@camstack/system 1.2.139 → 1.2.140

package/dist/{dist-MqjCyx1E.js → dist-D5Jhh8Vk.js}

@@ -3838,10 +3838,11 @@ var RelocateFootageInputSchema = zod.z.object({
 * `RecordingConfig.enabled` or camera wrapper bindings. */
 var StorageMigrationLeaseInputSchema = zod.z.object({ leaseId: zod.z.string().min(1) });
 var StorageMigrationFootageMoveInputSchema = RelocateFootageInputSchema.extend({ leaseId: zod.z.string().min(1) });
-var StorageMigrationMediaMoveInputSchema = zod.z.object({
+var RelocateMediaInputSchema = zod.z.object({
 	toLocationId: zod.z.string(),
 	throttleMbps: zod.z.number().min(1).max(1e3).optional()
-}).extend({ leaseId: zod.z.string().min(1) });
+});
+var StorageMigrationMediaMoveInputSchema = RelocateMediaInputSchema.extend({ leaseId: zod.z.string().min(1) });
 /** The independently selectable logical storage classes. `recordings`
 * encompasses the high and mid segment profiles; `recordingsLow` is low
 * segments; `eventMedia` is post-analysis blobs. */
@@ -4136,7 +4137,26 @@ var LabelDefinitionSchema = zod.z.object({
 	description: zod.z.string().optional(),
 	icon: zod.z.string().optional()
 });
-var ClassMapDefinitionSchema = zod.z.object({
+/**
+* Wire schema for a per-model CATALOG classMap override
+* (`ModelCatalogEntry.classMap` / `ModelConvertMetadata.classMap`) —
+* restricted to {@link CLASS_MAP_MACRO_TARGETS}, the only macros the
+* detection pipeline executor actually routes.
+*
+* This is deliberately a DIFFERENT, narrower shape than the general-purpose
+* `ClassMapDefinition` interface above (e.g. `IDetectionAddon.getClassMap()`
+* and the audio `YAMNET_TO_MACRO` catalog both use macro targets outside this
+* enum) — the two used to share the name `ClassMapDefinition`/
+* `ClassMapDefinitionSchema`, which made the schema-type-twin guard
+* (`scripts/check-schema-type-twins.ts`) flag them as a duplicated shape. They
+* are not: it is two different concepts colliding on a name. Keep this type
+* under its own name rather than reusing `ClassMapDefinition` — reusing it
+* would either narrow every `ClassMapDefinition` consumer to the four
+* detection macros (breaking `YAMNET_TO_MACRO`) or drop the validation this
+* schema exists for (see the "rejects a classMap whose target is not a
+* detection macro" test in `model-catalog-schema.test.ts`).
+*/
+var DetectionCatalogClassMapSchema = zod.z.object({
 	mapping: zod.z.record(zod.z.string(), zod.z.enum([
 		"person",
 		"vehicle",
@@ -4341,7 +4361,7 @@ var ModelCatalogEntrySchema = zod.z.object({
 	* applies (Frigate / COCO public catalog). Set on a custom model whose raw
 	* labels already ARE the CamStack macros (Scrypted identity map).
 	*/
-	classMap: ClassMapDefinitionSchema.optional()
+	classMap: DetectionCatalogClassMapSchema.optional()
 });
 var ConvertTargetSchema = zod.z.discriminatedUnion("format", [zod.z.object({
 	format: zod.z.literal("openvino"),
@@ -4371,7 +4391,7 @@ var ModelConvertMetadataSchema = zod.z.object({
 		"segmentation"
 	]),
 	faceAlignment: zod.z.boolean().optional(),
-	classMap: ClassMapDefinitionSchema.optional()
+	classMap: DetectionCatalogClassMapSchema.optional()
 });
 var ConvertArtifactSchema = zod.z.object({
 	format: zod.z.enum(MODEL_FORMATS),
@@ -15918,6 +15938,29 @@ var pipelineAnalyticsCapability = {
 			kind: "mutation",
 			auth: "admin"
 		}),
+		/**
+		* Moves event media between locations — the OPERATOR's mover, without the
+		* coordinator's lease. Twin of `recording.relocateFootage`: the same
+		* engine the lease-gated coordinated migration uses
+		* (`startStorageMigrationMove`), armable in the background and WITHOUT
+		* pausing anything. Exists because `eventMedia` was the only storage
+		* class whose only move path went through the recorder's global pause.
