@camstack/addon-pipeline 1.2.307 → 1.2.308

package/dist/recorder/index.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-CyJWk-_f.js");
-const require_node = require("../node-HsWG5fGp.js");
+const require_dist = require("../dist-CdRsXAov.js");
+const require_node = require("../node-pWHpwpBa.js");
 const require_hub_hostname = require("../hub-hostname-DAJXlOgV.js");
 const require_restream_intent = require("../restream-intent-7uDNqMKs.js");
 const require_retire_root_keys = require("../retire-root-keys-Csb8z2f3.js");
@@ -3450,7 +3450,20 @@ var StillFrameService = class {
 			return null;
 		}
 		try {
-			const jpeg = await this.decodeFrame(abs, source.offsetSec);
+			let bin;
+			try {
+				bin = await this.deps.resolveFfmpeg();
+			} catch (err) {
+				this.deps.logger.error("still: refused — no pinned ffmpeg on this node (D540)", {
+					tags: { deviceId },
+					meta: {
+						epochMs,
+						error: err instanceof Error ? err.message : String(err)
+					}
+				});
+				return null;
+			}
+			const jpeg = await this.decodeFrame(bin, abs, source.offsetSec);
 			if (jpeg === null || jpeg.byteLength === 0) return null;
 			return {
 				jpeg,
@@ -3461,7 +3474,7 @@ var StillFrameService = class {
 		}
 	}
 	/** Run ONE ffmpeg input-seek + single-frame decode; JPEG bytes on stdout. */
-	decodeFrame(absPath, offsetSec) {
+	decodeFrame(bin, absPath, offsetSec) {
 		const args = [
 			"-hide_banner",
 			"-loglevel",
@@ -3477,7 +3490,6 @@ var StillFrameService = class {
 			"pipe:1"
 		];
 		const spawn = this.deps.spawn ?? node_child_process.spawn;
-		const bin = this.deps.ffmpegPath ?? "ffmpeg";
 		return new Promise((resolve) => {
 			let child;
 			try {
@@ -7549,15 +7561,32 @@ var ExportEngine = class {
 			} catch {}
 		}
 	}
-	runFfmpeg(id, deviceId, args, progress) {
+	async runFfmpeg(id, deviceId, args, progress) {
+		let ffmpegPath;
+		try {
+			ffmpegPath = await this.deps.resolveFfmpeg();
+		} catch (err) {
+			const reason = `no pinned ffmpeg on this node (D540): ${err instanceof Error ? err.message : String(err)}`;
+			this.deps.logger.error("export render refused — no pinned ffmpeg on this node (D540)", {
+				tags: { deviceId },
+				meta: {
+					exportId: id,
+					error: reason
+				}
+			});
+			return {
+				code: null,
+				stderrTail: [reason]
+			};
+		}
 		this.deps.logger.debug("export ffmpeg argv", { meta: {
 			exportId: id,
 			args
 		} });
 		const stallMs = this.deps.stallMs ?? 9e4;
 		const faststartStallMs = this.deps.faststartStallMs ?? 9e5;
-		return new Promise((resolve) => {
-			const proc = this.deps.spawn(this.deps.ffmpegPath ?? "ffmpeg", args);
+		return await new Promise((resolve) => {
+			const proc = this.deps.spawn(ffmpegPath, args);
 			this.active.set(id, proc);
 			const stderrTail = [];
 			let stallTimer = null;
@@ -9459,6 +9488,17 @@ async function renderFootage(renderDeps, input, ext, buildArgs) {
 	const toMs = input.aroundMs + input.postRollSec * 1e3;
 	if (!Number.isFinite(fromMs) || !Number.isFinite(toMs) || toMs <= fromMs) throw new Error(`invalid ${ext} window [${fromMs}, ${toMs}) for device ${input.deviceId} — aroundMs=${input.aroundMs} preRollSec=${input.preRollSec} postRollSec=${input.postRollSec}`);
 	const renderId = `${ext}-${now()}-${Math.floor(Math.random() * 1e6)}`;
+	let ffmpegPath;
+	try {
+		ffmpegPath = await renderDeps.resolveFfmpeg();
+	} catch (err) {
+		const reason = err instanceof Error ? err.message : String(err);
+		renderDeps.deps.logger.error(`${ext} render refused — no pinned ffmpeg on this node (D540)`, {
+			tags: { deviceId: input.deviceId },
+			meta: { error: reason }
+		});
