@camstack/system 1.2.314 → 1.2.316

package/dist/{dist-BtNkk3Qz.js → dist-RAl10EfG.js}

@@ -701,7 +701,7 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	return EventCategory;
 }({});
 //#endregion
-//#region ../types/dist/sleep-jkRQgtSc.mjs
+//#region ../types/dist/sleep-E6eD4yQS.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -2777,6 +2777,10 @@ function toNodeId(idOrRunnerId) {
 	const head = idOrRunnerId.split("/")[0];
 	return head === void 0 || head.length === 0 ? idOrRunnerId : head;
 }
+zod.z.object({
+	field: zod.z.string().min(1),
+	on: zod.z.literal("advance")
+});
 /**
 * Resolve the EFFECTIVE mount hint for a cap — the explicit `mount` when
 * present, else the scope/mode/deviceNative-derived default. Single source
@@ -3508,7 +3512,7 @@ function errMsg(err) {
 	return String(err);
 }
 //#endregion
-//#region ../types/dist/composition-CPFIlFfw.mjs
+//#region ../types/dist/composition-D5BQywfe.mjs
 var AUDIO_ENCODER_BY_CODEC = {
 	opus: "libopus",
 	aac: "aac",
@@ -3902,6 +3906,173 @@ function buildFfmpegArgs(inv) {
 	];
 }
 /**
+* LA tabella "quale booleano di questo tipo di device conta come ALTO", e il
+* valutatore puro del suo FRONTE.
+*
+* Viveva dentro il builtin virtual-doorbell
+* (`@camstack/system` — `builtins/doorbell/trigger-engine.ts`) e i suoi
+* predicati erano privati al modulo. Il recorder ne ha bisogno per il trigger
+* `RecordingTriggers.sensorDeviceIds`: copiarla avrebbe creato la SECONDA
+* tabella, che diverge alla prima cap aggiunta e il cui sintomo — "il sensore
+* fa suonare il campanello ma non registra" — è esattamente D62. Quindi si
+* SPOSTA qui e il doorbell la ri-esporta.
+*
+* ⚠ NON è `DEVICE_STATE_READERS` (`catalogs/device-state-vocabulary.ts`), e le
+* due non vanno unificate: quella risponde a "qual è la PAROLA di stato per una
+* regola" (e include `presence`, `cover`, `alarm-panel`), questa a "qual è il
+* booleano il cui FRONTE conta". Vocabolari deliberatamente diversi.
+*/
+/**
+* Known binary / switch source caps → the boolean slice field whose
+* false→true rise counts as ACTIVE. Every entry is "fire on active".
+* Sensors whose "active" reading is not a plain boolean (presence's string
+* state, connectivity's connected flag) are deliberately excluded — a
+* reconnect is not a doorbell press, and it is not a recording either.
+*/
+var SOURCE_CAP_ACTIVE_FIELD = {
+	contact: "entryOpen",
+	binary: "on",
+	switch: "on",
+	motion: "detected",
+	flood: "flooded",
+	gas: "detected",
+	smoke: "detected",
+	"carbon-monoxide": "detected",
+	vibration: "detected",
+	tamper: "tampered"
+};
+/**
+* The same caps → the slice field carrying the ms-epoch timestamp of the
+* last transition. Every source cap MUST appear here (guarded by a spec):
+* without a transition timestamp the evaluator cannot tell a genuine rise
+* from a boot-time hydration when the FIRST slice it ever sees is already
+* active, and errs towards silence — swallowing the rise.
+*
+* These timestamps are UPSTREAM ones, not ingest ones: the Home Assistant
+* provider derives them from `state.last_changed`, so they survive our own
+* restarts and correctly read as "hours ago" for a state that has been
+* active for hours. `motion` names its rise timestamp `lastDetectedAt`.
+*/
+var SOURCE_CAP_CHANGED_AT_FIELD = {
+	contact: "lastChangedAt",
+	binary: "lastChangedAt",
+	switch: "lastChangedAt",
+	motion: "lastDetectedAt",
+	flood: "lastChangedAt",
+	gas: "lastChangedAt",
+	smoke: "lastChangedAt",
+	"carbon-monoxide": "lastChangedAt",
+	vibration: "lastChangedAt",
+	tamper: "lastChangedAt"
+};
+/** Cap names whose presence in a device's bindings qualify it as a source. */
+var SOURCE_CAPS = Object.keys(SOURCE_CAP_ACTIVE_FIELD);
+/** True when a cap is a recognised binary/switch source. */
+function isSourceCap(capName) {
+	return Object.prototype.hasOwnProperty.call(SOURCE_CAP_ACTIVE_FIELD, capName);
+}
+/** Extract the "active" boolean a source cap's slice carries, or null when
+*  the cap is unknown or the field is missing / non-boolean. */
+function sliceActiveValue(capName, slice) {
+	const field = SOURCE_CAP_ACTIVE_FIELD[capName];
+	if (field === void 0) return null;
+	const raw = slice[field];
+	return typeof raw === "boolean" ? raw : null;
+}
+/** Ms-epoch transition timestamp a source cap's slice carries, or null when
+*  it is absent, non-numeric or the zero "never observed" sentinel. */
+function sliceChangedAt(capName, slice) {
+	const field = SOURCE_CAP_CHANGED_AT_FIELD[capName];
+	if (field === void 0) return null;
+	const raw = slice[field];
+	if (typeof raw !== "number" || !Number.isFinite(raw) || raw <= 0) return null;
+	return raw;
+}
+/**
+* How recent a source's own transition timestamp must be for a FIRST
+* sighting that is already active to count as a genuine rise rather than a
+* hydration of long-standing state.
+*/
+var DEFAULT_FIRST_SIGHTING_FRESHNESS_MS = 3e4;
+/**
+* The source-independent edge rule. The caller supplies an already extracted
+* boolean level and source timestamp; this function owns first-sighting
+* freshness and false-to-true detection.
+*/
+function evaluateSensorLevelEdge(input) {
+	const timestamp = input.changedAt;
+	const freshFloor = Math.max(input.startedAtMs, input.nowMs - input.firstSightingFreshnessMs);
+	const firstRise = input.priorLevel === void 0 && input.level && timestamp !== null && Number.isFinite(timestamp) && timestamp >= freshFloor;
+	const transitionRise = input.priorLevel === false && input.level && timestamp !== null && Number.isFinite(timestamp);
+	if ((firstRise || transitionRise) && timestamp !== null) return {
+		kind: "rise",
+		timestamp
+	};
+	return {
+		kind: "none",
+		nextPriorLevel: input.level
+	};
+}
+/**
+* IL fronte. Puro: nessun orologio proprio, nessuna memoria — il chiamante
+* porta `prior`, `nowMs` e il proprio `startedAtMs`.
+*
+* Il caso della PRIMA slice già attiva è trattato esplicitamente e vale come
+* fronte solo se il timestamp UPSTREAM della transizione è posteriore a
+* `startedAtMs` **e** entro `firstSightingFreshnessMs`. Entrambe le metà
+* servono: la sola freschezza scatterebbe su un'idratazione al boot di uno
+* stato flippato pochi secondi prima del riavvio, e il solo "dopo che abbiamo
+* iniziato" scatterebbe, su un processo di lunga vita, per una sorgente
+* adottata oggi il cui stato è cambiato ieri. Il caso ambiguo ERRA VERSO IL
+* SILENZIO e lo dichiara (`baseline-seeded-stale-active`).
