@camstack/addon-pipeline 1.2.306 → 1.2.308

package/dist/audio-analyzer/index.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-C2GsZSso.js");
-const require_process_memory = require("../process-memory-CT7jffcr.js");
+const require_dist = require("../dist-CdRsXAov.js");
+const require_process_memory = require("../process-memory-C4ayPnww.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_path = require("node:path");

package/dist/audio-analyzer/index.mjs

@@ -1,6 +1,6 @@
 import { n as __require } from "../chunk-DnnnRqeS.mjs";
-import { A as PoolMemoryWatchdog, Rn as EventCategory, T as HF_BASE_URL, U as audioAnalysisCapability, Vt as resolvePoolMemoryPolicy, W as audioAnalyzerCapability, _n as hydrateSchema, fn as audioChunkBytesPerSample, gn as expandAudioChunkToF32le, ln as BaseAddon, n as AUDIO_BACKEND_CHOICES, p as DEFAULT_AUDIO_ANALYZER_CONFIG, sn as errMsg, vt as mapAudioLabelToMacro, xn as nodePin } from "../dist-B0mdAGsn.mjs";
-import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-DtcP6dwa.mjs";
+import { A as PoolMemoryWatchdog, Gt as resolvePoolMemoryPolicy, Hn as EventCategory, T as HF_BASE_URL, Tn as nodePin, U as audioAnalysisCapability, W as audioAnalyzerCapability, bn as expandAudioChunkToF32le, dn as errMsg, gn as audioChunkBytesPerSample, n as AUDIO_BACKEND_CHOICES, p as DEFAULT_AUDIO_ANALYZER_CONFIG, pn as BaseAddon, xn as hydrateSchema, xt as mapAudioLabelToMacro } from "../dist-jy-7xoW5.mjs";
+import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-4K7QaQab.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";
 import { downloadFile } from "@camstack/system/addon-utils";

package/dist/{default-detection-model-CeYzI_ws.js → default-detection-model-2rHeRf0Y.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-C2GsZSso.js");
+const require_dist = require("./dist-CdRsXAov.js");
 let node_crypto = require("node:crypto");
 //#region src/detection-pipeline/registry/effective-confidence.ts
 /** The default in force: the model's own floor, else the step's. */

package/dist/{default-detection-model-CmdkU7Ik.mjs → default-detection-model-DATyir0t.mjs}

@@ -1,4 +1,4 @@
-import { G as audioKindId, Wt as stepModelRunsOnFormat, d as COCO_80_LABELS, f as COCO_TO_MACRO, mt as inferModelProvider, pt as hfModelUrl, r as AUDIO_MACRO_LABELS, v as DEVICE_BACKEND_TO_FORMAT } from "./dist-B0mdAGsn.mjs";
+import { G as audioKindId, Jt as stepModelRunsOnFormat, _t as inferModelProvider, d as COCO_80_LABELS, f as COCO_TO_MACRO, gt as hfModelUrl, r as AUDIO_MACRO_LABELS, v as DEVICE_BACKEND_TO_FORMAT } from "./dist-jy-7xoW5.mjs";
 import { randomUUID } from "node:crypto";
 //#region src/detection-pipeline/registry/effective-confidence.ts
 /** The default in force: the model's own floor, else the step's. */

package/dist/detection-pipeline/index.js

@@ -3,11 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-C2GsZSso.js");
-const require_node = require("../node-DA9sHeo7.js");
-const require_default_detection_model = require("../default-detection-model-CeYzI_ws.js");
+const require_dist = require("../dist-CdRsXAov.js");
+const require_node = require("../node-pWHpwpBa.js");
+const require_default_detection_model = require("../default-detection-model-2rHeRf0Y.js");
 const require_lazy_sharp = require("../lazy-sharp-BuwKlQLR.js");
-const require_process_memory = require("../process-memory-CT7jffcr.js");
+const require_process_memory = require("../process-memory-C4ayPnww.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 let node_fs = require("node:fs");

