@camstack/types 1.2.266 → 1.2.268

package/dist/index.js

@@ -1,9 +1,9 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-8K9gue-H.js");
-const require_event_category = require("./event-category-BVfsrBYA.js");
-const require_canonical_hash = require("./canonical-hash-CSE4ioRi.js");
+const require_sleep = require("./sleep-BSzia-xT.js");
+const require_event_category = require("./event-category-MbnB-6AN.js");
+const require_composition = require("./composition-QlOB7QTG.js");
+const require_err_msg = require("./err-msg-Dx2Kor0g.js");
 const require_enums = require("./enums.js");
-const require_err_msg = require("./err-msg-COpsHMw2.js");
 let zod = require("zod");
 //#region src/media/media-owner-key.ts
 /**
@@ -741,7 +741,7 @@ function canonicalEgressPlan(request, delivery = egressTransportFromRequest(requ
 * every other consumer to 360p.
 */
 function egressTranscodeSharingKey(request, delivery = egressTransportFromRequest(request)) {
-	return `egress:${require_canonical_hash.canonicalHash(canonicalEgressPlan(request, delivery))}`;
+	return `egress:${require_composition.canonicalHash(canonicalEgressPlan(request, delivery))}`;
 }
 //#endregion
 //#region src/health/wiring-health.ts
@@ -5531,809 +5531,6 @@ function principalMayReachAddon(input) {
 	};
 }
 //#endregion
-//#region src/expression/errors.ts
-/**
-* Error types for the safe expression engine. Two distinct classes so callers
-* can tell a compile-time (grammar) failure from a runtime (evaluation)
-* failure — both are non-fatal to the host: read paths degrade to "skip link".
-*/
-/** Thrown by the tokenizer / parser. Carries a 0-based source `position` when
-*  the failure is anchored to a character (author-facing inline feedback). */
-var ExpressionParseError = class extends Error {
-	position;
-	constructor(message, position) {
-		super(message);
-		this.name = "ExpressionParseError";
-		this.position = position;
-	}
-};
-/** Thrown by the evaluator (unknown identifier, type mismatch, non-finite
-*  result, unknown builtin, step-budget exceeded). */
-var ExpressionEvalError = class extends Error {
-	constructor(message) {
-		super(message);
-		this.name = "ExpressionEvalError";
-	}
-};
-//#endregion
-//#region src/expression/builtins.ts
-function asFiniteNumber(value, name, index) {
-	if (typeof value !== "number" || !Number.isFinite(value)) throw new ExpressionEvalError(`${name}: argument ${index + 1} must be a finite number`);
-	return value;
-}
-function asString$1(value, name, index) {
-	if (typeof value !== "string") throw new ExpressionEvalError(`${name}: argument ${index + 1} must be a string`);
-	return value;
-}
-function finiteResult(value, name) {
-	if (!Number.isFinite(value)) throw new ExpressionEvalError(`${name}: produced a non-finite result`);
-	return value;
-}
-function allFiniteNumbers(args, name) {
-	return args.map((a, idx) => asFiniteNumber(a, name, idx));
-}
-function asBoolean$1(value, name, index) {
-	if (typeof value !== "boolean") throw new ExpressionEvalError(`${name}: argument ${index + 1} must be a boolean`);
-	return value;
-}
-var INF = Number.POSITIVE_INFINITY;
-var table = {
-	min: {
-		minArgs: 1,
-		maxArgs: INF,
-		apply: (args) => finiteResult(Math.min(...allFiniteNumbers(args, "min")), "min")
-	},
-	max: {
-		minArgs: 1,
-		maxArgs: INF,
-		apply: (args) => finiteResult(Math.max(...allFiniteNumbers(args, "max")), "max")
-	},
-	abs: {
-		minArgs: 1,
-		maxArgs: 1,
-		apply: (args) => finiteResult(Math.abs(asFiniteNumber(args[0], "abs", 0)), "abs")
-	},
-	floor: {
-		minArgs: 1,
-		maxArgs: 1,
-		apply: (args) => finiteResult(Math.floor(asFiniteNumber(args[0], "floor", 0)), "floor")
-	},
-	ceil: {
-		minArgs: 1,
-		maxArgs: 1,
-		apply: (args) => finiteResult(Math.ceil(asFiniteNumber(args[0], "ceil", 0)), "ceil")
-	},
-	sqrt: {
-		minArgs: 1,
-		maxArgs: 1,
-		apply: (args) => finiteResult(Math.sqrt(asFiniteNumber(args[0], "sqrt", 0)), "sqrt")
-	},
-	round: {
-		minArgs: 1,
-		maxArgs: 2,
-		apply: (args) => {
-			const x = asFiniteNumber(args[0], "round", 0);
-			const digits = args.length > 1 ? Math.trunc(asFiniteNumber(args[1], "round", 1)) : 0;
-			if (digits < 0 || digits > 100) throw new ExpressionEvalError("round: digits must be between 0 and 100");
-			const factor = 10 ** digits;
-			return finiteResult(Math.round(x * factor) / factor, "round");
-		}
-	},
-	pow: {
-		minArgs: 2,
-		maxArgs: 2,
-		apply: (args) => finiteResult(asFiniteNumber(args[0], "pow", 0) ** asFiniteNumber(args[1], "pow", 1), "pow")
-	},
-	clamp: {
-		minArgs: 3,
-		maxArgs: 3,
-		apply: (args) => {
-			const x = asFiniteNumber(args[0], "clamp", 0);
-			const lo = asFiniteNumber(args[1], "clamp", 1);
-			const hi = asFiniteNumber(args[2], "clamp", 2);
-			if (lo > hi) throw new ExpressionEvalError("clamp: lower bound is greater than upper bound");
-			return finiteResult(Math.min(hi, Math.max(lo, x)), "clamp");
-		}
-	},
-	avg: {
-		minArgs: 1,
-		maxArgs: INF,
-		apply: (args) => {
-			const nums = allFiniteNumbers(args, "avg");
-			return finiteResult(nums.reduce((acc, v) => acc + v, 0) / nums.length, "avg");
-		}
-	},
-	sum: {
-		minArgs: 1,
-		maxArgs: INF,
-		apply: (args) => finiteResult(allFiniteNumbers(args, "sum").reduce((acc, v) => acc + v, 0), "sum")
-	},
-	coalesce: {
-		minArgs: 1,
-		maxArgs: INF,
-		apply: (args) => {
-			for (const a of args) if (a !== null) return a;
-			return null;
-		}
-	},
-	age: {
-		minArgs: 2,
-		maxArgs: 2,
-		apply: (args) => finiteResult(asFiniteNumber(args[0], "age", 0) - asFiniteNumber(args[1], "age", 1), "age")
-	},
-	convert: {
-		minArgs: 3,
-		maxArgs: 3,
-		apply: (args, hooks) => {
-			const x = asFiniteNumber(args[0], "convert", 0);
-			const from = asString$1(args[1], "convert", 1).trim();
-			const to = asString$1(args[2], "convert", 2).trim();
-			if (hooks.convert) {
-				const out = hooks.convert(x, from, to);
-				if (out === null) throw new ExpressionEvalError(`convert: cannot convert '${from}' to '${to}'`);
-				return finiteResult(out, "convert");
-			}
-			if (from === to) return x;
-			throw new ExpressionEvalError("convert: unit conversion table not installed");
-		}
-	},
-	any: {
-		minArgs: 1,
-		maxArgs: INF,
-		apply: (args) => args.map((a, i) => asBoolean$1(a, "any", i)).some((b) => b)
-	},
-	all: {
-		minArgs: 1,
-		maxArgs: INF,
-		apply: (args) => args.map((a, i) => asBoolean$1(a, "all", i)).every((b) => b)
-	},
-	within: {
-		minArgs: 2,
-		maxArgs: 2,
-		apply: (args, hooks) => {
-			const windowMs = asFiniteNumber(args[1], "within", 1);
-			if (windowMs < 0) throw new ExpressionEvalError("within: the window must not be negative");
-			const at = args[0];
-			if (at === null) return false;
-			const ts = asFiniteNumber(at, "within", 0);
-			const now = hooks.now;
-			if (now === void 0 || !Number.isFinite(now)) throw new ExpressionEvalError("within: no clock was supplied to this evaluation");
-			const inside = now - ts <= windowMs;
-			if (inside) hooks.noteDeadline?.(ts + windowMs + 1);
-			return inside;
-		}
-	},
-	latest: {
-		minArgs: 1,
-		maxArgs: INF,
-		apply: (args) => {
-			const present = args.flatMap((a, i) => a === null ? [] : [asFiniteNumber(a, "latest", i)]);
-			return present.length === 0 ? null : finiteResult(Math.max(...present), "latest");
-		}
-	}
-};
-/** Frozen, null-prototype builtin table. */
-var EXPRESSION_BUILTINS = Object.freeze(Object.assign(Object.create(null), table));
-/** The set of valid builtin names — used by the parser to reject unknown
-*  callees at parse time (immediate author feedback). */
-var EXPRESSION_BUILTIN_NAMES = new Set(Object.keys(table));
-//#endregion
-//#region src/expression/limits.ts
-/**
-* Resource-bound constants for the safe expression engine.
-*
-* Every bound is defense-in-depth: the grammar is non-Turing-complete (no
-* loops, recursion, lambdas or member access — see `ast.ts`), so evaluation is
-* O(nodeCount) by construction. These caps merely put a hard ceiling on the
-* work a single author-supplied expression can request, so a hostile or
-* accidental pathological string can never spend unbounded CPU/memory.
-*/
-/** Max source length (chars) — checked BEFORE tokenizing so a huge string is
-*  rejected without allocation. */
-var MAX_EXPRESSION_SOURCE_LENGTH = 2048;
-/** Max AST nodes — checked during parse; a deeply nested grouping that exceeds
-*  this is rejected as "expression too complex". */
-var MAX_EXPRESSION_AST_NODES = 256;
-/** Defense-in-depth walker step budget — one increment per node visit during
-*  evaluation. The grammar guarantees O(nodeCount) walks, so this can only trip
-*  on a crafted maximum-size AST. */
-var MAX_EXPRESSION_EVAL_STEPS = 4096;
-/** Max named bindings on one {@link ExpressionSource}. */
-var MAX_EXPRESSION_BINDINGS = 32;
-/** Max positional arguments to any builtin call. */
-var MAX_EXPRESSION_CALL_ARGS = 16;
-/** LRU compile-cache capacity (parsed ASTs keyed by raw source string). */
-var EXPRESSION_COMPILE_CACHE_CAPACITY = 256;
-/** A legal binding / identifier name. */
-var EXPRESSION_IDENTIFIER_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
-/** Binding names an author may NOT use: `now` is auto-injected; the literal
-*  keywords lex as values, not identifiers, so binding to them is meaningless. */
-var RESERVED_BINDING_NAMES = new Set([
-	"now",
-	"true",
-	"false",
-	"null"
-]);
-//#endregion
-//#region src/expression/tokenizer.ts
-/**
-* Tokenizer for the safe expression mini-language. Hand-rolled, single-pass,
-* zero-dependency. The grammar is deliberately boring: decimal numbers,
-* single/double-quoted strings with a tiny escape set, identifiers, the three
-* value keywords (`true`/`false`/`null`) and a fixed punctuator set. Anything
-* outside that — a bare `.`, `=`, `[`, `]`, `{`, `}`, `;`, backtick, `&`, `|` —
-* is a parse error with a source position, so member access / assignment /
-* template literals are lexically impossible.
-*/
-var KEYWORDS = new Set([
-	"true",
-	"false",
-	"null"
-]);
-function isDigit(ch) {
-	return ch >= "0" && ch <= "9";
-}
-function isIdentStart(ch) {
-	return ch >= "A" && ch <= "Z" || ch >= "a" && ch <= "z" || ch === "_";
-}
-function isIdentPart(ch) {
-	return isIdentStart(ch) || isDigit(ch);
-}
-function isWhitespace(ch) {
-	return ch === " " || ch === "	" || ch === "\n" || ch === "\r" || ch === "\f" || ch === "\v";
-}
-/** Tokenize `source` into a flat token list ending with a single `eof` token.
-*  Throws `ExpressionParseError` on any illegal character or unterminated
-*  string. */
-function tokenize(source) {
-	if (source.length > 2048) throw new ExpressionParseError(`expression too long (${source.length} > ${MAX_EXPRESSION_SOURCE_LENGTH} chars)`, 0);
-	const tokens = [];
-	let i = 0;
-	const n = source.length;
-	while (i < n) {
-		const ch = source[i];
-		if (isWhitespace(ch)) {
-			i += 1;
-			continue;
-		}
-		if (isDigit(ch)) {
-			const start = i;
-			while (i < n && isDigit(source[i])) i += 1;
-			if (i < n && source[i] === ".") {
-				if (i + 1 >= n || !isDigit(source[i + 1])) throw new ExpressionParseError("malformed number: decimal point needs a digit", i);
-				i += 1;
-				while (i < n && isDigit(source[i])) i += 1;
-			}
-			const text = source.slice(start, i);
-			const value = Number(text);
-			if (!Number.isFinite(value)) throw new ExpressionParseError(`malformed number: '${text}'`, start);
-			tokens.push({
-				type: "number",
-				value,
-				pos: start
-			});
-			continue;
-		}
-		if (ch === "'" || ch === "\"") {
-			const quote = ch;
-			const start = i;
-			i += 1;
-			let out = "";
-			let closed = false;
-			while (i < n) {
-				const c = source[i];
-				if (c === "\\") {
-					const next = i + 1 < n ? source[i + 1] : "";
-					if (next === "\\" || next === "'" || next === "\"") {
-						out += next;
-						i += 2;
-						continue;
-					}
-					throw new ExpressionParseError(`invalid string escape: '\\${next}'`, i);
-				}
-				if (c === quote) {
-					closed = true;
-					i += 1;
-					break;
-				}
-				out += c;
-				i += 1;
-			}
-			if (!closed) throw new ExpressionParseError("unterminated string literal", start);
-			tokens.push({
-				type: "string",
-				value: out,
-				pos: start
-			});
-			continue;
-		}
-		if (isIdentStart(ch)) {
-			const start = i;
-			while (i < n && isIdentPart(source[i])) i += 1;
-			const text = source.slice(start, i);
-			if (KEYWORDS.has(text)) tokens.push({
-				type: "keyword",
-				keyword: keywordOf(text),
-				pos: start
-			});
-			else tokens.push({
-				type: "identifier",
-				name: text,
-				pos: start
-			});
-			continue;
-		}
-		const two = i + 1 < n ? source.slice(i, i + 2) : "";
-		if (two === "<=" || two === ">=" || two === "==" || two === "!=" || two === "&&" || two === "||") {
-			tokens.push({
-				type: "punct",
-				punct: two,
-				pos: i
-			});
-			i += 2;
-			continue;
-		}
-		if (isSinglePunct(ch)) {
-			tokens.push({
-				type: "punct",
-				punct: ch,
-				pos: i
-			});
-			i += 1;
-			continue;
-		}
-		throw new ExpressionParseError(`unexpected character '${ch}'`, i);
-	}
-	tokens.push({
-		type: "eof",
-		pos: n
-	});
-	return tokens;
-}
-function keywordOf(text) {
-	if (text === "true") return "true";
-	if (text === "false") return "false";
-	return "null";
-}
-function isSinglePunct(ch) {
-	return ch === "(" || ch === ")" || ch === "," || ch === "?" || ch === ":" || ch === "+" || ch === "-" || ch === "*" || ch === "/" || ch === "%" || ch === "!" || ch === "<" || ch === ">";
-}
-//#endregion
-//#region src/expression/parser.ts
-/**
-* Pratt (precedence-climbing) parser for the safe expression mini-language.
-*
-* Precedence (low → high): ternary `?:` (right-assoc) → `||` → `&&` → equality
-* → relational → additive → multiplicative → unary `! -` → call / primary.
-* Calls are ONLY `IDENT '(' args? ')'` at primary position — the callee is a
-* string validated against the builtin table at parse time, so an unknown
-* function is rejected immediately (author feedback) and a persisted expression
-* that references a since-removed builtin degrades at read.
-*
-* A node counter caps total AST size (`MAX_EXPRESSION_AST_NODES`) and call
-* arity is capped (`MAX_EXPRESSION_CALL_ARGS`) — both raise `ExpressionParseError`.
-*/
-/** Binary/logical operator precedence (higher binds tighter). */
-var BINARY_PRECEDENCE = {
-	"||": 1,
-	"&&": 2,
-	"==": 3,
-	"!=": 3,
-	"<": 4,
-	"<=": 4,
-	">": 4,
-	">=": 4,
-	"+": 5,
-	"-": 5,
-	"*": 6,
-	"/": 6,
-	"%": 6
-};
-function isLogicalOp(op) {
-	return op === "&&" || op === "||";
-}
-function isBinaryOp(op) {
-	return op === "+" || op === "-" || op === "*" || op === "/" || op === "%" || op === "==" || op === "!=" || op === "<" || op === "<=" || op === ">" || op === ">=";
-}
-var Parser = class {
-	tokens;
-	pos = 0;
-	nodeCount = 0;
-	identifiers = /* @__PURE__ */ new Set();
-	callees = /* @__PURE__ */ new Set();
-	constructor(tokens) {
-		this.tokens = tokens;
-	}
-	parse() {
-		const ast = this.parseTernary();
-		const tok = this.peek();
-		if (tok.type !== "eof") throw new ExpressionParseError("unexpected trailing input", tok.pos);
-		return {
-			ast,
-			identifiers: this.identifiers,
-			callees: this.callees,
-			nodeCount: this.nodeCount
-		};
-	}
-	peek() {
-		return this.tokens[this.pos];
-	}
-	next() {
-		return this.tokens[this.pos++];
-	}
-	/** Consume a punctuator token, erroring if the next token isn't it. */
-	expectPunct(punct) {
-		const tok = this.peek();
-		if (tok.type !== "punct" || tok.punct !== punct) throw new ExpressionParseError(`expected '${punct}'`, tok.pos);
-		this.pos += 1;
-	}
-	matchPunct(punct) {
-		const tok = this.peek();
-		if (tok.type === "punct" && tok.punct === punct) {
-			this.pos += 1;
-			return true;
-		}
-		return false;
-	}
-	countNode() {
-		this.nodeCount += 1;
-		if (this.nodeCount > 256) throw new ExpressionParseError("expression too complex", this.peek().pos);
-	}
-	parseTernary() {
-		const test = this.parseBinary(1);
-		if (this.matchPunct("?")) {
-			const consequent = this.parseTernary();
-			this.expectPunct(":");
-			const alternate = this.parseTernary();
-			this.countNode();
-			return {
-				kind: "conditional",
-				test,
-				consequent,
-				alternate
-			};
-		}
-		return test;
-	}
-	parseBinary(minPrec) {
-		let left = this.parseUnary();
-		for (;;) {
-			const tok = this.peek();
-			if (tok.type !== "punct") break;
-			const prec = BINARY_PRECEDENCE[tok.punct];
-			if (prec === void 0 || prec < minPrec) break;
-			const op = tok.punct;
-			this.pos += 1;
-			const right = this.parseBinary(prec + 1);
-			this.countNode();
-			if (isLogicalOp(op)) left = {
-				kind: "logical",
-				op,
-				left,
-				right
-			};
-			else if (isBinaryOp(op)) left = {
-				kind: "binary",
-				op,
-				left,
-				right
-			};
-			else throw new ExpressionParseError(`unexpected operator '${op}'`, tok.pos);
-		}
-		return left;
-	}
-	parseUnary() {
-		const tok = this.peek();
-		if (tok.type === "punct" && (tok.punct === "!" || tok.punct === "-")) {
-			const op = tok.punct;
-			this.pos += 1;
-			const operand = this.parseUnary();
-			this.countNode();
-			return {
-				kind: "unary",
-				op,
-				operand
-			};
-		}
-		return this.parsePrimary();
-	}
-	parsePrimary() {
-		const tok = this.next();
-		switch (tok.type) {
-			case "number":
-				this.countNode();
-				return {
-					kind: "literal",
-					value: tok.value
-				};
-			case "string":
-				this.countNode();
-				return {
-					kind: "literal",
-					value: tok.value
-				};
-			case "keyword":
-				this.countNode();
-				return {
-					kind: "literal",
-					value: tok.keyword === "null" ? null : tok.keyword === "true"
-				};
-			case "identifier": {
-				const nextTok = this.peek();
-				if (nextTok.type === "punct" && nextTok.punct === "(") return this.parseCall(tok.name, tok.pos);
-				this.identifiers.add(tok.name);
-				this.countNode();
-				return {
-					kind: "identifier",
-					name: tok.name
-				};
-			}
-			case "punct":
-				if (tok.punct === "(") {
-					const inner = this.parseTernary();
-					this.expectPunct(")");
-					return inner;
-				}
-				throw new ExpressionParseError(`unexpected token '${tok.punct}'`, tok.pos);
-			case "eof": throw new ExpressionParseError("unexpected end of expression", tok.pos);
-		}
-	}
-	parseCall(callee, pos) {
-		if (!EXPRESSION_BUILTIN_NAMES.has(callee)) throw new ExpressionParseError(`unknown function '${callee}'`, pos);
-		this.expectPunct("(");
-		const args = [];
-		if (!this.matchPunct(")")) for (;;) {
-			args.push(this.parseTernary());
-			if (args.length > 16) throw new ExpressionParseError(`too many arguments to '${callee}'`, pos);
-			if (this.matchPunct(",")) continue;
-			this.expectPunct(")");
-			break;
-		}
-		this.callees.add(callee);
-		this.countNode();
-		return {
-			kind: "call",
-			callee,
-			args
-		};
-	}
-};
-/** Tokenize + parse `source` into a validated `ParsedExpression`. Throws
-*  `ExpressionParseError` on any lexical or grammatical failure. */
-function parseExpression(source) {
-	return new Parser(tokenize(source)).parse();
-}
-//#endregion
-//#region src/expression/compile.ts
-/**
-* LRU compile cache for parsed expressions (spec §2.4 "parse once … LRU keyed
-* by expr"). The cache stores BOTH successes and failures (negative caching),
-* so a corrupt persisted string costs exactly one tokenize+parse total — not
-* one per read on a hot resolve path.
-*
-* The cache is a module-level singleton: entries are pure, content-addressed
-* ASTs keyed by the raw source string, so sharing one instance across all
-* callers is safe and maximises hit rate.
-*/
-var cache = /* @__PURE__ */ new Map();
-function getCached(source) {
-	const hit = cache.get(source);
-	if (hit !== void 0) {
-		cache.delete(source);
-		cache.set(source, hit);
-		return hit;
-	}
-	let result;
-	try {
-		result = {
-			ok: true,
-			parsed: parseExpression(source)
-		};
-	} catch (err) {
-		result = {
-			ok: false,
-			error: err instanceof ExpressionParseError ? err.message : String(err)
-		};
-	}
-	cache.set(source, result);
-	if (cache.size > 256) {
-		const oldest = cache.keys().next().value;
-		if (oldest !== void 0) cache.delete(oldest);
-	}
-	return result;
-}
-/** Compile `source` to a `ParsedExpression`, throwing `ExpressionParseError`
-*  on failure. LRU/negative-cached. */
-function compileExpression(source) {
-	const result = getCached(source);
-	if (result.ok) return result.parsed;
-	throw new ExpressionParseError(result.error);
-}
-/** Compile `source`, returning a discriminated result instead of throwing.
-*  Used by read paths that must degrade rather than raise. LRU/negative-cached. */
-function compileExpressionSafe(source) {
-	return getCached(source);
-}
-//#endregion
-//#region src/expression/evaluator.ts
-/**
-* Tree-walking evaluator for the safe expression mini-language.
-*
-* SECURITY (spec §4 rule 2/5):
-*  - The scope is an `Object.create(null)` copy of ONLY the caller's own
-*    enumerable binding entries, so `name in scope` is a pure own-key check and
-*    `constructor` / `__proto__` / `toString` are plain unknown identifiers.
-*  - Performs ZERO I/O and never touches `globalThis` / `Date` / `Math`
-*    directly — the only external calls are into the frozen builtin table.
-*  - The grammar has no loops/recursion/lambdas, so a walk is O(nodeCount) by
-*    construction; the step counter is defense-in-depth for a crafted max-size
-*    AST. Nothing blocks: there are no timers, awaits or unbounded loops.
-*/
-var EMPTY_HOOKS = Object.freeze({});
-/** Build a null-prototype scope from own-enumerable binding entries. Inherited
-*  keys of the input (e.g. from a `{__proto__: {...}}` payload) are NOT copied,
-*  so nothing smuggles in via the prototype chain. */
-function createExpressionScope(bindings) {
-	const scope = Object.create(null);
-	for (const key of Object.keys(bindings)) if (Object.prototype.hasOwnProperty.call(bindings, key)) scope[key] = bindings[key];
-	return scope;
-}
-function isFiniteNumber(value) {
-	return typeof value === "number" && Number.isFinite(value);
-}
-/** JS truthiness of a primitive value. */
-function truthy(value) {
-	return Boolean(value);
-}
-function requireFinite(value, context) {
-	if (!Number.isFinite(value)) throw new ExpressionEvalError(`${context} produced a non-finite result`);
-	return value;
-}
-function step(ctx) {
-	ctx.steps += 1;
-	if (ctx.steps > ctx.maxSteps) throw new ExpressionEvalError("expression evaluation step budget exceeded");
-}
-function evalNode(node, ctx) {
-	step(ctx);
-	switch (node.kind) {
-		case "literal": return node.value;
-		case "identifier":
-			if (!(node.name in ctx.scope)) throw new ExpressionEvalError(`unknown identifier: ${node.name}`);
-			return ctx.scope[node.name];
-		case "unary": return evalUnary(node.op, evalNode(node.operand, ctx));
-		case "binary": return evalBinary(node.op, evalNode(node.left, ctx), evalNode(node.right, ctx));
-		case "logical": {
-			const left = evalNode(node.left, ctx);
-			if (node.op === "&&") return truthy(left) ? evalNode(node.right, ctx) : left;
-			return truthy(left) ? left : evalNode(node.right, ctx);
-		}
-		case "conditional": return truthy(evalNode(node.test, ctx)) ? evalNode(node.consequent, ctx) : evalNode(node.alternate, ctx);
-		case "call": return evalCall(node.callee, node.args.map((a) => evalNode(a, ctx)), ctx.hooks);
-	}
-}
-function evalUnary(op, operand) {
-	if (op === "!") return !truthy(operand);
-	if (!isFiniteNumber(operand)) throw new ExpressionEvalError("unary \"-\" requires a finite number");
-	return requireFinite(-operand, "unary \"-\"");
-}
-function evalBinary(op, left, right) {
-	switch (op) {
-		case "==": return left === right;
-		case "!=": return left !== right;
-		case "+":
-			if (typeof left === "string" && typeof right === "string") return left + right;
-			if (isFiniteNumber(left) && isFiniteNumber(right)) return requireFinite(left + right, "\"+\"");
-			throw new ExpressionEvalError("\"+\" requires two numbers or two strings");
-		case "-":
-		case "*":
-		case "/":
-		case "%":
-			if (!isFiniteNumber(left) || !isFiniteNumber(right)) throw new ExpressionEvalError(`"${op}" requires two finite numbers`);
-			return requireFinite(op === "-" ? left - right : op === "*" ? left * right : op === "/" ? left / right : left % right, `"${op}"`);
-		case "<":
-		case "<=":
-		case ">":
-		case ">=":
-			if (isFiniteNumber(left) && isFiniteNumber(right)) return op === "<" ? left < right : op === "<=" ? left <= right : op === ">" ? left > right : left >= right;
-			if (typeof left === "string" && typeof right === "string") return op === "<" ? left < right : op === "<=" ? left <= right : op === ">" ? left > right : left >= right;
-			throw new ExpressionEvalError(`"${op}" requires two numbers or two strings`);
-	}
-}
-function evalCall(callee, args, hooks) {
-	if (!Object.prototype.hasOwnProperty.call(EXPRESSION_BUILTINS, callee)) throw new ExpressionEvalError(`unknown function: ${callee}`);
-	const builtin = EXPRESSION_BUILTINS[callee];
-	if (args.length < builtin.minArgs || args.length > builtin.maxArgs) throw new ExpressionEvalError(`${callee}: wrong number of arguments (${args.length})`);
-	return builtin.apply(args, hooks);
-}
-/** Evaluate an AST node against a scope. Throws `ExpressionEvalError` on any
-*  runtime failure (unknown identifier, type mismatch, non-finite result,
-*  step-budget exhaustion). */
-function evaluateAst(node, scope, opts) {
-	return evalNode(node, {
-		scope,
-		hooks: opts?.hooks ?? EMPTY_HOOKS,
-		maxSteps: opts?.maxSteps ?? 4096,
-		steps: 0
-	});
-}
-//#endregion
-//#region src/expression/expression-source.ts
-/** The `now` epoch-ms binding is auto-injected into every evaluation and is a
-*  reserved binding name (authors may not rebind it). */
-var EXPRESSION_INJECTED_NOW = "now";
-/**
-* Coerce an untrusted `getByPath` / mirror read to an `ExpressionValue`.
