@camstack/addon-pipeline 1.2.93 → 1.2.94

package/dist/{addon-utils-CTRpEiSd.js → addon-utils-DnUCCZVx.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-D9To_r_d.js");
+const require_dist = require("./dist-BbRv3bM2.js");
 require("node:crypto");
 let node_path = require("node:path");
 node_path = require_dist.__toESM(node_path, 1);

package/dist/audio-analyzer/index.js

@@ -2,9 +2,9 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-D9To_r_d.js");
+const require_dist = require("../dist-BbRv3bM2.js");
 const require_node_topology_platform = require("../node-topology-platform-CFZ7F4xW.js");
-const require_addon_utils = require("../addon-utils-CTRpEiSd.js");
+const require_addon_utils = require("../addon-utils-DnUCCZVx.js");
 let node_path = require("node:path");
 node_path = require_dist.__toESM(node_path);
 let node_fs = require("node:fs");

package/dist/audio-analyzer/index.mjs

@@ -1,5 +1,5 @@
 import { n as __require } from "../chunk-DnnnRqeS.mjs";
-import { D as audioAnalyzerCapability, E as audioAnalysisCapability, U as mapAudioLabelToMacro, at as errMsg, dt as BaseAddon, gt as hydrateSchema, h as HF_BASE_URL, n as AUDIO_BACKEND_CHOICES, s as DEFAULT_AUDIO_ANALYZER_CONFIG } from "../dist-6POVIYmC.mjs";
+import { D as audioAnalyzerCapability, E as audioAnalysisCapability, U as mapAudioLabelToMacro, at as errMsg, dt as BaseAddon, gt as hydrateSchema, h as HF_BASE_URL, n as AUDIO_BACKEND_CHOICES, s as DEFAULT_AUDIO_ANALYZER_CONFIG } from "../dist-XbrYiMV3.mjs";
 import { t as pickNodePlatformArch } from "../node-topology-platform-BkR_k6WT.mjs";
 import { i as downloadFile } from "../addon-utils-A2S9D7pu.mjs";
 import * as path$1 from "node:path";

package/dist/detection-pipeline/index.js

@@ -2,11 +2,11 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-D9To_r_d.js");
-const require_event_loop_stall_monitor = require("../event-loop-stall-monitor-CGacbzXq.js");
-const require_lazy_sharp = require("../lazy-sharp-C3zOnmiU.js");
+const require_dist = require("../dist-BbRv3bM2.js");
+const require_event_loop_stall_monitor = require("../event-loop-stall-monitor-D9hqbc68.js");
+const require_lazy_sharp = require("../lazy-sharp-U0EtN7_C.js");
 const require_node_topology_platform = require("../node-topology-platform-CFZ7F4xW.js");
-const require_addon_utils = require("../addon-utils-CTRpEiSd.js");
+const require_addon_utils = require("../addon-utils-DnUCCZVx.js");
 let sharp = require("sharp");
 sharp = require_dist.__toESM(sharp);
 let node_child_process = require("node:child_process");

package/dist/detection-pipeline/index.mjs

@@ -1,6 +1,6 @@
 import { n as __require } from "../chunk-DnnnRqeS.mjs";
-import { B as enumerateInferenceDevices, Et as array, Ft as union, It as EventCategory, J as pipelineExecutorCapability, L as detectionPipelineCapability, M as defaultDeviceFor$1, Mt as object, Pt as string, V as evaluateZoneRules, at as errMsg, bt as nodePin, d as DEVICE_BACKEND_TO_FORMAT, dt as BaseAddon, et as runtimeDevices$1, gt as hydrateSchema, ht as createEvent, rt as supportedRuntimes$1, t as APPLE_SA_TO_MACRO, w as YAMNET_TO_MACRO, wt as sleep, xt as parseJsonUnknown } from "../dist-6POVIYmC.mjs";
-import { a as getDefaultModelForFormat, c as getStepDefinition, i as ALL_STEPS, l as resolveModelForFormat, n as startEventLoopStallMonitor, o as getDefaultModelForFormatFromDef, r as ALL_PIPELINE_STEPS, s as getStep } from "../event-loop-stall-monitor-C-VvWOxS.mjs";
+import { B as enumerateInferenceDevices, Et as array, Ft as union, It as EventCategory, J as pipelineExecutorCapability, L as detectionPipelineCapability, M as defaultDeviceFor$1, Mt as object, Pt as string, V as evaluateZoneRules, at as errMsg, bt as nodePin, d as DEVICE_BACKEND_TO_FORMAT, dt as BaseAddon, et as runtimeDevices$1, gt as hydrateSchema, ht as createEvent, rt as supportedRuntimes$1, t as APPLE_SA_TO_MACRO, w as YAMNET_TO_MACRO, wt as sleep, xt as parseJsonUnknown } from "../dist-XbrYiMV3.mjs";
+import { a as getDefaultModelForFormat, c as getStepDefinition, i as ALL_STEPS, l as resolveModelForFormat, n as startEventLoopStallMonitor, o as getDefaultModelForFormatFromDef, r as ALL_PIPELINE_STEPS, s as getStep } from "../event-loop-stall-monitor-CFWrOZ6G.mjs";
 import { t as getSharp } from "../lazy-sharp-6oymT_yf.mjs";
 import { t as pickNodePlatformArch } from "../node-topology-platform-BkR_k6WT.mjs";
 import { a as ensureModel, o as isModelDownloaded, r as deleteModelFromDisk } from "../addon-utils-A2S9D7pu.mjs";

