@camstack/system 1.2.475 → 1.2.476

package/dist/{agent-https-BsqT0qni.js → agent-https-DkXBXEvz.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-BtDdPdZ7.js");
+const require_dist = require("./dist-CNU7cdFf.js");
 const require_x509_es = require("./x509.es-WtnRNyYS.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/{agent-https-wA8gGLc1.mjs → agent-https-vpf_D97z.mjs}

@@ -1,4 +1,4 @@
-import { qi as defineRecordKinds } from "./dist-DygMs3Qc.mjs";
+import { qi as defineRecordKinds } from "./dist-B_V9r61Z.mjs";
 import { C as backdatedNotBefore, S as withUtcTimeEncoding, _ as NameConstraints, a as KeyUsageFlags, c as Pkcs10CertificateRequest, d as SubjectKeyIdentifierExtension, f as X509Certificate$1, g as GeneralSubtrees, h as GeneralSubtree, i as Extension, l as Pkcs10CertificateRequestGenerator, m as cryptoProvider, n as BasicConstraintsExtension, o as KeyUsagesExtension, p as X509CertificateGenerator, r as ExtendedKeyUsageExtension, s as PemConverter, t as AuthorityKeyIdentifierExtension, u as SubjectAlternativeNameExtension, v as GeneralName, x as AsnConvert } from "./x509.es-BRiJgOvu.mjs";
 import { z } from "zod";
 import { X509Certificate, createHash, createPrivateKey, randomBytes, webcrypto } from "node:crypto";

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BtDdPdZ7.js");
+const require_dist = require("../../dist-CNU7cdFf.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Oa as EventCategory, _t as addonPagesCapability, ei as errMsg, ti as BaseAddon } from "../../dist-DygMs3Qc.mjs";
+import { Oa as EventCategory, _t as addonPagesCapability, ei as errMsg, ti as BaseAddon } from "../../dist-B_V9r61Z.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BtDdPdZ7.js");
+const require_dist = require("../../dist-CNU7cdFf.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Oa as EventCategory, ei as errMsg, ti as BaseAddon, yt as addonWidgetsCapability } from "../../dist-DygMs3Qc.mjs";
+import { Oa as EventCategory, ei as errMsg, ti as BaseAddon, yt as addonWidgetsCapability } from "../../dist-B_V9r61Z.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BtDdPdZ7.js");
+const require_dist = require("../../dist-CNU7cdFf.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
 //#region src/builtins/alerts/alert-episode-policy.ts
 /**

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Oa as EventCategory, St as alertsCapability, Wi as createEvent, bn as isAlertEpisodeSeverity, bt as alertEpisodeId, ei as errMsg, i as AlertSchema, qi as defineRecordKinds, ti as BaseAddon, xt as alertEpisodePayload, yn as isAlertEpisodeOpen } from "../../dist-DygMs3Qc.mjs";
+import { Oa as EventCategory, St as alertsCapability, Wi as createEvent, bn as isAlertEpisodeSeverity, bt as alertEpisodeId, ei as errMsg, i as AlertSchema, qi as defineRecordKinds, ti as BaseAddon, xt as alertEpisodePayload, yn as isAlertEpisodeOpen } from "../../dist-B_V9r61Z.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
 //#region src/builtins/alerts/alert-episode-policy.ts
 /**

package/dist/builtins/autotrack/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BtDdPdZ7.js");
+const require_dist = require("../../dist-CNU7cdFf.js");
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/autotrack/index.mjs

@@ -1,4 +1,4 @@
-import { Et as bareAddonId, I as FIRST_LEVEL_MACRO_CLASSES, Oa as EventCategory, ei as errMsg, nr as ptzAutotrackCapability, ta as isEvent, ti as BaseAddon } from "../../dist-DygMs3Qc.mjs";
+import { Et as bareAddonId, I as FIRST_LEVEL_MACRO_CLASSES, Oa as EventCategory, ei as errMsg, nr as ptzAutotrackCapability, ta as isEvent, ti as BaseAddon } from "../../dist-B_V9r61Z.mjs";
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BtDdPdZ7.js");
+const require_dist = require("../../dist-CNU7cdFf.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
-const require_restore_archive = require("../../restore-archive-TDkQfmLO.js");
+const require_restore_archive = require("../../restore-archive-BtCheeWu.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,6 +1,6 @@
