@camstack/types 1.2.224 → 1.2.226

package/dist/node.js

@@ -21,7 +21,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_canonical_hash = require("./canonical-hash-DYsYm8is.js");
+const require_canonical_hash = require("./canonical-hash-CSE4ioRi.js");
 const require_err_msg = require("./err-msg-COpsHMw2.js");
 let node_crypto = require("node:crypto");
 let node_fs = require("node:fs");
@@ -185,16 +185,208 @@ async function ensureBinary(opts) {
 	});
 }
 //#endregion
+//#region src/ffmpeg/binary-capabilities.ts
+/**
+* What an ffmpeg binary can actually DO, asked of the binary itself.
+*
+* ## The failure this exists to end
+*
+* `ensureFfmpeg` prefers a downloaded STATIC build over the system one, and a
+* static build is compiled for portability: no vendor libraries, no VAAPI, no
+* QSV. On a machine with a working Intel iGPU that is precisely backwards, and
+* the symptom does not say so. Measured on the hub, 2026-09-18:
+*
+* ```
+* /data/deps/ffmpeg   7.0.2 johnvansickle static   hwaccels: vdpau
+* /usr/bin/ffmpeg     6.1.1 Ubuntu, in the image   hwaccels: vdpau cuda vaapi qsv drm opencl vulkan
+* ```
+*
+* Every consumer that went through `ensureFfmpeg` — the broker's egress and
+* derived transcodes, the WebRTC transcode leg, the camera grid — asked for
+* `-hwaccel vaapi`, got `Device creation failed: -12`, and fell back to
+* software. `-12` is what fftools prints when `av_hwdevice_ctx_alloc` returns
+* NULL because the type is not in the build: the NAME parses, so the request
+* looks valid and the device simply cannot exist. It reads as a resource
+* problem and is a build property.
+*
+* ## Why asking the kernel was not enough
+*
+* The existing hardware resolver answers from `/dev/dri` presence. That is a
+* correct description of the NODE, and it is what `node-av` needs — the
+* detection workers were on VAAPI the whole time. It says nothing about the
+* separate binary a child will be spawned with, and it was being read as
+* though it did.
+*
+* So: two questions, two answers. What does this node HAVE (the resolver), and
+* what can this BINARY use (here). A backend needs both.
+*/
+/** How long a probe may take before the binary counts as unusable. */
+var PROBE_TIMEOUT_MS = 5e3;
+function run(path, args) {
+	return new Promise((resolve) => {
+		(0, node_child_process.execFile)(path, [...args], { timeout: PROBE_TIMEOUT_MS }, (error, stdout) => {
+			resolve(error ? "" : stdout);
+		});
+	});
+}
+/**
+* `-hwaccels` prints a header line and then one name per line. Anything with a
+* space in it is prose, not a name.
+*/
+function parseNames(output) {
+	const names = /* @__PURE__ */ new Set();
+	for (const raw of output.split("\n")) {
+		const line = raw.trim();
+		if (line.length === 0 || line.includes(" ")) continue;
+		names.add(line);
+	}
+	return names;
+}
+/**
+* `-encoders` prints a LEGEND and then a table, separated by a dashed line:
+*
+* ```
+* Encoders:
+*  V..... = Video
+*  .F.... = Frame-level multithreading
+*  ------
+*  V....D h264_vaapi           H.264/AVC (VAAPI) (codec h264)
+* ```
+*
+* The legend rows have the SAME leading flag shape as the table rows, so a
+* pattern alone matches ` V..... = Video` and yields `=` as an encoder name.
+* Verified against the hub's own output on 2026-09-18, which is how that was
+* caught. So the separator is the parser's state: nothing counts before it.
+*/
+function parseEncoders(output) {
+	const names = /* @__PURE__ */ new Set();
+	let inTable = false;
+	for (const raw of output.split("\n")) {
+		if (!inTable) {
+			if (raw.trim().startsWith("---")) inTable = true;
+			continue;
+		}
+		const match = /^\s[VAS][.F][.S][.X][.B][.D]\s+(\S+)/.exec(raw);
+		if (match?.[1] !== void 0) names.add(match[1]);
+	}
+	return names;
+}
+/**
+* Turn three raw outputs into capabilities. Separated from the spawning so the
+* parsers can be held against what ffmpeg REALLY prints — which is how the
+* legend rows were caught being read as encoder names.
+*/
+function parseFfmpegCapabilities(path, versionOut, hwaccelOut, encoderOut) {
+	return {
+		path,
+		version: versionOut.split("\n")[0]?.trim() ?? "",
+		hwaccels: parseNames(hwaccelOut),
+		encoders: parseEncoders(encoderOut)
+	};
+}
+/** Ask one binary what it can do. Never throws — an unusable binary answers empty. */
+async function probeFfmpegBinary(path) {
+	const [versionOut, hwaccelOut, encoderOut] = await Promise.all([
+		run(path, ["-hide_banner", "-version"]),
+		run(path, ["-hide_banner", "-hwaccels"]),
+		run(path, ["-hide_banner", "-encoders"])
+	]);
+	return parseFfmpegCapabilities(path, versionOut, hwaccelOut, encoderOut);
+}
+//#endregion
+//#region src/deps/ffmpeg-binary-source.ts
+/**
+* WHICH ffmpeg a node runs, and why it is never the host's.