-* Non-primitive values (objects, arrays, `undefined`, functions, bigint,
-* symbol) and non-finite numbers become `undefined` so the caller can apply
-* its binding-miss policy (→ `null`). `null` itself is a valid value.
-*/
-function toExpressionValue(raw) {
-	if (raw === null) return null;
-	if (typeof raw === "string") return raw;
-	if (typeof raw === "boolean") return raw;
-	if (typeof raw === "number") return Number.isFinite(raw) ? raw : void 0;
-}
-/**
-* Author-time validation. Returns `null` when the source is valid, else a
-* human-readable error message. Checks: the expression compiles; binding count
-* is within `MAX_EXPRESSION_BINDINGS`; every binding name is a legal identifier,
-* is not reserved (`now`/keywords) and does not shadow a builtin; and every
-* FREE identifier of the AST is covered by a binding or the injected `now`.
-*/
-function validateExpressionSource(src) {
-	const names = Object.keys(src.bindings);
-	if (names.length > 32) return `too many bindings (${names.length} > 32)`;
-	for (const name of names) {
-		if (!EXPRESSION_IDENTIFIER_RE.test(name)) return `invalid binding name '${name}'`;
-		if (RESERVED_BINDING_NAMES.has(name)) return `binding name '${name}' is reserved`;
-		if (EXPRESSION_BUILTIN_NAMES.has(name)) return `binding name '${name}' shadows a builtin function`;
-	}
-	const compiled = compileExpressionSafe(src.expr);
-	if (!compiled.ok) return compiled.error;
-	const bound = new Set(names);
-	for (const id of compiled.parsed.identifiers) {
-		if (id === "now") continue;
-		if (!bound.has(id)) return `expression references unbound identifier '${id}'`;
-	}
-	return null;
-}
-/**
-* Shared read-path evaluation. Builds a null-proto scope from `bindingValues`
-* plus the injected `now` (supplied by the caller for determinism and
-* testability), compiles via the LRU, and evaluates. Any failure (parse or
-* eval) returns `{ ok: false }` — the caller treats that as "skip this
-* derivation", never as a throw that takes the pass down.
-*/
-function evaluateExpressionSource(expr, bindingValues, now, opts) {
-	const compiled = compileExpressionSafe(expr);
-	if (!compiled.ok) return {
-		ok: false,
-		error: compiled.error
-	};
-	const scope = createExpressionScope({
-		...bindingValues,
-		["now"]: now
-	});
-	const hooks = {
-		...opts?.hooks,
-		now
-	};
-	try {
-		return {
-			ok: true,
-			value: evaluateAst(compiled.parsed.ast, scope, {
-				...opts,
-				hooks
-			})
-		};
-	} catch (err) {
-		return {
-			ok: false,
-			error: err instanceof ExpressionEvalError ? err.message : String(err)
-		};
-	}
-}
-//#endregion
 //#region src/expression/binding-source.ts
 /**
 * What an expression's named bindings READ from.
@@ -6394,10 +5591,10 @@ var ExpressionBindingSourceSchema = zod.z.union([
 * Compiles are LRU-cached, so repeated validation of the same string is a hit.
 */
 var ExpressionSourceSchema = zod.z.object({
-	expr: zod.z.string().min(1).max(MAX_EXPRESSION_SOURCE_LENGTH),
-	bindings: zod.z.record(zod.z.string().regex(EXPRESSION_IDENTIFIER_RE), ExpressionBindingSourceSchema)
+	expr: zod.z.string().min(1).max(require_composition.MAX_EXPRESSION_SOURCE_LENGTH),
+	bindings: zod.z.record(zod.z.string().regex(require_composition.EXPRESSION_IDENTIFIER_RE), ExpressionBindingSourceSchema)
 }).superRefine((src, ctx) => {
-	const err = validateExpressionSource(src);
+	const err = require_composition.validateExpressionSource(src);
 	if (err !== null) ctx.addIssue({
 		code: "custom",
 		message: err,
@@ -6478,10 +5675,10 @@ var AutomationConditionLeafSchema = zod.z.object({
 */
 var AutomationConditionExpressionSchema = zod.z.object({
 	kind: zod.z.literal("expression"),
-	expr: zod.z.string().min(1).max(MAX_EXPRESSION_SOURCE_LENGTH),
-	bindings: zod.z.record(zod.z.string().regex(EXPRESSION_IDENTIFIER_RE), ExpressionBindingSourceSchema)
+	expr: zod.z.string().min(1).max(require_composition.MAX_EXPRESSION_SOURCE_LENGTH),
+	bindings: zod.z.record(zod.z.string().regex(require_composition.EXPRESSION_IDENTIFIER_RE), ExpressionBindingSourceSchema)
 }).superRefine((src, ctx) => {
-	const err = validateExpressionSource(src);
+	const err = require_composition.validateExpressionSource(src);
 	if (err !== null) ctx.addIssue({
 		code: "custom",
 		message: err,
@@ -7555,7 +6752,7 @@ var audioAnalysisCapability = {
 	mode: "singleton",
 	kind: "wrapper",
 	defaultActive: true,
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	exposesDeviceSettings: true,
 	methods: { 
 	/**
@@ -8702,7 +7899,7 @@ var cameraPipelineConfigCapability = {
 	mode: "singleton",
 	kind: "wrapper",
 	defaultActive: true,
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	exposesDeviceSettings: true,
 	methods: {}
 };
@@ -9812,7 +9009,7 @@ var cameraStreamsCapability = {
 	mode: "singleton",
 	kind: "wrapper",
 	defaultActive: true,
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	methods: {
 		getCameraStreams: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.array(require_sleep.CameraStreamSchema).readonly()),
 		getBrokerStreams: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.array(require_sleep.ProfileSlotSchema).readonly()),
@@ -10136,177 +9333,6 @@ function kebabToCamel(s) {
 	return s.replace(/-([a-z])/g, (_, c) => c.toUpperCase());
 }
 //#endregion
-//#region src/composition/composition.ts
-/**
-* A COMPOSITION: a device assembled from other devices' state (D659).
-*
-* The data half of the composed-devices spec §1. A composition is stored inside
-* a core block (`CoreBlock.source.kind === 'composition'`) and run by the shared
-* `composer` runner. It names a TARGET and, for each capability of the target, a
-* FIELD MAP: every state field has exactly one source.
-*
-* Sources are keyed by `(addonId, stableId)`, NEVER by numeric device id. A
-* resync reissues numeric ids, and a composition that stored them would be
-* orphaned by the first re-adoption (the linked-devices lesson). A `stableId` is
-* unique only within its owning addon, so the owner travels with it.
-*
-* Later slices EXTEND these unions and do not reshape them. The variants a later
-* slice implements are already in the wire shape, and `validateComposition`
-* refuses them BY NAME until then:
-*   target `existing` → slice 2 · feature `passthrough` → slice 3 ·
-*   `commands` (`forward`) → slice 3 · source `code` → slice 4.
-*/
-/** The owner of every composed device: the `composer` builtin. */
-var COMPOSER_ADDON_ID = "composer";
-/** A composed device's stableId is this prefix plus the block id. */
-var COMPOSED_DEVICE_STABLE_ID_PREFIX = "composed-";
-/** A device with more capabilities than this is two devices. */
-var MAX_COMPOSITION_FEATURES = 16;
-var MAX_COMPOSITION_FIELDS_PER_FEATURE = 32;
-/** Longest snippet a `code` source may carry (slice 4). */
-var MAX_COMPOSITION_CODE_LENGTH = 2e4;
-var CompositionSourceRefSchema = zod.z.object({
-	/** The owning addon; `stableId` is unique only within it. */
-	addonId: zod.z.string().min(1),
-	stableId: zod.z.string().min(1)
-});
-/** One field of one capability of one source device. */
-var CompositionFieldReadSchema = zod.z.object({
-	source: CompositionSourceRefSchema,
-	cap: zod.z.string().min(1),
-	/** Dotted path into the source cap's runtime-state slice. */
-	fieldPath: zod.z.string().min(1)
-});
-/** `from`: copy one source field verbatim. It is also an expression's `from` binding. */
-var CompositionFromSourceSchema = CompositionFieldReadSchema.extend({ kind: zod.z.literal("from") });
-/** A constant binding. No device is read. */
-var CompositionLiteralBindingSchema = zod.z.object({
-	kind: zod.z.literal("literal"),
-	value: zod.z.union([
-		zod.z.string(),
-		zod.z.number(),
-		zod.z.boolean(),
-		zod.z.null()
-	])
-});
-var CompositionBindingSchema = zod.z.discriminatedUnion("kind", [CompositionFromSourceSchema, CompositionLiteralBindingSchema]);
-/**
-* `expression`: a formula over named bindings, in the salvaged expression
-* engine. Validated at parse by the SAME function every other consumer runs,
-* so the editor and the store cannot disagree.
-*/
-var CompositionExpressionSourceSchema = zod.z.object({
-	kind: zod.z.literal("expression"),
-	expr: zod.z.string().min(1).max(MAX_EXPRESSION_SOURCE_LENGTH),
-	bindings: zod.z.record(zod.z.string().regex(EXPRESSION_IDENTIFIER_RE), CompositionBindingSchema)
-}).superRefine((src, ctx) => {
-	const err = validateExpressionSource(src);
-	if (err !== null) ctx.addIssue({
-		code: "custom",
-		message: err,
-		path: ["expr"]
-	});
-});
-/** `code`: RESERVED for slice 4 (own runner, one-way eject). */
-var CompositionCodeSourceSchema = zod.z.object({
-	kind: zod.z.literal("code"),
-	code: zod.z.string().min(1).max(MAX_COMPOSITION_CODE_LENGTH)
-});
-var CompositionFieldSourceSchema = zod.z.discriminatedUnion("kind", [
-	CompositionFromSourceSchema,
-	CompositionExpressionSourceSchema,
-	CompositionCodeSourceSchema
-]);
-/** `forward`: RESERVED for slice 3. Argument mapping arrives there as an additive optional `args`. */
-var CompositionForwardCommandSchema = zod.z.object({
-	kind: zod.z.literal("forward"),
-	source: CompositionSourceRefSchema,
-	cap: zod.z.string().min(1),
-	method: zod.z.string().min(1)
-});
-var CompositionCommandTargetSchema = zod.z.discriminatedUnion("kind", [CompositionForwardCommandSchema, CompositionCodeSourceSchema]);
-var CompositionFieldsFeatureSchema = zod.z.object({
-	kind: zod.z.literal("fields"),
-	cap: zod.z.string().min(1),
-	fields: zod.z.record(zod.z.string().min(1), CompositionFieldSourceSchema).refine((fields) => Object.keys(fields).length <= 32, { message: `at most 32 fields per capability` }),
-	/** RESERVED for slice 3; refused by the validator when non-empty. */
-	commands: zod.z.record(zod.z.string().min(1), CompositionCommandTargetSchema).optional()
-});
-/** RESERVED for slice 3: a media / data-plane cap, whole, from one source. */
-var CompositionPassthroughFeatureSchema = zod.z.object({
-	kind: zod.z.literal("passthrough"),
-	cap: zod.z.string().min(1),
-	source: CompositionSourceRefSchema
-});
-var CompositionFeatureSchema = zod.z.discriminatedUnion("kind", [CompositionFieldsFeatureSchema, CompositionPassthroughFeatureSchema]);
-/**
-* A NEW device. It has no `name` of its own: the block's name IS the device's
-* name (2026-08-08). A second copy here would be a second writer of one string (D62).
-*/
-var CompositionNewTargetSchema = zod.z.object({
-	kind: zod.z.literal("new"),
-	type: zod.z.enum(require_sleep.DeviceType),
-	role: zod.z.enum(require_sleep.DeviceRole).optional()
-});
-/** RESERVED for slice 2: customize an existing device. */
-var CompositionExistingTargetSchema = zod.z.object({
-	kind: zod.z.literal("existing"),
-	device: CompositionSourceRefSchema
-});
-var CompositionTargetSchema = zod.z.discriminatedUnion("kind", [CompositionNewTargetSchema, CompositionExistingTargetSchema]);
-var CompositionSchema = zod.z.object({
-	target: CompositionTargetSchema,
-	features: zod.z.array(CompositionFeatureSchema).min(1).max(16)
-}).superRefine((composition, ctx) => {
-	const seen = /* @__PURE__ */ new Set();
-	composition.features.forEach((feature, index) => {
-		if (seen.has(feature.cap)) ctx.addIssue({
-			code: "custom",
-			message: `capability \`${feature.cap}\` is composed twice — one feature per capability`,
-			path: [
-				"features",
-				index,
-				"cap"
-			]
-		});
-		seen.add(feature.cap);
-	});
-});
-function compositionSourceKey(ref) {
-	return `${ref.addonId}/${ref.stableId}`;
-}
-function compositionSliceKey(ref, cap) {
-	return `${compositionSourceKey(ref)}#${cap}`;
-}
-function compositionReadKey(read) {
-	return `${compositionSliceKey(read.source, read.cap)}.${read.fieldPath}`;
-}
-function composedDeviceStableId(blockId) {
-	return `${COMPOSED_DEVICE_STABLE_ID_PREFIX}${blockId}`;
-}
-function composedDeviceRef(blockId) {
-	return {
-		addonId: COMPOSER_ADDON_ID,
-		stableId: composedDeviceStableId(blockId)
-	};
-}
-/** Every device field a source reads: `from` is one read, an expression is its `from` bindings. */
-function fieldReads(source) {
-	switch (source.kind) {
-		case "from": return [{
-			source: source.source,
-			cap: source.cap,
-			fieldPath: source.fieldPath
-		}];
-		case "expression": return Object.values(source.bindings).flatMap((binding) => binding.kind === "from" ? [{
-			source: binding.source,
-			cap: binding.cap,
-			fieldPath: binding.fieldPath
-		}] : []);
-		case "code": return [];
-	}
-}
-//#endregion
 //#region src/composition/composition-report.ts
 /**
 * What the validator says about a composition and what the composer says about
@@ -10329,7 +9355,12 @@ var CompositionProblemCodeSchema = zod.z.enum([
 	"source-field-unknown",
 	"expression-invalid",
 	"cycle",
-	"duplicate-target"
+	"duplicate-target",
+	"not-item-array",
+	"item-field-reserved",
+	"target-missing",
+	"target-unreadable",
+	"not-replaceable"
 ]);
 /** One refusal, named (D391). `path` points into the composition, e.g. `features[0].fields.celsius`. */
 var CompositionProblemSchema = zod.z.object({
@@ -10343,8 +9374,18 @@ var CompositionFieldKindSchema = zod.z.enum([
 	"boolean",
 	"enum"
 ]);
-/** How a field says "unavailable": `null` when its schema allows it, else the device goes offline (D393). */
-var CompositionUnavailableModeSchema = zod.z.enum(["null", "offline"]);
+/**
+* How a field says "unavailable" (D393, D663): `null` when its schema allows it;
+* `unknown` — the enum's own word — for an ADDED field that has one; `release`
+* for a REPLACED field of an existing device, whose claim is released so the
+* native provider's reading shows again; else the (composed) device goes offline.
+*/
+var CompositionUnavailableModeSchema = zod.z.enum([
+	"null",
+	"offline",
+	"unknown",
+	"release"
+]);
 /**
 * `derived` reads a source · `clock` reads only `now`, recomputed when a sibling
 * field of its cap changes value · `constant` reads nothing, computed once.
@@ -10354,9 +9395,17 @@ var CompositionFieldRoleSchema = zod.z.enum([
 	"clock",
 	"constant"
 ]);
+/** The item a planned field belongs to; its `path` is then the dotted path INSIDE the item. */
+var CompositionFieldItemSchema = zod.z.object({
+	arrayPath: zod.z.string(),
+	key: zod.z.string(),
+	label: zod.z.string()
+});
 var CompositionFieldPlanSchema = zod.z.object({
 	cap: zod.z.string(),
+	/** Top-level field, or — when `item` is set — the dotted path inside that item. */
 	path: zod.z.string(),
+	item: CompositionFieldItemSchema.optional(),
 	/** Index into `composition.features` this field's capability came from —
 	*  lets a source/cycle problem name its path as `features[N].fields.<path>`
 	*  (the same convention `planComposition`'s own problems already use). */
@@ -10366,19 +9415,45 @@ var CompositionFieldPlanSchema = zod.z.object({
 	required: zod.z.boolean(),
 	unavailable: CompositionUnavailableModeSchema,
 	role: CompositionFieldRoleSchema,
-	source: CompositionFieldSourceSchema,
-	reads: zod.z.array(CompositionFieldReadSchema)
+	source: require_composition.CompositionFieldSourceSchema,
+	reads: zod.z.array(require_composition.CompositionFieldReadSchema)
+});
+/** The key every record map, log line and graph node uses for a planned field. Two items' `status` are two keys. */
+function compositionFieldKey(plan) {
+	const path = plan.item === void 0 ? plan.path : require_composition.compositionItemFieldPath(plan.item.arrayPath, plan.item.key, plan.path);
+	return `${plan.cap}.${path}`;
+}
+/**
+* What a feature does to its target (D663): `new` builds a capability on a new
+* device; on an existing device it `add`s a capability the device lacks, or
+* `replace`s named fields of one it has natively.
+*/
+var CompositionFeatureModeSchema = zod.z.enum([
+	"new",
+	"add",
+	"replace"
+]);
+var CompositionFeaturePlanSchema = zod.z.object({
+	featureIndex: zod.z.number().int().nonnegative(),
+	cap: zod.z.string(),
+	mode: CompositionFeatureModeSchema
 });
 var CompositionValidationSchema = zod.z.object({
 	ok: zod.z.boolean(),
 	problems: zod.z.array(CompositionProblemSchema),
-	fields: zod.z.array(CompositionFieldPlanSchema)
+	fields: zod.z.array(CompositionFieldPlanSchema),
+	features: zod.z.array(CompositionFeaturePlanSchema)
 });
-/** Mirrors `CoreBlockStatus`, pinned by `core-blocks-source.spec.ts` (Task 11). */
+/**
+* Mirrors `CoreBlockStatus`, pinned by `core-blocks-source.spec.ts`. `degraded`:
+* running, but a replaced field is released to the native provider while its
+* source is unavailable (ruling S1b, D663) — the reason names each such field.
+*/
 var CompositionRunStatusSchema = zod.z.enum([
 	"stopped",
 	"starting",
 	"running",
+	"degraded",
 	"failed"
 ]);
 var CompositionFieldStateKindSchema = zod.z.enum([
@@ -10389,6 +9464,8 @@ var CompositionFieldStateKindSchema = zod.z.enum([
 var CompositionFieldStateSchema = zod.z.object({
 	cap: zod.z.string(),
 	path: zod.z.string(),
+	/** Same as the plan's: two items' `status` are told apart by it. */
+	item: CompositionFieldItemSchema.optional(),
 	state: CompositionFieldStateKindSchema,
 	/** `null` whenever `state === 'unavailable'`; never a plausible stand-in (D393). */
 	value: zod.z.union([
@@ -10470,11 +9547,14 @@ function coreBlockIdFromAddonId(addonId) {
 *  agent is the reason placement is not fixed to the hub. */
 var CoreBlockPlacementSchema = zod.z.union([zod.z.literal("hub"), zod.z.string().min(1)]);
 /** What a block's process is doing. Mirrors the addon runner's own lifecycle so
-*  a failing block reads the same way a failing addon does. */
+*  a failing block reads the same way a failing addon does. `degraded` is a
+*  composition on an existing device with a field handed back to the native
+*  provider while its source is unavailable (S1b, D663); the error names it. */
 var CoreBlockStatusSchema = zod.z.enum([
 	"stopped",
 	"starting",
 	"running",
+	"degraded",
 	"failed"
 ]);
 /** Client-authored fields. */
@@ -10507,14 +9587,21 @@ var CoreBlockSourceSchema = zod.z.discriminatedUnion("kind", [
 	}),
 	zod.z.object({
 		kind: zod.z.literal("composition"),
-		composition: CompositionSchema
+		composition: require_composition.CompositionSchema
 	})
 ]);
-/** The client-authored half of a composition block. No `code`, no placement (hub-only; Phase 7). */
+/**
+* The client-authored half of a composition block. No `code`, no placement (hub-only; Phase 7).
+*
+* `name`: REQUIRED for a `new` target — the block's name IS the device's name
+* (D659). ABSENT for an `existing` target — a customization has no name of its
+* own; the server derives one (`customizationBlockName`, D663) and refuses a
+* client-sent name by name.
+*/
 var CompositionBlockInputSchema = zod.z.object({
-	name: zod.z.string().min(1).max(120),
+	name: zod.z.string().min(1).max(120).optional(),
 	enabled: zod.z.boolean(),
-	composition: CompositionSchema
+	composition: require_composition.CompositionSchema
 });
 /** A stored block. */
 var CoreBlockSchema = CoreBlockInputSchema.extend({
@@ -10571,6 +9658,11 @@ var CompositionGetReadSchema = zod.z.discriminatedUnion("state", [zod.z.object({
 	state: zod.z.literal("loaded"),
 	view: CompositionViewSchema.nullable()
 }), CompositionsNotLoadedSchema]);
+/** The customization of one existing device, found by its TARGET, or `not-loaded` (D315). */
+var CompositionCustomizationReadSchema = zod.z.discriminatedUnion("state", [zod.z.object({
+	state: zod.z.literal("loaded"),
+	view: CompositionViewSchema.nullable()
+}), CompositionsNotLoadedSchema]);
 /** What a compile attempt produced. */
 var CoreBlockCompileResultSchema = zod.z.object({
 	ok: zod.z.boolean(),
@@ -10681,11 +9773,19 @@ var coreBlocksCapability = {
 		getComposition: require_sleep.method(zod.z.object({ blockId: zod.z.string() }), CompositionGetReadSchema, { auth: "admin" }),
 		listCompositions: require_sleep.method(zod.z.object({}), CompositionListReadSchema, { auth: "admin" }),
 		/**
+		* The composition that customizes an existing device (D663), found by its
+		* TARGET — never by the block's derived name. One per device at most.
+		*/
+		getCustomization: require_sleep.method(zod.z.object({
+			addonId: zod.z.string().min(1),
+			stableId: zod.z.string().min(1)
+		}), CompositionCustomizationReadSchema, { auth: "admin" }),
+		/**
 		* Validate without saving — the same verdict the save reaches. A mutation
 		* for its body size; it writes nothing, so its access is `view`.
 		*/
 		validateComposition: require_sleep.method(zod.z.object({
-			composition: CompositionSchema,
+			composition: require_composition.CompositionSchema,
 			blockId: zod.z.string().optional()
 		}), CompositionValidationSchema, {
 			kind: "mutation",
@@ -10704,13 +9804,13 @@ var coreBlocksCapability = {
 * and reads their state for the API. Nothing else talks to it.
 */
 /** The composer's runner id, `resolveRunnerId(decl, 'composer')`; pinned by `composer-manifest.spec.ts`. */
-var COMPOSER_RUNNER_ID = COMPOSER_ADDON_ID;
+var COMPOSER_RUNNER_ID = require_composition.COMPOSER_ADDON_ID;
 var ComposerBlockSchema = zod.z.object({
 	id: zod.z.string().min(1),
 	name: zod.z.string().min(1).max(120),
 	enabled: zod.z.boolean(),
 	updatedAt: zod.z.number(),
-	composition: CompositionSchema
+	composition: require_composition.CompositionSchema
 });
 /**
 * A stored composition row that no longer PARSES — a schema a release
@@ -11660,7 +10760,7 @@ var detectionPipelineCapability = {
 	mode: "singleton",
 	kind: "wrapper",
 	defaultActive: true,
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	exposesDeviceSettings: true,
 	methods: {}
 };
@@ -12093,7 +11193,7 @@ var DiscoveredChildDeviceSchema = zod.z.lazy(() => zod.z.object({
 	/** Friendly name as reported by the source (Reolink camera name, ONVIF profile, ...). */
 	name: zod.z.string(),
 	/** DeviceType the child should be created with on adopt. */
-	type: zod.z.enum(require_sleep.DeviceType),
+	type: zod.z.enum(require_err_msg.DeviceType),
 	status: DiscoveredChildStatusSchema,
 	/** Free-form integration-specific metadata surfaced in the panel. */
 	metadata: zod.z.object({
@@ -12149,7 +11249,7 @@ var deviceDiscoveryCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Hub],
+	deviceTypes: [require_err_msg.DeviceType.Hub],
 	status: {
 		schema: DeviceDiscoveryStatusSchema,
 		kind: "poll"
@@ -12751,7 +11851,7 @@ var DiscoveredDeviceSchema = zod.z.object({
 */
 var DiscoveryCandidateSchema = zod.z.object({
 	stableId: zod.z.string(),
-	type: zod.z.enum(require_sleep.DeviceType),
+	type: zod.z.enum(require_err_msg.DeviceType),
 	suggestedName: zod.z.string(),
 	prefilledConfig: zod.z.record(zod.z.string(), zod.z.unknown()),
 	/**
@@ -12888,7 +11988,7 @@ var deviceProviderCapability = {
 		* provider does not support manual creation. Lets the Add-Device dialog
 		* pick the right type instead of assuming Camera.