+*/
+function evaluateSensorEdge(input) {
+	const value = sliceActiveValue(input.capName, input.slice);
+	if (value === null) return {
+		edge: "none",
+		value: null,
+		reason: isSourceCap(input.capName) ? "non-boolean-value" : "unknown-cap"
+	};
+	if (evaluateSensorLevelEdge({
+		level: value,
+		changedAt: sliceChangedAt(input.capName, input.slice),
+		priorLevel: input.prior,
+		startedAtMs: input.startedAtMs,
+		nowMs: input.nowMs,
+		firstSightingFreshnessMs: input.firstSightingFreshnessMs
+	}).kind === "rise") return {
+		edge: "rising",
+		value: true
+	};
+	if (input.prior === void 0) {
+		if (!value) return {
+			edge: "none",
+			value,
+			reason: "baseline-seeded-inactive"
+		};
+		return {
+			edge: "none",
+			value,
+			reason: "baseline-seeded-stale-active"
+		};
+	}
+	if (input.prior === value) return {
+		edge: "none",
+		value,
+		reason: "no-change"
+	};
+	if (!value) return {
+		edge: "none",
+		value,
+		reason: "falling-edge"
+	};
+	return {
+		edge: "none",
+		value,
+		reason: "missing-timestamp"
+	};
+}
+/**
 * Error types for the safe expression engine. Two distinct classes so callers
 * can tell a compile-time (grammar) failure from a runtime (evaluation)
 * failure — both are non-fatal to the host: read paths degrade to "skip link".
@@ -3924,6 +4095,9 @@ var ExpressionEvalError = class extends Error {
 		this.name = "ExpressionEvalError";
 	}
 };
+function isStatefulBuiltin(name) {
+	return name === "rose" || name === "count";
+}
 function asFiniteNumber(value, name, index) {
 	if (typeof value !== "number" || !Number.isFinite(value)) throw new ExpressionEvalError(`${name}: argument ${index + 1} must be a finite number`);
 	return value;
@@ -3959,6 +4133,37 @@ function toNumberOrNull(value) {
 	const parsed = Number(trimmed);
 	return Number.isFinite(parsed) ? parsed : null;
 }
+var DEFAULT_ROSE_DEBOUNCE_MS = 2e3;
+function evaluateRose(level, changedAt, debounceMs, call, field, env) {
+	const active = asBoolean(level, "rose", 0);
+	const timestamp = typeof changedAt === "number" && Number.isFinite(changedAt) ? changedAt : null;
+	const debounce = debounceMs === void 0 ? DEFAULT_ROSE_DEBOUNCE_MS : asFiniteNumber(debounceMs, "rose", 2);
+	if (debounce < 0) throw new ExpressionEvalError("rose: debounce must be a non-negative finite number");
+	const verdict = evaluateSensorLevelEdge({
+		level: active,
+		changedAt: timestamp,
+		priorLevel: call.priorLevel,
+		startedAtMs: env.startedAtMs,
+		nowMs: env.nowMs,
+		firstSightingFreshnessMs: DEFAULT_FIRST_SIGHTING_FRESHNESS_MS
+	});
+	call.priorLevel = verdict.kind === "rise" ? true : verdict.nextPriorLevel;
+	if (verdict.kind === "none") return env.currentOutput;
+	if (field.acceptedEdgeAt !== null && verdict.timestamp - field.acceptedEdgeAt < debounce) return env.currentOutput;
+	field.acceptedEdgeAt = verdict.timestamp;
+	return verdict.timestamp;
+}
+function evaluateCount(input, call, currentOutput) {
+	const currentCount = typeof currentOutput === "number" && Number.isFinite(currentOutput) && currentOutput >= 0 ? currentOutput : 0;
+	if (typeof input !== "number" || !Number.isFinite(input)) return currentCount;
+	if (call.highWater === null) {
+		call.highWater = input;
+		return currentCount;
+	}
+	if (input <= call.highWater) return currentCount;
+	call.highWater = input;
+	return currentCount + 1;
+}
 var INF = Number.POSITIVE_INFINITY;
 var table = {
 	min: {
@@ -4098,6 +4303,20 @@ var table = {
 			const present = args.flatMap((a, i) => a === null ? [] : [asFiniteNumber(a, "latest", i)]);
 			return present.length === 0 ? null : finiteResult(Math.max(...present), "latest");
 		}
+	},
+	rose: {
+		minArgs: 2,
+		maxArgs: 3,
+		apply: () => {
+			throw new ExpressionEvalError("rose: stateful evaluation context is required");
+		}
+	},
+	count: {
+		minArgs: 1,
+		maxArgs: 1,
+		apply: () => {
+			throw new ExpressionEvalError("count: stateful evaluation context is required");
+		}
 	}
 };
 /** Frozen, null-prototype builtin table. */
@@ -4551,22 +4770,28 @@ function step(ctx) {
 	ctx.steps += 1;
 	if (ctx.steps > ctx.maxSteps) throw new ExpressionEvalError("expression evaluation step budget exceeded");
 }
-function evalNode(node, ctx) {
+function childPath(path, child) {
+	return `${path}/${child}`;
+}
+function evalNode(node, ctx, path) {
 	step(ctx);
 	switch (node.kind) {
 		case "literal": return node.value;
 		case "identifier":
 			if (!(node.name in ctx.scope)) throw new ExpressionEvalError(`unknown identifier: ${node.name}`);
 			return ctx.scope[node.name];
-		case "unary": return evalUnary(node.op, evalNode(node.operand, ctx));
-		case "binary": return evalBinary(node.op, evalNode(node.left, ctx), evalNode(node.right, ctx));
+		case "unary": return evalUnary(node.op, evalNode(node.operand, ctx, childPath(path, "operand")));
+		case "binary": return evalBinary(node.op, evalNode(node.left, ctx, childPath(path, "left")), evalNode(node.right, ctx, childPath(path, "right")));
 		case "logical": {
-			const left = evalNode(node.left, ctx);
-			if (node.op === "&&") return truthy(left) ? evalNode(node.right, ctx) : left;
-			return truthy(left) ? left : evalNode(node.right, ctx);
+			const left = evalNode(node.left, ctx, childPath(path, "left"));
+			if (node.op === "&&") return truthy(left) ? evalNode(node.right, ctx, childPath(path, "right")) : left;
+			return truthy(left) ? left : evalNode(node.right, ctx, childPath(path, "right"));
+		}
+		case "conditional": return truthy(evalNode(node.test, ctx, childPath(path, "test"))) ? evalNode(node.consequent, ctx, childPath(path, "consequent")) : evalNode(node.alternate, ctx, childPath(path, "alternate"));
+		case "call": {
+			const args = node.args.map((arg, index) => evalNode(arg, ctx, childPath(path, `arg:${index}`)));
+			return invokeCall(node.callee, args, path, ctx);
 		}