+*
+* CamStack spawns ffmpeg for the broker's egress and derived transcodes, the
+* WebRTC transcode leg, the recorder, snapshots and the camera grid. What that
+* binary is compiled with decides whether any of them can use the machine's
+* hardware, so it is not a detail to leave to whatever the host happens to have
+* on its PATH:
+*
+* - a host binary is an unknown version with unknown vendor libraries, and it
+*   changes under us on any host update;
+* - a self-hosted NVR cannot assume the host has ffmpeg at all.
+*
+* So the binary is always OURS. Two ways it can be ours, and which one applies
+* is a property of where the node runs — not of an environment variable:
+*
+* | Node | Binary |
+* | --- | --- |
+* | our container image | {@link BUNDLED_FFMPEG_PATH}, installed by the image |
+* | anything else (a native macOS agent) | the static build we download into `<dataDir>/deps` |
+*
+* `BUNDLED_FFMPEG_PATH` is a CamStack-owned path that only our image creates
+* (a link to the ffmpeg the image installs). That is what makes "is this ours?"
+* answerable: `/usr/bin/ffmpeg` is ours INSIDE the image and the host's outside
+* it, and nothing in the process can tell those apart. A path only we ever
+* write can.
+*
+* The image build is the reason to prefer it over the download: the image
+* installs Ubuntu's ffmpeg next to the Intel media driver, so it carries VAAPI
+* and QSV. The portable static builds carry neither — measured on the hub,
+* 2026-09-18:
+*
+* ```
+* /data/deps/ffmpeg   7.0.2 johnvansickle static   hwaccels: vdpau
+* /usr/bin/ffmpeg     6.1.1 Ubuntu, in the image   hwaccels: vdpau cuda vaapi qsv drm opencl vulkan
+* ```
+*
+* A child spawned with the first one asks for `-hwaccel vaapi` and gets
+* `Device creation failed: -12` — the name parses, the device cannot exist —
+* then transcodes in software with nothing naming the cause.
+*
+* {@link FFMPEG_PATH_ENV} is an operator's VOLUNTARY override, and only that:
+* unset is the normal, correct state on every node, and nothing in the product
+* sets it.
+*/
+/** Where our container image puts the ffmpeg it installs. Only the image writes this. */
+var BUNDLED_FFMPEG_PATH = "/opt/camstack/bin/ffmpeg";
+/** Operator override. Unset on every node unless a human deliberately set it. */
+var FFMPEG_PATH_ENV = "CAMSTACK_FFMPEG_PATH";
+/**
+* The binary to use, or `null` when there is nothing yet and one must be
+* downloaded.
+*
+* An override that does not exist is NOT silently skipped — it is an operator
+* mistake, and falling through to a different binary than the one they named
+* would hide it. The caller reports it and carries on with the default, which
+* is the only safe direction: a typo must not stop a node from serving video.
+*/
+function chooseFfmpegBinary(input) {
+	const override = input.override?.trim() ?? "";
+	if (override.length > 0 && input.exists(override)) return {
+		origin: "override",
+		path: override
+	};
+	const bundled = bundledFfmpegPath(input.platform);
+	if (bundled !== null && input.exists(bundled)) return {
+		origin: "bundled",
+		path: bundled
+	};
+	if (input.exists(input.downloadedPath)) return {
+		origin: "downloaded",
+		path: input.downloadedPath
+	};
+	return null;
+}
+/** The image-provided path for a platform, or `null` where we ship no image. */
+function bundledFfmpegPath(platform) {
+	return platform === "linux" ? BUNDLED_FFMPEG_PATH : null;
+}
+//#endregion
 //#region src/deps/ffmpeg-downloader.ts
 /**
-* Download ffmpeg static build for the current platform.
+* The ffmpeg binary a node runs, and the static build we download when no image
+* provided one.
 *
-* Sources:
-* - Linux: https://johnvansickle.com/ffmpeg/ (static builds)
-* - macOS: https://evermeet.cx/ffmpeg/ or homebrew
+* Which binary, and why it is never the host's, is in `ffmpeg-binary-source.ts`.
+* This module is the download half: the URLs, and the resolution that reports
+* what it picked.