+		*/
+		relocateMedia: method(RelocateMediaInputSchema, zod.z.object({ jobId: zod.z.string() }), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/** Every relocate job this addon knows about, newest first (in RAM: the
+		*  move is resumable, so a lost list costs nothing but the display). */
+		listRelocateMediaJobs: method(zod.z.object({}), zod.z.array(RelocateJobSchema).readonly(), {
+			kind: "query",
+			auth: "admin"
+		}),
+		/** Cancel a running or queued relocate job. */
+		cancelRelocateMedia: method(zod.z.object({ jobId: zod.z.string() }), zod.z.object({ cancelled: zod.z.boolean() }), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		listOpsLog: method(OpsLogQueryInputSchema, zod.z.array(OpsLogEntrySchema).readonly(), {
 			kind: "query",
 			auth: "admin"
@@ -16277,6 +16320,11 @@ zod.z.object({
 		"jpeg"
 	])
 });
+/**
+* Process-local frame identity. It is serializable so it can ride an in-process
+* capability call, but `registryId` deliberately prevents resolution in any
+* other process or execution group.
+*/
 var FrameRefSchema = zod.z.object({
 	registryId: zod.z.string().min(1),
 	id: zod.z.string().min(1),
@@ -33972,6 +34020,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineAnalytics.cancelRelocateMedia": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.cancelStorageMigrationMove": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -34146,6 +34200,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.listRelocateMediaJobs": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.listRetrainAnnotations": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -34224,6 +34284,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineAnalytics.relocateMedia": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.restageRetrainTrack": {
 		capName: "pipeline-analytics",
 		capScope: "device",

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-MqjCyx1E.js");
+const require_dist = require("./dist-D5Jhh8Vk.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_formatter = require("./formatter-DqAKDlvN.js");
@@ -26,7 +26,7 @@ require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_file_data_plane = require("./file-data-plane-DO8KbxCe.js");
 const require_tls$1 = require("./tls-u8QCJCFE.js");
-const require_manifest_python_deps = require("./manifest-python-deps-C9x9vrqt.js");
+const require_manifest_python_deps = require("./manifest-python-deps-Bu8H1_rg.js");
 const require_resource_monitor = require("./resource-monitor-CdnzxBLP.js");
 const require_custom_action_registry = require("./custom-action-registry-jY0NOZK8.js");
 let zod = require("zod");
@@ -6410,11 +6410,31 @@ function methodsFor(def) {
 			schema: m,
 			isVoid: require_dist.isVoidInput(m.input),
 			isObject: require_dist.isObjectInput(m.input),
-			callerRequired: m.caller === "required"
+			callerRequired: m.caller === "required",
+			isArrayOutput: m.kind !== "subscription" && require_dist.isArrayOutputSchema(m.output)
 		};
 	});
 }
 /**
+* Invoke `method.name` on a resolved provider, raising the canonical
+* "method not found" error (Task 7.5d) when the provider does not implement
+* it — the naive `provider[method.name]?.(payload)` optional call let a
+* missing method answer `undefined` (200 to the caller). EXCEPTION, mirrored
+* from `child-cap-dispatch.ts`'s `isCollectionListMethod` graceful skip: a
+* COLLECTION cap's array-output method degrades to `[]` — the hub fans that
+* method across every registered provider
+* (`resolveCollectionProvider`/`concatArrayMethod`), so ONE provider not
+* implementing it is a graceful skip, not an error. Every other missing
+* method (singleton, device-native, or a collection's SCALAR method) is a
+* real implementation gap and fails loud.