-		case "conditional": return truthy(evalNode(node.test, ctx)) ? evalNode(node.consequent, ctx) : evalNode(node.alternate, ctx);
-		case "call": return evalCall(node.callee, node.args.map((a) => evalNode(a, ctx)), ctx.hooks);
 	}
 }
 function evalUnary(op, operand) {
@@ -4597,11 +4822,19 @@ function evalBinary(op, left, right) {
 			throw new ExpressionEvalError(`"${op}" requires two numbers or two strings`);
 	}
 }
-function evalCall(callee, args, hooks) {
+function invokeCall(callee, args, path, ctx) {
 	if (!Object.prototype.hasOwnProperty.call(EXPRESSION_BUILTINS, callee)) throw new ExpressionEvalError(`unknown function: ${callee}`);
 	const builtin = EXPRESSION_BUILTINS[callee];
 	if (args.length < builtin.minArgs || args.length > builtin.maxArgs) throw new ExpressionEvalError(`${callee}: wrong number of arguments (${args.length})`);
-	return builtin.apply(args, hooks);
+	if (isStatefulBuiltin(callee)) {
+		if (ctx.invokeStateful === void 0) throw new ExpressionEvalError(`${callee}: stateful evaluation context is required`);
+		return ctx.invokeStateful({
+			name: callee,
+			path,
+			args
+		});
+	}
+	return builtin.apply(args, ctx.hooks);
 }
 /** Evaluate an AST node against a scope. Throws `ExpressionEvalError` on any
 *  runtime failure (unknown identifier, type mismatch, non-finite result,
@@ -4611,8 +4844,44 @@ function evaluateAst(node, scope, opts) {
 		scope,
 		hooks: opts?.hooks ?? EMPTY_HOOKS,
 		maxSteps: opts?.maxSteps ?? 4096,
+		...opts?.invokeStateful === void 0 ? {} : { invokeStateful: opts.invokeStateful },
 		steps: 0
-	});
+	}, "root");
+}
+function createStatefulExpressionMemory() {
+	return {
+		calls: /* @__PURE__ */ new Map(),
+		acceptedEdgeAt: null
+	};
+}
+function cloneStatefulExpressionMemory(memory) {
+	return {
+		calls: new Map([...memory.calls].map(([path, call]) => [path, { ...call }])),
+		acceptedEdgeAt: memory.acceptedEdgeAt
+	};
+}
+function evaluateStatefulExpressionCall(invocation, memory, env) {
+	const existing = memory.calls.get(invocation.path);
+	switch (invocation.name) {
+		case "rose": {
+			const call = existing?.kind === "rose" ? existing : { kind: "rose" };
+			memory.calls.set(invocation.path, call);
+			const currentOutput = env.currentOutput === null || typeof env.currentOutput === "number" && Number.isFinite(env.currentOutput) ? env.currentOutput : null;
+			return evaluateRose(invocation.args[0], invocation.args[1], invocation.args[2], call, memory, {
+				currentOutput,
+				startedAtMs: env.startedAtMs,
+				nowMs: env.nowMs
+			});
+		}
+		case "count": {
+			const call = existing?.kind === "count" ? existing : {
+				kind: "count",
+				highWater: null
+			};
+			memory.calls.set(invocation.path, call);
+			return evaluateCount(invocation.args[0], call, env.currentOutput);
+		}
+	}
 }
 /**
 * Coerce an untrusted `getByPath` / mirror read to an `ExpressionValue`.
@@ -4653,9 +4922,10 @@ function validateExpressionSource(src) {
 /**
 * Shared read-path evaluation. Builds a null-proto scope from `bindingValues`
 * plus the injected `now` (supplied by the caller for determinism and
-* testability), compiles via the LRU, and evaluates. Any failure (parse or
-* eval) returns `{ ok: false }` — the caller treats that as "skip this
-* derivation", never as a throw that takes the pass down.
+* testability), compiles via the LRU, and evaluates. Stateful calls are
+* delegated through `opts.invokeStateful` with their stable AST path. Any
+* failure (parse or eval) returns `{ ok: false }` — the caller treats that as
+* "skip this derivation", never as a throw that takes the pass down.
 */
 function evaluateExpressionSource(expr, bindingValues, now, opts) {
 	const compiled = compileExpressionSafe(expr);
@@ -4787,6 +5057,7 @@ var CompositionItemEntrySchema = zod.z.object({
 var CompositionFieldsFeatureSchema = zod.z.object({
 	kind: zod.z.literal("fields"),
 	cap: zod.z.string().min(1),
+	enabled: zod.z.boolean().optional(),
 	fields: zod.z.record(zod.z.string().min(1), CompositionFieldSourceSchema).refine((fields) => Object.keys(fields).length <= 32, { message: `at most 32 fields per capability` }),
 	/**
 	* Items of the cap's item array, keyed by item key (D663). Naming `items`
@@ -4800,9 +5071,14 @@ var CompositionFieldsFeatureSchema = zod.z.object({
 var CompositionPassthroughFeatureSchema = zod.z.object({
 	kind: zod.z.literal("passthrough"),
 	cap: zod.z.string().min(1),
+	enabled: zod.z.boolean().optional(),
 	source: CompositionSourceRefSchema
 });
 var CompositionFeatureSchema = zod.z.discriminatedUnion("kind", [CompositionFieldsFeatureSchema, CompositionPassthroughFeatureSchema]);
+/** Only an explicit `false` disables a feature; omitted preserves the existing wire default. */
+function compositionFeatureEnabled(feature) {
+	return feature.enabled !== false;
+}
 /**
 * A NEW device. It has no `name` of its own: the block's name IS the device's
 * name (2026-08-08). A second copy here would be a second writer of one string (D62).
@@ -11009,6 +11285,190 @@ function procedureAuthKey(auth) {
 function kebabToCamel(s) {
 	return s.replace(/-([a-z])/g, (_, c) => c.toUpperCase());
 }
+/** Unwrap ZodNullable / ZodOptional / ZodDefault wrappers to reach the inner type.
+*  Zod v4 exposes `.unwrap()` on all three wrapper classes. */
+function unwrapSchema(schema) {
+	let s = schema;
+	while (s instanceof zod.z.ZodNullable || s instanceof zod.z.ZodOptional || s instanceof zod.z.ZodDefault) s = s.unwrap();
+	return s;
+}
+function leafKind(schema) {
+	const s = unwrapSchema(schema);
+	if (s instanceof zod.z.ZodEnum) return {
+		kind: "enum",
+		enumValues: s.options
+	};
+	if (s instanceof zod.z.ZodNumber) return { kind: "number" };
+	if (s instanceof zod.z.ZodString) return { kind: "string" };
+	if (s instanceof zod.z.ZodBoolean) return { kind: "boolean" };
+	return null;
+}
+/** Walk a cap status schema into flat wireable leaf fields (dotted paths).
