@camstack/addon-pipeline 1.2.359 → 1.2.360

package/dist/audio-analyzer/index.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-8okS4wxl.js");
-const require_model_catalogs = require("../model-catalogs-C0aOsH6-.js");
-const require_process_memory = require("../process-memory-7YJfeXUK.js");
+const require_dist = require("../dist-CYakbWA8.js");
+const require_model_catalogs = require("../model-catalogs-C9cyLHdH.js");
+const require_process_memory = require("../process-memory-Ds5S3L0F.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_path = require("node:path");

package/dist/audio-analyzer/index.mjs

@@ -1,7 +1,7 @@
 import { n as __require } from "../chunk-DnnnRqeS.mjs";
-import { $ as audioAnalysisCapability, Hn as hydrateSchema, Kn as nodePin, L as PoolMemoryWatchdog, Ln as audioChunkBytesPerSample, Mn as errMsg, Pn as BaseAddon, Rt as mapAudioLabelToMacro, Vn as expandAudioChunkToF32le, cr as EventCategory, et as audioAnalyzerCapability, h as DEFAULT_AUDIO_ANALYZER_CONFIG, r as AUDIO_BACKEND_CHOICES, un as resolvePoolMemoryPolicy } from "../dist-TseSUtZJ.mjs";
-import { n as AUDIO_CLASSIFIER_MODELS } from "../model-catalogs-BSCj4g0O.mjs";
-import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-D4H6J3CG.mjs";
+import { $ as audioAnalysisCapability, Bn as expandAudioChunkToF32le, In as audioChunkBytesPerSample, Kn as nodePin, L as PoolMemoryWatchdog, Nn as BaseAddon, Rt as mapAudioLabelToMacro, Vn as hydrateSchema, cr as EventCategory, et as audioAnalyzerCapability, h as DEFAULT_AUDIO_ANALYZER_CONFIG, jn as errMsg, ln as resolvePoolMemoryPolicy, r as AUDIO_BACKEND_CHOICES } from "../dist-BYCrV0VR.mjs";
+import { n as AUDIO_CLASSIFIER_MODELS } from "../model-catalogs-CX9SJ9in.mjs";
+import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-B3lkW9H-.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";
 import { ensureModel } from "@camstack/system/addon-utils";

package/dist/{custom-model-catalog-BZFt7qC7.js → custom-model-catalog-K9Hx82GZ.js}

@@ -1,5 +1,5 @@
-const require_dist = require("./dist-8okS4wxl.js");
-const require_model_catalogs = require("./model-catalogs-C0aOsH6-.js");
+const require_dist = require("./dist-CYakbWA8.js");
+const require_model_catalogs = require("./model-catalogs-C9cyLHdH.js");
 const require_worker_protocol = require("./worker-protocol-C-G8qmye.js");
 let node_crypto = require("node:crypto");
 //#region src/detection-pipeline/registry/effective-confidence.ts

package/dist/{custom-model-catalog-Bdp__rWS.mjs → custom-model-catalog-ihWAlDr4.mjs}

@@ -1,5 +1,5 @@
-import { A as LABEL_SUPPLY_VOCABULARIES, Mt as inferModelProvider, b as DEVICE_BACKEND_TO_FORMAT, f as COCO_80_LABELS, hn as stepModelRunsOnFormat, i as AUDIO_MACRO_LABELS, p as COCO_TO_MACRO, tt as audioKindId } from "./dist-TseSUtZJ.mjs";
-import { a as FACE_DETECTION_MODELS, c as OBJECT_DETECTION_MODELS, d as PLATE_OCR_MODELS, f as SEGMENTATION_REFINER_MODELS, i as CLIP_EMBEDDING_MODELS, l as PACKAGE_DETECTION_MODELS, n as AUDIO_CLASSIFIER_MODELS, o as FACE_EMBEDDING_MODELS, p as VEHICLE_CLASSIFIER_MODELS, r as BIRD_CLASSIFIER_MODELS, s as INSTANCE_SEGMENTATION_MODELS, t as ANIMAL_CLASSIFIER_MODELS, u as PLATE_DETECTION_MODELS } from "./model-catalogs-BSCj4g0O.mjs";
+import { A as LABEL_SUPPLY_VOCABULARIES, Mt as inferModelProvider, b as DEVICE_BACKEND_TO_FORMAT, f as COCO_80_LABELS, i as AUDIO_MACRO_LABELS, mn as stepModelRunsOnFormat, p as COCO_TO_MACRO, tt as audioKindId } from "./dist-BYCrV0VR.mjs";
+import { a as FACE_DETECTION_MODELS, c as OBJECT_DETECTION_MODELS, d as PLATE_OCR_MODELS, f as SEGMENTATION_REFINER_MODELS, i as CLIP_EMBEDDING_MODELS, l as PACKAGE_DETECTION_MODELS, n as AUDIO_CLASSIFIER_MODELS, o as FACE_EMBEDDING_MODELS, p as VEHICLE_CLASSIFIER_MODELS, r as BIRD_CLASSIFIER_MODELS, s as INSTANCE_SEGMENTATION_MODELS, t as ANIMAL_CLASSIFIER_MODELS, u as PLATE_DETECTION_MODELS } from "./model-catalogs-CX9SJ9in.mjs";
 import { t as isWorkerReply } from "./worker-protocol-D_NzPcnh.mjs";
 import { randomUUID } from "node:crypto";
 //#region src/detection-pipeline/registry/effective-confidence.ts

package/dist/detection-pipeline/index.js

@@ -3,11 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-8okS4wxl.js");
-const require_node = require("../node-BStoDcFQ.js");
-const require_custom_model_catalog = require("../custom-model-catalog-BZFt7qC7.js");
+const require_dist = require("../dist-CYakbWA8.js");
+const require_node = require("../node-CTCm8Vtw.js");
+const require_custom_model_catalog = require("../custom-model-catalog-K9Hx82GZ.js");
 const require_lazy_sharp = require("../lazy-sharp-BuwKlQLR.js");
-const require_process_memory = require("../process-memory-7YJfeXUK.js");
+const require_process_memory = require("../process-memory-Ds5S3L0F.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 let node_fs = require("node:fs");

package/dist/detection-pipeline/index.mjs

@@ -1,9 +1,9 @@
 import { n as __require } from "../chunk-DnnnRqeS.mjs";
-import { Gt as modelBindingKey, Hn as hydrateSchema, It as loadContributionCapability, Kn as nodePin, L as PoolMemoryWatchdog, Mn as errMsg$1, Pn as BaseAddon, Pt as linkedLabelStepId, Q as applyModelBoundSettings, Qt as pipelineExecutorCapability, Rn as createEvent, St as evaluateZoneRules, Y as YAMNET_TO_MACRO, Yn as sleep, Yt as pickClusterStepSettings, Zn as array, an as resolveClusterStepModelId, bn as supportedRuntimes$1, cr as EventCategory, ct as collectModelBoundKeys, d as CLUSTER_MODEL_SCOPED_STEPS, g as DEFAULT_CLUSTER_STEP_SETTINGS, hn as stepModelRunsOnFormat, jt as hfModelUrl, k as LABEL_SUPPLY_MACRO, lt as containingParentIndex, mn as runtimeDevices$1, n as APPLE_SA_TO_MACRO, or as string, pn as rootSuppliesOf, pt as defaultDeviceFor$1, qt as overlayClusterStepSettings, rr as object, sr as union, un as resolvePoolMemoryPolicy, vt as detectionPipelineCapability, xt as enumerateInferenceDevices } from "../dist-TseSUtZJ.mjs";
-import { s as readProcessCost } from "../node-I5Y2Dzmr.mjs";
-import { C as resolveModelDefaultConfidence, S as landmarkPrecisionVerdict, _ as ALL_STEPS, b as getStepDefinition, f as localFrameRegistry, g as ALL_PIPELINE_STEPS, l as resolveDefaultDetectionModel, n as mergeCustomModels, o as deviceKeyOf, r as buildSubtreeCanRun, s as resolveDeviceEngine, t as CustomModelCatalog, u as macroGateVerdict, v as getDefaultModelForFormat, x as resolveModelForFormat, y as getStep } from "../custom-model-catalog-Bdp__rWS.mjs";
+import { It as loadContributionCapability, Jt as pickClusterStepSettings, Kn as nodePin, Kt as overlayClusterStepSettings, L as PoolMemoryWatchdog, Ln as createEvent, Nn as BaseAddon, Pt as linkedLabelStepId, Q as applyModelBoundSettings, St as evaluateZoneRules, Vn as hydrateSchema, Wt as modelBindingKey, Y as YAMNET_TO_MACRO, Yn as sleep, Zn as array, Zt as pipelineExecutorCapability, cr as EventCategory, ct as collectModelBoundKeys, d as CLUSTER_MODEL_SCOPED_STEPS, fn as rootSuppliesOf, g as DEFAULT_CLUSTER_STEP_SETTINGS, in as resolveClusterStepModelId, jn as errMsg$1, jt as hfModelUrl, k as LABEL_SUPPLY_MACRO, ln as resolvePoolMemoryPolicy, lt as containingParentIndex, mn as stepModelRunsOnFormat, n as APPLE_SA_TO_MACRO, or as string, pn as runtimeDevices$1, pt as defaultDeviceFor$1, rr as object, sr as union, vt as detectionPipelineCapability, xt as enumerateInferenceDevices, yn as supportedRuntimes$1 } from "../dist-BYCrV0VR.mjs";
+import { s as readProcessCost } from "../node-C_qDNN9f.mjs";
+import { C as resolveModelDefaultConfidence, S as landmarkPrecisionVerdict, _ as ALL_STEPS, b as getStepDefinition, f as localFrameRegistry, g as ALL_PIPELINE_STEPS, l as resolveDefaultDetectionModel, n as mergeCustomModels, o as deviceKeyOf, r as buildSubtreeCanRun, s as resolveDeviceEngine, t as CustomModelCatalog, u as macroGateVerdict, v as getDefaultModelForFormat, x as resolveModelForFormat, y as getStep } from "../custom-model-catalog-ihWAlDr4.mjs";
 import { t as getSharp } from "../lazy-sharp-DXsqwpph.mjs";
-import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-D4H6J3CG.mjs";
+import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-B3lkW9H-.mjs";
 import * as os$1 from "node:os";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";