 *
-* Using BtbN's GitHub releases as they cover both platforms:
-* https://github.com/BtbN/FFmpeg-Builds/releases
+* Sources for the download:
+* - Linux: https://johnvansickle.com/ffmpeg/ (static builds)
+* - macOS: https://www.osxexperts.net/
 */
 var FFMPEG_VERSION = "7.1";
 function getFfmpegDownloadUrl(platform, arch) {
@@ -232,21 +424,48 @@ function getFfmpegArchiveInfo(platform) {
 	}
 }
 /**
-* Ensure ffmpeg binary is available.
-* Checks: deps dir → system PATH → download.
+* Ensure an ffmpeg binary WE provide is available on this node, and report
+* which one and what it can do.
+*
+* Order: the operator's voluntary override → the one our image installed → a
+* copy we already downloaded → download it. The system PATH is not in that
+* list and must never be: see `ffmpeg-binary-source.ts`.
+*
+* The line it logs is the point as much as the path is. "Which ffmpeg am I
+* running, and does it have vaapi" had no answer anywhere in the product, and
+* that is what let a hardware-incapable binary serve every transcode on a hub
+* with a working iGPU for months, silently in software.
 */
 async function ensureFfmpeg(dataDir, logger) {
 	const depsDir = (0, node_path.join)(dataDir, "deps");
 	const platform = process.platform;
 	const arch = process.arch;
-	const archiveInfo = getFfmpegArchiveInfo(platform);
-	return ensureBinary({
+	const ext = platform === "win32" ? ".exe" : "";
+	const downloadedPath = (0, node_path.join)(depsDir, `ffmpeg${ext}`);
+	const override = process.env[FFMPEG_PATH_ENV];
+	const chosen = chooseFfmpegBinary({
+		platform,
+		downloadedPath,
+		override,
+		exists: node_fs.existsSync
+	});
+	if (override !== void 0 && override.trim().length > 0 && chosen?.origin !== "override") logger.error(`${FFMPEG_PATH_ENV} names a binary that does not exist — ignoring it`, { meta: { [FFMPEG_PATH_ENV]: override } });
+	const path = chosen?.path ?? await downloadBinary({
 		name: "ffmpeg",
+		url: getFfmpegDownloadUrl(platform, arch),
 		targetDir: depsDir,
-		downloadUrl: getFfmpegDownloadUrl(platform, arch),
+		targetName: `ffmpeg${ext}`,
 		logger,
-		...archiveInfo
+		...getFfmpegArchiveInfo(platform)
 	});
+	const capabilities = await probeFfmpegBinary(path);
+	logger.info("ffmpeg binary resolved", { meta: {
+		path,
+		origin: chosen?.origin ?? "downloaded",
+		version: capabilities.version,
+		hwaccels: [...capabilities.hwaccels].join(",") || "none"
+	} });
+	return path;
 }
 //#endregion
 //#region src/deps/python-downloader.ts
@@ -1751,9 +1970,11 @@ exports.getPythonDownloadUrl = getPythonDownloadUrl;
 exports.installPythonPackages = installPythonPackages;
 exports.installPythonRequirements = installPythonRequirements;
 exports.nodeProcStatReader = nodeProcStatReader;
+exports.parseFfmpegCapabilities = parseFfmpegCapabilities;
 exports.parseProcCpuSeconds = parseProcCpuSeconds;
 exports.parseProcRssBytes = parseProcRssBytes;
 exports.physicalRootOf = physicalRootOf;
+exports.probeFfmpegBinary = probeFfmpegBinary;
 exports.readProcessCost = readProcessCost;
 exports.resolveExportFingerprint = resolveExportFingerprint;
 exports.signExpiringUrl = signExpiringUrl;

package/dist/node.mjs

@@ -1,4 +1,4 @@
-import { n as Fmp4BoxSplitter, o as buildFfmpegArgs, t as canonicalHash, u as isSoftwareDecode } from "./canonical-hash-CvL03d3i.mjs";
+import { n as Fmp4BoxSplitter, o as buildFfmpegArgs, t as canonicalHash, u as isSoftwareDecode } from "./canonical-hash-CPK2Dy60.mjs";
 import { t as errMsg } from "./err-msg-IQTHeDzc.mjs";
 import { createHash, createHmac, randomUUID, timingSafeEqual } from "node:crypto";
 import * as fs from "node:fs";
@@ -7,7 +7,7 @@ import * as path$1 from "node:path";
 import path, { basename, join } from "node:path";
 import { pipeline } from "node:stream/promises";
 import { Readable } from "node:stream";
-import { execFileSync, spawn } from "node:child_process";
+import { execFile, execFileSync, spawn } from "node:child_process";
 import { readFile } from "node:fs/promises";
 //#region src/deps/binary-downloader.ts
 /**
@@ -162,16 +162,208 @@ async function ensureBinary(opts) {
 	});
 }
 //#endregion
+//#region src/ffmpeg/binary-capabilities.ts
+/**
+* What an ffmpeg binary can actually DO, asked of the binary itself.
