@camstack/addon-pipeline 1.2.301 → 1.2.303

package/dist/session-decode/decode-worker-main.mjs

@@ -34,37 +34,131 @@ var OutboundSendTracker = class {
 };
 function createWorkerExit(deps) {
 	let exiting = false;
-	return (code) => {
-		if (exiting) return;
+	let exited = false;
+	let exitCode = 0;
+	const finish = () => {
+		if (exited) return;
+		exited = true;
+		deps.exit(exitCode);
+	};
+	return (code, urgency = "flush") => {
+		if (exiting) {
+			if (urgency === "now") finish();
+			return;
+		}
 		exiting = true;
-		let exitCode = code;
+		exitCode = code;
 		try {
 			deps.steps.quiesce();
 		} catch {
 			exitCode = 1;
-		} finally {
-			try {
-				deps.steps.flushFinalLines();
-			} catch {
-				exitCode = 1;
-			} finally {
-				deps.sends.whenIdle(deps.boundMs ?? 250).then(() => deps.exit(exitCode));
-			}
 		}
+		try {
+			deps.steps.flushFinalLines();
+		} catch {
+			exitCode = 1;
+		}
+		if (urgency === "now") {
+			finish();
+			return;
+		}
+		deps.sends.whenIdle(deps.boundMs ?? 250).then(finish);
 	};
 }
 /**
-* Route every event that ends the worker through the one bounded exit:
-* SIGTERM (the parent's `kill()`) and a lost channel exit 0, an uncaught
-* error is reported and exits 1. Before D652 there was no SIGTERM handler and
-* a `kill()` ended the process with its last lines still queued.
+* Reports every fault, rate-limited: the first {@link FAULT_REPORT_LIMIT} in
+* each {@link FAULT_REPORT_WINDOW_MS} window go out, and the rest are counted
+* and reported as one line by {@link flushSuppressed} at exit (D666).
+*
+* A report that throws is swallowed here. If it were rethrown, it would become
+* the next uncaught error, and reporting that one would write again. That is
+* the loop that kept the Mac agent's orphans spinning.
+*/
+var FaultReporter = class {
+	report;
+	reportSuppressed;
+	now;
+	windowStart = Number.NEGATIVE_INFINITY;
+	inWindow = 0;
+	suppressed = 0;
+	constructor(report, reportSuppressed, now = Date.now) {
+		this.report = report;
+		this.reportSuppressed = reportSuppressed;
+		this.now = now;
+	}
+	/** Report one fault unless the window is full; true when it was reported. */
+	fault(kind, err) {
+		const at = this.now();
+		if (at - this.windowStart >= 6e4) {
+			this.windowStart = at;
+			this.inWindow = 0;
+		}
+		if (this.inWindow >= 5) {
+			this.suppressed += 1;
+			return false;
+		}
+		this.inWindow += 1;
+		this.attempt(() => this.report(kind, err));
+		return true;
+	}
+	/** The count of faults not reported, as one line. Nothing when there were none. */
+	flushSuppressed() {
+		const count = this.suppressed;
+		if (count === 0) return;
+		this.suppressed = 0;
+		this.attempt(() => this.reportSuppressed(count));
+	}
+	attempt(write) {
+		try {
+			write();
+		} catch {}
+	}
+};
+/**
+* Route every event that ends the worker through the one exit (D652, D666):
+*
+* - SIGTERM (the parent's `kill()`) flushes, bounded; a SECOND SIGTERM exits now.
+* - a lost channel, and a changed ppid, exit NOW — the parent is gone.
+* - stdio lost is never an uncaught exception. While the channel is up it is
+*   NOT an exit: raw stderr is the secondary log path (the IPC copy is what
+*   reaches the runner's logger), so the worker says so once over IPC and