package/dist/{dist-D9To_r_d.js → dist-BbRv3bM2.js}

@@ -21996,20 +21996,6 @@ var VectorStatsResultSchema = object({
 	exact: boolean()
 });
 method(VectorDeclareIndexInputSchema, _void(), { kind: "mutation" }), method(VectorUpsertInputSchema, VectorUpsertResultSchema, { kind: "mutation" }), method(VectorQueryInputSchema, VectorQueryResultSchema), method(VectorGetInputSchema, VectorGetResultSchema), method(VectorDeleteInputSchema, VectorDeleteResultSchema, { kind: "mutation" }), method(VectorDeleteByFilterInputSchema, VectorDeleteResultSchema, { kind: "mutation" }), method(VectorStatsInputSchema, VectorStatsResultSchema);
-/**
-* `videoclips` — the unified, navigable-clip surface for a camera.
-*
-* A device-scoped WRAPPER cap (like `pipeline-analytics`): exactly one active
-* provider per device, substitutable. The DEFAULT provider (registered by
-* `addon-post-analysis`, `defaultActive: true`) composes the analytics event
-* log (markers + thumbnails) with the recorder's `getPlaybackManifest` — a clip
-* is a time-WINDOW over existing footage, never a separate file. A camera that
-* exposes NATIVE onboard clips (Reolink/Hikvision NVR) can later substitute the
-* wrapper provider for its device and serve its own clip catalog + URLs.
-*
-* A `Clip` is purely time-based (subtree-blind): playback resolves segments by
-* temporal overlap, so the API never decides `continuous` vs `events`.
-*/
 var ClipSchema = object({
 	/** Opaque, provider-namespaced id. The default provider encodes the time
 	*  window so `getClipPlayback` is self-contained (no event re-query). */
@@ -22035,12 +22021,41 @@ var ClipSchema = object({
 	* of the event that owns `kind` (object > motion > audio). Do not extract
 	* a keyframe from the recorded segments. Other providers (onboard, HKSV)
 	* mint their own stills.
+	*
+	* **VOUCHED, never fabricated.** A provider emits this only for an event it
+	* has CONFIRMED owns at least one media row (its own, or its owning track's).
+	* Absent is meaningful — "this visit has no event still" — never "we did not
+	* look". Stamping it from a URL template made 35% of one camera's clips point
+	* at a 404 (device 3836, 2026-08-17: 64 of 179 clips dead, 63 of them motion).
+	* A read that FAILS drops the claim; it never invents it.
 	*/
 	thumbnail: string().optional(),
-	/** Analytics event ids that overlap this visit. Empty on footage-only clips.
-	*  The default provider's visit grain puts many motion heartbeats on one clip
-	*  instead of minting one clip per marker. */
+	/**
+	* An instant INSIDE this visit's footage, hole-safe, where a recorded still
+	* can be decoded. Present whenever the visit came from recorded availability;
+	* absent on a per-event padded window (there is no footage to promise).
+	*
+	* This is not a thumbnail and not a second byte path: it is the argument to
+	* the recorder's existing still route. The surface — never the provider —
+	* decides whether to use it. It is the midpoint of the visit's LONGEST
+	* contiguous range, not of the visit: a visit spans its holes by
+	* construction, so a naive midpoint lands in dead air.
+	*/
+	stillAtMs: number().optional(),
+	/**
+	* Analytics event ids that overlap this visit — a BOUNDED sample, newest
+	* first within kind (object → motion → audio), capped at
+	* {@link MAX_CLIP_EVENT_IDS}. Empty on footage-only clips.
+	*
+	* Bounded because it is not a payload the surface pages through: one visit on
+	* device 615 carried 2 345 ids, and `eventIds` was 99% of a 153 KB
+	* camera-day. Read {@link eventCount} for the true total.
+	*/
 	eventIds: array(string()).optional(),
+	/** How many analytics events actually overlap this visit. Differs from
+	*  `eventIds.length` exactly when the sample was capped — so a truncated
+	*  list is never mistaken for a quiet visit. */
+	eventCount: number().int().nonnegative().optional(),
 	/** Intra-visit footage holes (GOP rolls, discarded segments) still shorter
 	*  than `VISIT_MERGE_GAP_MS`. Playback concatenates around them; the timeline
 	*  bar keeps showing them via `recording.getAvailability`. */
@@ -22591,7 +22606,14 @@ var SearchResultSchema = object({
 });
 var AutoUpdateSettingsSchema = object({
 	channel: ChannelSchema,
-	intervalSeconds: number()
+	intervalSeconds: number(),
+	/**
+	* Cadence of the "an update exists" POLLER, in seconds. Independent of
+	* `channel`: the poller runs while auto-apply is `off`, because being told
+	* about a publish and installing it are different decisions. Clamped
+	* server-side to 900 s … 604800 s; defaults to 21600 s (6 h).
+	*/
+	updateCheckIntervalSeconds: number()
 });
 var AddonAutoUpdateSchema = ChannelWithInheritSchema;
 var RestartAddonResultSchema = unknown();
@@ -22732,7 +22754,9 @@ method(_void(), array(AddonListItemSchema).readonly()), method(object({
 	auth: "admin"
 }), method(_void(), AutoUpdateSettingsSchema, { auth: "admin" }), method(object({
 	channel: ChannelSchema,
-	intervalSeconds: number().min(300).max(86400).optional()
+	intervalSeconds: number().min(300).max(86400).optional(),
+	/** Availability-poll cadence; see AutoUpdateSettingsSchema. */
+	updateCheckIntervalSeconds: number().min(900).max(604800).optional()
 }), unknown(), {
 	kind: "mutation",
 	auth: "admin"