+*
+* ## The failure this exists to end
+*
+* `ensureFfmpeg` prefers a downloaded STATIC build over the system one, and a
+* static build is compiled for portability: no vendor libraries, no VAAPI, no
+* QSV. On a machine with a working Intel iGPU that is precisely backwards, and
+* the symptom does not say so. Measured on the hub, 2026-09-18:
+*
+* ```
+* /data/deps/ffmpeg   7.0.2 johnvansickle static   hwaccels: vdpau
+* /usr/bin/ffmpeg     6.1.1 Ubuntu, in the image   hwaccels: vdpau cuda vaapi qsv drm opencl vulkan
+* ```
+*
+* Every consumer that went through `ensureFfmpeg` — the broker's egress and
+* derived transcodes, the WebRTC transcode leg, the camera grid — asked for
+* `-hwaccel vaapi`, got `Device creation failed: -12`, and fell back to
+* software. `-12` is what fftools prints when `av_hwdevice_ctx_alloc` returns
+* NULL because the type is not in the build: the NAME parses, so the request
+* looks valid and the device simply cannot exist. It reads as a resource
+* problem and is a build property.
+*
+* ## Why asking the kernel was not enough
+*
+* The existing hardware resolver answers from `/dev/dri` presence. That is a
+* correct description of the NODE, and it is what `node-av` needs — the
+* detection workers were on VAAPI the whole time. It says nothing about the
+* separate binary a child will be spawned with, and it was being read as
+* though it did.
+*
+* So: two questions, two answers. What does this node HAVE (the resolver), and
+* what can this BINARY use (here). A backend needs both.
+*/
+/** How long a probe may take before the binary counts as unusable. */
+var PROBE_TIMEOUT_MS = 5e3;
+function run(path, args) {
+	return new Promise((resolve) => {
+		execFile(path, [...args], { timeout: PROBE_TIMEOUT_MS }, (error, stdout) => {
+			resolve(error ? "" : stdout);
+		});
+	});
+}
+/**
+* `-hwaccels` prints a header line and then one name per line. Anything with a
+* space in it is prose, not a name.
+*/
+function parseNames(output) {
+	const names = /* @__PURE__ */ new Set();
+	for (const raw of output.split("\n")) {
+		const line = raw.trim();
+		if (line.length === 0 || line.includes(" ")) continue;
+		names.add(line);
+	}
+	return names;
+}
+/**
+* `-encoders` prints a LEGEND and then a table, separated by a dashed line:
+*
+* ```
+* Encoders:
+*  V..... = Video
+*  .F.... = Frame-level multithreading
+*  ------
+*  V....D h264_vaapi           H.264/AVC (VAAPI) (codec h264)
+* ```
+*
+* The legend rows have the SAME leading flag shape as the table rows, so a
+* pattern alone matches ` V..... = Video` and yields `=` as an encoder name.
+* Verified against the hub's own output on 2026-09-18, which is how that was
+* caught. So the separator is the parser's state: nothing counts before it.
+*/
+function parseEncoders(output) {
+	const names = /* @__PURE__ */ new Set();
+	let inTable = false;
+	for (const raw of output.split("\n")) {
+		if (!inTable) {
+			if (raw.trim().startsWith("---")) inTable = true;
+			continue;
+		}
+		const match = /^\s[VAS][.F][.S][.X][.B][.D]\s+(\S+)/.exec(raw);
+		if (match?.[1] !== void 0) names.add(match[1]);
+	}
+	return names;
+}
+/**
+* Turn three raw outputs into capabilities. Separated from the spawning so the
+* parsers can be held against what ffmpeg REALLY prints — which is how the
+* legend rows were caught being read as encoder names.
+*/
+function parseFfmpegCapabilities(path, versionOut, hwaccelOut, encoderOut) {
+	return {
+		path,
+		version: versionOut.split("\n")[0]?.trim() ?? "",
+		hwaccels: parseNames(hwaccelOut),
+		encoders: parseEncoders(encoderOut)
+	};
+}
+/** Ask one binary what it can do. Never throws — an unusable binary answers empty. */
+async function probeFfmpegBinary(path) {
+	const [versionOut, hwaccelOut, encoderOut] = await Promise.all([
+		run(path, ["-hide_banner", "-version"]),
+		run(path, ["-hide_banner", "-hwaccels"]),
+		run(path, ["-hide_banner", "-encoders"])
+	]);
+	return parseFfmpegCapabilities(path, versionOut, hwaccelOut, encoderOut);
+}
+//#endregion
+//#region src/deps/ffmpeg-binary-source.ts
+/**
+* WHICH ffmpeg a node runs, and why it is never the host's.
+*
+* CamStack spawns ffmpeg for the broker's egress and derived transcodes, the
+* WebRTC transcode leg, the recorder, snapshots and the camera grid. What that
+* binary is compiled with decides whether any of them can use the machine's
+* hardware, so it is not a detail to leave to whatever the host happens to have
+* on its PATH:
+*
+* - a host binary is an unknown version with unknown vendor libraries, and it
+*   changes under us on any host update;
+* - a self-hosted NVR cannot assume the host has ffmpeg at all.