+		throw new Error(`${ext} render refused for device ${input.deviceId}: no pinned ffmpeg — ${reason}`, { cause: err });
+	}
 	const availableEnd = latestFinalizedEnd(renderDeps, input.deviceId);
 	if (availableEnd === null || availableEnd < toMs) throw new Error(`${FOOTAGE_NOT_READY}: [${fromMs}, ${toMs}) for device ${input.deviceId} — finalized footage ends at ${availableEnd ?? "never"}`);
 	const window = {
@@ -9477,7 +9517,7 @@ async function renderFootage(renderDeps, input, ext, buildArgs) {
 	if (playlist === null) throw new Error(`no footage covers [${window.fromMs}, ${window.toMs}) for device ${input.deviceId}`);
 	const outPath = node_path.default.join(node_path.default.dirname(playlist.path), `${renderId}.${ext}`);
 	try {
-		await runFfmpeg(renderDeps, buildArgs(playlist.path, outPath), ext);
+		await runFfmpeg(renderDeps, ffmpegPath, buildArgs(playlist.path, outPath), ext);
 		const bytes = await node_fs.promises.readFile(outPath);
 		if (bytes.byteLength === 0) throw new Error(`${ext} render produced an empty file`);
 		return {
@@ -9514,9 +9554,9 @@ function latestFinalizedEnd(renderDeps, deviceId) {
 * throws ESRCH, which is swallowed, so the cost of being wrong is nothing while
 * the cost of NOT killing is a zombie per render.
 */
-function runFfmpeg(renderDeps, args, ext) {
+function runFfmpeg(renderDeps, ffmpegPath, args, ext) {
 	return new Promise((resolve, reject) => {
-		const proc = renderDeps.spawn(renderDeps.ffmpegPath ?? "ffmpeg", args);
+		const proc = renderDeps.spawn(ffmpegPath, args);
 		let done = false;
 		let timer = null;
 		const settle = (err) => {
@@ -15748,7 +15788,7 @@ var SegmentWriter = class {
 	start() {
 		if (this.stopped || this.proc) return;
 		const args = buildPassthroughArgs(this.cfg);
-		const proc = this.deps.spawn(this.deps.ffmpegPath ?? "ffmpeg", args);
+		const proc = this.deps.spawn(this.deps.ffmpegPath, args);
 		this.proc = proc;
 		this.exitWait = new Promise((resolve) => {
 			this.resolveExit = resolve;
@@ -17495,6 +17535,19 @@ var RecordingController = class {
 	*/
 	async attachProfile(deviceId, profile, segmentSeconds, audio) {
 		const attachProfileStartMs = this.now();
+		let ffmpegPath;
+		try {
+			ffmpegPath = await this.deps.resolveFfmpeg();
+		} catch (err) {
+			this.deps.logger.error("recorder: writer refused — no pinned ffmpeg on this node (D540)", {
+				tags: { deviceId },
+				meta: {
+					profile,
+					error: require_dist.errMsg(err)
+				}
+			});
+			throw new Error(`recorder: no pinned ffmpeg for device ${deviceId}/${profile}`);
+		}
 		const placement = await this.resolvePlacement(deviceId, profile);
 		const placementDoneMs = this.now();
 		const outDir = node_path.default.join(placement.root, STAGING_DIR_NAME, String(deviceId), profile);
@@ -17530,6 +17583,7 @@ var RecordingController = class {
 			consumerTag
 		}, {
 			spawn: this.deps.spawn,
+			ffmpegPath,
 			logger: deviceLog,
 			deviceId,
 			claimCost: (pid) => this.deps.costRegistry?.claim({
@@ -20823,6 +20877,14 @@ var RecorderV2Addon = class extends require_dist.BaseAddon {
 	* because those children were this process's children.
 	*/
 	costRegistry = new require_node.ChildCostRegistry();
+	/**
+	* This node's PINNED ffmpeg (D540), asked once and shared by every child the
+	* recorder spawns: segment writers, exports, gif/clip renders and stills.
+	* Each of those used to take an optional path that no one passed, and fell
+	* back to a bare `'ffmpeg'` — the HOST's binary. It rejects rather than
+	* naming PATH; each site logs its refusal per camera.
+	*/
+	pinnedFfmpeg = require_dist.memoizePinnedFfmpeg(() => this.ctx.deps.ensureFfmpeg());
 	/** True when THIS node is the designated recording node (`recordingNodeId`).