+*/
+function invokeCapMethod(provider, method, payload, capName, isCollection, services) {
+	const fn = provider[method.name];
+	if (typeof fn === "function") return fn(payload);
+	if (isCollection && method.isArrayOutput) return [];
+	return (services.methodNotFound ?? ((cap, m) => services.badRequest(`Capability "${cap}" has no method "${m}"`)))(capName, method.name);
+}
+/**
 * Extract the authenticated caller identity from the (structurally
 * unknown) tRPC context. The builder cannot import the server's
 * `TrpcContext`, so the read is narrowing-based: `ctx.user.id` (string)
@@ -6534,37 +6554,29 @@ function buildOneCapRouter(def, primitives, services) {
 			}).optional() : zod.z.object({ nodeId: zod.z.string().optional() }).optional();
 			procedures[method.name] = base.input(voidSelector)[procKind](({ input, ctx }) => {
 				const sel = input ?? {};
-				return (nodeIdData ? requireLocal(capName, () => getLocal(ctx, isCollection ? sel.addonId : void 0), services) : resolveProviderForCall(capName, sel.nodeId, () => getLocal(ctx, isCollection ? sel.addonId : void 0), services, isCollection ? sel.addonId : void 0))[method.name]?.();
+				return invokeCapMethod(nodeIdData ? requireLocal(capName, () => getLocal(ctx, isCollection ? sel.addonId : void 0), services) : resolveProviderForCall(capName, sel.nodeId, () => getLocal(ctx, isCollection ? sel.addonId : void 0), services, isCollection ? sel.addonId : void 0), method, void 0, capName, isCollection, services);
 			});
 			continue;
 		}
 		if (method.isObject) {
 			const schema = nodeIdData ? inputSchema : require_dist.looseSchema(inputSchema);
 			procedures[method.name] = base.input(schema)[procKind](({ input, ctx }) => {
-				if (nodeIdData) {
-					const provider = requireLocal(capName, () => getLocal(ctx), services);
-					const payload = method.callerRequired ? injectCaller(stripKeys(input, []).rest, ctx, capName, method.name, services) : input;
-					return provider[method.name]?.(payload);
-				}
+				if (nodeIdData) return invokeCapMethod(requireLocal(capName, () => getLocal(ctx), services), method, method.callerRequired ? injectCaller(stripKeys(input, []).rest, ctx, capName, method.name, services) : input, capName, isCollection, services);
 				if (isCollection) {
 					const { rest, picked } = stripKeys(input, ["nodeId", "addonId"]);
 					const nodeId = typeof picked.nodeId === "string" ? picked.nodeId : void 0;
 					const topLevelAddonId = typeof picked.addonId === "string" ? picked.addonId : void 0;
 					const canRecoverNestedAddonId = !require_dist.isArrayOutputSchema(method.schema.output) && !require_dist.objectInputDeclaresAddonId(method.schema.input);
 					const addonId = topLevelAddonId ?? (canRecoverNestedAddonId ? require_dist.extractNestedAddonId(rest) : void 0);
-					const provider = resolveProviderForCall(capName, nodeId, () => getLocal(ctx, addonId), services, topLevelAddonId);
-					const payload = method.callerRequired ? injectCaller(rest, ctx, capName, method.name, services) : rest;
-					return provider[method.name]?.(payload);
+					return invokeCapMethod(resolveProviderForCall(capName, nodeId, () => getLocal(ctx, addonId), services, topLevelAddonId), method, method.callerRequired ? injectCaller(rest, ctx, capName, method.name, services) : rest, capName, isCollection, services);
 				}
 				const { rest, picked } = stripKeys(input, ["nodeId"]);
