@camstack/addon-pipeline 1.2.309 → 1.2.311

package/dist/pipeline-runner/index.js

@@ -3885,6 +3885,24 @@ function isParkedDetailFresh(parked, nowMs) {
 function buildDetailNotAttachedError(deviceId) {
 	return /* @__PURE__ */ new Error(`${DETAIL_NOT_ATTACHED_MARKER} — camera ${deviceId} is not attached and no detail state is parked within the grace window`);
 }
+/**
+* The wire marker for the typed handle-expired refusal (D688): the frame handle
+* a detail dispatch named is past the native lease age bound, so every later
+* ask for it is refused too. Twin constant in
+* `addon-post-analysis/src/pipeline-analytics/detail-refusal.ts` — keep in sync.
+* An error rather than a result field for the same reason as
+* {@link DETAIL_NOT_ATTACHED_MARKER}: the cap output schema strips unknown keys.
+*/
+var DETAIL_HANDLE_EXPIRED_MARKER = "runDetailSubtree-refused:handle-expired";
+/**
+* The error the cap method throws when the dispatch's only pixel source was a
+* frame handle the lease registry refused as expired. The dispatcher recognises
+* the marker, retires the handle for that track and falls back to its parked
+* frame — it never names the same handle again.
+*/
+function buildDetailHandleExpiredError(deviceId, handleAgeMs) {
+	return /* @__PURE__ */ new Error(`${DETAIL_HANDLE_EXPIRED_MARKER} — camera ${deviceId}: the frame handle is past the native lease age bound (age ${handleAgeMs ?? "unknown"} ms)`);
+}
 //#endregion
 //#region src/pipeline-runner/face-parent-geometry.ts
 /** Is the centre of `face` inside `parent` (edges inclusive)? */
@@ -3970,7 +3988,11 @@ var FaceOutsideParentLog = class {
 //#region src/pipeline-runner/detail-subtree.ts
 /** Did the subtree run refuse because the camera is not attached (park lapsed)? */
 function isDetailNotAttachedRefusal(outcome) {
-	return "refusal" in outcome;
+	return "refusal" in outcome && outcome.refusal === "not-attached";
+}
+/** Did the subtree run refuse because the named frame handle is past its lease age bound? */
+function isDetailHandleExpiredRefusal(outcome) {
+	return "refusal" in outcome && outcome.refusal === "handle-expired";
 }
 /** Did the native-lease fetch report a miss (rather than return pixels)? */
 function isNativeCropMiss(fetch) {
@@ -4272,6 +4294,10 @@ async function runDetailSubtree(deps, input) {
 				nativeWorkerReason: nativeMiss?.workerReason ?? null
 			}
 		});
+		if (nativeMiss?.miss === "handle-expired") return {
+			refusal: "handle-expired",
+			handleAgeMs: nativeMiss.handleAgeMs
+		};
 		return null;
 	}
 	const nativeCropRef = input.frameHandle !== void 0 && crop.source === "native" ? {
@@ -5298,6 +5324,19 @@ async function resolveMotionFrameView(registry, ref) {
 /** The step id (`PipelineStepInput.addonId`) the governor gates. */
 var PACKAGE_DETECTION_STEP_ID = "package-detection";
 /**
+* The executor's frame, stamped `packageLooked` when the `package-detection`
+* root was among the steps actually DISPATCHED for it (the governor let it
+* through) and the frame was not shed. Post-analysis reads it as "an empty
+* doormat on this frame is an ABSENCE, not silence" (D687). Never mutates.
+*/
+function withPackageLook(result, dispatched) {
+	if (result.shed === true) return result;
+	return dispatched.some((s) => s.addonId === "package-detection" && s.enabled !== false) ? {
+		...result,
+		packageLooked: true
+	} : result;
+}
+/**
 * Burst: 5 runs, 5s apart — 0s, 5s, 10s, 15s, 20s after the settle edge.
 *
 * Sized as a SAFETY NET when the operator raises `packageDropDwellSec` above
@@ -10058,6 +10097,7 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAdd
 			recordFaceOutsideParent: (drop) => this.faceOutsideParentLog.record(drop)
 		}, input);
 		if (outcome !== null && isDetailNotAttachedRefusal(outcome)) throw buildDetailNotAttachedError(input.deviceId);
+		if (outcome !== null && isDetailHandleExpiredRefusal(outcome)) throw buildDetailHandleExpiredError(input.deviceId, outcome.handleAgeMs);
 		return outcome;
 	}
 	/**
@@ -11385,7 +11425,8 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAdd
 			return null;
 		}
 		if (result === null) return null;
-		return this.recoverSmallSubjects(deviceId, frame, result, dispatchSteps, camConfig?.deviceKey);
+		const looked = withPackageLook(result, dispatchSteps);
+		return this.recoverSmallSubjects(deviceId, frame, looked, dispatchSteps, camConfig?.deviceKey);
 	}
 	/**
 	* The second detector pass at native resolution — `small-subject-recovery.ts`