 		*/
-		getManualCreationType: require_sleep.method(zod.z.object({}), zod.z.object({ deviceType: zod.z.enum(require_sleep.DeviceType).nullable() })),
+		getManualCreationType: require_sleep.method(zod.z.object({}), zod.z.object({ deviceType: zod.z.enum(require_err_msg.DeviceType).nullable() })),
 		adoptDiscoveredDevice: require_sleep.method(zod.z.object({ candidate: DiscoveryCandidateSchema }), DeviceSummarySchema, {
 			kind: "mutation",
 			auth: "admin"
@@ -12900,9 +12000,9 @@ var deviceProviderCapability = {
 		* devices of that type. The output is a `ConfigUISchema` — the
 		* router type-asserts it at the boundary.
 		*/
-		getChildCreationSchema: require_sleep.method(zod.z.object({ type: zod.z.enum(require_sleep.DeviceType) }), CreationSchemaOutputSchema),
+		getChildCreationSchema: require_sleep.method(zod.z.object({ type: zod.z.enum(require_err_msg.DeviceType) }), CreationSchemaOutputSchema),
 		createDevice: require_sleep.method(zod.z.object({
-			type: zod.z.enum(require_sleep.DeviceType),
+			type: zod.z.enum(require_err_msg.DeviceType),
 			config: zod.z.record(zod.z.string(), zod.z.unknown())
 		}), DeviceSummarySchema, {
 			kind: "mutation",
@@ -12921,7 +12021,7 @@ var deviceProviderCapability = {
 		* for backwards compatibility; providers free to ignore it.
 		*/
 		testCreationField: require_sleep.method(zod.z.object({
-			type: zod.z.enum(require_sleep.DeviceType),
+			type: zod.z.enum(require_err_msg.DeviceType),
 			key: zod.z.string(),
 			value: zod.z.unknown(),
 			formValues: zod.z.record(zod.z.string(), zod.z.unknown()).optional()
@@ -13001,7 +12101,7 @@ var DeviceInfoSchema = zod.z.object({
 	id: zod.z.number(),
 	stableId: zod.z.string(),
 	addonId: zod.z.string(),
-	type: zod.z.enum(require_sleep.DeviceType),
+	type: zod.z.enum(require_err_msg.DeviceType),
 	name: zod.z.string(),
 	/** Operator-organisational location label. `null` when unset. */
 	location: zod.z.string().nullable(),
@@ -13094,7 +12194,7 @@ var LINKED_DEVICES_SLOT = {
 	label: "Linked devices",
 	description: "Companion devices of this camera: their controls appear with it, and the ones you opt in produce tracked events on it.",
 	shape: "association",
-	hostDeviceTypes: [require_sleep.DeviceType.Camera],
+	hostDeviceTypes: [require_err_msg.DeviceType.Camera],
 	sourceCaps: "any",
 	cardinality: "many",
 	value: LinkedDevicesSlotValueSchema
@@ -13336,7 +12436,7 @@ var deviceManagerCapability = {
 		*  placeholder `'generic'`. */
 		setType: require_sleep.method(zod.z.object({
 			deviceId: zod.z.number(),
-			type: zod.z.enum(require_sleep.DeviceType)
+			type: zod.z.enum(require_err_msg.DeviceType)
 		}), zod.z.void(), {
 			kind: "mutation",
 			auth: "admin"
@@ -13464,7 +12564,7 @@ var deviceManagerCapability = {
 			deviceId: zod.z.number(),
 			name: zod.z.string().optional(),
 			location: zod.z.string().nullable().optional(),
-			type: zod.z.enum(require_sleep.DeviceType).optional(),
+			type: zod.z.enum(require_err_msg.DeviceType).optional(),
 			integrationId: zod.z.string().optional(),
 			linkDeviceId: zod.z.number().nullable().optional(),
 			role: zod.z.string().nullable().optional()
@@ -14015,12 +13115,12 @@ var deviceManagerCapability = {
 		*/
 		getCreationSchema: require_sleep.method(zod.z.object({
 			addonId: zod.z.string(),
-			type: zod.z.enum(require_sleep.DeviceType)
+			type: zod.z.enum(require_err_msg.DeviceType)
 		}), zod.z.unknown().nullable()),
 		/** Create a new device via the device-provider capability. */
 		createDevice: require_sleep.method(zod.z.object({
 			addonId: zod.z.string(),
-			type: zod.z.enum(require_sleep.DeviceType),
+			type: zod.z.enum(require_err_msg.DeviceType),
 			config: zod.z.record(zod.z.string(), zod.z.unknown()),
 			/** Owning integration id, stamped onto the new device's meta by the
 			*  device-manager forwarder so `removeByIntegration` can cascade it.
@@ -14040,7 +13140,7 @@ var deviceManagerCapability = {
 		*/
 		testCreationField: require_sleep.method(zod.z.object({
 			addonId: zod.z.string(),
-			type: zod.z.enum(require_sleep.DeviceType),
+			type: zod.z.enum(require_err_msg.DeviceType),
 			key: zod.z.string(),
 			value: zod.z.unknown(),
 			formValues: zod.z.record(zod.z.string(), zod.z.unknown()).optional()
@@ -14135,7 +13235,7 @@ var deviceManagerCapability = {
 		}),
 		/** The device type a provider creates via manual add (Camera/Container/Hub),
 		*  so the Add-Device dialog uses the right type instead of assuming Camera. */
-		providerCreationType: require_sleep.method(zod.z.object({ addonId: zod.z.string() }), zod.z.object({ deviceType: zod.z.enum(require_sleep.DeviceType).nullable() }), { auth: "admin" }),
+		providerCreationType: require_sleep.method(zod.z.object({ addonId: zod.z.string() }), zod.z.object({ deviceType: zod.z.enum(require_err_msg.DeviceType).nullable() }), { auth: "admin" }),
 		/** A provider's extra per-scan param form (ConfigUISchema) for the
 		*  per-integration scan, or null when it takes none. */
 		providerDiscoveryParamsSchema: require_sleep.method(zod.z.object({ addonId: zod.z.string() }), zod.z.unknown(), { auth: "admin" }),
@@ -14201,6 +13301,52 @@ var deviceManagerCapability = {
 //#endregion
 //#region src/capabilities/device-state.cap.ts
 /**
+* Per-field ownership (D663). A composition may CLAIM fields of a native
+* cap's runtime-state slice on an existing device: `replace` overlays the
+* claimed fields on the native slice, `add` builds a slice the device does
+* not natively have. Declared here — once — so the hub mirror (Task 5) and
+* the claim methods (Task 6) share one union.
+*/
+var FieldClaimModeSchema = zod.z.enum(["replace", "add"]);
+/** What a claim, patch or release answers. A refusal always names its reason. */
+var ClaimOutcomeSchema = zod.z.discriminatedUnion("ok", [zod.z.object({
+	ok: zod.z.literal(true),
+	changed: zod.z.boolean()
+}), zod.z.object({
+	ok: zod.z.literal(false),
+	code: zod.z.enum([
+		"owned-by-other",
+		"not-claimed",
+		"field-not-claimed",
+		"invalid-slice",
+		"unknown-device",
+		"row-unreadable",
+		"migration-in-flight"
+	]),
+	message: zod.z.string()
+})]);
+/** One claim as `listClaims` reports it. `fields` is the PLANNED set, explicit (ruling S5). */
+var FieldClaimSchema = zod.z.object({
+	deviceId: zod.z.number(),
+	capName: zod.z.string(),
+	owner: zod.z.string().min(1),
+	mode: FieldClaimModeSchema,
+	fields: zod.z.array(zod.z.string().min(1)).min(1)
+});
+/**
+* What `listClaims` answers. The claims INDEX is a listing projection loaded
+* from the settings store at boot; until a load has succeeded it is
+* `not-loaded`, never `[]` — an unanswered question must not look like an
+* empty answer (D315).
+*/
+var ClaimsListingSchema = zod.z.discriminatedUnion("state", [zod.z.object({
+	state: zod.z.literal("loaded"),
+	claims: zod.z.array(FieldClaimSchema)
+}), zod.z.object({
+	state: zod.z.literal("not-loaded"),
+	reason: zod.z.string()
+})]);
+/**
 * `deviceState` — generic, cap-agnostic surface for cross-process
 * access to per-device runtime state. Read pendant for every cap's
 * runtime-state slice + the canonical write entrypoint. Mirrors the
@@ -14231,8 +13377,12 @@ var deviceStateCapability = {
 		/** Full state snapshot for one device. Empty object if no
 		*  cap-keyed slice has been written yet. */
 		getSnapshot: require_sleep.method(zod.z.object({ deviceId: zod.z.number() }), zod.z.record(zod.z.string(), zod.z.record(zod.z.string(), zod.z.unknown()))),
-		/** Single cap slice. Returns null when the slice hasn't been
-		*  written or the device isn't registered. */
+		/**
+		* Single cap slice — the EFFECTIVE one: the merge every consumer sees, null
+		* when the slice hasn't been written, the device isn't registered, or a
+		* claim HOLDS the cap (D663). Never the native shadow — that is
+		* `getNativeCapSlice`, admin-only.
+		*/
 		getCapSlice: require_sleep.method(zod.z.object({
 			deviceId: zod.z.number(),
 			capName: zod.z.string()
@@ -14277,7 +13427,66 @@ var deviceStateCapability = {
 			deviceId: zod.z.number(),
 			capName: zod.z.string(),
 			slice: zod.z.record(zod.z.string(), zod.z.unknown())
-		}), zod.z.void(), { kind: "mutation" })
+		}), zod.z.void(), { kind: "mutation" }),
+		/**
+		* Claim `fields` of `capName` on a device for `owner`. The PLANNED field set
+		* is explicit (ruling S5): `values` may be partial and MUST be a subset of
+		* `fields` (else `field-not-claimed`); a claimed field with no value is HELD,
+		* never answered from the native. A re-claim by the same owner REPLACES
+		* `fields` and MERGES `values` — a field dropped from `fields` loses its
+		* value. Another owner's claim → `owned-by-other`.
+		*/
+		claimFields: require_sleep.method(zod.z.object({
+			deviceId: zod.z.number(),
+			capName: zod.z.string(),
+			owner: zod.z.string().min(1),
+			mode: FieldClaimModeSchema,
+			fields: zod.z.array(zod.z.string().min(1)).min(1),
+			values: zod.z.record(zod.z.string(), zod.z.unknown())
+		}), ClaimOutcomeSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/**
+		* Write owned values. Every key of `values` must be in the claim's `fields`
+		* (`field-not-claimed`); no claim → `not-claimed`; another owner's →
+		* `owned-by-other`. Partial patches merge (S5); debounced like a native slice.
+		*/
+		patchOwnedFields: require_sleep.method(zod.z.object({
+			deviceId: zod.z.number(),
+			capName: zod.z.string(),
+			owner: zod.z.string().min(1),
+			values: zod.z.record(zod.z.string(), zod.z.unknown())
+		}), ClaimOutcomeSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/**
+		* Hand the cap back. A `replace` re-emits the native slice exactly as last
+		* written; an `add` leaves the mirror. `not-claimed` also removes a stale
+		* index entry — the index self-heals through this method.
+		*/
+		releaseClaim: require_sleep.method(zod.z.object({
+			deviceId: zod.z.number(),
+			capName: zod.z.string(),
+			owner: zod.z.string().min(1)
+		}), ClaimOutcomeSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/** Every claim the index lists, optionally those whose owner starts with `ownerPrefix`. */
+		listClaims: require_sleep.method(zod.z.object({ ownerPrefix: zod.z.string().optional() }), ClaimsListingSchema, { auth: "admin" }),
+		/**
+		* The NATIVE slice — what the provider wrote, the shadow under a `replace`
+		* claim — for the owner's derived reads. Admin-only (D224, ruled in the
+		* Task 6 review): the shadow is a second truth beside the merge, and the
+		* event channel already refuses it to everyone but the composer; a
+		* protected read of it would hand out what the events withhold.
+		*/
+		getNativeCapSlice: require_sleep.method(zod.z.object({
+			deviceId: zod.z.number(),
+			capName: zod.z.string()
+		}), zod.z.record(zod.z.string(), zod.z.unknown()).nullable(), { auth: "admin" })
 	},
 	events: { 
 	/**
@@ -16269,7 +15478,7 @@ var motionDetectionCapability = {
 	/** Frame-differencing motion analysis over a video stream — only a camera
 	*  produces the frames. Read by the `defaultActive` auto-bind in
 	*  `device-manager.getBindings` to decide which devices it may claim. */
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	exposesDeviceSettings: true,
 	methods: {
 		analyze: require_sleep.method(zod.z.object({
@@ -17854,7 +17063,7 @@ var alarmPanelCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.AlarmPanel],
+	deviceTypes: [require_err_msg.DeviceType.AlarmPanel],
 	methods: {
 		arm: require_sleep.method(zod.z.object({
 			deviceId: zod.z.number().int().nonnegative(),
@@ -20814,7 +20023,7 @@ var DeviceSelectorSchema = zod.z.discriminatedUnion("kind", [
 	}),
 	zod.z.object({
 		kind: zod.z.literal("types"),
-		types: zod.z.array(zod.z.enum(require_sleep.DeviceType)).min(1)
+		types: zod.z.array(zod.z.enum(require_err_msg.DeviceType)).min(1)
 	}),
 	zod.z.object({
 		kind: zod.z.literal("locations"),
@@ -22936,7 +22145,15 @@ var RebuildObjectEmbeddingsInput = zod.z.object({
 	* force is logged at start and finish so a deliberately slow pass reads
 	* differently from a stalled one.
 	*/
-	pacingMs: zod.z.number().int().nonnegative().optional()
+	pacingMs: zod.z.number().int().nonnegative().optional(),
+	/**
+	* Re-embed ONLY the tracks whose vector is ALREADY in the pinned model's
+	* space (D664) — the in-space skip inverted. It exists to redo vectors
+	* written from the wrong box, which a normal pass would skip as done
+	* forever. Requires `maxTracks`: a forced pass without a bound is refused
+	* (`force-requires-max-tracks`).
+	*/
+	force: zod.z.boolean().optional()
 });
 /**
 * Result of emptying the CLIP index.
@@ -22972,6 +22189,7 @@ var WipeObjectEmbeddingsResultSchema = zod.z.object({
 *    - `reads-disagree` — the two reads named different choices.
 *  - `not-a-clip-model` — the CONFIRMED id has no CLIP metadata, so there is no
 *    index to fill and no dimension to check against (D649).
+*  - `force-requires-max-tracks` — `force: true` with no `maxTracks` (D664).
 */
 var RebuildObjectEmbeddingsRefusalSchema = zod.z.enum([
 	"stores-unavailable",
@@ -22979,7 +22197,8 @@ var RebuildObjectEmbeddingsRefusalSchema = zod.z.enum([
 	"method-unavailable",
 	"read-failed",
 	"reads-disagree",
-	"not-a-clip-model"
+	"not-a-clip-model",
+	"force-requires-max-tracks"
 ]);
 /**
 * Acknowledgement that a rebuild STARTED.
@@ -23004,11 +22223,32 @@ var RebuildStatusSchema = zod.z.object({
 	running: zod.z.boolean(),
 	scanned: zod.z.number(),
 	rebuilt: zod.z.number(),
-	/** Tracks whose key frame is gone — nothing to re-embed from. */
+	/** Tracks whose key frame is gone — nothing to re-embed from. Pixels ONLY:
+	*  `missingEvent` is its own field since D664, never summed in. */
 	missingKeyFrame: zod.z.number(),
-	/** Tracks with no usable detection box. */
+	/** Tracks with no object event at all (D664). */
+	missingEvent: zod.z.number(),
+	/** Tracks with no box measured on the pixels to cut — see `boxSource.refused`. */
 	missingBbox: zod.z.number(),
 	/**
+	* Which rule placed each judged track's box (D664): the key frame row's own
+	* `subjectBox`, `track.positions` at exactly its instant (older key frames),
+	* the event box (a key frame recovered from the recording, at the event's
+	* instant), or `refused` by name — the reasons are in the tagged log lines.
+	*/
+	boxSource: zod.z.object({
+		subjectBox: zod.z.number(),
+		positions: zod.z.number(),
+		event: zod.z.number(),
+		refused: zod.z.number()
+	}),
+	/** Tracks skipped because their vector is already in the pinned space. */
+	alreadyInSpace: zod.z.number(),
+	/** Whether the current / last pass was a `force` pass; `null` before any (D664). */
+	force: zod.z.boolean().nullable(),
+	/** In-space tracks a `force` pass selected for re-embedding. */
+	forcedInSpace: zod.z.number(),
+	/**
 	* Tracks an executing node REFUSED rather than broke on — an unreadable key
 	* frame, a step that threw. Separate from `failed` because the remedy is
 	* different, and because a whole camera silently contributing zero vectors
@@ -23146,7 +22386,7 @@ var pipelineAnalyticsCapability = {
 	mode: "singleton",
 	kind: "wrapper",
 	defaultActive: true,
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	exposesDeviceSettings: true,
 	methods: {
 		getActiveTracks: require_sleep.method(zod.z.object({ deviceId: zod.z.number() }), zod.z.array(TrackSchema).readonly()),
@@ -24829,7 +24069,7 @@ var zonesCapability = {
 	name: "zones",
 	scope: "device",
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	methods: {
 		listZones: require_sleep.method(zod.z.object({ deviceId: zod.z.number() }), zod.z.array(ZoneSchema).readonly()),
 		addZone: require_sleep.method(zod.z.object({
@@ -27811,7 +27051,7 @@ var snapshotCapability = {
 	mode: "singleton",
 	kind: "wrapper",
 	defaultActive: true,
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	exposesDeviceSettings: true,
 	methods: {
 		getSnapshot: require_sleep.method(zod.z.object({
@@ -28667,7 +27907,7 @@ var streamSignalsCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: Object.values(require_sleep.DeviceType),
+	deviceTypes: Object.values(require_err_msg.DeviceType),
 	runtimeState: StreamSignalsStatusSchema,
 	/**
 	* Runtime-state durability: **session** — mirrored in RAM, never written.
@@ -30166,7 +29406,7 @@ var videoclipsCapability = {
 	/** A clip is a window over a camera's footage — the cap is meaningless on a
 	*  sensor, a button or an event emitter, and the `defaultActive` auto-bind
 	*  reads this to decide which devices it may claim. */
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	/**
 	* The Clips section of a camera's device details is FRAMEWORK-DERIVED (D14):
 	* the aggregator turns this declaration into the `type:'widget'` section and
@@ -30760,7 +30000,7 @@ var DOORBELL_SOURCE_SLOT = {
 	label: "Doorbell trigger devices",
 	description: "Any of these becoming active rings this camera's virtual doorbell: a binary sensor when it goes active, a switch when it turns on.",
 	shape: "association",
-	hostDeviceTypes: [require_sleep.DeviceType.Camera],
+	hostDeviceTypes: [require_err_msg.DeviceType.Camera],
 	sourceCaps: SOURCE_CAPS,
 	cardinality: "many",
 	value: DoorbellSourceSlotValueSchema
@@ -30772,7 +30012,7 @@ var doorbellCapability = {
 	mode: "singleton",
 	kind: "wrapper",
 	defaultActive: false,
-	deviceTypes: [require_sleep.DeviceType.Button, require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Button, require_err_msg.DeviceType.Camera],
 	extensionSlots: [DOORBELL_SOURCE_SLOT],
 	methods: {},
 	events: { 
@@ -30820,29 +30060,28 @@ var EXTENSION_SLOTS = {
 	"doorbell-source": {
 		descriptor: DOORBELL_SOURCE_SLOT,
 		declaringCap: "doorbell",
-		hostDeviceTypes: [require_sleep.DeviceType.Camera]
+		hostDeviceTypes: [require_err_msg.DeviceType.Camera]
 	},
 	"linked-devices": {
 		descriptor: LINKED_DEVICES_SLOT,
 		declaringCap: "device-manager",
-		hostDeviceTypes: [require_sleep.DeviceType.Camera]
+		hostDeviceTypes: [require_err_msg.DeviceType.Camera]
 	}
 };
 /** A slot's editable value, discriminated on `slot`. */
 var ExtensionSlotValueSchema = zod.z.discriminatedUnion("slot", [DoorbellSourceSlotValueSchema.extend({ slot: zod.z.literal("doorbell-source") }), LinkedDevicesSlotValueSchema.extend({ slot: zod.z.literal("linked-devices") })]);
 /** Every device type at least one slot is offered on — `device-extension`'s `deviceTypes`. */
-var EXTENSION_HOST_DEVICE_TYPES = [require_sleep.DeviceType.Camera];
+var EXTENSION_HOST_DEVICE_TYPES = [require_err_msg.DeviceType.Camera];
 //#endregion
 //#region src/capabilities/device-extension.cap.ts
 /**
 * `device-extension` — ONE place to see and author what a device is extended
 * with by OTHER devices (D648).
 *
-* **A contract, not a store.** Every slot (`linked-devices`,
-* `doorbell-source`, later `consumables-graft`) is declared by the cap that
-* owns the function (`extensionSlots` in its `*.cap.ts`, D4) and SERVED by the
-* addon that already owns its store, over that store and its existing write
-* path. This cap persists nothing and has no config method (guarded by
+* **A contract, not a store.** Every slot (`linked-devices`, `doorbell-source`)
+* is declared by the cap that owns the function (`extensionSlots` in its
+* `*.cap.ts`, D4) and SERVED by the addon that already owns its store, over
+* that store and its existing write path. This cap persists nothing and has no config method (guarded by
 * `scripts/check-extension-slots.ts`): D62 applied to the whole feature, and
 * D3 — no shadow registry.
 *
@@ -30863,6 +30102,11 @@ var EXTENSION_HOST_DEVICE_TYPES = [require_sleep.DeviceType.Camera];
 * The slot's value travels as the generated discriminated union
 * (`ExtensionSlotValue`, keyed on `slot`), so a value under the wrong slot is
 * a schema error before it reaches any owner.
+*
+* **Associations only.** A slot LISTS other devices on its host. A host that
+* GAINS a capability from other devices is a composition (D663, amends D648:
+* the reserved `graft` shape, its `projects` and its `enabled` switch were
+* retired unimplemented).
 */
 /** Separator between the source and the slot id in a `slotRef`. It is the
 *  D554 routing separator: the dispatcher matches `<source>:` prefixes. */
@@ -30885,7 +30129,7 @@ var ExtensionSourceSchema = zod.z.object({
 /**
 * How one picked source stands. `missing` — no such device (deleted, or an id
 * that never existed); `foreign` — a device the slot's owner cannot read from
-* (slice 2's cross-owner graft source); `unavailable` — it exists but is not a
+* (a source owned by another addon); `unavailable` — it exists but is not a
 * valid source now (a container, which is never a pick). A source in any of
 * these states is SHOWN, never silently dropped or re-pointed.
 */
@@ -30926,10 +30170,6 @@ var ExtensionSlotStateSchema = zod.z.object({
 	slot: ExtensionSlotIdSchema,
 	/** Names the store written (D62), e.g. `virtual-doorbell:doorbellSources`. */
 	authority: zod.z.string(),
-	/** graft: its switch. association: null — removing every source is "off". */
-	enabled: zod.z.boolean().nullable(),
-	/** graft: the cap registered on the host. association: null. */
-	projects: zod.z.string().nullable(),
 	activation: ExtensionSlotActivationSchema.nullable(),
 	value: ExtensionSlotValueSchema,
 	sources: zod.z.array(ExtensionSlotSourceSchema),
@@ -30980,7 +30220,8 @@ var ExtensionCandidatesSchema = zod.z.object({ candidates: zod.z.array(Extension
 /**
 * What a write did. `none` — applied in place. `host` / `parent` — the owner
 * reloaded the host (or, for an accessory child, its parent) because the
-* write changed what the host REGISTERS (a graft switched on or off, slice 2).
+* write changed what the host REGISTERS. A slot never adds a capability to its
+* host — that is a composition (D663) — so today's owners answer `none`.
 */
 var ExtensionSetResultSchema = zod.z.object({
 	applied: zod.z.literal(true),
@@ -31318,7 +30559,7 @@ var webrtcSessionCapability = {
 	kind: "wrapper",
 	defaultActive: true,
 	preferredProvider: "stream-broker",
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	methods: {
 		/**
 		* List available WebRTC streams for a device.
@@ -31599,18 +30840,18 @@ var accessoriesCapability = {
 	deviceNative: true,
 	mode: "singleton",
 	deviceTypes: [
-		require_sleep.DeviceType.Camera,
-		require_sleep.DeviceType.Hub,
-		require_sleep.DeviceType.Switch,
-		require_sleep.DeviceType.Light,
-		require_sleep.DeviceType.Sensor,
-		require_sleep.DeviceType.Thermostat,
-		require_sleep.DeviceType.Cover,
-		require_sleep.DeviceType.Lock,
-		require_sleep.DeviceType.Fan,
-		require_sleep.DeviceType.MediaPlayer,
-		require_sleep.DeviceType.AlarmPanel,
-		require_sleep.DeviceType.Generic
+		require_err_msg.DeviceType.Camera,
+		require_err_msg.DeviceType.Hub,
+		require_err_msg.DeviceType.Switch,
+		require_err_msg.DeviceType.Light,
+		require_err_msg.DeviceType.Sensor,
+		require_err_msg.DeviceType.Thermostat,
+		require_err_msg.DeviceType.Cover,
+		require_err_msg.DeviceType.Lock,
+		require_err_msg.DeviceType.Fan,
+		require_err_msg.DeviceType.MediaPlayer,
+		require_err_msg.DeviceType.AlarmPanel,
+		require_err_msg.DeviceType.Generic
 	],
 	methods: { 
 	/**
@@ -32251,7 +31492,7 @@ var airQualitySensorCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Sensor],
+	deviceTypes: [require_err_msg.DeviceType.Sensor],
 	methods: {},
 	status: {
 		schema: AirQualitySensorStatusSchema,
@@ -32295,7 +31536,7 @@ var ambientLightSensorCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Sensor],
+	deviceTypes: [require_err_msg.DeviceType.Sensor],
 	methods: {},
 	status: {
 		schema: AmbientLightSensorStatusSchema,
@@ -32413,7 +31654,7 @@ var audioMetricsCapability = {
 	name: "audio-metrics",
 	scope: "device",
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	methods: {
 		/** Latest snapshot for this device. Null until the analytics
 		*  pipeline has processed at least one audio window. */
@@ -32481,7 +31722,7 @@ var automationControlCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Automation],
+	deviceTypes: [require_err_msg.DeviceType.Automation],
 	methods: {
 		enable: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
 			kind: "mutation",
@@ -32607,10 +31848,12 @@ var batteryCapability = {
 	deviceNative: true,
 	mode: "singleton",
 	deviceTypes: [
-		require_sleep.DeviceType.Camera,
-		require_sleep.DeviceType.Sensor,
-		require_sleep.DeviceType.Button,
-		require_sleep.DeviceType.Switch
+		require_err_msg.DeviceType.Camera,
+		require_err_msg.DeviceType.Sensor,
+		require_err_msg.DeviceType.Button,
+		require_err_msg.DeviceType.Switch,
+		require_err_msg.DeviceType.PetFeeder,
+		require_err_msg.DeviceType.Container
 	],
 	methods: { 
 	/**
@@ -32637,6 +31880,19 @@ wakeForStream: require_sleep.method(zod.z.object({
 		awoke: zod.z.boolean(),
 		durationMs: zod.z.number()
 	}), { kind: "mutation" }) },
+	/**
+	* A composed provider (battery ADDED to a pet feeder or container that has
+	* no wake surface) answers `wakeForStream` with the same "unavailable"
+	* result the contract already defines above: "Returns `awoke: false` when
+	* … the cap surface is unavailable." (D663).