+*   keeps decoding; exiting would only make the runner re-dial into the same
+*   dead stderr. With the channel down too, it exits now.
+* - an uncaught error is reported (rate-limited) and exits 1: flushed the
+*   first time, now for every later one — a process that keeps faulting must
+*   not keep formatting stacks.
+* - an unhandled rejection is reported (rate-limited) and does not end the worker.
+*
+* When the parent is gone there is NO sink for the exit reason: stderr's
+* reader died with it and the channel is closed. The exit is not logged, and
+* must not try to be — trying is what looped.
 */
 function wireWorkerExit(deps) {
-	deps.on("SIGTERM", () => deps.exitWorker(0));
-	deps.on("disconnect", () => deps.exitWorker(0));
+	let sigterms = 0;
+	deps.on("SIGTERM", () => {
+		sigterms += 1;
+		deps.exitWorker(0, sigterms > 1 ? "now" : "flush");
+	});
+	deps.on("disconnect", () => deps.exitWorker(0, "now"));
+	deps.on("parentChanged", () => deps.exitWorker(0, "now"));
+	let stdioLost = false;
+	deps.on("stdioLost", (err) => {
+		if (!stdioLost) {
+			stdioLost = true;
+			try {
+				deps.onStdioLost(err);
+			} catch {}
+		}
+		if (!deps.parentConnected()) deps.exitWorker(0, "now");
+	});
+	let uncaught = 0;
 	deps.on("uncaughtException", (err) => {
-		deps.reportUncaught(err);
-		deps.exitWorker(1);
+		uncaught += 1;
+		deps.faults.fault("uncaughtException", err);
+		deps.exitWorker(1, uncaught > 1 ? "now" : "flush");
+	});
+	deps.on("unhandledRejection", (reason) => {
+		deps.faults.fault("unhandledRejection", reason);
 	});
 }
 //#endregion
@@ -2376,6 +2470,8 @@ var DecodeWorkerChild = class {
 	*/
 	native;
 	requestExit;
+	/** Set once the inherited stderr failed; raw writes stop (D666). */
+	stderrLost = false;
 	constructor(hooks = {}) {
 		this.requestExit = hooks.requestExit ?? (() => void 0);
 		this.native = hooks.disposer ?? new NativeDisposer((what) => this.emitStderr(`decode-worker-child: native dispose left to process exit — ${what}\n`, "debug"));
@@ -4230,7 +4326,11 @@ var DecodeWorkerChild = class {
 	*/
 	emitStderr(line, level) {
 		const tag = this.deviceId === null ? "[dev:?]" : `[dev:${this.deviceId}]`;
-		process.stderr.write(`${tag} ${line}`);
+		if (!this.stderrLost) try {
+			process.stderr.write(`${tag} ${line}`);
+		} catch {
+			this.stderrLost = true;
+		}
 		try {
 			this.send({
 				kind: "log",
@@ -4239,6 +4339,13 @@ var DecodeWorkerChild = class {
 			});
 		} catch {}
 	}
+	/**
+	* The inherited stderr failed (EPIPE — its reader died with the process that
+	* held it). From here on {@link emitStderr} forwards over IPC only (D666).
+	*/
+	markStderrLost() {
+		this.stderrLost = true;
+	}
 	sendError(message, frameId) {
 		this.emitStderr(`${message}\n`);
 		this.send(frameId === void 0 ? {
@@ -4252,55 +4359,141 @@ var DecodeWorkerChild = class {
 	}
 };
 //#endregion
+//#region src/session-decode/decode-worker-process.ts
+/**
+* The decode worker's PROCESS wiring — everything that ties one
+* {@link DecodeWorkerChild} to the process it runs in, and the ONE exit every
+* ending goes through (D652, D666).
+*
+* Extracted from `decode-worker-main.ts` so a test fixture runs exactly the
+* code production runs: the orphan loop of D666 lived in this wiring, and the