-import { Ca as toNodeId, Dr as storageOccupancyCapability, Oa as EventCategory, Tt as backupCapability, Vn as mayWriteToLocation, la as nodePin, ti as BaseAddon } from "../../dist-DygMs3Qc.mjs";
+import { Ca as toNodeId, Dr as storageOccupancyCapability, Oa as EventCategory, Tt as backupCapability, Vn as mayWriteToLocation, la as nodePin, ti as BaseAddon } from "../../dist-B_V9r61Z.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
-import { _ as backupRecordStoresOf, a as BackupSnapshotRefusedError, d as ENCRYPTED_BACKUP_SUFFIX, f as generateBackupKeyPair, g as backupOrchestratorRecordKinds, i as BackupCancelledError, l as BackupKeyFormatError, m as parseBackupSecretKey, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as parseBackupPublicKey, r as prepareRestoreArchive, s as SystemBackupService } from "../../restore-archive-D_Pwryre.mjs";
+import { _ as backupRecordStoresOf, a as BackupSnapshotRefusedError, d as ENCRYPTED_BACKUP_SUFFIX, f as generateBackupKeyPair, g as backupOrchestratorRecordKinds, i as BackupCancelledError, l as BackupKeyFormatError, m as parseBackupSecretKey, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as parseBackupPublicKey, r as prepareRestoreArchive, s as SystemBackupService } from "../../restore-archive-CDo4Zlmx.mjs";
 import { randomUUID } from "node:crypto";
 import * as fsp from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/calendars/calendars.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BtDdPdZ7.js");
+const require_dist = require("../../dist-CNU7cdFf.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let zod = require("zod");
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/calendars/calendars.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as calendarsCapability, g as CalendarPreferencesSchema, qi as defineRecordKinds, ti as BaseAddon } from "../../dist-DygMs3Qc.mjs";
+import { Mt as calendarsCapability, g as CalendarPreferencesSchema, qi as defineRecordKinds, ti as BaseAddon } from "../../dist-B_V9r61Z.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { z } from "zod";
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/camera-grid/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BtDdPdZ7.js");
+const require_dist = require("../../dist-CNU7cdFf.js");
 let zod = require("zod");
 let _camstack_types_node = require("@camstack/types/node");
 let node_path = require("node:path");

package/dist/builtins/camera-grid/index.mjs

@@ -1,4 +1,4 @@
-import { $i as hydrateSchema, $r as DeviceType, Br as buildFfmpegArgs, Gn as motionCapability, Hn as memoizePinnedFfmpeg, N as DeclaredDevices, Nt as cameraGridLayoutCapability, Oa as EventCategory, Sr as snapshotCapability, T as DERIVED_CAMERA_SILENCED_CAP_NAMES, Wi as createEvent, X as MOTION_CLOSE_AFTER_MS, Zr as DeviceFeature, a as BaseDevice, ei as errMsg, kr as streamCatalogCapability, qt as declarationOwnerNodeId, ti as BaseAddon } from "../../dist-DygMs3Qc.mjs";
+import { $i as hydrateSchema, $r as DeviceType, Br as buildFfmpegArgs, Gn as motionCapability, Hn as memoizePinnedFfmpeg, N as DeclaredDevices, Nt as cameraGridLayoutCapability, Oa as EventCategory, Sr as snapshotCapability, T as DERIVED_CAMERA_SILENCED_CAP_NAMES, Wi as createEvent, X as MOTION_CLOSE_AFTER_MS, Zr as DeviceFeature, a as BaseDevice, ei as errMsg, kr as streamCatalogCapability, qt as declarationOwnerNodeId, ti as BaseAddon } from "../../dist-B_V9r61Z.mjs";
 import { z } from "zod";
 import { FfmpegProcess } from "@camstack/types/node";
 import { join } from "node:path";

package/dist/builtins/composer/composer-live-set.d.ts

@@ -1,4 +1,4 @@
-import type { ClaimGate, ClaimKey } from "./claim-gate.js";
+import { type ClaimGate, type ClaimKey } from "./claim-gate.js";
 import type { PlannedBlock } from "./composer-plan.js";
 import type { LiveComposition } from "./composer-verdict.js";
 import type { TrackedSourceRequest } from "./source-tracker.js";
@@ -20,3 +20,11 @@ export declare function trackedSourceRequests(live: Iterable<LiveComposition>):
 * are. A disabled block wants none (rule 7).
