@camstack/system 1.2.473 → 1.2.475

package/dist/{agent-https-B9Q3-IKd.js → agent-https-BsqT0qni.js}

@@ -1,6 +1,6 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-Bmah6waF.js");
-const require_x509_es = require("./x509.es-C4cOo48M.js");
+const require_dist = require("./dist-BtDdPdZ7.js");
+const require_x509_es = require("./x509.es-WtnRNyYS.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
@@ -687,7 +687,7 @@ async function generateCa(now, hostnames = [], commonName = CA_COMMON_NAME) {
 		await require_x509_es.SubjectKeyIdentifierExtension.create(keys.publicKey),
 		createNameConstraintsExtension(buildNameConstraintSet(hostnames))
 	];
-	const cert = await require_x509_es.X509CertificateGenerator.createSelfSigned({
+	const cert = await require_x509_es.withUtcTimeEncoding(() => require_x509_es.X509CertificateGenerator.createSelfSigned({
 		serialNumber: freshSerial(),
 		name: [{ CN: [commonName] }],
 		notBefore: require_x509_es.backdatedNotBefore(now),
@@ -695,7 +695,7 @@ async function generateCa(now, hostnames = [], commonName = CA_COMMON_NAME) {
 		keys,
 		signingAlgorithm: SIGNING_ALGORITHM,
 		extensions
-	});
+	}));
 	return {
 		certPem: toCertPem(cert),
 		keyPem: await exportKeyPem(keys.privateKey),
@@ -728,7 +728,7 @@ async function issueLeaf(ca, identity, commonName, validDays, now) {
 		new require_x509_es.SubjectAlternativeNameExtension(subjectAltNames(identity))
 	];
 	return {
-		certPem: toCertPem(await require_x509_es.X509CertificateGenerator.create({
+		certPem: toCertPem(await require_x509_es.withUtcTimeEncoding(() => require_x509_es.X509CertificateGenerator.create({
 			serialNumber: freshSerial(),
 			subject: `CN=${commonName}`,
 			issuer: ca.cert.subject,
@@ -738,7 +738,7 @@ async function issueLeaf(ca, identity, commonName, validDays, now) {
 			signingKey: ca.privateKey,
 			signingAlgorithm: SIGNING_ALGORITHM,
 			extensions
-		})),
+		}))),
 		keyPem: await exportKeyPem(keys.privateKey)
 	};
 }
@@ -759,7 +759,7 @@ async function issueLeafFromCsr(ca, csrPem, identity, commonName, validDays, now
 		await require_x509_es.AuthorityKeyIdentifierExtension.create(ca.cert),
 		new require_x509_es.SubjectAlternativeNameExtension(subjectAltNames(identity))
 	];
-	return toCertPem(await require_x509_es.X509CertificateGenerator.create({
+	return toCertPem(await require_x509_es.withUtcTimeEncoding(() => require_x509_es.X509CertificateGenerator.create({
 		serialNumber: freshSerial(),
 		subject: `CN=${commonName}`,
 		issuer: ca.cert.subject,
@@ -769,7 +769,7 @@ async function issueLeafFromCsr(ca, csrPem, identity, commonName, validDays, now
 		signingKey: ca.privateKey,
 		signingAlgorithm: SIGNING_ALGORITHM,
 		extensions
-	}));
+	})));
 }
 //#endregion
 //#region src/tls/agent-https.ts

