@camstack/addon-pipeline 1.2.301 → 1.2.303

package/dist/audio-analyzer/index.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-BUs7H-fe.js");
-const require_process_memory = require("../process-memory-DmYzYip-.js");
+const require_dist = require("../dist-CyWAhtbJ.js");
+const require_process_memory = require("../process-memory-DMS-0oRT.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_path = require("node:path");

package/dist/audio-analyzer/index.mjs

@@ -1,6 +1,6 @@
 import { n as __require } from "../chunk-DnnnRqeS.mjs";
-import { E as HF_BASE_URL, G as audioAnalyzerCapability, Rn as EventCategory, Ut as resolvePoolMemoryPolicy, W as audioAnalysisCapability, _n as hydrateSchema, bt as mapAudioLabelToMacro, en as errMsg, fn as audioChunkBytesPerSample, gn as expandAudioChunkToF32le, j as PoolMemoryWatchdog, n as AUDIO_BACKEND_CHOICES, p as DEFAULT_AUDIO_ANALYZER_CONFIG, sn as BaseAddon, xn as nodePin } from "../dist-DvzAabca.mjs";
-import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-BMr61qT1.mjs";
+import { E as HF_BASE_URL, G as audioAnalyzerCapability, Rn as EventCategory, Ut as resolvePoolMemoryPolicy, W as audioAnalysisCapability, _n as hydrateSchema, bt as mapAudioLabelToMacro, en as errMsg, fn as audioChunkBytesPerSample, gn as expandAudioChunkToF32le, j as PoolMemoryWatchdog, n as AUDIO_BACKEND_CHOICES, p as DEFAULT_AUDIO_ANALYZER_CONFIG, sn as BaseAddon, xn as nodePin } from "../dist-CLZmZfHT.mjs";
+import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-CCx6i9av.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";
 import { downloadFile } from "@camstack/system/addon-utils";

package/dist/{default-detection-model-JDKeiJPf.mjs → default-detection-model-BroB5Jp1.mjs}

@@ -1,4 +1,4 @@
-import { K as audioKindId, Kt as stepModelRunsOnFormat, d as COCO_80_LABELS, f as COCO_TO_MACRO, gt as inferModelProvider, ht as hfModelUrl, r as AUDIO_MACRO_LABELS, y as DEVICE_BACKEND_TO_FORMAT } from "./dist-DvzAabca.mjs";
+import { K as audioKindId, Kt as stepModelRunsOnFormat, d as COCO_80_LABELS, f as COCO_TO_MACRO, gt as inferModelProvider, ht as hfModelUrl, r as AUDIO_MACRO_LABELS, y as DEVICE_BACKEND_TO_FORMAT } from "./dist-CLZmZfHT.mjs";
 import { randomUUID } from "node:crypto";
 //#region src/detection-pipeline/registry/effective-confidence.ts
 /** The default in force: the model's own floor, else the step's. */

package/dist/{default-detection-model-P7IIrP0a.js → default-detection-model-vN686W1U.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-BUs7H-fe.js");
+const require_dist = require("./dist-CyWAhtbJ.js");
 let node_crypto = require("node:crypto");
 //#region src/detection-pipeline/registry/effective-confidence.ts
 /** The default in force: the model's own floor, else the step's. */

package/dist/detection-pipeline/index.js

@@ -3,11 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-BUs7H-fe.js");
-const require_node = require("../node-DxVMyys-.js");
-const require_default_detection_model = require("../default-detection-model-P7IIrP0a.js");
+const require_dist = require("../dist-CyWAhtbJ.js");
+const require_node = require("../node-BDrkzYiH.js");
+const require_default_detection_model = require("../default-detection-model-vN686W1U.js");
 const require_lazy_sharp = require("../lazy-sharp-BuwKlQLR.js");
-const require_process_memory = require("../process-memory-DmYzYip-.js");
+const require_process_memory = require("../process-memory-DMS-0oRT.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 let node_fs = require("node:fs");