package/dist/pipeline-runner/index.mjs

@@ -3877,6 +3877,24 @@ function isParkedDetailFresh(parked, nowMs) {
 function buildDetailNotAttachedError(deviceId) {
 	return /* @__PURE__ */ new Error(`${DETAIL_NOT_ATTACHED_MARKER} — camera ${deviceId} is not attached and no detail state is parked within the grace window`);
 }
+/**
+* The wire marker for the typed handle-expired refusal (D688): the frame handle
+* a detail dispatch named is past the native lease age bound, so every later
+* ask for it is refused too. Twin constant in
+* `addon-post-analysis/src/pipeline-analytics/detail-refusal.ts` — keep in sync.
+* An error rather than a result field for the same reason as
+* {@link DETAIL_NOT_ATTACHED_MARKER}: the cap output schema strips unknown keys.
+*/
+var DETAIL_HANDLE_EXPIRED_MARKER = "runDetailSubtree-refused:handle-expired";
+/**
+* The error the cap method throws when the dispatch's only pixel source was a
+* frame handle the lease registry refused as expired. The dispatcher recognises
+* the marker, retires the handle for that track and falls back to its parked
+* frame — it never names the same handle again.
+*/
+function buildDetailHandleExpiredError(deviceId, handleAgeMs) {
+	return /* @__PURE__ */ new Error(`${DETAIL_HANDLE_EXPIRED_MARKER} — camera ${deviceId}: the frame handle is past the native lease age bound (age ${handleAgeMs ?? "unknown"} ms)`);
+}
 //#endregion
 //#region src/pipeline-runner/face-parent-geometry.ts
 /** Is the centre of `face` inside `parent` (edges inclusive)? */
@@ -3962,7 +3980,11 @@ var FaceOutsideParentLog = class {
 //#region src/pipeline-runner/detail-subtree.ts
 /** Did the subtree run refuse because the camera is not attached (park lapsed)? */
 function isDetailNotAttachedRefusal(outcome) {
-	return "refusal" in outcome;
+	return "refusal" in outcome && outcome.refusal === "not-attached";
+}
+/** Did the subtree run refuse because the named frame handle is past its lease age bound? */
+function isDetailHandleExpiredRefusal(outcome) {
+	return "refusal" in outcome && outcome.refusal === "handle-expired";
 }
 /** Did the native-lease fetch report a miss (rather than return pixels)? */
 function isNativeCropMiss(fetch) {
@@ -4264,6 +4286,10 @@ async function runDetailSubtree(deps, input) {
 				nativeWorkerReason: nativeMiss?.workerReason ?? null
 			}
 		});
+		if (nativeMiss?.miss === "handle-expired") return {
+			refusal: "handle-expired",
+			handleAgeMs: nativeMiss.handleAgeMs
+		};
 		return null;
 	}
 	const nativeCropRef = input.frameHandle !== void 0 && crop.source === "native" ? {
@@ -5290,6 +5316,19 @@ async function resolveMotionFrameView(registry, ref) {
 /** The step id (`PipelineStepInput.addonId`) the governor gates. */
 var PACKAGE_DETECTION_STEP_ID = "package-detection";
 /**
+* The executor's frame, stamped `packageLooked` when the `package-detection`
+* root was among the steps actually DISPATCHED for it (the governor let it
+* through) and the frame was not shed. Post-analysis reads it as "an empty
+* doormat on this frame is an ABSENCE, not silence" (D687). Never mutates.
+*/
+function withPackageLook(result, dispatched) {
+	if (result.shed === true) return result;
+	return dispatched.some((s) => s.addonId === "package-detection" && s.enabled !== false) ? {
+		...result,
+		packageLooked: true
+	} : result;
+}
+/**
 * Burst: 5 runs, 5s apart — 0s, 5s, 10s, 15s, 20s after the settle edge.
 *
 * Sized as a SAFETY NET when the operator raises `packageDropDwellSec` above
@@ -10050,6 +10089,7 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends BaseAddon {
 			recordFaceOutsideParent: (drop) => this.faceOutsideParentLog.record(drop)
 		}, input);
 		if (outcome !== null && isDetailNotAttachedRefusal(outcome)) throw buildDetailNotAttachedError(input.deviceId);
+		if (outcome !== null && isDetailHandleExpiredRefusal(outcome)) throw buildDetailHandleExpiredError(input.deviceId, outcome.handleAgeMs);
 		return outcome;
 	}
 	/**
@@ -11377,7 +11417,8 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends BaseAddon {
 			return null;
 		}
 		if (result === null) return null;
-		return this.recoverSmallSubjects(deviceId, frame, result, dispatchSteps, camConfig?.deviceKey);
+		const looked = withPackageLook(result, dispatchSteps);
+		return this.recoverSmallSubjects(deviceId, frame, looked, dispatchSteps, camConfig?.deviceKey);
 	}
 	/**
 	* The second detector pass at native resolution — `small-subject-recovery.ts`