package/dist/{agent-https-DOwn4pqL.mjs → agent-https-wA8gGLc1.mjs}

@@ -1,5 +1,5 @@
-import { qi as defineRecordKinds } from "./dist-C9lbdBL5.mjs";
-import { S as backdatedNotBefore, _ as NameConstraints, a as KeyUsageFlags, c as Pkcs10CertificateRequest, d as SubjectKeyIdentifierExtension, f as X509Certificate$1, g as GeneralSubtrees, h as GeneralSubtree, i as Extension, l as Pkcs10CertificateRequestGenerator, m as cryptoProvider, n as BasicConstraintsExtension, o as KeyUsagesExtension, p as X509CertificateGenerator, r as ExtendedKeyUsageExtension, s as PemConverter, t as AuthorityKeyIdentifierExtension, u as SubjectAlternativeNameExtension, v as GeneralName, x as AsnConvert } from "./x509.es-DK__ETIe.mjs";
+import { qi as defineRecordKinds } from "./dist-DygMs3Qc.mjs";
+import { C as backdatedNotBefore, S as withUtcTimeEncoding, _ as NameConstraints, a as KeyUsageFlags, c as Pkcs10CertificateRequest, d as SubjectKeyIdentifierExtension, f as X509Certificate$1, g as GeneralSubtrees, h as GeneralSubtree, i as Extension, l as Pkcs10CertificateRequestGenerator, m as cryptoProvider, n as BasicConstraintsExtension, o as KeyUsagesExtension, p as X509CertificateGenerator, r as ExtendedKeyUsageExtension, s as PemConverter, t as AuthorityKeyIdentifierExtension, u as SubjectAlternativeNameExtension, v as GeneralName, x as AsnConvert } from "./x509.es-BRiJgOvu.mjs";
 import { z } from "zod";
 import { X509Certificate, createHash, createPrivateKey, randomBytes, webcrypto } from "node:crypto";
 import { writeOwnerOnlyFileSync } from "@camstack/types/node";
@@ -685,7 +685,7 @@ async function generateCa(now, hostnames = [], commonName = CA_COMMON_NAME) {
 		await SubjectKeyIdentifierExtension.create(keys.publicKey),
 		createNameConstraintsExtension(buildNameConstraintSet(hostnames))
 	];
-	const cert = await X509CertificateGenerator.createSelfSigned({
+	const cert = await withUtcTimeEncoding(() => X509CertificateGenerator.createSelfSigned({
 		serialNumber: freshSerial(),
 		name: [{ CN: [commonName] }],
 		notBefore: backdatedNotBefore(now),
@@ -693,7 +693,7 @@ async function generateCa(now, hostnames = [], commonName = CA_COMMON_NAME) {
 		keys,
 		signingAlgorithm: SIGNING_ALGORITHM,
 		extensions
-	});
+	}));
 	return {
 		certPem: toCertPem(cert),
 		keyPem: await exportKeyPem(keys.privateKey),
@@ -726,7 +726,7 @@ async function issueLeaf(ca, identity, commonName, validDays, now) {
 		new SubjectAlternativeNameExtension(subjectAltNames(identity))
 	];
 	return {
-		certPem: toCertPem(await X509CertificateGenerator.create({
+		certPem: toCertPem(await withUtcTimeEncoding(() => X509CertificateGenerator.create({
 			serialNumber: freshSerial(),
 			subject: `CN=${commonName}`,
 			issuer: ca.cert.subject,
@@ -736,7 +736,7 @@ async function issueLeaf(ca, identity, commonName, validDays, now) {
 			signingKey: ca.privateKey,
 			signingAlgorithm: SIGNING_ALGORITHM,
 			extensions
-		})),
+		}))),
 		keyPem: await exportKeyPem(keys.privateKey)
 	};
 }
@@ -757,7 +757,7 @@ async function issueLeafFromCsr(ca, csrPem, identity, commonName, validDays, now
 		await AuthorityKeyIdentifierExtension.create(ca.cert),
 		new SubjectAlternativeNameExtension(subjectAltNames(identity))
 	];
-	return toCertPem(await X509CertificateGenerator.create({
+	return toCertPem(await withUtcTimeEncoding(() => X509CertificateGenerator.create({
 		serialNumber: freshSerial(),
 		subject: `CN=${commonName}`,
 		issuer: ca.cert.subject,
@@ -767,7 +767,7 @@ async function issueLeafFromCsr(ca, csrPem, identity, commonName, validDays, now
 		signingKey: ca.privateKey,
 		signingAlgorithm: SIGNING_ALGORITHM,
 		extensions
-	}));
+	})));
 }
 //#endregion
 //#region src/tls/agent-https.ts

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bmah6waF.js");
+const require_dist = require("../../dist-BtDdPdZ7.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Oa as EventCategory, _t as addonPagesCapability, ei as errMsg, ti as BaseAddon } from "../../dist-C9lbdBL5.mjs";
+import { Oa as EventCategory, _t as addonPagesCapability, ei as errMsg, ti as BaseAddon } from "../../dist-DygMs3Qc.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bmah6waF.js");
+const require_dist = require("../../dist-BtDdPdZ7.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Oa as EventCategory, ei as errMsg, ti as BaseAddon, yt as addonWidgetsCapability } from "../../dist-C9lbdBL5.mjs";
+import { Oa as EventCategory, ei as errMsg, ti as BaseAddon, yt as addonWidgetsCapability } from "../../dist-DygMs3Qc.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bmah6waF.js");
+const require_dist = require("../../dist-BtDdPdZ7.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
 //#region src/builtins/alerts/alert-episode-policy.ts
 /**

