while an overhead courtyard box never does. Threaded from step settings as
+*   `fullFrameGuardHardAreaRatio`.
 */
-function isFullFramePhantomDetection(bbox, frameWidth, frameHeight, score, maxConfidence = FULL_FRAME_MAX_CONFIDENCE) {
+/**
+* True when a box trips the guard's GEOMETRY test (near-full-frame, or
+* edge-to-edge in one axis) but SURVIVES because its score cleared the
+* confidence bar.
+*
+* These are the ones worth counting: on 2026-07-30 device 615 produced six
+* such boxes in a day, at 0.710-0.787, and they were only found by an offline
+* sweep of stored events — nothing in production reported them. Arming the
+* hard-area cut on a camera should be a decision made from this count, not
+* from one incident.
+*/
+function isFullFrameSurvivor(bbox, frameWidth, frameHeight, score, maxConfidence = FULL_FRAME_MAX_CONFIDENCE) {
 	if (frameWidth <= 0 || frameHeight <= 0) return false;
-	if (score >= maxConfidence) return false;
+	if (score < maxConfidence) return false;
 	const [x1, y1, x2, y2] = bbox;
 	const w = x2 - x1;
 	const h = y2 - y1;
@@ -2729,6 +2751,19 @@ function isFullFramePhantomDetection(bbox, frameWidth, frameHeight, score, maxCo
 	if (h >= frameHeight * .98) return true;
 	return false;
 }
+function isFullFramePhantomDetection(bbox, frameWidth, frameHeight, score, maxConfidence = FULL_FRAME_MAX_CONFIDENCE, hardAreaRatio = 1) {
+	if (frameWidth <= 0 || frameHeight <= 0) return false;
+	const [x1, y1, x2, y2] = bbox;
+	const w = x2 - x1;
+	const h = y2 - y1;
+	const areaRatio = w * h / (frameWidth * frameHeight);
+	if (isUsableHardAreaCut(hardAreaRatio) && areaRatio >= hardAreaRatio) return true;
+	if (score >= maxConfidence) return false;
+	if (areaRatio >= .9) return true;
+	if (w >= frameWidth * .98) return true;
+	if (h >= frameHeight * .98) return true;
+	return false;
+}
 //#endregion
 //#region src/detection-pipeline/pipeline/plate-deskew.ts
 /**
@@ -3576,10 +3611,34 @@ var PipelineExecutor = class {
 					continue;
 				}
 				const fullFrameBar = rootStep.settings?.["fullFrameGuardMaxConfidence"];
-				if (isFullFramePhantomDetection(mutable.bbox, imageWidth, imageHeight, mutable.score, typeof fullFrameBar === "number" ? fullFrameBar : void 0)) {
-					if (debug) console.log(`[executor] drop det macro=${mutable.macroClass} score=${mutable.score} bbox=${JSON.stringify(mutable.bbox)} (full-frame phantom guard)`);
+				const fullFrameHardArea = rootStep.settings?.["fullFrameGuardHardAreaRatio"];
+				if (isFullFramePhantomDetection(mutable.bbox, imageWidth, imageHeight, mutable.score, typeof fullFrameBar === "number" ? fullFrameBar : void 0, typeof fullFrameHardArea === "number" ? fullFrameHardArea : void 0)) {
+					this.opts.logger?.info("full-frame phantom guard: detection dropped", {
+						tags: { deviceId },
+						meta: {
+							macroClass: mutable.macroClass,
+							score: mutable.score,
+							bbox: mutable.bbox,
+							frameWidth: imageWidth,
+							frameHeight: imageHeight,
+							areaRatio: imageWidth > 0 && imageHeight > 0 ? Math.round((mutable.bbox[2] - mutable.bbox[0]) * (mutable.bbox[3] - mutable.bbox[1]) / (imageWidth * imageHeight) * 1e3) / 1e3 : void 0,
+							bar: typeof fullFrameBar === "number" ? fullFrameBar : void 0,
+							hardAreaRatio: typeof fullFrameHardArea === "number" ? fullFrameHardArea : void 0
+						}
+					});
 					continue;
 				}
+				if (isFullFrameSurvivor(mutable.bbox, imageWidth, imageHeight, mutable.score, typeof fullFrameBar === "number" ? fullFrameBar : void 0)) this.opts.logger?.warn("full-frame box SURVIVED the guard on score", {
+					tags: { deviceId },
+					meta: {
+						macroClass: mutable.macroClass,
+						score: mutable.score,
+						bbox: mutable.bbox,
+						areaRatio: imageWidth > 0 && imageHeight > 0 ? Math.round((mutable.bbox[2] - mutable.bbox[0]) * (mutable.bbox[3] - mutable.bbox[1]) / (imageWidth * imageHeight) * 1e3) / 1e3 : void 0,
+						bar: typeof fullFrameBar === "number" ? fullFrameBar : void 0,
+						hint: "arm fullFrameGuardHardAreaRatio on this camera if these are phantoms"
+					}
+				});
 				try {
 					await this.executeChildren(rootStep.children, mutable, fullFrameJpegProvider, imageWidth, imageHeight, traceBuilder, stepTimings, ctx, poolAgg, runOpts?.plane, deviceId, nativeCropProvider);
 				} catch (err) {