package/dist/detection-pipeline/index.mjs

@@ -1,9 +1,9 @@
 import { n as __require } from "../chunk-DnnnRqeS.mjs";
-import { $ as defaultDeviceFor$1, A as PoolMemoryWatchdog, At as pipelineExecutorCapability, Dn as array, Dt as pickClusterStepSettings, In as string, Ln as union, Lt as resolveClusterStepModelId, Nn as object, Rn as EventCategory, Sn as parseJsonUnknown, Tn as sleep, Tt as overlayClusterStepSettings, Ut as runtimeDevices$1, V as YAMNET_TO_MACRO, Vt as resolvePoolMemoryPolicy, Wt as stepModelRunsOnFormat, Yt as supportedRuntimes$1, _n as hydrateSchema, gt as loadContributionCapability, ln as BaseAddon, m as DEFAULT_CLUSTER_STEP_SETTINGS, ot as enumerateInferenceDevices, pn as createEvent, rt as detectionPipelineCapability, sn as errMsg, st as evaluateZoneRules, t as APPLE_SA_TO_MACRO, u as CLUSTER_MODEL_SCOPED_STEPS, v as DEVICE_BACKEND_TO_FORMAT, xn as nodePin } from "../dist-B0mdAGsn.mjs";
-import { s as readProcessCost } from "../node-C4FxPOmq.mjs";
-import { _ as resolveModelForFormat, a as buildSubtreeCanRun, b as resolveModelDefaultConfidence, c as macroGateVerdict, f as ALL_PIPELINE_STEPS, g as getStepDefinition, h as getStep, i as mergeCustomModels, m as getDefaultModelForFormat, n as resolveDefaultDetectionModel, p as ALL_STEPS, r as CustomModelCatalog, u as localFrameRegistry, y as landmarkPrecisionVerdict } from "../default-detection-model-CmdkU7Ik.mjs";
+import { $ as defaultDeviceFor$1, $t as supportedRuntimes$1, A as PoolMemoryWatchdog, Bn as string, En as parseJsonUnknown, Gt as resolvePoolMemoryPolicy, Hn as EventCategory, Jt as stepModelRunsOnFormat, Ln as object, Pt as pipelineExecutorCapability, Tn as nodePin, V as YAMNET_TO_MACRO, Vn as union, Vt as resolveClusterStepModelId, _n as createEvent, dn as errMsg, jn as array, jt as pickClusterStepSettings, kn as sleep, kt as overlayClusterStepSettings, m as DEFAULT_CLUSTER_STEP_SETTINGS, ot as enumerateInferenceDevices, pn as BaseAddon, qt as runtimeDevices$1, rt as detectionPipelineCapability, st as evaluateZoneRules, t as APPLE_SA_TO_MACRO, u as CLUSTER_MODEL_SCOPED_STEPS, v as DEVICE_BACKEND_TO_FORMAT, xn as hydrateSchema, yt as loadContributionCapability } from "../dist-jy-7xoW5.mjs";
+import { s as readProcessCost } from "../node-NCge1qZM.mjs";
+import { _ as resolveModelForFormat, a as buildSubtreeCanRun, b as resolveModelDefaultConfidence, c as macroGateVerdict, f as ALL_PIPELINE_STEPS, g as getStepDefinition, h as getStep, i as mergeCustomModels, m as getDefaultModelForFormat, n as resolveDefaultDetectionModel, p as ALL_STEPS, r as CustomModelCatalog, u as localFrameRegistry, y as landmarkPrecisionVerdict } from "../default-detection-model-DATyir0t.mjs";
 import { t as getSharp } from "../lazy-sharp-DXsqwpph.mjs";
-import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-DtcP6dwa.mjs";
+import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-4K7QaQab.mjs";
 import * as os from "node:os";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";