+* unit tests that drove its pure pieces with fake timers and a fake `on` could
+* not see an event loop that never reaches its timers.
+*
+* ‼ SANCTIONED RAW IPC ‼ — `process.on('message')` / `process.send` are the
+* correct mechanism for this private, directly-forked worker only; see the
+* note at the top of `decode-worker-child.ts`.
+*/
+/**
+* How often the worker checks that its parent is still the process that forked
+* it. A parent whose IPC end outlives it would otherwise never `disconnect`.
+*/
+var DECODE_WORKER_PPID_CHECK_MS = 1e3;
+/** Stack lines carried by a fault report — enough to place it, bounded. */
+var FAULT_STACK_LINES = 8;
+/**
+* Call `onChanged` (once) when `proc.ppid` no longer matches its value now.
+* Compares against the ppid at start, never against 1: an orphan is adopted
+* by tini inside docker and may be adopted by a subreaper on macOS. The timer
+* is unref'd — it never keeps the worker alive on its own. Returns a stop.
+*/
+function watchParentPid(proc, onChanged, intervalMs = DECODE_WORKER_PPID_CHECK_MS) {
+	const initialPpid = proc.ppid;
+	const timer = setInterval(() => {
+		const ppid = proc.ppid;
+		if (ppid === initialPpid) return;
+		clearInterval(timer);
+		onChanged(ppid);
+	}, intervalMs);
+	timer.unref();
+	return () => clearInterval(timer);
+}
+function errorCode(err) {
+	if (err instanceof Error && "code" in err && typeof err.code === "string") return err.code;
+	return errMessage(err);
+}
+/** The message, plus the first stack frames: the report is rate-limited, so it must place the fault. */
+function describeFault(err) {
+	if (!(err instanceof Error) || err.stack === void 0) return errMessage(err);
+	return err.stack.split("\n").slice(0, FAULT_STACK_LINES).join(" | ");
+}
+/**
+* Build the worker and wire `proc` to it: IPC messages, stdio loss, parent
+* loss, SIGTERM, uncaught errors and the ppid watchdog. Does NOT load native
+* modules — the entry calls `worker.warm()` itself.
+*/
+function wireDecodeWorkerProcess(proc) {
+	const worker = new DecodeWorkerChild({ requestExit: (code) => exitWorker(code) });
+	proc.on("message", (message) => {
+		worker.handleMessage(message);
+	});
+	const faults = new FaultReporter((kind, err) => {
+		const what = kind === "uncaughtException" ? "uncaught exception" : "unhandled rejection";
+		worker.emitStderr(`decode-worker-child: ${what} — ${describeFault(err)}\n`);
+	}, (count) => {
+		worker.emitStderr(`decode-worker-child: ${count} further fault report(s) suppressed\n`);
+	});
+	/**
+	* quiesce (the disposer starts refusing, so nothing native is freed under a
+	* live read), queue the last lines, then exit — after a bounded wait for
+	* those lines while the parent is alive, in the same turn once it is gone.
+	*/
+	const exitWorker = createWorkerExit({
+		sends: worker.outbound,
+		steps: {
+			quiesce: () => worker.quiesceForExit(),
+			flushFinalLines: () => {
+				faults.flushSuppressed();
+				worker.flushFinalLines();
+			}
+		},
+		exit: (code) => proc.exit(code)
+	});
+	wireWorkerExit({
+		on: (event, listener) => {
+			switch (event) {
+				case "SIGTERM":
+					proc.on("SIGTERM", () => listener(void 0));
+					return;
+				case "disconnect":
+					proc.on("disconnect", () => listener(void 0));
+					return;