package/dist/recorder/index.js

@@ -6777,6 +6777,30 @@ async function patchExport(state, id, patch) {
 		return merged;
 	});
 }
+/**
+* Patch a row UNLESS its current state says not to — the check and the write
+* are ONE serialized step, so a delete that lands between a separate read and
+* a separate patch can no longer be overwritten (review R5).
+*/
+async function patchExportUnless(state, id, patch, refuse) {
+	return serialize(state, id, async () => {
+		const existing = await state.read(id);
+		if (existing === null) return { kind: "missing" };
+		if (refuse(existing)) return {
+			kind: "refused",
+			record: existing
+		};
+		const merged = require_dist.ExportRecordSchema.parse({
+			...existing,
+			...patch
+		});
+		await state.write(id, merged);
+		return {
+			kind: "patched",
+			record: merged
+		};
+	});
+}
 /** Read one export row by id — ONE keyed row read. */
 async function getExportRecord(state, id) {
 	return state.read(id);
@@ -6996,6 +7020,13 @@ function expectedOutSeconds(rec) {
 	}
 	return rangeSec / (rec.options.speed ?? 1);
 }
+/**
+* A row nobody will read: its caller deleted it, it expired, or it already
+* failed (a cancel finalises as `failed`). The engine renders none of these.
+*/
+function isAbandonedExportState(state) {
+	return state === "deleted" || state === "expired" || state === "failed";
+}
 var ExportEngine = class {
 	deps;
 	queue = [];
@@ -7056,16 +7087,37 @@ var ExportEngine = class {
 	async render(id) {
 		const existing = await getExportRecord(this.deps.state, id);
 		if (!existing) return;
+		if (isAbandonedExportState(existing.state)) {
+			this.deps.logger.info("export render skipped: the export was abandoned before it ran", {
+				tags: { deviceId: existing.deviceId },
+				meta: {
+					exportId: id,
+					state: existing.state
+				}
+			});
+			return;
+		}
 		const subject = require_dist.exportSubjectOf(existing);
 		if (subject.kind === "clip" && subject.source !== ANALYTICS_CLIP_SOURCE) {
 			await this.fetchClip(id, existing, subject);
 			return;
 		}
-		const rec = await patchExport(this.deps.state, id, {
+		const claimed = await patchExportUnless(this.deps.state, id, {
 			state: "rendering",
 			progressPct: 0
-		});
-		if (!rec) return;
+		}, (current) => isAbandonedExportState(current.state));
+		if (claimed.kind === "missing") return;
+		if (claimed.kind === "refused") {
+			this.deps.logger.info("export render skipped: the export was abandoned before it ran", {
+				tags: { deviceId: claimed.record.deviceId },
+				meta: {
+					exportId: id,
+					state: claimed.record.state
+				}
+			});
+			return;
+		}
+		const rec = claimed.record;
 		const playlist = await this.deps.resolvePlaylist(rec);
 		if (!playlist) {
 			await this.fail(id, "no footage for range");
@@ -7699,6 +7751,19 @@ var ExportEngine = class {
 			await this.fail(id, `render produced no video frames (${bytes} bytes, < ${EXPORT_MIN_PLAUSIBLE_BYTES})`);
 			return;
 		}
+		const current = await getExportRecord(this.deps.state, id);
+		if (current !== null && isAbandonedExportState(current.state)) {
+			await this.deps.removeFile(outPath);
+			this.deps.logger.info("export render discarded: the export was abandoned while it ran", {
+				tags: { deviceId: current.deviceId },
+				meta: {
+					exportId: id,
+					state: current.state,
+					bytes
+				}
+			});
+			return;
+		}
 		await patchExport(this.deps.state, id, {
 			state: "ready",
 			progressPct: 100,
@@ -7726,6 +7791,8 @@ var ExportEngine = class {
 			exportId: id,
 			error
 		} });
+		const current = await getExportRecord(this.deps.state, id);
+		if (current !== null && current.state === "deleted") return;
 		await patchExport(this.deps.state, id, {
 			state: "failed",
 			progressPct: null,

