@camstack/addon-pipeline 1.2.49 → 1.2.51

package/dist/audio-analyzer/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-J2DeRZAN.js");
+const require_dist = require("../dist-BsBEe_rX.js");
 const require_node_topology_platform = require("../node-topology-platform-CFZ7F4xW.js");
 const require_addon_utils = require("../addon-utils-DveoBR6G.js");
 let node_fs = require("node:fs");

package/dist/audio-analyzer/index.mjs

@@ -1,5 +1,5 @@
 import { n as __require } from "../chunk-DnnnRqeS.mjs";
-import { $ as errMsg, C as audioAnalysisCapability, R as mapAudioLabelToMacro, at as BaseAddon, n as AUDIO_BACKEND_CHOICES, o as DEFAULT_AUDIO_ANALYZER_CONFIG, p as HF_BASE_URL, ut as hydrateSchema, w as audioAnalyzerCapability } from "../dist-CLJKoYEP.mjs";
+import { T as audioAnalyzerCapability, dt as hydrateSchema, et as errMsg, m as HF_BASE_URL, n as AUDIO_BACKEND_CHOICES, o as DEFAULT_AUDIO_ANALYZER_CONFIG, ot as BaseAddon, w as audioAnalysisCapability, z as mapAudioLabelToMacro } from "../dist-Dkvk5ykl.mjs";
 import { t as pickNodePlatformArch } from "../node-topology-platform-BkR_k6WT.mjs";
 import { i as downloadFile } from "../addon-utils-QuxtOdK1.mjs";
 import * as fs from "node:fs";

package/dist/detection-pipeline/index.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-J2DeRZAN.js");
-const require_event_loop_stall_monitor = require("../event-loop-stall-monitor-Bkbiw20z.js");
+const require_dist = require("../dist-BsBEe_rX.js");
+const require_event_loop_stall_monitor = require("../event-loop-stall-monitor-DqJXi0_B.js");
 const require_lazy_sharp = require("../lazy-sharp-CcYuXtsa.js");
 const require_node_topology_platform = require("../node-topology-platform-CFZ7F4xW.js");
 const require_addon_utils = require("../addon-utils-DveoBR6G.js");

package/dist/detection-pipeline/index.mjs

@@ -1,6 +1,6 @@
 import { n as __require } from "../chunk-DnnnRqeS.mjs";
-import { $ as errMsg, At as EventCategory, Et as object, F as enumerateInferenceDevices, I as evaluateZoneRules, J as runtimeDevices$1, M as detectionPipelineCapability, O as defaultDeviceFor$1, Ot as string, U as pipelineExecutorCapability, Z as supportedRuntimes$1, at as BaseAddon, bt as array, ht as parseJsonUnknown, kt as union, l as DEVICE_BACKEND_TO_FORMAT, lt as createEvent, mt as nodePin, t as APPLE_SA_TO_MACRO, ut as hydrateSchema, vt as sleep, x as YAMNET_TO_MACRO } from "../dist-CLJKoYEP.mjs";
-import { a as getDefaultModelForFormat, c as getStepDefinition, i as ALL_STEPS, l as resolveModelForFormat, n as startEventLoopStallMonitor, o as getDefaultModelForFormatFromDef, r as ALL_PIPELINE_STEPS, s as getStep } from "../event-loop-stall-monitor-B6dqQjiX.mjs";
+import { At as union, Dt as object, I as enumerateInferenceDevices, L as evaluateZoneRules, N as detectionPipelineCapability, Q as supportedRuntimes$1, S as YAMNET_TO_MACRO, W as pipelineExecutorCapability, Y as runtimeDevices$1, dt as hydrateSchema, et as errMsg, gt as parseJsonUnknown, ht as nodePin, jt as EventCategory, k as defaultDeviceFor$1, kt as string, ot as BaseAddon, t as APPLE_SA_TO_MACRO, u as DEVICE_BACKEND_TO_FORMAT, ut as createEvent, xt as array, yt as sleep } from "../dist-Dkvk5ykl.mjs";
+import { a as getDefaultModelForFormat, c as getStepDefinition, i as ALL_STEPS, l as resolveModelForFormat, n as startEventLoopStallMonitor, o as getDefaultModelForFormatFromDef, r as ALL_PIPELINE_STEPS, s as getStep } from "../event-loop-stall-monitor-BvtjRcal.mjs";
 import { t as getSharp } from "../lazy-sharp-B-mb8uWx.mjs";
 import { t as pickNodePlatformArch } from "../node-topology-platform-BkR_k6WT.mjs";
 import { a as ensureModel, o as isModelDownloaded, r as deleteModelFromDisk } from "../addon-utils-QuxtOdK1.mjs";