+	*/
+	composedMethods: { wakeForStream: {
+		kind: "answer",
+		value: {
+			awoke: false,
+			durationMs: 0
+		}
+	} },
 	events: { 
 	/**
 	* Emitted whenever the cached status changes (firmware push OR
@@ -32652,7 +31908,7 @@ onStatusChanged: { data: zod.z.object({
 		schema: BatteryStatusSchema,
 		kind: "push",
 		empty: {
-			percentage: 0,
+			percentage: null,
 			charging: "unknown",
 			sleeping: false,
 			lastUpdated: 0
@@ -32702,7 +31958,7 @@ var binaryCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Sensor],
+	deviceTypes: [require_err_msg.DeviceType.Sensor],
 	methods: {},
 	status: {
 		schema: BinaryStatusSchema,
@@ -32745,7 +32001,7 @@ var brightnessCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Light],
+	deviceTypes: [require_err_msg.DeviceType.Light],
 	methods: { setBrightness: require_sleep.method(zod.z.object({
 		deviceId: zod.z.number().int().nonnegative(),
 		percentage: zod.z.number().min(0).max(100)
@@ -32799,7 +32055,7 @@ var buttonCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Button],
+	deviceTypes: [require_err_msg.DeviceType.Button],
 	methods: { press: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
 		kind: "mutation",
 		auth: "protected"
@@ -32876,7 +32132,7 @@ var cameraCredentialsCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	methods: { 
 	/**
 	* Return the camera's full credential bundle for admin consumers.
@@ -33033,7 +32289,7 @@ var cameraGridLayoutCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	/**
 	* The section is built by the ADDON and returned from
 	* `getDeviceSettingsContribution`, not derived by the framework from a
@@ -33084,7 +32340,7 @@ var carbonMonoxideCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Sensor],
+	deviceTypes: [require_err_msg.DeviceType.Sensor],
 	methods: {},
 	status: {
 		schema: CarbonMonoxideStatusSchema,
@@ -33193,7 +32449,7 @@ var climateControlCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Thermostat, require_sleep.DeviceType.Climate],
+	deviceTypes: [require_err_msg.DeviceType.Thermostat, require_err_msg.DeviceType.Climate],
 	methods: {
 		setMode: require_sleep.method(zod.z.object({
 			deviceId: zod.z.number().int().nonnegative(),
@@ -33346,7 +32602,7 @@ var colorCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Light],
+	deviceTypes: [require_err_msg.DeviceType.Light],
 	methods: { setColor: require_sleep.method(zod.z.object({
 		deviceId: zod.z.number().int().nonnegative(),
 		color: ColorInputSchema
@@ -33506,7 +32762,7 @@ var connectivityCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Sensor],
+	deviceTypes: [require_err_msg.DeviceType.Sensor],
 	methods: {},
 	status: {
 		schema: ConnectivityStatusSchema,
@@ -33538,6 +32794,19 @@ var connectivityCapability = {
 * provider populates it by guessing (no HA inference). The UI renders a
 * "No consumables reported" placeholder when `items` is empty.
 */
+/** Units a remaining-life counter is reported in. Closed: the panel renders
+*  each. */
+var ConsumableRemainingUnitSchema = zod.z.enum([
+	"days",
+	"hours",
+	"cycles"
+]);
+/** Remaining life as a COUNT, not a percentage (the PetKit desiccant reports
+*  days). `value` null = unknown (D393). */
+var ConsumableRemainingSchema = zod.z.object({
+	value: zod.z.number().min(0).nullable(),
+	unit: ConsumableRemainingUnitSchema
+});
 /** A single consumable item. Either a continuous `level` (remaining
 *  life %) or a discrete `status` may be known — both may be null when a
 *  provider only knows the item exists. `level` and `status` are not
@@ -33554,7 +32823,10 @@ var ConsumableItemSchema = zod.z.object({
 	/** Ms epoch of the last replace, when known. */
 	lastResetAt: zod.z.number().nullable(),
 	/** Whether `reset()` is meaningful for this item. */
-	resettable: zod.z.boolean()
+	resettable: zod.z.boolean(),
+	/** Remaining life as a count (days/hours/cycles), when a provider reports
+	*  it that way instead of — or alongside — `level`. Absent = not reported. */
+	remaining: ConsumableRemainingSchema.optional()
 });
 var ConsumablesStatusSchema = zod.z.object({
 	items: zod.z.array(ConsumableItemSchema),
@@ -33565,7 +32837,7 @@ var consumablesCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: Object.values(require_sleep.DeviceType),
+	deviceTypes: Object.values(require_err_msg.DeviceType),
 	deviceConfig: { ui: {
 		kind: "widget",
 		widgetId: "host/consumables-panel",
@@ -33584,6 +32856,16 @@ reset: require_sleep.method(zod.z.object({
 		kind: "mutation",
 		auth: "admin"
 	}) },
+	/**
+	* A composed consumable (item added to a device with no native consumables
+	* provider) refuses `reset` by name: "Only meaningful when the item's
+	* `resettable` is true" — a composed item is never resettable until
+	* commands (`forward`) arrive in slice 3 (D663).
+	*/
+	composedMethods: { reset: {
+		kind: "refuse",
+		reason: "a composed consumable is not resettable until commands (forward) arrive — slice 3"
+	} },
 	status: {
 		schema: ConsumablesStatusSchema,
 		kind: "push",
@@ -33648,7 +32930,7 @@ var contactCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Sensor],
+	deviceTypes: [require_err_msg.DeviceType.Sensor],
 	methods: {},
 	status: {
 		schema: ContactStatusSchema,
@@ -33779,7 +33061,7 @@ var controlCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Control],
+	deviceTypes: [require_err_msg.DeviceType.Control],
 	methods: { setValue: require_sleep.method(zod.z.object({
 		deviceId: zod.z.number().int().nonnegative(),
 		control: ControlSetValueInputSchema
@@ -33851,7 +33133,7 @@ var coverCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Cover],
+	deviceTypes: [require_err_msg.DeviceType.Cover],
 	methods: {
 		open: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
 			kind: "mutation",
@@ -33974,7 +33256,7 @@ var dayNightCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	deviceConfig: { ui: {
 		kind: "derived-form",
 		builderId: "day-night",
@@ -34099,7 +33381,7 @@ var enumSensorCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Sensor],
+	deviceTypes: [require_err_msg.DeviceType.Sensor],
 	methods: {},
 	status: {
 		schema: EnumSensorStatusSchema,
@@ -34146,7 +33428,7 @@ var eventEmitterCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.EventEmitter],
+	deviceTypes: [require_err_msg.DeviceType.EventEmitter],
 	methods: {},
 	events: { onEvent: { data: EventFireSchema } },
 	status: {
@@ -34614,7 +33896,7 @@ var fanControlCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Fan],
+	deviceTypes: [require_err_msg.DeviceType.Fan],
 	methods: {
 		setPercentage: require_sleep.method(zod.z.object({
 			deviceId: zod.z.number().int().nonnegative(),
@@ -34768,7 +34050,7 @@ var floodCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Sensor],
+	deviceTypes: [require_err_msg.DeviceType.Sensor],
 	methods: {},
 	status: {
 		schema: FloodStatusSchema,
@@ -34803,7 +34085,7 @@ var gasCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Sensor],
+	deviceTypes: [require_err_msg.DeviceType.Sensor],
 	methods: {},
 	status: {
 		schema: GasStatusSchema,
@@ -34865,7 +34147,7 @@ var humidifierCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Humidifier],
+	deviceTypes: [require_err_msg.DeviceType.Humidifier],
 	methods: {
 		setOn: require_sleep.method(zod.z.object({
 			deviceId: zod.z.number().int().nonnegative(),
@@ -34936,7 +34218,7 @@ var humiditySensorCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Sensor, require_sleep.DeviceType.Thermostat],
+	deviceTypes: [require_err_msg.DeviceType.Sensor, require_err_msg.DeviceType.Thermostat],
 	methods: {},
 	status: {
 		schema: HumiditySensorStatusSchema,
@@ -34982,7 +34264,7 @@ var imageCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Image],
+	deviceTypes: [require_err_msg.DeviceType.Image],
 	methods: {},
 	status: {
 		schema: ImageStatusSchema,
@@ -35130,7 +34412,7 @@ var imageSettingsCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	deviceConfig: { ui: {
 		kind: "derived-form",
 		builderId: "image-settings",
@@ -35407,7 +34689,7 @@ var intercomCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	/**
 	* **Auth tier: `protected` on every method — deliberate, and load-bearing.**
 	*
@@ -35613,7 +34895,7 @@ var lawnMowerControlCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.LawnMower],
+	deviceTypes: [require_err_msg.DeviceType.LawnMower],
 	methods: {
 		startMowing: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
 			kind: "mutation",
@@ -36043,7 +35325,7 @@ var lockControlCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Lock],
+	deviceTypes: [require_err_msg.DeviceType.Lock],
 	methods: {
 		lock: require_sleep.method(zod.z.object({
 			deviceId: zod.z.number().int().nonnegative(),
@@ -36164,7 +35446,7 @@ var mediaPlayerCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.MediaPlayer],
+	deviceTypes: [require_err_msg.DeviceType.MediaPlayer],
 	methods: {
 		play: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
 			kind: "mutation",
@@ -36608,7 +35890,7 @@ var motionCapability = {
 	* `snapshot` and every other per-device native cap.
 	*/
 	deviceNative: true,
-	deviceTypes: [require_sleep.DeviceType.Camera, require_sleep.DeviceType.Sensor],
+	deviceTypes: [require_err_msg.DeviceType.Camera, require_err_msg.DeviceType.Sensor],
 	methods: { 
 	/**
 	* Pull the current motion state synchronously. Convenience shortcut
@@ -36701,9 +35983,9 @@ var motionTriggerCapability = {
 	deviceNative: true,
 	mode: "singleton",
 	deviceTypes: [
-		require_sleep.DeviceType.Light,
-		require_sleep.DeviceType.Siren,
-		require_sleep.DeviceType.Switch
+		require_err_msg.DeviceType.Light,
+		require_err_msg.DeviceType.Siren,
+		require_err_msg.DeviceType.Switch
 	],
 	methods: { setMotionTrigger: require_sleep.method(zod.z.object({
 		deviceId: zod.z.number().int().nonnegative(),
@@ -36776,7 +36058,7 @@ var motionZonesCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	deviceConfig: { ui: {
 		kind: "widget",
 		widgetId: "host/motion-zones-grid",
@@ -36902,7 +36184,7 @@ var nativeObjectDetectionCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	methods: {
 		getOptions: require_sleep.method(zod.z.object({ deviceId: zod.z.number() }), NativeObjectDetectionOptionsSchema),
 		setSettings: require_sleep.method(zod.z.object({
@@ -37271,7 +36553,7 @@ var navigationCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	deviceConfig: { ui: {
 		kind: "widget",
 		widgetId: "host/navigation-panel",
@@ -37441,13 +36723,13 @@ var networkLinkCapability = {
 	deviceNative: true,
 	mode: "singleton",
 	deviceTypes: [
-		require_sleep.DeviceType.Camera,
-		require_sleep.DeviceType.Sensor,
-		require_sleep.DeviceType.Button,
-		require_sleep.DeviceType.Switch,
-		require_sleep.DeviceType.Light,
-		require_sleep.DeviceType.Lock,
-		require_sleep.DeviceType.Siren
+		require_err_msg.DeviceType.Camera,
+		require_err_msg.DeviceType.Sensor,
+		require_err_msg.DeviceType.Button,
+		require_err_msg.DeviceType.Switch,
+		require_err_msg.DeviceType.Light,
+		require_err_msg.DeviceType.Lock,
+		require_err_msg.DeviceType.Siren
 	],
 	methods: {},
 	events: { 
@@ -37883,7 +37165,7 @@ var notifierCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Notifier],
+	deviceTypes: [require_err_msg.DeviceType.Notifier],
 	methods: {
 		send: require_sleep.method(NotifierSendInputSchema, NotifierSendResultSchema, {
 			kind: "mutation",
@@ -37965,7 +37247,7 @@ var numericSensorCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Sensor],
+	deviceTypes: [require_err_msg.DeviceType.Sensor],
 	methods: {},
 	status: {
 		schema: NumericSensorStatusSchema,
@@ -38034,7 +37316,7 @@ var osdCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	methods: { 
 	/**
 	* Patch a single overlay by id. Provider handles read-modify-write
@@ -38410,7 +37692,7 @@ var petFeederCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.PetFeeder],
+	deviceTypes: [require_err_msg.DeviceType.PetFeeder],
 	methods: {
 		/**
 		* Dispense food now. Single-hopper feeders take `grams`; dual-hopper
@@ -38912,7 +38194,7 @@ var powerMeterCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Sensor],
+	deviceTypes: [require_err_msg.DeviceType.Sensor],
 	methods: {},
 	status: {
 		schema: PowerMeterStatusSchema,
@@ -38975,7 +38257,7 @@ var presenceCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Presence],
+	deviceTypes: [require_err_msg.DeviceType.Presence],
 	methods: {},
 	status: {
 		schema: PresenceStatusSchema,
@@ -39029,7 +38311,7 @@ var pressureSensorCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Sensor],
+	deviceTypes: [require_err_msg.DeviceType.Sensor],
 	methods: {},
 	status: {
 		schema: PressureSensorStatusSchema,
@@ -39154,7 +38436,7 @@ var privacyMaskCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	deviceConfig: { ui: {
 		kind: "widget",
 		widgetId: "host/privacy-mask-grid",
@@ -39418,7 +38700,7 @@ var ptzCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	deviceConfig: { ui: {
 		kind: "widget",
 		widgetId: "host/ptz-panel",
@@ -39650,7 +38932,7 @@ var ptzAutotrackCapability = {
 	*/
 	kind: "wrapper",
 	defaultActive: false,
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	deviceConfig: { ui: {
 		kind: "widget",
 		widgetId: "host/ptz-autotrack",
@@ -39741,9 +39023,9 @@ var rebootCapability = {
 	deviceNative: true,
 	mode: "singleton",
 	deviceTypes: [
-		require_sleep.DeviceType.Camera,
-		require_sleep.DeviceType.Sensor,
-		require_sleep.DeviceType.Switch
+		require_err_msg.DeviceType.Camera,
+		require_err_msg.DeviceType.Sensor,
+		require_err_msg.DeviceType.Switch
 	],
 	methods: { reboot: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.object({ success: zod.z.literal(true) }), {
 		kind: "mutation",
@@ -40023,7 +39305,7 @@ var recordingCapability = {
 	/** Recorded coverage is a property of a camera — the cap is meaningless on a
 	*  sensor, a button or an event emitter, and the `defaultActive` auto-bind
 	*  reads this to decide which devices it may claim. */
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	methods: {
 		/**
 		* The sources this camera has, WITH the reason any of them cannot answer.
@@ -41711,7 +40993,7 @@ var recordingOnboardCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	deviceConfig: { ui: {
 		kind: "derived-form",
 		builderId: "recording-onboard",
@@ -42054,7 +41336,7 @@ var recordingSignalCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	methods: { 
 	/** The current level, straight from the slice the provider keeps fresh. */
 getStatus: require_sleep.method(zod.z.object({ deviceId: zod.z.number() }), RecordingSignalStatusSchema) },
@@ -42373,7 +41655,7 @@ var sceneMonitorCapability = {
 	mode: "singleton",
 	kind: "wrapper",
 	defaultActive: true,
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	methods: {
 		listScenes: require_sleep.method(zod.z.object({ deviceId: zod.z.number() }), SceneMonitorStatusSchema),
 		/**
@@ -42626,7 +41908,7 @@ var scriptRunnerCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Script],
+	deviceTypes: [require_err_msg.DeviceType.Script],
 	methods: {
 		run: require_sleep.method(zod.z.object({
 			deviceId: zod.z.number().int().nonnegative(),
@@ -42684,7 +41966,7 @@ var smokeCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Sensor],
+	deviceTypes: [require_err_msg.DeviceType.Sensor],
 	methods: {},
 	status: {
 		schema: SmokeStatusSchema,
@@ -42783,7 +42065,7 @@ var streamCatalogCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	methods: { getCatalog: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.array(CamStreamDescriptorSchema).readonly()) },
 	runtimeState: StreamCatalogStateSchema,
 	/**
@@ -42901,7 +42183,7 @@ var streamParamsCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	deviceConfig: { ui: {
 		kind: "derived-form",
 		builderId: "stream-params",
@@ -43233,9 +42515,9 @@ var switchCapability = {
 	deviceNative: true,
 	mode: "singleton",
 	deviceTypes: [
-		require_sleep.DeviceType.Switch,
-		require_sleep.DeviceType.Siren,
-		require_sleep.DeviceType.Light
+		require_err_msg.DeviceType.Switch,
+		require_err_msg.DeviceType.Siren,
+		require_err_msg.DeviceType.Light
 	],
 	methods: { setState: require_sleep.method(zod.z.object({
 		deviceId: zod.z.number(),
@@ -43930,7 +43212,7 @@ var tamperCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Sensor],
+	deviceTypes: [require_err_msg.DeviceType.Sensor],
 	methods: {},
 	status: {
 		schema: TamperStatusSchema,
@@ -43987,7 +43269,7 @@ var temperatureSensorCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Sensor, require_sleep.DeviceType.Thermostat],
+	deviceTypes: [require_err_msg.DeviceType.Sensor, require_err_msg.DeviceType.Thermostat],
 	methods: {},
 	status: {
 		schema: TemperatureSensorStatusSchema,
@@ -44074,7 +43356,7 @@ var updateCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Update],
+	deviceTypes: [require_err_msg.DeviceType.Update],
 	methods: { installUpdate: require_sleep.method(zod.z.void(), zod.z.void(), {
 		kind: "mutation",
 		auth: "admin"
@@ -44432,7 +43714,7 @@ var vacuumControlCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Vacuum],
+	deviceTypes: [require_err_msg.DeviceType.Vacuum],
 	methods: {
 		start: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
 			kind: "mutation",
@@ -44519,7 +43801,7 @@ var valveCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Valve],
+	deviceTypes: [require_err_msg.DeviceType.Valve],
 	methods: {
 		open: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
 			kind: "mutation",
@@ -44574,7 +43856,7 @@ var vibrationCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Sensor],
+	deviceTypes: [require_err_msg.DeviceType.Sensor],
 	methods: {},
 	status: {
 		schema: VibrationStatusSchema,
@@ -44634,7 +43916,7 @@ var waterHeaterCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.WaterHeater],
+	deviceTypes: [require_err_msg.DeviceType.WaterHeater],
 	methods: {
 		setTargetTemp: require_sleep.method(zod.z.object({
 			deviceId: zod.z.number().int().nonnegative(),
@@ -44724,7 +44006,7 @@ var weatherCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Weather],
+	deviceTypes: [require_err_msg.DeviceType.Weather],
 	methods: {},
 	status: {
 		schema: WeatherStatusSchema,
@@ -44932,7 +44214,7 @@ var zoneAnalyticsCapability = {
 	name: "zone-analytics",
 	scope: "device",
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	methods: {
 		/** Latest computed occupancy snapshot for this camera. Null when
 		*  the analytics pipeline hasn't seen a frame for this device yet
@@ -45024,7 +44306,7 @@ var zoneRulesCapability = {
 	name: "zone-rules",
 	scope: "device",
 	mode: "singleton",
-	deviceTypes: [require_sleep.DeviceType.Camera],
+	deviceTypes: [require_err_msg.DeviceType.Camera],
 	methods: {
 		/** Read the full rule list for a given stage (empty when no rules
 		*  are defined yet). */
@@ -45160,8 +44442,6 @@ function createDeviceExtensionProvider(options) {
 					slotRef: extensionSlotRef(source, slot.slot),
 					slot: slot.slot,
 					authority: listing.authority,
-					enabled: listing.enabled,
-					projects: EXTENSION_SLOTS[slot.slot].descriptor.projects ?? null,
 					activation: listing.activation,
 					value: listing.value,
 					sources: [...listing.sources],
@@ -45196,44 +44476,68 @@ function createDeviceExtensionProvider(options) {
 * through another composition, is refused at save by name (spec §2).
 *
 * The graph is built for ONE save: the CANDIDATE composition (the one being
-* validated) plus every STORED composition. The candidate ALWAYS replaces any
-* stored peer that targets the same device, regardless of where that stored
-* peer sits in `stored` — whether a save introduces or removes a cycle must
-* never depend on array order. Two DIFFERENT stored peers that (wrongly)
-* target the same device are corrupted state, not a cycle to resolve by
-* picking one silently; that is refused by name (D391).
+* validated) plus every STORED composition. The candidate replaces its own old
+* version, identified BY BLOCK ID wherever it sits in `stored` — whether a save
+* introduces or removes a cycle must never depend on array order. A DIFFERENT
+* block targeting the candidate's device is refused by name: one composition
+* per device (D663). Two different stored peers that (wrongly) target the same
+* device are corrupted state, not a cycle to resolve by picking one silently;
+* that is refused by name too (D391).
+*
+* A customization of an EXISTING device reads that device's NATIVE value for a
+* field it replaces or does not write ("Invert state" reads the `on` it
+* replaces): such a self-read is no edge, so it is never a cycle (D663).
+* Another composition reading that field reads the customizer's output.
 *
 * `findCompositionCycles` reports at least one cycle per cycle-SET (the DFS
-* marks a node `done` after its first expansion) — enough to refuse a save,
-* not to enumerate every elementary cycle through a shared node. A dotted
+* marks a node `done` after its first expansion) — not every elementary cycle
+* through a shared node, so the path it names may AVOID the candidate while
+* one through it goes unreported. What a save refuses is therefore decided per
+* strongly connected component (`findCandidateCycles`, C-1). A dotted
 * `fieldPath` is matched only as an exact string: a write to `state.value` and
 * a read of `state` would not connect (no nested field writes exist yet).
+*
+* An item leaf is its own node, `…#consumables.items[desiccant].status`
+* (`featureFieldEntries`), so two items sharing an inner path never merge. No
+* READ can name an array element (`describeStateField` never describes one),
+* so an item node is write-only: its edges to sources are what the check needs.
 */
-/** Two stored compositions both target the same device — refused by name, never silently resolved. */
+/** Two blocks' compositions target the same device — refused by name, never silently resolved. */
 var CompositionGraphError = class extends Error {};
+/** `"cap.field"` of every field a peer writes — the same spelling as `compositionFieldKey`. */
+function writtenFields(peer) {
+	return new Set(peer.composition.features.flatMap((feature) => feature.kind !== "fields" ? [] : require_composition.featureFieldEntries(feature).map(({ fieldPath }) => `${feature.cap}.${fieldPath}`)));
+}
+/** A read of the peer's OWN device is an edge only when it reads the peer's own output (rule 5, D663). */
+function readsComposedValue(peer, written, read) {
+	if (require_composition.compositionSourceKey(read.source) !== require_composition.compositionSourceKey(peer.target)) return true;
+	const field = `${read.cap}.${read.fieldPath}`;
+	return written.has(field) && peer.replaced?.has(field) !== true;
+}
 function peerEdges(peer) {
-	return peer.composition.features.flatMap((feature) => feature.kind !== "fields" ? [] : Object.entries(feature.fields).map(([path, source]) => [compositionReadKey({
+	const written = writtenFields(peer);
+	return peer.composition.features.flatMap((feature) => feature.kind !== "fields" ? [] : require_composition.featureFieldEntries(feature).map(({ fieldPath, source }) => [require_composition.compositionReadKey({
 		source: peer.target,
 		cap: feature.cap,
-		fieldPath: path
-	}), fieldReads(source).map(compositionReadKey)]));
+		fieldPath
+	}), require_composition.fieldReads(source).filter((read) => readsComposedValue(peer, written, read)).map(require_composition.compositionReadKey)]));
 }
 /**
-* Every peer that actually takes part in the graph: each stored peer minus
-* whichever one targets the same device as the candidate (the candidate
-* replaces it — this drop happens before any edge is built, so the
-* candidate's old edges never enter the map to begin with), plus the
-* candidate itself, exactly once. Throws {@link CompositionGraphError} if two
-* DIFFERENT stored peers (neither of them the candidate's own old version)
-* target the same device.
+* Every peer that actually takes part in the graph: each stored peer minus the
+* candidate's own old version (same block id — the drop happens before any
+* edge is built, so its old edges never enter the map), plus the candidate
+* itself, exactly once. Throws {@link CompositionGraphError} when a DIFFERENT
+* block targets the candidate's device, or two stored peers share a device.
 */
 function resolvedPeers(candidate, stored) {
-	const candidateKey = compositionSourceKey(candidate.target);
+	const candidateKey = require_composition.compositionSourceKey(candidate.target);
 	const survivors = /* @__PURE__ */ new Map();
 	for (const peer of stored) {
-		const key = compositionSourceKey(peer.target);
-		if (key === candidateKey) continue;
-		if (survivors.has(key)) throw new CompositionGraphError(`two stored compositions both target device \`${key}\` — refusing to build the field graph`);
+		if (peer.blockId === candidate.blockId) continue;
+		const key = require_composition.compositionSourceKey(peer.target);
+		if (key === candidateKey) throw new CompositionGraphError(`block \`${peer.blockId}\` and block \`${candidate.blockId}\` both target device \`${key}\` — one composition per device; delete or edit the existing one`);
+		const clash = survivors.get(key);
+		if (clash !== void 0) throw new CompositionGraphError(`two stored compositions (\`${clash.blockId}\`, \`${peer.blockId}\`) both target device \`${key}\` — refusing to build the field graph`);
 		survivors.set(key, peer);
 	}
 	return [...survivors.values(), candidate];
@@ -45262,172 +44566,215 @@ function findCompositionCycles(candidate, stored) {
 	for (const node of edges.keys()) visit(node, []);
 	return [...found.values()];
 }
+/** Tarjan's strongly connected components over every node of the graph (sources included). */
+function stronglyConnected(edges) {
+	const index = /* @__PURE__ */ new Map();
+	const low = /* @__PURE__ */ new Map();
+	const onStack = /* @__PURE__ */ new Set();
+	const stack = [];
+	const components = [];
+	const connect = (node) => {
+		index.set(node, index.size);
+		low.set(node, index.get(node) ?? 0);
+		stack.push(node);
+		onStack.add(node);
+		for (const next of edges.get(node) ?? []) if (!index.has(next)) {
+			connect(next);
+			low.set(node, Math.min(low.get(node) ?? 0, low.get(next) ?? 0));
+		} else if (onStack.has(next)) low.set(node, Math.min(low.get(node) ?? 0, index.get(next) ?? 0));
+		if (low.get(node) !== index.get(node)) return;
+		const component = [];
+		for (let member = stack.pop(); member !== void 0; member = stack.pop()) {
+			onStack.delete(member);
+			component.push(member);
+			if (member === node) break;
+		}
+		components.push(component);
+	};
+	for (const node of edges.keys()) if (!index.has(node)) connect(node);
+	return components;
+}
+/** The shortest walk from `start` back to itself inside `component` (one exists: the component has a cycle). */
+function cycleThrough(start, component, edges) {
+	const parent = /* @__PURE__ */ new Map();
+	const queue = [start];
+	for (let head = 0; head < queue.length; head += 1) {
+		const node = queue[head];
+		if (node === void 0) break;
+		for (const next of edges.get(node) ?? []) {
+			if (next === start) {
+				const chain = [];
+				for (let at = node; at !== void 0 && at !== start; at = parent.get(at)) chain.push(at);
+				return [
+					start,
+					...chain.reverse(),
+					start
+				];
+			}
+			if (!component.has(next) || parent.has(next)) continue;
+			parent.set(next, node);
+			queue.push(next);
+		}
+	}
+	return [start, start];
+}
+/**
+* The cycles THIS save closes, decided per strongly connected component — never
+* per reported DFS path, which names one back-edge per revisit and can report a
+* component's cycle by a path that avoids the candidate while the one through it
+* goes unreported. A component refuses when it holds a candidate node and a
+* cycle (more than one node, or a self-loop). Components without a candidate
+* node are not this save's cycles.