package/dist/detection-pipeline/index.mjs

@@ -1,9 +1,9 @@
 import { n as __require } from "../chunk-DnnnRqeS.mjs";
-import { Dn as array, Dt as overlayClusterStepSettings, Gt as runtimeDevices$1, H as YAMNET_TO_MACRO, In as string, Kt as stepModelRunsOnFormat, Ln as union, Mt as pipelineExecutorCapability, Nn as object, Rn as EventCategory, Sn as parseJsonUnknown, Tn as sleep, Ut as resolvePoolMemoryPolicy, Zt as supportedRuntimes$1, _n as hydrateSchema, en as errMsg, et as defaultDeviceFor$1, it as detectionPipelineCapability, j as PoolMemoryWatchdog, kt as pickClusterStepSettings, lt as evaluateZoneRules, m as DEFAULT_CLUSTER_STEP_SETTINGS, pn as createEvent, sn as BaseAddon, st as enumerateInferenceDevices, t as APPLE_SA_TO_MACRO, u as CLUSTER_MODEL_SCOPED_STEPS, vt as loadContributionCapability, xn as nodePin, y as DEVICE_BACKEND_TO_FORMAT, zt as resolveClusterStepModelId } from "../dist-DvzAabca.mjs";
-import { s as readProcessCost } from "../node-DnP_6GBZ.mjs";
-import { _ as resolveModelForFormat, a as buildSubtreeCanRun, b as resolveModelDefaultConfidence, c as macroGateVerdict, f as ALL_PIPELINE_STEPS, g as getStepDefinition, h as getStep, i as mergeCustomModels, m as getDefaultModelForFormat, n as resolveDefaultDetectionModel, p as ALL_STEPS, r as CustomModelCatalog, u as localFrameRegistry, y as landmarkPrecisionVerdict } from "../default-detection-model-JDKeiJPf.mjs";
+import { Dn as array, Dt as overlayClusterStepSettings, Gt as runtimeDevices$1, H as YAMNET_TO_MACRO, In as string, Kt as stepModelRunsOnFormat, Ln as union, Mt as pipelineExecutorCapability, Nn as object, Rn as EventCategory, Sn as parseJsonUnknown, Tn as sleep, Ut as resolvePoolMemoryPolicy, Zt as supportedRuntimes$1, _n as hydrateSchema, en as errMsg, et as defaultDeviceFor$1, it as detectionPipelineCapability, j as PoolMemoryWatchdog, kt as pickClusterStepSettings, lt as evaluateZoneRules, m as DEFAULT_CLUSTER_STEP_SETTINGS, pn as createEvent, sn as BaseAddon, st as enumerateInferenceDevices, t as APPLE_SA_TO_MACRO, u as CLUSTER_MODEL_SCOPED_STEPS, vt as loadContributionCapability, xn as nodePin, y as DEVICE_BACKEND_TO_FORMAT, zt as resolveClusterStepModelId } from "../dist-CLZmZfHT.mjs";
+import { s as readProcessCost } from "../node-C5LXX8Qo.mjs";
+import { _ as resolveModelForFormat, a as buildSubtreeCanRun, b as resolveModelDefaultConfidence, c as macroGateVerdict, f as ALL_PIPELINE_STEPS, g as getStepDefinition, h as getStep, i as mergeCustomModels, m as getDefaultModelForFormat, n as resolveDefaultDetectionModel, p as ALL_STEPS, r as CustomModelCatalog, u as localFrameRegistry, y as landmarkPrecisionVerdict } from "../default-detection-model-BroB5Jp1.mjs";
 import { t as getSharp } from "../lazy-sharp-DXsqwpph.mjs";
-import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-BMr61qT1.mjs";
+import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-CCx6i9av.mjs";
 import * as os from "node:os";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";