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Oa as EventCategory, St as alertsCapability, Wi as createEvent, bn as isAlertEpisodeSeverity, bt as alertEpisodeId, ei as errMsg, i as AlertSchema, qi as defineRecordKinds, ti as BaseAddon, xt as alertEpisodePayload, yn as isAlertEpisodeOpen } from "../../dist-C9lbdBL5.mjs";
+import { Oa as EventCategory, St as alertsCapability, Wi as createEvent, bn as isAlertEpisodeSeverity, bt as alertEpisodeId, ei as errMsg, i as AlertSchema, qi as defineRecordKinds, ti as BaseAddon, xt as alertEpisodePayload, yn as isAlertEpisodeOpen } from "../../dist-DygMs3Qc.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
 //#region src/builtins/alerts/alert-episode-policy.ts
 /**

package/dist/builtins/autotrack/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bmah6waF.js");
+const require_dist = require("../../dist-BtDdPdZ7.js");
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/autotrack/index.mjs

@@ -1,4 +1,4 @@
-import { Et as bareAddonId, I as FIRST_LEVEL_MACRO_CLASSES, Oa as EventCategory, ei as errMsg, nr as ptzAutotrackCapability, ta as isEvent, ti as BaseAddon } from "../../dist-C9lbdBL5.mjs";
+import { Et as bareAddonId, I as FIRST_LEVEL_MACRO_CLASSES, Oa as EventCategory, ei as errMsg, nr as ptzAutotrackCapability, ta as isEvent, ti as BaseAddon } from "../../dist-DygMs3Qc.mjs";
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bmah6waF.js");
+const require_dist = require("../../dist-BtDdPdZ7.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
-const require_restore_archive = require("../../restore-archive-DbPmyjiM.js");
+const require_restore_archive = require("../../restore-archive-TDkQfmLO.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,6 +1,6 @@
-import { Ca as toNodeId, Dr as storageOccupancyCapability, Oa as EventCategory, Tt as backupCapability, Vn as mayWriteToLocation, la as nodePin, ti as BaseAddon } from "../../dist-C9lbdBL5.mjs";
+import { Ca as toNodeId, Dr as storageOccupancyCapability, Oa as EventCategory, Tt as backupCapability, Vn as mayWriteToLocation, la as nodePin, ti as BaseAddon } from "../../dist-DygMs3Qc.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
-import { _ as backupRecordStoresOf, a as BackupSnapshotRefusedError, d as ENCRYPTED_BACKUP_SUFFIX, f as generateBackupKeyPair, g as backupOrchestratorRecordKinds, i as BackupCancelledError, l as BackupKeyFormatError, m as parseBackupSecretKey, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as parseBackupPublicKey, r as prepareRestoreArchive, s as SystemBackupService } from "../../restore-archive-C0aohmAK.mjs";
+import { _ as backupRecordStoresOf, a as BackupSnapshotRefusedError, d as ENCRYPTED_BACKUP_SUFFIX, f as generateBackupKeyPair, g as backupOrchestratorRecordKinds, i as BackupCancelledError, l as BackupKeyFormatError, m as parseBackupSecretKey, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as parseBackupPublicKey, r as prepareRestoreArchive, s as SystemBackupService } from "../../restore-archive-D_Pwryre.mjs";
 import { randomUUID } from "node:crypto";
 import * as fsp from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/calendars/calendars.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bmah6waF.js");
+const require_dist = require("../../dist-BtDdPdZ7.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let zod = require("zod");
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/calendars/calendars.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as calendarsCapability, g as CalendarPreferencesSchema, qi as defineRecordKinds, ti as BaseAddon } from "../../dist-C9lbdBL5.mjs";
+import { Mt as calendarsCapability, g as CalendarPreferencesSchema, qi as defineRecordKinds, ti as BaseAddon } from "../../dist-DygMs3Qc.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { z } from "zod";
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/camera-grid/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bmah6waF.js");
+const require_dist = require("../../dist-BtDdPdZ7.js");
 let zod = require("zod");
 let _camstack_types_node = require("@camstack/types/node");
 let node_path = require("node:path");

package/dist/builtins/camera-grid/index.mjs

@@ -1,4 +1,4 @@
-import { $i as hydrateSchema, $r as DeviceType, Br as buildFfmpegArgs, Gn as motionCapability, Hn as memoizePinnedFfmpeg, N as DeclaredDevices, Nt as cameraGridLayoutCapability, Oa as EventCategory, Sr as snapshotCapability, T as DERIVED_CAMERA_SILENCED_CAP_NAMES, Wi as createEvent, X as MOTION_CLOSE_AFTER_MS, Zr as DeviceFeature, a as BaseDevice, ei as errMsg, kr as streamCatalogCapability, qt as declarationOwnerNodeId, ti as BaseAddon } from "../../dist-C9lbdBL5.mjs";
+import { $i as hydrateSchema, $r as DeviceType, Br as buildFfmpegArgs, Gn as motionCapability, Hn as memoizePinnedFfmpeg, N as DeclaredDevices, Nt as cameraGridLayoutCapability, Oa as EventCategory, Sr as snapshotCapability, T as DERIVED_CAMERA_SILENCED_CAP_NAMES, Wi as createEvent, X as MOTION_CLOSE_AFTER_MS, Zr as DeviceFeature, a as BaseDevice, ei as errMsg, kr as streamCatalogCapability, qt as declarationOwnerNodeId, ti as BaseAddon } from "../../dist-DygMs3Qc.mjs";
 import { z } from "zod";
 import { FfmpegProcess } from "@camstack/types/node";
 import { join } from "node:path";