-				const provider = resolveProviderForCall(capName, typeof picked.nodeId === "string" ? picked.nodeId : void 0, () => getLocal(ctx), services);
-				const payload = method.callerRequired ? injectCaller(rest, ctx, capName, method.name, services) : rest;
-				return provider[method.name]?.(payload);
+				return invokeCapMethod(resolveProviderForCall(capName, typeof picked.nodeId === "string" ? picked.nodeId : void 0, () => getLocal(ctx), services), method, method.callerRequired ? injectCaller(rest, ctx, capName, method.name, services) : rest, capName, isCollection, services);
 			});
 			continue;
 		}
 		procedures[method.name] = base.input(inputSchema)[procKind](({ input, ctx }) => {
-			return requireLocal(capName, () => getLocal(ctx), services)[method.name]?.(input);
+			return invokeCapMethod(requireLocal(capName, () => getLocal(ctx), services), method, input, capName, isCollection, services);
 		});
 	}
 	return primitives.router(procedures);
@@ -95389,7 +95401,6 @@ Object.defineProperty(exports, "installPythonRequirements", {
 		return _camstack_types_node.installPythonRequirements;
 	}
 });
-exports.ipcChildLink = require_manifest_python_deps.ipcChildLink;
 exports.ipcParentLink = require_manifest_python_deps.ipcParentLink;
 exports.isAddonDeploySource = isAddonDeploySource;
 exports.isArrayOutputSchema = require_dist.isArrayOutputSchema;

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { At as asJsonObject$1, B as extractNestedAddonId, Bt as parseJsonObject, Ct as DEVICE_STATUS_METHOD, Dt as ReadinessRegistry, H as isArrayOutputSchema, Ht as readinessKey, It as expandCapMethods, J as lifecycleJobSchema, K as isVoidInput, Kt as EventCategory$1, Mt as asString$1, Nt as createEvent, Ot as ReadinessTimeoutError, Pt as emitDownForOwnedCaps, Q as looseSchema, St as DEVICE_SETTINGS_CONTRIBUTION_METHODS, U as isCollectionArrayMethod, Ut as resolveCapMount, Vt as parseJsonUnknown$1, W as isObjectInput, Wt as scopeKey, Z as logLevelAtMost, at as resolveMethodAuth, ct as scopesAllowDeviceCap, d as METHOD_ACCESS_MAP, f as RUNTIME_DEFAULTS, it as procedureAuthKey, jt as asNumber, q as kebabToCamel, st as scopesAllowAddon, t as ALL_CAPABILITY_DEFINITIONS, tt as objectInputDeclaresAddonId, xt as DATAPLANE_SECRET_HEADER$1, y as addonSettingsCapability, yt as errMsg$1 } from "./dist-D595vzqY.mjs";
+import { At as asJsonObject$1, B as extractNestedAddonId, Bt as parseJsonObject, Ct as DEVICE_STATUS_METHOD, Dt as ReadinessRegistry, H as isArrayOutputSchema, Ht as readinessKey, It as expandCapMethods, J as lifecycleJobSchema, K as isVoidInput, Kt as EventCategory$1, Mt as asString$1, Nt as createEvent, Ot as ReadinessTimeoutError, Pt as emitDownForOwnedCaps, Q as looseSchema, St as DEVICE_SETTINGS_CONTRIBUTION_METHODS, U as isCollectionArrayMethod, Ut as resolveCapMount, Vt as parseJsonUnknown$1, W as isObjectInput, Wt as scopeKey, Z as logLevelAtMost, at as resolveMethodAuth, ct as scopesAllowDeviceCap, d as METHOD_ACCESS_MAP, f as RUNTIME_DEFAULTS, it as procedureAuthKey, jt as asNumber, q as kebabToCamel, st as scopesAllowAddon, t as ALL_CAPABILITY_DEFINITIONS, tt as objectInputDeclaresAddonId, xt as DATAPLANE_SECRET_HEADER$1, y as addonSettingsCapability, yt as errMsg$1 } from "./dist-Clses4Bs.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";
@@ -25,7 +25,7 @@ import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