+*
+* So the binary is always OURS. Two ways it can be ours, and which one applies
+* is a property of where the node runs — not of an environment variable:
+*
+* | Node | Binary |
+* | --- | --- |
+* | our container image | {@link BUNDLED_FFMPEG_PATH}, installed by the image |
+* | anything else (a native macOS agent) | the static build we download into `<dataDir>/deps` |
+*
+* `BUNDLED_FFMPEG_PATH` is a CamStack-owned path that only our image creates
+* (a link to the ffmpeg the image installs). That is what makes "is this ours?"
+* answerable: `/usr/bin/ffmpeg` is ours INSIDE the image and the host's outside
+* it, and nothing in the process can tell those apart. A path only we ever
+* write can.
+*
+* The image build is the reason to prefer it over the download: the image
+* installs Ubuntu's ffmpeg next to the Intel media driver, so it carries VAAPI
+* and QSV. The portable static builds carry neither — measured on the hub,
+* 2026-09-18:
+*
+* ```
+* /data/deps/ffmpeg   7.0.2 johnvansickle static   hwaccels: vdpau
+* /usr/bin/ffmpeg     6.1.1 Ubuntu, in the image   hwaccels: vdpau cuda vaapi qsv drm opencl vulkan
+* ```
+*
+* A child spawned with the first one asks for `-hwaccel vaapi` and gets
+* `Device creation failed: -12` — the name parses, the device cannot exist —
+* then transcodes in software with nothing naming the cause.
+*
+* {@link FFMPEG_PATH_ENV} is an operator's VOLUNTARY override, and only that:
+* unset is the normal, correct state on every node, and nothing in the product
+* sets it.
+*/
+/** Where our container image puts the ffmpeg it installs. Only the image writes this. */
+var BUNDLED_FFMPEG_PATH = "/opt/camstack/bin/ffmpeg";
+/** Operator override. Unset on every node unless a human deliberately set it. */
+var FFMPEG_PATH_ENV = "CAMSTACK_FFMPEG_PATH";
+/**
+* The binary to use, or `null` when there is nothing yet and one must be
+* downloaded.
+*
+* An override that does not exist is NOT silently skipped — it is an operator
+* mistake, and falling through to a different binary than the one they named
+* would hide it. The caller reports it and carries on with the default, which
+* is the only safe direction: a typo must not stop a node from serving video.
+*/
+function chooseFfmpegBinary(input) {
+	const override = input.override?.trim() ?? "";
+	if (override.length > 0 && input.exists(override)) return {
+		origin: "override",
+		path: override
+	};
+	const bundled = bundledFfmpegPath(input.platform);
+	if (bundled !== null && input.exists(bundled)) return {
+		origin: "bundled",
+		path: bundled
+	};
+	if (input.exists(input.downloadedPath)) return {
+		origin: "downloaded",
+		path: input.downloadedPath
+	};
+	return null;
+}
+/** The image-provided path for a platform, or `null` where we ship no image. */
+function bundledFfmpegPath(platform) {
+	return platform === "linux" ? BUNDLED_FFMPEG_PATH : null;
+}
+//#endregion
 //#region src/deps/ffmpeg-downloader.ts
 /**
-* Download ffmpeg static build for the current platform.
+* The ffmpeg binary a node runs, and the static build we download when no image
+* provided one.
 *
-* Sources:
-* - Linux: https://johnvansickle.com/ffmpeg/ (static builds)
-* - macOS: https://evermeet.cx/ffmpeg/ or homebrew
+* Which binary, and why it is never the host's, is in `ffmpeg-binary-source.ts`.
+* This module is the download half: the URLs, and the resolution that reports
+* what it picked.
 *
-* Using BtbN's GitHub releases as they cover both platforms:
-* https://github.com/BtbN/FFmpeg-Builds/releases
+* Sources for the download:
+* - Linux: https://johnvansickle.com/ffmpeg/ (static builds)
+* - macOS: https://www.osxexperts.net/
 */
 var FFMPEG_VERSION = "7.1";
 function getFfmpegDownloadUrl(platform, arch) {
@@ -209,21 +401,48 @@ function getFfmpegArchiveInfo(platform) {
 	}
 }
 /**
-* Ensure ffmpeg binary is available.
-* Checks: deps dir → system PATH → download.
+* Ensure an ffmpeg binary WE provide is available on this node, and report
+* which one and what it can do.
+*
+* Order: the operator's voluntary override → the one our image installed → a
+* copy we already downloaded → download it. The system PATH is not in that
+* list and must never be: see `ffmpeg-binary-source.ts`.
+*
+* The line it logs is the point as much as the path is. "Which ffmpeg am I
+* running, and does it have vaapi" had no answer anywhere in the product, and
+* that is what let a hardware-incapable binary serve every transcode on a hub
+* with a working iGPU for months, silently in software.