package/dist/builtins/composer/composer.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bmah6waF.js");
-const require_composition_sources = require("../../composition-sources-Dj_nInUQ.js");
+const require_dist = require("../../dist-BtDdPdZ7.js");
+const require_composition_sources = require("../../composition-sources-DeUSUid6.js");
 let zod = require("zod");
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/composer/composer.addon.mjs

@@ -1,5 +1,5 @@
-import { $n as planComposition, $r as DeviceType, Gr as compositionItemFieldPath, Hr as composedDeviceRef, It as composerCapability, Jr as createStatefulExpressionMemory, Kr as compositionSliceKey, Lt as compositionFieldKey, N as DeclaredDevices, Oa as EventCategory, Ot as buildCapabilityLookup, Ur as composedDeviceStableId, Vr as cloneStatefulExpressionMemory, Wi as createEvent, Wr as compositionFeatureEnabled, Xr as toExpressionValue, Yr as disarmRoseMemory, a as BaseDevice, cn as evaluateCompositionField, d as COMPOSED_ITEM_FIXED_FIELDS, dn as expressionContainsBuiltinCall, ei as errMsg, qr as compositionSourceKey, r as ALL_CAPABILITY_DEFINITIONS, ti as BaseAddon, zr as COMPOSER_ADDON_ID } from "../../dist-C9lbdBL5.mjs";
-import { n as normalizedNativeOwner } from "../../composition-sources-cwD35HB0.mjs";
+import { $n as planComposition, $r as DeviceType, Gr as compositionItemFieldPath, Hr as composedDeviceRef, It as composerCapability, Jr as createStatefulExpressionMemory, Kr as compositionSliceKey, Lt as compositionFieldKey, N as DeclaredDevices, Oa as EventCategory, Ot as buildCapabilityLookup, Ur as composedDeviceStableId, Vr as cloneStatefulExpressionMemory, Wi as createEvent, Wr as compositionFeatureEnabled, Xr as toExpressionValue, Yr as disarmRoseMemory, a as BaseDevice, cn as evaluateCompositionField, d as COMPOSED_ITEM_FIXED_FIELDS, dn as expressionContainsBuiltinCall, ei as errMsg, qr as compositionSourceKey, r as ALL_CAPABILITY_DEFINITIONS, ti as BaseAddon, zr as COMPOSER_ADDON_ID } from "../../dist-DygMs3Qc.mjs";
+import { n as normalizedNativeOwner } from "../../composition-sources-CiFkyAcf.mjs";
 import { z } from "zod";
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bmah6waF.js");
+const require_dist = require("../../dist-BtDdPdZ7.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Ln as logDestinationCapability, ti as BaseAddon } from "../../dist-C9lbdBL5.mjs";
+import { Ln as logDestinationCapability, ti as BaseAddon } from "../../dist-DygMs3Qc.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bmah6waF.js");
+const require_dist = require("../../dist-BtDdPdZ7.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
-const require_composition_sources = require("../../composition-sources-Dj_nInUQ.js");
+const require_composition_sources = require("../../composition-sources-DeUSUid6.js");
 const require_prefix_range = require("../../prefix-range-D_KueXbQ.js");
 const require_prefix_walk = require("../../prefix-walk-Dv6MLZlM.js");
 let zod = require("zod");