package/dist/{dist-C2GsZSso.js → dist-CdRsXAov.js}

@@ -7684,7 +7684,7 @@ function errMsg(err) {
 	return String(err);
 }
 //#endregion
-//#region ../types/dist/composition-BK-GTFYb.mjs
+//#region ../types/dist/composition-Dq42XWp0.mjs
 var AUDIO_ENCODER_BY_CODEC = {
 	opus: "libopus",
 	aac: "aac",
@@ -8393,6 +8393,58 @@ function replaceWithSortedKeys(_key, value) {
 	return value;
 }
 /**
+* The ffmpeg build every CamStack node downloads, per platform and arch.
+*
+* ## Why a download, on every node, including the container
+*
+* The version of ffmpeg used to be CODE: baked into the image, changeable only
+* by rebuilding and rolling it. Now it is DATA — this file states the release,
+* and a node that boots with a different one downloads it. Changing ffmpeg is a
+* framework bump, not an image rebuild.
+*
+* It also settles the licence question by removing it. FFmpeg's licence is
+* chosen at compile time: the core is LGPL 2.1+, `--enable-gpl` makes it GPL
+* (for x264/x265), `--enable-version3` makes that v3, and `--enable-nonfree`
+* makes the result undistributable. These are GPL v3 builds, and we do not
+* distribute them: the user's own node fetches the archive from the project
+* that publishes it, so we convey no GPL work and inherit none of the
+* obligations that come with conveying one. That is the whole reason the image
+* no longer installs ffmpeg at all — not a technical preference.
+*
+* ## Why jellyfin-ffmpeg
+*
+* One vendor covering linux-amd64, linux-arm64, darwin-arm64 and darwin-x64
+* from one release, with the widest hardware surface of anything maintained:
+* VAAPI, QSV, NVENC/NVDEC, AMF, Vulkan, OpenCL and DRM on amd64, plus Rockchip
+* MPP on arm64. It reaches the vendor libraries through dlopen trampolines,
+* so the binary is not linked against a driver stack it may not find.
+*
+* **What it still needs from the host, measured 2026-09-19.** On the Unraid
+* HOST, which has no libva, `-vaapi_device` aborts the process outright —
+* `implib-gen: libva-drm.so.2: failed to load library ... Assertion '0 &&
+* "Assertion in generated code"' failed`. Inside our container, which installs
+* libva plus the iHD driver, the same command encodes: verified end to end with
+* `testsrc → format=nv12,hwupload → h264_vaapi`. So the image drops ffmpeg and
+* KEEPS the Intel media stack; the drivers are the part a binary cannot bring.
+*
+* ## Why each artifact carries a checksum and a claim
+*
+* The download is now the only source, so `sha256` is verified before anything
+* is extracted — jellyfin publishes no checksums on its release assets, so
+* these are ours, taken at the version bump. And `expectedHwaccels` is what the
+* build is supposed to be able to do: a binary that probes short of its own
+* claim is a source that changed under us, which is precisely what went
+* unnoticed for months when a static build turned out to carry no VAAPI at all
+* (D536).
+*/
+/** The pinned jellyfin-ffmpeg release. Changing this is the version change. */
+var FFMPEG_RELEASE = "8.1.2-5";
+var BASE = `https://github.com/jellyfin/jellyfin-ffmpeg/releases/download/v${FFMPEG_RELEASE}`;
+function portable(target) {
+	return `${BASE}/jellyfin-ffmpeg_${FFMPEG_RELEASE}_portable_${target}-gpl.tar.xz`;
+}
+portable("linux64"), portable("linuxarm64"), portable("macarm64"), portable("mac64");
+/**
 * LA tabella "quale booleano di questo tipo di device conta come ALTO", e il
 * valutatore puro del suo FRONTE.
 *
@@ -9606,6 +9658,90 @@ async function resolveEgressDecodeHwAccel(deps) {
 	return resolved;
 }
 /**
+* The notification GIF's filter chain and argv — ONE definition for every
+* process that derives a gif from a notification video.
+*
+* ## Why this lives in `@camstack/types`
+*
+* Two addons derive a notification gif from an mp4, and they may never import
+* each other:
+*
+*  - the stream broker (`addon-pipeline`), from the clip it just cut out of its
+*    own ring (`gif-from-mp4.ts`);
+*  - the notification centre (`addon-post-analysis`), from a clip cut out of
+*    the RECORDINGS when the moment is older than any ring holds
+*    ([D682](../../../../docs/decisions/adr-0682-a-pick-ups-footage-is-cut-around-the-pick-up.md)).
+*
+* Two copies of this chain would be two gifs of the same kind of moment that
+* look different depending on how old the moment was — the class of defect
+* D85/D91 already paid for once. So the chain is here, pure and dependency
+* free, and each caller owns only its own process lifecycle.
+*
+* ## The palette was never the problem
+*
+* The `split` + `palettegen(stats_mode=diff)` + `paletteuse(bayer)` pair is
+* right and stays. The measured cause of "the gif looks de-pixellated" was a
+* 640×360 substream scaled DOWN to 480 px, upstream of the palette. The `split`
+* form is a single READ of the input, not a lesser two-pass.
+*/
+/**
+* Format a frame rate for an ffmpeg filter argument.
+*
+* `12 / 4` must reach the filter as `3` and `15 / 4` as `3.75`, not as a float
+* tail that `av_parse_video_rate` then has to guess at.
+*/
+function ffmpegRate(rate) {
+	return String(Math.round(rate * 1e3) / 1e3);
+}
+/**
+* The factor the derive must apply ON TOP of the speed the mp4 already carries.
+*
+* The gif is derived from a muxed mp4, so if that mux already ran `setpts` at