 */
 export declare function wantedClaims(live: ReadonlyMap<string, LiveComposition>, claimGate: Pick<ClaimGate, "claimsOf">): readonly ClaimKey[];
+/**
+* Claims an operator has already confirmed are no longer wanted: a deleted
+* block (`retiredBlockIds`), or a cap an edit dropped. Released on this apply,
+* not after a second one — a missing block in a single snapshot is still the
+* two-apply gate (`wantedClaims`). A disabled block is not here: its runtime
+* hands the fields back itself.
+*/
+export declare function confirmedReleaseKeys(retiredBlockIds: readonly string[], planned: readonly PlannedBlock[], previous: ReadonlyMap<string, LiveComposition>, claimGate: Pick<ClaimGate, "claimsOf">): readonly ClaimKey[];

package/dist/builtins/composer/composer.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BtDdPdZ7.js");
-const require_composition_sources = require("../../composition-sources-DeUSUid6.js");
+const require_dist = require("../../dist-CNU7cdFf.js");
+const require_composition_sources = require("../../composition-sources-BNOP9mFp.js");
 let zod = require("zod");
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */
@@ -793,6 +793,41 @@ function wantedClaims(live, claimGate) {
 	for (const owner of held) wanted.push(...claimGate.claimsOf(owner));
 	return wanted;
 }
+/**
+* Claims an operator has already confirmed are no longer wanted: a deleted
+* block (`retiredBlockIds`), or a cap an edit dropped. Released on this apply,
+* not after a second one — a missing block in a single snapshot is still the
+* two-apply gate (`wantedClaims`). A disabled block is not here: its runtime
+* hands the fields back itself.
+*/
+function confirmedReleaseKeys(retiredBlockIds, planned, previous, claimGate) {
+	const retired = new Set(retiredBlockIds);
+	const seen = /* @__PURE__ */ new Set();
+	const keys = [];
+	const push = (key) => {
+		const id = claimKey(key);
+		if (seen.has(id)) return;
+		seen.add(id);
+		keys.push(key);
+	};
+	for (const owner of retired) for (const key of claimGate.claimsOf(owner)) push(key);
+	const plannedById = new Map(planned.map((block) => [block.block.id, block]));
+	for (const [blockId, entry] of previous) {
+		if (retired.has(blockId)) continue;
+		const next = plannedById.get(blockId);
+		if (next === void 0 || !next.block.enabled) continue;
+		if (entry.planned.block.updatedAt === next.block.updatedAt) continue;
+		for (const key of claimGate.claimsOf(blockId)) if (!planStillWantsClaim(next, key)) push(key);
+	}
+	return keys;
+}
+/** True when this plan still holds `key` — including while the plan cannot say, so a bad read releases nothing. */
+function planStillWantsClaim(planned, key) {
+	const target = planned.target;
+	if (target.kind !== "existing") return false;
+	if (target.waiting !== null || target.gone !== null || target.deviceId === null || planned.problems.length > 0) return true;
+	return target.deviceId === key.deviceId && target.features.some((feature) => feature.cap === key.capName);
+}
 //#endregion
 //#region src/builtins/composer/composition-declarations.ts
 /**
@@ -1718,6 +1753,13 @@ var CompositionRuntime = class {
 		this.stopped = true;
 		this.deps.timer.disarm();
 	}
+	/** `stop`, then wait until the target has sent nothing further. */
+	quiesce() {
+		this.stop();
+		const quiesce = this.deps.target.quiesce;
+		if (quiesce === void 0) return Promise.resolve();
+		return quiesce.call(this.deps.target);
+	}
 	state() {
 		return {
 			failure: this.failure,
@@ -2221,6 +2263,10 @@ var OwnedFieldsTarget = class {
 	listeners = [];
 	/** Per cap, bumped by every `withhold`: a claim that settles under another epoch claimed a stale field set and does not land (I-2). */
 	epoch = /* @__PURE__ */ new Map();
+	/** Set by `quiesce`: nothing further is sent. */
+	closed = false;
+	idle = Promise.resolve();
+	markIdle = null;
 	constructor(deps) {
 		this.deps = deps;
 		this.id = deps.deviceId;
@@ -2245,6 +2291,27 @@ var OwnedFieldsTarget = class {
 	}
 	/** `device-status` belongs to the native device; availability lives in the block report only. */
 	setAvailable(_available) {}
+	/**
+	* The block has stopped. Writes still queued are dropped; the call in flight
+	* is allowed to finish, and then nothing else is sent.