 	*  Every other node stays fully inert — registers no providers, serves no
 	*  playback, runs no controller. Resolved in `onInitialize`. */
@@ -21216,6 +21278,7 @@ var RecorderV2Addon = class extends require_dist.BaseAddon {
 			now: () => Date.now()
 		});
 		this.controller = new RecordingController({
+			resolveFfmpeg: this.pinnedFfmpeg,
 			...this.stagingGuard !== null ? { stagingGuard: this.stagingGuard } : {},
 			recoverStagingDirectory: (input) => this.recoverReapedDirectory(input),
 			heapProbe: this.heapProbe,
@@ -21363,12 +21426,14 @@ var RecorderV2Addon = class extends require_dist.BaseAddon {
 			gifRender: (input) => renderGif({
 				deps: recordingDeps,
 				exportsDir: this.exportsDirOrThrow(),
-				spawn: node_child_process.spawn
+				spawn: node_child_process.spawn,
+				resolveFfmpeg: this.pinnedFfmpeg
 			}, input),
 			clipRender: (input) => renderClip({
 				deps: recordingDeps,
 				exportsDir: this.exportsDirOrThrow(),
-				spawn: node_child_process.spawn
+				spawn: node_child_process.spawn,
+				resolveFfmpeg: this.pinnedFfmpeg
 			}, input),
 			locations: () => this.resolvedLocations,
 			refreshLocations: () => this.refreshLocations(),
@@ -21497,6 +21562,7 @@ var RecorderV2Addon = class extends require_dist.BaseAddon {
 		};
 		this.exportEngine = new ExportEngine({
 			spawn: node_child_process.spawn,
+			resolveFfmpeg: this.pinnedFfmpeg,
 			logger: this.ctx.logger.child("export"),
 			state: exportsState,
 			resolvePlaylist: async (rec) => {
@@ -21649,7 +21715,8 @@ var RecorderV2Addon = class extends require_dist.BaseAddon {
 			const stillService = new StillFrameService({
 				lowSegmentsAt: (deviceId, epochMs) => this.index.segmentsOverlapping(deviceId, "low", epochMs, epochMs + 1),
 				resolveAbsPath: (row) => this.resolveSegmentAbsPath(row),
-				logger: this.ctx.logger.child("Still")
+				logger: this.ctx.logger.child("Still"),
+				resolveFfmpeg: this.pinnedFfmpeg
 			});
 			const served = await this.ctx.dataPlane?.serve({
 				prefix: STILL_PREFIX,

package/dist/recorder/index.mjs

@@ -1,5 +1,5 @@
-import { $t as videoclipsCapability, An as array, B as VISIT_MERGE_GAP_MS, Ct as mayReadLocation, Dn as selectAssignedProfileSlots, Et as modeMayWrite, F as RECORDING_SOURCE_CAMSTACK_ADDON, Fn as number, Gt as resolveRecordingProfiles, I as RecordingConfigSchema, In as object, It as recordingArchiveCapability, J as clipExportFailure, Jt as storageEvictableCapability, K as batteryCapability, L as RecordingSignalStatusSchema, Ln as preprocess, Lt as recordingCapability, N as RECORDING_EXPORT_MAX_READ_BYTES, On as sleep$1, P as RECORDING_SOURCE_CAMSTACK, Rn as record, Rt as recordingExportCapability, S as ExportRecordSchema, Tt as migrateLegacyDeviceSignalConfig, Ut as resolveLocationMode, Vn as EventCategory, Vt as resolveCreateExportSubject, Y as clipExportFailureOf, Yt as storageOccupancyCapability, Zt as stripRetiredBandPreBufferSec, _n as customAction, a as BatteryStatusSchema, an as evaluateSensorEdge, b as EVENT_PAD_MS, bn as hydrateSchema, cn as DeviceFeature, ct as evictionPolicyForMode, et as deriveBatteryPresence, fn as BaseAddon, g as DEFAULT_EVENTS_BAND_BUFFER_SEC, jn as boolean, k as OpsLogEntrySchema, kn as _enum, ln as DeviceType, lt as evictionPolicyOfLocation, nt as deriveRecordingMode, o as CLIP_BROKER_PACED_RATES, pt as gbToBytes, un as errMsg$1, ut as exportSubjectOf, vn as defineCustomActions, vt as isFirstLevelMacroClass, wn as nodePin, wt as mayWriteToLocation, y as EVENT_OWNER_TYPES, yt as loadContributionCapability, z as VIDEOCLIPS_MAX_OFFER_BYTES, zn as string, zt as recordingSignalCapability } from "../dist-DdVMFlJ6.mjs";