+				case "stdioLost":
+					proc.stdout.on("error", (err) => listener(err));
+					proc.stderr.on("error", (err) => listener(err));
+					return;
+				case "parentChanged":
+					watchParentPid(proc, (ppid) => listener(ppid));
+					return;
+				case "uncaughtException":
+					proc.on("uncaughtException", (err) => listener(err));
+					return;
+				case "unhandledRejection":
+					proc.on("unhandledRejection", (reason) => listener(reason));
+					return;
+			}
+		},
+		exitWorker,
+		faults,
+		onStdioLost: (err) => {
+			worker.markStderrLost();
+			worker.emitStderr(`decode-worker-child: stdio lost (${errorCode(err)}) — raw stderr off, IPC logging continues\n`, "warn");
+		},
+		parentConnected: () => proc.connected
+	});
+	return {
+		worker,
+		exitWorker
+	};
+}
+//#endregion
 //#region src/session-decode/decode-worker-main.ts
 /**
 * Decode-worker — the process ENTRY (its own vite build entry, the path
 * `fork-decode-worker.ts` forks). The worker itself is `DecodeWorkerChild` in
-* `decode-worker-child.ts`; this file only instantiates it and wires the process:
-* IPC messages, the native preload, the sharp warn sink, and the ONE bounded
-* exit every ending goes through (D652).
+* `decode-worker-child.ts`; its process wiring — IPC messages and the ONE exit
+* every ending goes through (D652, D666) — is `decode-worker-process.ts`, so a
+* test fixture runs the same wiring. This file adds only what needs native
+* modules or the sharp loader.
 *
 * ‼ SANCTIONED RAW IPC ‼ — `process.on('message')` / `process.send` are the
 * correct mechanism for this private, directly-forked worker only; see the
 * note at the top of `decode-worker-child.ts`.
 */
-var worker = new DecodeWorkerChild({ requestExit: (code) => exitWorker(code) });
+var { worker } = wireDecodeWorkerProcess(process);
 setSharpWarnSink((message) => {
 	worker.emitStderr(`decode-worker-child: ${message}\n`, "warn");
 });
-process.on("message", (message) => {
-	worker.handleMessage(message);
-});
 worker.warm();
-/**
-* The ONE way this worker exits: quiesce (the disposer starts refusing, so
-* nothing native is freed under a live read), queue the last lines, wait —
-* bounded — for them to leave, exit. `stop`, SIGTERM (the parent's `kill()`),
-* a lost channel and an uncaught error all land here, and a step that throws
-* still exits (with code 1). Before D652 there was no SIGTERM handler and a
-* `kill()` ended the process with those lines still queued.
-*/
-var exitWorker = createWorkerExit({
-	sends: worker.outbound,
-	steps: {
-		quiesce: () => worker.quiesceForExit(),
-		flushFinalLines: () => worker.flushFinalLines()
-	},
-	exit: (code) => process.exit(code)
-});
-wireWorkerExit({
-	on: (event, listener) => {
-		if (event === "SIGTERM") process.on("SIGTERM", () => listener(void 0));
-		else if (event === "disconnect") process.on("disconnect", () => listener(void 0));
-		else process.on("uncaughtException", (err) => listener(err));
-	},
-	exitWorker,
-	reportUncaught: (err) => {
-		worker.emitStderr(`decode-worker-child: uncaught exception — ${errMessage(err)}\n`);
-	}
-});
-process.on("unhandledRejection", (reason) => {
-	worker.emitStderr(`decode-worker-child: unhandled rejection — ${errMessage(reason)}\n`);
-});
 //#endregion
 export {};