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,6 +1,6 @@
-import { $i as hydrateSchema, $n as planComposition, Bt as coreBlockComposition, Hi as collectSecretMarkerRefs, Hr as composedDeviceRef, Ht as coreBlockSourceKind, Kn as normalizeCoreBlockWrite, N as DeclaredDevices, Nr as validateComposition, Ot as buildCapabilityLookup, Rt as compositionSourceRefs, Ta as transformSecretWrite, Ut as coreBlocksCapability, Vt as coreBlockIdFromAddonId, Zt as describeComposableCaps, ei as errMsg, f as COMPOSER_RUNNER_ID, ia as isSecretMarker, lr as resolveCoreBlockEntry, m as CORE_BLOCK_ADDON_PREFIX, oa as isSecretRefOwnedBy, or as replacedFieldKeys, p as CORE_BLOCKS_ADDON_ID, qi as defineRecordKinds, qr as compositionSourceKey, r as ALL_CAPABILITY_DEFINITIONS, ti as BaseAddon, ur as resolveCoreBlockFiles, v as CoreBlockSchema, va as resolveSecretMarkers, xa as secretTreeFromSchema, zt as coreBlockAddonId } from "../../dist-C9lbdBL5.mjs";
+import { $i as hydrateSchema, $n as planComposition, Bt as coreBlockComposition, Hi as collectSecretMarkerRefs, Hr as composedDeviceRef, Ht as coreBlockSourceKind, Kn as normalizeCoreBlockWrite, N as DeclaredDevices, Nr as validateComposition, Ot as buildCapabilityLookup, Rt as compositionSourceRefs, Ta as transformSecretWrite, Ut as coreBlocksCapability, Vt as coreBlockIdFromAddonId, Zt as describeComposableCaps, ei as errMsg, f as COMPOSER_RUNNER_ID, ia as isSecretMarker, lr as resolveCoreBlockEntry, m as CORE_BLOCK_ADDON_PREFIX, oa as isSecretRefOwnedBy, or as replacedFieldKeys, p as CORE_BLOCKS_ADDON_ID, qi as defineRecordKinds, qr as compositionSourceKey, r as ALL_CAPABILITY_DEFINITIONS, ti as BaseAddon, ur as resolveCoreBlockFiles, v as CoreBlockSchema, va as resolveSecretMarkers, xa as secretTreeFromSchema, zt as coreBlockAddonId } from "../../dist-DygMs3Qc.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
-import { t as describeCompositionSources } from "../../composition-sources-cwD35HB0.mjs";
+import { t as describeCompositionSources } from "../../composition-sources-CiFkyAcf.mjs";
 import { t as prefixRange } from "../../prefix-range-Dl0znowN.mjs";
 import { n as unwrapStoredValue, t as loadPrefixed } from "../../prefix-walk-DAOBSyH1.mjs";
 import { createRequire } from "node:module";

package/dist/builtins/device-history/device-history.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bmah6waF.js");
+const require_dist = require("../../dist-BtDdPdZ7.js");
 //#region src/builtins/device-history/time/bucket-time.ts
 /**
 * Bucket arithmetic for the three rollup tiers (D850, plan §4/§5.5).

package/dist/builtins/device-history/device-history.addon.mjs

@@ -1,4 +1,4 @@
-import { $r as DeviceType, B as HISTORY_ITEM_CATALOG, Ct as armRemovalReconcile, D as DEVICE_HISTORY_ENERGY_KEY, Oa as EventCategory, Qi as historyItemFieldPath, Yi as emitReadiness, en as deviceHistoryCapability, nn as deviceRemovalHookCapability, ti as BaseAddon, ui as HISTORY_DEFAULT_MIN_INTERVAL_MS, z as HISTORY_CATALOG } from "../../dist-C9lbdBL5.mjs";
+import { $r as DeviceType, B as HISTORY_ITEM_CATALOG, Ct as armRemovalReconcile, D as DEVICE_HISTORY_ENERGY_KEY, Oa as EventCategory, Qi as historyItemFieldPath, Yi as emitReadiness, en as deviceHistoryCapability, nn as deviceRemovalHookCapability, ti as BaseAddon, ui as HISTORY_DEFAULT_MIN_INTERVAL_MS, z as HISTORY_CATALOG } from "../../dist-DygMs3Qc.mjs";
 //#region src/builtins/device-history/time/bucket-time.ts
 /**
 * Bucket arithmetic for the three rollup tiers (D850, plan §4/§5.5).