-import { a as physicalRootOf, i as NO_COST_CLAIM, t as ChildCostRegistry } from "../node-COu_tHy4.mjs";
+import { An as _enum, B as VISIT_MERGE_GAP_MS, Bn as string, Bt as recordingSignalCapability, Ct as mayReadLocation, Dt as modeMayWrite, Et as migrateLegacyDeviceSignalConfig, F as RECORDING_SOURCE_CAMSTACK_ADDON, Hn as EventCategory, Ht as resolveCreateExportSubject, I as RecordingConfigSchema, In as number, J as clipExportFailure, K as batteryCapability, Kt as resolveRecordingProfiles, L as RecordingSignalStatusSchema, Ln as object, Lt as recordingArchiveCapability, Mn as boolean, N as RECORDING_EXPORT_MAX_READ_BYTES, On as selectAssignedProfileSlots, P as RECORDING_SOURCE_CAMSTACK, Qt as stripRetiredBandPreBufferSec, Rn as preprocess, Rt as recordingCapability, S as ExportRecordSchema, Tn as nodePin, Tt as memoizePinnedFfmpeg, Wt as resolveLocationMode, Xt as storageOccupancyCapability, Y as clipExportFailureOf, Yt as storageEvictableCapability, a as BatteryStatusSchema, b as EVENT_PAD_MS, ct as evictionPolicyForMode, dn as errMsg$1, en as videoclipsCapability, et as deriveBatteryPresence, g as DEFAULT_EVENTS_BAND_BUFFER_SEC, jn as array, k as OpsLogEntrySchema, kn as sleep$1, ln as DeviceFeature, lt as evictionPolicyOfLocation, nt as deriveRecordingMode, o as CLIP_BROKER_PACED_RATES, on as evaluateSensorEdge, pn as BaseAddon, pt as gbToBytes, un as DeviceType, ut as exportSubjectOf, vn as customAction, vt as isFirstLevelMacroClass, wt as mayWriteToLocation, xn as hydrateSchema, y as EVENT_OWNER_TYPES, yn as defineCustomActions, yt as loadContributionCapability, z as VIDEOCLIPS_MAX_OFFER_BYTES, zn as record, zt as recordingExportCapability } from "../dist-jy-7xoW5.mjs";
+import { a as physicalRootOf, i as NO_COST_CLAIM, t as ChildCostRegistry } from "../node-NCge1qZM.mjs";
 import { t as resolveHubHostname } from "../hub-hostname-cCknRYKj.mjs";
 import { d as PREBUFFER_MAX_MS, l as withRecordingIntent, r as RECORDING_PRE_ROLL_REQUEST_MS } from "../restream-intent-DyGmLAU9.mjs";
 import { n as RowMapStore, t as retireRootKeys } from "../retire-root-keys-DZvlso2l.mjs";
@@ -3443,7 +3443,20 @@ var StillFrameService = class {
 			return null;
 		}
 		try {
-			const jpeg = await this.decodeFrame(abs, source.offsetSec);
+			let bin;
+			try {
+				bin = await this.deps.resolveFfmpeg();
+			} catch (err) {
+				this.deps.logger.error("still: refused — no pinned ffmpeg on this node (D540)", {
+					tags: { deviceId },
+					meta: {
+						epochMs,
+						error: err instanceof Error ? err.message : String(err)
+					}
+				});
+				return null;
+			}
+			const jpeg = await this.decodeFrame(bin, abs, source.offsetSec);
 			if (jpeg === null || jpeg.byteLength === 0) return null;
 			return {
 				jpeg,
@@ -3454,7 +3467,7 @@ var StillFrameService = class {
 		}
 	}
 	/** Run ONE ffmpeg input-seek + single-frame decode; JPEG bytes on stdout. */
-	decodeFrame(absPath, offsetSec) {
+	decodeFrame(bin, absPath, offsetSec) {
 		const args = [
 			"-hide_banner",
 			"-loglevel",
@@ -3470,7 +3483,6 @@ var StillFrameService = class {