package/dist/{dist-6POVIYmC.mjs → dist-XbrYiMV3.mjs}

@@ -21973,20 +21973,6 @@ var VectorStatsResultSchema = object({
 	exact: boolean()
 });
 method(VectorDeclareIndexInputSchema, _void(), { kind: "mutation" }), method(VectorUpsertInputSchema, VectorUpsertResultSchema, { kind: "mutation" }), method(VectorQueryInputSchema, VectorQueryResultSchema), method(VectorGetInputSchema, VectorGetResultSchema), method(VectorDeleteInputSchema, VectorDeleteResultSchema, { kind: "mutation" }), method(VectorDeleteByFilterInputSchema, VectorDeleteResultSchema, { kind: "mutation" }), method(VectorStatsInputSchema, VectorStatsResultSchema);
-/**
-* `videoclips` — the unified, navigable-clip surface for a camera.
-*
-* A device-scoped WRAPPER cap (like `pipeline-analytics`): exactly one active
-* provider per device, substitutable. The DEFAULT provider (registered by
-* `addon-post-analysis`, `defaultActive: true`) composes the analytics event
-* log (markers + thumbnails) with the recorder's `getPlaybackManifest` — a clip
-* is a time-WINDOW over existing footage, never a separate file. A camera that
-* exposes NATIVE onboard clips (Reolink/Hikvision NVR) can later substitute the
-* wrapper provider for its device and serve its own clip catalog + URLs.
-*
-* A `Clip` is purely time-based (subtree-blind): playback resolves segments by
-* temporal overlap, so the API never decides `continuous` vs `events`.
-*/
 var ClipSchema = object({
 	/** Opaque, provider-namespaced id. The default provider encodes the time
 	*  window so `getClipPlayback` is self-contained (no event re-query). */
@@ -22012,12 +21998,41 @@ var ClipSchema = object({
 	* of the event that owns `kind` (object > motion > audio). Do not extract
 	* a keyframe from the recorded segments. Other providers (onboard, HKSV)
 	* mint their own stills.
+	*
+	* **VOUCHED, never fabricated.** A provider emits this only for an event it
+	* has CONFIRMED owns at least one media row (its own, or its owning track's).
+	* Absent is meaningful — "this visit has no event still" — never "we did not
+	* look". Stamping it from a URL template made 35% of one camera's clips point
+	* at a 404 (device 3836, 2026-08-17: 64 of 179 clips dead, 63 of them motion).
+	* A read that FAILS drops the claim; it never invents it.
 	*/
 	thumbnail: string().optional(),
-	/** Analytics event ids that overlap this visit. Empty on footage-only clips.
-	*  The default provider's visit grain puts many motion heartbeats on one clip
-	*  instead of minting one clip per marker. */
+	/**
+	* An instant INSIDE this visit's footage, hole-safe, where a recorded still
+	* can be decoded. Present whenever the visit came from recorded availability;
+	* absent on a per-event padded window (there is no footage to promise).
+	*
+	* This is not a thumbnail and not a second byte path: it is the argument to
+	* the recorder's existing still route. The surface — never the provider —
+	* decides whether to use it. It is the midpoint of the visit's LONGEST
+	* contiguous range, not of the visit: a visit spans its holes by
+	* construction, so a naive midpoint lands in dead air.
+	*/
+	stillAtMs: number().optional(),
+	/**
+	* Analytics event ids that overlap this visit — a BOUNDED sample, newest
+	* first within kind (object → motion → audio), capped at
+	* {@link MAX_CLIP_EVENT_IDS}. Empty on footage-only clips.
+	*
+	* Bounded because it is not a payload the surface pages through: one visit on