package/dist/{dist-DvzAabca.mjs → dist-CLZmZfHT.mjs}

@@ -24228,7 +24228,15 @@ var RebuildObjectEmbeddingsInput = object({
 	* force is logged at start and finish so a deliberately slow pass reads
 	* differently from a stalled one.
 	*/
-	pacingMs: number().int().nonnegative().optional()
+	pacingMs: number().int().nonnegative().optional(),
+	/**
+	* Re-embed ONLY the tracks whose vector is ALREADY in the pinned model's
+	* space (D664) — the in-space skip inverted. It exists to redo vectors
+	* written from the wrong box, which a normal pass would skip as done
+	* forever. Requires `maxTracks`: a forced pass without a bound is refused
+	* (`force-requires-max-tracks`).
+	*/
+	force: boolean().optional()
 });
 /**
 * Result of emptying the CLIP index.
@@ -24264,6 +24272,7 @@ var WipeObjectEmbeddingsResultSchema = object({
 *    - `reads-disagree` — the two reads named different choices.
 *  - `not-a-clip-model` — the CONFIRMED id has no CLIP metadata, so there is no
 *    index to fill and no dimension to check against (D649).
+*  - `force-requires-max-tracks` — `force: true` with no `maxTracks` (D664).
 */
 var RebuildObjectEmbeddingsRefusalSchema = _enum([
 	"stores-unavailable",
@@ -24271,7 +24280,8 @@ var RebuildObjectEmbeddingsRefusalSchema = _enum([
 	"method-unavailable",
 	"read-failed",
 	"reads-disagree",
-	"not-a-clip-model"
+	"not-a-clip-model",
+	"force-requires-max-tracks"
 ]);
 /**
 * Acknowledgement that a rebuild STARTED.
@@ -24296,11 +24306,32 @@ var RebuildStatusSchema = object({
 	running: boolean(),
 	scanned: number(),
 	rebuilt: number(),
-	/** Tracks whose key frame is gone — nothing to re-embed from. */
+	/** Tracks whose key frame is gone — nothing to re-embed from. Pixels ONLY:
+	*  `missingEvent` is its own field since D664, never summed in. */
 	missingKeyFrame: number(),
-	/** Tracks with no usable detection box. */
+	/** Tracks with no object event at all (D664). */
+	missingEvent: number(),
+	/** Tracks with no box measured on the pixels to cut — see `boxSource.refused`. */
 	missingBbox: number(),
 	/**
+	* Which rule placed each judged track's box (D664): the key frame row's own
+	* `subjectBox`, `track.positions` at exactly its instant (older key frames),
+	* the event box (a key frame recovered from the recording, at the event's
+	* instant), or `refused` by name — the reasons are in the tagged log lines.
+	*/
+	boxSource: object({
+		subjectBox: number(),
+		positions: number(),
+		event: number(),
+		refused: number()
+	}),
+	/** Tracks skipped because their vector is already in the pinned space. */
+	alreadyInSpace: number(),
+	/** Whether the current / last pass was a `force` pass; `null` before any (D664). */
+	force: boolean().nullable(),
+	/** In-space tracks a `force` pass selected for re-embedding. */
+	forcedInSpace: number(),
+	/**
 	* Tracks an executing node REFUSED rather than broke on — an unreadable key
 	* frame, a step that threw. Separate from `failed` because the remedy is
 	* different, and because a whole camera silently contributing zero vectors