 			"pipe:1"
 		];
 		const spawn$1 = this.deps.spawn ?? spawn;
-		const bin = this.deps.ffmpegPath ?? "ffmpeg";
 		return new Promise((resolve) => {
 			let child;
 			try {
@@ -7541,15 +7553,32 @@ var ExportEngine = class {
 			} catch {}
 		}
 	}
-	runFfmpeg(id, deviceId, args, progress) {
+	async runFfmpeg(id, deviceId, args, progress) {
+		let ffmpegPath;
+		try {
+			ffmpegPath = await this.deps.resolveFfmpeg();
+		} catch (err) {
+			const reason = `no pinned ffmpeg on this node (D540): ${err instanceof Error ? err.message : String(err)}`;
+			this.deps.logger.error("export render refused — no pinned ffmpeg on this node (D540)", {
+				tags: { deviceId },
+				meta: {
+					exportId: id,
+					error: reason
+				}
+			});
+			return {
+				code: null,
+				stderrTail: [reason]
+			};
+		}
 		this.deps.logger.debug("export ffmpeg argv", { meta: {
 			exportId: id,
 			args
 		} });
 		const stallMs = this.deps.stallMs ?? 9e4;
 		const faststartStallMs = this.deps.faststartStallMs ?? 9e5;
-		return new Promise((resolve) => {
-			const proc = this.deps.spawn(this.deps.ffmpegPath ?? "ffmpeg", args);
+		return await new Promise((resolve) => {
+			const proc = this.deps.spawn(ffmpegPath, args);
 			this.active.set(id, proc);
 			const stderrTail = [];
 			let stallTimer = null;
@@ -9451,6 +9480,17 @@ async function renderFootage(renderDeps, input, ext, buildArgs) {
 	const toMs = input.aroundMs + input.postRollSec * 1e3;
 	if (!Number.isFinite(fromMs) || !Number.isFinite(toMs) || toMs <= fromMs) throw new Error(`invalid ${ext} window [${fromMs}, ${toMs}) for device ${input.deviceId} — aroundMs=${input.aroundMs} preRollSec=${input.preRollSec} postRollSec=${input.postRollSec}`);
 	const renderId = `${ext}-${now()}-${Math.floor(Math.random() * 1e6)}`;
+	let ffmpegPath;
+	try {
+		ffmpegPath = await renderDeps.resolveFfmpeg();
+	} catch (err) {
+		const reason = err instanceof Error ? err.message : String(err);
+		renderDeps.deps.logger.error(`${ext} render refused — no pinned ffmpeg on this node (D540)`, {
+			tags: { deviceId: input.deviceId },
+			meta: { error: reason }
+		});
+		throw new Error(`${ext} render refused for device ${input.deviceId}: no pinned ffmpeg — ${reason}`, { cause: err });
+	}
 	const availableEnd = latestFinalizedEnd(renderDeps, input.deviceId);
 	if (availableEnd === null || availableEnd < toMs) throw new Error(`${FOOTAGE_NOT_READY}: [${fromMs}, ${toMs}) for device ${input.deviceId} — finalized footage ends at ${availableEnd ?? "never"}`);
 	const window = {
@@ -9469,7 +9509,7 @@ async function renderFootage(renderDeps, input, ext, buildArgs) {
 	if (playlist === null) throw new Error(`no footage covers [${window.fromMs}, ${window.toMs}) for device ${input.deviceId}`);
 	const outPath = path.join(path.dirname(playlist.path), `${renderId}.${ext}`);
 	try {
-		await runFfmpeg(renderDeps, buildArgs(playlist.path, outPath), ext);
+		await runFfmpeg(renderDeps, ffmpegPath, buildArgs(playlist.path, outPath), ext);
 		const bytes = await promises.readFile(outPath);
 		if (bytes.byteLength === 0) throw new Error(`${ext} render produced an empty file`);
 		return {
@@ -9506,9 +9546,9 @@ function latestFinalizedEnd(renderDeps, deviceId) {
 * throws ESRCH, which is swallowed, so the cost of being wrong is nothing while
 * the cost of NOT killing is a zombie per render.