package/dist/stream-broker/{_virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-D0etdxl0.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-CF7C68rV.mjs}

@@ -18,7 +18,7 @@ var e = {
 	},
 	"@camstack/types": {
 		name: "@camstack/types",
-		version: "1.2.266",
+		version: "1.2.267",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_stream_broker_widgets",
@@ -33,7 +33,7 @@ var e = {
 	},
 	"@camstack/ui-library": {
 		name: "@camstack/ui-library",
-		version: "1.2.209",
+		version: "1.2.210",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_stream_broker_widgets",

package/dist/stream-broker/demux-worker-child.js

@@ -1,4 +1,4 @@
-const require_segment_demux_js = require("../segment-demux-js-DANvUJgH.js");
+const require_segment_demux_js = require("../segment-demux-js-CwQuMR0h.js");
 let node_worker_threads = require("node:worker_threads");
 //#region src/stream-broker/recorded/demux-worker-child.ts
 /**

package/dist/stream-broker/demux-worker-child.mjs

@@ -1,4 +1,4 @@
-import { t as demuxSegmentFullJs } from "../segment-demux-js-DBqdboBI.mjs";
+import { t as demuxSegmentFullJs } from "../segment-demux-js-BUxZFqkb.mjs";
 import { parentPort } from "node:worker_threads";
 //#region src/stream-broker/recorded/demux-worker-child.ts
 /**

package/dist/stream-broker/{hostInit-TY9BRVDy.mjs → hostInit-dac4-ofq.mjs}

@@ -36,7 +36,7 @@ async function r() {
 				}
 			},
 			"@camstack/types": {
-				version: "1.2.266",
+				version: "1.2.267",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,
@@ -81,7 +81,7 @@ async function r() {
 				}
 			},
 			"@camstack/ui-library": {
-				version: "1.2.209",
+				version: "1.2.210",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,

package/dist/stream-broker/index.js

@@ -3,12 +3,12 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-BUs7H-fe.js");
-const require_node = require("../node-DxVMyys-.js");
+const require_dist = require("../dist-CyWAhtbJ.js");
+const require_node = require("../node-BDrkzYiH.js");
 const require_restream_intent = require("../restream-intent-7uDNqMKs.js");
 const require_remote_restream = require("../remote-restream-CO36Sr30.js");
 const require_retire_root_keys = require("../retire-root-keys-Csb8z2f3.js");
-const require_segment_demux_js = require("../segment-demux-js-DANvUJgH.js");
+const require_segment_demux_js = require("../segment-demux-js-CwQuMR0h.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 let node_crypto = require("node:crypto");