package/dist/pipeline-runner/index.js

@@ -7,7 +7,7 @@ const require_dist = require("../dist-DUHlZcWd.js");
 const require_remote_restream = require("../remote-restream-CO36Sr30.js");
 const require_hub_hostname = require("../hub-hostname-DAJXlOgV.js");
 const require_worker_protocol = require("../worker-protocol-DextwlTX.js");
-const require_step_definitions = require("../step-definitions-Bo1hJQQw.js");
+const require_step_definitions = require("../step-definitions-Drb9cWbB.js");
 let node_child_process = require("node:child_process");
 let node_url = require("node:url");
 let sharp = require("sharp");
@@ -658,6 +658,9 @@ function toFrameInput$1(frame) {
 * without spinning up Moleculer or the addon framework.
 */
 var PipelineRunner = class {
+	/** Abandoned inference calls that have not yet settled. A BURST reads as
+	*  one rising number instead of N unrelated lines. */
+	inflightTimeouts = 0;
 	config;
 	cameras = /* @__PURE__ */ new Map();
 	semaphore;
@@ -1144,16 +1147,33 @@ var PipelineRunner = class {
 			timer.unref?.();
 		});
 		try {
-			const outcome = await Promise.race([this.config.processFrame(deviceId, frameInput, executorHandle), expiry]);
+			const inflight = this.config.processFrame(deviceId, frameInput, executorHandle);
+			const outcome = await Promise.race([inflight, expiry]);
 			if (outcome === TIMED_OUT) {
 				release();
+				this.inflightTimeouts += 1;
 				this.logger?.warn("inference timed out — permit released, result discarded", {
 					tags: { deviceId },
 					meta: {
 						timeoutMs,
-						availablePermits: this.semaphore.available
+						availablePermits: this.semaphore.available,
+						outstandingTimeouts: this.inflightTimeouts
 					}
 				});
+				const deadlineAt = Date.now();
+				const noteSettled = (fate) => {
+					this.inflightTimeouts = Math.max(0, this.inflightTimeouts - 1);
+					this.logger?.info("inference: abandoned call settled after the deadline", {
+						tags: { deviceId },
+						meta: {
+							lateByMs: Date.now() - deadlineAt,
+							totalMs: timeoutMs + (Date.now() - deadlineAt),
+							fate,
+							outstandingTimeouts: this.inflightTimeouts
+						}
+					});
+				};
+				inflight.then(() => noteSettled("resolved"), () => noteSettled("rejected"));
 			}
 			return outcome;
 		} finally {
@@ -1336,7 +1356,24 @@ function forkDecodeWorker(_source) {
 //#endregion
 //#region src/session-decode/guarded-session-decode.ts
 /**
-* Guards the in-flight restream-acquire against a detach/unsubscribe race.
+* 2s → 5s → 15s → 30s, then 30s forever.
+*
+* Indefinite is deliberate. The failure this recovers from is "the broker has
+* no profile bound yet" or "the broker call failed right now" — both of which
+* clear on their own, often minutes later (a source re-dialing, a runner
+* restarting). A bounded retry would turn a slow recovery back into the
+* permanent outage this exists to prevent, and teardown already stops it: a
+* detach aborts the loop, so nothing retries for a camera nobody wants.
+*/
+var DEFAULT_ACQUIRE_RETRY_DELAYS_MS = [
+	2e3,
+	5e3,
+	15e3,
+	3e4
+];
+/**
+* Guards the in-flight restream-acquire against a detach/unsubscribe race,
+* and retries an acquire that fails.
 *
 * `acquireSessionDecodeRestream` + forking the decode worker both take real
 * time (a broker round-trip, then a process fork). If the caller's teardown
@@ -1348,29 +1385,71 @@ function forkDecodeWorker(_source) {
 *
 * This helper returns the teardown SYNCHRONOUSLY. The acquire + pump-start
 * run in the background; an `aborted` flag recorded by the (possibly
-* already-called) teardown is checked right after the acquire resolves —
-* if set, the restream is released immediately and the pump is NEVER
+* already-called) teardown is checked right after each acquire resolves —
+* if set, any restream is released immediately and the pump is NEVER
 * started (no orphan worker). Otherwise the pump starts and the teardown,
 * once called, stops the pump then releases the restream.
+*
+* **A failed acquire is retried, not swallowed.** The teardown handed back
+* here is stored by the caller (as `attachment.detectionUnsubscribe`) the
+* instant this returns, so a `return` on failure left that handle permanently
+* non-null with no pump behind it: `onEnded` could never fire because nothing
+* had ever started, the camera's phase stayed `active`, and not one frame
+* arrived again. The motion path was hardened against this shape by a frame
+* freshness window (`MOTION_FRESHNESS_WINDOW_MS`); this is the detection
+* path's half.
 */
 function startGuardedSessionDecode(deps) {
 	let aborted = false;
 	let stopPump = null;
 	let release = null;
+	let retryTimer = null;
+	const delays = deps.acquireRetryDelaysMs && deps.acquireRetryDelaysMs.length > 0 ? deps.acquireRetryDelaysMs : DEFAULT_ACQUIRE_RETRY_DELAYS_MS;
+	/** Resolves after the backoff for `attempt`, or immediately once aborted. */
+	const waitBackoff = (attempt) => new Promise((resolve) => {
+		const ms = delays[Math.min(attempt, delays.length - 1)] ?? delays[delays.length - 1] ?? 2e3;
+		retryTimer = setTimeout(() => {
+			retryTimer = null;
+			resolve();
+		}, ms);
+		retryTimer.unref?.();
+	});
 	(async () => {
-		const acquired = await deps.acquire();
-		if (!acquired) return;
-		if (aborted) {
-			acquired.release();
+		for (let attempt = 0; !aborted; attempt++) {
+			let acquired = null;
+			try {
+				acquired = await deps.acquire();
+			} catch (err) {
+				(attempt === 0 ? deps.logger.warn : deps.logger.debug).call(deps.logger, "session-decode: acquire failed — retrying", { meta: {
+					attempt: attempt + 1,
+					error: require_dist.errMsg(err)
+				} });
+				await waitBackoff(attempt);
+				continue;
+			}
+			if (aborted) {
+				if (acquired) acquired.release();
+				return;
+			}
+			if (!acquired) {
+				(attempt === 0 ? deps.logger.warn : deps.logger.debug).call(deps.logger, "session-decode: no broker profile bound yet — retrying", { meta: { attempt: attempt + 1 } });
+				await waitBackoff(attempt);
+				continue;
+			}
+			if (attempt > 0) deps.logger.info("session-decode: acquire succeeded after retry", { meta: { attempts: attempt + 1 } });
+			release = acquired.release;
+			stopPump = deps.startPump(acquired.source);
 			return;
 		}
-		release = acquired.release;
-		stopPump = deps.startPump(acquired.source);
 	})().catch((err) => {
 		deps.logger.warn("session-decode: guarded start failed", { meta: { error: require_dist.errMsg(err) } });
 	});
 	return () => {
 		aborted = true;
+		if (retryTimer !== null) {
+			clearTimeout(retryTimer);
+			retryTimer = null;
+		}
 		stopPump?.();
 		if (release) release();
 	};