package/dist/{dist-J2DeRZAN.js → dist-BsBEe_rX.js}

@@ -8344,6 +8344,30 @@ var RecordingBandSchema = object({
 	postBufferSec: number().min(0).optional()
 });
 /**
+* The buffers an `events` band uses when it carries NONE — i.e. what the Basic
+* recording form persists whenever the operator leaves the pre/post inputs
+* blank, which is the overwhelmingly common case.
+*
+* A zero default is NOT a neutral one, and reading the absent field as `0` is
+* what made two cameras record nothing for weeks: `postBufferSec` is the LIVE
+* demand window, so `0` means the window is already shut by the time the
+* trigger is evaluated. There is no instant at which such a band can attach a
+* writer.
+*
+* `postBufferSec` must therefore exceed one segment length plus the attach
+* latency (ffmpeg spawn + RTSP dial), or the window closes before the first
+* segment is ever finalized and the camera records nothing anyway. At the 10 s
+* default segment length, 30 s leaves room for two full segments. `preBufferSec`
+* is retroactive only — it costs nothing at record time, it merely keeps
+* already-written segments — so it is set to one segment length.
+*
+* An EXPLICIT `0` is left alone: that is an operator statement, not an omission.
+*/
+var DEFAULT_EVENTS_BAND_BUFFER_SEC = {
+	preBufferSec: 10,
+	postBufferSec: 30
+};
+/**
 * Per-device retention overrides. Every field is optional; an unset or `0`
 * value inherits the node-wide recorder default. Only footage-lifetime limits
 * live per-camera: `maxAgeDays` and `maxSizeGb`. The disk-occupancy threshold
@@ -18385,6 +18409,23 @@ var CameraRecordingStatusSchema = object({
 	active: boolean(),
 	storageBytes: number()
 });
+/** One stage of the fan-out that could NOT be read, and how long it cost. */
+var CameraStatusDegradationSchema = object({
+	stage: _enum([
+		"source",
+		"broker",
+		"detection",
+		"recording",
+		"switches"
+	]),
+	reason: _enum([
+		"timeout",
+		"error",
+		"partial"
+	]),
+	/** Wall-clock ms spent on the stage before it was abandoned. */
+	elapsedMs: number()
+});
 /**
 * Aggregated per-camera pipeline status — server-composed, single call.
 *
@@ -18415,9 +18456,28 @@ var CameraStatusSchema = object({
 	* differently — a quiet camera that looks identical to a dead one is the
 	* silence-reads-as-never-happened trap this repo keeps paying for.
 	*
-	* Empty when nothing is off. Never contains a switch no provider offers.
+	* Empty when nothing is off, and never contains a switch no provider offers
+	* — but an empty list is only a POSITIVE claim when `degraded` does not name
+	* `'switches'`. When it does, the switch set could not be read and nothing
+	* here may be rendered as "the operator turned nothing off": that is the
+	* D62 failure (a camera we could not read painted as broken) in the very
+	* field that exists to prevent it.
 	*/
 	switchedOff: array(CameraSwitchIdSchema).readonly(),
+	/**
+	* Stages of the bounded fan-out that were CUT SHORT — a timeout or a
+	* rejection — and whose block is therefore `null` because we could not
+	* READ it, not because there is nothing there.
+	*
+	* Without this, three different facts arrive as the same `null`: "the stage
+	* timed out", "the stage failed", and "this camera legitimately has no
+	* decoder / no recording". Every surface that draws a conclusion from a null
+	* block (or from an empty `switchedOff`) must consult this first; a stage
+	* named here supports no conclusion at all, only "unknown".
+	*
+	* Empty on a clean read — the overwhelmingly common case.
+	*/
+	degraded: array(CameraStatusDegradationSchema).readonly(),
 	/** Unix timestamp (ms) when this snapshot was composed server-side. */
 	fetchedAt: number()
 });
@@ -32173,6 +32233,12 @@ Object.defineProperty(exports, "DEFAULT_DETAIL_CROP_CONVENTION", {
 		return DEFAULT_DETAIL_CROP_CONVENTION;
 	}
 });
+Object.defineProperty(exports, "DEFAULT_EVENTS_BAND_BUFFER_SEC", {
+	enumerable: true,
+	get: function() {
+		return DEFAULT_EVENTS_BAND_BUFFER_SEC;
+	}
+});
 Object.defineProperty(exports, "DEFAULT_NATIVE_LEASE_SETTINGS", {
 	enumerable: true,
 	get: function() {