package/dist/{dist-TseSUtZJ.mjs → dist-BYCrV0VR.mjs}

@@ -5387,7 +5387,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-Tkp9dHXv.mjs
+//#region ../types/dist/sleep-BjDbnx6-.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -8372,6 +8372,79 @@ var BOOT_RECOVERY_BACKOFF_MS = [
 	90 * 6e4
 ];
 /**
+* Names that, when used as URL query parameters, almost certainly carry
+* a secret. Matching is case-insensitive and anchored to the full param
+* name to avoid false positives like `user_id` (an entity reference, not
+* a credential) or `topic=password-reset` (a value happens to contain
+* the substring "password" but the param name is unrelated).
+*
+* Add new patterns here as we encounter cameras/APIs that leak through
+* the existing list.
+*/
+var CREDENTIAL_PARAM_PATTERNS = [
+	/^user$/i,
+	/^usr$/i,
+	/^username$/i,
+	/^password$/i,
+	/^pwd$/i,
+	/^pass$/i,
+	/^passwd$/i,
+	/^secret$/i,
+	/^token$/i,
+	/^auth$/i,
+	/^auth[_-]?token$/i,
+	/^bearer$/i,
+	/^api[_-]?key$/i,
+	/^access[_-]?token$/i,
+	/^refresh[_-]?token$/i,
+	/^bridge$/i,
+	/^code$/i,
+	/^state$/i,
+	/^challenge$/i,
+	/^link$/i
+];
+function isCredentialParam(name) {
+	return CREDENTIAL_PARAM_PATTERNS.some((re) => re.test(name));
+}
+/**
+* Redact secrets we may surface in logs or telemetry:
+*   1. `userinfo` (`user:password@host`) — the classic RTSP shape.
+*   2. Query-string credential params (`?user=...&password=...`) — the
+*      Reolink RTMP shape and several HTTP-pushed-stream APIs.
+*
+* Returns the original string verbatim when the input is not a parseable
+* URL — a log helper must never throw. Param values are replaced with
+* `***` so an operator reading logs still sees WHICH credential was
+* present (useful for debugging "wrong password" issues) without
+* exposing the value.
+*
+* The credential-name match is case-insensitive but anchored to the
+* whole param name; values like `user_id=42` or `topic=password-reset`
+* are NOT masked (those are entity references, not credentials).
+*/
+function maskUrlCredentials(rawUrl) {
+	if (rawUrl.startsWith("/") && !rawUrl.startsWith("//")) {
+		const masked = maskUrlCredentials(`http://relative.invalid${rawUrl}`);
+		return masked.startsWith("http://relative.invalid") ? masked.slice(23) : rawUrl;
+	}
+	try {
+		const u = new URL(rawUrl);
+		let touched = false;
+		if (u.username || u.password) {
+			u.username = "";
+			u.password = "";
+			touched = true;
+		}
+		for (const key of Array.from(u.searchParams.keys())) if (isCredentialParam(key)) {
+			u.searchParams.set(key, "***");
+			touched = true;
+		}
+		return touched ? u.toString() : rawUrl;
+	} catch {
+		return rawUrl;
+	}
+}
+/**
 * Promise-based timer helpers — used everywhere the codebase needs to
 * wait, back off, or schedule a retry. Before these helpers landed, each
 * call site re-implemented `new Promise(r => setTimeout(r, ms))` inline,
@@ -58111,79 +58184,6 @@ var BackgroundRunRegistry = class {
 function hfModelUrl(repo, path) {
 	return `https://huggingface.co/${repo}/resolve/main/${path}`;
 }
-/**
-* Names that, when used as URL query parameters, almost certainly carry
-* a secret. Matching is case-insensitive and anchored to the full param
-* name to avoid false positives like `user_id` (an entity reference, not
-* a credential) or `topic=password-reset` (a value happens to contain
-* the substring "password" but the param name is unrelated).
-*
-* Add new patterns here as we encounter cameras/APIs that leak through
-* the existing list.
-*/
-var CREDENTIAL_PARAM_PATTERNS = [
-	/^user$/i,
-	/^usr$/i,
-	/^username$/i,
-	/^password$/i,
-	/^pwd$/i,
-	/^pass$/i,
-	/^passwd$/i,
-	/^secret$/i,
-	/^token$/i,
-	/^auth$/i,
-	/^auth[_-]?token$/i,
-	/^bearer$/i,
-	/^api[_-]?key$/i,
-	/^access[_-]?token$/i,
-	/^refresh[_-]?token$/i,
-	/^bridge$/i,
-	/^code$/i,
-	/^state$/i,
-	/^challenge$/i,
-	/^link$/i
-];
-function isCredentialParam(name) {
-	return CREDENTIAL_PARAM_PATTERNS.some((re) => re.test(name));
-}
-/**
-* Redact secrets we may surface in logs or telemetry:
-*   1. `userinfo` (`user:password@host`) — the classic RTSP shape.
-*   2. Query-string credential params (`?user=...&password=...`) — the
-*      Reolink RTMP shape and several HTTP-pushed-stream APIs.
-*
-* Returns the original string verbatim when the input is not a parseable
-* URL — a log helper must never throw. Param values are replaced with
-* `***` so an operator reading logs still sees WHICH credential was
-* present (useful for debugging "wrong password" issues) without
-* exposing the value.
-*
-* The credential-name match is case-insensitive but anchored to the
-* whole param name; values like `user_id=42` or `topic=password-reset`
-* are NOT masked (those are entity references, not credentials).
-*/
-function maskUrlCredentials(rawUrl) {
-	if (rawUrl.startsWith("/") && !rawUrl.startsWith("//")) {
-		const masked = maskUrlCredentials(`http://relative.invalid${rawUrl}`);
-		return masked.startsWith("http://relative.invalid") ? masked.slice(23) : rawUrl;
-	}
-	try {
-		const u = new URL(rawUrl);
-		let touched = false;
-		if (u.username || u.password) {
-			u.username = "";
-			u.password = "";
-			touched = true;
-		}
-		for (const key of Array.from(u.searchParams.keys())) if (isCredentialParam(key)) {
-			u.searchParams.set(key, "***");
-			touched = true;
-		}
-		return touched ? u.toString() : rawUrl;
-	} catch {
-		return rawUrl;
-	}
-}
 var MB = 1024 * 1024;
 var DEFAULT_POOL_MEMORY_POLICY = {
 	sampleIntervalMs: 6e4,
@@ -58846,4 +58846,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { audioAnalysisCapability as $, discriminatedUnion as $n, pipelineRunnerCapability as $t, LABEL_SUPPLY_VOCABULARIES as A, DeviceFeature as An, gifFromMp4Args as At, RECORDING_EXPORT_MAX_READ_BYTES as B, defineCustomActions as Bn, mayReadLocation as Bt, EVENT_PAD_MS as C, AUDIO_PRESETS as Cn, evictionPolicyForMode as Ct, G711_SCALE_CORRECTION_DB as D, evaluateSensorEdge as Dn, ffmpegRate as Dt, FailureCounters as E, buildFfmpegArgs as En, failureContributionCapability as Et, OpsLogEntrySchema as F, CAM_PROFILE_ORDER as Fn, linkedStepOf as Ft, RecordingSignalStatusSchema as G, makeSourceBrokerId as Gn, modelBindingKey as Gt, RECORDING_SOURCE_CAMSTACK_ADDON as H, hydrateSchema as Hn, memoizePinnedFfmpeg as Ht, PIPELINE_RAMP as I, CamProfileSchema as In, loadContributionCapability as It, VISIT_MERGE_GAP_MS as J, selectAssignedProfileSlots as Jn, parseProcStatus as Jt, RingBuffer as K, nodePin as Kn, motionDetectionCapability as Kt, PoolMemoryWatchdog as L, audioChunkBytesPerSample as Ln, logChannelsCapability as Lt, NativeLeaseAdmissionSchema as M, errMsg as Mn, inferModelProvider as Mt, NativeLeaseSettingsSchema as N, BOOT_RECOVERY_BACKOFF_MS as Nn, isFirstLevelMacroClass as Nt, HF_REPO as O, invocationFromEncodeProfile as On, gbToBytes as Ot, NodeBenchRunnerInputSchema as P, BaseAddon as Pn, linkedLabelStepId as Pt, applyModelBoundSettings as Q, boolean as Qn, pipelineExecutorCapability as Qt, RATE_CONTROL_RELAXED as R, createEvent as Rn, mapAudioLabelToMacro as Rt, EVENT_OWNER_TYPES as S, webrtcSessionCapability as Sn, evaluateZoneRules as St, ExportRecordSchema as T, Fmp4BoxSplitter as Tn, exportSubjectOf as Tt, ROOT_SUPPLIABLE_STEP_IDS as U, isEvent as Un, migrateLegacyDeviceSignalConfig as Ut, RECORDING_SOURCE_CAMSTACK as V, expandAudioChunkToF32le as