+* the caller's `speed`, applying the absolute gif rate again would compound
+* them — a 4× gif beside a 2× video would come out at 8×. Discounting here is
+* what keeps the gif rate ABSOLUTE against real time whatever the video does.
+*/
+function gifDeriveSpeed(gifSpeed, videoSpeed) {
+	if (!Number.isFinite(videoSpeed) || videoSpeed <= 0) return gifSpeed;
+	return gifSpeed / videoSpeed;
+}
+/**
+* The filter chain. Extracted so a test can assert the palette pair without
+* spawning ffmpeg — an argv test cannot see quality, but it can see a filter
+* that somebody deleted.
+*
+* `fps` BEFORE `setpts`: decimating an already sped-up timeline yields `speed`
+* times the frames asked for, and a gif pays for every one. So the decimation
+* runs at `fps / speed` in SOURCE time and `setpts` multiplies what survived.
+* The trailing `fps` re-declares the rate, which is NOT redundant: `setpts`
+* leaves the filter link advertising the sampled rate and the gif muxer
+* believes the link — measured on 615 as a 3.01 s gif of ten frames.
+*/
+function gifFilterComplex(input) {
+	const speed = input.speed > 0 ? input.speed : 1;
+	if (speed === 1) return `[0:v]fps=${ffmpegRate(input.fps)},scale=${input.maxWidth}:-2:flags=lanczos,split[a][b];[a]palettegen=stats_mode=diff[p];[b][p]paletteuse=dither=bayer:bayer_scale=5:diff_mode=rectangle`;
+	return `[0:v]fps=${ffmpegRate(input.fps / speed)},setpts=PTS/${speed},fps=${ffmpegRate(input.fps)},scale=${input.maxWidth}:-2:flags=lanczos,split[a][b];[a]palettegen=stats_mode=diff[p];[b][p]paletteuse=dither=bayer:bayer_scale=5:diff_mode=rectangle`;
+}
+/** The full argv: mp4 in, gif on stdout. */
+function gifFromMp4Args(input) {
+	return [
+		"-y",
+		"-v",
+		"error",
+		"-f",
+		"mp4",
+		"-i",
+		input.input ?? "pipe:0",
+		"-filter_complex",
+		gifFilterComplex(input),
+		"-loop",
+		"0",
+		"-f",
+		"gif",
+		"pipe:1"
+	];
+}
+/**
 * The sharing key for `streamBroker.acquireEgressTranscode`.
 *
 * **Two requesters asking for exactly the same argument set reach the same
@@ -9693,6 +9829,26 @@ function egressTranscodeSharingKey(request, delivery = egressTransportFromReques
 	return `egress:${canonicalHash(canonicalEgressPlan(request, delivery))}`;
 }
 /**
+* Memoize `ensure` on SUCCESS only.
+*
+* A failure is not remembered: the next caller asks again, so a node whose
+* first download failed (no network at boot) recovers on the next spawn that
+* needs it — with no timer and no retry loop, because the ask is driven by
+* work that actually wants the binary.
+*/
+function memoizePinnedFfmpeg(ensure) {
+	let pending = null;
+	return () => {
+		if (pending !== null) return pending;
+		const attempt = ensure();
+		pending = attempt;
+		attempt.catch(() => {
+			if (pending === attempt) pending = null;
+		});
+		return attempt;
+	};
+}
+/**
 * Deep wiring healthcheck — snapshot of active reachability probes across
 * every declared capability + widget of every installed plugin, on every
 * node. Produced by the backend `WiringHealthService` and surfaced via
@@ -24009,6 +24165,21 @@ var ObjectEventSchema = object({
 	keyFrameMediaId: number().int().optional(),
 	/** Populated by B5 (recording playback URL for this event). */
 	mediaUrl: string().optional(),
+	/**
+	* When the change this row records HAPPENED, epoch ms, when that is earlier
+	* than {@link timestamp} and the producer could date it (D684).
+	*
+	* Set on a package PICK-UP row only: its `timestamp` is when the departure
+	* was CONCLUDED — five minutes of unseen observed time after the parcel went
+	* — and a notification's footage has to be cut around the pick-up, not the
+	* empty doormat after it (D682). Stored so every path that rebuilds a
+	* notification subject from the row (the boot reconcile, a dry-run) anchors
+	* on the same instant the live hook did.
+	*
+	* `timestamp` keeps its meaning. Absent on every other row and on every
+	* pick-up written before D684 — UNKNOWN, never 0 and never `timestamp`.
+	*/
+	observedAt: number().optional(),
 	/** The parent track's key-event importance [0,1], propagated to every object
 	*  event of the track (so an event row can be sorted by importance without a
 	*  track join). Absent on legacy rows / before the track was scored. */
@@ -52655,12 +52826,30 @@ Object.defineProperty(exports, "failureContributionCapability", {
 		return failureContributionCapability;
 	}
 });
+Object.defineProperty(exports, "ffmpegRate", {
+	enumerable: true,
+	get: function() {
+		return ffmpegRate;
+	}
+});
 Object.defineProperty(exports, "gbToBytes", {
 	enumerable: true,
 	get: function() {
 		return gbToBytes;
 	}
 });
+Object.defineProperty(exports, "gifDeriveSpeed", {
+	enumerable: true,
+	get: function() {
+		return gifDeriveSpeed;
+	}
+});
+Object.defineProperty(exports, "gifFromMp4Args", {
+	enumerable: true,
+	get: function() {
+		return gifFromMp4Args;
+	}
+});
 Object.defineProperty(exports, "hfModelUrl", {
 	enumerable: true,
 	get: function() {
@@ -52763,6 +52952,12 @@ Object.defineProperty(exports, "mayWriteToLocation", {
 		return mayWriteToLocation;
 	}
 });
+Object.defineProperty(exports, "memoizePinnedFfmpeg", {
+	enumerable: true,
+	get: function() {
+		return memoizePinnedFfmpeg;
+	}
+});
 Object.defineProperty(exports, "migrateLegacyDeviceSignalConfig", {
 	enumerable: true,
 	get: function() {