 */
-function runFfmpeg(renderDeps, args, ext) {
+function runFfmpeg(renderDeps, ffmpegPath, args, ext) {
 	return new Promise((resolve, reject) => {
-		const proc = renderDeps.spawn(renderDeps.ffmpegPath ?? "ffmpeg", args);
+		const proc = renderDeps.spawn(ffmpegPath, args);
 		let done = false;
 		let timer = null;
 		const settle = (err) => {
@@ -15740,7 +15780,7 @@ var SegmentWriter = class {
 	start() {
 		if (this.stopped || this.proc) return;
 		const args = buildPassthroughArgs(this.cfg);
-		const proc = this.deps.spawn(this.deps.ffmpegPath ?? "ffmpeg", args);
+		const proc = this.deps.spawn(this.deps.ffmpegPath, args);
 		this.proc = proc;
 		this.exitWait = new Promise((resolve) => {
 			this.resolveExit = resolve;
@@ -17487,6 +17527,19 @@ var RecordingController = class {
 	*/
 	async attachProfile(deviceId, profile, segmentSeconds, audio) {
 		const attachProfileStartMs = this.now();
+		let ffmpegPath;
+		try {
+			ffmpegPath = await this.deps.resolveFfmpeg();
+		} catch (err) {
+			this.deps.logger.error("recorder: writer refused — no pinned ffmpeg on this node (D540)", {
+				tags: { deviceId },
+				meta: {
+					profile,
+					error: errMsg$1(err)
+				}
+			});
+			throw new Error(`recorder: no pinned ffmpeg for device ${deviceId}/${profile}`);
+		}
 		const placement = await this.resolvePlacement(deviceId, profile);
 		const placementDoneMs = this.now();
 		const outDir = path.join(placement.root, STAGING_DIR_NAME, String(deviceId), profile);
@@ -17522,6 +17575,7 @@ var RecordingController = class {
 			consumerTag
 		}, {
 			spawn: this.deps.spawn,
+			ffmpegPath,
 			logger: deviceLog,
 			deviceId,
 			claimCost: (pid) => this.deps.costRegistry?.claim({
@@ -20815,6 +20869,14 @@ var RecorderV2Addon = class extends BaseAddon {
 	* because those children were this process's children.
 	*/
 	costRegistry = new ChildCostRegistry();
+	/**
+	* This node's PINNED ffmpeg (D540), asked once and shared by every child the
+	* recorder spawns: segment writers, exports, gif/clip renders and stills.
+	* Each of those used to take an optional path that no one passed, and fell
+	* back to a bare `'ffmpeg'` — the HOST's binary. It rejects rather than
+	* naming PATH; each site logs its refusal per camera.
+	*/
+	pinnedFfmpeg = memoizePinnedFfmpeg(() => this.ctx.deps.ensureFfmpeg());
 	/** True when THIS node is the designated recording node (`recordingNodeId`).
 	*  Every other node stays fully inert — registers no providers, serves no
 	*  playback, runs no controller. Resolved in `onInitialize`. */
@@ -21208,6 +21270,7 @@ var RecorderV2Addon = class extends BaseAddon {
 			now: () => Date.now()
 		});
 		this.controller = new RecordingController({
+			resolveFfmpeg: this.pinnedFfmpeg,
 			...this.stagingGuard !== null ? { stagingGuard: this.stagingGuard } : {},
 			recoverStagingDirectory: (input) => this.recoverReapedDirectory(input),
 			heapProbe: this.heapProbe,
@@ -21355,12 +21418,14 @@ var RecorderV2Addon = class extends BaseAddon {
 			gifRender: (input) => renderGif({
 				deps: recordingDeps,
 				exportsDir: this.exportsDirOrThrow(),
-				spawn
+				spawn,
+				resolveFfmpeg: this.pinnedFfmpeg
 			}, input),
 			clipRender: (input) => renderClip({
 				deps: recordingDeps,
 				exportsDir: this.exportsDirOrThrow(),
-				spawn
+				spawn,
+				resolveFfmpeg: this.pinnedFfmpeg
 			}, input),
 			locations: () => this.resolvedLocations,
 			refreshLocations: () => this.refreshLocations(),
@@ -21489,6 +21554,7 @@ var RecorderV2Addon = class extends BaseAddon {
 		};
 		this.exportEngine = new ExportEngine({
 			spawn,
+			resolveFfmpeg: this.pinnedFfmpeg,
 			logger: this.ctx.logger.child("export"),
 			state: exportsState,
 			resolvePlaylist: async (rec) => {
@@ -21641,7 +21707,8 @@ var RecorderV2Addon = class extends BaseAddon {
 			const stillService = new StillFrameService({
 				lowSegmentsAt: (deviceId, epochMs) => this.index.segmentsOverlapping(deviceId, "low", epochMs, epochMs + 1),
 				resolveAbsPath: (row) => this.resolveSegmentAbsPath(row),
-				logger: this.ctx.logger.child("Still")
+				logger: this.ctx.logger.child("Still"),
+				resolveFfmpeg: this.pinnedFfmpeg
 			});
 			const served = await this.ctx.dataPlane?.serve({
 				prefix: STILL_PREFIX,

package/dist/{segment-demux-js-BrKa7tpr.js → segment-demux-js-0bM2Anej.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-emK7D4bc.js");
-const require_dist = require("./dist-CyJWk-_f.js");
+const require_dist = require("./dist-CdRsXAov.js");
 let node_child_process = require("node:child_process");
 //#region src/stream-broker/recorded/avcc-annexb.ts
 /**
@@ -7185,10 +7185,10 @@ var SEGMENT_DEMUX_FFMPEG_ARGS = [
 * of the bytes. Throws on a non-H.264/H.265 stream or a failed conversion.