+*/
+function findCandidateCycles(candidate, stored) {
+	const edges = compositionEdges(candidate, stored);
+	const prefix = `${require_composition.compositionSourceKey(candidate.target)}#`;
+	return stronglyConnected(edges).flatMap((members) => {
+		const start = members.find((n) => n.startsWith(prefix));
+		if (start === void 0) return [];
+		const component = new Set(members);
+		const selfLoop = members.length === 1 && (edges.get(start) ?? []).includes(start);
+		if (members.length === 1 && !selfLoop) return [];
+		return [{
+			path: cycleThrough(start, component, edges),
+			component
+		}];
+	});
+}
 //#endregion
-//#region src/composition/evaluate-field.ts
-function describeRead(read) {
-	return `${compositionSourceKey(read.source)} ${read.cap}.${read.fieldPath}`;
+//#region src/device/schema-fields.ts
+/** Unwrap ZodNullable / ZodOptional / ZodDefault wrappers to reach the inner type.
+*  Zod v4 exposes `.unwrap()` on all three wrapper classes. */
+function unwrapSchema(schema) {
+	let s = schema;
+	while (s instanceof zod.z.ZodNullable || s instanceof zod.z.ZodOptional || s instanceof zod.z.ZodDefault) s = s.unwrap();
+	return s;
 }
-function fromReading(reading, read) {
-	if (reading.state === "unavailable") return {
-		state: "unavailable",
-		value: null,
-		reason: `${describeRead(read)}: ${reading.reason}`,
-		fatal: reading.fatal
-	};
-	return {
-		state: reading.state,
-		value: reading.value,
-		reason: reading.state === "stale" ? `${describeRead(read)}: ${reading.reason}` : null,
-		deadline: null
+function leafKind(schema) {
+	const s = unwrapSchema(schema);
+	if (s instanceof zod.z.ZodEnum) return {
+		kind: "enum",
+		enumValues: s.options
 	};
+	if (s instanceof zod.z.ZodNumber) return { kind: "number" };
+	if (s instanceof zod.z.ZodString) return { kind: "string" };
+	if (s instanceof zod.z.ZodBoolean) return { kind: "boolean" };
+	return null;
 }
-function expressionOutcome(source, read, now) {
-	const values = {};
-	const staleReasons = [];
-	let fatalUnavailable = null;
-	let nonFatalUnavailable = null;
-	for (const [name, binding] of Object.entries(source.bindings)) {
-		if (binding.kind === "literal") {
-			values[name] = binding.value;
-			continue;
-		}
-		const reading = read(binding);
-		if (reading.state === "unavailable") {
-			const outcome = {
-				state: "unavailable",
-				value: null,
-				reason: `binding \`${name}\` (${describeRead(binding)}): ${reading.reason}`,
-				fatal: reading.fatal
-			};
-			if (reading.fatal) {
-				fatalUnavailable = outcome;
-				break;
-			}
-			if (nonFatalUnavailable === null) nonFatalUnavailable = outcome;
+/** Walk a cap status schema into flat wireable leaf fields (dotted paths).
+*  Recurses into nested ZodObject (unwrapping nullable/optional/default first),
+*  so fields with null live values are still offered. Arrays / unknown shapes
+*  are skipped — never throws. */
+function enumerateSchemaFields(schema, prefix = "") {
+	const root = unwrapSchema(schema);
+	if (!(root instanceof zod.z.ZodObject)) return [];
+	const out = [];
+	const shape = root.shape;
+	for (const [key, field] of Object.entries(shape)) {
+		const path = prefix ? `${prefix}.${key}` : key;
+		const inner = unwrapSchema(field);
+		if (inner instanceof zod.z.ZodObject) {
+			out.push(...enumerateSchemaFields(inner, path));
 			continue;
 		}
-		values[name] = reading.value;
-		if (reading.state === "stale") staleReasons.push(`\`${name}\`: ${reading.reason}`);
+		const leaf = leafKind(field);
+		if (leaf) out.push({
+			path,
+			kind: leaf.kind,
+			...leaf.enumValues ? { enumValues: leaf.enumValues } : {}
+		});
 	}
-	if (fatalUnavailable !== null) return fatalUnavailable;
-	if (nonFatalUnavailable !== null) return nonFatalUnavailable;
-	const deadlines = [];
-	const result = evaluateExpressionSource(source.expr, values, now, { hooks: { noteDeadline: (at) => deadlines.push(at) } });
-	if (!result.ok) return {
-		state: "unavailable",
-		value: null,
-		reason: `the expression failed: ${result.error}`,
-		fatal: false
-	};
-	return {
-		state: staleReasons.length > 0 ? "stale" : "fresh",
-		value: result.value,
-		reason: staleReasons.length > 0 ? staleReasons.join("; ") : null,
-		deadline: deadlines.length > 0 ? Math.min(...deadlines) : null
-	};
+	return out;
 }
-function evaluateCompositionField(input) {
-	const { source } = input;
-	switch (source.kind) {
-		case "from": return fromReading(input.read(source), source);
-		case "expression": return expressionOutcome(source, input.read, input.now);
-		case "code": return {
-			state: "unavailable",
-			value: null,
-			reason: "code fields are not runnable in the composer — they arrive in slice 4",
-			fatal: true
-		};
-	}
+/** Enumerate the per-item wireable fields of an item-array cap (see
+*  `CapabilityStatusItemArray`): the item schema's leaf fields, minus the
+*  `keyField` (the key comes from the link's `itemKey`, never from a wired
+*  source), each tagged `item: true` so the authoring UI collects an
+*  `itemKey` alongside the field. Never throws. */
+function enumerateItemArrayFields(itemArray) {
+	return enumerateSchemaFields(itemArray.itemSchema).filter((f) => f.path !== itemArray.keyField).map((f) => ({
+		...f,
+		item: true
+	}));
 }
 //#endregion
-//#region src/composition/examples.ts
+//#region src/composition/state-fields.ts
 /**
-* The worked composed-device example: a ROOM. Temperature is the average of N
-* sensors, and occupancy is any motion within the last five minutes. It is the
-* slice-1 acceptance case and the template an author starts from (Phase 4
-* §4 item 4 asked for one).
+* What a capability's state field IS: kind, nullability, whether required. The
+* validator needs nullability, which `enumerateSchemaFields` does not report,
+* and that decides a field's unavailable mode (D393).
 */
-var ROOM_OCCUPANCY_WINDOW_MS = 3e5;
-var ROOM_EXAMPLE_TEMPERATURE_SOURCES = [
-	{
-		addonId: "provider-homeassistant",
-		stableId: "sensor.living_room_temperature"
-	},
-	{
-		addonId: "provider-homeassistant",
-		stableId: "sensor.sofa_temperature"
-	},
-	{
-		addonId: "provider-homeassistant",
-		stableId: "sensor.window_temperature"
+function fieldAt(schema, path) {
+	let current = schema;
+	for (const segment of path.split(".")) {
+		const container = unwrapSchema(current);
+		if (!(container instanceof zod.z.ZodObject)) return null;
+		const next = container.shape[segment];
+		if (!(next instanceof zod.z.ZodType)) return null;
+		current = next;
 	}
-];
-var ROOM_EXAMPLE_MOTION_SOURCES = [{
-	addonId: "provider-homeassistant",
-	stableId: "binary_sensor.living_room_motion"
-}, {
-	addonId: "provider-homeassistant",
-	stableId: "binary_sensor.living_room_presence"
-}];
-function from(source, cap, fieldPath) {
+	return current;
+}
+function describeStateField(schema, path) {
+	const leaf = enumerateSchemaFields(schema).find((f) => f.path === path);
+	if (leaf === void 0) return null;
+	const field = fieldAt(schema, path);
+	if (field === null) return null;
 	return {
-		kind: "from",
-		source,
-		cap,
-		fieldPath
+		path,
+		kind: leaf.kind,
+		nullable: field.safeParse(null).success,
+		required: !field.safeParse(void 0).success,
+		...leaf.enumValues === void 0 ? {} : { enumValues: leaf.enumValues }
 	};
 }
-function named(prefix, sources, cap, fieldPath) {
-	return Object.fromEntries(sources.map((s, i) => [`${prefix}${i + 1}`, from(s, cap, fieldPath)]));
+function describeTopLevelStateFields(schema) {
+	return new Map(enumerateSchemaFields(schema).filter((f) => !f.path.includes(".")).flatMap((f) => {
+		const described = describeStateField(schema, f.path);
+		return described === null ? [] : [[f.path, described]];
+	}));
 }
-function roomCompositionExample(input) {
-	const t = named("t", input.temperatureSources, "temperature-sensor", "celsius");
-	const f = named("f", input.temperatureSources, "temperature-sensor", "lastFetchedAt");
-	const d = named("d", input.motionSources, "motion", "detected");
-	const m = named("m", input.motionSources, "motion", "lastDetectedAt");
-	const windows = Object.keys(m).map((name) => `within(${name}, ${input.occupancyWindowMs})`);
-	return CompositionSchema.parse({
-		target: {
-			kind: "new",
-			type: require_sleep.DeviceType.Sensor
-		},
-		features: [{
-			kind: "fields",
-			cap: "temperature-sensor",
-			fields: {
-				celsius: {
-					kind: "expression",
-					expr: `round(avg(${Object.keys(t).join(", ")}), 1)`,
-					bindings: t
-				},
-				lastFetchedAt: {
-					kind: "expression",
-					expr: `max(${Object.keys(f).join(", ")})`,
-					bindings: f
-				}
-			}
-		}, {
-			kind: "fields",
-			cap: "binary",
-			fields: {
-				on: {
-					kind: "expression",
-					expr: `any(${[...Object.keys(d), ...windows].join(", ")})`,
-					bindings: {
-						...d,
-						...m
-					}
-				},
-				lastChangedAt: {
-					kind: "expression",
-					expr: "now",
-					bindings: {}
-				}
-			}
-		}]
+/** Top-level keys a value MUST carry: those whose schema refuses `undefined`. */
+function requiredTopLevelKeys(schema) {
+	const root = unwrapSchema(schema);
+	if (!(root instanceof zod.z.ZodObject)) return [];
+	return Object.entries(root.shape).flatMap(([key, field]) => field instanceof zod.z.ZodType && !field.safeParse(void 0).success ? [key] : []);
+}
+/**
+* The proper prefixes of `path` whose schema accepts `undefined`: a required
+* leaf under one of them is required only once something writes that parent
+* (`remaining.unit` is required only when `remaining` is present).
+*/
+function optionalAncestors(schema, path) {
+	const segments = path.split(".");
+	return segments.slice(0, -1).flatMap((_, i) => {
+		const prefix = segments.slice(0, i + 1).join(".");
+		const field = fieldAt(schema, prefix);
+		return field !== null && field.safeParse(void 0).success ? [prefix] : [];
 	});
 }
 //#endregion
+//#region src/composition/plan-result.ts
+function problem(code, path, message) {
+	return {
+		code,
+		path,
+		message
+	};
+}
+function refused(...problems) {
+	return {
+		problems,
+		fields: [],
+		features: []
+	};
+}
+/** Where a planned field sits in the composition: `features[N].fields.<path>` or `features[N].items.<key>.fields.<path>`. */
+function compositionFieldAt(field) {
+	const inner = field.item === void 0 ? "fields" : `items.${field.item.key}.fields`;
+	return `features[${field.featureIndex}].${inner}.${field.path}`;
+}
+//#endregion
 //#region src/composition/expression-kinds.ts
 var NUMBER = {
 	kind: "fixed",
@@ -45459,6 +44806,10 @@ var BUILTIN_RESULT_KINDS = Object.freeze({
 	latest: {
 		kind: "fixed",
 		result: ["number", "null"]
+	},
+	number: {
+		kind: "fixed",
+		result: ["number", "null"]
 	}
 });
 var KindInferenceError = class extends Error {};
@@ -45494,7 +44845,7 @@ function arityRange(builtin) {
 	return `${builtin.minArgs}–${builtin.maxArgs}`;
 }
 function callKinds(callee, args) {
-	const builtin = EXPRESSION_BUILTINS[callee];
+	const builtin = require_composition.EXPRESSION_BUILTINS[callee];
 	if (builtin !== void 0 && (args.length < builtin.minArgs || args.length > builtin.maxArgs)) throw new KindInferenceError(`${callee}: wrong number of arguments (${args.length}); expected ${arityRange(builtin)}`);
 	const rule = BUILTIN_RESULT_KINDS[callee];
 	if (rule === void 0) throw new KindInferenceError(`no result-kind rule for builtin '${callee}'`);
@@ -45519,7 +44870,7 @@ function kindsOf(node, bindings) {
 	}
 }
 function inferExpressionKinds(input) {
-	const compiled = compileExpressionSafe(input.expr);
+	const compiled = require_composition.compileExpressionSafe(input.expr);
 	if (!compiled.ok) return {
 		ok: false,
 		error: compiled.error
@@ -45538,129 +44889,14 @@ function inferExpressionKinds(input) {
 	}
 }
 //#endregion
-//#region src/device/schema-fields.ts
-/** Unwrap ZodNullable / ZodOptional / ZodDefault wrappers to reach the inner type.
-*  Zod v4 exposes `.unwrap()` on all three wrapper classes. */
-function unwrapSchema(schema) {
-	let s = schema;
-	while (s instanceof zod.z.ZodNullable || s instanceof zod.z.ZodOptional || s instanceof zod.z.ZodDefault) s = s.unwrap();
-	return s;
-}
-function leafKind(schema) {
-	const s = unwrapSchema(schema);
-	if (s instanceof zod.z.ZodEnum) return {
-		kind: "enum",
-		enumValues: s.options
-	};
-	if (s instanceof zod.z.ZodNumber) return { kind: "number" };
-	if (s instanceof zod.z.ZodString) return { kind: "string" };
-	if (s instanceof zod.z.ZodBoolean) return { kind: "boolean" };
-	return null;
-}
-/** Walk a cap status schema into flat wireable leaf fields (dotted paths).
-*  Recurses into nested ZodObject (unwrapping nullable/optional/default first),
-*  so fields with null live values are still offered. Arrays / unknown shapes
-*  are skipped — never throws. */
-function enumerateSchemaFields(schema, prefix = "") {
-	const root = unwrapSchema(schema);
-	if (!(root instanceof zod.z.ZodObject)) return [];
-	const out = [];
-	const shape = root.shape;
-	for (const [key, field] of Object.entries(shape)) {
-		const path = prefix ? `${prefix}.${key}` : key;
-		const inner = unwrapSchema(field);
-		if (inner instanceof zod.z.ZodObject) {
-			out.push(...enumerateSchemaFields(inner, path));
-			continue;
-		}
-		const leaf = leafKind(field);
-		if (leaf) out.push({
-			path,
-			kind: leaf.kind,
-			...leaf.enumValues ? { enumValues: leaf.enumValues } : {}
-		});
-	}
-	return out;
-}
-/** Enumerate the per-item wireable fields of an item-array cap (see
-*  `CapabilityStatusItemArray`): the item schema's leaf fields, minus the
-*  `keyField` (the key comes from the link's `itemKey`, never from a wired
-*  source), each tagged `item: true` so the authoring UI collects an
-*  `itemKey` alongside the field. Never throws. */
-function enumerateItemArrayFields(itemArray) {
-	return enumerateSchemaFields(itemArray.itemSchema).filter((f) => f.path !== itemArray.keyField).map((f) => ({
-		...f,
-		item: true
-	}));
-}
-//#endregion
-//#region src/composition/state-fields.ts
+//#region src/composition/field-kinds.ts
 /**
-* What a capability's state field IS: kind, nullability, whether required. The
-* validator needs nullability, which `enumerateSchemaFields` does not report,
-* and that decides a field's unavailable mode (D393).
+* The kind half of planning a composition field (D659): which kinds a source
+* can produce, whether they fit a target field, and the field's role.
+* Shared by the top-level planner (`validate-composition.ts`) and the item
+* planner (`composition-items.ts`). Internal to the composition module — NOT
+* in the barrel: these are planner internals, not a published contract.
 */
-function fieldAt(schema, path) {
-	let current = schema;
-	for (const segment of path.split(".")) {
-		const container = unwrapSchema(current);
-		if (!(container instanceof zod.z.ZodObject)) return null;
-		const next = container.shape[segment];
-		if (!(next instanceof zod.z.ZodType)) return null;
-		current = next;
-	}
-	return current;
-}
-function describeStateField(schema, path) {
-	const leaf = enumerateSchemaFields(schema).find((f) => f.path === path);
-	if (leaf === void 0) return null;
-	const field = fieldAt(schema, path);
-	if (field === null) return null;
-	return {
-		path,
-		kind: leaf.kind,
-		nullable: field.safeParse(null).success,
-		required: !field.safeParse(void 0).success,
-		...leaf.enumValues === void 0 ? {} : { enumValues: leaf.enumValues }
-	};
-}
-function describeTopLevelStateFields(schema) {
-	return new Map(enumerateSchemaFields(schema).filter((f) => !f.path.includes(".")).flatMap((f) => {
-		const described = describeStateField(schema, f.path);
-		return described === null ? [] : [[f.path, described]];
-	}));
-}
-/** Top-level keys a value MUST carry: those whose schema refuses `undefined`. */
-function requiredTopLevelKeys(schema) {
-	const root = unwrapSchema(schema);
-	if (!(root instanceof zod.z.ZodObject)) return [];
-	return Object.entries(root.shape).flatMap(([key, field]) => field instanceof zod.z.ZodType && !field.safeParse(void 0).success ? [key] : []);
-}
-//#endregion
-//#region src/composition/validate-composition.ts
-function buildCapabilityLookup(defs) {
-	const byName = new Map(defs.map((d) => [d.name, d]));
-	return (capName) => byName.get(capName) ?? null;
-}
-/** Caps every `BaseDevice` registers on itself; a second registration throws. */
-var BASE_DEVICE_CAPS = new Set(["device-status", "feature-probe"]);
-var PENDING_SELF = {
-	addonId: COMPOSER_ADDON_ID,
-	stableId: `${COMPOSED_DEVICE_STABLE_ID_PREFIX}(unsaved)`
-};
-function problem(code, path, message) {
-	return {
-		code,
-		path,
-		message
-	};
-}
-function refused(...problems) {
-	return {
-		problems,
-		fields: []
-	};
-}
 function readKinds(read, lookupCap) {
 	const def = lookupCap(read.cap);
 	const schema = def?.runtimeState ?? def?.status?.schema;
@@ -45735,7 +44971,7 @@ function compatibility(cap, target, kinds, at) {
 */
 function literalStringValue(source) {
 	if (source.kind !== "expression") return null;
-	const compiled = compileExpressionSafe(source.expr);
+	const compiled = require_composition.compileExpressionSafe(source.expr);
 	if (!compiled.ok) return null;
 	const ast = compiled.parsed.ast;
 	return ast.kind === "literal" && typeof ast.value === "string" ? ast.value : null;
@@ -45755,78 +44991,604 @@ function enumLiteralProblem(cap, target, source, at) {
 }
 function roleOf(source) {
 	if (source.kind !== "expression") return "derived";
-	if (fieldReads(source).length > 0) return "derived";
-	const compiled = compileExpressionSafe(source.expr);
+	if (require_composition.fieldReads(source).length > 0) return "derived";
+	const compiled = require_composition.compileExpressionSafe(source.expr);
 	return compiled.ok && compiled.parsed.identifiers.has("now") ? "clock" : "constant";
 }
-function planFeature(feature, featureIndex, target, lookupCap) {
-	const at = `features[${featureIndex}]`;
+/**
+* How a planned field says "unavailable", per feature mode and AFTER `roleOf`
+* (D393, D663 rulings S1 + S1b). The composer cannot take a device it does not
+* own offline, and D393 forbids a stale number, so on an existing target a
+* field that READS a source never gets `offline`.
+*/
+function unavailableFor(tf, role, mode, cap, at) {
+	if (mode === "new" || role !== "derived") return {
+		ok: true,
+		unavailable: tf.nullable ? "null" : "offline"
+	};
+	if (mode === "replace") return {
+		ok: true,
+		unavailable: "release"
+	};
+	if (tf.nullable) return {
+		ok: true,
+		unavailable: "null"
+	};
+	if (tf.enumValues?.includes("unknown") === true) return {
+		ok: true,
+		unavailable: "unknown"
+	};
+	return {
+		ok: false,
+		problem: problem("not-replaceable", at, `\`${cap}.${tf.path}\` reads a source but can say neither null nor 'unknown', and an ADDED capability has no native reading to fall back to (D393, D663)`)
+	};
+}
+//#endregion
+//#region src/composition/composition-items.ts
+/** Item fields the composer writes itself, with the value it writes. */
+var COMPOSED_ITEM_FIXED_FIELDS = { resettable: false };
+function reservedItemFields(itemArray) {
+	return new Set([
+		itemArray.keyField,
+		...itemArray.labelField === void 0 ? [] : [itemArray.labelField],
+		...Object.keys(COMPOSED_ITEM_FIXED_FIELDS)
+	]);
+}
+/** A required leaf under an optional parent is required only once something writes that parent. */
+function leafRequired(itemArray, path, written) {
+	const described = describeStateField(itemArray.itemSchema, path);
+	if (described === null || !described.required) return false;
+	return optionalAncestors(itemArray.itemSchema, path).every((parent) => written.some((w) => w.startsWith(`${parent}.`)));
+}
+function missingLeaves({ capName, itemArray, reserved }, item, at) {
+	const written = Object.keys(item.fields);
+	return enumerateSchemaFields(itemArray.itemSchema).flatMap((leaf) => {
+		if (reserved.has(leaf.path) || leaf.path in item.fields) return [];
+		if (!leafRequired(itemArray, leaf.path, written)) return [];
+		const described = describeStateField(itemArray.itemSchema, leaf.path);
+		if (described === null || described.nullable) return [];
+		return [problem("missing-field", `${at}.fields.${leaf.path}`, `\`${capName}.${itemArray.path}[].${leaf.path}\` is required and has no source`)];
+	});
+}
+function planItemField(ctx, leaf) {
+	const { capName, itemArray, featureIndex, lookupCap } = ctx;
+	const { key, label, path, source } = leaf;
+	const at = `features[${featureIndex}].items.${key}.fields.${path}`;
+	if (ctx.reserved.has(path)) return refused(problem("item-field-reserved", at, `\`${capName}.${itemArray.path}[].${path}\` is set by the composer itself — it takes no source`));
+	const tf = describeStateField(itemArray.itemSchema, path);
+	if (tf === null) return refused(problem("unknown-field", at, `a \`${capName}\` item has no field \`${path}\``));
+	const kinds = sourceKinds(source, lookupCap);
+	if (!kinds.ok) return refused(problem(kinds.code, at, kinds.message));
+	const role = roleOf(source);
+	const unavailable = unavailableFor(tf, role, ctx.mode, capName, at);
+	if (!unavailable.ok) return refused(unavailable.problem);
+	const plan = {
+		cap: capName,
+		path,
+		item: {
+			arrayPath: itemArray.path,
+			key,
+			label
+		},
+		featureIndex,
+		kind: tf.kind,
+		nullable: tf.nullable,
+		required: tf.required,
+		unavailable: unavailable.unavailable,
+		role,
+		source,
+		reads: [...require_composition.fieldReads(source)]
+	};
+	const enumProblem = enumLiteralProblem(capName, tf, source, at);
+	return {
+		problems: [...compatibility(capName, tf, kinds.kinds, at), ...enumProblem === null ? [] : [enumProblem]],
+		fields: [plan],
+		features: []
+	};
+}
+function planItems(def, feature, featureIndex, lookupCap, mode = "new") {
+	const at = `features[${featureIndex}].items`;
+	const itemArray = def.status?.itemArray;
+	if (itemArray === void 0) return refused(problem("not-item-array", at, `\`${def.name}\` has no item array — it takes no \`items\``));
+	if (itemArray.path !== "items") return refused(problem("not-item-array", at, `\`${def.name}\`'s item array is at \`${itemArray.path}\`, not \`${require_composition.COMPOSITION_ITEM_ARRAY_PATH}\` — not composable yet`));
+	const ctx = {
+		capName: def.name,
+		itemArray,
+		reserved: reservedItemFields(itemArray),
+		featureIndex,
+		lookupCap,
+		mode
+	};
+	const results = Object.entries(feature.items ?? {}).flatMap(([key, item]) => [{
+		problems: missingLeaves(ctx, item, `${at}.${key}`),
+		fields: [],
+		features: []
+	}, ...Object.entries(item.fields).map(([path, source]) => planItemField(ctx, {
+		key,
+		label: item.label,
+		path,
+		source
+	}))]);
+	return {
+		problems: results.flatMap((r) => r.problems),
+		fields: results.flatMap((r) => r.fields),
+		features: []
+	};
+}
+//#endregion
+//#region src/composition/evaluate-field.ts
+function describeRead(read) {
+	return `${require_composition.compositionSourceKey(read.source)} ${read.cap}.${read.fieldPath}`;
+}
+function isConfirmed(reading) {
+	return reading.fatal || reading.confirmed === true;
+}
+function fromReading(reading, read) {
+	if (reading.state === "unavailable") return {
+		state: "unavailable",
+		value: null,
+		reason: `${describeRead(read)}: ${reading.reason}`,
+		fatal: reading.fatal,
+		confirmed: isConfirmed(reading)
+	};
+	return {
+		state: reading.state,
+		value: reading.value,
+		reason: reading.state === "stale" ? `${describeRead(read)}: ${reading.reason}` : null,
+		deadline: null
+	};
+}
+function expressionOutcome(source, read, now) {
+	const values = {};
+	const staleReasons = [];
+	let fatalUnavailable = null;
+	let nonFatalUnavailable = null;
+	for (const [name, binding] of Object.entries(source.bindings)) {
+		if (binding.kind === "literal") {
+			values[name] = binding.value;
+			continue;
+		}
+		const reading = read(binding);
+		if (reading.state === "unavailable") {
+			const outcome = {
+				state: "unavailable",
+				value: null,
+				reason: `binding \`${name}\` (${describeRead(binding)}): ${reading.reason}`,
+				fatal: reading.fatal,
+				confirmed: isConfirmed(reading)
+			};
+			if (reading.fatal) {
+				fatalUnavailable = outcome;
+				break;
+			}
+			if (nonFatalUnavailable === null || outcome.confirmed && !nonFatalUnavailable.confirmed) nonFatalUnavailable = outcome;
+			continue;
+		}
+		values[name] = reading.value;
+		if (reading.state === "stale") staleReasons.push(`\`${name}\`: ${reading.reason}`);
+	}
+	if (fatalUnavailable !== null) return fatalUnavailable;
+	if (nonFatalUnavailable !== null) return nonFatalUnavailable;
+	const deadlines = [];
+	const result = require_composition.evaluateExpressionSource(source.expr, values, now, { hooks: { noteDeadline: (at) => deadlines.push(at) } });
+	if (!result.ok) return {
+		state: "unavailable",
+		value: null,
+		reason: `the expression failed: ${result.error}`,
+		fatal: false,
+		confirmed: true
+	};
+	return {
+		state: staleReasons.length > 0 ? "stale" : "fresh",
+		value: result.value,
+		reason: staleReasons.length > 0 ? staleReasons.join("; ") : null,
+		deadline: deadlines.length > 0 ? Math.min(...deadlines) : null
+	};
+}
+function evaluateCompositionField(input) {
+	const { source } = input;
+	switch (source.kind) {
+		case "from": return fromReading(input.read(source), source);
+		case "expression": return expressionOutcome(source, input.read, input.now);
+		case "code": return {
+			state: "unavailable",
+			value: null,
+			reason: "code fields are not runnable in the composer — they arrive in slice 4",
+			fatal: true,
+			confirmed: true
+		};
+	}
+}
+//#endregion
+//#region src/composition/examples.ts
+/**
+* The worked composed-device example: a ROOM. Temperature is the average of N
+* sensors, and occupancy is any motion within the last five minutes. It is the
+* slice-1 acceptance case and the template an author starts from (Phase 4
+* §4 item 4 asked for one).
