Connect the production entry points to the detached worker machinery. - Worker body de-framing: WorkerInput reconstructs the raw media off the fd-passed push connection — prepend the bytes main read past the headers (Prebuf) then de-chunk if the push used chunked transfer-encoding (httputil.NewChunkedReader). The socket-mode subcommand applies it. - MKVIngestDetached: main's hijacked push connection → fd-pass to a detached worker on a per-session unix socket → consume its frames into ValidateMP4 with reconnect; reap on clean end, leave running on a main-shutdown ctx cancel. - ResumeDetachedWorkers: at startup, discover sockets of workers that outlived a restart and resume draining them. Wired into runMain under --isolated-ingest. - handleIncomingStream: with --isolated-ingest, hijack the authed push and route to MKVIngestDetached (falling back to the fd-4-pipe isolation when the connection can't be hijacked). TestWorkerInputDeframes covers the prebuf + chunked de-framing deterministically. The detached lifecycle (spawn/discover/reconnect/serve) is proven by TestDetachedWorkerZeroDowntime; the buffer-across-restart by the frameServer tests. The api hijack glue is thin over those tested pieces and is the one bit that still needs a real-push integration check (no in-container harness for it). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>