package/dist/pipeline-runner/index.mjs

@@ -2,7 +2,7 @@ import { B as errMsg, G as createEvent, M as pipelineRunnerCapability, S as defi
 import { n as profileForStreamId, t as isRemoteRestream } from "../remote-restream-BeHi78PZ.mjs";
 import { t as resolveHubHostname } from "../hub-hostname-cCknRYKj.mjs";
 import { t as isWorkerReply } from "../worker-protocol-D7RzZIla.mjs";
-import { a as getStepDefinition } from "../step-definitions-C8A78dBi.mjs";
+import { a as getStepDefinition } from "../step-definitions-1GIwU6R8.mjs";
 import { fork } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import sharp from "sharp";
@@ -652,6 +652,9 @@ function toFrameInput$1(frame) {
 * without spinning up Moleculer or the addon framework.
 */
 var PipelineRunner = class {
+	/** Abandoned inference calls that have not yet settled. A BURST reads as
+	*  one rising number instead of N unrelated lines. */
+	inflightTimeouts = 0;
 	config;
 	cameras = /* @__PURE__ */ new Map();
 	semaphore;
@@ -1138,16 +1141,33 @@ var PipelineRunner = class {
 			timer.unref?.();
 		});
 		try {
-			const outcome = await Promise.race([this.config.processFrame(deviceId, frameInput, executorHandle), expiry]);
+			const inflight = this.config.processFrame(deviceId, frameInput, executorHandle);
+			const outcome = await Promise.race([inflight, expiry]);
 			if (outcome === TIMED_OUT) {
 				release();
+				this.inflightTimeouts += 1;
 				this.logger?.warn("inference timed out — permit released, result discarded", {
 					tags: { deviceId },
 					meta: {
 						timeoutMs,
-						availablePermits: this.semaphore.available
+						availablePermits: this.semaphore.available,
+						outstandingTimeouts: this.inflightTimeouts
 					}
 				});
+				const deadlineAt = Date.now();
+				const noteSettled = (fate) => {
+					this.inflightTimeouts = Math.max(0, this.inflightTimeouts - 1);
+					this.logger?.info("inference: abandoned call settled after the deadline", {
+						tags: { deviceId },
+						meta: {
+							lateByMs: Date.now() - deadlineAt,
+							totalMs: timeoutMs + (Date.now() - deadlineAt),
+							fate,
+							outstandingTimeouts: this.inflightTimeouts
+						}
+					});
+				};
+				inflight.then(() => noteSettled("resolved"), () => noteSettled("rejected"));
 			}
 			return outcome;
 		} finally {
@@ -1330,7 +1350,24 @@ function forkDecodeWorker(_source) {
 //#endregion
 //#region src/session-decode/guarded-session-decode.ts
 /**
-* Guards the in-flight restream-acquire against a detach/unsubscribe race.
+* 2s → 5s → 15s → 30s, then 30s forever.
+*
+* Indefinite is deliberate. The failure this recovers from is "the broker has
+* no profile bound yet" or "the broker call failed right now" — both of which
+* clear on their own, often minutes later (a source re-dialing, a runner
+* restarting). A bounded retry would turn a slow recovery back into the
+* permanent outage this exists to prevent, and teardown already stops it: a
+* detach aborts the loop, so nothing retries for a camera nobody wants.
+*/
+var DEFAULT_ACQUIRE_RETRY_DELAYS_MS = [
+	2e3,
+	5e3,
+	15e3,
+	3e4
+];
+/**
+* Guards the in-flight restream-acquire against a detach/unsubscribe race,
+* and retries an acquire that fails.
 *
 * `acquireSessionDecodeRestream` + forking the decode worker both take real