Vn, mayWriteToLocation as Vt, RecordingConfigSchema as W, makeProfileBrokerId as Wn, modeMayWrite as Wt, addonWidgetsSourceCapability as X, _enum as Xn, pickDetailCropConvention as Xt, YAMNET_TO_MACRO as Y, sleep as Yn, pickClusterStepSettings as Yt, allowedSuppliedEffect as Z, array as Zn, pickNativeLeaseOverride as Zt, DEFAULT_DETAIL_CROP_CONVENTION as _, storageOccupancyCapability as _n, deriveRootFaceRefineRect as _t, BackgroundRunRegistry as a, resolveClusterStepModelId as an, record as ar, cameraStreamsCapability as at, DEVICE_BACKEND_TO_FORMAT as b, supportedRuntimes as bn, egressTransportFromRequest as bt, CLIP_STILL_REASON_CODE_HEADER as c, resolveLocationMode as cn, EventCategory as cr, collectModelBoundKeys as ct, CLUSTER_MODEL_SCOPED_STEPS as d, resolveRecordingProfiles as dn, createLogChannelsProvider as dt, rankStreams as en, lazy as er, audioAnalyzerCapability as et, COCO_80_LABELS as f, resolveRootSupply as fn, declareLogChannel as ft, DEFAULT_CLUSTER_STEP_SETTINGS as g, storageEvictableCapability as gn, deriveRecordingMode as gt, DEFAULT_AUDIO_ANALYZER_CONFIG as h, stepModelRunsOnFormat as hn, deriveDetailCropRect as ht, AUDIO_MACRO_LABELS as i, recordingSignalCapability as in, preprocess as ir, cameraOwnsMotionViaSensor as it, MODEL_FORMATS as j, DeviceType as jn, hfModelUrl as jt, LABEL_SUPPLY_MACRO as k, isSoftwareDecode as kn, gifDeriveSpeed as kt, CLIP_STILL_REASON_HEADER as l, resolveModelBoundSetting as ln, containingParentIndex as lt, CROP_SUPPLY_SOURCES as m, runtimeDevices as mn, deriveBatteryPresence as mt, APPLE_SA_TO_MACRO as n, recordingCapability as nn, number as nr, batteryCapability as nt, BatteryStatusSchema as o, resolveCreateExportSubject as on, string as or, clipExportFailure as ot, COCO_TO_MACRO as p, rootSuppliesOf as pn, defaultDeviceFor as pt, VIDEOCLIPS_MAX_OFFER_BYTES as q, parseProfileBrokerId as qn, overlayClusterStepSettings as qt, AUDIO_BACKEND_CHOICES as r, recordingExportCapability as rn, object as rr, buildBenchStepTree as rt, CLIP_BROKER_PACED_RATES as s, resolveEgressDecodeHwAccel as sn, union as sr, clipExportFailureOf as st, APPEARANCE_BLOCKS as t, recordingArchiveCapability as tn, literal as tr, audioKindId as tt, CLIP_STREAM_TRANSPORT_HEADER as u, resolvePoolMemoryPolicy as un, createHwAccelCache as ut, DEFAULT_EVENTS_BAND_BUFFER_SEC as v, streamBrokerCapability as vn, detectionPipelineCapability as vt, EncodeProfileSchema as w, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as wn, evictionPolicyOfLocation as wt, DEVICE_RAMP as x, videoclipsCapability as xn, enumerateInferenceDevices as xt, DEFAULT_NATIVE_LEASE_SETTINGS as y, stripRetiredBandPreBufferSec as yn, egressTranscodeSharingKey as yt, RATE_CONTROL_TIGHT as z, customAction as zn, maskUrlCredentials as zt };
+export { audioAnalysisCapability as $, discriminatedUnion as $n, rankStreams as $t, LABEL_SUPPLY_VOCABULARIES as A, DeviceType as An, gifFromMp4Args as At, RECORDING_EXPORT_MAX_READ_BYTES as B, expandAudioChunkToF32le as Bn, mayWriteToLocation as Bt, EVENT_PAD_MS as C, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as Cn, evictionPolicyForMode as Ct, G711_SCALE_CORRECTION_DB as D, invocationFromEncodeProfile as Dn, ffmpegRate as Dt, FailureCounters as E, evaluateSensorEdge as En, failureContributionCapability as Et, OpsLogEntrySchema as F, CamProfileSchema as Fn, linkedStepOf as Ft, RecordingSignalStatusSchema as G, maskUrlCredentials as Gn, motionDetectionCapability as Gt, RECORDING_SOURCE_CAMSTACK_ADDON as H, isEvent as Hn, migrateLegacyDeviceSignalConfig as Ht, PIPELINE_RAMP as I, audioChunkBytesPerSample as In, loadContributionCapability as It, VISIT_MERGE_GAP_MS as J, selectAssignedProfileSlots as Jn, pickClusterStepSettings as Jt, RingBuffer as K, nodePin as Kn, overlayClusterStepSettings as Kt, PoolMemoryWatchdog as L, createEvent as Ln, logChannelsCapability as Lt, NativeLeaseAdmissionSchema as M, BOOT_RECOVERY_BACKOFF_MS as Mn, inferModelProvider as Mt, NativeLeaseSettingsSchema as N, BaseAddon as Nn, isFirstLevelMacroClass as Nt, HF_REPO as O, isSoftwareDecode as On, gbToBytes as Ot, NodeBenchRunnerInputSchema as P, CAM_PROFILE_ORDER as Pn, linkedLabelStepId as Pt, applyModelBoundSettings as Q, boolean as Qn, pipelineRunnerCapability as Qt, RATE_CONTROL_RELAXED as R, customAction as Rn, mapAudioLabelToMacro as Rt, EVENT_OWNER_TYPES as S, AUDIO_PRESETS as Sn, evaluateZoneRules as St, ExportRecordSchema as T, buildFfmpegArgs as Tn, exportSubjectOf as Tt, ROOT_SUPPLIABLE_STEP_IDS as U, makeProfileBrokerId as Un, modeMayWrite as Ut, RECORDING_SOURCE_CAMSTACK as V, hydrateSchema as Vn, memoizePinnedFfmpeg as Vt, RecordingConfigSchema as W, makeSourceBrokerId as Wn, modelBindingKey as Wt, addonWidgetsSourceCapability as X, _enum as Xn, pickNativeLeaseOverride as Xt, YAMNET_TO_MACRO as Y, sleep as Yn, pickDetailCropConvention as Yt, allowedSuppliedEffect as Z, array as Zn, pipelineExecutorCapability as Zt, DEFAULT_DETAIL_CROP_CONVENTION as _, streamBrokerCapability as _n, deriveRootFaceRefineRect as _t, BackgroundRunRegistry as a, resolveCreateExportSubject as an, record as ar, cameraStreamsCapability as at, DEVICE_BACKEND_TO_FORMAT as b, videoclipsCapability as bn, egressTransportFromRequest as bt, CLIP_STILL_REASON_CODE_HEADER as c, resolveModelBoundSetting as cn, EventCategory as cr, collectModelBoundKeys as ct, CLUSTER_MODEL_SCOPED_STEPS as d, resolveRootSupply as dn, createLogChannelsProvider as dt, recordingArchiveCapability as en, lazy as er, audioAnalyzerCapability as et, COCO_80_LABELS as f, rootSuppliesOf as fn, declareLogChannel as ft, DEFAULT_CLUSTER_STEP_SETTINGS as g, storageOccupancyCapability as gn, deriveRecordingMode as gt, DEFAULT_AUDIO_ANALYZER_CONFIG as h, storageEvictableCapability as hn, deriveDetailCropRect as ht, AUDIO_MACRO_LABELS as i, resolveClusterStepModelId as in, preprocess as ir, cameraOwnsMotionViaSensor as it, MODEL_FORMATS as j, errMsg as jn, hfModelUrl as jt, LABEL_SUPPLY_MACRO as k, DeviceFeature as kn, gifDeriveSpeed as kt, CLIP_STILL_REASON_HEADER as l, resolvePoolMemoryPolicy as ln, containingParentIndex as lt, CROP_SUPPLY_SOURCES as m, stepModelRunsOnFormat as mn, deriveBatteryPresence as mt, APPLE_SA_TO_MACRO as n, recordingExportCapability as nn, number as nr, batteryCapability as nt, BatteryStatusSchema as o, resolveEgressDecodeHwAccel as on, string as or, clipExportFailure as ot, COCO_TO_MACRO as p, runtimeDevices as pn, defaultDeviceFor as pt, VIDEOCLIPS_MAX_OFFER_BYTES as q, parseProfileBrokerId as qn, parseProcStatus as qt, AUDIO_BACKEND_CHOICES as r, recordingSignalCapability as rn, object as rr, buildBenchStepTree as rt, CLIP_BROKER_PACED_RATES as s, resolveLocationMode as sn, union as sr, clipExportFailureOf as st, APPEARANCE_BLOCKS as t, recordingCapability as tn, literal as tr, audioKindId as tt, CLIP_STREAM_TRANSPORT_HEADER as u, resolveRecordingProfiles as un, createHwAccelCache as ut, DEFAULT_EVENTS_BAND_BUFFER_SEC as v, stripRetiredBandPreBufferSec as vn, detectionPipelineCapability as vt, EncodeProfileSchema as w, Fmp4BoxSplitter as wn, evictionPolicyOfLocation as wt, DEVICE_RAMP as x, webrtcSessionCapability as xn, enumerateInferenceDevices as xt, DEFAULT_NATIVE_LEASE_SETTINGS as y, supportedRuntimes as yn, egressTranscodeSharingKey as yt, RATE_CONTROL_TIGHT as z, defineCustomActions as zn, mayReadLocation as zt };