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bmah6waF.js");
+const require_dist = require("../../dist-BtDdPdZ7.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
 const require_prefix_range = require("../../prefix-range-D_KueXbQ.js");
 const require_prefix_walk = require("../../prefix-walk-Dv6MLZlM.js");
@@ -8988,6 +8988,48 @@ function errorMessage$3(err) {
 	return err instanceof Error ? err.message : String(err);
 }
 //#endregion
+//#region src/builtins/device-manager/running-flip.ts
+function readRunning(slice) {
+	const running = slice["running"];
+	if (running === true || running === false) return running;
+	return null;
+}
+var RunningFlipDetector = class {
+	#memory = /* @__PURE__ */ new Map();
+	seed(deviceId, running) {
+		this.#memory.set(deviceId, running);
+	}
+	note(deviceId, slice) {
+		const running = readRunning(slice);
+		const since = typeof slice["since"] === "number" && Number.isFinite(slice["since"]) ? slice["since"] : null;
+		const phase = typeof slice["phase"] === "string" ? slice["phase"] : null;
+		const prev = this.#memory.get(deviceId);
+		this.#memory.set(deviceId, running);
+		if (prev === void 0) {
+			if (running === true) return {
+				kind: "started",
+				deviceId,
+				since,
+				phase
+			};
+			return null;
+		}
+		if (prev === true && running === false) return {
+			kind: "finished",
+			deviceId,
+			since,
+			phase
+		};
+		if (prev !== true && running === true) return {
+			kind: "started",
+			deviceId,
+			since,
+			phase
+		};
+		return null;
+	}
+};
+//#endregion
 //#region src/builtins/device-manager/runtime-state-persist-gate.ts
 /**
 * The subset of `blob` that is allowed on disk: slices whose capability
@@ -9490,6 +9532,7 @@ var MirrorRowWriter = class MirrorRowWriter {
 * the owner alone — `nativeSlice` and `DeviceNativeShadowChanged`, a category
 * the public routers refuse (D224).
 */
+var RUNNING_STATE_CAP = "running-state";
 var SEED_REFUSAL_MESSAGE = "runtime-state row unreadable — native write refused until it reads";
 function errorMessage$1(err) {
 	return err instanceof Error ? err.message : String(err);
@@ -9524,6 +9567,8 @@ var DeviceStateMirror = class {
 	seedRefusalLogged = /* @__PURE__ */ new Set();
 	/** Every write of a device's row, and what is believed to be on it. */
 	writer;
+	/** Edge detector for `running-state` flip events (D933). */
+	runningFlip = new RunningFlipDetector();
 	constructor(ctx, policyFor = require_dist.runtimeStatePolicyFor, schemaFor = defaultSchemaFor) {
 		this.ctx = ctx;
 		this.policyFor = policyFor;
@@ -9931,6 +9976,7 @@ var DeviceStateMirror = class {
 			meta: { caps: split.dropped }
 		});
 		for (const [capName, cap] of this.claims.claimsOf(deviceId)) this.claims.seedView(deviceId, capName, cap, this.nativeOf(deviceId, capName));
+		this.seedRunningFlip(deviceId);
 		this.seeded.add(deviceId);
 		this.rowRead.add(deviceId);
 		this.writer.markPersisted(deviceId, persistableBlob(joinRuntimeBlob(split.native, split.owned, this.policyFor), this.policyFor));
@@ -10038,12 +10084,36 @@ var DeviceStateMirror = class {
 		for (const deviceId of deviceIds) out[String(deviceId)] = this.snapshotForDevice(deviceId);
 		return out;
 	}
+	/** Remember a restored running bit so the first public merge does not emit a flip. */
+	seedRunningFlip(deviceId) {
+		const slice = this.capSlice(deviceId, RUNNING_STATE_CAP);
+		if (slice === null) return;
+		const running = slice["running"];
+		this.runningFlip.seed(deviceId, running === true || running === false ? running : null);
+	}
 	/**
 	* The PUBLIC event: exactly `{ deviceId, capName, slice }` for every device,
 	* claimed or not. The native shadow never rides here (D224) — see
 	* `emitNativeShadow`.
 	*/
 	emitStateChanged(deviceId, capName, slice) {
+		if (capName === RUNNING_STATE_CAP) {
+			const flip = this.runningFlip.note(deviceId, slice);
+			if (flip !== null) this.ctx.eventBus.emit({
+				id: (0, node_crypto.randomUUID)(),
+				timestamp: /* @__PURE__ */ new Date(),
+				source: {
+					type: "device",
+					id: deviceId
+				},
+				category: flip.kind === "started" ? require_dist.EventCategory.RunningStarted : require_dist.EventCategory.RunningFinished,
+				data: {
+					deviceId: flip.deviceId,
+					since: flip.since,
+					phase: flip.phase
+				}
+			});
+		}
 		this.ctx.eventBus.emit({
 			id: (0, node_crypto.randomUUID)(),
 			timestamp: /* @__PURE__ */ new Date(),