package/dist/{dist-BUs7H-fe.js → dist-CyWAhtbJ.js}

@@ -24228,7 +24228,15 @@ var RebuildObjectEmbeddingsInput = object({
 	* force is logged at start and finish so a deliberately slow pass reads
 	* differently from a stalled one.
 	*/
-	pacingMs: number().int().nonnegative().optional()
+	pacingMs: number().int().nonnegative().optional(),
+	/**
+	* Re-embed ONLY the tracks whose vector is ALREADY in the pinned model's
+	* space (D664) — the in-space skip inverted. It exists to redo vectors
+	* written from the wrong box, which a normal pass would skip as done
+	* forever. Requires `maxTracks`: a forced pass without a bound is refused
+	* (`force-requires-max-tracks`).
+	*/
+	force: boolean().optional()
 });
 /**
 * Result of emptying the CLIP index.
@@ -24264,6 +24272,7 @@ var WipeObjectEmbeddingsResultSchema = object({
 *    - `reads-disagree` — the two reads named different choices.
 *  - `not-a-clip-model` — the CONFIRMED id has no CLIP metadata, so there is no
 *    index to fill and no dimension to check against (D649).
+*  - `force-requires-max-tracks` — `force: true` with no `maxTracks` (D664).
 */
 var RebuildObjectEmbeddingsRefusalSchema = _enum([
 	"stores-unavailable",
@@ -24271,7 +24280,8 @@ var RebuildObjectEmbeddingsRefusalSchema = _enum([
 	"method-unavailable",
 	"read-failed",
 	"reads-disagree",
-	"not-a-clip-model"
+	"not-a-clip-model",
+	"force-requires-max-tracks"
 ]);
 /**
 * Acknowledgement that a rebuild STARTED.
@@ -24296,11 +24306,32 @@ var RebuildStatusSchema = object({
 	running: boolean(),
 	scanned: number(),
 	rebuilt: number(),
-	/** Tracks whose key frame is gone — nothing to re-embed from. */
+	/** Tracks whose key frame is gone — nothing to re-embed from. Pixels ONLY:
+	*  `missingEvent` is its own field since D664, never summed in. */
 	missingKeyFrame: number(),
-	/** Tracks with no usable detection box. */
+	/** Tracks with no object event at all (D664). */
+	missingEvent: number(),
+	/** Tracks with no box measured on the pixels to cut — see `boxSource.refused`. */
 	missingBbox: number(),
 	/**
+	* Which rule placed each judged track's box (D664): the key frame row's own
+	* `subjectBox`, `track.positions` at exactly its instant (older key frames),
+	* the event box (a key frame recovered from the recording, at the event's
+	* instant), or `refused` by name — the reasons are in the tagged log lines.
+	*/
+	boxSource: object({
+		subjectBox: number(),
+		positions: number(),
+		event: number(),
+		refused: number()
+	}),
+	/** Tracks skipped because their vector is already in the pinned space. */
+	alreadyInSpace: number(),
+	/** Whether the current / last pass was a `force` pass; `null` before any (D664). */
+	force: boolean().nullable(),
+	/** In-space tracks a `force` pass selected for re-embedding. */
+	forcedInSpace: number(),
+	/**
 	* Tracks an executing node REFUSED rather than broke on — an unreadable key
 	* frame, a step that threw. Separate from `failed` because the remedy is
 	* different, and because a whole camera silently contributing zero vectors

package/dist/motion-wasm/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-BUs7H-fe.js");
+const require_dist = require("../dist-CyWAhtbJ.js");
 const require_lazy_sharp = require("../lazy-sharp-BuwKlQLR.js");
 let node_fs = require("node:fs");
 let node_path = require("node:path");

package/dist/motion-wasm/index.mjs

@@ -1,4 +1,4 @@
-import { Et as motionDetectionCapability, _n as hydrateSchema, dn as DeviceType, lt as evaluateZoneRules, sn as BaseAddon } from "../dist-DvzAabca.mjs";
+import { Et as motionDetectionCapability, _n as hydrateSchema, dn as DeviceType, lt as evaluateZoneRules, sn as BaseAddon } from "../dist-CLZmZfHT.mjs";
 import { t as getSharp } from "../lazy-sharp-DXsqwpph.mjs";
 import { readFileSync } from "node:fs";
 import { join } from "node:path";

package/dist/{node-DxVMyys-.js → node-BDrkzYiH.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-emK7D4bc.js");
-const require_dist = require("./dist-BUs7H-fe.js");
+const require_dist = require("./dist-CyWAhtbJ.js");
 let node_crypto = require("node:crypto");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs, 1);

package/dist/{node-DnP_6GBZ.mjs → node-C5LXX8Qo.mjs}

@@ -1,4 +1,4 @@
-import { an as isSoftwareDecode, en as errMsg, nn as Fmp4BoxSplitter, rn as buildFfmpegArgs } from "./dist-DvzAabca.mjs";
+import { an as isSoftwareDecode, en as errMsg, nn as Fmp4BoxSplitter, rn as buildFfmpegArgs } from "./dist-CLZmZfHT.mjs";
 import { randomUUID } from "node:crypto";
 import { realpathSync } from "node:fs";
 import path from "node:path";