+*/
+var ROOM_OCCUPANCY_WINDOW_MS = 3e5;
+var ROOM_EXAMPLE_TEMPERATURE_SOURCES = [
+	{
+		addonId: "provider-homeassistant",
+		stableId: "sensor.living_room_temperature"
+	},
+	{
+		addonId: "provider-homeassistant",
+		stableId: "sensor.sofa_temperature"
+	},
+	{
+		addonId: "provider-homeassistant",
+		stableId: "sensor.window_temperature"
+	}
+];
+var ROOM_EXAMPLE_MOTION_SOURCES = [{
+	addonId: "provider-homeassistant",
+	stableId: "binary_sensor.living_room_motion"
+}, {
+	addonId: "provider-homeassistant",
+	stableId: "binary_sensor.living_room_presence"
+}];
+function from(source, cap, fieldPath) {
+	return {
+		kind: "from",
+		source,
+		cap,
+		fieldPath
+	};
+}
+function named(prefix, sources, cap, fieldPath) {
+	return Object.fromEntries(sources.map((s, i) => [`${prefix}${i + 1}`, from(s, cap, fieldPath)]));
+}
+function roomCompositionExample(input) {
+	const t = named("t", input.temperatureSources, "temperature-sensor", "celsius");
+	const f = named("f", input.temperatureSources, "temperature-sensor", "lastFetchedAt");
+	const d = named("d", input.motionSources, "motion", "detected");
+	const m = named("m", input.motionSources, "motion", "lastDetectedAt");
+	const windows = Object.keys(m).map((name) => `within(${name}, ${input.occupancyWindowMs})`);
+	return require_composition.CompositionSchema.parse({
+		target: {
+			kind: "new",
+			type: require_err_msg.DeviceType.Sensor
+		},
+		features: [{
+			kind: "fields",
+			cap: "temperature-sensor",
+			fields: {
+				celsius: {
+					kind: "expression",
+					expr: `round(avg(${Object.keys(t).join(", ")}), 1)`,
+					bindings: t
+				},
+				lastFetchedAt: {
+					kind: "expression",
+					expr: `max(${Object.keys(f).join(", ")})`,
+					bindings: f
+				}
+			}
+		}, {
+			kind: "fields",
+			cap: "binary",
+			fields: {
+				on: {
+					kind: "expression",
+					expr: `any(${[...Object.keys(d), ...windows].join(", ")})`,
+					bindings: {
+						...d,
+						...m
+					}
+				},
+				lastChangedAt: {
+					kind: "expression",
+					expr: "now",
+					bindings: {}
+				}
+			}
+		}]
+	});
+}
+/**
+* The slice-2 worked customization (D663): the PetKit "Fresh Element Infinity"
+* feeder as Home Assistant imports it — ONE `Container` with a child per entity
+* (`<container stableId>-<entityId>`), and NO native battery (its
+* `binary_sensor.*_battery` is `battery_charging`, which `isBatteryEntity` does
+* not match). The customization ADDS `consumables` (the desiccant) and
+* `battery`. It is the Task 14 acceptance case and the template slice 5's
+* presets start from.
+*
+* Every read names what the HA provider REALLY registers (read 2026-09-28):
+* the desiccant sensor has a unit (`d`) but no device_class, so HA hosts it as
+* an `enum-sensor` whose `value` is the raw STRING state — `number(d)` reads it,
+* and anything that is not a number is `null`, never 0 (D393). The battery
+* status sensor is an `enum-sensor` too (`unavailable` keeps its cold `''`, so
+* `percentage` is `null`). `charging` maps `battery_charging` off to
+* `'unknown'`, never `'none'`: off does not prove "on battery alone" (the
+* operator confirms the real semantics live).
+*/
+var FEEDER_EXAMPLE_HA_DEVICE_ID = "8dec3b512fda40cbb8cd121c7a99f890";
+var FEEDER_EXAMPLE_ADDON_ID = "provider-homeassistant";
+/** The HA container's stableId (`ha-discovery.ts`) and a child's (`<container>-<entityId>`). */
+function feederExampleSources(brokerId) {
+	const feeder = {
+		addonId: FEEDER_EXAMPLE_ADDON_ID,
+		stableId: `ha:${brokerId}:dev:${FEEDER_EXAMPLE_HA_DEVICE_ID}`
+	};
+	const child = (entityId) => ({
+		addonId: FEEDER_EXAMPLE_ADDON_ID,
+		stableId: `${feeder.stableId}-${entityId}`
+	});
+	return {
+		feeder,
+		desiccantDays: child("sensor.freshelement_3_desiccant_days_remaining"),
+		batteryStatus: child("sensor.freshelement_3_battery_status"),
+		batteryCharging: child("binary_sensor.freshelement_3_battery")
+	};
+}
+function feederCustomizationExample(sources) {
+	const days = { d: from(sources.desiccantDays, "enum-sensor", "value") };
+	return require_composition.CompositionSchema.parse({
+		target: {
+			kind: "existing",
+			device: sources.feeder
+		},
+		features: [{
+			kind: "fields",
+			cap: "consumables",
+			fields: {
+				lastChangedAt: {
+					kind: "expression",
+					expr: "now",
+					bindings: {}
+				},
+				lastFetchedAt: {
+					kind: "expression",
+					expr: "now",
+					bindings: {}
+				}
+			},
+			items: { desiccant: {
+				label: "Desiccant",
+				fields: {
+					"remaining.value": {
+						kind: "expression",
+						expr: "number(d)",
+						bindings: days
+					},
+					"remaining.unit": {
+						kind: "expression",
+						expr: "\"days\"",
+						bindings: {}
+					},
+					status: {
+						kind: "expression",
+						expr: "number(d) == null ? null : (number(d) <= 0 ? \"replace\" : \"ok\")",
+						bindings: days
+					}
+				}
+			} }
+		}, {
+			kind: "fields",
+			cap: "battery",
+			fields: {
+				percentage: {
+					kind: "expression",
+					expr: "s == \"low\" ? 15 : (s == \"normal\" ? 100 : null)",
+					bindings: { s: from(sources.batteryStatus, "enum-sensor", "value") }
+				},
+				binary: {
+					kind: "expression",
+					expr: "true",
+					bindings: {}
+				},
+				charging: {
+					kind: "expression",
+					expr: "c ? \"dc\" : \"unknown\"",
+					bindings: { c: from(sources.batteryCharging, "binary", "on") }
+				},
+				sleeping: {
+					kind: "expression",
+					expr: "false",
+					bindings: {}
+				},
+				lastUpdated: {
+					kind: "expression",
+					expr: "now",
+					bindings: {}
+				}
+			}
+		}]
+	});
+}
+//#endregion
+//#region src/composition/validate-composition.ts
+function buildCapabilityLookup(defs) {
+	const byName = new Map(defs.map((d) => [d.name, d]));
+	return (capName) => byName.get(capName) ?? null;
+}
+/** Caps every `BaseDevice` registers on itself; a second registration throws. */
+var BASE_DEVICE_CAPS = new Set(["device-status", "feature-probe"]);
+var PENDING_SELF = {
+	addonId: require_composition.COMPOSER_ADDON_ID,
+	stableId: `${require_composition.COMPOSED_DEVICE_STABLE_ID_PREFIX}(unsaved)`
+};
+/** The candidate's block id before its first save. Stored block ids are `randomUUID()`, so none can carry it. */
+var PENDING_BLOCK_ID = "(unsaved)";
+function composableCap(feature, at, lookupCap) {
 	const def = lookupCap(feature.cap);
-	if (def === null) return refused(problem("unknown-capability", `${at}.cap`, `no capability is named \`${feature.cap}\``));
-	if (BASE_DEVICE_CAPS.has(def.name)) return refused(problem("not-composable", `${at}.cap`, `\`${def.name}\` is registered by every device itself — it cannot be composed`));
+	if (def === null) return problem("unknown-capability", `${at}.cap`, `no capability is named \`${feature.cap}\``);
+	if (BASE_DEVICE_CAPS.has(def.name)) return problem("not-composable", `${at}.cap`, `\`${def.name}\` is registered by every device itself — it cannot be composed`);
 	const state = def.runtimeState;
-	if (def.scope !== "device" || state === void 0) return refused(problem("not-composable", `${at}.cap`, `\`${def.name}\` has no per-device state to compose`));
-	const capProblems = [];
-	if (def.deviceTypes !== void 0 && !def.deviceTypes.includes(target.type)) capProblems.push(problem("wrong-device-type", `${at}.cap`, `\`${def.name}\` is not offered on a \`${target.type}\` device (it allows ${def.deviceTypes.join(", ")})`));
-	const served = Object.entries(def.methods).filter(([, m]) => m.systemOnly !== true).map(([name]) => `\`${name}\``);
-	if (served.length > 0) capProblems.push(problem("has-commands", `${at}.cap`, `\`${def.name}\` has ${served.join(", ")}, which a composed device cannot serve until commands arrive (slice 3)`));
+	if (def.scope !== "device" || state === void 0) return problem("not-composable", `${at}.cap`, `\`${def.name}\` has no per-device state to compose`);
+	return {
+		def,
+		state,
+		fields: describeTopLevelStateFields(state)
+	};
+}
+/**
+* A capability BUILT by the composition (a new device, or one ADDED to an
+* existing device) must fit the device type, serve no command, and have every
+* required field. A REPLACE needs none of it: the cap is bound (a fact), the
+* native keeps serving its methods, and only the named fields are owned (D663).
+*/
+function builtCapProblems({ def, state, fields: targetFields }, feature, at, deviceType) {
+	const problems = [];
+	if (def.deviceTypes !== void 0 && !def.deviceTypes.includes(deviceType)) problems.push(problem("wrong-device-type", `${at}.cap`, `\`${def.name}\` is not offered on a \`${deviceType}\` device (it allows ${def.deviceTypes.join(", ")})`));
+	const served = Object.entries(def.methods).filter(([name, m]) => m.systemOnly !== true && def.composedMethods?.[name] === void 0).map(([name]) => `\`${name}\``);
+	if (served.length > 0) problems.push(problem("has-commands", `${at}.cap`, `\`${def.name}\` has ${served.join(", ")}, which a composed device cannot serve until commands arrive (slice 3)`));
+	const itemArrayPath = feature.items === void 0 ? null : def.status?.itemArray?.path ?? null;
+	for (const key of requiredTopLevelKeys(state)) {
+		if (key === itemArrayPath) continue;
+		if (!targetFields.has(key)) problems.push(problem("not-composable", `${at}.fields`, `\`${def.name}.${key}\` is not a scalar — nested fields arrive in a later slice`));
+		else if (!(key in feature.fields)) problems.push(problem("missing-field", `${at}.fields.${key}`, `\`${def.name}.${key}\` is required and has no source`));
+	}
+	return problems;
+}
+function planTopLevelField({ def, fields }, field, mode, lookupCap) {
+	const { featureIndex, path, source } = field;
+	const fieldAt = `features[${featureIndex}].fields.${path}`;
+	if (path.includes(".")) return refused(problem("nested-field", fieldAt, `\`${path}\` is nested — nested fields arrive in a later slice`));
+	const tf = fields.get(path);
+	if (tf === void 0) return refused(problem("unknown-field", fieldAt, `\`${def.name}\` has no field \`${path}\``));
+	const kinds = sourceKinds(source, lookupCap);
+	if (!kinds.ok) return refused(problem(kinds.code, fieldAt, kinds.message));
+	const role = roleOf(source);
+	const unavailable = unavailableFor(tf, role, mode, def.name, fieldAt);
+	if (!unavailable.ok) return refused(unavailable.problem);
+	const plan = {
+		cap: def.name,
+		path,
+		featureIndex,
+		kind: tf.kind,
+		nullable: tf.nullable,
+		required: tf.required,
+		unavailable: unavailable.unavailable,
+		role,
+		source,
+		reads: [...require_composition.fieldReads(source)]
+	};
+	const enumProblem = enumLiteralProblem(def.name, tf, source, fieldAt);
+	return {
+		problems: [...compatibility(def.name, tf, kinds.kinds, fieldAt), ...enumProblem === null ? [] : [enumProblem]],
+		fields: [plan],
+		features: []
+	};
+}
+function planFeature(feature, featureIndex, target, lookupCap) {
+	const at = `features[${featureIndex}]`;
+	const cap = composableCap(feature, at, lookupCap);
+	if ("code" in cap) return refused(cap);
+	const capProblems = target.mode === "replace" ? [] : [...builtCapProblems(cap, feature, at, target.deviceType)];
 	if (feature.commands !== void 0 && Object.keys(feature.commands).length > 0) capProblems.push(problem("reserved-variant", `${at}.commands`, "commands (`forward`) arrive in slice 3"));
-	const targetFields = describeTopLevelStateFields(state);
-	for (const key of requiredTopLevelKeys(state)) if (!targetFields.has(key)) capProblems.push(problem("not-composable", `${at}.fields`, `\`${def.name}.${key}\` is not a scalar — nested fields arrive in a later slice`));
-	else if (!(key in feature.fields)) capProblems.push(problem("missing-field", `${at}.fields.${key}`, `\`${def.name}.${key}\` is required and has no source`));
-	const perField = Object.entries(feature.fields).map(([path, source]) => {
-		const fieldAt = `${at}.fields.${path}`;
-		if (path.includes(".")) return refused(problem("nested-field", fieldAt, `\`${path}\` is nested — nested fields arrive in a later slice`));
-		const tf = targetFields.get(path);
-		if (tf === void 0) return refused(problem("unknown-field", fieldAt, `\`${def.name}\` has no field \`${path}\``));
-		const kinds = sourceKinds(source, lookupCap);
-		if (!kinds.ok) return refused(problem(kinds.code, fieldAt, kinds.message));
-		const plan = {
-			cap: def.name,
-			path,
+	const perField = Object.entries(feature.fields).map(([path, source]) => planTopLevelField(cap, {
+		featureIndex,
+		path,
+		source
+	}, target.mode, lookupCap));
+	const items = feature.items === void 0 ? [] : [planItems(cap.def, feature, featureIndex, lookupCap, target.mode)];
+	const all = [...perField, ...items];
+	return {
+		problems: [...capProblems, ...all.flatMap((r) => r.problems)],
+		fields: all.flatMap((r) => r.fields),
+		features: [{
 			featureIndex,
-			kind: tf.kind,
-			nullable: tf.nullable,
-			required: tf.required,
-			unavailable: tf.nullable ? "null" : "offline",
-			role: roleOf(source),
-			source,
-			reads: [...fieldReads(source)]
-		};
-		const enumProblem = enumLiteralProblem(def.name, tf, source, fieldAt);
-		return {
-			problems: [...compatibility(def.name, tf, kinds.kinds, fieldAt), ...enumProblem === null ? [] : [enumProblem]],
-			fields: [plan]
-		};
-	});
+			cap: cap.def.name,
+			mode: target.mode
+		}]
+	};
+}
+/** A cap the device serves itself; one the composer grafted (an earlier ADD) is not native. */
+function isNativeCap(target, cap) {
+	const owner = target.nativeCaps.get(cap);
+	return owner !== void 0 && owner !== "composer";
+}
+/** The target read, or the refusal that replaces the whole plan when it could not be (D391). */
+function planTargetOf(composition, target) {
+	if (composition.target.kind === "new") return {
+		kind: "new",
+		type: composition.target.type
+	};
+	const key = require_composition.compositionSourceKey(composition.target.device);
+	if (target === void 0) return problem("target-unreadable", "target", `target device \`${key}\` was not read — the save is refused rather than stored unchecked`);
+	if (target.kind === "absent") return problem("target-missing", "target", `target device \`${key}\` does not exist`);
+	if (target.kind === "unreadable") return problem("target-unreadable", "target", `could not read target device \`${key}\` (${target.error}) — the save is refused rather than stored unchecked`);
 	return {
-		problems: [...capProblems, ...perField.flatMap((r) => r.problems)],
-		fields: perField.flatMap((r) => r.fields)
+		kind: "existing",
+		found: target
 	};
 }
-function planComposition(composition, lookupCap) {
-	const target = composition.target;
-	if (target.kind === "existing") return refused(problem("reserved-variant", "target", "an EXISTING device as the target arrives in slice 2 — this release composes new devices only"));
+function featureTargetOf(target, cap) {
+	if (target.kind === "new") return {
+		mode: "new",
+		deviceType: target.type
+	};
+	return {
+		mode: isNativeCap(target.found, cap) ? "replace" : "add",
+		deviceType: target.found.type
+	};
+}
+/**
+* The static plan. `target` describes an EXISTING target device (one read);
+* it is ignored for a new one. On an existing target each feature REPLACES a
+* cap the device has natively, else ADDS it (D663).
+*/
+function planComposition(composition, lookupCap, target) {
+	const planTarget = planTargetOf(composition, target);
+	if ("code" in planTarget) return refused(planTarget);
 	const results = composition.features.map((feature, index) => {
-		const at = `features[${index}]`;
-		if (feature.kind === "passthrough") return refused(problem("reserved-variant", at, `whole-capability passthrough of \`${feature.cap}\` arrives in slice 3`));
-		return planFeature(feature, index, target, lookupCap);
+		if (feature.kind === "passthrough") return refused(problem("reserved-variant", `features[${index}]`, `whole-capability passthrough of \`${feature.cap}\` arrives in slice 3`));
+		return planFeature(feature, index, featureTargetOf(planTarget, feature.cap), lookupCap);
 	});
 	return {
 		problems: results.flatMap((r) => r.problems),
-		fields: results.flatMap((r) => r.fields)
+		fields: results.flatMap((r) => r.fields),
+		features: results.flatMap((r) => r.features)
 	};
 }
 function compositionSourceRefs(composition) {
-	const refs = composition.features.flatMap((f) => f.kind === "fields" ? Object.values(f.fields).flatMap(fieldReads).map((r) => r.source) : []);
-	return [...new Map(refs.map((r) => [compositionSourceKey(r), r])).values()];
+	const refs = composition.features.flatMap((f) => f.kind === "fields" ? require_composition.featureSources(f).flatMap(require_composition.fieldReads).map((r) => r.source) : []);
+	return [...new Map(refs.map((r) => [require_composition.compositionSourceKey(r), r])).values()];
 }
-function sourceProblems(fields, ctx) {
-	const selfKey = ctx.self === null ? null : compositionSourceKey(ctx.self);
+/**
+* The candidate's device: the existing target itself, else `self`, else a
+* placeholder that cannot collide with a stored target. An existing target is
+* known even on create, so a second customization of it is refused on create too.
+*/
+function candidateSelf(composition, ctx, plan) {
+	return {
+		ref: composition.target.kind === "existing" ? composition.target.device : ctx.self ?? PENDING_SELF,
+		native: composition.target.kind === "existing" && ctx.target?.kind === "found" ? ctx.target : null,
+		replaced: replacedFieldKeys(plan)
+	};
+}
+/**
+* `compositionFieldKey` of every field a REPLACE feature of `plan` owns — the
+* candidate's own, and a stored peer's `CompositionPeer.replaced` (D663): one
+* derivation, so the graph reads both the same way.
+*/
+function replacedFieldKeys(plan) {
+	const replacing = new Set(plan.features.filter((f) => f.mode === "replace").map((f) => f.featureIndex));
+	return new Set(plan.fields.filter((f) => replacing.has(f.featureIndex)).map(compositionFieldKey));
+}
+/**
+* A read of the candidate's own device. Its own composed output (a new device's
+* field, an ADDED field) is the slice-1 own-field rule; on an existing target
+* every other field — replaced, or not composed at all — is the NATIVE value,
+* valid when the device serves that cap natively (D663, rule 5).
+*/
+function selfReadProblems(read, at, fields, self) {
+	const readKey = `${read.cap}.${read.fieldPath}`;
+	if (fields.some((f) => compositionFieldKey(f) === readKey && !self.replaced.has(readKey))) return [];
+	if (self.native === null) return [problem("source-field-unknown", at, `this device has no composed field \`${read.cap}.${read.fieldPath}\``)];
+	if (isNativeCap(self.native, read.cap)) return [];
+	return [problem("source-capability-missing", at, `the target device (device ${self.native.deviceId}) has no native \`${read.cap}\``)];
+}
+function sourceProblems(fields, ctx, self) {
+	const selfKey = require_composition.compositionSourceKey(self.ref);
 	return fields.flatMap((field) => field.reads.flatMap((read) => {
-		const at = `features[${field.featureIndex}].fields.${field.path}`;
-		const key = compositionSourceKey(read.source);
-		if (key === selfKey) return fields.some((f) => f.cap === read.cap && f.path === read.fieldPath) ? [] : [problem("source-field-unknown", at, `this device has no composed field \`${read.cap}.${read.fieldPath}\``)];
+		const at = compositionFieldAt(field);
+		const key = require_composition.compositionSourceKey(read.source);
+		if (key === selfKey) return selfReadProblems(read, at, fields, self);
 		const desc = ctx.sources.get(key);
 		if (desc === void 0 || desc.kind === "unreadable") return [problem("source-unreadable", at, `could not read source \`${key}\` (${desc === void 0 ? "it was not read" : desc.error}) — the save is refused rather than stored unchecked`)];
 		if (desc.kind === "absent") return [problem("source-missing", at, `source \`${key}\` does not exist`)];
@@ -45839,8 +45601,9 @@ function sourceProblems(fields, ctx) {
 * `<addonId>/<stableId>#<cap>.<fieldPath>`. When a node belongs to the
 * CANDIDATE itself (this composition being saved), pull its `cap`/`fieldPath`
 * back out so the refusal can point at that exact field, matching the
-* documented `features[N].fields.<path>` convention — slice 1 has no nested
-* field writes, so splitting `rest` on the FIRST `.` is exact.
+* documented `features[N].fields.<path>` convention. A cap name has no `.`,
+* so splitting `rest` on the FIRST `.` is exact; an item leaf's remainder
+* (`items[desiccant].status`) is matched through `compositionFieldKey`.
 */
 function candidateFieldOfNode(nodeKey, candidateKey) {
 	const prefix = `${candidateKey}#`;
@@ -45860,44 +45623,65 @@ function cyclePath(nodePath, candidateKey, fields) {
 	for (const nodeKey of nodePath) {
 		const hit = candidateFieldOfNode(nodeKey, candidateKey);
 		if (hit === null) continue;
-		const field = fields.find((f) => f.cap === hit.cap && f.path === hit.fieldPath);
-		if (field !== void 0) return `features[${field.featureIndex}].fields.${field.path}`;
+		const hitKey = `${hit.cap}.${hit.fieldPath}`;
+		const field = fields.find((f) => compositionFieldKey(f) === hitKey);
+		if (field !== void 0) return compositionFieldAt(field);
 	}
 	return "features";
 }
+/** The first unread device any of `nodes` belongs to; null when none does. */
+function unreadDeviceOf(nodes, unread) {
+	for (const [key, error] of unread) if (nodes.some((node) => node.startsWith(`${key}#`))) return {
+		key,
+		error
+	};
+	return null;
+}
 /**
-* Cycle check runs against the CANDIDATE (this composition, targeting `self`
-* when it already exists, else a placeholder that cannot collide with a
-* stored target) plus every OTHER stored composition. Two stored peers that
-* (wrongly) share a target are corrupted state — `findCompositionCycles`
-* throws `CompositionGraphError` rather than silently picking one, and this
-* is refused BY NAME (D391) instead of escaping as an uncaught throw.
+* Cycle check runs against the CANDIDATE (this composition, as block
+* `ctx.blockId`, writing `self.ref`) plus every OTHER stored composition,
+* decided per strongly connected component (`findCandidateCycles`): a cyclic
+* component holding a candidate node refuses, with one representative cycle
+* through it; one without is not this save's cycle. A
+* stored composition of the same block is its old version; another block on
+* the same device, or two stored peers sharing a device, make
+* `compositionEdges` throw `CompositionGraphError` — refused BY NAME as
+* `duplicate-target` (D391, D663) instead of escaping as an uncaught throw.
 */
-function cycleProblems(composition, ctx, fields) {
+function cycleProblems(composition, ctx, fields, self) {
 	const candidate = {
-		target: ctx.self ?? PENDING_SELF,
-		composition
+		blockId: ctx.blockId ?? "(unsaved)",
+		target: self.ref,
+		composition,
+		replaced: self.replaced
 	};
-	const candidateKey = compositionSourceKey(candidate.target);
+	const candidateKey = require_composition.compositionSourceKey(candidate.target);
+	const unread = ctx.unreadTargets ?? /* @__PURE__ */ new Map();
 	try {
-		return findCompositionCycles(candidate, ctx.peers).map((c) => problem("cycle", cyclePath(c.path, candidateKey, fields), `a field reads itself: ${c.path.join(" → ")}`));
+		return findCandidateCycles(candidate, ctx.peers).map((c) => {
+			const at = cyclePath(c.path, candidateKey, fields);
+			const through = unreadDeviceOf([...c.component], unread);
+			return through === null ? problem("cycle", at, `a field reads itself: ${c.path.join(" → ")}`) : problem("cycle", at, `possible cycle through \`${through.key}\` — its state could not be read (${through.error}): ${c.path.join(" → ")}`);
+		});
 	} catch (err) {
 		if (err instanceof CompositionGraphError) return [problem("duplicate-target", "features", err.message)];
 		throw err;
 	}
 }
 function validateComposition(composition, ctx) {
-	const plan = planComposition(composition, ctx.lookupCap);
-	const cycles = cycleProblems(composition, ctx, plan.fields);
+	const plan = planComposition(composition, ctx.lookupCap, ctx.target ?? void 0);
+	const self = candidateSelf(composition, ctx, plan);
+	const cycles = cycleProblems(composition, ctx, plan.fields, self);
 	const problems = [
 		...plan.problems,
-		...sourceProblems(plan.fields, ctx),
+		...sourceProblems(plan.fields, ctx, self),
 		...cycles
 	];
 	return {
 		ok: problems.length === 0,
 		problems,
-		fields: [...plan.fields]
+		fields: [...plan.fields],
+		features: [...plan.features]
 	};
 }
 //#endregion
@@ -46062,14 +45846,14 @@ var RUNTIME_DEFAULTS = {
 * any role works, including non-accessory ones like Doorbell).