package/dist/{dist-8okS4wxl.js → dist-CYakbWA8.js}

@@ -5387,7 +5387,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-Tkp9dHXv.mjs
+//#region ../types/dist/sleep-BjDbnx6-.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -8372,6 +8372,79 @@ var BOOT_RECOVERY_BACKOFF_MS = [
 	90 * 6e4
 ];
 /**
+* Names that, when used as URL query parameters, almost certainly carry
+* a secret. Matching is case-insensitive and anchored to the full param
+* name to avoid false positives like `user_id` (an entity reference, not
+* a credential) or `topic=password-reset` (a value happens to contain
+* the substring "password" but the param name is unrelated).
+*
+* Add new patterns here as we encounter cameras/APIs that leak through
+* the existing list.
+*/
+var CREDENTIAL_PARAM_PATTERNS = [
+	/^user$/i,
+	/^usr$/i,
+	/^username$/i,
+	/^password$/i,
+	/^pwd$/i,
+	/^pass$/i,
+	/^passwd$/i,
+	/^secret$/i,
+	/^token$/i,
+	/^auth$/i,
+	/^auth[_-]?token$/i,
+	/^bearer$/i,
+	/^api[_-]?key$/i,
+	/^access[_-]?token$/i,
+	/^refresh[_-]?token$/i,
+	/^bridge$/i,
+	/^code$/i,
+	/^state$/i,
+	/^challenge$/i,
+	/^link$/i
+];
+function isCredentialParam(name) {
+	return CREDENTIAL_PARAM_PATTERNS.some((re) => re.test(name));
+}
+/**
+* Redact secrets we may surface in logs or telemetry:
+*   1. `userinfo` (`user:password@host`) — the classic RTSP shape.
+*   2. Query-string credential params (`?user=...&password=...`) — the
+*      Reolink RTMP shape and several HTTP-pushed-stream APIs.
+*
+* Returns the original string verbatim when the input is not a parseable
+* URL — a log helper must never throw. Param values are replaced with
+* `***` so an operator reading logs still sees WHICH credential was
+* present (useful for debugging "wrong password" issues) without
+* exposing the value.
+*
+* The credential-name match is case-insensitive but anchored to the
+* whole param name; values like `user_id=42` or `topic=password-reset`
+* are NOT masked (those are entity references, not credentials).
+*/
+function maskUrlCredentials(rawUrl) {
+	if (rawUrl.startsWith("/") && !rawUrl.startsWith("//")) {
+		const masked = maskUrlCredentials(`http://relative.invalid${rawUrl}`);
+		return masked.startsWith("http://relative.invalid") ? masked.slice(23) : rawUrl;
+	}
+	try {
+		const u = new URL(rawUrl);
+		let touched = false;
+		if (u.username || u.password) {
+			u.username = "";
+			u.password = "";
+			touched = true;
+		}
+		for (const key of Array.from(u.searchParams.keys())) if (isCredentialParam(key)) {
+			u.searchParams.set(key, "***");
+			touched = true;
+		}
+		return touched ? u.toString() : rawUrl;
+	} catch {
+		return rawUrl;
+	}
+}
+/**
 * Promise-based timer helpers — used everywhere the codebase needs to
 * wait, back off, or schedule a retry. Before these helpers landed, each
 * call site re-implemented `new Promise(r => setTimeout(r, ms))` inline,
@@ -58111,79 +58184,6 @@ var BackgroundRunRegistry = class {
 function hfModelUrl(repo, path) {
 	return `https://huggingface.co/${repo}/resolve/main/${path}`;
 }
-/**
-* Names that, when used as URL query parameters, almost certainly carry
-* a secret. Matching is case-insensitive and anchored to the full param
-* name to avoid false positives like `user_id` (an entity reference, not
-* a credential) or `topic=password-reset` (a value happens to contain
-* the substring "password" but the param name is unrelated).
-*
-* Add new patterns here as we encounter cameras/APIs that leak through
-* the existing list.
-*/
-var CREDENTIAL_PARAM_PATTERNS = [
-	/^user$/i,
-	/^usr$/i,
-	/^username$/i,
-	/^password$/i,
-	/^pwd$/i,
-	/^pass$/i,
-	/^passwd$/i,
-	/^secret$/i,
-	/^token$/i,
-	/^auth$/i,
-	/^auth[_-]?token$/i,
-	/^bearer$/i,
-	/^api[_-]?key$/i,
-	/^access[_-]?token$/i,
-	/^refresh[_-]?token$/i,
-	/^bridge$/i,
-	/^code$/i,
-	/^state$/i,
-	/^challenge$/i,
-	/^link$/i
-];
-function isCredentialParam(name) {
-	return CREDENTIAL_PARAM_PATTERNS.some((re) => re.test(name));
-}
-/**
-* Redact secrets we may surface in logs or telemetry:
-*   1. `userinfo` (`user:password@host`) — the classic RTSP shape.
-*   2. Query-string credential params (`?user=...&password=...`) — the
-*      Reolink RTMP shape and several HTTP-pushed-stream APIs.
-*
-* Returns the original string verbatim when the input is not a parseable
-* URL — a log helper must never throw. Param values are replaced with
-* `***` so an operator reading logs still sees WHICH credential was
-* present (useful for debugging "wrong password" issues) without
-* exposing the value.
-*
-* The credential-name match is case-insensitive but anchored to the
-* whole param name; values like `user_id=42` or `topic=password-reset`
-* are NOT masked (those are entity references, not credentials).
-*/
-function maskUrlCredentials(rawUrl) {
-	if (rawUrl.startsWith("/") && !rawUrl.startsWith("//")) {
-		const masked = maskUrlCredentials(`http://relative.invalid${rawUrl}`);
-		return masked.startsWith("http://relative.invalid") ? masked.slice(23) : rawUrl;
-	}
-	try {
-		const u = new URL(rawUrl);
-		let touched = false;
-		if (u.username || u.password) {
-			u.username = "";
-			u.password = "";
-			touched = true;
-		}
-		for (const key of Array.from(u.searchParams.keys())) if (isCredentialParam(key)) {
-			u.searchParams.set(key, "***");
-			touched = true;
-		}
-		return touched ? u.toString() : rawUrl;
-	} catch {
-		return rawUrl;
-	}
-}
 var MB = 1024 * 1024;
 var DEFAULT_POOL_MEMORY_POLICY = {
 	sampleIntervalMs: 6e4,

package/dist/{model-catalogs-C0aOsH6-.js → model-catalogs-C9cyLHdH.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-8okS4wxl.js");
+const require_dist = require("./dist-CYakbWA8.js");
 //#region src/detection-pipeline/registry/model-licenses.ts
 var COCO_DATA = {
 	name: "COCO 2017",

package/dist/{model-catalogs-BSCj4g0O.mjs → model-catalogs-CX9SJ9in.mjs}

@@ -1,4 +1,4 @@
-import { jt as hfModelUrl } from "./dist-TseSUtZJ.mjs";
+import { jt as hfModelUrl } from "./dist-BYCrV0VR.mjs";
 //#region src/detection-pipeline/registry/model-licenses.ts
 var COCO_DATA = {
 	name: "COCO 2017",

package/dist/motion-wasm/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-8okS4wxl.js");
+const require_dist = require("../dist-CYakbWA8.js");
 const require_lazy_sharp = require("../lazy-sharp-BuwKlQLR.js");
 let node_fs = require("node:fs");
 let node_path = require("node:path");

package/dist/motion-wasm/index.mjs

@@ -1,4 +1,4 @@
-import { Hn as hydrateSchema, Kt as motionDetectionCapability, Pn as BaseAddon, St as evaluateZoneRules, jn as DeviceType } from "../dist-TseSUtZJ.mjs";
+import { An as DeviceType, Gt as motionDetectionCapability, Nn as BaseAddon, St as evaluateZoneRules, Vn as hydrateSchema } from "../dist-BYCrV0VR.mjs";
 import { t as getSharp } from "../lazy-sharp-DXsqwpph.mjs";
 import { readFileSync } from "node:fs";
 import { join } from "node:path";