package/dist/stream-broker/index.mjs

@@ -1,10 +1,10 @@
 import { r as __toESM } from "../chunk-DnnnRqeS.mjs";
-import { $ as declareLogChannel, $t as webrtcSessionCapability, Cn as parseProfileBrokerId, Dn as array, En as _enum, Fn as record, In as string, J as cameraStreamsCapability, Ln as union, M as RATE_CONTROL_RELAXED, Mn as number, N as RATE_CONTROL_TIGHT, Nn as object, On as boolean, Pt as rankStreams, Q as createLogChannelsProvider, Rn as EventCategory, S as EncodeProfileSchema, T as G711_SCALE_CORRECTION_DB, U as addonWidgetsSourceCapability, Vt as resolveEgressDecodeHwAccel, X as clipExportFailureOf, Yt as streamBrokerCapability, Z as createHwAccelCache, a as BatteryStatusSchema, an as isSoftwareDecode, at as egressTranscodeSharingKey, bn as makeSourceBrokerId, cn as CAM_PROFILE_ORDER, dn as DeviceType, en as errMsg, gn as expandAudioChunkToF32le, in as invocationFromEncodeProfile, jn as literal, kn as discriminatedUnion, ln as CamProfileSchema, o as CLIP_BROKER_PACED_RATES, on as BOOT_RECOVERY_BACKOFF_MS, ot as egressTransportFromRequest, pn as createEvent, q as batteryCapability, rn as buildFfmpegArgs$1, s as CLIP_STILL_REASON_CODE_HEADER, sn as BaseAddon, tn as AUDIO_PRESETS, tt as deriveBatteryPresence, un as DeviceFeature, vn as isEvent, vt as loadContributionCapability, xn as nodePin, xt as maskUrlCredentials, yn as makeProfileBrokerId, yt as logChannelsCapability, z as RingBuffer } from "../dist-DvzAabca.mjs";
-import { i as NO_COST_CLAIM, n as Fmp4FragmentChild, o as probeFfmpegBinary, r as Fmp4FragmentPlane, t as ChildCostRegistry } from "../node-DnP_6GBZ.mjs";
+import { $ as declareLogChannel, $t as webrtcSessionCapability, Cn as parseProfileBrokerId, Dn as array, En as _enum, Fn as record, In as string, J as cameraStreamsCapability, Ln as union, M as RATE_CONTROL_RELAXED, Mn as number, N as RATE_CONTROL_TIGHT, Nn as object, On as boolean, Pt as rankStreams, Q as createLogChannelsProvider, Rn as EventCategory, S as EncodeProfileSchema, T as G711_SCALE_CORRECTION_DB, U as addonWidgetsSourceCapability, Vt as resolveEgressDecodeHwAccel, X as clipExportFailureOf, Yt as streamBrokerCapability, Z as createHwAccelCache, a as BatteryStatusSchema, an as isSoftwareDecode, at as egressTranscodeSharingKey, bn as makeSourceBrokerId, cn as CAM_PROFILE_ORDER, dn as DeviceType, en as errMsg, gn as expandAudioChunkToF32le, in as invocationFromEncodeProfile, jn as literal, kn as discriminatedUnion, ln as CamProfileSchema, o as CLIP_BROKER_PACED_RATES, on as BOOT_RECOVERY_BACKOFF_MS, ot as egressTransportFromRequest, pn as createEvent, q as batteryCapability, rn as buildFfmpegArgs$1, s as CLIP_STILL_REASON_CODE_HEADER, sn as BaseAddon, tn as AUDIO_PRESETS, tt as deriveBatteryPresence, un as DeviceFeature, vn as isEvent, vt as loadContributionCapability, xn as nodePin, xt as maskUrlCredentials, yn as makeProfileBrokerId, yt as logChannelsCapability, z as RingBuffer } from "../dist-CLZmZfHT.mjs";
+import { i as NO_COST_CLAIM, n as Fmp4FragmentChild, o as probeFfmpegBinary, r as Fmp4FragmentPlane, t as ChildCostRegistry } from "../node-C5LXX8Qo.mjs";
 import { a as parseRestreamPath, d as PREBUFFER_MAX_MS, f as capPreRollRequestMs, i as isLiveEdgeOnlyDial, m as resolvePrebuffer, n as NO_DECLARATION, p as prebufferRetentionMs, s as sdpVariantFor, u as withSentryIntent } from "../restream-intent-DyGmLAU9.mjs";
 import { n as profileForStreamId } from "../remote-restream-BeHi78PZ.mjs";
 import { n as RowMapStore, t as retireRootKeys } from "../retire-root-keys-DZvlso2l.mjs";
-import { a as avccSampleToAnnexB, i as require_mp4box_all, n as demuxSegmentPreferJs, o as buildKeyframeAnnexB, r as runFfmpegOnce, s as parseNalLengthSize, t as demuxSegmentFullJs } from "../segment-demux-js-DBqdboBI.mjs";
+import { a as avccSampleToAnnexB, i as require_mp4box_all, n as demuxSegmentPreferJs, o as buildKeyframeAnnexB, r as runFfmpegOnce, s as parseNalLengthSize, t as demuxSegmentFullJs } from "../segment-demux-js-BUxZFqkb.mjs";
 import { createRequire } from "node:module";
 import * as os from "node:os";
 import { networkInterfaces, tmpdir } from "node:os";

package/dist/stream-broker/remoteEntry.js

@@ -30,7 +30,7 @@ async function d(e) {
 	}
 }
 async function f() {
-	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-D0etdxl0.mjs")).catch((e) => {
+	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-CF7C68rV.mjs")).catch((e) => {
 		throw l = void 0, e;
 	}), l;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-pipeline",
-  "version": "1.2.301",
+  "version": "1.2.303",
   "description": "Pipeline bundle — runner, detection, motion, audio + stream broker. Multi-entry npm package shipping pipeline addons under a single bundle.",
   "keywords": [
     "camstack",