+*  Recurses into nested ZodObject (unwrapping nullable/optional/default first),
+*  so fields with null live values are still offered. Arrays / unknown shapes
+*  are skipped — never throws. */
+function enumerateSchemaFields(schema, prefix = "") {
+	const root = unwrapSchema(schema);
+	if (!(root instanceof zod.z.ZodObject)) return [];
+	const out = [];
+	const shape = root.shape;
+	for (const [key, field] of Object.entries(shape)) {
+		const path = prefix ? `${prefix}.${key}` : key;
+		const inner = unwrapSchema(field);
+		if (inner instanceof zod.z.ZodObject) {
+			out.push(...enumerateSchemaFields(inner, path));
+			continue;
+		}
+		const leaf = leafKind(field);
+		if (leaf) out.push({
+			path,
+			kind: leaf.kind,
+			...leaf.enumValues ? { enumValues: leaf.enumValues } : {}
+		});
+	}
+	return out;
+}
+/** Enumerate the per-item wireable fields of an item-array cap (see
+*  `CapabilityStatusItemArray`): the item schema's leaf fields, minus the
+*  `keyField` (the key comes from the link's `itemKey`, never from a wired
+*  source), each tagged `item: true` so the authoring UI collects an
+*  `itemKey` alongside the field. Never throws. */
+function enumerateItemArrayFields(itemArray) {
+	return enumerateSchemaFields(itemArray.itemSchema).filter((f) => f.path !== itemArray.keyField).map((f) => ({
+		...f,
+		item: true
+	}));
+}
+/**
+* What a capability's state field IS: kind, nullability, whether required. The
+* validator needs nullability, which `enumerateSchemaFields` does not report,
+* and that decides a field's unavailable mode (D393).
+*/
+function fieldAt(schema, path) {
+	let current = schema;
+	for (const segment of path.split(".")) {
+		const container = unwrapSchema(current);
+		if (!(container instanceof zod.z.ZodObject)) return null;
+		const next = container.shape[segment];
+		if (!(next instanceof zod.z.ZodType)) return null;
+		current = next;
+	}
+	return current;
+}
+function describeStateField(schema, path) {
+	const leaf = enumerateSchemaFields(schema).find((f) => f.path === path);
+	if (leaf === void 0) return null;
+	const field = fieldAt(schema, path);
+	if (field === null) return null;
+	return {
+		path,
+		kind: leaf.kind,
+		nullable: field.safeParse(null).success,
+		required: !field.safeParse(void 0).success,
+		...leaf.enumValues === void 0 ? {} : { enumValues: leaf.enumValues }
+	};
+}
+function describeTopLevelStateFields(schema) {
+	return new Map(enumerateSchemaFields(schema).filter((f) => !f.path.includes(".")).flatMap((f) => {
+		const described = describeStateField(schema, f.path);
+		return described === null ? [] : [[f.path, described]];
+	}));
+}
+/** Top-level keys a value MUST carry: those whose schema refuses `undefined`. */
+function requiredTopLevelKeys(schema) {
+	const root = unwrapSchema(schema);
+	if (!(root instanceof zod.z.ZodObject)) return [];
+	return Object.entries(root.shape).flatMap(([key, field]) => field instanceof zod.z.ZodType && !field.safeParse(void 0).success ? [key] : []);
+}
+/**
+* The proper prefixes of `path` whose schema accepts `undefined`: a required
+* leaf under one of them is required only once something writes that parent
+* (`remaining.unit` is required only when `remaining` is present).
+*/
+function optionalAncestors(schema, path) {
+	const segments = path.split(".");
+	return segments.slice(0, -1).flatMap((_, i) => {
+		const prefix = segments.slice(0, i + 1).join(".");
+		const field = fieldAt(schema, prefix);
+		return field !== null && field.safeParse(void 0).success ? [prefix] : [];
+	});
+}
+var EVENT_CATEGORIES = { "doorbell.onPressed": EventCategory.DoorbellOnPressed };
+var CompositionEventPlanSchema = zod.z.object({
+	featureIndex: zod.z.number().int().nonnegative(),
+	cap: zod.z.string(),
+	eventName: zod.z.string(),
+	category: zod.z.enum(EventCategory),
+	stateField: zod.z.string(),
+	fieldKey: zod.z.string()
+});
+function eventProblem(code, path, message) {
+	return {
+		code,
+		path,
+		message
+	};
+}
+function payloadReason(error) {
+	return error.issues.map((issue) => `${issue.path.length === 0 ? "payload" : issue.path.join(".")}: ${issue.message}`).join("; ");
+}
+/**
+* Plan one capability's state-derived events after its feature mode and fields
+* are known. A native replacement never becomes a second event authority.
+*/
+function planCompositionEvents(def, feature, fields) {
+	if (feature.mode === "replace") return {
+		problems: [],
+		events: []
+	};
+	const problems = [];
+	const events = [];
+	for (const [eventName, declaration] of Object.entries(def.events ?? {})) {
+		const fromState = declaration.fromState;
+		if (fromState === void 0) continue;
+		const statePath = `features[${feature.featureIndex}].fields.${fromState.field}`;
+		const state = def.runtimeState ? describeStateField(def.runtimeState, fromState.field) : null;
+		if (state === null) {
+			problems.push(eventProblem("unknown-field", statePath, `\`${def.name}.${eventName}\` derives from missing state field \`${fromState.field}\``));
+			continue;
+		}
+		if (state.kind !== "number") {
+			problems.push(eventProblem("kind-mismatch", statePath, `\`${def.name}.${eventName}\` needs a numeric state field; \`${fromState.field}\` is ${state.kind}`));
+			continue;
+		}
+		const eventKey = `${def.name}.${eventName}`;
+		const category = EVENT_CATEGORIES[eventKey];
+		if (category === void 0) {
+			problems.push(eventProblem("not-composable", `features[${feature.featureIndex}].cap`, `\`${eventKey}\` has no explicit composition event-category mapping`));
+			continue;
+		}
+		const payload = declaration.data.safeParse({
+			deviceId: 1,
+			timestamp: 1
+		});
+		if (!payload.success) {
+			problems.push(eventProblem("not-composable", `features[${feature.featureIndex}].cap`, `\`${eventKey}\` cannot be derived from { deviceId, timestamp }: ${payloadReason(payload.error)}`));
+			continue;
+		}
+		const field = fields.find((candidate) => candidate.featureIndex === feature.featureIndex && candidate.cap === def.name && candidate.path === fromState.field && candidate.item === void 0);
+		if (field === void 0) {
+			problems.push(eventProblem("unknown-field", statePath, `\`${eventKey}\` derives from \`${fromState.field}\`, but that field is not composed`));
+			continue;
+		}
+		events.push({
+			featureIndex: feature.featureIndex,
+			cap: def.name,
+			eventName,
+			category,
+			stateField: fromState.field,
+			fieldKey: `${field.cap}.${field.path}`
+		});
+	}
+	return {
+		problems,
+		events
+	};
+}
 /**
 * What the validator says about a composition and what the composer says about
 * a running one: the wire shapes the API returns (D659).
@@ -11063,12 +11523,14 @@ var CompositionUnavailableModeSchema = zod.z.enum([
 ]);
 /**
 * `derived` reads a source · `clock` reads only `now`, recomputed when a sibling
-* field of its cap changes value · `constant` reads nothing, computed once.
+* field of its cap changes value · `constant` reads nothing, computed once ·
+* `accumulator` advances from the target's seed/current output.