package/dist/{dist-CLJKoYEP.mjs → dist-Dkvk5ykl.mjs}

@@ -8344,6 +8344,30 @@ var RecordingBandSchema = object({
 	postBufferSec: number().min(0).optional()
 });
 /**
+* The buffers an `events` band uses when it carries NONE — i.e. what the Basic
+* recording form persists whenever the operator leaves the pre/post inputs
+* blank, which is the overwhelmingly common case.
+*
+* A zero default is NOT a neutral one, and reading the absent field as `0` is
+* what made two cameras record nothing for weeks: `postBufferSec` is the LIVE
+* demand window, so `0` means the window is already shut by the time the
+* trigger is evaluated. There is no instant at which such a band can attach a
+* writer.
+*
+* `postBufferSec` must therefore exceed one segment length plus the attach
+* latency (ffmpeg spawn + RTSP dial), or the window closes before the first
+* segment is ever finalized and the camera records nothing anyway. At the 10 s
+* default segment length, 30 s leaves room for two full segments. `preBufferSec`
+* is retroactive only — it costs nothing at record time, it merely keeps
+* already-written segments — so it is set to one segment length.
+*
+* An EXPLICIT `0` is left alone: that is an operator statement, not an omission.
+*/
+var DEFAULT_EVENTS_BAND_BUFFER_SEC = {
+	preBufferSec: 10,
+	postBufferSec: 30
+};
+/**
 * Per-device retention overrides. Every field is optional; an unset or `0`
 * value inherits the node-wide recorder default. Only footage-lifetime limits
 * live per-camera: `maxAgeDays` and `maxSizeGb`. The disk-occupancy threshold
@@ -18385,6 +18409,23 @@ var CameraRecordingStatusSchema = object({
 	active: boolean(),
 	storageBytes: number()
 });
+/** One stage of the fan-out that could NOT be read, and how long it cost. */
+var CameraStatusDegradationSchema = object({
+	stage: _enum([
+		"source",
+		"broker",
+		"detection",
+		"recording",
+		"switches"
+	]),
+	reason: _enum([
+		"timeout",
+		"error",
+		"partial"
+	]),
+	/** Wall-clock ms spent on the stage before it was abandoned. */
+	elapsedMs: number()
+});
 /**
 * Aggregated per-camera pipeline status — server-composed, single call.
 *
@@ -18415,9 +18456,28 @@ var CameraStatusSchema = object({
 	* differently — a quiet camera that looks identical to a dead one is the
 	* silence-reads-as-never-happened trap this repo keeps paying for.
 	*
-	* Empty when nothing is off. Never contains a switch no provider offers.
+	* Empty when nothing is off, and never contains a switch no provider offers
+	* — but an empty list is only a POSITIVE claim when `degraded` does not name
+	* `'switches'`. When it does, the switch set could not be read and nothing
+	* here may be rendered as "the operator turned nothing off": that is the
+	* D62 failure (a camera we could not read painted as broken) in the very
+	* field that exists to prevent it.
 	*/
 	switchedOff: array(CameraSwitchIdSchema).readonly(),
+	/**
+	* Stages of the bounded fan-out that were CUT SHORT — a timeout or a
+	* rejection — and whose block is therefore `null` because we could not
+	* READ it, not because there is nothing there.
+	*
+	* Without this, three different facts arrive as the same `null`: "the stage
+	* timed out", "the stage failed", and "this camera legitimately has no
+	* decoder / no recording". Every surface that draws a conclusion from a null
+	* block (or from an empty `switchedOff`) must consult this first; a stage
+	* named here supports no conclusion at all, only "unknown".
+	*
+	* Empty on a clean read — the overwhelmingly common case.
+	*/
+	degraded: array(CameraStatusDegradationSchema).readonly(),
 	/** Unix timestamp (ms) when this snapshot was composed server-side. */
 	fetchedAt: number()
 });