package/dist/pipeline-runner/index.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-BUs7H-fe.js");
-const require_node = require("../node-DxVMyys-.js");
-const require_default_detection_model = require("../default-detection-model-P7IIrP0a.js");
+const require_dist = require("../dist-CyWAhtbJ.js");
+const require_node = require("../node-BDrkzYiH.js");
+const require_default_detection_model = require("../default-detection-model-vN686W1U.js");
 const require_worker_protocol = require("../worker-protocol-C-G8qmye.js");
 const require_hub_hostname = require("../hub-hostname-DAJXlOgV.js");
 const require_lazy_sharp = require("../lazy-sharp-BuwKlQLR.js");
@@ -41,14 +41,18 @@ var KILL_SIGNALS = {
 * parameter rather than a second `child.on('exit')` in the caller because
 * every listener added out here is one somebody can forget to remove.
 */
-function wrapChild(child, onExit) {
+function wrapChild(child, onExit, killedByRunner = () => false) {
 	let spawned = false;
 	let exitDelivered = false;
 	const exitListeners = [];
-	const deliverExit = (info) => {
+	const deliverExit = (exit) => {
 		if (exitDelivered) return;
 		exitDelivered = true;
 		onExit();
+		const info = killedByRunner() ? {
+			...exit,
+			killedByRunner: true
+		} : exit;
 		for (const listener of exitListeners) listener(info);
 	};
 	child.on("spawn", () => {
@@ -102,19 +106,179 @@ function wrapChild(child, onExit) {
 * node-av through `CAMSTACK_FRAMEWORK_DIR` / `CAMSTACK_BUNDLED_ADDONS_DIR` on
 * agents, so a replaced env would silently break decoding off the hub.
 */
-function forkDecodeWorker(source, costRegistry) {
-	const child = (0, node_child_process.fork)(CHILD_ENTRY_PATH, [], {
+function forkDecodeWorker(source, deps) {
+	return forkDecodeWorkerAt(CHILD_ENTRY_PATH, source, deps ?? {});
+}
+/**
+* {@link forkDecodeWorker} with the entry named — the one seam a process-level
+* test needs to fork a stub through the REAL fork, claim and live-worker path.
+* Production forks only {@link CHILD_ENTRY_PATH}.
+*/
+function forkDecodeWorkerAt(entryPath, source, deps) {
+	const child = (0, node_child_process.fork)(entryPath, [], {
 		serialization: "advanced",
 		env: { ...process.env }
 	});
-	const costClaim = costRegistry?.claim({
+	const costClaim = deps.costRegistry?.claim({
 		role: "decode",
 		deviceId: source.deviceId,
 		unit: `${source.deviceId}/decode`,
 		pid: child.pid
 	}) ?? require_node.NO_COST_CLAIM;
-	return wrapChild(child, () => costClaim.release());
+	let killedByRunner = false;
+	const untrack = deps.liveWorkers?.add({
+		deviceId: source.deviceId,
+		pid: child.pid,
+		killNow: () => {
+			killedByRunner = true;
+			child.kill("SIGKILL");
+		}
+	}) ?? (() => void 0);
+	return wrapChild(child, () => {
+		costClaim.release();
+		untrack();
+	}, () => killedByRunner);
+}
+//#endregion
+//#region src/session-decode/live-decode-workers.ts
+var KILL_MESSAGE = {
+	shutdown: "session-decode: worker killed at shutdown",
+	"forked-after-shutdown": "session-decode: worker forked after shutdown began — killed at once",
+	"process-exit": "session-decode: worker killed at process exit"
+};
+/** Send the signal. Never throws: a failure is the outcome. */
+function signal(worker) {
+	try {
+		worker.killNow();
+		return {
+			worker,
+			error: null
+		};
+	} catch (err) {
+		return {
+			worker,
+			error: require_dist.errMsg(err)
+		};
+	}
+}
+/**
+* One line per outcome, each in its own swallowing try. The logger may throw:
+* the `'exit'` hook runs while the transport goes down, and the runner's
+* write path has no guard. A line that fails must not cost another line.
+*/
+function logOutcomes(outcomes, reason, logger) {
+	for (const { worker, error } of outcomes) try {
+		if (error === null) logger.info(KILL_MESSAGE[reason], {