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,4 +1,4 @@
-import { $r as DeviceType, $t as deviceExtensionCapability, Ea as userError, F as DeviceTombstoneSchema, In as locationIconKey, L as FieldClaimModeSchema, Mn as legacyAutoLinkIds, Ni as WELL_KNOWN_TAB_MAP, Oa as EventCategory, Oi as SECRET_CLEAR, P as DeviceStatusSchema, Pt as canonicalIconKey, Qr as DeviceRole, R as FieldClaimSchema, Sa as sleep$1, Ta as transformSecretWrite, Ui as collectZodSecretPaths, Wt as createDeviceExtensionProvider, Y as MINUTES_PER_DAY, Yt as defineExtensionSlotProvider, Zn as parseStreamParamsFormPatch, Zr as DeviceFeature, aa as isSecretMarkerLike, ba as secretTreeFromPaths, ea as isDeviceConfigCap, ei as errMsg, gn as formatMinutes, hr as runtimeStatePolicyFor, ia as isSecretMarker, in as deviceStatusCapability, jt as buildStreamParamsConfigSchema, l as CAP_NAMES_WITH_STATUS, na as isKeychainStoredField, on as enumerateItemArrayFields, ot as STREAM_PROFILE_META, qi as defineRecordKinds, qn as normalizeUnit, r as ALL_CAPABILITY_DEFINITIONS, ra as isSecretClear, rn as deviceStateCapability, s as CAMERA_SWITCH_ORDER, sn as enumerateSchemaFields, ti as BaseAddon, tn as deviceManagerCapability, un as expandContainer, va as resolveSecretMarkers, w as DAY_NAMES, wa as toSecretFieldView, xr as siteZoneKey } from "../../dist-C9lbdBL5.mjs";
+import { $r as DeviceType, $t as deviceExtensionCapability, Ea as userError, F as DeviceTombstoneSchema, In as locationIconKey, L as FieldClaimModeSchema, Mn as legacyAutoLinkIds, Ni as WELL_KNOWN_TAB_MAP, Oa as EventCategory, Oi as SECRET_CLEAR, P as DeviceStatusSchema, Pt as canonicalIconKey, Qr as DeviceRole, R as FieldClaimSchema, Sa as sleep$1, Ta as transformSecretWrite, Ui as collectZodSecretPaths, Wt as createDeviceExtensionProvider, Y as MINUTES_PER_DAY, Yt as defineExtensionSlotProvider, Zn as parseStreamParamsFormPatch, Zr as DeviceFeature, aa as isSecretMarkerLike, ba as secretTreeFromPaths, ea as isDeviceConfigCap, ei as errMsg, gn as formatMinutes, hr as runtimeStatePolicyFor, ia as isSecretMarker, in as deviceStatusCapability, jt as buildStreamParamsConfigSchema, l as CAP_NAMES_WITH_STATUS, na as isKeychainStoredField, on as enumerateItemArrayFields, ot as STREAM_PROFILE_META, qi as defineRecordKinds, qn as normalizeUnit, r as ALL_CAPABILITY_DEFINITIONS, ra as isSecretClear, rn as deviceStateCapability, s as CAMERA_SWITCH_ORDER, sn as enumerateSchemaFields, ti as BaseAddon, tn as deviceManagerCapability, un as expandContainer, va as resolveSecretMarkers, w as DAY_NAMES, wa as toSecretFieldView, xr as siteZoneKey } from "../../dist-DygMs3Qc.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
 import { t as prefixRange } from "../../prefix-range-Dl0znowN.mjs";
 import { t as loadPrefixed } from "../../prefix-walk-DAOBSyH1.mjs";
@@ -8982,6 +8982,48 @@ function errorMessage$3(err) {
 	return err instanceof Error ? err.message : String(err);
 }
 //#endregion
+//#region src/builtins/device-manager/running-flip.ts
+function readRunning(slice) {
+	const running = slice["running"];
+	if (running === true || running === false) return running;
+	return null;
+}
+var RunningFlipDetector = class {
+	#memory = /* @__PURE__ */ new Map();
+	seed(deviceId, running) {
+		this.#memory.set(deviceId, running);
+	}
+	note(deviceId, slice) {
+		const running = readRunning(slice);
+		const since = typeof slice["since"] === "number" && Number.isFinite(slice["since"]) ? slice["since"] : null;
+		const phase = typeof slice["phase"] === "string" ? slice["phase"] : null;
+		const prev = this.#memory.get(deviceId);
+		this.#memory.set(deviceId, running);
+		if (prev === void 0) {
+			if (running === true) return {
+				kind: "started",
+				deviceId,
+				since,
+				phase
+			};
+			return null;
+		}
+		if (prev === true && running === false) return {
+			kind: "finished",
+			deviceId,
+			since,
+			phase
+		};
+		if (prev !== true && running === true) return {
+			kind: "started",
+			deviceId,
+			since,
+			phase
+		};
+		return null;
+	}
+};
+//#endregion
 //#region src/builtins/device-manager/runtime-state-persist-gate.ts
 /**
 * The subset of `blob` that is allowed on disk: slices whose capability
@@ -9484,6 +9526,7 @@ var MirrorRowWriter = class MirrorRowWriter {
 * the owner alone — `nativeSlice` and `DeviceNativeShadowChanged`, a category
 * the public routers refuse (D224).
 */
+var RUNNING_STATE_CAP = "running-state";
 var SEED_REFUSAL_MESSAGE = "runtime-state row unreadable — native write refused until it reads";
 function errorMessage$1(err) {
 	return err instanceof Error ? err.message : String(err);
@@ -9518,6 +9561,8 @@ var DeviceStateMirror = class {
 	seedRefusalLogged = /* @__PURE__ */ new Set();
 	/** Every write of a device's row, and what is believed to be on it. */
 	writer;
+	/** Edge detector for `running-state` flip events (D933). */
+	runningFlip = new RunningFlipDetector();
 	constructor(ctx, policyFor = runtimeStatePolicyFor, schemaFor = defaultSchemaFor) {
 		this.ctx = ctx;
 		this.policyFor = policyFor;
@@ -9925,6 +9970,7 @@ var DeviceStateMirror = class {
 			meta: { caps: split.dropped }
 		});
 		for (const [capName, cap] of this.claims.claimsOf(deviceId)) this.claims.seedView(deviceId, capName, cap, this.nativeOf(deviceId, capName));
+		this.seedRunningFlip(deviceId);
 		this.seeded.add(deviceId);
 		this.rowRead.add(deviceId);
 		this.writer.markPersisted(deviceId, persistableBlob(joinRuntimeBlob(split.native, split.owned, this.policyFor), this.policyFor));
@@ -10032,12 +10078,36 @@ var DeviceStateMirror = class {
 		for (const deviceId of deviceIds) out[String(deviceId)] = this.snapshotForDevice(deviceId);
 		return out;
 	}
+	/** Remember a restored running bit so the first public merge does not emit a flip. */
+	seedRunningFlip(deviceId) {
+		const slice = this.capSlice(deviceId, RUNNING_STATE_CAP);
+		if (slice === null) return;
+		const running = slice["running"];
+		this.runningFlip.seed(deviceId, running === true || running === false ? running : null);
+	}
 	/**
 	* The PUBLIC event: exactly `{ deviceId, capName, slice }` for every device,
 	* claimed or not. The native shadow never rides here (D224) — see
 	* `emitNativeShadow`.
 	*/
 	emitStateChanged(deviceId, capName, slice) {
+		if (capName === RUNNING_STATE_CAP) {
+			const flip = this.runningFlip.note(deviceId, slice);
+			if (flip !== null) this.ctx.eventBus.emit({
+				id: randomUUID(),
+				timestamp: /* @__PURE__ */ new Date(),
+				source: {
+					type: "device",
+					id: deviceId
+				},
+				category: flip.kind === "started" ? EventCategory.RunningStarted : EventCategory.RunningFinished,
+				data: {
+					deviceId: flip.deviceId,
+					since: flip.since,
+					phase: flip.phase
+				}
+			});
+		}
 		this.ctx.eventBus.emit({
 			id: randomUUID(),
 			timestamp: /* @__PURE__ */ new Date(),