 */
 var CompositionFieldRoleSchema = zod.z.enum([
 	"derived",
 	"clock",
-	"constant"
+	"constant",
+	"accumulator"
 ]);
 /** The item a planned field belongs to; its `path` is then the dotted path INSIDE the item. */
 var CompositionFieldItemSchema = zod.z.object({
@@ -11109,6 +11571,7 @@ var CompositionFeatureModeSchema = zod.z.enum([
 	"replace"
 ]);
 var CompositionFeaturePlanSchema = zod.z.object({
+	/** Index in the stored feature array; disabled features are omitted rather than re-indexed. */
 	featureIndex: zod.z.number().int().nonnegative(),
 	cap: zod.z.string(),
 	mode: CompositionFeatureModeSchema
@@ -11117,7 +11580,8 @@ var CompositionValidationSchema = zod.z.object({
 	ok: zod.z.boolean(),
 	problems: zod.z.array(CompositionProblemSchema),
 	fields: zod.z.array(CompositionFieldPlanSchema),
-	features: zod.z.array(CompositionFeaturePlanSchema)
+	features: zod.z.array(CompositionFeaturePlanSchema),
+	events: zod.z.array(CompositionEventPlanSchema)
 });
 /**
 * Mirrors `CoreBlockStatus`, pinned by `core-blocks-source.spec.ts`. `degraded`:
@@ -29024,148 +29488,6 @@ var videoclipsCapability = {
 	}
 };
 /**
-* LA tabella "quale booleano di questo tipo di device conta come ALTO", e il
-* valutatore puro del suo FRONTE.
-*
-* Viveva dentro il builtin virtual-doorbell
-* (`@camstack/system` — `builtins/doorbell/trigger-engine.ts`) e i suoi
-* predicati erano privati al modulo. Il recorder ne ha bisogno per il trigger
-* `RecordingTriggers.sensorDeviceIds`: copiarla avrebbe creato la SECONDA
-* tabella, che diverge alla prima cap aggiunta e il cui sintomo — "il sensore
-* fa suonare il campanello ma non registra" — è esattamente D62. Quindi si
-* SPOSTA qui e il doorbell la ri-esporta.
-*
-* ⚠ NON è `DEVICE_STATE_READERS` (`catalogs/device-state-vocabulary.ts`), e le
-* due non vanno unificate: quella risponde a "qual è la PAROLA di stato per una
-* regola" (e include `presence`, `cover`, `alarm-panel`), questa a "qual è il
-* booleano il cui FRONTE conta". Vocabolari deliberatamente diversi.
-*/
-/**
-* Known binary / switch source caps → the boolean slice field whose
-* false→true rise counts as ACTIVE. Every entry is "fire on active".
-* Sensors whose "active" reading is not a plain boolean (presence's string
-* state, connectivity's connected flag) are deliberately excluded — a
-* reconnect is not a doorbell press, and it is not a recording either.
-*/
-var SOURCE_CAP_ACTIVE_FIELD = {
-	contact: "entryOpen",
-	binary: "on",
-	switch: "on",
-	motion: "detected",
-	flood: "flooded",
-	gas: "detected",
-	smoke: "detected",
-	"carbon-monoxide": "detected",
-	vibration: "detected",
-	tamper: "tampered"
-};
-/**
-* The same caps → the slice field carrying the ms-epoch timestamp of the
-* last transition. Every source cap MUST appear here (guarded by a spec):
-* without a transition timestamp the evaluator cannot tell a genuine rise
-* from a boot-time hydration when the FIRST slice it ever sees is already
-* active, and errs towards silence — swallowing the rise.
-*
-* These timestamps are UPSTREAM ones, not ingest ones: the Home Assistant
-* provider derives them from `state.last_changed`, so they survive our own
-* restarts and correctly read as "hours ago" for a state that has been
-* active for hours. `motion` names its rise timestamp `lastDetectedAt`.
-*/
-var SOURCE_CAP_CHANGED_AT_FIELD = {
-	contact: "lastChangedAt",
-	binary: "lastChangedAt",
-	switch: "lastChangedAt",
-	motion: "lastDetectedAt",
-	flood: "lastChangedAt",
-	gas: "lastChangedAt",
-	smoke: "lastChangedAt",
-	"carbon-monoxide": "lastChangedAt",
-	vibration: "lastChangedAt",
-	tamper: "lastChangedAt"
-};
-/** Cap names whose presence in a device's bindings qualify it as a source. */
-var SOURCE_CAPS = Object.keys(SOURCE_CAP_ACTIVE_FIELD);
-/** True when a cap is a recognised binary/switch source. */
-function isSourceCap(capName) {
-	return Object.prototype.hasOwnProperty.call(SOURCE_CAP_ACTIVE_FIELD, capName);
-}
-/** Extract the "active" boolean a source cap's slice carries, or null when
-*  the cap is unknown or the field is missing / non-boolean. */
-function sliceActiveValue(capName, slice) {
-	const field = SOURCE_CAP_ACTIVE_FIELD[capName];
-	if (field === void 0) return null;
-	const raw = slice[field];
-	return typeof raw === "boolean" ? raw : null;
-}
-/** Ms-epoch transition timestamp a source cap's slice carries, or null when
-*  it is absent, non-numeric or the zero "never observed" sentinel. */
-function sliceChangedAt(capName, slice) {
-	const field = SOURCE_CAP_CHANGED_AT_FIELD[capName];
-	if (field === void 0) return null;
-	const raw = slice[field];
-	if (typeof raw !== "number" || !Number.isFinite(raw) || raw <= 0) return null;
-	return raw;
-}
-/**
-* How recent a source's own transition timestamp must be for a FIRST
-* sighting that is already active to count as a genuine rise rather than a
-* hydration of long-standing state.
-*/
-var DEFAULT_FIRST_SIGHTING_FRESHNESS_MS = 3e4;
-/**
-* IL fronte. Puro: nessun orologio proprio, nessuna memoria — il chiamante
-* porta `prior`, `nowMs` e il proprio `startedAtMs`.
-*
-* Il caso della PRIMA slice già attiva è trattato esplicitamente e vale come
-* fronte solo se il timestamp UPSTREAM della transizione è posteriore a
-* `startedAtMs` **e** entro `firstSightingFreshnessMs`. Entrambe le metà
-* servono: la sola freschezza scatterebbe su un'idratazione al boot di uno
-* stato flippato pochi secondi prima del riavvio, e il solo "dopo che abbiamo
-* iniziato" scatterebbe, su un processo di lunga vita, per una sorgente
-* adottata oggi il cui stato è cambiato ieri. Il caso ambiguo ERRA VERSO IL
-* SILENZIO e lo dichiara (`baseline-seeded-stale-active`).