 * time (a broker round-trip, then a process fork). If the caller's teardown
@@ -1342,29 +1379,71 @@ function forkDecodeWorker(_source) {
 *
 * This helper returns the teardown SYNCHRONOUSLY. The acquire + pump-start
 * run in the background; an `aborted` flag recorded by the (possibly
-* already-called) teardown is checked right after the acquire resolves —
-* if set, the restream is released immediately and the pump is NEVER
+* already-called) teardown is checked right after each acquire resolves —
+* if set, any restream is released immediately and the pump is NEVER
 * started (no orphan worker). Otherwise the pump starts and the teardown,
 * once called, stops the pump then releases the restream.
+*
+* **A failed acquire is retried, not swallowed.** The teardown handed back
+* here is stored by the caller (as `attachment.detectionUnsubscribe`) the
+* instant this returns, so a `return` on failure left that handle permanently
+* non-null with no pump behind it: `onEnded` could never fire because nothing
+* had ever started, the camera's phase stayed `active`, and not one frame
+* arrived again. The motion path was hardened against this shape by a frame
+* freshness window (`MOTION_FRESHNESS_WINDOW_MS`); this is the detection
+* path's half.
 */
 function startGuardedSessionDecode(deps) {
 	let aborted = false;
 	let stopPump = null;
 	let release = null;
+	let retryTimer = null;
+	const delays = deps.acquireRetryDelaysMs && deps.acquireRetryDelaysMs.length > 0 ? deps.acquireRetryDelaysMs : DEFAULT_ACQUIRE_RETRY_DELAYS_MS;
+	/** Resolves after the backoff for `attempt`, or immediately once aborted. */
+	const waitBackoff = (attempt) => new Promise((resolve) => {
+		const ms = delays[Math.min(attempt, delays.length - 1)] ?? delays[delays.length - 1] ?? 2e3;
+		retryTimer = setTimeout(() => {
+			retryTimer = null;
+			resolve();
+		}, ms);
+		retryTimer.unref?.();
+	});
 	(async () => {
-		const acquired = await deps.acquire();
-		if (!acquired) return;
-		if (aborted) {
-			acquired.release();
+		for (let attempt = 0; !aborted; attempt++) {
+			let acquired = null;
+			try {
+				acquired = await deps.acquire();
+			} catch (err) {
+				(attempt === 0 ? deps.logger.warn : deps.logger.debug).call(deps.logger, "session-decode: acquire failed — retrying", { meta: {
+					attempt: attempt + 1,
+					error: errMsg(err)
+				} });
+				await waitBackoff(attempt);
+				continue;
+			}
+			if (aborted) {
+				if (acquired) acquired.release();
+				return;
+			}
+			if (!acquired) {
+				(attempt === 0 ? deps.logger.warn : deps.logger.debug).call(deps.logger, "session-decode: no broker profile bound yet — retrying", { meta: { attempt: attempt + 1 } });
+				await waitBackoff(attempt);
+				continue;
+			}
+			if (attempt > 0) deps.logger.info("session-decode: acquire succeeded after retry", { meta: { attempts: attempt + 1 } });
+			release = acquired.release;
+			stopPump = deps.startPump(acquired.source);
 			return;
 		}
-		release = acquired.release;
-		stopPump = deps.startPump(acquired.source);
 	})().catch((err) => {
 		deps.logger.warn("session-decode: guarded start failed", { meta: { error: errMsg(err) } });
 	});
 	return () => {
 		aborted = true;
+		if (retryTimer !== null) {
+			clearTimeout(retryTimer);
+			retryTimer = null;
+		}
 		stopPump?.();
 		if (release) release();
 	};