package/dist/{dist-B0mdAGsn.mjs → dist-jy-7xoW5.mjs}

@@ -7684,7 +7684,7 @@ function errMsg(err) {
 	return String(err);
 }
 //#endregion
-//#region ../types/dist/composition-BK-GTFYb.mjs
+//#region ../types/dist/composition-Dq42XWp0.mjs
 var AUDIO_ENCODER_BY_CODEC = {
 	opus: "libopus",
 	aac: "aac",
@@ -8393,6 +8393,58 @@ function replaceWithSortedKeys(_key, value) {
 	return value;
 }
 /**
+* The ffmpeg build every CamStack node downloads, per platform and arch.
+*
+* ## Why a download, on every node, including the container
+*
+* The version of ffmpeg used to be CODE: baked into the image, changeable only
+* by rebuilding and rolling it. Now it is DATA — this file states the release,
+* and a node that boots with a different one downloads it. Changing ffmpeg is a
+* framework bump, not an image rebuild.
+*
+* It also settles the licence question by removing it. FFmpeg's licence is
+* chosen at compile time: the core is LGPL 2.1+, `--enable-gpl` makes it GPL
+* (for x264/x265), `--enable-version3` makes that v3, and `--enable-nonfree`
+* makes the result undistributable. These are GPL v3 builds, and we do not
+* distribute them: the user's own node fetches the archive from the project
+* that publishes it, so we convey no GPL work and inherit none of the
+* obligations that come with conveying one. That is the whole reason the image
+* no longer installs ffmpeg at all — not a technical preference.
+*
+* ## Why jellyfin-ffmpeg
+*
+* One vendor covering linux-amd64, linux-arm64, darwin-arm64 and darwin-x64
+* from one release, with the widest hardware surface of anything maintained:
+* VAAPI, QSV, NVENC/NVDEC, AMF, Vulkan, OpenCL and DRM on amd64, plus Rockchip
+* MPP on arm64. It reaches the vendor libraries through dlopen trampolines,
+* so the binary is not linked against a driver stack it may not find.
+*
+* **What it still needs from the host, measured 2026-09-19.** On the Unraid
+* HOST, which has no libva, `-vaapi_device` aborts the process outright —
+* `implib-gen: libva-drm.so.2: failed to load library ... Assertion '0 &&
+* "Assertion in generated code"' failed`. Inside our container, which installs
+* libva plus the iHD driver, the same command encodes: verified end to end with
+* `testsrc → format=nv12,hwupload → h264_vaapi`. So the image drops ffmpeg and
+* KEEPS the Intel media stack; the drivers are the part a binary cannot bring.
+*
+* ## Why each artifact carries a checksum and a claim
+*
+* The download is now the only source, so `sha256` is verified before anything
+* is extracted — jellyfin publishes no checksums on its release assets, so
+* these are ours, taken at the version bump. And `expectedHwaccels` is what the
+* build is supposed to be able to do: a binary that probes short of its own
+* claim is a source that changed under us, which is precisely what went
+* unnoticed for months when a static build turned out to carry no VAAPI at all
+* (D536).
+*/
+/** The pinned jellyfin-ffmpeg release. Changing this is the version change. */
+var FFMPEG_RELEASE = "8.1.2-5";
+var BASE = `https://github.com/jellyfin/jellyfin-ffmpeg/releases/download/v${FFMPEG_RELEASE}`;
+function portable(target) {
+	return `${BASE}/jellyfin-ffmpeg_${FFMPEG_RELEASE}_portable_${target}-gpl.tar.xz`;
+}
+portable("linux64"), portable("linuxarm64"), portable("macarm64"), portable("mac64");
+/**
 * LA tabella "quale booleano di questo tipo di device conta come ALTO", e il
 * valutatore puro del suo FRONTE.
 *
@@ -9606,6 +9658,90 @@ async function resolveEgressDecodeHwAccel(deps) {
 	return resolved;
 }
 /**
+* The notification GIF's filter chain and argv — ONE definition for every
+* process that derives a gif from a notification video.
+*
+* ## Why this lives in `@camstack/types`
+*
+* Two addons derive a notification gif from an mp4, and they may never import
+* each other:
+*
+*  - the stream broker (`addon-pipeline`), from the clip it just cut out of its
+*    own ring (`gif-from-mp4.ts`);
+*  - the notification centre (`addon-post-analysis`), from a clip cut out of
+*    the RECORDINGS when the moment is older than any ring holds
+*    ([D682](../../../../docs/decisions/adr-0682-a-pick-ups-footage-is-cut-around-the-pick-up.md)).
+*
+* Two copies of this chain would be two gifs of the same kind of moment that
+* look different depending on how old the moment was — the class of defect
+* D85/D91 already paid for once. So the chain is here, pure and dependency
+* free, and each caller owns only its own process lifecycle.
+*
+* ## The palette was never the problem
+*
+* The `split` + `palettegen(stats_mode=diff)` + `paletteuse(bayer)` pair is
+* right and stays. The measured cause of "the gif looks de-pixellated" was a
+* 640×360 substream scaled DOWN to 480 px, upstream of the palette. The `split`
+* form is a single READ of the input, not a lesser two-pass.
+*/
+/**
+* Format a frame rate for an ffmpeg filter argument.
+*
+* `12 / 4` must reach the filter as `3` and `15 / 4` as `3.75`, not as a float
+* tail that `av_parse_video_rate` then has to guess at.
+*/
+function ffmpegRate(rate) {
+	return String(Math.round(rate * 1e3) / 1e3);
+}
+/**
+* The factor the derive must apply ON TOP of the speed the mp4 already carries.
+*
+* The gif is derived from a muxed mp4, so if that mux already ran `setpts` at
+* the caller's `speed`, applying the absolute gif rate again would compound
+* them — a 4× gif beside a 2× video would come out at 8×. Discounting here is
+* what keeps the gif rate ABSOLUTE against real time whatever the video does.
+*/
+function gifDeriveSpeed(gifSpeed, videoSpeed) {
+	if (!Number.isFinite(videoSpeed) || videoSpeed <= 0) return gifSpeed;
+	return gifSpeed / videoSpeed;
+}
+/**
+* The filter chain. Extracted so a test can assert the palette pair without
+* spawning ffmpeg — an argv test cannot see quality, but it can see a filter