+	*/
+	quiesce() {
+		this.closed = true;
+		const dropped = [...this.pending.keys()];
+		this.pending = /* @__PURE__ */ new Map();
+		for (const cap of dropped) this.deps.logger.info("composed write dropped — the block stopped before it was sent", {
+			tags: { deviceId: this.deps.deviceId },
+			meta: {
+				cap,
+				owner: this.deps.owner
+			}
+		});
+		if (this.inFlight.size === 0) return Promise.resolve();
+		if (this.markIdle === null) this.idle = new Promise((resolve) => {
+			this.markIdle = resolve;
+		});
+		return this.idle;
+	}
 	onAsyncFailure(listener) {
 		this.listeners = [...this.listeners, listener];
 	}
@@ -2260,6 +2327,17 @@ var OwnedFieldsTarget = class {
 		return this.deps.fieldsOf(cap).filter((f) => held === void 0 || !held.has(f));
 	}
 	enqueue(cap, op) {
+		if (this.closed) {
+			this.deps.logger.info("composed write dropped — the block stopped before it was sent", {
+				tags: { deviceId: this.deps.deviceId },
+				meta: {
+					cap,
+					owner: this.deps.owner,
+					op: op.kind
+				}
+			});
+			return;
+		}
 		if (!this.inFlight.has(cap)) {
 			this.send(cap, op);
 			return;
@@ -2282,6 +2360,11 @@ var OwnedFieldsTarget = class {
 	}
 	settled(cap) {
 		this.inFlight = new Set([...this.inFlight].filter((c) => c !== cap));
+		if (this.closed) {
+			this.pending = /* @__PURE__ */ new Map();
+			if (this.inFlight.size === 0) this.markIdle?.();
+			return;
+		}
 		const next = this.pending.get(cap);
 		if (next === void 0) return;
 		this.pending = new Map([...this.pending].filter(([c]) => c !== cap));
@@ -2698,7 +2781,11 @@ function verdictOf(blockId, entry, unsynced, grafts = null) {
 * filter in `composer.addon.ts` stays load-bearing. Its fields are CLAIMED on
 * the hub under the block id (`OwnedFieldsTarget`), and released through the
 * `ClaimGate` — two applies must agree, seeded at boot from the claims index —
-* when the block is gone, disabled, or lost the feature. Its own replaced
+* when the block merely vanished from one snapshot. An operator delete
+* (`retiredBlockIds`) or an edit that drops a cap releases those claims on
+* THIS apply, after the old runtime has quiesced and before any replacement
+* claims; a release that does not land is logged with `tags: { deviceId }` and
+* returned on the apply. Its own replaced
 * fields are read in the NATIVE view (rule 6). Its target row gone on two
 * agreeing index reads fails the block by name and ungrafts what it added —
 * whether the loss was seen on `device.unregistered` or on a later plan; its
@@ -2846,12 +2933,16 @@ var Composer = class {
 			};
 		});
 		await this.composed.reconcile(gate.integrationId, declarations, planned);
+		const releasing = confirmedReleaseKeys(input.retiredBlockIds ?? [], planned, this.live, this.claimGate);
 		const rebuilt = await this.rebuildRuntimes(planned, declarations, restart, rebuildErrors);
+		await Promise.all(rebuilt.stopped.map((runtime) => runtime.quiesce()));
+		const unreleasedClaims = await this.releaseConfirmed(releasing);
 		await this.syncSources(rebuilt);
 		await this.reconcileClaims();
 		return {
 			blocks: planned.map((p) => this.verdict(p.block.id)),
-			acted: true
+			acted: true,
+			unreleasedClaims
 		};
 	}
 	plan(block, restart, claimsWait) {
@@ -2872,7 +2963,13 @@ var Composer = class {
 	async rebuildRuntimes(planned, declarations, restart, rebuildErrors) {
 		const reset = /* @__PURE__ */ new Set();
 		const fresh = /* @__PURE__ */ new Set();
+		const stopped = [];
 		const next = /* @__PURE__ */ new Map();
+		const halt = (runtime) => {
+			if (runtime === null) return;
+			runtime.stop();
+			stopped.push(runtime);
+		};
 		for (const p of planned) {
 			const previous = this.live.get(p.block.id);