package/dist/recorder/index.mjs

@@ -6769,6 +6769,30 @@ async function patchExport(state, id, patch) {
 		return merged;
 	});
 }
+/**
+* Patch a row UNLESS its current state says not to — the check and the write
+* are ONE serialized step, so a delete that lands between a separate read and
+* a separate patch can no longer be overwritten (review R5).
+*/
+async function patchExportUnless(state, id, patch, refuse) {
+	return serialize(state, id, async () => {
+		const existing = await state.read(id);
+		if (existing === null) return { kind: "missing" };
+		if (refuse(existing)) return {
+			kind: "refused",
+			record: existing
+		};
+		const merged = ExportRecordSchema.parse({
+			...existing,
+			...patch
+		});
+		await state.write(id, merged);
+		return {
+			kind: "patched",
+			record: merged
+		};
+	});
+}
 /** Read one export row by id — ONE keyed row read. */
 async function getExportRecord(state, id) {
 	return state.read(id);
@@ -6988,6 +7012,13 @@ function expectedOutSeconds(rec) {
 	}
 	return rangeSec / (rec.options.speed ?? 1);
 }
+/**
+* A row nobody will read: its caller deleted it, it expired, or it already
+* failed (a cancel finalises as `failed`). The engine renders none of these.
+*/
+function isAbandonedExportState(state) {
+	return state === "deleted" || state === "expired" || state === "failed";
+}
 var ExportEngine = class {
 	deps;
 	queue = [];
@@ -7048,16 +7079,37 @@ var ExportEngine = class {
 	async render(id) {
 		const existing = await getExportRecord(this.deps.state, id);
 		if (!existing) return;
+		if (isAbandonedExportState(existing.state)) {
+			this.deps.logger.info("export render skipped: the export was abandoned before it ran", {
+				tags: { deviceId: existing.deviceId },
+				meta: {
+					exportId: id,
+					state: existing.state
+				}
+			});
+			return;
+		}
 		const subject = exportSubjectOf(existing);
 		if (subject.kind === "clip" && subject.source !== ANALYTICS_CLIP_SOURCE) {
 			await this.fetchClip(id, existing, subject);
 			return;
 		}
-		const rec = await patchExport(this.deps.state, id, {
+		const claimed = await patchExportUnless(this.deps.state, id, {
 			state: "rendering",
 			progressPct: 0
-		});
-		if (!rec) return;
+		}, (current) => isAbandonedExportState(current.state));
+		if (claimed.kind === "missing") return;
+		if (claimed.kind === "refused") {
+			this.deps.logger.info("export render skipped: the export was abandoned before it ran", {
+				tags: { deviceId: claimed.record.deviceId },
+				meta: {
+					exportId: id,
+					state: claimed.record.state
+				}
+			});
+			return;
+		}
+		const rec = claimed.record;
 		const playlist = await this.deps.resolvePlaylist(rec);
 		if (!playlist) {
 			await this.fail(id, "no footage for range");
@@ -7691,6 +7743,19 @@ var ExportEngine = class {
 			await this.fail(id, `render produced no video frames (${bytes} bytes, < ${EXPORT_MIN_PLAUSIBLE_BYTES})`);
 			return;
 		}
+		const current = await getExportRecord(this.deps.state, id);
+		if (current !== null && isAbandonedExportState(current.state)) {
+			await this.deps.removeFile(outPath);
+			this.deps.logger.info("export render discarded: the export was abandoned while it ran", {
+				tags: { deviceId: current.deviceId },
+				meta: {
+					exportId: id,
+					state: current.state,
+					bytes
+				}
+			});
+			return;
+		}
 		await patchExport(this.deps.state, id, {
 			state: "ready",
 			progressPct: 100,
@@ -7718,6 +7783,8 @@ var ExportEngine = class {
 			exportId: id,
 			error
 		} });
+		const current = await getExportRecord(this.deps.state, id);
+		if (current !== null && current.state === "deleted") return;
 		await patchExport(this.deps.state, id, {
 			state: "failed",
 			progressPct: null,

package/dist/stream-broker/{_virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-7H0Oxf23.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-DZh9jQi-.mjs}

@@ -18,7 +18,7 @@ var e = {
 	},
 	"@camstack/types": {
 		name: "@camstack/types",
-		version: "1.2.277",
+		version: "1.2.278",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_stream_broker_widgets",

package/dist/stream-broker/{hostInit-DEY-Dqqo.mjs → hostInit-BJYQvQ3e.mjs}

@@ -36,7 +36,7 @@ async function r() {
 				}
 			},
 			"@camstack/types": {
-				version: "1.2.277",
+				version: "1.2.278",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,

package/dist/stream-broker/remoteEntry.js

@@ -30,7 +30,7 @@ async function d(e) {
 	}
 }
 async function f() {
-	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-7H0Oxf23.mjs")).catch((e) => {
+	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-DZh9jQi-.mjs")).catch((e) => {
 		throw l = void 0, e;
 	}), l;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-pipeline",
-  "version": "1.2.309",
+  "version": "1.2.311",
   "description": "Pipeline bundle — runner, detection, motion, audio + stream broker. Multi-entry npm package shipping pipeline addons under a single bundle.",
   "keywords": [
     "camstack",