@@ -32113,4 +32173,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { errMsg as $, deriveDetailCropRect as A, EventCategory as At, motionDetectionCapability as B, audioAnalysisCapability as C, lazy as Ct, customAction as D, record as Dt, createHwAccelCache as E, object as Et, enumerateInferenceDevices as F, recordingCapability as G, pickNativeLeaseOverride as H, evaluateZoneRules as I, runtimeDevices as J, recordingExportCapability as K, hfModelUrl as L, detectionPipelineCapability as M, egressTranscodeSharingKey as N, defaultDeviceFor as O, string as Ot, egressTransportFromRequest as P, webrtcSessionCapability as Q, mapAudioLabelToMacro as R, addonWidgetsSourceCapability as S, discriminatedUnion as St, cameraStreamsCapability as T, number as Tt, pipelineExecutorCapability as U, pickDetailCropConvention as V, pipelineRunnerCapability as W, streamBrokerCapability as X, storageEvictableCapability as Y, supportedRuntimes as Z, RATE_CONTROL_RELAXED as _, selectAssignedProfileSlots as _t, COCO_TO_MACRO as a, BaseAddon as at, RingBuffer as b, array as bt, DEFAULT_NATIVE_LEASE_SETTINGS as c, DeviceType as ct, EncodeProfileSchema as d, isEvent as dt, AUDIO_PRESETS as et, ExportRecordSchema as f, makeProfileBrokerId as ft, OpsLogEntrySchema as g, parseProfileBrokerId as gt, NativeLeaseSettingsSchema as h, parseJsonUnknown as ht, COCO_80_LABELS as i, isSoftwareDecode as it, deriveRecordingMode as j, defineCustomActions as k, union as kt, DEVICE_BACKEND_TO_FORMAT as l, createEvent as lt, NativeLeaseAdmissionSchema as m, nodePin as mt, AUDIO_BACKEND_CHOICES as n, buildFfmpegArgs as nt, DEFAULT_AUDIO_ANALYZER_CONFIG as o, CAM_PROFILE_ORDER as ot, HF_BASE_URL as p, makeSourceBrokerId as pt, resolveEgressDecodeHwAccel as q, AUDIO_MACRO_LABELS as r, invocationFromEncodeProfile as rt, DEFAULT_DETAIL_CROP_CONVENTION as s, DeviceFeature as st, APPLE_SA_TO_MACRO as t, Fmp4BoxSplitter as tt, EVENT_PAD_MS as u, hydrateSchema as ut, RATE_CONTROL_TIGHT as v, sleep as vt, audioAnalyzerCapability as w, literal as wt, YAMNET_TO_MACRO as x, boolean as xt, RecordingConfigSchema as y, _enum as yt, maskUrlCredentials as z };
+export { webrtcSessionCapability as $, defineCustomActions as A, union as At, maskUrlCredentials as B, addonWidgetsSourceCapability as C, discriminatedUnion as Ct, createHwAccelCache as D, object as Dt, cameraStreamsCapability as E, number as Et, egressTransportFromRequest as F, pipelineRunnerCapability as G, pickDetailCropConvention as H, enumerateInferenceDevices as I, resolveEgressDecodeHwAccel as J, recordingCapability as K, evaluateZoneRules as L, deriveRecordingMode as M, detectionPipelineCapability as N, customAction as O, record as Ot, egressTranscodeSharingKey as P, supportedRuntimes as Q, hfModelUrl as R, YAMNET_TO_MACRO as S, boolean as St, audioAnalyzerCapability as T, literal as Tt, pickNativeLeaseOverride as U, motionDetectionCapability as V, pipelineExecutorCapability as W, storageEvictableCapability as X, runtimeDevices as Y, streamBrokerCapability as Z, OpsLogEntrySchema as _, parseProfileBrokerId as _t, COCO_TO_MACRO as a, isSoftwareDecode as at, RecordingConfigSchema as b, _enum as bt, DEFAULT_EVENTS_BAND_BUFFER_SEC as c, DeviceFeature as ct, EVENT_PAD_MS as d, hydrateSchema as dt, errMsg as et, EncodeProfileSchema as f, isEvent as ft, NativeLeaseSettingsSchema as g, parseJsonUnknown as gt, NativeLeaseAdmissionSchema as h, nodePin as ht, COCO_80_LABELS as i, invocationFromEncodeProfile as it, deriveDetailCropRect as j, EventCategory as jt, defaultDeviceFor as k, string as kt, DEFAULT_NATIVE_LEASE_SETTINGS as l, DeviceType as lt, HF_BASE_URL as m, makeSourceBrokerId as mt, AUDIO_BACKEND_CHOICES as n, Fmp4BoxSplitter as nt, DEFAULT_AUDIO_ANALYZER_CONFIG as o, BaseAddon as ot, ExportRecordSchema as p, makeProfileBrokerId as pt, recordingExportCapability as q, AUDIO_MACRO_LABELS as r, buildFfmpegArgs as rt, DEFAULT_DETAIL_CROP_CONVENTION as s, CAM_PROFILE_ORDER as st, APPLE_SA_TO_MACRO as t, AUDIO_PRESETS as tt, DEVICE_BACKEND_TO_FORMAT as u, createEvent as ut, RATE_CONTROL_RELAXED as v, selectAssignedProfileSlots as vt, audioAnalysisCapability as w, lazy as wt, RingBuffer as x, array as xt, RATE_CONTROL_TIGHT as y, sleep as yt, mapAudioLabelToMacro as z };