-*/
-function evaluateSensorEdge(input) {
-	const value = sliceActiveValue(input.capName, input.slice);
-	if (value === null) return {
-		edge: "none",
-		value: null,
-		reason: isSourceCap(input.capName) ? "non-boolean-value" : "unknown-cap"
-	};
-	if (input.prior === void 0) {
-		if (!value) return {
-			edge: "none",
-			value,
-			reason: "baseline-seeded-inactive"
-		};
-		const changedAt = sliceChangedAt(input.capName, input.slice);
-		const floor = Math.max(input.startedAtMs, input.nowMs - input.firstSightingFreshnessMs);
-		if (changedAt === null || changedAt < floor) return {
-			edge: "none",
-			value,
-			reason: "baseline-seeded-stale-active"
-		};
-		return {
-			edge: "rising",
-			value: true
-		};
-	}
-	if (input.prior === value) return {
-		edge: "none",
-		value,
-		reason: "no-change"
-	};
-	if (!value) return {
-		edge: "none",
-		value,
-		reason: "falling-edge"
-	};
-	return {
-		edge: "rising",
-		value: true
-	};
-}
-/**
 * Doorbell button cap. Two kinds of providers coexist behind this cap
 * name (same pattern as `snapshot`):
 *
@@ -29238,7 +29560,13 @@ var doorbellCapability = {
 	* push (`ReolinkSimpleEvent.type === 'doorbell'`). There is no
 	* release/duration — it's a pulse.
 	*/
-onPressed: { data: DoorbellPressEventSchema } },
+onPressed: {
+		data: DoorbellPressEventSchema,
+		fromState: {
+			field: "lastPressedAt",
+			on: "advance"
+		}
+	} },
 	status: {
 		schema: DoorbellStatusSchema,
 		kind: "push"
@@ -38263,12 +38591,21 @@ var RecordingStorageUsageSchema = zod.z.object({
 	*/
 	devicesRead: zod.z.enum(["archive", "unavailable"]).optional(),
 	/**
+	* Is the `archive` answer WHOLE (D674): the hour ledger loaded without
+	* hitting its row cap, and at least one location resolved? Only then may a
+	* camera ABSENT from `devices[]` be read as "no footage" — and only then is a
+	* row's `oldestMs` the archive's oldest rather than the oldest of a fraction.
+	* OPTIONAL: a recorder predating D674 omits it, and a consumer must read the
+	* absence as `false`. A retention floor is a delete; it never guesses.
+	*/
+	complete: zod.z.boolean().optional(),
+	/**
 	* Per-physical-volume capacity. OPTIONAL, and consumers must render the rest
-	* of the payload without it: the hub serves this method through a BAKED
-	* router, so a hub whose framework train predates a change to this array
-	* strips it out of an answer a newer recorder happily produced. A UI that
-	* dereferences it unconditionally crashes the whole Storage page over a
-	* missing disk bar.
+	* of the payload without it: a recorder that could not build it omits it. A
+	* UI that dereferences it unconditionally crashes the whole Storage page over
+	* a missing disk bar. (The hub's cap routers pass output through unvalidated
+	* since 2026-07-11 — `cap-router-builder.ts` — so a newer recorder's fields
+	* are not stripped by an older hub.)
 	*/
 	locations: zod.z.array(RecordingLocationUsageSchema).optional()
 });
@@ -42640,7 +42977,7 @@ function createDeviceExtensionProvider(options) {
 var CompositionGraphError = class extends Error {};
 /** `"cap.field"` of every field a peer writes — the same spelling as `compositionFieldKey`. */
 function writtenFields(peer) {
-	return new Set(peer.composition.features.flatMap((feature) => feature.kind !== "fields" ? [] : featureFieldEntries(feature).map(({ fieldPath }) => `${feature.cap}.${fieldPath}`)));
+	return new Set(peer.composition.features.flatMap((feature) => !compositionFeatureEnabled(feature) || feature.kind !== "fields" ? [] : featureFieldEntries(feature).map(({ fieldPath }) => `${feature.cap}.${fieldPath}`)));
 }
 /** A read of the peer's OWN device is an edge only when it reads the peer's own output (rule 5, D663). */
 function readsComposedValue(peer, written, read) {
@@ -42650,7 +42987,7 @@ function readsComposedValue(peer, written, read) {
 }
 function peerEdges(peer) {
 	const written = writtenFields(peer);
-	return peer.composition.features.flatMap((feature) => feature.kind !== "fields" ? [] : featureFieldEntries(feature).map(({ fieldPath, source }) => [compositionReadKey({
+	return peer.composition.features.flatMap((feature) => !compositionFeatureEnabled(feature) || feature.kind !== "fields" ? [] : featureFieldEntries(feature).map(({ fieldPath, source }) => [compositionReadKey({
 		source: peer.target,
 		cap: feature.cap,
 		fieldPath
@@ -42755,114 +43092,6 @@ function findCandidateCycles(candidate, stored) {
 		}];
 	});
 }
-/** Unwrap ZodNullable / ZodOptional / ZodDefault wrappers to reach the inner type.
-*  Zod v4 exposes `.unwrap()` on all three wrapper classes. */
-function unwrapSchema(schema) {
-	let s = schema;
-	while (s instanceof zod.z.ZodNullable || s instanceof zod.z.ZodOptional || s instanceof zod.z.ZodDefault) s = s.unwrap();
-	return s;
-}
-function leafKind(schema) {
-	const s = unwrapSchema(schema);
-	if (s instanceof zod.z.ZodEnum) return {
-		kind: "enum",
-		enumValues: s.options
-	};
-	if (s instanceof zod.z.ZodNumber) return { kind: "number" };
-	if (s instanceof zod.z.ZodString) return { kind: "string" };
-	if (s instanceof zod.z.ZodBoolean) return { kind: "boolean" };
-	return null;
-}
-/** Walk a cap status schema into flat wireable leaf fields (dotted paths).
-*  Recurses into nested ZodObject (unwrapping nullable/optional/default first),
-*  so fields with null live values are still offered. Arrays / unknown shapes
-*  are skipped — never throws. */
-function enumerateSchemaFields(schema, prefix = "") {
-	const root = unwrapSchema(schema);
-	if (!(root instanceof zod.z.ZodObject)) return [];
-	const out = [];
-	const shape = root.shape;
-	for (const [key, field] of Object.entries(shape)) {
-		const path = prefix ? `${prefix}.${key}` : key;
-		const inner = unwrapSchema(field);
-		if (inner instanceof zod.z.ZodObject) {
-			out.push(...enumerateSchemaFields(inner, path));
-			continue;
-		}
-		const leaf = leafKind(field);
-		if (leaf) out.push({
-			path,
-			kind: leaf.kind,
-			...leaf.enumValues ? { enumValues: leaf.enumValues } : {}
-		});
-	}
-	return out;
-}
-/** Enumerate the per-item wireable fields of an item-array cap (see
-*  `CapabilityStatusItemArray`): the item schema's leaf fields, minus the
-*  `keyField` (the key comes from the link's `itemKey`, never from a wired
-*  source), each tagged `item: true` so the authoring UI collects an
-*  `itemKey` alongside the field. Never throws. */
-function enumerateItemArrayFields(itemArray) {
-	return enumerateSchemaFields(itemArray.itemSchema).filter((f) => f.path !== itemArray.keyField).map((f) => ({
-		...f,
-		item: true
-	}));
-}
-/**
-* What a capability's state field IS: kind, nullability, whether required. The
-* validator needs nullability, which `enumerateSchemaFields` does not report,
-* and that decides a field's unavailable mode (D393).