+	* device 615 carried 2 345 ids, and `eventIds` was 99% of a 153 KB
+	* camera-day. Read {@link eventCount} for the true total.
+	*/
 	eventIds: array(string()).optional(),
+	/** How many analytics events actually overlap this visit. Differs from
+	*  `eventIds.length` exactly when the sample was capped — so a truncated
+	*  list is never mistaken for a quiet visit. */
+	eventCount: number().int().nonnegative().optional(),
 	/** Intra-visit footage holes (GOP rolls, discarded segments) still shorter
 	*  than `VISIT_MERGE_GAP_MS`. Playback concatenates around them; the timeline
 	*  bar keeps showing them via `recording.getAvailability`. */
@@ -22568,7 +22583,14 @@ var SearchResultSchema = object({
 });
 var AutoUpdateSettingsSchema = object({
 	channel: ChannelSchema,
-	intervalSeconds: number()
+	intervalSeconds: number(),
+	/**
+	* Cadence of the "an update exists" POLLER, in seconds. Independent of
+	* `channel`: the poller runs while auto-apply is `off`, because being told
+	* about a publish and installing it are different decisions. Clamped
+	* server-side to 900 s … 604800 s; defaults to 21600 s (6 h).
+	*/
+	updateCheckIntervalSeconds: number()
 });
 var AddonAutoUpdateSchema = ChannelWithInheritSchema;
 var RestartAddonResultSchema = unknown();
@@ -22709,7 +22731,9 @@ method(_void(), array(AddonListItemSchema).readonly()), method(object({
 	auth: "admin"
 }), method(_void(), AutoUpdateSettingsSchema, { auth: "admin" }), method(object({
 	channel: ChannelSchema,
-	intervalSeconds: number().min(300).max(86400).optional()
+	intervalSeconds: number().min(300).max(86400).optional(),
+	/** Availability-poll cadence; see AutoUpdateSettingsSchema. */
+	updateCheckIntervalSeconds: number().min(900).max(604800).optional()
 }), unknown(), {
 	kind: "mutation",
 	auth: "admin"

package/dist/{event-loop-stall-monitor-C-VvWOxS.mjs → event-loop-stall-monitor-CFWrOZ6G.mjs}

@@ -1,4 +1,4 @@
-import { H as hfModelUrl, a as COCO_80_LABELS, o as COCO_TO_MACRO, r as AUDIO_MACRO_LABELS } from "./dist-6POVIYmC.mjs";
+import { H as hfModelUrl, a as COCO_80_LABELS, o as COCO_TO_MACRO, r as AUDIO_MACRO_LABELS } from "./dist-XbrYiMV3.mjs";
 import { PerformanceObserver } from "node:perf_hooks";
 //#region src/detection-pipeline/registry/model-catalogs.ts
 var HF_REPO = "camstack/camstack-models";

package/dist/{event-loop-stall-monitor-CGacbzXq.js → event-loop-stall-monitor-D9hqbc68.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-D9To_r_d.js");
+const require_dist = require("./dist-BbRv3bM2.js");
 let node_perf_hooks = require("node:perf_hooks");
 //#region src/detection-pipeline/registry/model-catalogs.ts
 var HF_REPO = "camstack/camstack-models";

package/dist/{lazy-sharp-C3zOnmiU.js → lazy-sharp-U0EtN7_C.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-D9To_r_d.js");
+const require_dist = require("./dist-BbRv3bM2.js");
 let node_url = require("node:url");
 let node_module = require("node:module");
 let node_path = require("node:path");

package/dist/motion-wasm/index.js

@@ -2,8 +2,8 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-D9To_r_d.js");
-const require_lazy_sharp = require("../lazy-sharp-C3zOnmiU.js");
+const require_dist = require("../dist-BbRv3bM2.js");
+const require_lazy_sharp = require("../lazy-sharp-U0EtN7_C.js");
 let node_path = require("node:path");
 let node_fs = require("node:fs");
 //#region src/motion-wasm/wasm-motion-detector.ts