 import { a as parseTokenizedUrl, c as collectModelFiles, d as downloadModel, f as ensureModel, h as isModelDownloaded, i as parseRangeHeader, l as deleteModelFromDisk, m as getModelFilePath, n as contentTypeFor, o as resolveFilePath, p as fetchJson, r as createAuthenticatedFileServer, s as ModelDownloadService, t as createFileDataPlaneHandler, u as downloadFile } from "./file-data-plane-BhKdxJgf.mjs";
 import { C as registerLanHttpHandler, S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, b as bindPendingLanHttp, c as loadTlsCert, d as collectCertIdentity, f as CA_VALIDITY_DAYS, g as evaluateExistingCert, h as SERVER_AUTH_OID, i as writeExtraSans, l as reissueTlsLeaf, m as MAX_LEAF_VALIDITY_DAYS, n as readTlsAccessStatus, o as validateUploadedTls, p as LEAF_RENEWAL_WINDOW_DAYS, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, u as CA_COMMON_NAME, v as allFamiliesListenHost, x as closeLanHttp, y as applyLanHttp } from "./tls-CQhPGSJm.mjs";
-import { $ as buildNativeCapProxy, A as createHubCapForwardService, At as buildHeapSample, B as AGENT_CAP_FWD_ACTION, C as brokerTransportLink, Ct as runNpm, D as localProviderLink, Dt as HEAP_WATCH_INTERVAL_MS, E as ipcParentLink, Et as HEAP_RECLAIM_TRIGGER_MB, F as createUdsLogger, Ft as strandedMb, G as callWithServiceDiscovery, H as CapRouteResolver, I as createUdsLoggerWithControl, J as UdsLocalTransportServer, K as createLocalTransport, L as LocalChildClient, M as createUdsEventBridge, Mt as shouldReclaim, N as createUdsEventBus, Nt as startHeapWatch, O as HUB_CAP_FWD_ACTION, Ot as HEAP_WATCH_WARN_RATIO, P as udsChildLogToWorkerEntry, Pt as startRunnerHeapWatch, Q as encodeFrame, R as LocalChildRegistry, S as brokerCallForCap, St as resolveNpmInvocation, T as ipcChildLink, Tt as HEAP_RECLAIM_MIN_INTERVAL_MS, U as CapRouteError, V as AGENT_CAP_FWD_SERVICE, W as classifyCapRoute, X as localEndpointPath, Y as SocketChannel, Z as FrameDecoder, _ as createKernelHwAccel, _t as CapabilityHandle, a as getWorkerDeviceRegistry, b as __resetCapUsageRegistryForTests, bt as installManifestNativeDeps, c as setHubConnected, ct as NATIVE_PROVIDER_SERVICE_INFIX, d as getBrokerEventBus, dt as capBareAction, et as buildUdsNativeCapProxy, f as getMoleculerEventStats, ft as capServiceName, g as AddonDepsManager, gt as DeviceRegistry, h as subscribePassthrough, ht as serializeTypedArrays, i as createUdsAddonContext, it as mountNativeCapService, j as createParentUnownedCallHandler, jt as createV8Reclaimer, k as HUB_CAP_FWD_SERVICE, kt as RUNNER_HEAP_WATCH_INTERVAL_MS, l as EVENT_TOPIC_PREFIX, lt as capActionName, m as setNodeEventInterest, mt as deserializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as createAddonService, p as registerEventBusService, pt as parseCapAction, q as UdsLocalTransportClient, r as createAddonContext, s as getOrInitReadinessRegistryForClient, st as validateProviderRegistrations, t as installManifestPythonDeps, tt as createBrokerDeviceManagerApi, u as clusterEventTopic, ut as capActionSuffix, v as resolveHwAccel, vt as CapabilityUnavailableError, w as buildLinkChain, wt as createAddonDataPlaneFacility, x as getCapUsageRegistry, xt as resolveAddonClass, y as CapUsageRegistry, yt as copyBundledNativeModules, z as UDS_NO_ROUTE_PREFIX } from "./manifest-python-deps-08rqn6xN.mjs";