 */
 async function ensureFfmpeg(dataDir, logger) {
 	const depsDir = join(dataDir, "deps");
 	const platform = process.platform;
 	const arch = process.arch;
-	const archiveInfo = getFfmpegArchiveInfo(platform);
-	return ensureBinary({
+	const ext = platform === "win32" ? ".exe" : "";
+	const downloadedPath = join(depsDir, `ffmpeg${ext}`);
+	const override = process.env[FFMPEG_PATH_ENV];
+	const chosen = chooseFfmpegBinary({
+		platform,
+		downloadedPath,
+		override,
+		exists: existsSync
+	});
+	if (override !== void 0 && override.trim().length > 0 && chosen?.origin !== "override") logger.error(`${FFMPEG_PATH_ENV} names a binary that does not exist — ignoring it`, { meta: { [FFMPEG_PATH_ENV]: override } });
+	const path = chosen?.path ?? await downloadBinary({
 		name: "ffmpeg",
+		url: getFfmpegDownloadUrl(platform, arch),
 		targetDir: depsDir,
-		downloadUrl: getFfmpegDownloadUrl(platform, arch),
+		targetName: `ffmpeg${ext}`,
 		logger,
-		...archiveInfo
+		...getFfmpegArchiveInfo(platform)
 	});
+	const capabilities = await probeFfmpegBinary(path);
+	logger.info("ffmpeg binary resolved", { meta: {
+		path,
+		origin: chosen?.origin ?? "downloaded",
+		version: capabilities.version,
+		hwaccels: [...capabilities.hwaccels].join(",") || "none"
+	} });
+	return path;
 }
 //#endregion
 //#region src/deps/python-downloader.ts
@@ -1705,4 +1924,4 @@ function resolveExportFingerprint(input) {
 	return input.persisted ?? input.fresh;
 }
 //#endregion
-export { ChildCostRegistry, FfmpegProcess, FilesystemStorageProvider, Fmp4FragmentChild, Fmp4FragmentPlane, NO_COST_CLAIM, PYTHON_VERSION, buildBinaryPath, canonicalDeviceFingerprint, canonicalHash, containsOrEquals, diffExportTargets, downloadBinary, ensureBinary, ensureFfmpeg, ensurePython, findInPath, getFfmpegDownloadUrl, getPlatformInfo, getPythonDownloadUrl, installPythonPackages, installPythonRequirements, nodeProcStatReader, parseProcCpuSeconds, parseProcRssBytes, physicalRootOf, readProcessCost, resolveExportFingerprint, signExpiringUrl, verifyExpiringUrl };
+export { ChildCostRegistry, FfmpegProcess, FilesystemStorageProvider, Fmp4FragmentChild, Fmp4FragmentPlane, NO_COST_CLAIM, PYTHON_VERSION, buildBinaryPath, canonicalDeviceFingerprint, canonicalHash, containsOrEquals, diffExportTargets, downloadBinary, ensureBinary, ensureFfmpeg, ensurePython, findInPath, getFfmpegDownloadUrl, getPlatformInfo, getPythonDownloadUrl, installPythonPackages, installPythonRequirements, nodeProcStatReader, parseFfmpegCapabilities, parseProcCpuSeconds, parseProcRssBytes, physicalRootOf, probeFfmpegBinary, readProcessCost, resolveExportFingerprint, signExpiringUrl, verifyExpiringUrl };

package/dist/{sleep-GU_us3DG.mjs → sleep-CiR4z7r9.mjs}

@@ -1362,6 +1362,17 @@ var CAM_PROFILE_ORDER = [
 	"mid",
 	"low"
 ];
+/**
+* Which rung a per-camera consumer listens on: an explicit profile, or `auto`.
+*
+* `auto` is a REAL value, not an absent one — it means "resolve it by the rule
+* that consumer owns". It lives beside `CamProfile` because a rung is the only
+* operator-facing way to name a stream: a cam-stream id is broker-internal and
+* moves when a slot is reassigned, so a stored id silently stops meaning what
+* the operator picked. Today's one user is the audio analyser, whose rule is
+* "the lowest AVAILABLE native rung" (D537).