 */
 var AccessoryKind = {
-	Siren: require_sleep.DeviceRole.Siren,
-	Floodlight: require_sleep.DeviceRole.Floodlight,
-	Spotlight: require_sleep.DeviceRole.Spotlight,
-	PirSensor: require_sleep.DeviceRole.PirSensor,
-	Chime: require_sleep.DeviceRole.Chime,
-	Autotrack: require_sleep.DeviceRole.Autotrack,
-	Nightvision: require_sleep.DeviceRole.Nightvision,
-	PrivacyMask: require_sleep.DeviceRole.PrivacyMask
+	Siren: require_err_msg.DeviceRole.Siren,
+	Floodlight: require_err_msg.DeviceRole.Floodlight,
+	Spotlight: require_err_msg.DeviceRole.Spotlight,
+	PirSensor: require_err_msg.DeviceRole.PirSensor,
+	Chime: require_err_msg.DeviceRole.Chime,
+	Autotrack: require_err_msg.DeviceRole.Autotrack,
+	Nightvision: require_err_msg.DeviceRole.Nightvision,
+	PrivacyMask: require_err_msg.DeviceRole.PrivacyMask
 };
 /**
 * Default English label for each accessory kind. Drivers append this
@@ -46212,38 +45996,31 @@ var DeviceConfig = class DeviceConfig {
 };
 //#endregion
 //#region src/device/device-runtime-state.ts
-/**
-* Concrete implementation. Routes every successful write through
-* `writer(capName, slice)` — the kernel hooks this up to
-* `device-state.setCapSlice`, the canonical cross-layer write
-* entrypoint, which handles disk persistence (debounced on the hub)
-* and mirror updates.
-*
-* Schema validation runs in-process before the writer is called —
-* the round-trip should never carry an invalid slice. `flush()`
-* awaits any in-flight writer promises so shutdown is lossless.
-*
-* `initial` is the persisted blob loaded at boot. Slices for caps
-* whose schema hasn't been installed yet are kept in-memory verbatim
-* and validated when the cap registers later.
-*/
 var DeviceRuntimeState = class DeviceRuntimeState {
 	writer;
+	onWriteFailed;
 	/** In-flight writer promises tracked so `flush()` can await them. */
 	pendingWrites = /* @__PURE__ */ new Set();
+	/**
+	* Caps whose last write the hub refused. The equality gate in
+	* `applyCapWrite` is bypassed for these, so the SAME value is re-sent on the
+	* next write instead of being swallowed forever; a landing write clears it.
+	*/
+	failedWrites = /* @__PURE__ */ new Set();
 	/** Per-cap committed slice — after schema validation when known. */
 	slices;
 	/** Per-cap registered schema (set by `installCapSchema`). */
 	schemas = /* @__PURE__ */ new Map();
 	listeners = /* @__PURE__ */ new Set();
 	capListeners = /* @__PURE__ */ new Map();
-	constructor(initial, writer) {
+	constructor(initial, writer, onWriteFailed) {
 		this.writer = writer;
+		this.onWriteFailed = onWriteFailed;
 		this.slices = /* @__PURE__ */ new Map();
 		for (const [k, v] of Object.entries(initial)) if (v && typeof v === "object" && !Array.isArray(v)) this.slices.set(k, { ...v });
 	}
-	static fromInitial(initial, writer) {
-		return new DeviceRuntimeState(initial, writer);
+	static fromInitial(initial, writer, onWriteFailed) {
+		return new DeviceRuntimeState(initial, writer, onWriteFailed);
 	}
 	installCapSchema(capName, schema) {
 		const existing = this.schemas.get(capName);
@@ -46287,10 +46064,15 @@ var DeviceRuntimeState = class DeviceRuntimeState {
 			...value
 		} : { ...value };
 		const parsed = schema.parse(next);
-		if (shallowEqual(current, parsed)) return;
+		if (shallowEqual(current, parsed) && !this.failedWrites.has(capName)) return;
 		this.slices.set(capName, parsed);
 		this.fireListeners([capName]);
-		const writePromise = this.writer(capName, { ...parsed }).catch(() => {});
+		const writePromise = this.writer(capName, { ...parsed }).then(() => {
+			this.failedWrites.delete(capName);
+		}).catch((err) => {
+			this.failedWrites.add(capName);
+			this.onWriteFailed?.(capName, err instanceof Error ? err.message : String(err));
+		});
 		this.pendingWrites.add(writePromise);
 		writePromise.finally(() => {
 			this.pendingWrites.delete(writePromise);
@@ -46571,7 +46353,16 @@ var BaseDevice = class {
 			});
 		};
 		const initial = ctx.initialRuntimeState ?? {};
-		this.runtimeState = DeviceRuntimeState.fromInitial(initial, writer);
+		const onWriteFailed = (cap, error) => {
+			ctx.logger.warn("runtime-state write refused by the hub — the slice is not mirrored; it is re-sent on the next write", {
+				tags: { deviceId: ctx.id },
+				meta: {
+					cap,
+					error
+				}
+			});
+		};
+		this.runtimeState = DeviceRuntimeState.fromInitial(initial, writer, onWriteFailed);
 		ctx.bindRuntimeState?.(this.runtimeState);
 		ctx.registerNativeCap?.(deviceStatusCapability, {});
 		const seed = {
@@ -47166,7 +46957,7 @@ var BaseDeviceProvider = class extends require_sleep.BaseAddon {
 	*/
 	async getManualCreationType() {
 		if (!await this.supportsManualCreation()) return { deviceType: null };
-		return { deviceType: Object.values(require_sleep.DeviceType).find((t) => this.deviceClasses[t] !== void 0) ?? null };
+		return { deviceType: Object.values(require_err_msg.DeviceType).find((t) => this.deviceClasses[t] !== void 0) ?? null };
 	}
 	async adoptDiscoveredDevice(_input) {
 		throw new Error(`${this.providerName} provider does not support discovery-based adoption`);
@@ -47373,14 +47164,14 @@ var BaseDeviceProvider = class extends require_sleep.BaseAddon {
 		});
 		const meta = await this.ctx.api.deviceManager.loadMeta.query({ deviceId: id });
 		if (meta === null) throw new Error(`${this.providerName}: no persisted meta for "${stableId}" (id ${id}) — cannot reload`);
-		const deviceType = Object.values(require_sleep.DeviceType).find((t) => t === meta.type);
+		const deviceType = Object.values(require_err_msg.DeviceType).find((t) => t === meta.type);
 		const Class = deviceType !== void 0 ? this.deviceClasses[deviceType] : void 0;
 		if (!Class) throw new Error(`${this.providerName}: no device class for type "${meta.type}" — "${stableId}" is an accessory child; reload its parent instead`);
 		await devices.create(stableId, Class, {}, meta.parentDeviceId ?? null);
 		const rows = await this.ctx.api.deviceManager.listPersistedByAddon.query({ addonId: this.addonId });
 		for (const row of rows) {
 			if (row.parentDeviceId !== id) continue;
-			const childType = Object.values(require_sleep.DeviceType).find((t) => t === row.type);
+			const childType = Object.values(require_err_msg.DeviceType).find((t) => t === row.type);
 			const ChildClass = childType !== void 0 ? this.deviceClasses[childType] : void 0;
 			if (!ChildClass) continue;
 			try {
@@ -47807,7 +47598,7 @@ function expandContainer(id, byId, byParent, visited, out) {
 	if (visited.has(id)) return;
 	const candidate = byId.get(id);
 	if (!candidate) return;
-	if (candidate.type !== require_sleep.DeviceType.Container) {
+	if (candidate.type !== require_err_msg.DeviceType.Container) {
 		out.add(id);
 		return;
 	}
@@ -47851,11 +47642,11 @@ function legacyAutoLinkIds(params) {
 	const ids = /* @__PURE__ */ new Set();
 	const expand = (id) => expandContainer(id, byId, byParent, /* @__PURE__ */ new Set(), ids);
 	for (const c of candidates) {
-		if (c.type === require_sleep.DeviceType.Container) continue;
+		if (c.type === require_err_msg.DeviceType.Container) continue;
 		if (c.location !== selfLocation) continue;
 		if (c.parentDeviceId === selfId) continue;
 		const parent = c.parentDeviceId !== null ? byId.get(c.parentDeviceId) : void 0;
-		if (parent !== void 0 && parent.type === require_sleep.DeviceType.Container) {
+		if (parent !== void 0 && parent.type === require_err_msg.DeviceType.Container) {
 			expand(parent.id);
 			continue;
 		}
@@ -48147,39 +47938,39 @@ var DeclaredDevices = class {
 * placeholder HA types whose inline control renders a dash).
 */
 var DEVICE_TYPE_CONTROL_KIND = {
-	[require_sleep.DeviceType.Cover]: "cover",
-	[require_sleep.DeviceType.Valve]: "valve",
-	[require_sleep.DeviceType.Humidifier]: "humidifier",
-	[require_sleep.DeviceType.WaterHeater]: "water-heater",
-	[require_sleep.DeviceType.Camera]: "dummy",
-	[require_sleep.DeviceType.Hub]: "dummy",
-	[require_sleep.DeviceType.Switch]: "switch",
-	[require_sleep.DeviceType.Siren]: "switch",
-	[require_sleep.DeviceType.Light]: "light",
-	[require_sleep.DeviceType.Fan]: "fan",
-	[require_sleep.DeviceType.Sensor]: "sensor",
-	[require_sleep.DeviceType.Thermostat]: "thermostat",
-	[require_sleep.DeviceType.Climate]: "climate",
-	[require_sleep.DeviceType.Button]: "button",
-	[require_sleep.DeviceType.EventEmitter]: "dummy",
-	[require_sleep.DeviceType.Update]: "update",
-	[require_sleep.DeviceType.Generic]: "dummy",
-	[require_sleep.DeviceType.Notifier]: "dummy",
-	[require_sleep.DeviceType.Script]: "script",
-	[require_sleep.DeviceType.Automation]: "automation",
-	[require_sleep.DeviceType.Lock]: "lock",
-	[require_sleep.DeviceType.MediaPlayer]: "media-player",
-	[require_sleep.DeviceType.AlarmPanel]: "alarm",
-	[require_sleep.DeviceType.Control]: "control",
-	[require_sleep.DeviceType.Presence]: "sensor",
-	[require_sleep.DeviceType.Weather]: "weather",
-	[require_sleep.DeviceType.Vacuum]: "vacuum",
-	[require_sleep.DeviceType.LawnMower]: "lawn-mower",
-	[require_sleep.DeviceType.Container]: "dummy",
-	[require_sleep.DeviceType.Image]: "image",
-	[require_sleep.DeviceType.PetFeeder]: "pet-feeder"
+	[require_err_msg.DeviceType.Cover]: "cover",
+	[require_err_msg.DeviceType.Valve]: "valve",
+	[require_err_msg.DeviceType.Humidifier]: "humidifier",
+	[require_err_msg.DeviceType.WaterHeater]: "water-heater",
+	[require_err_msg.DeviceType.Camera]: "dummy",
+	[require_err_msg.DeviceType.Hub]: "dummy",
+	[require_err_msg.DeviceType.Switch]: "switch",
+	[require_err_msg.DeviceType.Siren]: "switch",
+	[require_err_msg.DeviceType.Light]: "light",
+	[require_err_msg.DeviceType.Fan]: "fan",
+	[require_err_msg.DeviceType.Sensor]: "sensor",
+	[require_err_msg.DeviceType.Thermostat]: "thermostat",
+	[require_err_msg.DeviceType.Climate]: "climate",
+	[require_err_msg.DeviceType.Button]: "button",
+	[require_err_msg.DeviceType.EventEmitter]: "dummy",
+	[require_err_msg.DeviceType.Update]: "update",
+	[require_err_msg.DeviceType.Generic]: "dummy",
+	[require_err_msg.DeviceType.Notifier]: "dummy",
+	[require_err_msg.DeviceType.Script]: "script",
+	[require_err_msg.DeviceType.Automation]: "automation",
+	[require_err_msg.DeviceType.Lock]: "lock",
+	[require_err_msg.DeviceType.MediaPlayer]: "media-player",
+	[require_err_msg.DeviceType.AlarmPanel]: "alarm",
+	[require_err_msg.DeviceType.Control]: "control",
+	[require_err_msg.DeviceType.Presence]: "sensor",
+	[require_err_msg.DeviceType.Weather]: "weather",
+	[require_err_msg.DeviceType.Vacuum]: "vacuum",
+	[require_err_msg.DeviceType.LawnMower]: "lawn-mower",
+	[require_err_msg.DeviceType.Container]: "dummy",
+	[require_err_msg.DeviceType.Image]: "image",
+	[require_err_msg.DeviceType.PetFeeder]: "pet-feeder"
 };
-var DEVICE_TYPE_VALUES = new Set(Object.values(require_sleep.DeviceType));
+var DEVICE_TYPE_VALUES = new Set(Object.values(require_err_msg.DeviceType));
 /**
 * Runtime-string-safe base resolver: a device row's `type` crosses the wire as
 * a plain string, so an unrecognised value resolves to `null` instead of
@@ -48223,15 +48014,15 @@ var SENSOR_FEATURES = [
 function pickAccessoryControl(device) {
 	const set = new Set(device.features);
 	switch (device.type) {
-		case require_sleep.DeviceType.Cover: return { kind: "cover" };
-		case require_sleep.DeviceType.Valve: return { kind: "valve" };
-		case require_sleep.DeviceType.Lock: return { kind: "lock" };
-		case require_sleep.DeviceType.AlarmPanel: return { kind: "alarm" };
-		case require_sleep.DeviceType.Light: return set.has("brightness") ? { kind: "brightness" } : { kind: "switch" };
-		case require_sleep.DeviceType.Switch:
-		case require_sleep.DeviceType.Siren: return { kind: "switch" };
-		case require_sleep.DeviceType.Sensor:
-		case require_sleep.DeviceType.Presence: {
+		case require_err_msg.DeviceType.Cover: return { kind: "cover" };
+		case require_err_msg.DeviceType.Valve: return { kind: "valve" };
+		case require_err_msg.DeviceType.Lock: return { kind: "lock" };
+		case require_err_msg.DeviceType.AlarmPanel: return { kind: "alarm" };
+		case require_err_msg.DeviceType.Light: return set.has("brightness") ? { kind: "brightness" } : { kind: "switch" };
+		case require_err_msg.DeviceType.Switch:
+		case require_err_msg.DeviceType.Siren: return { kind: "switch" };
+		case require_err_msg.DeviceType.Sensor:
+		case require_err_msg.DeviceType.Presence: {
 			const sensor = SENSOR_FEATURES.find((f) => set.has(f));
 			return sensor ? {
 				kind: "sensor",
@@ -48310,7 +48101,7 @@ function deviceMatchesProfile(features, profile) {
 var BATTERY_DEVICE_PROFILE = {
 	id: "battery",
 	label: "Battery-operated camera",
-	when: { hasFeature: require_sleep.DeviceFeature.BatteryOperated },
+	when: { hasFeature: require_err_msg.DeviceFeature.BatteryOperated },
 	defaults: {
 		audioMode: "disabled",
 		detectionMode: "on-motion"
@@ -52941,6 +52732,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"coreBlocks.getCustomization": {
+		capName: "core-blocks",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"coreBlocks.getTypeDefs": {
 		capName: "core-blocks",
 		capScope: "system",
@@ -54063,6 +53860,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"deviceState.claimFields": {
+		capName: "device-state",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"deviceState.getAllSnapshots": {
 		capName: "device-state",
 		capScope: "system",
@@ -54075,12 +53878,36 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceState.getNativeCapSlice": {
+		capName: "device-state",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"deviceState.getSnapshot": {
 		capName: "device-state",
 		capScope: "system",
 		addonId: null,
 		access: "view"
 	},
+	"deviceState.listClaims": {
+		capName: "device-state",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"deviceState.patchOwnedFields": {
+		capName: "device-state",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"deviceState.releaseClaim": {
+		capName: "device-state",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"deviceState.setCapSlice": {
 		capName: "device-state",
 		capScope: "system",
@@ -59931,16 +59758,36 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceState.claimFields": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"deviceState.getCapSlice": [{
 		name: "deviceId",
 		form: "single",
 		optional: false
 	}],
+	"deviceState.getNativeCapSlice": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"deviceState.getSnapshot": [{
 		name: "deviceId",
 		form: "single",
 		optional: false
 	}],
+	"deviceState.patchOwnedFields": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceState.releaseClaim": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"deviceState.setCapSlice": [{
 		name: "deviceId",
 		form: "single",
@@ -61436,8 +61283,12 @@ var SYSTEM_SCOPE_DEVICE_METHODS = [
 	"deviceManager.updateConfig",
 	"deviceManager.updateDeviceField",
 	"deviceManager.updateDeviceFieldsBatch",
+	"deviceState.claimFields",
 	"deviceState.getCapSlice",
+	"deviceState.getNativeCapSlice",
 	"deviceState.getSnapshot",
+	"deviceState.patchOwnedFields",
+	"deviceState.releaseClaim",
 	"deviceState.setCapSlice",
 	"faceGallery.getFaceByTrack",
 	"faceGallery.listRecentFaces",
@@ -62117,6 +61968,7 @@ function createSystemProxy(api) {
 			updateComposition: (input) => dispatch("coreBlocks", "updateComposition", "mutation", input),
 			getComposition: (input) => dispatch("coreBlocks", "getComposition", "query", input),
 			listCompositions: (input) => dispatch("coreBlocks", "listCompositions", "query", input),
+			getCustomization: (input) => dispatch("coreBlocks", "getCustomization", "query", input),
 			validateComposition: (input) => dispatch("coreBlocks", "validateComposition", "mutation", input)
 		},
 		decoder: {
@@ -62220,7 +62072,10 @@ function createSystemProxy(api) {
 			createDevice: (input) => dispatch("deviceProvider", "createDevice", "mutation", input),
 			testCreationField: (input) => dispatch("deviceProvider", "testCreationField", "mutation", input)
 		},
-		deviceState: { getAllSnapshots: (input) => dispatch("deviceState", "getAllSnapshots", "query", input) },
+		deviceState: {
+			getAllSnapshots: (input) => dispatch("deviceState", "getAllSnapshots", "query", input),
+			listClaims: (input) => dispatch("deviceState", "listClaims", "query", input)
+		},
 		faceGallery: {
 			listIdentities: (input) => dispatch("faceGallery", "listIdentities", "query", input),
 			createIdentity: (input) => dispatch("faceGallery", "createIdentity", "mutation", input),
@@ -68278,7 +68133,7 @@ exports.AUDIO_BACKEND_CHOICES = AUDIO_BACKEND_CHOICES;
 exports.AUDIO_CHUNK_FORMATS = require_sleep.AUDIO_CHUNK_FORMATS;
 exports.AUDIO_MACRO_LABELS = AUDIO_MACRO_LABELS;
 exports.AUDIO_NOT_CLASSIFIED_REASONS = AUDIO_NOT_CLASSIFIED_REASONS;
-exports.AUDIO_PRESETS = require_canonical_hash.AUDIO_PRESETS;
+exports.AUDIO_PRESETS = require_composition.AUDIO_PRESETS;
 exports.AUDIO_SCALE_EPOCH_ISO = AUDIO_SCALE_EPOCH_ISO;
 exports.AUDIO_SCALE_EPOCH_MS = AUDIO_SCALE_EPOCH_MS;
 exports.AccessoriesStatusSchema = AccessoriesStatusSchema;
@@ -68428,13 +68283,17 @@ exports.CLUSTER_MODEL_SECTION_ID = CLUSTER_MODEL_SECTION_ID;
 exports.CLUSTER_STEP_SETTING_FIELDS = CLUSTER_STEP_SETTING_FIELDS;
 exports.COCO_80_LABELS = COCO_80_LABELS;
 exports.COCO_TO_MACRO = COCO_TO_MACRO;
-exports.COMPOSED_DEVICE_STABLE_ID_PREFIX = COMPOSED_DEVICE_STABLE_ID_PREFIX;
-exports.COMPOSER_ADDON_ID = COMPOSER_ADDON_ID;
+exports.COMPOSED_DEVICE_STABLE_ID_PREFIX = require_composition.COMPOSED_DEVICE_STABLE_ID_PREFIX;
+exports.COMPOSED_ITEM_FIXED_FIELDS = COMPOSED_ITEM_FIXED_FIELDS;
+exports.COMPOSER_ADDON_ID = require_composition.COMPOSER_ADDON_ID;
 exports.COMPOSER_RUNNER_ID = COMPOSER_RUNNER_ID;
+exports.COMPOSITION_ITEM_ARRAY_PATH = require_composition.COMPOSITION_ITEM_ARRAY_PATH;
+exports.COMPOSITION_ITEM_KEY_RE = require_composition.COMPOSITION_ITEM_KEY_RE;
 exports.CONNECTION_TEST_TIMEOUT_MS = CONNECTION_TEST_TIMEOUT_MS;
 exports.CONTAINER_CHILD_PRIORITY = CONTAINER_CHILD_PRIORITY;
 exports.CORE_BLOCKS_ADDON_ID = CORE_BLOCKS_ADDON_ID;
 exports.CORE_BLOCK_ADDON_PREFIX = CORE_BLOCK_ADDON_PREFIX;
+exports.CUSTOMIZATION_BLOCK_NAME_PREFIX = require_composition.CUSTOMIZATION_BLOCK_NAME_PREFIX;
 exports.CamProfileSchema = require_sleep.CamProfileSchema;
 exports.CamStreamDescriptorSchema = CamStreamDescriptorSchema;
 exports.CamStreamKindSchema = require_sleep.CamStreamKindSchema;
@@ -68474,7 +68333,9 @@ exports.CandidateQueryFilterSchema = CandidateQueryFilterSchema;
 exports.CapScopeSchema = CapScopeSchema;
 exports.CapabilityBindingsSchema = CapabilityBindingsSchema;
 exports.CarbonMonoxideStatusSchema = CarbonMonoxideStatusSchema;
-exports.ChargingStatus = require_sleep.ChargingStatus;
+exports.ChargingStatus = require_err_msg.ChargingStatus;
+exports.ClaimOutcomeSchema = ClaimOutcomeSchema;
+exports.ClaimsListingSchema = ClaimsListingSchema;
 exports.ClientNetworkStatsSchema = ClientNetworkStatsSchema;
 exports.ClimateControlStatusSchema = ClimateControlStatusSchema;
 exports.ClipBytesOfferSchema = ClipBytesOfferSchema;
@@ -68504,37 +68365,42 @@ exports.ComposerApplyResultSchema = ComposerApplyResultSchema;
 exports.ComposerBlockSchema = ComposerBlockSchema;
 exports.ComposerBlockVerdictSchema = ComposerBlockVerdictSchema;
 exports.ComposerUnreadableBlockSchema = ComposerUnreadableBlockSchema;
-exports.CompositionBindingSchema = CompositionBindingSchema;
+exports.CompositionBindingSchema = require_composition.CompositionBindingSchema;
 exports.CompositionBlockInputSchema = CompositionBlockInputSchema;
 exports.CompositionBlockStateSchema = CompositionBlockStateSchema;
-exports.CompositionCodeSourceSchema = CompositionCodeSourceSchema;
-exports.CompositionCommandTargetSchema = CompositionCommandTargetSchema;
-exports.CompositionExistingTargetSchema = CompositionExistingTargetSchema;
-exports.CompositionExpressionSourceSchema = CompositionExpressionSourceSchema;
-exports.CompositionFeatureSchema = CompositionFeatureSchema;
+exports.CompositionCodeSourceSchema = require_composition.CompositionCodeSourceSchema;
+exports.CompositionCommandTargetSchema = require_composition.CompositionCommandTargetSchema;
+exports.CompositionCustomizationReadSchema = CompositionCustomizationReadSchema;
+exports.CompositionExistingTargetSchema = require_composition.CompositionExistingTargetSchema;
+exports.CompositionExpressionSourceSchema = require_composition.CompositionExpressionSourceSchema;
+exports.CompositionFeatureModeSchema = CompositionFeatureModeSchema;
+exports.CompositionFeaturePlanSchema = CompositionFeaturePlanSchema;
+exports.CompositionFeatureSchema = require_composition.CompositionFeatureSchema;
+exports.CompositionFieldItemSchema = CompositionFieldItemSchema;
 exports.CompositionFieldKindSchema = CompositionFieldKindSchema;
 exports.CompositionFieldPlanSchema = CompositionFieldPlanSchema;
-exports.CompositionFieldReadSchema = CompositionFieldReadSchema;
+exports.CompositionFieldReadSchema = require_composition.CompositionFieldReadSchema;
 exports.CompositionFieldRoleSchema = CompositionFieldRoleSchema;
-exports.CompositionFieldSourceSchema = CompositionFieldSourceSchema;
+exports.CompositionFieldSourceSchema = require_composition.CompositionFieldSourceSchema;
 exports.CompositionFieldStateKindSchema = CompositionFieldStateKindSchema;
 exports.CompositionFieldStateSchema = CompositionFieldStateSchema;
-exports.CompositionFieldsFeatureSchema = CompositionFieldsFeatureSchema;
-exports.CompositionForwardCommandSchema = CompositionForwardCommandSchema;
-exports.CompositionFromSourceSchema = CompositionFromSourceSchema;
+exports.CompositionFieldsFeatureSchema = require_composition.CompositionFieldsFeatureSchema;
+exports.CompositionForwardCommandSchema = require_composition.CompositionForwardCommandSchema;
+exports.CompositionFromSourceSchema = require_composition.CompositionFromSourceSchema;
 exports.CompositionGetReadSchema = CompositionGetReadSchema;
 exports.CompositionGraphError = CompositionGraphError;
+exports.CompositionItemEntrySchema = require_composition.CompositionItemEntrySchema;
 exports.CompositionListReadSchema = CompositionListReadSchema;