+* that somebody deleted.
+*
+* `fps` BEFORE `setpts`: decimating an already sped-up timeline yields `speed`
+* times the frames asked for, and a gif pays for every one. So the decimation
+* runs at `fps / speed` in SOURCE time and `setpts` multiplies what survived.
+* The trailing `fps` re-declares the rate, which is NOT redundant: `setpts`
+* leaves the filter link advertising the sampled rate and the gif muxer
+* believes the link — measured on 615 as a 3.01 s gif of ten frames.
+*/
+function gifFilterComplex(input) {
+	const speed = input.speed > 0 ? input.speed : 1;
+	if (speed === 1) return `[0:v]fps=${ffmpegRate(input.fps)},scale=${input.maxWidth}:-2:flags=lanczos,split[a][b];[a]palettegen=stats_mode=diff[p];[b][p]paletteuse=dither=bayer:bayer_scale=5:diff_mode=rectangle`;
+	return `[0:v]fps=${ffmpegRate(input.fps / speed)},setpts=PTS/${speed},fps=${ffmpegRate(input.fps)},scale=${input.maxWidth}:-2:flags=lanczos,split[a][b];[a]palettegen=stats_mode=diff[p];[b][p]paletteuse=dither=bayer:bayer_scale=5:diff_mode=rectangle`;
+}
+/** The full argv: mp4 in, gif on stdout. */
+function gifFromMp4Args(input) {
+	return [
+		"-y",
+		"-v",
+		"error",
+		"-f",
+		"mp4",
+		"-i",
+		input.input ?? "pipe:0",
+		"-filter_complex",
+		gifFilterComplex(input),
+		"-loop",
+		"0",
+		"-f",
+		"gif",
+		"pipe:1"
+	];
+}
+/**
 * The sharing key for `streamBroker.acquireEgressTranscode`.
 *
 * **Two requesters asking for exactly the same argument set reach the same
@@ -9693,6 +9829,26 @@ function egressTranscodeSharingKey(request, delivery = egressTransportFromReques
 	return `egress:${canonicalHash(canonicalEgressPlan(request, delivery))}`;
 }
 /**
+* Memoize `ensure` on SUCCESS only.
+*
+* A failure is not remembered: the next caller asks again, so a node whose
+* first download failed (no network at boot) recovers on the next spawn that
+* needs it — with no timer and no retry loop, because the ask is driven by
+* work that actually wants the binary.
+*/
+function memoizePinnedFfmpeg(ensure) {
+	let pending = null;
+	return () => {
+		if (pending !== null) return pending;
+		const attempt = ensure();
+		pending = attempt;
+		attempt.catch(() => {
+			if (pending === attempt) pending = null;
+		});
+		return attempt;
+	};
+}
+/**
 * Deep wiring healthcheck — snapshot of active reachability probes across
 * every declared capability + widget of every installed plugin, on every
 * node. Produced by the backend `WiringHealthService` and surfaced via
@@ -24009,6 +24165,21 @@ var ObjectEventSchema = object({
 	keyFrameMediaId: number().int().optional(),
 	/** Populated by B5 (recording playback URL for this event). */
 	mediaUrl: string().optional(),
+	/**
+	* When the change this row records HAPPENED, epoch ms, when that is earlier
+	* than {@link timestamp} and the producer could date it (D684).
+	*
+	* Set on a package PICK-UP row only: its `timestamp` is when the departure
+	* was CONCLUDED — five minutes of unseen observed time after the parcel went
+	* — and a notification's footage has to be cut around the pick-up, not the
+	* empty doormat after it (D682). Stored so every path that rebuilds a
+	* notification subject from the row (the boot reconcile, a dry-run) anchors
+	* on the same instant the live hook did.
+	*
+	* `timestamp` keeps its meaning. Absent on every other row and on every
+	* pick-up written before D684 — UNKNOWN, never 0 and never `timestamp`.
+	*/
+	observedAt: number().optional(),
 	/** The parent track's key-event importance [0,1], propagated to every object
 	*  event of the track (so an event row can be sorted by importance without a
 	*  track join). Absent on legacy rows / before the track was scored. */
@@ -52133,4 +52304,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { defaultDeviceFor as $, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as $t, PoolMemoryWatchdog as A, lazy as An, pipelineExecutorCapability as At, VISIT_MERGE_GAP_MS as B, resolveLocationMode as Bt, FailureCounters as C, parseProfileBrokerId as Cn, modeMayWrite as Ct, NativeLeaseAdmissionSchema as D, array as Dn, pickClusterStepSettings as Dt, MOTION_CLOSE_AFTER_MS as E, _enum as En, parseProcStatus as Et, RECORDING_SOURCE_CAMSTACK_ADDON as F, record as Fn, recordingExportCapability as Ft, audioKindId as G, storageEvictableCapability as Gt, addonWidgetsSourceCapability as H, resolveRecordingProfiles as Ht, RecordingConfigSchema as I, string as In, recordingSignalCapability as It, clipExportFailure as J, stripRetiredBandPreBufferSec as Jt, batteryCapability as K, storageOccupancyCapability as Kt, RecordingSignalStatusSchema as L, union as Ln, resolveClusterStepModelId as Lt, RATE_CONTROL_TIGHT as M, number as Mn, rankStreams as Mt, RECORDING_EXPORT_MAX_READ_BYTES as N, object as Nn, recordingArchiveCapability as Nt, NativeLeaseSettingsSchema as O, boolean as On, pickDetailCropConvention as Ot, RECORDING_SOURCE_CAMSTACK as P, preprocess as Pn, recordingCapability as Pt, declareLogChannel as Q, AUDIO_PRESETS as Qt, RingBuffer as R, EventCategory as Rn, resolveCreateExportSubject as Rt, ExportRecordSchema as S, parseJsonUnknown as Sn, migrateLegacyDeviceSignalConfig as St, HF_BASE_URL as T, sleep as Tn, overlayClusterStepSettings as Tt, audioAnalysisCapability as U, runtimeDevices as Ut, YAMNET_TO_MACRO as V, resolvePoolMemoryPolicy as Vt, audioAnalyzerCapability as W, stepModelRunsOnFormat as Wt, createHwAccelCache as X, videoclipsCapability as Xt, clipExportFailureOf as Y, supportedRuntimes as Yt, createLogChannelsProvider as Z, webrtcSessionCapability as Zt, DEFAULT_NATIVE_LEASE_SETTINGS as _, hydrateSchema as _n, logChannelsCapability as _t, BatteryStatusSchema as a, DeviceFeature as an, egressTransportFromRequest as at, EVENT_PAD_MS as b, makeSourceBrokerId as bn, mayReadLocation as bt, CLIP_STILL_REASON_HEADER as c, BOOT_RECOVERY_BACKOFF_MS as cn, evictionPolicyForMode