package/dist/{node-BStoDcFQ.js → node-CTCm8Vtw.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-emK7D4bc.js");
-const require_dist = require("./dist-8okS4wxl.js");
+const require_dist = require("./dist-CYakbWA8.js");
 let node_crypto = require("node:crypto");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs, 1);

package/dist/{node-I5Y2Dzmr.mjs → node-C_qDNN9f.mjs}

@@ -1,4 +1,4 @@
-import { En as buildFfmpegArgs, Mn as errMsg, Tn as Fmp4BoxSplitter, kn as isSoftwareDecode } from "./dist-TseSUtZJ.mjs";
+import { On as isSoftwareDecode, Tn as buildFfmpegArgs, jn as errMsg, wn as Fmp4BoxSplitter } from "./dist-BYCrV0VR.mjs";
 import { randomUUID } from "node:crypto";
 import { realpathSync } from "node:fs";
 import path from "node:path";

package/dist/pipeline-runner/index.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-8okS4wxl.js");
-const require_node = require("../node-BStoDcFQ.js");
-const require_custom_model_catalog = require("../custom-model-catalog-BZFt7qC7.js");
+const require_dist = require("../dist-CYakbWA8.js");
+const require_node = require("../node-CTCm8Vtw.js");
+const require_custom_model_catalog = require("../custom-model-catalog-K9Hx82GZ.js");
 const require_hub_hostname = require("../hub-hostname-DAJXlOgV.js");
 const require_lazy_sharp = require("../lazy-sharp-BuwKlQLR.js");
 const require_restream_intent = require("../restream-intent-7uDNqMKs.js");

package/dist/pipeline-runner/index.mjs

@@ -1,6 +1,6 @@
-import { $t as pipelineRunnerCapability, Bn as defineCustomActions, E as FailureCounters, Et as failureContributionCapability, Ft as linkedStepOf, I as PIPELINE_RAMP, It as loadContributionCapability, Kn as nodePin, M as NativeLeaseAdmissionSchema, Mn as errMsg, N as NativeLeaseSettingsSchema, P as NodeBenchRunnerInputSchema, Pn as BaseAddon, Qn as boolean, Rn as createEvent, U as ROOT_SUPPLIABLE_STEP_IDS, Xn as _enum, Xt as pickDetailCropConvention, Z as allowedSuppliedEffect, Zn as array, Zt as pickNativeLeaseOverride, _ as DEFAULT_DETAIL_CROP_CONVENTION, _t as deriveRootFaceRefineRect, a as BackgroundRunRegistry, cr as EventCategory, er as lazy, fn as resolveRootSupply, ht as deriveDetailCropRect, it as cameraOwnsMotionViaSensor, j as MODEL_FORMATS, ln as resolveModelBoundSetting, m as CROP_SUPPLY_SOURCES, nr as number, or as string, pn as rootSuppliesOf, rr as object, rt as buildBenchStepTree, tr as literal, x as DEVICE_RAMP, y as DEFAULT_NATIVE_LEASE_SETTINGS, zn as customAction } from "../dist-TseSUtZJ.mjs";
-import { i as NO_COST_CLAIM, t as ChildCostRegistry } from "../node-I5Y2Dzmr.mjs";
-import { a as stepsForElectedPool, b as getStepDefinition, d as rootObjectGate, f as localFrameRegistry, h as resolveFrameViewGeometry, i as placeDetailStep, l as resolveDefaultDetectionModel, m as createSessionDecodeCoordinator, p as isSessionDecodeReadGone, s as resolveDeviceEngine, t as CustomModelCatalog, u as macroGateVerdict, y as getStep } from "../custom-model-catalog-Bdp__rWS.mjs";
+import { E as FailureCounters, Et as failureContributionCapability, Ft as linkedStepOf, I as PIPELINE_RAMP, It as loadContributionCapability, Kn as nodePin, Ln as createEvent, M as NativeLeaseAdmissionSchema, N as NativeLeaseSettingsSchema, Nn as BaseAddon, P as NodeBenchRunnerInputSchema, Qn as boolean, Qt as pipelineRunnerCapability, Rn as customAction, U as ROOT_SUPPLIABLE_STEP_IDS, Xn as _enum, Xt as pickNativeLeaseOverride, Yt as pickDetailCropConvention, Z as allowedSuppliedEffect, Zn as array, _ as DEFAULT_DETAIL_CROP_CONVENTION, _t as deriveRootFaceRefineRect, a as BackgroundRunRegistry, cn as resolveModelBoundSetting, cr as EventCategory, dn as resolveRootSupply, er as lazy, fn as rootSuppliesOf, ht as deriveDetailCropRect, it as cameraOwnsMotionViaSensor, j as MODEL_FORMATS, jn as errMsg, m as CROP_SUPPLY_SOURCES, nr as number, or as string, rr as object, rt as buildBenchStepTree, tr as literal, x as DEVICE_RAMP, y as DEFAULT_NATIVE_LEASE_SETTINGS, zn as defineCustomActions } from "../dist-BYCrV0VR.mjs";
+import { i as NO_COST_CLAIM, t as ChildCostRegistry } from "../node-C_qDNN9f.mjs";
+import { a as stepsForElectedPool, b as getStepDefinition, d as rootObjectGate, f as localFrameRegistry, h as resolveFrameViewGeometry, i as placeDetailStep, l as resolveDefaultDetectionModel, m as createSessionDecodeCoordinator, p as isSessionDecodeReadGone, s as resolveDeviceEngine, t as CustomModelCatalog, u as macroGateVerdict, y as getStep } from "../custom-model-catalog-ihWAlDr4.mjs";
 import { t as resolveHubHostname } from "../hub-hostname-cCknRYKj.mjs";
 import { t as getSharp } from "../lazy-sharp-DXsqwpph.mjs";
 import { c as withDetectionIntent, o as preRollRequestOf, t as DETECTION_PRE_ROLL_REQUEST_MS } from "../restream-intent-DyGmLAU9.mjs";

package/dist/{process-memory-D4H6J3CG.mjs → process-memory-B3lkW9H-.mjs}

@@ -1,4 +1,4 @@
-import { Jt as parseProcStatus } from "./dist-TseSUtZJ.mjs";
+import { qt as parseProcStatus } from "./dist-BYCrV0VR.mjs";
 import * as fs from "node:fs";
 import { execFile } from "node:child_process";
 //#region src/shared/node-topology-platform.ts

package/dist/{process-memory-7YJfeXUK.js → process-memory-Ds5S3L0F.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-emK7D4bc.js");
-const require_dist = require("./dist-8okS4wxl.js");
+const require_dist = require("./dist-CYakbWA8.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_child_process = require("node:child_process");

package/dist/recorder/index.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-8okS4wxl.js");
-const require_node = require("../node-BStoDcFQ.js");
+const require_dist = require("../dist-CYakbWA8.js");
+const require_node = require("../node-CTCm8Vtw.js");
 const require_hub_hostname = require("../hub-hostname-DAJXlOgV.js");
 const require_restream_intent = require("../restream-intent-7uDNqMKs.js");
 const require_retire_root_keys = require("../retire-root-keys-Csb8z2f3.js");