-*/
-function fieldAt(schema, path) {
-	let current = schema;
-	for (const segment of path.split(".")) {
-		const container = unwrapSchema(current);
-		if (!(container instanceof zod.z.ZodObject)) return null;
-		const next = container.shape[segment];
-		if (!(next instanceof zod.z.ZodType)) return null;
-		current = next;
-	}
-	return current;
-}
-function describeStateField(schema, path) {
-	const leaf = enumerateSchemaFields(schema).find((f) => f.path === path);
-	if (leaf === void 0) return null;
-	const field = fieldAt(schema, path);
-	if (field === null) return null;
-	return {
-		path,
-		kind: leaf.kind,
-		nullable: field.safeParse(null).success,
-		required: !field.safeParse(void 0).success,
-		...leaf.enumValues === void 0 ? {} : { enumValues: leaf.enumValues }
-	};
-}
-function describeTopLevelStateFields(schema) {
-	return new Map(enumerateSchemaFields(schema).filter((f) => !f.path.includes(".")).flatMap((f) => {
-		const described = describeStateField(schema, f.path);
-		return described === null ? [] : [[f.path, described]];
-	}));
-}
-/** Top-level keys a value MUST carry: those whose schema refuses `undefined`. */
-function requiredTopLevelKeys(schema) {
-	const root = unwrapSchema(schema);
-	if (!(root instanceof zod.z.ZodObject)) return [];
-	return Object.entries(root.shape).flatMap(([key, field]) => field instanceof zod.z.ZodType && !field.safeParse(void 0).success ? [key] : []);
-}
-/**
-* The proper prefixes of `path` whose schema accepts `undefined`: a required
-* leaf under one of them is required only once something writes that parent
-* (`remaining.unit` is required only when `remaining` is present).
-*/
-function optionalAncestors(schema, path) {
-	const segments = path.split(".");
-	return segments.slice(0, -1).flatMap((_, i) => {
-		const prefix = segments.slice(0, i + 1).join(".");
-		const field = fieldAt(schema, prefix);
-		return field !== null && field.safeParse(void 0).success ? [prefix] : [];
-	});
-}
 function problem(code, path, message) {
 	return {
 		code,
@@ -42874,7 +43103,8 @@ function refused(...problems) {
 	return {
 		problems,
 		fields: [],
-		features: []
+		features: [],
+		events: []
 	};
 }
 /** Where a planned field sits in the composition: `features[N].fields.<path>` or `features[N].items.<key>.fields.<path>`. */
@@ -42916,7 +43146,12 @@ var BUILTIN_RESULT_KINDS = Object.freeze({
 	number: {
 		kind: "fixed",
 		result: ["number", "null"]
-	}
+	},
+	rose: {
+		kind: "fixed",
+		result: ["number", "null"]
+	},
+	count: NUMBER
 });
 var KindInferenceError = class extends Error {};
 function kindOfValue(value) {
@@ -42975,6 +43210,21 @@ function kindsOf(node, bindings) {
 		case "call": return callKinds(node.callee, node.args.map((a) => kindsOf(a, bindings)));
 	}
 }
+function nodeContainsCall(node, callee) {
+	switch (node.kind) {
+		case "literal":
+		case "identifier": return false;
+		case "unary": return nodeContainsCall(node.operand, callee);
+		case "binary":
+		case "logical": return nodeContainsCall(node.left, callee) || nodeContainsCall(node.right, callee);
+		case "conditional": return nodeContainsCall(node.test, callee) || nodeContainsCall(node.consequent, callee) || nodeContainsCall(node.alternate, callee);
+		case "call": return node.callee === callee || node.args.some((arg) => nodeContainsCall(arg, callee));
+	}
+}
+function expressionContainsBuiltinCall(expr, callee) {
+	const compiled = compileExpressionSafe(expr);
+	return compiled.ok && nodeContainsCall(compiled.parsed.ast, callee);
+}
 function inferExpressionKinds(input) {
 	const compiled = compileExpressionSafe(input.expr);
 	if (!compiled.ok) return {
@@ -43095,6 +43345,7 @@ function enumLiteralProblem(cap, target, source, at) {
 }
 function roleOf(source) {
 	if (source.kind !== "expression") return "derived";
+	if (expressionContainsBuiltinCall(source.expr, "count")) return "accumulator";
 	if (fieldReads(source).length > 0) return "derived";
 	const compiled = compileExpressionSafe(source.expr);
 	return compiled.ok && compiled.parsed.identifiers.has("now") ? "clock" : "constant";
@@ -43106,13 +43357,13 @@ function roleOf(source) {
 * field that READS a source never gets `offline`.
 */
 function unavailableFor(tf, role, mode, cap, at) {
-	if (mode === "new" || role !== "derived") return {
+	if (mode === "replace" && (role === "derived" || role === "accumulator")) return {
 		ok: true,
-		unavailable: tf.nullable ? "null" : "offline"
+		unavailable: "release"
 	};
-	if (mode === "replace") return {
+	if (mode === "new" || role !== "derived") return {
 		ok: true,
-		unavailable: "release"
+		unavailable: tf.nullable ? "null" : "offline"
 	};
 	if (tf.nullable) return {
 		ok: true,
@@ -43185,7 +43436,8 @@ function planItemField(ctx, leaf) {
 	return {
 		problems: [...compatibility(capName, tf, kinds.kinds, at), ...enumProblem === null ? [] : [enumProblem]],
 		fields: [plan],
-		features: []
+		features: [],
+		events: []
 	};
 }
 function planItems(def, feature, featureIndex, lookupCap, mode = "new") {
@@ -43204,7 +43456,8 @@ function planItems(def, feature, featureIndex, lookupCap, mode = "new") {
 	const results = Object.entries(feature.items ?? {}).flatMap(([key, item]) => [{
 		problems: missingLeaves(ctx, item, `${at}.${key}`),
 		fields: [],
-		features: []
+		features: [],
+		events: []
 	}, ...Object.entries(item.fields).map(([path, source]) => planItemField(ctx, {
 		key,
 		label: item.label,
@@ -43214,7 +43467,8 @@ function planItems(def, feature, featureIndex, lookupCap, mode = "new") {
 	return {
 		problems: results.flatMap((r) => r.problems),
 		fields: results.flatMap((r) => r.fields),
-		features: []
+		features: [],
+		events: []
 	};
 }
 function describeRead(read) {
@@ -43238,7 +43492,7 @@ function fromReading(reading, read) {
 		deadline: null
 	};
 }
-function expressionOutcome(source, read, now) {
+function expressionOutcome(source, read, now, stateful) {
 	const values = {};
 	const staleReasons = [];
 	let fatalUnavailable = null;
@@ -43267,10 +43521,31 @@ function expressionOutcome(source, read, now) {
 		values[name] = reading.value;
 		if (reading.state === "stale") staleReasons.push(`\`${name}\`: ${reading.reason}`);
 	}
-	if (fatalUnavailable !== null) return fatalUnavailable;
-	if (nonFatalUnavailable !== null) return nonFatalUnavailable;
+	const unavailable = fatalUnavailable ?? nonFatalUnavailable;
+	if (unavailable !== null) {