package/dist/{event-loop-stall-monitor-B6dqQjiX.mjs → event-loop-stall-monitor-BvtjRcal.mjs}

@@ -1,4 +1,4 @@
-import { L as hfModelUrl, a as COCO_TO_MACRO, i as COCO_80_LABELS, r as AUDIO_MACRO_LABELS } from "./dist-CLJKoYEP.mjs";
+import { R as hfModelUrl, a as COCO_TO_MACRO, i as COCO_80_LABELS, r as AUDIO_MACRO_LABELS } from "./dist-Dkvk5ykl.mjs";
 import { PerformanceObserver } from "node:perf_hooks";
 //#region src/detection-pipeline/registry/model-catalogs.ts
 var HF_REPO = "camstack/camstack-models";

package/dist/{event-loop-stall-monitor-Bkbiw20z.js → event-loop-stall-monitor-DqJXi0_B.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-J2DeRZAN.js");
+const require_dist = require("./dist-BsBEe_rX.js");
 let node_perf_hooks = require("node:perf_hooks");
 //#region src/detection-pipeline/registry/model-catalogs.ts
 var HF_REPO = "camstack/camstack-models";

package/dist/motion-wasm/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-J2DeRZAN.js");
+const require_dist = require("../dist-BsBEe_rX.js");
 const require_lazy_sharp = require("../lazy-sharp-CcYuXtsa.js");
 let node_fs = require("node:fs");
 let node_path = require("node:path");

package/dist/motion-wasm/index.mjs

@@ -1,4 +1,4 @@
-import { B as motionDetectionCapability, I as evaluateZoneRules, at as BaseAddon, ct as DeviceType, ut as hydrateSchema } from "../dist-CLJKoYEP.mjs";
+import { L as evaluateZoneRules, V as motionDetectionCapability, dt as hydrateSchema, lt as DeviceType, ot as BaseAddon } from "../dist-Dkvk5ykl.mjs";
 import { t as getSharp } from "../lazy-sharp-B-mb8uWx.mjs";
 import { readFileSync } from "node:fs";
 import { join } from "node:path";