package/dist/motion-wasm/index.mjs

@@ -1,4 +1,4 @@
-import { G as motionDetectionCapability, V as evaluateZoneRules, dt as BaseAddon, gt as hydrateSchema, mt as DeviceType } from "../dist-6POVIYmC.mjs";
+import { G as motionDetectionCapability, V as evaluateZoneRules, dt as BaseAddon, gt as hydrateSchema, mt as DeviceType } from "../dist-XbrYiMV3.mjs";
 import { t as getSharp } from "../lazy-sharp-6oymT_yf.mjs";
 import { join } from "node:path";
 import { readFileSync } from "node:fs";

package/dist/pipeline-runner/index.js

@@ -2,11 +2,11 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-D9To_r_d.js");
-const require_event_loop_stall_monitor = require("../event-loop-stall-monitor-CGacbzXq.js");
-const require_worker_protocol = require("../worker-protocol-Bq28qobd.js");
+const require_dist = require("../dist-BbRv3bM2.js");
+const require_event_loop_stall_monitor = require("../event-loop-stall-monitor-D9hqbc68.js");
+const require_worker_protocol = require("../worker-protocol-CNC-ZcU3.js");
 const require_hub_hostname = require("../hub-hostname-DAJXlOgV.js");
-const require_lazy_sharp = require("../lazy-sharp-C3zOnmiU.js");
+const require_lazy_sharp = require("../lazy-sharp-U0EtN7_C.js");
 const require_remote_restream = require("../remote-restream-BYbAsgUf.js");
 let sharp = require("sharp");
 sharp = require_dist.__toESM(sharp);
@@ -134,6 +134,8 @@ function startGuardedSessionDecode(deps) {
 	let stopPump = null;
 	let release = null;
 	let retryTimer = null;
+	/** The live-worker slot held by the RUNNING session, released on teardown. */
+	let workerLease = null;
 	const delays = deps.acquireRetryDelaysMs && deps.acquireRetryDelaysMs.length > 0 ? deps.acquireRetryDelaysMs : DEFAULT_ACQUIRE_RETRY_DELAYS_MS;
 	/** Resolves after the backoff for `attempt`, or immediately once aborted. */
 	const waitBackoff = (attempt) => new Promise((resolve) => {
@@ -146,10 +148,19 @@ function startGuardedSessionDecode(deps) {
 	});
 	(async () => {
 		for (let attempt = 0; !aborted; attempt++) {
+			let lease = null;
+			if (deps.admitWorker) {
+				lease = deps.admitWorker();
+				if (!lease) {
+					await waitBackoff(attempt);
+					continue;
+				}
+			}
 			let acquired = null;
 			try {
 				acquired = await deps.acquire();
 			} catch (err) {
+				lease?.release();
 				(attempt === 0 ? deps.logger.warn : deps.logger.debug).call(deps.logger, "session-decode: acquire failed — retrying", { meta: {
 					attempt: attempt + 1,
 					error: require_dist.errMsg(err)
@@ -158,16 +169,19 @@ function startGuardedSessionDecode(deps) {
 				continue;
 			}
 			if (aborted) {
+				lease?.release();
 				if (acquired) acquired.release();
 				return;
 			}
 			if (!acquired) {
+				lease?.release();
 				(attempt === 0 ? deps.logger.warn : deps.logger.debug).call(deps.logger, "session-decode: no broker profile bound yet — retrying", { meta: { attempt: attempt + 1 } });
 				await waitBackoff(attempt);
 				continue;
 			}
 			if (attempt > 0) deps.logger.info("session-decode: acquire succeeded after retry", { meta: { attempts: attempt + 1 } });
 			release = acquired.release;
+			workerLease = lease;
 			stopPump = deps.startPump(acquired.source);
 			return;
 		}
@@ -181,6 +195,8 @@ function startGuardedSessionDecode(deps) {
 			retryTimer = null;
 		}
 		stopPump?.();
+		workerLease?.release();
+		workerLease = null;
 		if (release) release();
 	};
 }
@@ -1394,7 +1410,9 @@ var RunSyntheticBenchInputSchema = require_dist.object({
 	sessionId: require_dist.string().optional(),
 	simulatePipeline: require_dist.boolean().optional(),
 	nodeId: require_dist.string().optional(),
-	engine: BenchEngineChoiceSchema.optional()
+	engine: BenchEngineChoiceSchema.optional(),
+	deviceKey: require_dist.string().optional(),
+	plane: require_dist._enum(["full", "frame"]).optional()
 });
 var TimingSplitSchema = require_dist.object({
 	mean: require_dist.number(),
@@ -1449,6 +1467,48 @@ var pipelineRunnerBenchActions = require_dist.defineCustomActions({
 	abortCapacityRamp: require_dist.customAction(AbortCapacityRampInputSchema, AbortCapacityRampResultSchema, { kind: "mutation" })
 });
 //#endregion