as ct, COCO_80_LABELS as d, CamProfileSchema as dn, failureContributionCapability as dt, Fmp4BoxSplitter as en, deriveBatteryPresence as et, COCO_TO_MACRO as f, audioChunkBytesPerSample as fn, gbToBytes as ft, DEFAULT_EVENTS_BAND_BUFFER_SEC as g, expandAudioChunkToF32le as gn, loadContributionCapability as gt, DEFAULT_DETAIL_CROP_CONVENTION as h, defineCustomActions as hn, isFirstLevelMacroClass as ht, BackgroundRunRegistry as i, isSoftwareDecode as in, egressTranscodeSharingKey as it, RATE_CONTROL_RELAXED as j, literal as jn, pipelineRunnerCapability as jt, OpsLogEntrySchema as k, discriminatedUnion as kn, pickNativeLeaseOverride as kt, CLIP_STREAM_TRANSPORT_HEADER as l, BaseAddon as ln, evictionPolicyOfLocation as lt, DEFAULT_CLUSTER_STEP_SETTINGS as m, customAction as mn, inferModelProvider as mt, AUDIO_BACKEND_CHOICES as n, evaluateSensorEdge as nn, deriveRecordingMode as nt, CLIP_BROKER_PACED_RATES as o, DeviceType as on, enumerateInferenceDevices as ot, DEFAULT_AUDIO_ANALYZER_CONFIG as p, createEvent as pn, hfModelUrl as pt, cameraStreamsCapability as q, streamBrokerCapability as qt, AUDIO_MACRO_LABELS as r, invocationFromEncodeProfile as rn, detectionPipelineCapability as rt, CLIP_STILL_REASON_CODE_HEADER as s, errMsg as sn, evaluateZoneRules as st, APPLE_SA_TO_MACRO as t, buildFfmpegArgs as tn, deriveDetailCropRect as tt, CLUSTER_MODEL_SCOPED_STEPS as u, CAM_PROFILE_ORDER as un, exportSubjectOf as ut, DEVICE_BACKEND_TO_FORMAT as v, isEvent as vn, mapAudioLabelToMacro as vt, G711_SCALE_CORRECTION_DB as w, selectAssignedProfileSlots as wn, motionDetectionCapability as wt, EncodeProfileSchema as x, nodePin as xn, mayWriteToLocation as xt, EVENT_OWNER_TYPES as y, makeProfileBrokerId as yn, maskUrlCredentials as yt, VIDEOCLIPS_MAX_OFFER_BYTES as z, resolveEgressDecodeHwAccel as zt };
+export { defaultDeviceFor as $, supportedRuntimes as $t, PoolMemoryWatchdog as A, _enum as An, parseProcStatus as At, VISIT_MERGE_GAP_MS as B, string as Bn, recordingSignalCapability as Bt, FailureCounters as C, makeProfileBrokerId as Cn, mayReadLocation as Ct, NativeLeaseAdmissionSchema as D, parseProfileBrokerId as Dn, modeMayWrite as Dt, MOTION_CLOSE_AFTER_MS as E, parseJsonUnknown as En, migrateLegacyDeviceSignalConfig as Et, RECORDING_SOURCE_CAMSTACK_ADDON as F, literal as Fn, pipelineRunnerCapability as Ft, audioKindId as G, resolvePoolMemoryPolicy as Gt, addonWidgetsSourceCapability as H, EventCategory as Hn, resolveCreateExportSubject as Ht, RecordingConfigSchema as I, number as In, rankStreams as It, clipExportFailure as J, stepModelRunsOnFormat as Jt, batteryCapability as K, resolveRecordingProfiles as Kt, RecordingSignalStatusSchema as L, object as Ln, recordingArchiveCapability as Lt, RATE_CONTROL_TIGHT as M, boolean as Mn, pickDetailCropConvention as Mt, RECORDING_EXPORT_MAX_READ_BYTES as N, discriminatedUnion as Nn, pickNativeLeaseOverride as Nt, NativeLeaseSettingsSchema as O, selectAssignedProfileSlots as On, motionDetectionCapability as Ot, RECORDING_SOURCE_CAMSTACK as P, lazy as Pn, pipelineExecutorCapability as Pt, declareLogChannel as Q, stripRetiredBandPreBufferSec as Qt, RingBuffer as R, preprocess as Rn, recordingCapability as Rt, ExportRecordSchema as S, isEvent as Sn, maskUrlCredentials as St, HF_BASE_URL as T, nodePin as Tn, memoizePinnedFfmpeg as Tt, audioAnalysisCapability as U, resolveEgressDecodeHwAccel as Ut, YAMNET_TO_MACRO as V, union as Vn, resolveClusterStepModelId as Vt, audioAnalyzerCapability as W, resolveLocationMode as Wt, createHwAccelCache as X, storageOccupancyCapability as Xt, clipExportFailureOf as Y, storageEvictableCapability as Yt, createLogChannelsProvider as Z, streamBrokerCapability as Zt, DEFAULT_NATIVE_LEASE_SETTINGS as _, createEvent as _n, inferModelProvider as _t, BatteryStatusSchema as a, buildFfmpegArgs as an, egressTransportFromRequest as at, EVENT_PAD_MS as b, expandAudioChunkToF32le as bn, logChannelsCapability as bt, CLIP_STILL_REASON_HEADER as c, isSoftwareDecode as cn, evictionPolicyForMode as ct, COCO_80_LABELS as d, errMsg as dn, failureContributionCapability as dt, videoclipsCapability as en, deriveBatteryPresence as et, COCO_TO_MACRO as f, BOOT_RECOVERY_BACKOFF_MS as fn, ffmpegRate as ft, DEFAULT_EVENTS_BAND_BUFFER_SEC as g, audioChunkBytesPerSample as gn, hfModelUrl as gt, DEFAULT_DETAIL_CROP_CONVENTION as h, CamProfileSchema as hn, gifFromMp4Args as ht, BackgroundRunRegistry as i, Fmp4BoxSplitter as in, egressTranscodeSharingKey as it, RATE_CONTROL_RELAXED as j, array as jn, pickClusterStepSettings as jt, OpsLogEntrySchema as k, sleep as kn, overlayClusterStepSettings as kt, CLIP_STREAM_TRANSPORT_HEADER as l, DeviceFeature as ln, evictionPolicyOfLocation as lt, DEFAULT_CLUSTER_STEP_SETTINGS as m, CAM_PROFILE_ORDER as mn, gifDeriveSpeed as mt, AUDIO_BACKEND_CHOICES as n, AUDIO_PRESETS as nn, deriveRecordingMode as nt, CLIP_BROKER_PACED_RATES as o, evaluateSensorEdge as on, enumerateInferenceDevices as ot, DEFAULT_AUDIO_ANALYZER_CONFIG as p, BaseAddon as pn, gbToBytes as pt, cameraStreamsCapability as q, runtimeDevices as qt, AUDIO_MACRO_LABELS as r, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as rn, detectionPipelineCapability as rt, CLIP_STILL_REASON_CODE_HEADER as s, invocationFromEncodeProfile as sn, evaluateZoneRules as st, APPLE_SA_TO_MACRO as t, webrtcSessionCapability as tn, deriveDetailCropRect as tt, CLUSTER_MODEL_SCOPED_STEPS as u, DeviceType as un, exportSubjectOf as ut, DEVICE_BACKEND_TO_FORMAT as v, customAction as vn, isFirstLevelMacroClass as vt, G711_SCALE_CORRECTION_DB as w, makeSourceBrokerId as wn, mayWriteToLocation as wt, EncodeProfileSchema as x, hydrateSchema as xn, mapAudioLabelToMacro as xt, EVENT_OWNER_TYPES as y, defineCustomActions as yn, loadContributionCapability as yt, VIDEOCLIPS_MAX_OFFER_BYTES as z, record as zn, recordingExportCapability as zt };