package/dist/pipeline-runner/index.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-J2DeRZAN.js");
-const require_event_loop_stall_monitor = require("../event-loop-stall-monitor-Bkbiw20z.js");
-const require_worker_protocol = require("../worker-protocol-CNi5srgV.js");
+const require_dist = require("../dist-BsBEe_rX.js");
+const require_event_loop_stall_monitor = require("../event-loop-stall-monitor-DqJXi0_B.js");
+const require_worker_protocol = require("../worker-protocol-CWhkLkHx.js");
 const require_hub_hostname = require("../hub-hostname-DAJXlOgV.js");
 const require_lazy_sharp = require("../lazy-sharp-CcYuXtsa.js");
 const require_remote_restream = require("../remote-restream-CO36Sr30.js");
@@ -1824,116 +1824,6 @@ var CropConventionSource = class {
 	}
 };
 //#endregion
-//#region src/pipeline-runner/native-lease-settings-source.ts
-/**
-* Where the runner gets the cluster-wide native-frame LEASE knobs.
-*
-* ## Why a settings read and not the attach config
-*
-* Identical reasoning to `crop-convention-source.ts`, and worth restating
-* because the temptation is the same: `RunnerCameraConfig` is the obvious
-* orchestrator→runner channel and it is the wrong one. Eleven call sites build
-* one; a cluster-wide constant threaded through eleven builders eventually
-* reaches ten of them, and the cameras attached by the forgotten builder just
-* quietly run a different lease window. Instead the runner reads the OWNER
-* addon's global settings directly, hub-routed by `AddonCallGateway`, so an
-* agent runner transparently reads the hub-central store with no placement
-* branching.
-*
-* ## Deliberately NOT node-scoped
-*
-* The read passes no `nodeId`. With one, `addon-settings` would project that
-* node's scoped value and two nodes could hold different lease windows for the
-* same camera — so whether a stored crop is native pixels or the ≤640 fallback
-* would depend on where the balancer happened to place it, which is invisible
-* from the stored media.
-*
-* ## What it hands out
-*
-* A {@link NativeLeaseSettingsOverride} — only the knobs the operator SET. The
-* decode worker resolves the rest (env var, then the shipped default); see
-* `session-decode/native-lease-config.ts` for the precedence. Handing out a
-* fully-resolved triple here would erase the "operator set nothing" state and
-* with it the env-var escape hatch.
-*/
-/**
-* The addon whose GLOBAL settings own the knobs. `pipeline-orchestrator` is
-* hub-resident and neutral — the same owner as the detail-crop convention and
-* the per-node decoder-backend selector.
-*/
-var NATIVE_LEASE_OWNER_ADDON_ID = "pipeline-orchestrator";
-/**
-* Whether two overrides name the same knobs with the same values.
-*
-* **Every knob has to appear here.** This is the equality that decides whether
-* a re-read is ADOPTED at all: a knob missing from the comparison is read from
-* the hub, judged identical, and discarded, so the operator's change never
-* reaches a decode worker and nothing anywhere says so. `admission` shipped
-* missing from this list and did exactly that — the setting was stored, the
-* hub served it, the runner fetched it, and every worker kept spawning with the
-* old value.
-*/
-function sameOverride(a, b) {
-	return a.ttlMs === b.ttlMs && a.budgetMb === b.budgetMb && a.activityMs === b.activityMs && a.admission === b.admission;
-}
-/**
-* TTL-cached read of the cluster native-lease knobs.
-*
-* {@link current} is synchronous because the fork that consumes it is;
-* {@link refresh} is what talks to the hub, and the runner awaits it on the
-* path that precedes a decode-worker spawn.
-*/
-var NativeLeaseSettingsSource = class {
-	override = {};
-	lastReadAtMs = Number.NEGATIVE_INFINITY;
-	inFlight = null;
-	logger;
-	now;
-	ttlMs;
-	constructor(options) {
-		this.logger = options.logger;