package/dist/{step-definitions-C8A78dBi.mjs → step-definitions-1GIwU6R8.mjs}

@@ -1296,7 +1296,18 @@ var ObjectDetectionStep = class {
 				min: 0,
 				max: 1,
 				step: .05,
-				default: .5,
+				default: .65,
+				showValue: true
+			},
+			{
+				type: "slider",
+				key: "fullFrameGuardHardAreaRatio",
+				label: "Drop full-frame boxes above",
+				description: "Fraction of the frame at or above which a detection is dropped WHATEVER its score. 1 = off. Use on cameras where a subject can never fill the frame; leave off for doorbells and close-up lenses.",
+				min: .5,
+				max: 1,
+				step: .01,
+				default: 1,
 				showValue: true
 			},
 			{

package/dist/{step-definitions-Bo1hJQQw.js → step-definitions-Drb9cWbB.js}

@@ -1296,7 +1296,18 @@ var ObjectDetectionStep = class {
 				min: 0,
 				max: 1,
 				step: .05,
-				default: .5,
+				default: .65,
+				showValue: true
+			},
+			{
+				type: "slider",
+				key: "fullFrameGuardHardAreaRatio",
+				label: "Drop full-frame boxes above",
+				description: "Fraction of the frame at or above which a detection is dropped WHATEVER its score. 1 = off. Use on cameras where a subject can never fill the frame; leave off for doorbells and close-up lenses.",
+				min: .5,
+				max: 1,
+				step: .01,
+				default: 1,
 				showValue: true
 			},
 			{

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-pipeline",
-  "version": "1.2.27",
+  "version": "1.2.29",
   "description": "CamStack Pipeline bundle — runner, detection, motion, audio + stream broker. Multi-entry npm package shipping pipeline addons under a single bundle.",
   "keywords": [
     "camstack",