package/dist/motion-wasm/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-C2GsZSso.js");
+const require_dist = require("../dist-CdRsXAov.js");
 const require_lazy_sharp = require("../lazy-sharp-BuwKlQLR.js");
 let node_fs = require("node:fs");
 let node_path = require("node:path");

package/dist/motion-wasm/index.mjs

@@ -1,4 +1,4 @@
-import { _n as hydrateSchema, ln as BaseAddon, on as DeviceType, st as evaluateZoneRules, wt as motionDetectionCapability } from "../dist-B0mdAGsn.mjs";
+import { Ot as motionDetectionCapability, pn as BaseAddon, st as evaluateZoneRules, un as DeviceType, xn as hydrateSchema } from "../dist-jy-7xoW5.mjs";
 import { t as getSharp } from "../lazy-sharp-DXsqwpph.mjs";
 import { readFileSync } from "node:fs";
 import { join } from "node:path";

package/dist/{node-C4FxPOmq.mjs → node-NCge1qZM.mjs}

@@ -1,4 +1,4 @@
-import { en as Fmp4BoxSplitter, in as isSoftwareDecode, sn as errMsg, tn as buildFfmpegArgs } from "./dist-B0mdAGsn.mjs";
+import { an as buildFfmpegArgs, cn as isSoftwareDecode, dn as errMsg, in as Fmp4BoxSplitter } from "./dist-jy-7xoW5.mjs";
 import { randomUUID } from "node:crypto";
 import { realpathSync } from "node:fs";
 import path from "node:path";
@@ -112,58 +112,6 @@ async function probeFfmpegBinary(path) {
 	]);
 	return parseFfmpegCapabilities(path, versionOut, hwaccelOut, encoderOut);
 }
-/**
-* The ffmpeg build every CamStack node downloads, per platform and arch.
-*
-* ## Why a download, on every node, including the container
-*
-* The version of ffmpeg used to be CODE: baked into the image, changeable only
-* by rebuilding and rolling it. Now it is DATA — this file states the release,
-* and a node that boots with a different one downloads it. Changing ffmpeg is a
-* framework bump, not an image rebuild.
-*
-* It also settles the licence question by removing it. FFmpeg's licence is
-* chosen at compile time: the core is LGPL 2.1+, `--enable-gpl` makes it GPL
-* (for x264/x265), `--enable-version3` makes that v3, and `--enable-nonfree`
-* makes the result undistributable. These are GPL v3 builds, and we do not
-* distribute them: the user's own node fetches the archive from the project
-* that publishes it, so we convey no GPL work and inherit none of the
-* obligations that come with conveying one. That is the whole reason the image
-* no longer installs ffmpeg at all — not a technical preference.
-*
-* ## Why jellyfin-ffmpeg
-*
-* One vendor covering linux-amd64, linux-arm64, darwin-arm64 and darwin-x64
-* from one release, with the widest hardware surface of anything maintained:
-* VAAPI, QSV, NVENC/NVDEC, AMF, Vulkan, OpenCL and DRM on amd64, plus Rockchip
-* MPP on arm64. It reaches the vendor libraries through dlopen trampolines,
-* so the binary is not linked against a driver stack it may not find.
-*
-* **What it still needs from the host, measured 2026-09-19.** On the Unraid
-* HOST, which has no libva, `-vaapi_device` aborts the process outright —
-* `implib-gen: libva-drm.so.2: failed to load library ... Assertion '0 &&
-* "Assertion in generated code"' failed`. Inside our container, which installs
-* libva plus the iHD driver, the same command encodes: verified end to end with
-* `testsrc → format=nv12,hwupload → h264_vaapi`. So the image drops ffmpeg and
-* KEEPS the Intel media stack; the drivers are the part a binary cannot bring.
-*
-* ## Why each artifact carries a checksum and a claim
-*
-* The download is now the only source, so `sha256` is verified before anything
-* is extracted — jellyfin publishes no checksums on its release assets, so
-* these are ours, taken at the version bump. And `expectedHwaccels` is what the
-* build is supposed to be able to do: a binary that probes short of its own
-* claim is a source that changed under us, which is precisely what went
-* unnoticed for months when a static build turned out to carry no VAAPI at all
-* (D536).
-*/
-/** The pinned jellyfin-ffmpeg release. Changing this is the version change. */
-var FFMPEG_RELEASE = "8.1.2-5";
-var BASE = `https://github.com/jellyfin/jellyfin-ffmpeg/releases/download/v${FFMPEG_RELEASE}`;
-function portable(target) {
-	return `${BASE}/jellyfin-ffmpeg_${FFMPEG_RELEASE}_portable_${target}-gpl.tar.xz`;
-}
-portable("linux64"), portable("linuxarm64"), portable("macarm64"), portable("mac64");
 var DEFAULT_FIRST_UNIT_TIMEOUT_MS = 12e3;
 /** Heartbeat cadence — ~2 minutes of 4 s fragments. */
 var FRAGMENT_LOG_EVERY = 30;