+			tags: { deviceId: worker.deviceId },
+			meta: {
+				pid: worker.pid ?? null,
+				signal: "SIGKILL",
+				reason
+			}
+		});
+		else logger.warn("session-decode: worker kill failed — it may outlive the runner", {
+			tags: { deviceId: worker.deviceId },
+			meta: {
+				pid: worker.pid ?? null,
+				reason,
+				error
+			}
+		});
+	} catch {}
 }
+var LiveDecodeWorkers = class {
+	live = /* @__PURE__ */ new Set();
+	/** Set by {@link close}: from then on a worker is killed as it is added. */
+	closedLogger = null;
+	/** Track a forked worker; call the returned function from its real exit. */
+	add(worker) {
+		if (this.closedLogger !== null) {
+			const outcome = signal(worker);
+			logOutcomes([outcome], "forked-after-shutdown", this.closedLogger);
+			if (outcome.error === null) return () => void 0;
+		}
+		this.live.add(worker);
+		return () => {
+			this.live.delete(worker);
+		};
+	}
+	get size() {
+		return this.live.size;
+	}
+	/**
+	* SIGKILL every tracked worker now, then one log line per worker. SIGKILL
+	* rather than SIGTERM: the runner is about to exit and cannot wait for a
+	* fallback, and a worker blocked in a native call never runs a SIGTERM
+	* handler (D652).
+	*
+	* EVERY worker is signalled before ANY line is written: a logger that throws
+	* must not stop the kills. A signalled worker is forgotten (a second pass
+	* logs nothing twice); one whose kill threw stays tracked, so the exit hook
+	* or a later pass tries it again. Returns how many it signalled.
+	*/
+	killAll(reason, logger) {
+		const outcomes = [...this.live].map(signal);
+		for (const outcome of outcomes) if (outcome.error === null) this.live.delete(outcome.worker);
+		logOutcomes(outcomes, reason, logger);
+		return outcomes.filter((outcome) => outcome.error === null).length;
+	}
+	/** Kill everything tracked, and kill every later `add` at once. */
+	close(reason, logger) {
+		this.closedLogger = logger;
+		return this.killAll(reason, logger);
+	}
+};
+/**
+* The runner's decode workers: every fork is registered in the set, and
+* {@link shutdown} and any process exit kill whatever is still alive.
+*/
+var RunnerDecodeWorkers = class {
+	deps;
+	live = new LiveDecodeWorkers();
+	exitHookArmed = false;
+	shutDown = false;
+	constructor(deps) {
+		this.deps = deps;
+	}
+	/** Fork one worker, registered and cost-claimed. */
+	fork = (source) => {
+		this.armExitHook();
+		return this.deps.fork(source, {
+			costRegistry: this.deps.costRegistry,
+			liveWorkers: this.live
+		});
+	};
+	/**
+	* The addon is shutting down: kill every worker, and every later fork at
+	* once. Synchronous, so it is done before the runner's `process.exit`.
+	*/
+	shutdown() {
+		this.shutDown = true;
+		const killed = this.live.close("shutdown", this.deps.logger);
+		if (this.live.size === 0) this.disarmExitHook();
+		return killed;
+	}
+	/**
+	* The process is exiting without having shut this addon down (an uncaught
+	* error, or an `onShutdown` that never reached {@link shutdown}). The log
+	* line is attempted but will probably not land: the transport goes down
+	* with the process.
+	*/
+	onProcessExit = () => {
+		this.exitHookArmed = false;
+		this.live.close("process-exit", this.deps.logger);
+	};
+	armExitHook() {
+		if (this.exitHookArmed || this.shutDown) return;
+		this.exitHookArmed = true;
+		this.deps.process.once("exit", this.onProcessExit);
+	}
+	disarmExitHook() {
+		if (!this.exitHookArmed) return;
+		this.exitHookArmed = false;
+		this.deps.process.removeListener("exit", this.onProcessExit);
+	}
+};
 //#endregion
 //#region src/session-decode/native-lease-config.ts
 /**
@@ -1722,6 +1886,11 @@ var SessionDecodeSession = class {
 	/** Set when `kill()` is sent, so handleExit can tell an intentional stop from a death. */