+//#region src/pipeline-runner/bench-dispatch.ts
+/**
+* Why the cached fast path is unavailable, or `null` if nothing blocks it.
+*
+* The fast path is `cacheFrameInPool` once + `inferCached` per call, and
+* NEITHER cap method takes a `deviceKey` or a `plane` — only `runPipeline`
+* does. Forwarding a device selector into it would scope the WARMUP
+* `runPipeline` to the chosen accelerator and leave every TIMED call on the
+* node's default pool: a measurement of the wrong device, reported as the
+* right one. Refusing the fast path costs a slower bench and buys a true
+* number.
+*/
+function fastPathRefusalReason(input) {
+	if (input.deviceKey) return `deviceKey '${input.deviceKey}' requested — inferCached has no device selector, so the timed calls would land on the node's default pool; using the runPipeline path instead`;
+	if (input.plane) return `plane '${input.plane}' requested — inferCached has no plane selector; using the runPipeline path instead`;
+	return null;
+}
+/**
+* The cached fast path is only for a plain, single-step, default-device,
+* default-plane inference bench.
+*/
+function canUseCachedFastPath(isSingleStep, input) {
+	return isSingleStep && !input.simulatePipeline && fastPathRefusalReason(input) === null;
+}
+/**
+* Build the `pipelineExecutor.runPipeline` argument for one bench call.
+*
+* Every optional is ABSENT when unset rather than present-and-undefined: an
+* omitted `deviceKey` means "the runner's default device" and an omitted
+* `plane` means the cap's `'full'` default, and the two are not the same as
+* an explicit `undefined` on a `.loose()` router input.
+*/
+function buildBenchRunPipelineInput(req) {
+	return {
+		steps: [...req.steps],
+		frame: req.frame,
+		...req.engine ? { engine: req.engine } : {},
+		...req.deviceKey ? { deviceKey: req.deviceKey } : {},
+		...req.plane ? { plane: req.plane } : {}
+	};
+}
+//#endregion
 //#region src/pipeline-runner/capacity/capacity-runner.ts
 /**
 * Run ONE ramp step: `cameras` independent open-loop pacers for
@@ -3870,6 +3930,76 @@ var PipelineRunner = class {
 	}
 };
 //#endregion
+//#region src/session-decode/live-worker-admission.ts
+/**
+* The node's live-decode-worker budget.
+*
+* One instance per runner addon. Not a semaphore: a semaphore's contract is
+* "wait", and waiting is the thing this deliberately does not do — see
+* {@link DEFAULT_MAX_LIVE_DECODE_WORKERS}.
+*/
+var LiveDecodeWorkerAdmission = class {
+	limit;
+	logger;
+	live = 0;
+	constructor(options) {
+		this.limit = Math.max(1, options.limit);
+		this.logger = options.logger;
+	}
+	/** Workers currently holding a slot. */
+	get inFlight() {
+		return this.live;
+	}
+	get ceiling() {
+		return this.limit;
+	}
+	/**
+	* Apply an operator-changed ceiling.
+	*
+	* Lowering it never kills a running session — a decode worker torn down
+	* mid-motion loses the event it was started for. It only stops the next
+	* admission, so the count drains to the new ceiling as sessions end.
+	*/
+	resize(limit) {
+		this.limit = Math.max(1, limit);
+	}
+	/**
+	* Take a slot, or refuse.
+	*
+	* A refusal is a WARN and carries `tags.deviceId`, because the only useful
+	* form of this question is per-camera ("why did 617 not run when 615 did?").
+	* A branch that drops work silently reads as "it never happened".
+	*/
+	admit(deviceId, label) {
+		if (this.live >= this.limit) {
+			this.logger.warn("session-decode: REFUSED — node live decode-worker ceiling reached, will retry", {
+				tags: { deviceId },
+				meta: {
+					label,
+					live: this.live,
+					ceiling: this.limit
+				}
+			});
+			return null;
+		}
+		this.live += 1;
+		this.logger.debug("session-decode: live decode-worker slot taken", {
+			tags: { deviceId },
+			meta: {
+				label,
+				live: this.live,
+				ceiling: this.limit
+			}
+		});
+		let released = false;
+		return { release: () => {
+			if (released) return;
+			released = true;
+			this.live -= 1;
+		} };
+	}
+};
+//#endregion
 //#region src/pipeline-runner/stateless-step.ts
 function modelServability(step, modelId, format) {
 	const entry = step.models.find((m) => m.id === modelId);
@@ -4008,7 +4138,8 @@ var DEFAULT_CONFIG = {