-		this.now = options.now ?? (() => Date.now());
-		this.ttlMs = options.ttlMs ?? 3e4;
-	}
-	/** The operator's overrides as last read — `{}` until a read lands. */
-	current() {
-		return this.override;
-	}
-	/**
-	* Re-read if the cached value has expired. Concurrent callers share one
-	* in-flight read; a failure keeps the LAST KNOWN value rather than reverting
-	* to `{}`, because a revert would silently hand the next-spawned workers a
-	* different RAM profile than the ones already running.
-	*/
-	async refresh(api) {
-		if (api === void 0) return this.override;
-		if (this.now() - this.lastReadAtMs < this.ttlMs) return this.override;
-		this.inFlight ??= this.read(api).finally(() => {
-			this.inFlight = null;
-		});
-		await this.inFlight;
-		return this.override;
-	}
-	async read(api) {
-		try {
-			const next = require_dist.pickNativeLeaseOverride(await api.addonSettings.getGlobalSettings.query({ addonId: NATIVE_LEASE_OWNER_ADDON_ID }));
-			this.lastReadAtMs = this.now();
-			if (sameOverride(next, this.override)) return;
-			this.logger.info("native lease settings changed — applies to NEW decode sessions", { meta: {
-				from: { ...this.override },
-				to: { ...next }
-			} });
-			this.override = next;
-		} catch (err) {
-			this.logger.warn("native lease settings read failed — keeping the last known value", { meta: {
-				owner: NATIVE_LEASE_OWNER_ADDON_ID,
-				inUse: { ...this.override },
-				error: err instanceof Error ? err.message : String(err)
-			} });
-		}
-	}
-};
-//#endregion
 //#region src/pipeline-runner/detail-subtree.ts
 /** Did the native-lease fetch report a miss (rather than return pixels)? */
 function isNativeCropMiss(fetch) {
@@ -2508,6 +2398,116 @@ function resolveNativeCropSource(isFullFrame, nativeHit) {
 	return isFullFrame ? "ram-fullframe" : "miss";
 }
 //#endregion
+//#region src/pipeline-runner/native-lease-settings-source.ts
+/**
+* Where the runner gets the cluster-wide native-frame LEASE knobs.
+*
+* ## Why a settings read and not the attach config
+*
+* Identical reasoning to `crop-convention-source.ts`, and worth restating
+* because the temptation is the same: `RunnerCameraConfig` is the obvious
+* orchestrator→runner channel and it is the wrong one. Eleven call sites build
+* one; a cluster-wide constant threaded through eleven builders eventually
+* reaches ten of them, and the cameras attached by the forgotten builder just
+* quietly run a different lease window. Instead the runner reads the OWNER
+* addon's global settings directly, hub-routed by `AddonCallGateway`, so an
+* agent runner transparently reads the hub-central store with no placement
+* branching.
+*
+* ## Deliberately NOT node-scoped
+*
+* The read passes no `nodeId`. With one, `addon-settings` would project that
+* node's scoped value and two nodes could hold different lease windows for the
+* same camera — so whether a stored crop is native pixels or the ≤640 fallback
+* would depend on where the balancer happened to place it, which is invisible
+* from the stored media.
+*
+* ## What it hands out
+*
+* A {@link NativeLeaseSettingsOverride} — only the knobs the operator SET. The
+* decode worker resolves the rest (env var, then the shipped default); see
+* `session-decode/native-lease-config.ts` for the precedence. Handing out a
+* fully-resolved triple here would erase the "operator set nothing" state and
+* with it the env-var escape hatch.
+*/
+/**
+* The addon whose GLOBAL settings own the knobs. `pipeline-orchestrator` is
+* hub-resident and neutral — the same owner as the detail-crop convention and
+* the per-node decoder-backend selector.
+*/
+var NATIVE_LEASE_OWNER_ADDON_ID = "pipeline-orchestrator";
+/**
+* Whether two overrides name the same knobs with the same values.
+*