+import { $ as buildUdsNativeCapProxy, A as createParentUnownedCallHandler, At as createV8Reclaimer, B as AGENT_CAP_FWD_SERVICE, C as brokerTransportLink, Ct as createAddonDataPlaneFacility, D as HUB_CAP_FWD_ACTION, Dt as HEAP_WATCH_WARN_RATIO, E as localProviderLink, Et as HEAP_WATCH_INTERVAL_MS, F as createUdsLoggerWithControl, G as createLocalTransport, H as CapRouteError, I as LocalChildClient, J as SocketChannel, K as UdsLocalTransportClient, L as LocalChildRegistry, M as createUdsEventBus, Mt as startHeapWatch, N as udsChildLogToWorkerEntry, Nt as startRunnerHeapWatch, O as HUB_CAP_FWD_SERVICE, Ot as RUNNER_HEAP_WATCH_INTERVAL_MS, P as createUdsLogger, Pt as strandedMb, Q as buildNativeCapProxy, R as UDS_NO_ROUTE_PREFIX, S as brokerCallForCap, St as runNpm, T as ipcParentLink, Tt as HEAP_RECLAIM_TRIGGER_MB, U as classifyCapRoute, V as CapRouteResolver, W as callWithServiceDiscovery, X as FrameDecoder, Y as localEndpointPath, Z as encodeFrame, _ as createKernelHwAccel, _t as CapabilityUnavailableError, a as getWorkerDeviceRegistry, at as createAddonService, b as __resetCapUsageRegistryForTests, bt as resolveAddonClass, c as setHubConnected, ct as capActionName, d as getBrokerEventBus, dt as capServiceName, et as createBrokerDeviceManagerApi, f as getMoleculerEventStats, ft as parseCapAction, g as AddonDepsManager, gt as CapabilityHandle, h as subscribePassthrough, ht as DeviceRegistry, i as createUdsAddonContext, j as createUdsEventBridge, jt as shouldReclaim, k as createHubCapForwardService, kt as buildHeapSample, l as EVENT_TOPIC_PREFIX, lt as capActionSuffix, m as setNodeEventInterest, mt as serializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as validateProviderRegistrations, p as registerEventBusService, pt as deserializeTypedArrays, q as UdsLocalTransportServer, r as createAddonContext, rt as mountNativeCapService, s as getOrInitReadinessRegistryForClient, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestPythonDeps, u as clusterEventTopic, ut as capBareAction, v as resolveHwAccel, vt as copyBundledNativeModules, w as buildLinkChain, wt as HEAP_RECLAIM_MIN_INTERVAL_MS, x as getCapUsageRegistry, xt as resolveNpmInvocation, y as CapUsageRegistry, yt as installManifestNativeDeps, z as AGENT_CAP_FWD_ACTION } from "./manifest-python-deps-Dxifi-o0.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-BWmQ5i-o.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-F__gp_VX.mjs";
 import { z } from "zod";
@@ -6403,11 +6403,31 @@ function methodsFor(def) {
 			schema: m,
 			isVoid: isVoidInput(m.input),
 			isObject: isObjectInput(m.input),
-			callerRequired: m.caller === "required"
+			callerRequired: m.caller === "required",
+			isArrayOutput: m.kind !== "subscription" && isArrayOutputSchema(m.output)
 		};
 	});
 }
 /**
+* Invoke `method.name` on a resolved provider, raising the canonical
+* "method not found" error (Task 7.5d) when the provider does not implement
+* it — the naive `provider[method.name]?.(payload)` optional call let a
+* missing method answer `undefined` (200 to the caller). EXCEPTION, mirrored
+* from `child-cap-dispatch.ts`'s `isCollectionListMethod` graceful skip: a
+* COLLECTION cap's array-output method degrades to `[]` — the hub fans that
+* method across every registered provider
+* (`resolveCollectionProvider`/`concatArrayMethod`), so ONE provider not
+* implementing it is a graceful skip, not an error. Every other missing
+* method (singleton, device-native, or a collection's SCALAR method) is a
+* real implementation gap and fails loud.