+*/
+var AudioStreamPickSchema = z.union([CamProfileSchema, z.literal("auto")]);
 var CamStreamKindSchema = z.enum([
 	"pull-rtsp",
 	"pull-rtmp",
@@ -3880,7 +3891,8 @@ function createDeviceProxy(api, binding, opts) {
 			getIceCandidates: (input) => dispatch("webrtc-session", "webrtcSession", "getIceCandidates", "query", input),
 			closeSession: (input) => dispatch("webrtc-session", "webrtcSession", "closeSession", "mutation", input),
 			hasAdaptiveBitrate: (input) => dispatch("webrtc-session", "webrtcSession", "hasAdaptiveBitrate", "query", input),
-			getSessionState: (input) => dispatch("webrtc-session", "webrtcSession", "getSessionState", "query", input)
+			getSessionState: (input) => dispatch("webrtc-session", "webrtcSession", "getSessionState", "query", input),
+			getSessionDebug: (input) => dispatch("webrtc-session", "webrtcSession", "getSessionDebug", "query", input)
 		},
 		zoneAnalytics: {
 			getCurrentSnapshot: (input) => dispatch("zone-analytics", "zoneAnalytics", "getCurrentSnapshot", "query", input),
@@ -4320,4 +4332,4 @@ function sleepCancellable(ms, signal) {
 	});
 }
 //#endregion
-export { CAM_PROFILE_ORDER as $, DeviceType as A, isEvent as At, systemMethod as B, isAudioChunkFormat as Bt, customAction as C, SHARE_VIEW_KINDS as Ct, ChargingStatus as D, createDurableState as Dt, deviceCustomAction as E, normalizeAddonInitResult as Et, event as F, hydrateSchema as Ft, ReadinessRegistry as G, nodePin as H, expandCapMethods as I, resolveHydratedFieldValue as It, readinessKey as J, ReadinessTimeoutError as K, isDeviceConfigCap as L, AUDIO_CHUNK_FORMATS as Lt, DEFAULT_RUNTIME_STATE_DURABILITY as M, WELL_KNOWN_TAB_MAP as Mt, DEVICE_SETTINGS_CONTRIBUTION_METHODS as N, collectHydratedFieldEntries as Nt, DeviceFeature as O, createEvent as Ot, DEVICE_STATUS_METHOD as P, collectHydratedFieldValues as Pt, BrokerStatusSchema as Q, method as R, audioChunkBytesPerSample as Rt, DEVICE_CHILDREN_BATCH_MAX as S, DATAPLANE_SECRET_HEADER as St, describeCustomActions as T, BaseAddon as Tt, readNodePin as U, CAP_NODE_PIN_CONTEXT_KEY as V, toNodeId as W, AudioChunkFormatSchema as X, scopeKey as Y, BrokerStatsSchema as Z, createMirrorSource as _, SubscribeFramesResultSchema as _t, asJsonObject as a, DecodedFrameSchema as at, deviceOpsCapability as b, parseProfileBrokerId as bt, parseJsonArray as c, FrameHandleSchema as ct, BOOT_RECOVERY_BACKOFF_MS as d, ProfileSlotStatusSchema as dt, CamProfileSchema as et, DEVICE_SCOPED_CAPS as f, StreamSourceEntrySchema$1 as ft, createLazyTrpcSource as g, SubscribeFramesInputSchema as gt, createEventBusSliceSource as h, SubscribeAudioChunksResultSchema as ht, asJsonArray as i, DecodedAudioChunkSchema as it, adminUiCapability as j, WELL_KNOWN_TABS as jt, DeviceRole as k, emitReadiness as kt, parseJsonObject as l, ProfileRtspEntrySchema as lt, createDeviceProxy as m, SubscribeAudioChunksInputSchema as mt, sleepCancellable as n, CamStreamResolutionSchema as nt, asNumber as o, EncodedPacketSchema as ot, isDeviceScopedCap as p, StreamSourceSchema as pt, emitDownForOwnedCaps as q, asBoolean as r, CameraStreamSchema as rt, asString as s, FrameHandleFormatSchema as st, sleep as t, CamStreamKindSchema as tt, parseJsonUnknown as u, ProfileSlotSchema as ut, createSliceHandle as v, makeProfileBrokerId as vt, defineCustomActions as w, DisposerChain as wt, viewerUiCapability as x, selectAssignedProfileSlots as xt, RawStateResultSchema as y, makeSourceBrokerId as yt, resolveCapMount as z, expandAudioChunkToF32le as zt };