 			const lost = lostTarget(p, previous?.planned);
@@ -2943,7 +3040,7 @@ var Composer = class {
 				enabled: p.block.enabled,
 				settled: p.problems.length === 0
 			});
-			previous?.runtime?.stop();
+			halt(previous?.runtime ?? null);
 			if (runtime !== null) fresh.add(runtime);
 			next.set(p.block.id, {
 				planned: p,
@@ -2958,12 +3055,15 @@ var Composer = class {
 		for (const [blockId, entry] of this.live) {
 			if (next.has(blockId)) continue;
 			if (held.has(require_dist.composedDeviceStableId(blockId))) next.set(blockId, entry);
-			else entry.runtime?.stop();
+			else halt(entry.runtime);
 		}
 		this.live = next;
 		const liveRuntimes = new Set([...next.values()].map((e) => e.runtime));
 		this.unsynced = new Set([...[...this.unsynced].filter((r) => liveRuntimes.has(r)), ...fresh]);
-		return { reset };
+		return {
+			reset,
+			stopped
+		};
 	}
 	ungraftGone(blockId, target, deviceId) {
 		this.grafts.gone(deviceId);
@@ -3047,21 +3147,40 @@ var Composer = class {
 		if (!this.claimSeed.done) return;
 		for (const key of this.claimGate.filter(wantedClaims(this.live, this.claimGate))) await this.release(key);
 	}
+	/** Confirmed releases, awaited. A failure is the string the hub gave; the gate retries it later. */
+	async releaseConfirmed(keys) {
+		const unreleased = [];
+		for (const key of keys) {
+			const error = await this.release(key);
+			if (error === null) continue;
+			unreleased.push({
+				deviceId: key.deviceId,
+				capName: key.capName,
+				owner: key.owner,
+				error
+			});
+		}
+		return unreleased;
+	}
+	/** Null when the hub confirmed the release (or held nothing of ours). */
 	async release(key) {
 		let outcome;
 		try {
 			outcome = await this.deps.claims.releaseClaim(key);
 		} catch (err) {
-			this.claimGate.releaseFailed(key, require_dist.errMsg(err));
-			return;
+			const error = require_dist.errMsg(err);
+			this.claimGate.releaseFailed(key, error);
+			return error;
 		}
 		if (!outcome.ok && !RELEASE_SETTLED_CODES.has(outcome.code)) {
-			this.claimGate.releaseFailed(key, `${outcome.code}: ${outcome.message}`);
-			return;
+			const error = `${outcome.code}: ${outcome.message}`;
+			this.claimGate.releaseFailed(key, error);
+			return error;
 		}
 		this.claimGate.released(key, outcome.ok ? "released" : outcome.code);
 		await this.grafts.released(key.deviceId, key.capName);
 		await this.onClaimEvent(key.deviceId, key.capName, key.owner, "free");
+		return null;
 	}
 	/**
 	* Rule 5: a customization whose target row is gone — the tracker's two

package/dist/builtins/composer/composer.addon.mjs

@@ -1,5 +1,5 @@
-import { $n as planComposition, $r as DeviceType, Gr as compositionItemFieldPath, Hr as composedDeviceRef, It as composerCapability, Jr as createStatefulExpressionMemory, Kr as compositionSliceKey, Lt as compositionFieldKey, N as DeclaredDevices, Oa as EventCategory, Ot as buildCapabilityLookup, Ur as composedDeviceStableId, Vr as cloneStatefulExpressionMemory, Wi as createEvent, Wr as compositionFeatureEnabled, Xr as toExpressionValue, Yr as disarmRoseMemory, a as BaseDevice, cn as evaluateCompositionField, d as COMPOSED_ITEM_FIXED_FIELDS, dn as expressionContainsBuiltinCall, ei as errMsg, qr as compositionSourceKey, r as ALL_CAPABILITY_DEFINITIONS, ti as BaseAddon, zr as COMPOSER_ADDON_ID } from "../../dist-DygMs3Qc.mjs";
-import { n as normalizedNativeOwner } from "../../composition-sources-CiFkyAcf.mjs";