+*/
+function invokeCapMethod(provider, method, payload, capName, isCollection, services) {
+	const fn = provider[method.name];
+	if (typeof fn === "function") return fn(payload);
+	if (isCollection && method.isArrayOutput) return [];
+	return (services.methodNotFound ?? ((cap, m) => services.badRequest(`Capability "${cap}" has no method "${m}"`)))(capName, method.name);
+}
+/**
 * Extract the authenticated caller identity from the (structurally
 * unknown) tRPC context. The builder cannot import the server's
 * `TrpcContext`, so the read is narrowing-based: `ctx.user.id` (string)
@@ -6527,37 +6547,29 @@ function buildOneCapRouter(def, primitives, services) {
 			}).optional() : z.object({ nodeId: z.string().optional() }).optional();
 			procedures[method.name] = base.input(voidSelector)[procKind](({ input, ctx }) => {
 				const sel = input ?? {};
-				return (nodeIdData ? requireLocal(capName, () => getLocal(ctx, isCollection ? sel.addonId : void 0), services) : resolveProviderForCall(capName, sel.nodeId, () => getLocal(ctx, isCollection ? sel.addonId : void 0), services, isCollection ? sel.addonId : void 0))[method.name]?.();
+				return invokeCapMethod(nodeIdData ? requireLocal(capName, () => getLocal(ctx, isCollection ? sel.addonId : void 0), services) : resolveProviderForCall(capName, sel.nodeId, () => getLocal(ctx, isCollection ? sel.addonId : void 0), services, isCollection ? sel.addonId : void 0), method, void 0, capName, isCollection, services);
 			});
 			continue;
 		}
 		if (method.isObject) {
 			const schema = nodeIdData ? inputSchema : looseSchema(inputSchema);
 			procedures[method.name] = base.input(schema)[procKind](({ input, ctx }) => {
-				if (nodeIdData) {
-					const provider = requireLocal(capName, () => getLocal(ctx), services);
-					const payload = method.callerRequired ? injectCaller(stripKeys(input, []).rest, ctx, capName, method.name, services) : input;
-					return provider[method.name]?.(payload);
-				}
+				if (nodeIdData) return invokeCapMethod(requireLocal(capName, () => getLocal(ctx), services), method, method.callerRequired ? injectCaller(stripKeys(input, []).rest, ctx, capName, method.name, services) : input, capName, isCollection, services);
 				if (isCollection) {
 					const { rest, picked } = stripKeys(input, ["nodeId", "addonId"]);
 					const nodeId = typeof picked.nodeId === "string" ? picked.nodeId : void 0;
 					const topLevelAddonId = typeof picked.addonId === "string" ? picked.addonId : void 0;
 					const canRecoverNestedAddonId = !isArrayOutputSchema(method.schema.output) && !objectInputDeclaresAddonId(method.schema.input);
 					const addonId = topLevelAddonId ?? (canRecoverNestedAddonId ? extractNestedAddonId(rest) : void 0);
-					const provider = resolveProviderForCall(capName, nodeId, () => getLocal(ctx, addonId), services, topLevelAddonId);
-					const payload = method.callerRequired ? injectCaller(rest, ctx, capName, method.name, services) : rest;
-					return provider[method.name]?.(payload);
+					return invokeCapMethod(resolveProviderForCall(capName, nodeId, () => getLocal(ctx, addonId), services, topLevelAddonId), method, method.callerRequired ? injectCaller(rest, ctx, capName, method.name, services) : rest, capName, isCollection, services);
 				}
 				const { rest, picked } = stripKeys(input, ["nodeId"]);
-				const provider = resolveProviderForCall(capName, typeof picked.nodeId === "string" ? picked.nodeId : void 0, () => getLocal(ctx), services);
-				const payload = method.callerRequired ? injectCaller(rest, ctx, capName, method.name, services) : rest;
-				return provider[method.name]?.(payload);
+				return invokeCapMethod(resolveProviderForCall(capName, typeof picked.nodeId === "string" ? picked.nodeId : void 0, () => getLocal(ctx), services), method, method.callerRequired ? injectCaller(rest, ctx, capName, method.name, services) : rest, capName, isCollection, services);
 			});
 			continue;
 		}
 		procedures[method.name] = base.input(inputSchema)[procKind](({ input, ctx }) => {
-			return requireLocal(capName, () => getLocal(ctx), services)[method.name]?.(input);
+			return invokeCapMethod(requireLocal(capName, () => getLocal(ctx), services), method, input, capName, isCollection, services);
 		});
 	}
 	return primitives.router(procedures);
@@ -95101,4 +95113,4 @@ var LifecycleJobEngine = class {
 	}
 };
 //#endregion