+* **Every knob has to appear here.** This is the equality that decides whether
+* a re-read is ADOPTED at all: a knob missing from the comparison is read from
+* the hub, judged identical, and discarded, so the operator's change never
+* reaches a decode worker and nothing anywhere says so. `admission` shipped
+* missing from this list and did exactly that — the setting was stored, the
+* hub served it, the runner fetched it, and every worker kept spawning with the
+* old value.
+*/
+function sameOverride(a, b) {
+	return a.ttlMs === b.ttlMs && a.budgetMb === b.budgetMb && a.activityMs === b.activityMs && a.admission === b.admission;
+}
+/**
+* TTL-cached read of the cluster native-lease knobs.
+*
+* {@link current} is synchronous because the fork that consumes it is;
+* {@link refresh} is what talks to the hub, and the runner awaits it on the
+* path that precedes a decode-worker spawn.
+*/
+var NativeLeaseSettingsSource = class {
+	override = {};
+	lastReadAtMs = Number.NEGATIVE_INFINITY;
+	inFlight = null;
+	logger;
+	now;
+	ttlMs;
+	constructor(options) {
+		this.logger = options.logger;
+		this.now = options.now ?? (() => Date.now());
+		this.ttlMs = options.ttlMs ?? 3e4;
+	}
+	/** The operator's overrides as last read — `{}` until a read lands. */
+	current() {
+		return this.override;
+	}
+	/**
+	* Re-read if the cached value has expired. Concurrent callers share one
+	* in-flight read; a failure keeps the LAST KNOWN value rather than reverting
+	* to `{}`, because a revert would silently hand the next-spawned workers a
+	* different RAM profile than the ones already running.
+	*/
+	async refresh(api) {
+		if (api === void 0) return this.override;
+		if (this.now() - this.lastReadAtMs < this.ttlMs) return this.override;
+		this.inFlight ??= this.read(api).finally(() => {
+			this.inFlight = null;
+		});
+		await this.inFlight;
+		return this.override;
+	}
+	async read(api) {
+		try {
+			const next = require_dist.pickNativeLeaseOverride(await api.addonSettings.getGlobalSettings.query({ addonId: NATIVE_LEASE_OWNER_ADDON_ID }));
+			this.lastReadAtMs = this.now();
+			if (sameOverride(next, this.override)) return;
+			this.logger.info("native lease settings changed — applies to NEW decode sessions", { meta: {
+				from: { ...this.override },
+				to: { ...next }
+			} });
+			this.override = next;
+		} catch (err) {
+			this.logger.warn("native lease settings read failed — keeping the last known value", { meta: {
+				owner: NATIVE_LEASE_OWNER_ADDON_ID,
+				inUse: { ...this.override },
+				error: err instanceof Error ? err.message : String(err)
+			} });
+		}
+	}
+};
+//#endregion
 //#region src/pipeline-runner/frame-governor.ts
 var FrameGovernor = class {
 	config;
@@ -4986,7 +4986,20 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAdd
 		if (resolved.tier === "native" && resolved.pixels !== null) return this.encodeNativeCropResult(resolved.pixels, resolved.tier, input.encodeJpeg);
 		if (resolved.tier !== "ram-fullframe") return null;
 		const crop = this.retainedFrames?.crop(input.handle, input.bbox, input.maxWidth);
-		if (!crop) return null;
+		if (!crop) {
+			this.ctx?.logger.warn("native full-frame miss — the retained store no longer holds this frame", {
+				tags: { deviceId: this.nativeCropRegistry.deviceIdFor(input.handle) ?? -1 },
+				meta: {
+					handle: `${input.handle.shmId}#${input.handle.slot}#${input.handle.seq}`,
+					handleNodeId: input.handle.nodeId,
+					nativeMissReason: resolved.missReason,
+					nativeHandleAgeMs: resolved.handleAgeMs,
+					maxWidth: input.maxWidth ?? null,
+					hint: "both the native lease and the retained-frame window have closed for this frame — the detail dispatch that asked for it produces NO crop"
+				}
+			});
+			return null;
+		}
 		return this.encodeNativeCropResult({
 			bytes: crop.bytes,
 			width: crop.width,