[New] --json-report list: started_epoch parity across active/stopped/reports; issue #483

[New] _lmd_render_json_list() active[]: emit started + started_epoch
      from _meta_started_hr / _meta_started (already loaded by
      _lifecycle_read_meta).
[New] _lmd_render_json_list() stopped[]: emit started + started_epoch
      + stopped_epoch for symmetry with reports[]; existing stopped_hr
      preserved (no schema break).
[New] tests/31-json-report.bats: 2 BATS cases using synthetic
      scan.meta.* fixtures to assert active[] and stopped[] carry
      started_epoch; stopped[] asserts stopped_epoch.
[Change] CHANGELOG + CHANGELOG.RELEASE: v2.0.1 Bug Fixes — parity entry.

Author: rfxn

CHANGELOG

@@ -336,6 +336,9 @@ v2.0.1 | Mar 25 2026:
       change (existing "started" string preserved); issue #483
 [New] tests: 3 BATS regressions for --json-report list sort order,
       started_epoch field, and legacy-session epoch derivation; issue #483
+[New] --json-report list: active[] and stopped[] entries now include
+      started and started_epoch for consistency with reports[]; stopped[]
+      also gains stopped_epoch alongside existing stopped_hr; issue #483
 
 v1.6.6.1 | Feb 25 2025:
 [Fix] find_recentopts incorrectly escaping find options to the right of ( -mtime .. -ctime ); previously normalized by eval; issue #440, pr#442

CHANGELOG.RELEASE

@@ -336,3 +336,6 @@ v2.0.1 | Mar 25 2026:
       change (existing "started" string preserved); issue #483
 [New] tests: 3 BATS regressions for --json-report list sort order,
       started_epoch field, and legacy-session epoch derivation; issue #483
+[New] --json-report list: active[] and stopped[] entries now include
+      started and started_epoch for consistency with reports[]; stopped[]
+      also gains stopped_epoch alongside existing stopped_hr; issue #483

files/internals/lmd_alert.sh

@@ -721,6 +721,10 @@ _lmd_render_json_list() {
 				_jl_path=$(_json_escape_string "$_meta_path")
 				_jl_engine=$(_json_escape_string "${_meta_engine:--}")
 				_jl_sig=$(_json_escape_string "${_meta_sig_version:--}")
+				local _jl_started_hr _jl_started_ep
+				_jl_started_hr=$(_json_escape_string "${_meta_started_hr:--}")
+				_jl_started_ep="${_meta_started:-0}"
+				[ "$_jl_started_ep" = "-" ] && _jl_started_ep=0
 				local _jl_pid="${_meta_pid:-0}"; [ "$_jl_pid" = "-" ] && _jl_pid=0
 				local _jl_files="${_meta_total_files:-0}"; [ "$_jl_files" = "-" ] && _jl_files=0
 				local _jl_hits="${_meta_hits:-0}"; [ "$_jl_hits" = "-" ] && _jl_hits=0
@@ -734,8 +738,9 @@ _lmd_render_json_list() {
 				local _jl_prog_total="${_meta_progress_total:-0}"; [ "$_jl_prog_total" = "-" ] && _jl_prog_total=0
 				local _jl_eta
 				_jl_eta=$(_lifecycle_compute_eta "${_meta_engine:-}" "$_jl_elapsed" "$_jl_prog_pos" "$_jl_prog_total")
-				printf '\n    {"scan_id": "%s", "state": "%s", "pid": %s, "path": "%s", "engine": "%s", "total_files": %s, "hits": %s, "elapsed": %s, "eta": %s, "workers": %s, "sig_version": "%s", "progress": {"position": %s, "total": %s}}' \
+				printf '\n    {"scan_id": "%s", "state": "%s", "pid": %s, "path": "%s", "started": "%s", "started_epoch": %s, "engine": "%s", "total_files": %s, "hits": %s, "elapsed": %s, "eta": %s, "workers": %s, "sig_version": "%s", "progress": {"position": %s, "total": %s}}' \
 					"$_jl_scanid" "$_jl_state" "$_jl_pid" "$_jl_path" \
+					"$_jl_started_hr" "$_jl_started_ep" \
 					"$_jl_engine" "$_jl_files" "$_jl_hits" "$_jl_elapsed" \
 					"$_jl_eta" "$_jl_workers" "$_jl_sig" \
 					"$_jl_prog_pos" "$_jl_prog_total"
@@ -760,13 +765,22 @@ _lmd_render_json_list() {
 			_jl_sp=$(_json_escape_string "$_meta_path")
 			_jl_sstage=$(_json_escape_string "${_meta_stage:--}")
 			_jl_shr=$(_json_escape_string "${_meta_stopped_hr:-unknown}")
+			local _jl_sstarted_hr _jl_sstarted_ep _jl_sstopped_ep
+			_jl_sstarted_hr=$(_json_escape_string "${_meta_started_hr:--}")
+			_jl_sstarted_ep="${_meta_started:-0}"
+			[ "$_jl_sstarted_ep" = "-" ] && _jl_sstarted_ep=0
+			_jl_sstopped_ep="${_meta_stopped:-0}"
+			[ "$_jl_sstopped_ep" = "-" ] && _jl_sstopped_ep=0
 			local _jl_sfiles="${_meta_total_files:-0}"; [ "$_jl_sfiles" = "-" ] && _jl_sfiles=0
 			local _jl_shits="${_meta_hits:-0}"; [ "$_jl_shits" = "-" ] && _jl_shits=0
 			local _jl_selapsed="${_meta_elapsed:-0}"; [ "$_jl_selapsed" = "-" ] && _jl_selapsed=0
 			local _jl_sworkers="${_meta_workers:-0}"; [ "$_jl_sworkers" = "-" ] && _jl_sworkers=0
-			printf '\n    {"scan_id": "%s", "stage": "%s", "total_files": %s, "hits": %s, "elapsed": %s, "workers": %s, "stopped_hr": "%s", "path": "%s"}' \
-				"$_jl_stopped_sid" "$_jl_sstage" "$_jl_sfiles" "$_jl_shits" \
-				"$_jl_selapsed" "$_jl_sworkers" "$_jl_shr" "$_jl_sp"
+			printf '\n    {"scan_id": "%s", "stage": "%s", "started": "%s", "started_epoch": %s, "total_files": %s, "hits": %s, "elapsed": %s, "workers": %s, "stopped_hr": "%s", "stopped_epoch": %s, "path": "%s"}' \
+				"$_jl_stopped_sid" "$_jl_sstage" \
+				"$_jl_sstarted_hr" "$_jl_sstarted_ep" \
+				"$_jl_sfiles" "$_jl_shits" \
+				"$_jl_selapsed" "$_jl_sworkers" \
+				"$_jl_shr" "$_jl_sstopped_ep" "$_jl_sp"
 		fi
 	done
 