package/dist/recorder/index.mjs

@@ -1,5 +1,5 @@
-import { An as DeviceFeature, B as RECORDING_EXPORT_MAX_READ_BYTES, Bn as defineCustomActions, Bt as mayReadLocation, C as EVENT_PAD_MS, Ct as evictionPolicyForMode, Dn as evaluateSensorEdge, F as OpsLogEntrySchema, G as RecordingSignalStatusSchema, H as RECORDING_SOURCE_CAMSTACK_ADDON, Hn as hydrateSchema, Ht as memoizePinnedFfmpeg, It as loadContributionCapability, J as VISIT_MERGE_GAP_MS, Jn as selectAssignedProfileSlots, Kn as nodePin, Mn as errMsg$1, Nt as isFirstLevelMacroClass, Ot as gbToBytes, Pn as BaseAddon, Qn as boolean, S as EVENT_OWNER_TYPES, T as ExportRecordSchema, Tt as exportSubjectOf, Ut as migrateLegacyDeviceSignalConfig, V as RECORDING_SOURCE_CAMSTACK, Vt as mayWriteToLocation, W as RecordingConfigSchema, Wt as modeMayWrite, Xn as _enum, Yn as sleep$1, Zn as array, _n as storageOccupancyCapability, ar as record, cn as resolveLocationMode, cr as EventCategory, dn as resolveRecordingProfiles, gn as storageEvictableCapability, gt as deriveRecordingMode, in as recordingSignalCapability, ir as preprocess, jn as DeviceType, mt as deriveBatteryPresence, nn as recordingCapability, nr as number, nt as batteryCapability, o as BatteryStatusSchema, on as resolveCreateExportSubject, or as string, ot as clipExportFailure, q as VIDEOCLIPS_MAX_OFFER_BYTES, rn as recordingExportCapability, rr as object, s as CLIP_BROKER_PACED_RATES, st as clipExportFailureOf, tn as recordingArchiveCapability, v as DEFAULT_EVENTS_BAND_BUFFER_SEC, wt as evictionPolicyOfLocation, xn as videoclipsCapability, yn as stripRetiredBandPreBufferSec, zn as customAction } from "../dist-TseSUtZJ.mjs";
-import { a as physicalRootOf, i as NO_COST_CLAIM, t as ChildCostRegistry } from "../node-I5Y2Dzmr.mjs";
+import { An as DeviceType, B as RECORDING_EXPORT_MAX_READ_BYTES, Bt as mayWriteToLocation, C as EVENT_PAD_MS, Ct as evictionPolicyForMode, En as evaluateSensorEdge, F as OpsLogEntrySchema, G as RecordingSignalStatusSchema, H as RECORDING_SOURCE_CAMSTACK_ADDON, Ht as migrateLegacyDeviceSignalConfig, It as loadContributionCapability, J as VISIT_MERGE_GAP_MS, Jn as selectAssignedProfileSlots, Kn as nodePin, Nn as BaseAddon, Nt as isFirstLevelMacroClass, Ot as gbToBytes, Qn as boolean, Rn as customAction, S as EVENT_OWNER_TYPES, T as ExportRecordSchema, Tt as exportSubjectOf, Ut as modeMayWrite, V as RECORDING_SOURCE_CAMSTACK, Vn as hydrateSchema, Vt as memoizePinnedFfmpeg, W as RecordingConfigSchema, Xn as _enum, Yn as sleep$1, Zn as array, an as resolveCreateExportSubject, ar as record, bn as videoclipsCapability, cr as EventCategory, en as recordingArchiveCapability, gn as storageOccupancyCapability, gt as deriveRecordingMode, hn as storageEvictableCapability, ir as preprocess, jn as errMsg$1, kn as DeviceFeature, mt as deriveBatteryPresence, nn as recordingExportCapability, nr as number, nt as batteryCapability, o as BatteryStatusSchema, or as string, ot as clipExportFailure, q as VIDEOCLIPS_MAX_OFFER_BYTES, rn as recordingSignalCapability, rr as object, s as CLIP_BROKER_PACED_RATES, sn as resolveLocationMode, st as clipExportFailureOf, tn as recordingCapability, un as resolveRecordingProfiles, v as DEFAULT_EVENTS_BAND_BUFFER_SEC, vn as stripRetiredBandPreBufferSec, wt as evictionPolicyOfLocation, zn as defineCustomActions, zt as mayReadLocation } from "../dist-BYCrV0VR.mjs";
+import { a as physicalRootOf, i as NO_COST_CLAIM, t as ChildCostRegistry } from "../node-C_qDNN9f.mjs";
 import { t as resolveHubHostname } from "../hub-hostname-cCknRYKj.mjs";
 import { d as PREBUFFER_MAX_MS, l as withRecordingIntent, r as RECORDING_PRE_ROLL_REQUEST_MS } from "../restream-intent-DyGmLAU9.mjs";
 import { n as RowMapStore, t as retireRootKeys } from "../retire-root-keys-DZvlso2l.mjs";

package/dist/{segment-demux-js-BwQRJ24B.js → segment-demux-js-BgDpp15L.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-emK7D4bc.js");
-const require_dist = require("./dist-8okS4wxl.js");
+const require_dist = require("./dist-CYakbWA8.js");
 let node_child_process = require("node:child_process");
 //#region src/stream-broker/recorded/avcc-annexb.ts
 /**

package/dist/{segment-demux-js-RgT0biID.mjs → segment-demux-js-W5FIgijf.mjs}

@@ -1,5 +1,5 @@
 import { r as __toESM, t as __commonJSMin } from "./chunk-DnnnRqeS.mjs";
-import { Mn as errMsg } from "./dist-TseSUtZJ.mjs";
+import { jn as errMsg } from "./dist-BYCrV0VR.mjs";
 import { spawn } from "node:child_process";
 //#region src/stream-broker/recorded/avcc-annexb.ts
 /**

package/dist/stream-broker/{_virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-DqdW2pDb.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-v95KZ2Rt.mjs}

@@ -18,7 +18,7 @@ var e = {
 	},
 	"@camstack/types": {
 		name: "@camstack/types",
-		version: "1.2.354",
+		version: "1.2.355",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_stream_broker_widgets",

package/dist/stream-broker/demux-worker-child.js

@@ -1,4 +1,4 @@
-const require_segment_demux_js = require("../segment-demux-js-BwQRJ24B.js");
+const require_segment_demux_js = require("../segment-demux-js-BgDpp15L.js");
 let node_worker_threads = require("node:worker_threads");
 //#region src/stream-broker/recorded/demux-worker-child.ts
 /**

package/dist/stream-broker/demux-worker-child.mjs

@@ -1,4 +1,4 @@
-import { t as demuxSegmentFullJs } from "../segment-demux-js-RgT0biID.mjs";
+import { t as demuxSegmentFullJs } from "../segment-demux-js-W5FIgijf.mjs";
 import { parentPort } from "node:worker_threads";
 //#region src/stream-broker/recorded/demux-worker-child.ts
 /**

package/dist/stream-broker/{hostInit-xe-7xOfx.mjs → hostInit-CDaDWDva.mjs}

@@ -36,7 +36,7 @@ async function r() {
 				}
 			},
 			"@camstack/types": {
-				version: "1.2.354",
+				version: "1.2.355",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,

package/dist/stream-broker/index.js

@@ -3,12 +3,12 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-8okS4wxl.js");
-const require_node = require("../node-BStoDcFQ.js");
+const require_dist = require("../dist-CYakbWA8.js");
+const require_node = require("../node-CTCm8Vtw.js");
 const require_restream_intent = require("../restream-intent-7uDNqMKs.js");
 const require_remote_restream = require("../remote-restream-CO36Sr30.js");
 const require_retire_root_keys = require("../retire-root-keys-Csb8z2f3.js");
-const require_segment_demux_js = require("../segment-demux-js-BwQRJ24B.js");
+const require_segment_demux_js = require("../segment-demux-js-BgDpp15L.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 let node_crypto = require("node:crypto");

package/dist/stream-broker/index.mjs

@@ -1,10 +1,10 @@
 import { r as __toESM } from "../chunk-DnnnRqeS.mjs";
-import { $n as discriminatedUnion, An as DeviceFeature, At as gifFromMp4Args, Cn as AUDIO_PRESETS, D as G711_SCALE_CORRECTION_DB, Dt as ffmpegRate, En as buildFfmpegArgs, Fn as CAM_PROFILE_ORDER, Gn as makeSourceBrokerId, Ht as memoizePinnedFfmpeg, In as CamProfileSchema, It as loadContributionCapability, K as RingBuffer, Kn as nodePin, Lt as logChannelsCapability, Mn as errMsg, Nn as BOOT_RECOVERY_BACKOFF_MS, On as invocationFromEncodeProfile, Pn as BaseAddon, Qn as boolean, R as RATE_CONTROL_RELAXED, Rn as createEvent, Sn as webrtcSessionCapability, Un as isEvent, Vn as expandAudioChunkToF32le, Wn as makeProfileBrokerId, X as addonWidgetsSourceCapability, Xn as _enum, Zn as array, ar as record, at as cameraStreamsCapability, bt as egressTransportFromRequest, c as CLIP_STILL_REASON_CODE_HEADER, cr as EventCategory, dt as createLogChannelsProvider, en as rankStreams, ft as declareLogChannel, jn as DeviceType, kn as isSoftwareDecode, kt as gifDeriveSpeed, mt as deriveBatteryPresence, nr as number, nt as batteryCapability, o as BatteryStatusSchema, or as string, qn as parseProfileBrokerId, rr as object, s as CLIP_BROKER_PACED_RATES, sn as resolveEgressDecodeHwAccel, sr as union, st as clipExportFailureOf, tr as literal, ut as createHwAccelCache, vn as streamBrokerCapability, w as EncodeProfileSchema, yt as egressTranscodeSharingKey, z as RATE_CONTROL_TIGHT, zt as maskUrlCredentials } from "../dist-TseSUtZJ.mjs";
-import { i as NO_COST_CLAIM, n as Fmp4FragmentChild, o as probeFfmpegBinary, r as Fmp4FragmentPlane, t as ChildCostRegistry } from "../node-I5Y2Dzmr.mjs";
+import { $n as discriminatedUnion, $t as rankStreams, An as DeviceType, At as gifFromMp4Args, Bn as expandAudioChunkToF32le, D as G711_SCALE_CORRECTION_DB, Dn as invocationFromEncodeProfile, Dt as ffmpegRate, Fn as CamProfileSchema, Gn as maskUrlCredentials, Hn as isEvent, It as loadContributionCapability, K as RingBuffer, Kn as nodePin, Ln as createEvent, Lt as logChannelsCapability, Mn as BOOT_RECOVERY_BACKOFF_MS, Nn as BaseAddon, On as isSoftwareDecode, Pn as CAM_PROFILE_ORDER, Qn as boolean, R as RATE_CONTROL_RELAXED, Sn as AUDIO_PRESETS, Tn as buildFfmpegArgs, Un as makeProfileBrokerId, Vt as memoizePinnedFfmpeg, Wn as makeSourceBrokerId, X as addonWidgetsSourceCapability, Xn as _enum, Zn as array, _n as streamBrokerCapability, ar as record, at as cameraStreamsCapability, bt as egressTransportFromRequest, c as CLIP_STILL_REASON_CODE_HEADER, cr as EventCategory, dt as createLogChannelsProvider, ft as declareLogChannel, jn as errMsg, kn as DeviceFeature, kt as gifDeriveSpeed, mt as deriveBatteryPresence, nr as number, nt as batteryCapability, o as BatteryStatusSchema, on as resolveEgressDecodeHwAccel, or as string, qn as parseProfileBrokerId, rr as object, s as CLIP_BROKER_PACED_RATES, sr as union, st as clipExportFailureOf, tr as literal, ut as createHwAccelCache, w as EncodeProfileSchema, xn as webrtcSessionCapability, yt as egressTranscodeSharingKey, z as RATE_CONTROL_TIGHT } from "../dist-BYCrV0VR.mjs";
+import { i as NO_COST_CLAIM, n as Fmp4FragmentChild, o as probeFfmpegBinary, r as Fmp4FragmentPlane, t as ChildCostRegistry } from "../node-C_qDNN9f.mjs";
 import { a as parseRestreamPath, d as PREBUFFER_MAX_MS, f as capPreRollRequestMs, i as isLiveEdgeOnlyDial, m as resolvePrebuffer, n as NO_DECLARATION, p as prebufferRetentionMs, s as sdpVariantFor, u as withSentryIntent } from "../restream-intent-DyGmLAU9.mjs";
 import { n as profileForStreamId } from "../remote-restream-BeHi78PZ.mjs";
 import { n as RowMapStore, t as retireRootKeys } from "../retire-root-keys-DZvlso2l.mjs";
-import { a as require_mp4box_all, c as parseNalLengthSize, i as runFfmpegOnce, n as demuxSegmentPreferJs, o as avccSampleToAnnexB, r as FfmpegFallbackRefusedError, s as buildKeyframeAnnexB, t as demuxSegmentFullJs } from "../segment-demux-js-RgT0biID.mjs";
+import { a as require_mp4box_all, c as parseNalLengthSize, i as runFfmpegOnce, n as demuxSegmentPreferJs, o as avccSampleToAnnexB, r as FfmpegFallbackRefusedError, s as buildKeyframeAnnexB, t as demuxSegmentFullJs } from "../segment-demux-js-W5FIgijf.mjs";
 import { createRequire } from "node:module";
 import * as os$1 from "node:os";
 import { networkInterfaces, tmpdir } from "node:os";