 	maxConcurrentInferences: 16,
 	targetLoadPercent: 80,
 	minThrottledFps: 1,
-	maxConcurrentDecodeSpawns: 3
+	maxConcurrentDecodeSpawns: 3,
+	maxLiveDecodeWorkers: 8
 };
 /**
 * Camera attachment record kept by the runner addon. Holds the original
@@ -4311,6 +4442,14 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAdd
 	*/
 	spawnGate = null;
 	/**
+	* Per-node ceiling on decode workers ALIVE at once, sized to
+	* `config.maxLiveDecodeWorkers`. The spawn gate above bounds how fast workers
+	* START; this bounds how many EXIST — measured live at 1 -> 8 workers and a
+	* ~4 GiB move in 8 seconds, with nothing stopping the 9th. `resize()`d live in
+	* `onConfigChanged`. Null until `onInitialize`.
+	*/
+	liveWorkers = null;
+	/**
 	* Node-level map from a retention-ring `FrameHandle` to the decode worker
 	* still holding that frame's NATIVE surface — backs the `getNativeCrop` cap
 	* so post-analysis can cut native-res crops (best-effort; a miss falls back
@@ -4534,6 +4673,10 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAdd
 			}
 		});
 		this.spawnGate = new Semaphore(Math.max(1, this.config.maxConcurrentDecodeSpawns));
+		this.liveWorkers = new LiveDecodeWorkerAdmission({
+			limit: this.config.maxLiveDecodeWorkers,
+			logger: this.ctx.logger
+		});
 		this.runner.timingSampler.setLogger(this.ctx.logger.child("timing"));
 		this.runner.onDetectionStreamChange((deviceId, action) => {
 			this.handleDetectionStreamChange(deviceId, action);
@@ -4694,8 +4837,14 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAdd
 			children: s.children ?? []
 		}));
 		const enabledSteps = stepsToRun.filter((s) => s.enabled);
-		const useFastPath = enabledSteps.length === 1 && (!enabledSteps[0].children || enabledSteps[0].children.filter((c) => c.enabled).length === 0) && !input.simulatePipeline;
+		const isSingleStep = enabledSteps.length === 1 && (!enabledSteps[0].children || enabledSteps[0].children.filter((c) => c.enabled).length === 0);
+		const useFastPath = canUseCachedFastPath(isSingleStep, input);
 		const rootStep = enabledSteps[0];
+		const fastPathRefusal = isSingleStep ? fastPathRefusalReason(input) : null;
+		if (fastPathRefusal) ctx.logger.info("synthetic bench: cached fast path declined", { meta: {
+			reason: fastPathRefusal,
+			node: benchNode
+		} });
 		const sharedFrame = {
 			data: cached.data,
 			format: cached.format,
@@ -4715,11 +4864,11 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAdd
 				height: cached.height,
 				format: cached.format
 			}, pin)).frameId;
-			await api.pipelineExecutor.runPipeline.mutate({
+			await api.pipelineExecutor.runPipeline.mutate({ ...buildBenchRunPipelineInput({
 				steps: stepsToRun,
 				frame: sharedFrame,
 				...input.engine ? { engine: input.engine } : {}
-			}, pin);
+			}) }, pin);
 			const warmupCount = input.warmup ?? 1;
 			for (let w = 0; w < warmupCount; w++) await api.pipelineExecutor.inferCached.mutate({
 				stepId: rootStep.addonId,
@@ -4812,16 +4961,20 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAdd
 		}
 		ctx.logger.info("synthetic bench: using full runPipeline path", { meta: {
 			steps: enabledSteps.length,
-			simulatePipeline: !!input.simulatePipeline
+			simulatePipeline: !!input.simulatePipeline,
+			deviceKey: input.deviceKey ?? null,
+			plane: input.plane ?? null
 		} });
 		let _callCount = 0;
 		const callOnce = async () => {
 			const t0 = performance.now();
-			const result = await api.pipelineExecutor.runPipeline.mutate({
+			const result = await api.pipelineExecutor.runPipeline.mutate({ ...buildBenchRunPipelineInput({
 				steps: stepsToRun,
 				frame: sharedFrame,
-				...input.engine ? { engine: input.engine } : {}
-			}, pin);
+				...input.engine ? { engine: input.engine } : {},
+				...input.deviceKey ? { deviceKey: input.deviceKey } : {},
+				...input.plane ? { plane: input.plane } : {}
+			}) }, pin);
 			const wallMs = performance.now() - t0;
 			const n = ++_callCount;
 			if (n <= 20) ctx.logger.info("bench call trace", { meta: {
@@ -6198,6 +6351,18 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAdd
 	* blocked by a missing gate. `label` distinguishes detect vs motion forks in