+		if (stateful !== void 0 && stateful.currentOutput !== void 0 && expressionContainsBuiltinCall(source.expr, "count")) return {
+			state: "stale",
+			value: evaluateCount(null, {
+				kind: "count",
+				highWater: null
+			}, stateful.currentOutput),
+			reason: `${unavailable.reason}; holding the last accumulator value`,
+			deadline: null
+		};
+		return unavailable;
+	}
 	const deadlines = [];
-	const result = evaluateExpressionSource(source.expr, values, now, { hooks: { noteDeadline: (at) => deadlines.push(at) } });
+	const result = evaluateExpressionSource(source.expr, values, now, {
+		hooks: { noteDeadline: (at) => deadlines.push(at) },
+		...stateful === void 0 ? {} : { invokeStateful: (invocation) => evaluateStatefulExpressionCall(stateful.callPathPrefix === void 0 ? invocation : {
+			...invocation,
+			path: `${stateful.callPathPrefix}@${invocation.path}`
+		}, stateful.expressionMemory, {
+			currentOutput: stateful.currentOutput,
+			startedAtMs: stateful.startedAtMs,
+			nowMs: now
+		}) }
+	});
 	if (!result.ok) return {
 		state: "unavailable",
 		value: null,
@@ -43289,7 +43564,7 @@ function evaluateCompositionField(input) {
 	const { source } = input;
 	switch (source.kind) {
 		case "from": return fromReading(input.read(source), source);
-		case "expression": return expressionOutcome(source, input.read, input.now);
+		case "expression": return expressionOutcome(source, input.read, input.now, input.stateful);
 		case "code": return {
 			state: "unavailable",
 			value: null,
@@ -43367,7 +43642,8 @@ function planTopLevelField({ def, fields }, field, mode, lookupCap) {
 	return {
 		problems: [...compatibility(def.name, tf, kinds.kinds, fieldAt), ...enumProblem === null ? [] : [enumProblem]],
 		fields: [plan],
-		features: []
+		features: [],
+		events: []
 	};
 }
 function planFeature(feature, featureIndex, target, lookupCap) {
@@ -43383,14 +43659,22 @@ function planFeature(feature, featureIndex, target, lookupCap) {
 	}, target.mode, lookupCap));
 	const items = feature.items === void 0 ? [] : [planItems(cap.def, feature, featureIndex, lookupCap, target.mode)];
 	const all = [...perField, ...items];
+	const fields = all.flatMap((result) => result.fields);
+	const featurePlan = {
+		featureIndex,
+		cap: cap.def.name,
+		mode: target.mode
+	};
+	const eventPlan = planCompositionEvents(cap.def, featurePlan, fields);
 	return {
-		problems: [...capProblems, ...all.flatMap((r) => r.problems)],
-		fields: all.flatMap((r) => r.fields),
-		features: [{
-			featureIndex,
-			cap: cap.def.name,
-			mode: target.mode
-		}]
+		problems: [
+			...capProblems,
+			...all.flatMap((r) => r.problems),
+			...eventPlan.problems
+		],
+		fields,
+		features: [featurePlan],
+		events: eventPlan.events
 	};
 }
 /** A cap the device serves itself; one the composer grafted (an earlier ADD) is not native. */
@@ -43432,17 +43716,23 @@ function planComposition(composition, lookupCap, target) {
 	const planTarget = planTargetOf(composition, target);
 	if ("code" in planTarget) return refused(planTarget);
 	const results = composition.features.map((feature, index) => {
-		if (feature.kind === "passthrough") return refused(problem("reserved-variant", `features[${index}]`, `whole-capability passthrough of \`${feature.cap}\` arrives in slice 3`));
-		return planFeature(feature, index, featureTargetOf(planTarget, feature.cap), lookupCap);
+		const result = feature.kind === "passthrough" ? refused(problem("reserved-variant", `features[${index}]`, `whole-capability passthrough of \`${feature.cap}\` arrives in slice 3`)) : planFeature(feature, index, featureTargetOf(planTarget, feature.cap), lookupCap);
+		return compositionFeatureEnabled(feature) ? result : {
+			problems: result.problems,
+			fields: [],
+			features: [],
+			events: []
+		};
 	});
 	return {
 		problems: results.flatMap((r) => r.problems),
 		fields: results.flatMap((r) => r.fields),
-		features: results.flatMap((r) => r.features)
+		features: results.flatMap((r) => r.features),
+		events: results.flatMap((r) => r.events)
 	};
 }
 function compositionSourceRefs(composition) {
-	const refs = composition.features.flatMap((f) => f.kind === "fields" ? featureSources(f).flatMap(fieldReads).map((r) => r.source) : []);
+	const refs = composition.features.flatMap((f) => compositionFeatureEnabled(f) && f.kind === "fields" ? featureSources(f).flatMap(fieldReads).map((r) => r.source) : []);
 	return [...new Map(refs.map((r) => [compositionSourceKey(r), r])).values()];
 }
 /**
@@ -43577,7 +43867,8 @@ function validateComposition(composition, ctx) {
 		ok: problems.length === 0,
 		problems,
 		fields: [...plan.fields],
-		features: [...plan.features]
+		features: [...plan.features],
+		events: [...plan.events]
 	};
 }
 /**
@@ -57364,6 +57655,18 @@ Object.defineProperty(exports, "SOURCE_CAPS", {
 		return SOURCE_CAPS;
 	}
 });
+Object.defineProperty(exports, "SOURCE_CAP_ACTIVE_FIELD", {
+	enumerable: true,
+	get: function() {
+		return SOURCE_CAP_ACTIVE_FIELD;
+	}
+});
+Object.defineProperty(exports, "SOURCE_CAP_CHANGED_AT_FIELD", {
+	enumerable: true,
+	get: function() {
+		return SOURCE_CAP_CHANGED_AT_FIELD;
+	}
+});
 Object.defineProperty(exports, "STORAGE_ACCESS_FALLBACK", {
 	enumerable: true,
 	get: function() {
@@ -57508,6 +57811,12 @@ Object.defineProperty(exports, "cameraGridLayoutCapability", {
 		return cameraGridLayoutCapability;
 	}
 });
+Object.defineProperty(exports, "cloneStatefulExpressionMemory", {
+	enumerable: true,
+	get: function() {
+		return cloneStatefulExpressionMemory;
+	}
+});
 Object.defineProperty(exports, "collectSecretConfigKeys", {
 	enumerable: true,
 	get: function() {
@@ -57532,6 +57841,12 @@ Object.defineProperty(exports, "composerCapability", {
 		return composerCapability;
 	}
 });
+Object.defineProperty(exports, "compositionFeatureEnabled", {
+	enumerable: true,
+	get: function() {
+		return compositionFeatureEnabled;
+	}
+});
 Object.defineProperty(exports, "compositionFieldKey", {
 	enumerable: true,
 	get: function() {
@@ -57604,6 +57919,12 @@ Object.defineProperty(exports, "createEvent", {
 		return createEvent;
 	}
 });
+Object.defineProperty(exports, "createStatefulExpressionMemory", {
+	enumerable: true,
+	get: function() {
+		return createStatefulExpressionMemory;
+	}
+});
 Object.defineProperty(exports, "dataStoreProviderCapability", {
 	enumerable: true,
 	get: function() {