package/dist/stream-broker/remoteEntry.js

@@ -30,7 +30,7 @@ async function d(e) {
 	}
 }
 async function f() {
-	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-DqdW2pDb.mjs")).catch((e) => {
+	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-v95KZ2Rt.mjs")).catch((e) => {
 		throw l = void 0, e;
 	}), l;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-pipeline",
-  "version": "1.2.359",
+  "version": "1.2.360",
   "description": "Pipeline bundle — runner, detection, motion, audio + stream broker. Multi-entry npm package shipping pipeline addons under a single bundle.",
   "keywords": [
     "camstack",

package/python/test_webgpu_isolated.py

@@ -168,5 +168,137 @@ class IsolatedSessionTests(unittest.TestCase):
         proc.kill.assert_called()
 
 
+class _FakeEpDevice:
+    ep_name = "WebGpuExecutionProvider"
+
+
+class _FakeSessionOptions:
+    def __init__(self) -> None:
+        self.intra_op_num_threads = 0
+        self.devices: list = []
+
+    def add_provider_for_devices(self, devices, options) -> None:
+        self.devices = list(devices)
+
+
+class _FakeSession:
+    def __init__(self, path: str, sess_options=None, providers=None) -> None:
+        self.path = path
+        self.sess_options = sess_options
+        self._providers = (
+            list(providers)
+            if providers is not None
+            else ["WebGpuExecutionProvider", "CPUExecutionProvider"]
+        )
+
+    def get_providers(self) -> list[str]:
+        return self._providers
+
+
+class _FakeOrt:
+    """Mirrors the one ORT behaviour that matters: a second registration RAISES."""
+
+    SessionOptions = _FakeSessionOptions
+    InferenceSession = _FakeSession
+
+    def __init__(self) -> None:
+        self.register_calls = 0
+
+    def register_execution_provider_library(self, name: str, path: str) -> None:
+        self.register_calls += 1
+        if self.register_calls > 1:
+            raise RuntimeError(f"EP library is already registered under {name}")
+
+    def get_ep_devices(self) -> list:
+        return [_FakeEpDevice()]
+
+
+class LoaderTests(unittest.TestCase):
+    """D845: register once per process; refuse a render node that cannot be opened."""
+
+    def setUp(self) -> None:
+        wi._webgpu_registered = False
+        fake_plugin = MagicMock()
+        fake_plugin.get_library_path.return_value = "/fake/libwebgpu_ep.so"
+        fake_plugin.get_ep_name.return_value = "WebGpuExecutionProvider"
+        self._plugin_patch = patch.dict(sys.modules, {"onnxruntime_ep_webgpu": fake_plugin})
+        self._plugin_patch.start()
+
+    def tearDown(self) -> None:
+        self._plugin_patch.stop()
+        wi._webgpu_registered = False
+
+    def test_registers_the_plugin_once_across_sessions(self) -> None:
+        ort = _FakeOrt()
+        s1, p1 = wi.load_onnx_webgpu_session(ort, "/m/a.onnx", render_node_ok=True)
+        s2, p2 = wi.load_onnx_webgpu_session(ort, "/m/b.onnx", render_node_ok=True)
+        self.assertEqual(ort.register_calls, 1)
+        self.assertEqual(p1, ["WebGpuExecutionProvider", "CPUExecutionProvider"])
+        self.assertEqual(p2, p1)
+        # Both sessions were placed on the WebGPU device, not the CPU fallback.
+        self.assertEqual(len(s1.sess_options.devices), 1)
+        self.assertEqual(len(s2.sess_options.devices), 1)
+
+    def test_a_registration_that_raises_is_a_cpu_fallback_not_a_crash(self) -> None:
+        """Disarm check: without the guard the second load re-registers and the
+        fake raises — the loader must then hand back CPU providers, never a
+        WebGPU session built on a poisoned registration."""
+        ort = _FakeOrt()
+        wi.load_onnx_webgpu_session(ort, "/m/a.onnx", render_node_ok=True)
+        wi._webgpu_registered = False  # simulate the pre-D845 loader forgetting
+        _, providers = wi.load_onnx_webgpu_session(ort, "/m/b.onnx", render_node_ok=True)
+        self.assertEqual(ort.register_calls, 2)
+        self.assertEqual(providers, [wi.ONNX_CPU_EP])
+
+    def test_bounds_the_cpu_thread_pool(self) -> None:
+        ort = _FakeOrt()
+        session, _ = wi.load_onnx_webgpu_session(ort, "/m/a.onnx", render_node_ok=True)
+        self.assertEqual(session.sess_options.intra_op_num_threads, wi.WEBGPU_INTRA_OP_THREADS)
+
+    def test_refuses_without_an_openable_render_node(self) -> None:
+        ort = _FakeOrt()
+        with self.assertRaises(wi.WebGpuDeviceUnavailable) as ctx:
+            wi.load_onnx_webgpu_session(ort, "/m/a.onnx", render_node_ok=False)
+        self.assertIn("/dev/dri/renderD", str(ctx.exception))
+        self.assertIn("uid=", str(ctx.exception))
+        self.assertEqual(ort.register_calls, 0)
+
+    def test_no_render_node_check_outside_linux(self) -> None:
+        ort = _FakeOrt()
+        with patch.object(wi, "render_node_accessible", return_value=None):
+            _, providers = wi.load_onnx_webgpu_session(ort, "/m/a.onnx")
+        self.assertEqual(providers[0], "WebGpuExecutionProvider")
+
+
+class RenderNodeProbeTests(unittest.TestCase):
+    def test_non_linux_is_not_checked(self) -> None:
+        self.assertIsNone(wi.render_node_accessible(platform="darwin"))
+
+    def test_missing_dir_or_no_nodes(self) -> None:
+        def missing(_: str) -> list[str]:
+            raise FileNotFoundError
+
+        self.assertFalse(wi.render_node_accessible(platform="linux", listdir=missing))
+        self.assertFalse(
+            wi.render_node_accessible(platform="linux", listdir=lambda _: ["card1", "by-path"])
+        )
+
+    def test_denied_node_is_false_and_granted_is_true(self) -> None:
+        def nodes(_: str) -> list[str]:
+            return ["card1", "renderD128"]
+
+        self.assertFalse(
+            wi.render_node_accessible(platform="linux", listdir=nodes, access=lambda p, m: False)
+        )
+        seen: list[str] = []
+
+        def grant(p: str, m: int) -> bool:
+            seen.append(p)
+            return True
+
+        self.assertTrue(wi.render_node_accessible(platform="linux", listdir=nodes, access=grant))
+        self.assertEqual(seen, ["/dev/dri/renderD128"])
+
+
 if __name__ == "__main__":
     unittest.main()

package/python/webgpu_isolated.py

@@ -1,14 +1,30 @@
 """
 WebGPU ORT sessions in a dedicated OS process.
 