 	killSent = false;
 	/**
+	* A SIGKILL already went out — an `'immediate'` teardown from the pump
+	* (D666) and the generator's later `finally` both escalate; one kill is enough.
+	*/
+	sigkillSent = false;
+	/**
 	* Images yielded and not yet closed that a CONSUMER still holds — queued,
 	* in flight, or being read. Each dies with the worker and somebody was going
 	* to read it first. This is what a drain waits on.
@@ -1933,7 +2102,7 @@ var SessionDecodeSession = class {
 	}
 	/** The drain (or a SIGTERM still waiting on its fallback) gives way to SIGKILL now. */
 	escalateToImmediate() {
-		if (this.exited) return;
+		if (this.exited || this.sigkillSent) return;
 		if (this.drainTimer !== null) {
 			clearTimeout(this.drainTimer);
 			this.drainTimer = null;
@@ -2120,7 +2289,14 @@ var SessionDecodeSession = class {
 	}
 	handleExit(info) {
 		if (!this.exited) this.hooks.onWorkerExit?.();
-		if (!this.killSent && !this.exited) this.logger.warn(this.stopRequested ? "session-decode worker exited unexpectedly while draining" : "session-decode worker exited unexpectedly", {
+		if (!this.killSent && !this.exited && info?.killedByRunner === true) this.logger.debug("session-decode worker ended by the runner shutdown kill", {
+			tags: { deviceId: this.deviceId },
+			meta: {
+				code: info.code,
+				signal: info.signal
+			}
+		});
+		else if (!this.killSent && !this.exited) this.logger.warn(this.stopRequested ? "session-decode worker exited unexpectedly while draining" : "session-decode worker exited unexpectedly", {
 			tags: { deviceId: this.deviceId },
 			meta: {
 				code: info?.code ?? null,
@@ -2312,11 +2488,15 @@ var SessionDecodeSession = class {
 	tryKill(signal) {
 		try {
 			this.child.kill(signal);
+			if (signal === "SIGKILL") this.sigkillSent = true;
 		} catch (err) {
-			this.logger.warn("session-decode-coordinator: kill() on child failed", { meta: {
-				signal,
-				err: toError(err).message
-			} });
+			this.logger.warn("session-decode-coordinator: kill() on child failed", {
+				tags: { deviceId: this.deviceId },
+				meta: {
+					signal,
+					err: toError(err).message
+				}
+			});
 		}
 	}
 };
@@ -2586,6 +2766,7 @@ function startSessionDecodePump(deps) {
 		stopped = true;
 		teardownMode = mode;
 		releaseSpawnSlotOnce();
+		if (mode === "immediate") escalateSession?.("immediate");
 		iterator.return().catch(() => {});
 	};
 }
@@ -5960,6 +6141,60 @@ var Semaphore = class {
 		if (next) next();
 	}
 };
+//#endregion
+//#region src/pipeline-runner/below-floor-tally.ts
+var BELOW_FLOOR_BANDS = [
+	"<0.35",
+	"0.35-0.50",
+	"0.50-0.65",
+	">=0.65"
+];
+function belowFloorBand(score) {
+	if (score < .35) return "<0.35";
+	if (score < .5) return "0.35-0.50";
+	if (score < .65) return "0.50-0.65";
+	return ">=0.65";
+}
+function addInto(into, macroClass, band, n) {
+	const row = into[macroClass] ?? {};
+	row[band] = (row[band] ?? 0) + n;
+	into[macroClass] = row;
+}
+/** One frame's `below-threshold` discards, tallied. Other reasons are not the
+*  floor's doing and are not counted here. */
+function tallyBelowFloor(discarded) {
+	const out = {};
+	if (discarded === void 0) return out;
+	for (const d of discarded) {
+		if (d.reason !== "below-threshold") continue;
+		addInto(out, d.macroClass, belowFloorBand(d.score), 1);
+	}
+	return out;
+}
+/** Per-device running sum between two stats reports. */
+var BelowFloorAccumulator = class {
+	byDevice = /* @__PURE__ */ new Map();
+	add(deviceId, tally) {
+		const classes = Object.keys(tally);
+		if (classes.length === 0) return;
+		const into = this.byDevice.get(deviceId) ?? {};
+		for (const macroClass of classes) {
+			const row = tally[macroClass];
+			if (row === void 0) continue;
+			for (const band of BELOW_FLOOR_BANDS) {