 *
 * @param bytes - The full `.m4s` fragment (one moov + one IDR-led GOP).
-* @param ffmpegPath - ffmpeg binary path (defaults to PATH `ffmpeg`).
+* @param ffmpegPath - The node's pinned ffmpeg (D540). Required: no PATH default.
 * @returns Access units in source presentation order, each tagged with its codec.
 */
-async function demuxSegmentToAnnexB(bytes, ffmpegPath = "ffmpeg") {
+async function demuxSegmentToAnnexB(bytes, ffmpegPath) {
 	const { codec, accessUnits } = demuxMpegTsToAnnexB(await runFfmpegOnce({
 		ffmpegPath,
 		args: SEGMENT_DEMUX_FFMPEG_ARGS,
@@ -7201,6 +7201,17 @@ async function demuxSegmentToAnnexB(bytes, ffmpegPath = "ffmpeg") {
 		codec
 	}));
 }
+/**
+* The ffmpeg fallback was needed and the node has no pinned binary to run it
+* with. Thrown rather than spawning a PATH `ffmpeg` (D540); the session that
+* asked names it once, per camera.
+*/
+var FfmpegFallbackRefusedError = class extends Error {
+	constructor(what) {
+		super(`${what}: ffmpeg fallback refused — no pinned ffmpeg on this node (D540)`);
+		this.name = "FfmpegFallbackRefusedError";
+	}
+};
 //#endregion
 //#region src/stream-broker/recorded/segment-demux-js.ts
 /**
@@ -7265,7 +7276,7 @@ async function demuxSegmentFullJs(bytes) {
 * unit or throws on malformed bytes. Preserves the exact {@link AccessUnit}
 * contract either way, so it is a drop-in for `RecordedFeederDeps.demux`.
 */
-async function demuxSegmentPreferJs(bytes, opts = {}) {
+async function demuxSegmentPreferJs(bytes, opts) {
 	try {
 		const js = await (opts.jsParse ?? demuxSegmentFullJs)(bytes);
 		if (js && js.length > 0) {
@@ -7282,9 +7293,16 @@ async function demuxSegmentPreferJs(bytes, opts = {}) {
 			reason: `mp4box parse threw: ${String(err)}`
 		});
 	}
+	if (opts.ffmpegPath === null) throw new FfmpegFallbackRefusedError("recorded video demux");
 	return demuxSegmentToAnnexB(bytes, opts.ffmpegPath);
 }
 //#endregion
+Object.defineProperty(exports, "FfmpegFallbackRefusedError", {
+	enumerable: true,
+	get: function() {
+		return FfmpegFallbackRefusedError;
+	}
+});
 Object.defineProperty(exports, "avccSampleToAnnexB", {
 	enumerable: true,
 	get: function() {

package/dist/{segment-demux-js-CEJn4BR0.mjs → segment-demux-js-BaI2VdPX.mjs}

@@ -1,5 +1,5 @@
 import { r as __toESM, t as __commonJSMin } from "./chunk-DnnnRqeS.mjs";
-import { un as errMsg } from "./dist-DdVMFlJ6.mjs";
+import { dn as errMsg } from "./dist-jy-7xoW5.mjs";
 import { spawn } from "node:child_process";
 //#region src/stream-broker/recorded/avcc-annexb.ts
 /**
@@ -7185,10 +7185,10 @@ var SEGMENT_DEMUX_FFMPEG_ARGS = [
 * of the bytes. Throws on a non-H.264/H.265 stream or a failed conversion.
 *
 * @param bytes - The full `.m4s` fragment (one moov + one IDR-led GOP).
-* @param ffmpegPath - ffmpeg binary path (defaults to PATH `ffmpeg`).
+* @param ffmpegPath - The node's pinned ffmpeg (D540). Required: no PATH default.
 * @returns Access units in source presentation order, each tagged with its codec.
 */
-async function demuxSegmentToAnnexB(bytes, ffmpegPath = "ffmpeg") {
+async function demuxSegmentToAnnexB(bytes, ffmpegPath) {
 	const { codec, accessUnits } = demuxMpegTsToAnnexB(await runFfmpegOnce({
 		ffmpegPath,
 		args: SEGMENT_DEMUX_FFMPEG_ARGS,
@@ -7201,6 +7201,17 @@ async function demuxSegmentToAnnexB(bytes, ffmpegPath = "ffmpeg") {
 		codec
 	}));
 }
+/**
+* The ffmpeg fallback was needed and the node has no pinned binary to run it
+* with. Thrown rather than spawning a PATH `ffmpeg` (D540); the session that
+* asked names it once, per camera.