-ORT WebGPU EP (Dawn/Vulkan) SIGSEGVs when a second InferenceSession is created
-in the same Python process (measured amd-proxmox 2026-10-10). Two processes,
-one session each, work concurrently. This module:
+One child process per WebGPU model (D823). This module:
 
-  - loads a WebGPU session (or CPU fallback) — used by the child worker;
+  - loads a WebGPU session — used by the child worker;
   - hosts the child worker entrypoint (`python webgpu_isolated.py --ipc-in N --ipc-out M`);
   - exposes `WebGpuIsolatedSession` for the pool parent: one child per model.
 
+Two facts measured on amd-proxmox 2026-10-13 (D845) shape the loader:
+
+  1. The SIGSEGV that motivated D823 was NOT a second session. It is a second
+     `register_execution_provider_library` call for a name that is already
+     registered: ORT raises "EP library is already registered", and the next
+     `InferenceSession` on that EP then dies in `_create_inference_session`.
+     Register ONCE per process (`_ensure_webgpu_ep_registered`) and three
+     sessions in one process load and run — serialised; concurrent `run()` on
+     distinct sessions aborts the process, so a shared process would need one
+     lock. The child-per-model layout stays for crash isolation.
+  2. Dawn never reports a software adapter. With `/dev/dri/renderD*` not
+     openable (the entrypoint dropped the render group), the session still
+     answered `providers=[WebGpuExecutionProvider, …]` and ran at 224 ms per
+     yolov9t-320 frame with gpu_busy 0 % — 15× the GPU's 13 ms, for a week,
+     looking like a weak iGPU. A render node that cannot be opened is
+     therefore REFUSED before any session is built; the error names the
+     uid/gid so the fix (device ownership in the entrypoint) is one read away.
+
 IPC uses dedicated pipe fds (`pass_fds`), never stdin/stdout — ORT/Dawn log on
 fd 1 and a yolov9 raw head on a shared stdout pickle channel truncated the
 frame (2026-10-10). Pipe `read(n)` can also return short; framing uses
@@ -24,13 +40,77 @@ import struct
 import subprocess
 import sys
 import threading
-from typing import Any, BinaryIO, Optional
+from typing import Any, BinaryIO, Callable, Optional
 
 ONNX_CPU_EP = "CPUExecutionProvider"
 ONNX_WEBGPU_EP_REGISTRATION = "webgpu_ep_registration"
 
+# ORT's CPU thread pool in a WebGPU child only feeds buffer uploads and the
+# rare CPU-placed node; the per-frame cost is Dawn's dispatch on ONE thread.
+# Measured 2026-10-13 (yolov9t-320 warm p50): 14.2 ms at 1, 2 and 6 threads —
+# so the default (one spinning thread per core, per child, ten children on a
+# six-core node) buys nothing and costs CPU. Two keeps a CPU-placed node from
+# serialising fully.
+WEBGPU_INTRA_OP_THREADS = 2
+
+RENDER_NODE_DIR = "/dev/dri"
+RENDER_NODE_PREFIX = "renderD"
+
 _HDR = struct.Struct(">I")
 
+_webgpu_registered = False
+_webgpu_register_lock = threading.Lock()
+
+
+class WebGpuDeviceUnavailable(RuntimeError):
+    """The webgpu device was asked for and cannot reach a GPU. Never served from CPU."""
+
+
+def render_node_accessible(
+    *,
+    platform: str = sys.platform,
+    listdir: Callable[[str], list[str]] = os.listdir,
+    access: Callable[[str, int], bool] = os.access,
+) -> Optional[bool]:
+    """True when some /dev/dri/renderD* is readable+writable by this process.
+
+    None on a platform without DRM render nodes (nothing to check); False when
+    the directory is absent, empty of render nodes, or every node is denied.
+    """
+    if not platform.startswith("linux"):
+        return None
+    try:
+        names = [n for n in listdir(RENDER_NODE_DIR) if n.startswith(RENDER_NODE_PREFIX)]
+    except OSError:
+        return False
+    if not names:
+        return False
+    return any(access(os.path.join(RENDER_NODE_DIR, n), os.R_OK | os.W_OK) for n in names)
+
+
+def _identity() -> str:
+    try:
+        return f"uid={os.getuid()} gid={os.getgid()} groups={sorted(os.getgroups())}"
+    except (AttributeError, OSError):
+        return "uid=? gid=? groups=?"
+
+
+def _ensure_webgpu_ep_registered(ort: Any, webgpu_ep: Any) -> None:
+    """Register the plugin EP library at most once per process.
+
+    A second registration under the same name raises and leaves the next
+    session creation to SIGSEGV (the real cause behind D823's "second session
+    crashes"). Idempotent across callers and threads.
+    """
+    global _webgpu_registered
+    with _webgpu_register_lock:
+        if _webgpu_registered:
+            return
+        ort.register_execution_provider_library(
+            ONNX_WEBGPU_EP_REGISTRATION, webgpu_ep.get_library_path()
+        )
+        _webgpu_registered = True
+
 
 def _read_exact(stream: BinaryIO, n: int) -> bytes:
     """Read exactly n bytes; pipe read() may return short without EOF."""
@@ -59,11 +139,29 @@ def _read_msg(stream: BinaryIO) -> Any:
     return pickle.loads(data)
 
 
-def load_onnx_webgpu_session(ort: Any, path: str) -> tuple[Any, list[str]]:
-    """Build an InferenceSession on the WebGPU plugin EP, CPU fallback on miss.
+def load_onnx_webgpu_session(
+    ort: Any,
+    path: str,
+    *,
+    render_node_ok: Optional[bool] = None,
+) -> tuple[Any, list[str]]:
+    """Build an InferenceSession on the WebGPU plugin EP.
 
-    Same contract as the former inference_pool._load_onnx_webgpu_session.
+    Refuses (`WebGpuDeviceUnavailable`) when no DRM render node is openable —
+    Dawn would otherwise serve the session from software and still call it
+    WebGPU. A missing plugin or a missing Vulkan adapter still falls back to
+    the CPU EP, and says so in `providers`.
     """
+    accessible = render_node_accessible() if render_node_ok is None else render_node_ok
+    if accessible is False:
+        raise WebGpuDeviceUnavailable(
+            f"ONNX WebGPU: no openable {RENDER_NODE_DIR}/{RENDER_NODE_PREFIX}* "
+            f"({_identity()}) — Dawn would run this model on a software adapter at "
+            f"~15× the GPU latency while reporting WebGpuExecutionProvider; refusing "
+            f"device webgpu. The container entrypoint must own or group-grant the "
+            f"render node to the camstack user (compose group_add is dropped by gosu)."
+        )
+
     try:
         import onnxruntime_ep_webgpu as webgpu_ep  # type: ignore
     except Exception as err:
@@ -72,15 +170,11 @@ def load_onnx_webgpu_session(ort: Any, path: str) -> tuple[Any, list[str]]:
         return ort.InferenceSession(path, providers=[ONNX_CPU_EP]), [ONNX_CPU_EP]
 
     try:
-        ort.register_execution_provider_library(
-            ONNX_WEBGPU_EP_REGISTRATION, webgpu_ep.get_library_path()
-        )
+        _ensure_webgpu_ep_registered(ort, webgpu_ep)
     except Exception as err:
-        msg = str(err).lower()
-        if "already" not in msg and "exist" not in msg:
-            sys.stderr.write(f"ONNX WebGPU: register failed ({err}); CPU fallback\n")
-            sys.stderr.flush()
-            return ort.InferenceSession(path, providers=[ONNX_CPU_EP]), [ONNX_CPU_EP]
+        sys.stderr.write(f"ONNX WebGPU: register failed ({err}); CPU fallback\n")
+        sys.stderr.flush()
+        return ort.InferenceSession(path, providers=[ONNX_CPU_EP]), [ONNX_CPU_EP]
 
     ep_name = webgpu_ep.get_ep_name()
     webgpu_device = next(
@@ -96,10 +190,14 @@ def load_onnx_webgpu_session(ort: Any, path: str) -> tuple[Any, list[str]]:
         return ort.InferenceSession(path, providers=[ONNX_CPU_EP]), [ONNX_CPU_EP]
 
     sess_options = ort.SessionOptions()
+    sess_options.intra_op_num_threads = WEBGPU_INTRA_OP_THREADS
     sess_options.add_provider_for_devices([webgpu_device], {})
     session = ort.InferenceSession(path, sess_options=sess_options)
     active = list(session.get_providers())
-    sys.stderr.write(f"ONNX WebGPU: providers={active} ep={ep_name} device=webgpu\n")
+    sys.stderr.write(
+        f"ONNX WebGPU: providers={active} ep={ep_name} device=webgpu "
+        f"render-node=ok {_identity()}\n"
+    )
     sys.stderr.flush()
     return session, active