+				const n = row[band];
+				if (n !== void 0 && n > 0) addInto(into, macroClass, band, n);
+			}
+		}
+		this.byDevice.set(deviceId, into);
+	}
+	/** The sum since the last drain, and reset. `{}` is a measured zero. */
+	drain(deviceId) {
+		const out = this.byDevice.get(deviceId) ?? {};
+		this.byDevice.delete(deviceId);
+		return out;
+	}
+};
 var MotionWithoutInferenceDetector = class {
 	streak = /* @__PURE__ */ new Map();
 	reported = /* @__PURE__ */ new Set();
@@ -6024,6 +6259,8 @@ var PipelineTimingSampler = class {
 	droppedSources = /* @__PURE__ */ new Map();
 	/** Cumulative value seen at the previous report — the delta base. */
 	lastDroppedCumulative = /* @__PURE__ */ new Map();
+	/** Boxes the operator's class floor dropped since the last report (D665). */
+	belowFloor = new BelowFloorAccumulator();
 	reportTimer = null;
 	log = null;
 	runtimeInfo = {};
@@ -6043,6 +6280,7 @@ var PipelineTimingSampler = class {
 	addSample(deviceId, s) {
 		if (!this.detSamples.has(deviceId)) this.detSamples.set(deviceId, []);
 		this.detSamples.get(deviceId).push(s);
+		if (s.belowFloor !== void 0) this.belowFloor.add(deviceId, s.belowFloor);
 	}
 	/**
 	* Moving average inference time (ms) per camera over the current
@@ -6144,6 +6382,7 @@ var PipelineTimingSampler = class {
 						p95: p95(inf)
 					},
 					detections: totalDet,
+					belowFloor: this.belowFloor.drain(deviceId),
 					dropped,
 					pipelineRuntime: rt.pipelineRuntime ?? null,
 					pipelineModels: rt.pipelineModels ?? null
@@ -6967,7 +7206,8 @@ var PipelineRunner = class {
 					resultToEmit: emittedAt - inferDoneAt,
 					frameAge: typeof capturedAt === "number" && capturedAt > 0 ? pickedAt - capturedAt : -1,
 					endToEnd: emittedAt - enqueuedAt,
-					detections: result.detections?.length ?? 0
+					detections: result.detections?.length ?? 0,
+					belowFloor: tallyBelowFloor(result.discarded)
 				});
 			} else frameReleaseReason = "drop";
 		} catch {
@@ -7950,6 +8190,22 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAdd
 	*/
 	costRegistry = new require_node.ChildCostRegistry();
 	/**
+	* Every decode worker this process forked, from ANY spawn site (live
+	* sessions, occupancy bursts), until its exit. The first thing `onShutdown`
+	* does is kill them, a fork after that is killed at once, and any process
+	* exit kills what is left (D666). The logger is only unready before
+	* `initialize()`, when no worker can have been forked.
+	*/
+	decodeWorkers = new RunnerDecodeWorkers({
+		fork: forkDecodeWorker,
+		costRegistry: this.costRegistry,
+		logger: {
+			info: (message, extras) => this.ctxIfReady?.logger.info(message, extras),
+			warn: (message, extras) => this.ctxIfReady?.logger.warn(message, extras)
+		},
+		process
+	});
+	/**
 	* Per-camera inference-deadline counters reported through
 	* `failure-contribution`. Bounded, cumulative, and read (never drained) by
 	* the provider. Constructed eagerly: created on the first timeout it would
@@ -8399,6 +8655,7 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAdd
 		};
 	}
 	async onShutdown() {
+		this.decodeWorkers.shutdown();
 		if (this.runtimeInfoTimer !== null) {
 			clearInterval(this.runtimeInfoTimer);
 			this.runtimeInfoTimer = null;
@@ -9949,7 +10206,7 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAdd
 	* environment. A worker is therefore forkable before anyone knows which
 	* camera it will serve.
 	*/
-	forkDecodeWorkerWithLease = (source) => forkDecodeWorker(source, this.costRegistry);
+	forkDecodeWorkerWithLease = (source) => this.decodeWorkers.fork(source);
 	/**
 	* The lease knobs for the session that is about to start — `setting > env >
 	* default`, resolved HERE because this process is the one that carries the