+export { BrokerStatusSchema as $, DeviceType as A, emitReadiness as At, systemMethod as B, expandAudioChunkToF32le as Bt, customAction as C, DATAPLANE_SECRET_HEADER as Ct, ChargingStatus as D, normalizeAddonInitResult as Dt, deviceCustomAction as E, BaseAddon as Et, event as F, collectHydratedFieldValues as Ft, ReadinessRegistry as G, nodePin as H, expandCapMethods as I, hydrateSchema as It, readinessKey as J, ReadinessTimeoutError as K, isDeviceConfigCap as L, resolveHydratedFieldValue as Lt, DEFAULT_RUNTIME_STATE_DURABILITY as M, WELL_KNOWN_TABS as Mt, DEVICE_SETTINGS_CONTRIBUTION_METHODS as N, WELL_KNOWN_TAB_MAP as Nt, DeviceFeature as O, createDurableState as Ot, DEVICE_STATUS_METHOD as P, collectHydratedFieldEntries as Pt, BrokerStatsSchema as Q, method as R, AUDIO_CHUNK_FORMATS as Rt, DEVICE_CHILDREN_BATCH_MAX as S, selectAssignedProfileSlots as St, describeCustomActions as T, DisposerChain as Tt, readNodePin as U, CAP_NODE_PIN_CONTEXT_KEY as V, isAudioChunkFormat as Vt, toNodeId as W, AudioChunkFormatSchema as X, scopeKey as Y, AudioStreamPickSchema as Z, createMirrorSource as _, SubscribeFramesInputSchema as _t, asJsonObject as a, DecodedAudioChunkSchema as at, deviceOpsCapability as b, makeSourceBrokerId as bt, parseJsonArray as c, FrameHandleFormatSchema as ct, BOOT_RECOVERY_BACKOFF_MS as d, ProfileSlotSchema as dt, CAM_PROFILE_ORDER as et, DEVICE_SCOPED_CAPS as f, ProfileSlotStatusSchema as ft, createLazyTrpcSource as g, SubscribeAudioChunksResultSchema as gt, createEventBusSliceSource as h, SubscribeAudioChunksInputSchema as ht, asJsonArray as i, CameraStreamSchema as it, adminUiCapability as j, isEvent as jt, DeviceRole as k, createEvent as kt, parseJsonObject as l, FrameHandleSchema as lt, createDeviceProxy as m, StreamSourceSchema as mt, sleepCancellable as n, CamStreamKindSchema as nt, asNumber as o, DecodedFrameSchema as ot, isDeviceScopedCap as p, StreamSourceEntrySchema$1 as pt, emitDownForOwnedCaps as q, asBoolean as r, CamStreamResolutionSchema as rt, asString as s, EncodedPacketSchema as st, sleep as t, CamProfileSchema as tt, parseJsonUnknown as u, ProfileRtspEntrySchema as ut, createSliceHandle as v, SubscribeFramesResultSchema as vt, defineCustomActions as w, SHARE_VIEW_KINDS as wt, viewerUiCapability as x, parseProfileBrokerId as xt, RawStateResultSchema as y, makeProfileBrokerId as yt, resolveCapMount as z, audioChunkBytesPerSample as zt };

package/dist/{sleep-VlZxDyXq.js → sleep-D7DPSeiv.js}

@@ -1362,6 +1362,17 @@ var CAM_PROFILE_ORDER = [
 	"mid",
 	"low"
 ];
+/**
+* Which rung a per-camera consumer listens on: an explicit profile, or `auto`.
+*
+* `auto` is a REAL value, not an absent one — it means "resolve it by the rule
+* that consumer owns". It lives beside `CamProfile` because a rung is the only
+* operator-facing way to name a stream: a cam-stream id is broker-internal and
+* moves when a slot is reassigned, so a stored id silently stops meaning what
+* the operator picked. Today's one user is the audio analyser, whose rule is
+* "the lowest AVAILABLE native rung" (D537).
+*/
+var AudioStreamPickSchema = zod.z.union([CamProfileSchema, zod.z.literal("auto")]);
 var CamStreamKindSchema = zod.z.enum([
 	"pull-rtsp",
 	"pull-rtmp",
@@ -3880,7 +3891,8 @@ function createDeviceProxy(api, binding, opts) {
 			getIceCandidates: (input) => dispatch("webrtc-session", "webrtcSession", "getIceCandidates", "query", input),
 			closeSession: (input) => dispatch("webrtc-session", "webrtcSession", "closeSession", "mutation", input),
 			hasAdaptiveBitrate: (input) => dispatch("webrtc-session", "webrtcSession", "hasAdaptiveBitrate", "query", input),
-			getSessionState: (input) => dispatch("webrtc-session", "webrtcSession", "getSessionState", "query", input)
+			getSessionState: (input) => dispatch("webrtc-session", "webrtcSession", "getSessionState", "query", input),
+			getSessionDebug: (input) => dispatch("webrtc-session", "webrtcSession", "getSessionDebug", "query", input)
 		},
 		zoneAnalytics: {
 			getCurrentSnapshot: (input) => dispatch("zone-analytics", "zoneAnalytics", "getCurrentSnapshot", "query", input),
@@ -4332,6 +4344,12 @@ Object.defineProperty(exports, "AudioChunkFormatSchema", {
 		return AudioChunkFormatSchema;
 	}
 });
+Object.defineProperty(exports, "AudioStreamPickSchema", {
+	enumerable: true,
+	get: function() {
+		return AudioStreamPickSchema;
+	}
+});
 Object.defineProperty(exports, "BOOT_RECOVERY_BACKOFF_MS", {
 	enumerable: true,
 	get: function() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/types",
-  "version": "1.2.224",
+  "version": "1.2.226",
   "description": "Shared types, interfaces, and model catalogs for the CamStack detection ecosystem",
   "keywords": [
     "camstack",