+import { $n as planComposition, $r as DeviceType, Gr as compositionItemFieldPath, Hr as composedDeviceRef, It as composerCapability, Jr as createStatefulExpressionMemory, Kr as compositionSliceKey, Lt as compositionFieldKey, N as DeclaredDevices, Oa as EventCategory, Ot as buildCapabilityLookup, Ur as composedDeviceStableId, Vr as cloneStatefulExpressionMemory, Wi as createEvent, Wr as compositionFeatureEnabled, Xr as toExpressionValue, Yr as disarmRoseMemory, a as BaseDevice, cn as evaluateCompositionField, d as COMPOSED_ITEM_FIXED_FIELDS, dn as expressionContainsBuiltinCall, ei as errMsg, qr as compositionSourceKey, r as ALL_CAPABILITY_DEFINITIONS, ti as BaseAddon, zr as COMPOSER_ADDON_ID } from "../../dist-B_V9r61Z.mjs";
+import { n as normalizedNativeOwner } from "../../composition-sources-B5nK7pHt.mjs";
 import { z } from "zod";
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */
@@ -788,6 +788,41 @@ function wantedClaims(live, claimGate) {
 	for (const owner of held) wanted.push(...claimGate.claimsOf(owner));
 	return wanted;
 }
+/**
+* Claims an operator has already confirmed are no longer wanted: a deleted
+* block (`retiredBlockIds`), or a cap an edit dropped. Released on this apply,
+* not after a second one — a missing block in a single snapshot is still the
+* two-apply gate (`wantedClaims`). A disabled block is not here: its runtime
+* hands the fields back itself.
+*/
+function confirmedReleaseKeys(retiredBlockIds, planned, previous, claimGate) {
+	const retired = new Set(retiredBlockIds);
+	const seen = /* @__PURE__ */ new Set();
+	const keys = [];
+	const push = (key) => {
+		const id = claimKey(key);
+		if (seen.has(id)) return;
+		seen.add(id);
+		keys.push(key);
+	};
+	for (const owner of retired) for (const key of claimGate.claimsOf(owner)) push(key);
+	const plannedById = new Map(planned.map((block) => [block.block.id, block]));
+	for (const [blockId, entry] of previous) {
+		if (retired.has(blockId)) continue;
+		const next = plannedById.get(blockId);
+		if (next === void 0 || !next.block.enabled) continue;
+		if (entry.planned.block.updatedAt === next.block.updatedAt) continue;
+		for (const key of claimGate.claimsOf(blockId)) if (!planStillWantsClaim(next, key)) push(key);
+	}
+	return keys;
+}
+/** True when this plan still holds `key` — including while the plan cannot say, so a bad read releases nothing. */
+function planStillWantsClaim(planned, key) {
+	const target = planned.target;
+	if (target.kind !== "existing") return false;
+	if (target.waiting !== null || target.gone !== null || target.deviceId === null || planned.problems.length > 0) return true;
+	return target.deviceId === key.deviceId && target.features.some((feature) => feature.cap === key.capName);
+}
 //#endregion
 //#region src/builtins/composer/composition-declarations.ts
 /**
@@ -1713,6 +1748,13 @@ var CompositionRuntime = class {
 		this.stopped = true;
 		this.deps.timer.disarm();
 	}
+	/** `stop`, then wait until the target has sent nothing further. */
+	quiesce() {
+		this.stop();
+		const quiesce = this.deps.target.quiesce;
+		if (quiesce === void 0) return Promise.resolve();
+		return quiesce.call(this.deps.target);
+	}
 	state() {
 		return {
 			failure: this.failure,
@@ -2216,6 +2258,10 @@ var OwnedFieldsTarget = class {
 	listeners = [];
 	/** Per cap, bumped by every `withhold`: a claim that settles under another epoch claimed a stale field set and does not land (I-2). */
 	epoch = /* @__PURE__ */ new Map();
+	/** Set by `quiesce`: nothing further is sent. */
+	closed = false;
+	idle = Promise.resolve();
+	markIdle = null;
 	constructor(deps) {
 		this.deps = deps;
 		this.id = deps.deviceId;
@@ -2240,6 +2286,27 @@ var OwnedFieldsTarget = class {
 	}
 	/** `device-status` belongs to the native device; availability lives in the block report only. */
 	setAvailable(_available) {}
+	/**
+	* The block has stopped. Writes still queued are dropped; the call in flight
+	* is allowed to finish, and then nothing else is sent.