 	* the logs; the device id is already tagged on `log`.
 	*/
+	/**
+	* The node's live-decode-worker admission, bound to one camera.
+	*
+	* `undefined` when the ceiling is not configured (pre-`onInitialize`), which
+	* `startGuardedSessionDecode` reads as "no ceiling" — the historical
+	* behaviour. Never a queue: see {@link LiveDecodeWorkerAdmission}.
+	*/
+	buildLiveWorkerAdmit(deviceId, label) {
+		const admission = this.liveWorkers;
+		if (!admission) return void 0;
+		return () => admission.admit(deviceId, label);
+	}
 	buildDecodeSpawnAcquire(log, label) {
 		return async () => {
 			const gate = this.spawnGate;
@@ -6225,6 +6390,7 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAdd
 		const requestedAt = Date.now();
 		const teardown = startGuardedSessionDecode({
 			logger: log,
+			admitWorker: this.buildLiveWorkerAdmit(config.deviceId, "detect"),
 			acquire: () => this.acquireSessionDecodeRestream(api, config.deviceId, config.detectionStreamId, `session-decode:detect:${config.deviceId}`, resolveSessionDecodeHostname(config, process.env["CAMSTACK_HUB_URL"]), resolveSessionDecodeOwnerNodeId(config), true),
 			startPump: (source) => {
 				const dialMs = Date.now() - requestedAt;
@@ -6297,6 +6463,7 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAdd
 		if (!runner) return () => {};
 		return startGuardedSessionDecode({
 			logger: log,
+			admitWorker: this.buildLiveWorkerAdmit(config.deviceId, "motion"),
 			acquire: () => this.acquireSessionDecodeRestream(api, config.deviceId, config.motionStreamId, `session-decode:motion:${config.deviceId}`, resolveSessionDecodeHostname(config, process.env["CAMSTACK_HUB_URL"]), resolveSessionDecodeOwnerNodeId(config)),
 			startPump: (source) => {
 				log.info("session-decode: motion routed through per-session decode worker (gray)", { meta: {
@@ -6853,6 +7020,7 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAdd
 		}, OCCUPANCY_BURST_SAFETY_TIMEOUT_MS);
 		teardown = startGuardedSessionDecode({
 			logger: log,
+			admitWorker: this.buildLiveWorkerAdmit(deviceId, "occupancy"),
 			acquire: () => this.acquireSessionDecodeRestream(api, config.deviceId, config.detectionStreamId, `session-decode:occupancy:${config.deviceId}`, resolveSessionDecodeHostname(config, process.env["CAMSTACK_HUB_URL"]), resolveSessionDecodeOwnerNodeId(config)),
 			startPump: (source) => startSessionDecodePump({
 				fork: this.forkDecodeWorkerWithLease,
@@ -7026,6 +7194,17 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAdd
 					step: 1,
 					default: DEFAULT_CONFIG.maxConcurrentDecodeSpawns,
 					showValue: true
+				},
+				{
+					type: "slider",
+					key: "maxLiveDecodeWorkers",
+					label: "Max live decode workers",
+					description: "Hard ceiling on decode workers ALIVE at once on this node (~320 MB of RAM each). Unlike the spawn gate above, which only limits how fast workers START, this limits how many EXIST. A camera that does not fit is REFUSED and logged, then retried automatically as soon as a slot frees — it is never queued, because a queued live session would decode a moment that has already passed. Raise it if the node has RAM to spare; lower it if the host is memory-constrained.",
+					min: 1,
+					max: 32,
+					step: 1,
+					default: DEFAULT_CONFIG.maxLiveDecodeWorkers,
+					showValue: true
 				}
 			]
 		}] });
@@ -7033,12 +7212,14 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAdd
 	async onConfigChanged() {
 		this.runner?.updateLimits(this.config);
 		this.spawnGate?.resize(Math.max(1, this.config.maxConcurrentDecodeSpawns));
+		this.liveWorkers?.resize(this.config.maxLiveDecodeWorkers);
 		this.ctx.logger.info("pipeline-runner tuning updated", { meta: {
 			maxQueueDepth: this.config.maxQueueDepth,
 			maxConcurrentInferences: this.config.maxConcurrentInferences,
 			targetLoadPercent: this.config.targetLoadPercent,
 			minThrottledFps: this.config.minThrottledFps,
-			maxConcurrentDecodeSpawns: this.config.maxConcurrentDecodeSpawns
+			maxConcurrentDecodeSpawns: this.config.maxConcurrentDecodeSpawns,
+			maxLiveDecodeWorkers: this.config.maxLiveDecodeWorkers
 		} });
 	}
 };