tests/31-json-report.bats

@@ -576,3 +576,102 @@ print(e if e is not None else "MISSING")
         [[ "$got" -gt 4000000000 ]]
     fi
 }
+
+# --- Test 31: active[] carries started + started_epoch ---
+# Regression guard for issue #483 parity extension: active[] must expose
+# an absolute start timestamp, not only elapsed seconds. Uses synthetic
+# scan.meta.* fixture (pattern from tests/39-lifecycle-list.bats:42).
+@test "--json-report list active[] entries include started_epoch" {
+    local sessdir="$LMD_INSTALL/sess"
+    local sid="260418-2359.77771"
+    local _started_epoch
+    _started_epoch=$(date +%s)
+    local _started_hr
+    _started_hr=$(date "+%b %d %Y %H:%M:%S %z")
+    # Fabricate a running scan meta file. Use our own PID for state=running
+    # liveness check in _lifecycle_detect_state — $$ is guaranteed alive.
+    cat > "$sessdir/scan.meta.$sid" <<EOF
+#LMD_META:v1
+pid=$$
+ppid=$PPID
+started=$_started_epoch
+started_hr=$_started_hr
+path=/home/testuser
+total_files=1000
+workers=4
+engine=native
+hashtype=md5
+stages=md5,hex
+sig_version=2026041801
+options=
+state=running
+hits=0
+progress_pos=100
+progress_total=1000
+elapsed=30
+EOF
+    run maldet --json-report list
+    rm -f "$sessdir/scan.meta.$sid"
+    assert_success
+    # Active entry must include the scan_id (proves the synthetic meta was
+    # picked up by the active[] pass), started string, and started_epoch int.
+    assert_output --partial "\"$sid\""
+    assert_output --partial '"started"'
+    assert_output --partial '"started_epoch"'
+    # started_epoch is an unquoted integer matching the value we wrote.
+    [[ "$output" =~ \"started_epoch\":[[:space:]]+$_started_epoch ]]
+}
+
+# --- Test 32: stopped[] carries started + started_epoch + stopped_epoch ---
+# Regression guard for issue #483 parity extension: stopped[] must expose
+# machine-readable start AND stop timestamps (stopped_hr stays for backward
+# compat). Fabricate a stopped scan with matching checkpoint file so
+# _lifecycle_detect_state returns "stopped" and the entry is emitted.
+@test "--json-report list stopped[] entries include started_epoch and stopped_epoch" {
+    local sessdir="$LMD_INSTALL/sess"
+    local sid="260418-2358.77772"
+    local _started_epoch _stopped_epoch
+    _started_epoch=$(( $(date +%s) - 3600 ))
+    _stopped_epoch=$(( $(date +%s) - 1800 ))
+    local _started_hr
+    _started_hr=$(date -d "@$_started_epoch" "+%b %d %Y %H:%M:%S %z")
+    local _stopped_hr
+    _stopped_hr=$(date -d "@$_stopped_epoch" "+%b %d %Y %H:%M:%S %z")
+    # Fabricate stopped meta. pid need not be alive for stopped state.
+    cat > "$sessdir/scan.meta.$sid" <<EOF
+#LMD_META:v1
+pid=1
+ppid=1
+started=$_started_epoch
+started_hr=$_started_hr
+stopped=$_stopped_epoch
+stopped_hr=$_stopped_hr
+path=/home/testuser
+total_files=1000
+workers=4
+engine=native
+hashtype=md5
+stages=md5,hex
+sig_version=2026041801
+options=
+state=stopped
+stage=hex
+hits=0
+progress_pos=500
+progress_total=1000
+elapsed=1800
+EOF
+    # Checkpoint file is REQUIRED for stopped[] enumeration
+    # (_lmd_render_json_list gates on its presence at line ~755).
+    echo "stage=hex" > "$sessdir/scan.checkpoint.$sid"
+    run maldet --json-report list
+    rm -f "$sessdir/scan.meta.$sid" "$sessdir/scan.checkpoint.$sid"
+    assert_success
+    assert_output --partial "\"$sid\""
+    assert_output --partial '"started"'
+    assert_output --partial '"started_epoch"'
+    assert_output --partial '"stopped_hr"'
+    assert_output --partial '"stopped_epoch"'
+    [[ "$output" =~ \"started_epoch\":[[:space:]]+$_started_epoch ]]
+    [[ "$output" =~ \"stopped_epoch\":[[:space:]]+$_stopped_epoch ]]
+}