+	*/
+	quiesce() {
+		this.closed = true;
+		const dropped = [...this.pending.keys()];
+		this.pending = /* @__PURE__ */ new Map();
+		for (const cap of dropped) this.deps.logger.info("composed write dropped — the block stopped before it was sent", {
+			tags: { deviceId: this.deps.deviceId },
+			meta: {
+				cap,
+				owner: this.deps.owner
+			}
+		});
+		if (this.inFlight.size === 0) return Promise.resolve();
+		if (this.markIdle === null) this.idle = new Promise((resolve) => {
+			this.markIdle = resolve;
+		});
+		return this.idle;
+	}
 	onAsyncFailure(listener) {
 		this.listeners = [...this.listeners, listener];
 	}
@@ -2255,6 +2322,17 @@ var OwnedFieldsTarget = class {
 		return this.deps.fieldsOf(cap).filter((f) => held === void 0 || !held.has(f));
 	}
 	enqueue(cap, op) {
+		if (this.closed) {
+			this.deps.logger.info("composed write dropped — the block stopped before it was sent", {
+				tags: { deviceId: this.deps.deviceId },
+				meta: {
+					cap,
+					owner: this.deps.owner,
+					op: op.kind
+				}
+			});
+			return;
+		}
 		if (!this.inFlight.has(cap)) {
 			this.send(cap, op);
 			return;
@@ -2277,6 +2355,11 @@ var OwnedFieldsTarget = class {
 	}
 	settled(cap) {
 		this.inFlight = new Set([...this.inFlight].filter((c) => c !== cap));
+		if (this.closed) {
+			this.pending = /* @__PURE__ */ new Map();
+			if (this.inFlight.size === 0) this.markIdle?.();
+			return;
+		}
 		const next = this.pending.get(cap);
 		if (next === void 0) return;
 		this.pending = new Map([...this.pending].filter(([c]) => c !== cap));
@@ -2693,7 +2776,11 @@ function verdictOf(blockId, entry, unsynced, grafts = null) {
 * filter in `composer.addon.ts` stays load-bearing. Its fields are CLAIMED on
 * the hub under the block id (`OwnedFieldsTarget`), and released through the
 * `ClaimGate` — two applies must agree, seeded at boot from the claims index —
-* when the block is gone, disabled, or lost the feature. Its own replaced
+* when the block merely vanished from one snapshot. An operator delete
+* (`retiredBlockIds`) or an edit that drops a cap releases those claims on
+* THIS apply, after the old runtime has quiesced and before any replacement
+* claims; a release that does not land is logged with `tags: { deviceId }` and
+* returned on the apply. Its own replaced
 * fields are read in the NATIVE view (rule 6). Its target row gone on two
 * agreeing index reads fails the block by name and ungrafts what it added —
 * whether the loss was seen on `device.unregistered` or on a later plan; its
@@ -2841,12 +2928,16 @@ var Composer = class {
 			};
 		});
 		await this.composed.reconcile(gate.integrationId, declarations, planned);
+		const releasing = confirmedReleaseKeys(input.retiredBlockIds ?? [], planned, this.live, this.claimGate);
 		const rebuilt = await this.rebuildRuntimes(planned, declarations, restart, rebuildErrors);
+		await Promise.all(rebuilt.stopped.map((runtime) => runtime.quiesce()));
+		const unreleasedClaims = await this.releaseConfirmed(releasing);
 		await this.syncSources(rebuilt);
 		await this.reconcileClaims();
 		return {