-exports.CompositionLiteralBindingSchema = CompositionLiteralBindingSchema;
-exports.CompositionNewTargetSchema = CompositionNewTargetSchema;
-exports.CompositionPassthroughFeatureSchema = CompositionPassthroughFeatureSchema;
+exports.CompositionLiteralBindingSchema = require_composition.CompositionLiteralBindingSchema;
+exports.CompositionNewTargetSchema = require_composition.CompositionNewTargetSchema;
+exports.CompositionPassthroughFeatureSchema = require_composition.CompositionPassthroughFeatureSchema;
 exports.CompositionProblemCodeSchema = CompositionProblemCodeSchema;
 exports.CompositionProblemSchema = CompositionProblemSchema;
 exports.CompositionRunStatusSchema = CompositionRunStatusSchema;
-exports.CompositionSchema = CompositionSchema;
-exports.CompositionSourceRefSchema = CompositionSourceRefSchema;
+exports.CompositionSchema = require_composition.CompositionSchema;
+exports.CompositionSourceRefSchema = require_composition.CompositionSourceRefSchema;
 exports.CompositionStateReadSchema = CompositionStateReadSchema;
-exports.CompositionTargetSchema = CompositionTargetSchema;
+exports.CompositionTargetSchema = require_composition.CompositionTargetSchema;
 exports.CompositionUnavailableModeSchema = CompositionUnavailableModeSchema;
 exports.CompositionValidationSchema = CompositionValidationSchema;
 exports.CompositionViewSchema = CompositionViewSchema;
@@ -68546,6 +68412,8 @@ exports.ConnectionTestInputSchema = ConnectionTestInputSchema;
 exports.ConnectionTestOutcomeSchema = ConnectionTestOutcomeSchema;
 exports.ConnectivityStatusSchema = ConnectivityStatusSchema;
 exports.ConsumableItemSchema = ConsumableItemSchema;
+exports.ConsumableRemainingSchema = ConsumableRemainingSchema;
+exports.ConsumableRemainingUnitSchema = ConsumableRemainingUnitSchema;
 exports.ConsumablesStatusSchema = ConsumablesStatusSchema;
 exports.ContactStatusSchema = ContactStatusSchema;
 exports.ControlKindSchema = ControlKindSchema;
@@ -68639,15 +68507,15 @@ exports.DeviceDiscoveryStatusSchema = DeviceDiscoveryStatusSchema;
 exports.DeviceExportExposeInputSchema = ExposeInputSchema;
 exports.DeviceExportStatusSchema = DeviceExportStatusSchema;
 exports.DeviceExportUnexposeInputSchema = UnexposeInputSchema;
-exports.DeviceFeature = require_sleep.DeviceFeature;
+exports.DeviceFeature = require_err_msg.DeviceFeature;
 exports.DeviceInfoSchema = DeviceInfoSchema;
 exports.DeviceNetworkStatsSchema = DeviceNetworkStatsSchema;
 exports.DeviceRestoreRetryScheduler = DeviceRestoreRetryScheduler;
-exports.DeviceRole = require_sleep.DeviceRole;
+exports.DeviceRole = require_err_msg.DeviceRole;
 exports.DeviceRuntimeState = DeviceRuntimeState;
 exports.DeviceSelectorSchema = DeviceSelectorSchema;
 exports.DeviceStatusSchema = DeviceStatusSchema;
-exports.DeviceType = require_sleep.DeviceType;
+exports.DeviceType = require_err_msg.DeviceType;
 exports.DiagnosticIdSchema = DiagnosticIdSchema;
 exports.DiagnosticWindowPatchSchema = DiagnosticWindowPatchSchema;
 exports.DiagnosticWindowSchema = DiagnosticWindowSchema;
@@ -68670,11 +68538,11 @@ exports.EVENT_OWNER_TYPES = EVENT_OWNER_TYPES;
 exports.EVENT_PAD_MS = EVENT_PAD_MS;
 exports.EVENT_TAXONOMY = EVENT_TAXONOMY;
 exports.EXPORT_DENSE_MAX_RANGES = EXPORT_DENSE_MAX_RANGES;
-exports.EXPRESSION_BUILTINS = EXPRESSION_BUILTINS;
-exports.EXPRESSION_BUILTIN_NAMES = EXPRESSION_BUILTIN_NAMES;
-exports.EXPRESSION_COMPILE_CACHE_CAPACITY = EXPRESSION_COMPILE_CACHE_CAPACITY;
-exports.EXPRESSION_IDENTIFIER_RE = EXPRESSION_IDENTIFIER_RE;
-exports.EXPRESSION_INJECTED_NOW = EXPRESSION_INJECTED_NOW;
+exports.EXPRESSION_BUILTINS = require_composition.EXPRESSION_BUILTINS;
+exports.EXPRESSION_BUILTIN_NAMES = require_composition.EXPRESSION_BUILTIN_NAMES;
+exports.EXPRESSION_COMPILE_CACHE_CAPACITY = require_composition.EXPRESSION_COMPILE_CACHE_CAPACITY;
+exports.EXPRESSION_IDENTIFIER_RE = require_composition.EXPRESSION_IDENTIFIER_RE;
+exports.EXPRESSION_INJECTED_NOW = require_composition.EXPRESSION_INJECTED_NOW;
 exports.EXTENSION_HOST_DEVICE_TYPES = EXTENSION_HOST_DEVICE_TYPES;
 exports.EXTENSION_SLOTS = EXTENSION_SLOTS;
 exports.EXTENSION_SLOT_IDS = EXTENSION_SLOT_IDS;
@@ -68730,11 +68598,11 @@ exports.ExportTimelapseSchema = ExportTimelapseSchema;
 exports.ExposedDeviceSchema = ExposedDeviceSchema;
 exports.ExposureModeSchema = ExposureModeSchema;
 exports.ExpressionBindingSourceSchema = ExpressionBindingSourceSchema;
-exports.ExpressionEvalError = ExpressionEvalError;
+exports.ExpressionEvalError = require_composition.ExpressionEvalError;
 exports.ExpressionFieldBindingSchema = ExpressionFieldBindingSchema;
 exports.ExpressionGlobalBindingSchema = ExpressionGlobalBindingSchema;
 exports.ExpressionLiteralBindingSchema = ExpressionLiteralBindingSchema;
-exports.ExpressionParseError = ExpressionParseError;
+exports.ExpressionParseError = require_composition.ExpressionParseError;
 exports.ExpressionSourceSchema = ExpressionSourceSchema;
 exports.ExtensionCandidateSchema = ExtensionCandidateSchema;
 exports.ExtensionCandidatesSchema = ExtensionCandidatesSchema;
@@ -68751,6 +68619,8 @@ exports.ExtensionSlotValueSchema = ExtensionSlotValueSchema;
 exports.ExtensionSourceAvailabilitySchema = ExtensionSourceAvailabilitySchema;
 exports.ExtensionSourceHealthSchema = ExtensionSourceHealthSchema;
 exports.ExtensionSourceSchema = ExtensionSourceSchema;
+exports.FEEDER_EXAMPLE_ADDON_ID = FEEDER_EXAMPLE_ADDON_ID;
+exports.FEEDER_EXAMPLE_HA_DEVICE_ID = FEEDER_EXAMPLE_HA_DEVICE_ID;
 exports.FIRST_LEVEL_MACRO_CLASSES = FIRST_LEVEL_MACRO_CLASSES;
 exports.FULL_IMAGE_BBOX = FULL_IMAGE_BBOX;
 exports.FailureContributionSchema = FailureContributionSchema;
@@ -68760,8 +68630,10 @@ exports.FanControlStatusSchema = FanControlStatusSchema;
 exports.FanDirectionSchema = FanDirectionSchema;
 exports.FeatureManifestSchema = FeatureManifestSchema;
 exports.FeatureProbeStatusSchema = FeatureProbeStatusSchema;
+exports.FieldClaimModeSchema = FieldClaimModeSchema;
+exports.FieldClaimSchema = FieldClaimSchema;
 exports.FloodStatusSchema = FloodStatusSchema;
-exports.Fmp4BoxSplitter = require_canonical_hash.Fmp4BoxSplitter;
+exports.Fmp4BoxSplitter = require_composition.Fmp4BoxSplitter;
 exports.FrameHandleFormatSchema = require_sleep.FrameHandleFormatSchema;
 exports.FrameHandleSchema = require_sleep.FrameHandleSchema;
 exports.FrameInputSchema = FrameInputSchema;
@@ -68890,16 +68762,17 @@ exports.MAX_BIRTH_DECISION_RECORDS = MAX_BIRTH_DECISION_RECORDS;
 exports.MAX_BIRTH_LATENCY_PROXY_MS = MAX_BIRTH_LATENCY_PROXY_MS;
 exports.MAX_CLIP_EVENT_IDS = MAX_CLIP_EVENT_IDS;
 exports.MAX_CLIP_LABELS = MAX_CLIP_LABELS;
-exports.MAX_COMPOSITION_CODE_LENGTH = MAX_COMPOSITION_CODE_LENGTH;
-exports.MAX_COMPOSITION_FEATURES = MAX_COMPOSITION_FEATURES;
-exports.MAX_COMPOSITION_FIELDS_PER_FEATURE = MAX_COMPOSITION_FIELDS_PER_FEATURE;
+exports.MAX_COMPOSITION_CODE_LENGTH = require_composition.MAX_COMPOSITION_CODE_LENGTH;
+exports.MAX_COMPOSITION_FEATURES = require_composition.MAX_COMPOSITION_FEATURES;
+exports.MAX_COMPOSITION_FIELDS_PER_FEATURE = require_composition.MAX_COMPOSITION_FIELDS_PER_FEATURE;
+exports.MAX_COMPOSITION_ITEMS = require_composition.MAX_COMPOSITION_ITEMS;
 exports.MAX_CONDITION_DEPTH = MAX_CONDITION_DEPTH;
 exports.MAX_CONDITION_LEAVES = MAX_CONDITION_LEAVES;
-exports.MAX_EXPRESSION_AST_NODES = MAX_EXPRESSION_AST_NODES;
-exports.MAX_EXPRESSION_BINDINGS = MAX_EXPRESSION_BINDINGS;
-exports.MAX_EXPRESSION_CALL_ARGS = MAX_EXPRESSION_CALL_ARGS;
-exports.MAX_EXPRESSION_EVAL_STEPS = MAX_EXPRESSION_EVAL_STEPS;
-exports.MAX_EXPRESSION_SOURCE_LENGTH = MAX_EXPRESSION_SOURCE_LENGTH;
+exports.MAX_EXPRESSION_AST_NODES = require_composition.MAX_EXPRESSION_AST_NODES;
+exports.MAX_EXPRESSION_BINDINGS = require_composition.MAX_EXPRESSION_BINDINGS;
+exports.MAX_EXPRESSION_CALL_ARGS = require_composition.MAX_EXPRESSION_CALL_ARGS;
+exports.MAX_EXPRESSION_EVAL_STEPS = require_composition.MAX_EXPRESSION_EVAL_STEPS;
+exports.MAX_EXPRESSION_SOURCE_LENGTH = require_composition.MAX_EXPRESSION_SOURCE_LENGTH;
 exports.MAX_KEYS = MAX_KEYS;
 exports.MAX_REASONS_PER_KEY = MAX_REASONS_PER_KEY;
 exports.MAX_SENSOR_TRIGGER_DEVICES = MAX_SENSOR_TRIGGER_DEVICES;
@@ -69155,6 +69028,7 @@ exports.OPS_LOG_DEFAULT_LIMIT = OPS_LOG_DEFAULT_LIMIT;
 exports.OPS_LOG_RING_DEFAULT_MAX = OPS_LOG_RING_DEFAULT_MAX;
 exports.OVERFLOW_REASON = OVERFLOW_REASON;
 exports.OVERLAY_LAYERS = OVERLAY_LAYERS;
+exports.OWNER_ONLY_EVENT_CATEGORIES = require_event_category.OWNER_ONLY_EVENT_CATEGORIES;
 exports.OauthIntegrationDescriptorSchema = OauthIntegrationDescriptorSchema;
 exports.ObjectEventSchema = ObjectEventSchema;
 exports.OccupancyBurstRefusalSchema = OccupancyBurstRefusalSchema;
@@ -69185,6 +69059,7 @@ exports.PEER_BYTES_CHUNK_BYTES = require_sleep.PEER_BYTES_CHUNK_BYTES;
 exports.PEER_BYTES_MAX_OUTSTANDING = require_sleep.PEER_BYTES_MAX_OUTSTANDING;
 exports.PEER_BYTES_STALL_MS = require_sleep.PEER_BYTES_STALL_MS;
 exports.PEER_BYTES_TICKET_TTL_MS = require_sleep.PEER_BYTES_TICKET_TTL_MS;
+exports.PENDING_BLOCK_ID = PENDING_BLOCK_ID;
 exports.PET_FEEDER_MANUAL_FEED_MAX = PET_FEEDER_MANUAL_FEED_MAX;
 exports.PET_FEEDER_MANUAL_FEED_MIN = PET_FEEDER_MANUAL_FEED_MIN;
 exports.PIPELINE_ANALYTICS_CAP_NAME = PIPELINE_ANALYTICS_CAP_NAME;
@@ -69256,7 +69131,7 @@ exports.RECORDING_SOURCE_CAMSTACK = RECORDING_SOURCE_CAMSTACK;
 exports.RECORDING_SOURCE_CAMSTACK_ADDON = RECORDING_SOURCE_CAMSTACK_ADDON;
 exports.RECORDING_TIMELINE_BATCH_MAX = RECORDING_TIMELINE_BATCH_MAX;
 exports.REDACTED_SECRET = REDACTED_SECRET;
-exports.RESERVED_BINDING_NAMES = RESERVED_BINDING_NAMES;
+exports.RESERVED_BINDING_NAMES = require_composition.RESERVED_BINDING_NAMES;
 exports.RESERVED_COLLECTION_SOURCES = RESERVED_COLLECTION_SOURCES;
 exports.RESTORED_CAP_NAMES = RESTORED_CAP_NAMES;
 exports.ROOM_EXAMPLE_MOTION_SOURCES = ROOM_EXAMPLE_MOTION_SOURCES;
@@ -69644,7 +69519,7 @@ exports.audioLabelChoices = audioLabelChoices;
 exports.audioMetricsCapability = audioMetricsCapability;
 exports.audioModeOf = audioModeOf;
 exports.audioOrDefaults = audioOrDefaults;
-exports.audioPlanFromEncodeProfile = require_canonical_hash.audioPlanFromEncodeProfile;
+exports.audioPlanFromEncodeProfile = require_composition.audioPlanFromEncodeProfile;
 exports.audioScaleEraOf = audioScaleEraOf;
 exports.authProviderCapability = authProviderCapability;
 exports.autoAssignProfiles = autoAssignProfiles;
@@ -69658,17 +69533,17 @@ exports.bindAddonActions = bindAddonActions;
 exports.brightnessCapability = brightnessCapability;
 exports.brokerCapability = brokerCapability;
 exports.buildAddonRouteProvider = buildAddonRouteProvider;
-exports.buildAudioArgs = require_canonical_hash.buildAudioArgs;
+exports.buildAudioArgs = require_composition.buildAudioArgs;
 exports.buildCapabilityLookup = buildCapabilityLookup;
 exports.buildDeviceAdminUrl = buildDeviceAdminUrl;
 exports.buildEventKindDescriptor = buildEventKindDescriptor;
-exports.buildFfmpegArgs = require_canonical_hash.buildFfmpegArgs;
-exports.buildInputArgs = require_canonical_hash.buildInputArgs;
+exports.buildFfmpegArgs = require_composition.buildFfmpegArgs;
+exports.buildInputArgs = require_composition.buildInputArgs;
 exports.buildModelVariantGroups = buildModelVariantGroups;
 exports.buildNcTaxonomy = buildNcTaxonomy;
 exports.buildRoleScopes = buildRoleScopes;
 exports.buildStreamParamsConfigSchema = buildStreamParamsConfigSchema;
-exports.buildVideoArgs = require_canonical_hash.buildVideoArgs;
+exports.buildVideoArgs = require_composition.buildVideoArgs;
 exports.buttonCapability = buttonCapability;
 exports.cameraCredentialsCapability = cameraCredentialsCapability;
 exports.cameraGridLayoutCapability = cameraGridLayoutCapability;
@@ -69696,16 +69571,18 @@ exports.colorCapability = colorCapability;
 exports.colorForKind = colorForKind;
 exports.commitWatchdogRestart = commitWatchdogRestart;
 exports.compareToTarget = compareToTarget;
-exports.compileExpression = compileExpression;
-exports.compileExpressionSafe = compileExpressionSafe;
+exports.compileExpression = require_composition.compileExpression;
+exports.compileExpressionSafe = require_composition.compileExpressionSafe;
 exports.composeSwitchedOff = composeSwitchedOff;
-exports.composedDeviceRef = composedDeviceRef;
-exports.composedDeviceStableId = composedDeviceStableId;
+exports.composedDeviceRef = require_composition.composedDeviceRef;
+exports.composedDeviceStableId = require_composition.composedDeviceStableId;
 exports.composerCapability = composerCapability;
 exports.compositionEdges = compositionEdges;
-exports.compositionReadKey = compositionReadKey;
-exports.compositionSliceKey = compositionSliceKey;
-exports.compositionSourceKey = compositionSourceKey;
+exports.compositionFieldKey = compositionFieldKey;
+exports.compositionItemFieldPath = require_composition.compositionItemFieldPath;
+exports.compositionReadKey = require_composition.compositionReadKey;
+exports.compositionSliceKey = require_composition.compositionSliceKey;
+exports.compositionSourceKey = require_composition.compositionSourceKey;
 exports.compositionSourceRefs = compositionSourceRefs;
 exports.conditionDepth = conditionDepth;
 exports.conditionExclusionReason = conditionExclusionReason;
@@ -69730,7 +69607,7 @@ exports.createDeviceProxy = require_sleep.createDeviceProxy;
 exports.createDurableState = require_sleep.createDurableState;
 exports.createEvent = require_sleep.createEvent;
 exports.createEventBusSliceSource = require_sleep.createEventBusSliceSource;
-exports.createExpressionScope = createExpressionScope;
+exports.createExpressionScope = require_composition.createExpressionScope;
 exports.createHwAccelCache = createHwAccelCache;
 exports.createLazyTrpcSource = require_sleep.createLazyTrpcSource;
 exports.createLogChannelsProvider = createLogChannelsProvider;
@@ -69801,9 +69678,9 @@ exports.enumerateInferenceDevices = enumerateInferenceDevices;
 exports.enumerateItemArrayFields = enumerateItemArrayFields;
 exports.enumerateSchemaFields = enumerateSchemaFields;
 exports.errMsg = require_err_msg.errMsg;
-exports.evaluateAst = evaluateAst;
+exports.evaluateAst = require_composition.evaluateAst;
 exports.evaluateCompositionField = evaluateCompositionField;
-exports.evaluateExpressionSource = evaluateExpressionSource;
+exports.evaluateExpressionSource = require_composition.evaluateExpressionSource;
 exports.evaluatePoolMemory = evaluatePoolMemory;
 exports.evaluateSensorEdge = evaluateSensorEdge;
 exports.evaluateZoneRules = evaluateZoneRules;
@@ -69822,9 +69699,14 @@ exports.faceGalleryCapability = faceGalleryCapability;
 exports.failureContributionCapability = failureContributionCapability;
 exports.failureRate = failureRate;
 exports.fanControlCapability = fanControlCapability;
+exports.featureFieldEntries = require_composition.featureFieldEntries;
 exports.featureProbeCapability = featureProbeCapability;
-exports.fieldReads = fieldReads;
+exports.featureSources = require_composition.featureSources;
+exports.feederCustomizationExample = feederCustomizationExample;
+exports.feederExampleSources = feederExampleSources;
+exports.fieldReads = require_composition.fieldReads;
 exports.filesystemBrowseCapability = filesystemBrowseCapability;
+exports.findCandidateCycles = findCandidateCycles;
 exports.findCompositionCycles = findCompositionCycles;
 exports.findTimezone = findTimezone;
 exports.floodCapability = floodCapability;
@@ -69856,7 +69738,7 @@ exports.integrationsCapability = integrationsCapability;
 exports.intercomCapability = intercomCapability;
 exports.interpretStoredClusterModel = interpretStoredClusterModel;
 exports.invalidClusterStepModelEntries = invalidClusterStepModelEntries;
-exports.invocationFromEncodeProfile = require_canonical_hash.invocationFromEncodeProfile;
+exports.invocationFromEncodeProfile = require_composition.invocationFromEncodeProfile;
 exports.isAgentOnlyPlacement = isAgentOnlyPlacement;
 exports.isArrayOutputSchema = isArrayOutputSchema;
 exports.isAudioChunkFormat = require_sleep.isAudioChunkFormat;
@@ -69883,11 +69765,12 @@ exports.isMediaOwnerType = isMediaOwnerType;
 exports.isNode = isNode;
 exports.isObjectInput = isObjectInput;
 exports.isOccupancyRule = isOccupancyRule;
+exports.isOwnerOnlyEventCategory = require_event_category.isOwnerOnlyEventCategory;
 exports.isRestoredCap = isRestoredCap;
 exports.isSameAddonId = isSameAddonId;
 exports.isScheduleActive = isScheduleActive;
 exports.isSecretConfigField = isSecretConfigField;
-exports.isSoftwareDecode = require_canonical_hash.isSoftwareDecode;
+exports.isSoftwareDecode = require_composition.isSoftwareDecode;
 exports.isSourceCap = isSourceCap;
 exports.isStorageLocationMode = isStorageLocationMode;
 exports.isSystemDelivery = isSystemDelivery;
@@ -69916,7 +69799,7 @@ exports.localNetworkCapability = localNetworkCapability;
 exports.locationIconKey = locationIconKey;
 exports.locationSimilarity = locationSimilarity;
 exports.lockControlCapability = lockControlCapability;
-exports.logBannerArgs = require_canonical_hash.logBannerArgs;
+exports.logBannerArgs = require_composition.logBannerArgs;
 exports.logChannelsCapability = logChannelsCapability;
 exports.logDestinationCapability = logDestinationCapability;
 exports.logLevelAtMost = logLevelAtMost;
@@ -69969,6 +69852,7 @@ exports.oauthIntegrationCapability = oauthIntegrationCapability;
 exports.objectInputDeclaresAddonId = objectInputDeclaresAddonId;
 exports.objectInputDeclaresRequiredDeviceId = objectInputDeclaresRequiredDeviceId;
 exports.occupancyScope = occupancyScope;
+exports.optionalAncestors = optionalAncestors;
 exports.optionalMethod = require_sleep.optionalMethod;
 exports.osdCapability = osdCapability;
 exports.osdManagerCapability = osdManagerCapability;
@@ -69976,7 +69860,7 @@ exports.overlayClusterStepSettings = overlayClusterStepSettings;
 exports.packagePickerItems = packagePickerItems;
 exports.parseAdminBase = parseAdminBase;
 exports.parseCameraStreamConfig = parseCameraStreamConfig;
-exports.parseExpression = parseExpression;
+exports.parseExpression = require_composition.parseExpression;
 exports.parseJsonArray = require_sleep.parseJsonArray;
 exports.parseJsonObject = require_sleep.parseJsonObject;
 exports.parseJsonUnknown = require_sleep.parseJsonUnknown;
@@ -69996,13 +69880,14 @@ exports.pickInvalidClusterStepModels = pickInvalidClusterStepModels;
 exports.pickNativeLeaseOverride = pickNativeLeaseOverride;
 exports.pickPreferredRtspEntry = pickPreferredRtspEntry;
 exports.pickRestartCandidate = pickRestartCandidate;
-exports.pickVideoEncoder = require_canonical_hash.pickVideoEncoder;
+exports.pickVideoEncoder = require_composition.pickVideoEncoder;
 exports.pickerForCondition = pickerForCondition;
 exports.pipelineAnalyticsCapability = pipelineAnalyticsCapability;
 exports.pipelineExecutorCapability = pipelineExecutorCapability;
 exports.pipelineOrchestratorCapability = pipelineOrchestratorCapability;
 exports.pipelineRunnerCapability = pipelineRunnerCapability;
 exports.planComposition = planComposition;
+exports.planItems = planItems;
 exports.plateGalleryCapability = plateGalleryCapability;
 exports.platformProbeCapability = platformProbeCapability;
 exports.poolMemoryThreshold = poolMemoryThreshold;
@@ -70015,6 +69900,7 @@ exports.privacyMaskCapability = privacyMaskCapability;
 exports.procedureAuthKey = procedureAuthKey;
 exports.ptzAutotrackCapability = ptzAutotrackCapability;
 exports.ptzCapability = ptzCapability;
+exports.publicEventCategories = require_event_category.publicEventCategories;
 exports.pythonScriptForBackend = pythonScriptForBackend;
 exports.rankStreams = rankStreams;
 exports.readClusterStepModels = readClusterStepModels;
@@ -70033,6 +69919,7 @@ exports.recordingOnboardCapability = recordingOnboardCapability;
 exports.recordingSignalCapability = recordingSignalCapability;
 exports.rectsToCells = rectsToCells;
 exports.reducePoints = reducePoints;
+exports.replacedFieldKeys = replacedFieldKeys;
 exports.requiredTopLevelKeys = requiredTopLevelKeys;
 exports.requiresPython = requiresPython;
 exports.reservedSourceOwner = reservedSourceOwner;
@@ -70059,7 +69946,7 @@ exports.resolveMutate = resolveMutate;
 exports.resolvePoolMemoryPolicy = resolvePoolMemoryPolicy;
 exports.resolveRecordingProfiles = resolveRecordingProfiles;
 exports.resolveRunnerId = resolveRunnerId;
-exports.resolveStreamMaps = require_canonical_hash.resolveStreamMaps;
+exports.resolveStreamMaps = require_composition.resolveStreamMaps;
 exports.resolveVariantModelId = resolveVariantModelId;
 exports.resolveViewableDeviceIds = resolveViewableDeviceIds;
 exports.roleSpec = roleSpec;
@@ -70153,24 +70040,25 @@ exports.terminalSessionCapability = terminalSessionCapability;
 exports.textToHtml = textToHtml;
 exports.timeOfDayToMinutes = timeOfDayToMinutes;
 exports.toDeviceSummary = toDeviceSummary;
-exports.toExpressionValue = toExpressionValue;
+exports.toExpressionValue = require_composition.toExpressionValue;
 exports.toNodeId = require_sleep.toNodeId;
 exports.toStreamSourceEntry = toStreamSourceEntry;
 exports.toastCapability = toastCapability;
 exports.toggleAudioLabel = toggleAudioLabel;
-exports.tokenize = tokenize;
+exports.tokenize = require_composition.tokenize;
 exports.transcodeBody = transcodeBody;
 exports.tryConvertUnit = tryConvertUnit;
 exports.turnProviderCapability = turnProviderCapability;
 exports.unitDimension = unitDimension;
 exports.unitsForDimension = unitsForDimension;
 exports.unreachableExtensionSlotRow = unreachableExtensionSlotRow;
+exports.unwrapSchema = unwrapSchema;
 exports.updateCapability = updateCapability;
 exports.userManagementCapability = userManagementCapability;
 exports.userPasskeysCapability = userPasskeysCapability;
 exports.vacuumControlCapability = vacuumControlCapability;
 exports.validateComposition = validateComposition;
-exports.validateExpressionSource = validateExpressionSource;
+exports.validateExpressionSource = require_composition.validateExpressionSource;
 exports.validateRecipeBounds = validateRecipeBounds;
 exports.valveCapability = valveCapability;
 exports.vectorDimFromBase64 = vectorDimFromBase64;