package/dist/builtins/device-manager/device-state-mirror.d.ts

@@ -58,6 +58,8 @@ export declare class DeviceStateMirror {
 	private readonly seedRefusalLogged;
 	/** Every write of a device's row, and what is believed to be on it. */
 	private readonly writer;
+	/** Edge detector for `running-state` flip events (D933). */
+	private readonly runningFlip;
 	constructor(ctx: AddonContext, policyFor?: RuntimeStatePolicyLookup, schemaFor?: RuntimeStateSchemaLookup);
 	/**
 	* Single-cap mirror update — diff against the current mirror,
@@ -247,6 +249,8 @@ export declare class DeviceStateMirror {
 	/** Whole-system mirror dump. Backs `deviceState.getAllSnapshots` — one
 	*  round-trip for a warm boot instead of N per-device calls. */
 	allSnapshots(): Record<string, Record<string, Record<string, unknown>>>;
+	/** Remember a restored running bit so the first public merge does not emit a flip. */
+	private seedRunningFlip;
 	/**
 	* The PUBLIC event: exactly `{ deviceId, capName, slice }` for every device,
 	* claimed or not. The native shadow never rides here (D224) — see

package/dist/builtins/device-manager/running-flip.d.ts

@@ -0,0 +1,11 @@
+export interface RunningFlipEvent {
+	readonly kind: "started" | "finished";
+	readonly deviceId: number;
+	readonly since: number | null;
+	readonly phase: string | null;
+}
+export declare class RunningFlipDetector {
+	#private;
+	seed(deviceId: number, running: boolean | null): void;
+	note(deviceId: number, slice: Record<string, unknown>): RunningFlipEvent | null;
+}

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bmah6waF.js");
+const require_dist = require("../../dist-BtDdPdZ7.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Ln as logDestinationCapability, ti as BaseAddon } from "../../dist-C9lbdBL5.mjs";
+import { Ln as logDestinationCapability, ti as BaseAddon } from "../../dist-DygMs3Qc.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;