 			blocks: planned.map((p) => this.verdict(p.block.id)),
-			acted: true
+			acted: true,
+			unreleasedClaims
 		};
 	}
 	plan(block, restart, claimsWait) {
@@ -2867,7 +2958,13 @@ var Composer = class {
 	async rebuildRuntimes(planned, declarations, restart, rebuildErrors) {
 		const reset = /* @__PURE__ */ new Set();
 		const fresh = /* @__PURE__ */ new Set();
+		const stopped = [];
 		const next = /* @__PURE__ */ new Map();
+		const halt = (runtime) => {
+			if (runtime === null) return;
+			runtime.stop();
+			stopped.push(runtime);
+		};
 		for (const p of planned) {
 			const previous = this.live.get(p.block.id);
 			const lost = lostTarget(p, previous?.planned);
@@ -2938,7 +3035,7 @@ var Composer = class {
 				enabled: p.block.enabled,
 				settled: p.problems.length === 0
 			});
-			previous?.runtime?.stop();
+			halt(previous?.runtime ?? null);
 			if (runtime !== null) fresh.add(runtime);
 			next.set(p.block.id, {
 				planned: p,
@@ -2953,12 +3050,15 @@ var Composer = class {
 		for (const [blockId, entry] of this.live) {
 			if (next.has(blockId)) continue;
 			if (held.has(composedDeviceStableId(blockId))) next.set(blockId, entry);
-			else entry.runtime?.stop();
+			else halt(entry.runtime);
 		}
 		this.live = next;
 		const liveRuntimes = new Set([...next.values()].map((e) => e.runtime));
 		this.unsynced = new Set([...[...this.unsynced].filter((r) => liveRuntimes.has(r)), ...fresh]);
-		return { reset };
+		return {
+			reset,
+			stopped
+		};
 	}
 	ungraftGone(blockId, target, deviceId) {
 		this.grafts.gone(deviceId);
@@ -3042,21 +3142,40 @@ var Composer = class {
 		if (!this.claimSeed.done) return;
 		for (const key of this.claimGate.filter(wantedClaims(this.live, this.claimGate))) await this.release(key);
 	}
+	/** Confirmed releases, awaited. A failure is the string the hub gave; the gate retries it later. */
+	async releaseConfirmed(keys) {
+		const unreleased = [];
+		for (const key of keys) {
+			const error = await this.release(key);
+			if (error === null) continue;
+			unreleased.push({
+				deviceId: key.deviceId,
+				capName: key.capName,
+				owner: key.owner,
+				error
+			});
+		}
+		return unreleased;
+	}
+	/** Null when the hub confirmed the release (or held nothing of ours). */
 	async release(key) {
 		let outcome;
 		try {
 			outcome = await this.deps.claims.releaseClaim(key);
 		} catch (err) {
-			this.claimGate.releaseFailed(key, errMsg(err));
-			return;
+			const error = errMsg(err);
+			this.claimGate.releaseFailed(key, error);
+			return error;
 		}
 		if (!outcome.ok && !RELEASE_SETTLED_CODES.has(outcome.code)) {
-			this.claimGate.releaseFailed(key, `${outcome.code}: ${outcome.message}`);
-			return;
+			const error = `${outcome.code}: ${outcome.message}`;
+			this.claimGate.releaseFailed(key, error);
+			return error;
 		}
 		this.claimGate.released(key, outcome.ok ? "released" : outcome.code);
 		await this.grafts.released(key.deviceId, key.capName);
 		await this.onClaimEvent(key.deviceId, key.capName, key.owner, "free");
+		return null;
 	}
 	/**
 	* Rule 5: a customization whose target row is gone — the tracker's two