+*/
+var FfmpegFallbackRefusedError = class extends Error {
+	constructor(what) {
+		super(`${what}: ffmpeg fallback refused — no pinned ffmpeg on this node (D540)`);
+		this.name = "FfmpegFallbackRefusedError";
+	}
+};
 //#endregion
 //#region src/stream-broker/recorded/segment-demux-js.ts
 /**
@@ -7265,7 +7276,7 @@ async function demuxSegmentFullJs(bytes) {
 * unit or throws on malformed bytes. Preserves the exact {@link AccessUnit}
 * contract either way, so it is a drop-in for `RecordedFeederDeps.demux`.
 */
-async function demuxSegmentPreferJs(bytes, opts = {}) {
+async function demuxSegmentPreferJs(bytes, opts) {
 	try {
 		const js = await (opts.jsParse ?? demuxSegmentFullJs)(bytes);
 		if (js && js.length > 0) {
@@ -7282,7 +7293,8 @@ async function demuxSegmentPreferJs(bytes, opts = {}) {
 			reason: `mp4box parse threw: ${String(err)}`
 		});
 	}
+	if (opts.ffmpegPath === null) throw new FfmpegFallbackRefusedError("recorded video demux");
 	return demuxSegmentToAnnexB(bytes, opts.ffmpegPath);
 }
 //#endregion
-export { avccSampleToAnnexB as a, require_mp4box_all as i, demuxSegmentPreferJs as n, buildKeyframeAnnexB as o, runFfmpegOnce as r, parseNalLengthSize as s, demuxSegmentFullJs as t };
+export { require_mp4box_all as a, parseNalLengthSize as c, runFfmpegOnce as i, demuxSegmentPreferJs as n, avccSampleToAnnexB as o, FfmpegFallbackRefusedError as r, buildKeyframeAnnexB as s, demuxSegmentFullJs as t };

package/dist/stream-broker/_stub.js

@@ -1,7 +1,7 @@
 import { a as e, c as t, d as n, f as r, i, l as a, n as o, o as s, p as c, r as l, s as u, t as d, u as f } from "./_virtual_mf___mfe_internal__addon_stream_broker_widgets__loadShare___mf_0_camstack_mf_1_ui_mf_2_library__loadShare__.js-CdKbuxqG.mjs";
 import { a as p, i as m, n as h, o as g, r as _, t as v } from "./_virtual_mf___mfe_internal__addon_stream_broker_widgets__loadShare__react__loadShare__.js-C9j-2lBe.mjs";
 import { n as y, r as b, t as x } from "./_virtual_mf___mfe_internal__addon_stream_broker_widgets__loadShare__react_mf_1_jsx_mf_2_runtime__loadShare__.js-XO0-Pyu6.mjs";
-import { t as S } from "./_virtual_mf___mfe_internal__addon_stream_broker_widgets__loadShare___mf_0_camstack_mf_1_types__loadShare__.js-DPHv0v3Q.mjs";
+import { t as S } from "./_virtual_mf___mfe_internal__addon_stream_broker_widgets__loadShare___mf_0_camstack_mf_1_types__loadShare__.js-DEPTgXS_.mjs";
 import { n as C, t as w } from "./_virtual_mf___mfe_internal__addon_stream_broker_widgets__loadShare___mf_0_tanstack_mf_1_react_mf_2_query__loadShare__.js-BO7TIbJV.mjs";
 //#region ../../node_modules/lucide-react/dist/esm/shared/src/utils/mergeClasses.js
 var T = (...e) => e.filter((e, t, n) => !!e && e.trim() !== "" && n.indexOf(e) === t).join(" ").trim(), E = (e) => e.replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase(), D = (e) => e.replace(/^([A-Z])|[\s-_]+(\w)/g, (e, t, n) => n ? n.toUpperCase() : t.toLowerCase()), O = (e) => {

package/dist/stream-broker/{_virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-DdYUVQSA.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-CkxD__Uy.mjs}

@@ -18,7 +18,7 @@ var e = {
 	},
 	"@camstack/types": {
 		name: "@camstack/types",
-		version: "1.2.274",
+		version: "1.2.275",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_stream_broker_widgets",