-export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CA_COMMON_NAME, CA_VALIDITY_DAYS, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DEFAULT_LAN_HTTP_PORT, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LEAF_RENEWAL_WINDOW_DAYS, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LokiDestination, LokiLoggingAddon, MAX_LEAF_VALIDITY_DAYS, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, QUARANTINE_DIRNAME, RESTART_MARKER_FILE, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, SERVER_AUTH_OID, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, addonSettingsCapability, allFamiliesListenHost, applyLanHttp, bindPendingLanHttp, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, canServeDataPlane, capActionName, capActionSuffix, capBareAction, capServiceName, classifyAddonDir, classifyCapRoute, clearPendingRestart, closeLanHttp, clusterEventTopic, clusterSecretMatches, collectCertIdentity, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createDoorSettingsView, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, evaluateExistingCert, expandCapMethods, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcChildLink, ipcParentLink, isAddonDeploySource, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, isolatedBuiltinPhase, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, partitionIsolatedBuiltinIds, proxyToUpstream, quarantineAddonResidue, readExtraSans, readLanHttpState, readPendingRestart, readTlsAccessStatus, readTlsMode, readinessKey, registerEventBusService, registerLanHttpHandler, reissueTlsLeaf, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runHubAddonBoot, runNpm, scheduleSelfRestart, scopeKey, scopesAllowAddon, scopesAllowDeviceCap, selectAddonResidue, serializeTypedArrays, setHubConnected, setNodeEventInterest, shouldReclaim, startHeapWatch, startRunnerHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, validateUploadedTls, waitUntilReady, writeExtraSans, writePendingRestart, writeTlsMode };
+export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CA_COMMON_NAME, CA_VALIDITY_DAYS, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DEFAULT_LAN_HTTP_PORT, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LEAF_RENEWAL_WINDOW_DAYS, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LokiDestination, LokiLoggingAddon, MAX_LEAF_VALIDITY_DAYS, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, QUARANTINE_DIRNAME, RESTART_MARKER_FILE, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, SERVER_AUTH_OID, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, addonSettingsCapability, allFamiliesListenHost, applyLanHttp, bindPendingLanHttp, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, canServeDataPlane, capActionName, capActionSuffix, capBareAction, capServiceName, classifyAddonDir, classifyCapRoute, clearPendingRestart, closeLanHttp, clusterEventTopic, clusterSecretMatches, collectCertIdentity, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createDoorSettingsView, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, evaluateExistingCert, expandCapMethods, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcParentLink, isAddonDeploySource, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, isolatedBuiltinPhase, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, partitionIsolatedBuiltinIds, proxyToUpstream, quarantineAddonResidue, readExtraSans, readLanHttpState, readPendingRestart, readTlsAccessStatus, readTlsMode, readinessKey, registerEventBusService, registerLanHttpHandler, reissueTlsLeaf, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runHubAddonBoot, runNpm, scheduleSelfRestart, scopeKey, scopesAllowAddon, scopesAllowDeviceCap, selectAddonResidue, serializeTypedArrays, setHubConnected, setNodeEventInterest, shouldReclaim, startHeapWatch, startRunnerHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, validateUploadedTls, waitUntilReady, writeExtraSans, writePendingRestart, writeTlsMode };

package/dist/kernel/cap-router-builder.d.ts

@@ -91,6 +91,19 @@ export interface CapRouterServices {
      * fallthrough rather than crashing.
      */
     readonly rejectUnresolvedAddonPin?: (capName: string, addonId: string) => void;
+    /**
+     * Raise the canonical error for a resolved provider that does NOT
+     * implement `method` (Task 7.5d). Before this existed the router called
+     * `provider[method.name]?.(payload)` — an optional call that let a missing
+     * method answer `undefined`, which tRPC serializes as a 200. The UDS child
+     * dispatcher (`child-cap-dispatch.ts`) hits the SAME condition (a provider
+     * missing a method) and THROWS; two authorities disagreeing about the same
+     * defect is worse than either alone, and the hub's silence is the one a
+     * caller cannot detect. OPTIONAL for framework-live-update version skew: an
+     * older server hands a services object without it; the builder falls back
+     * to `badRequest` so the call still fails closed instead of answering 200.
+     */
+    readonly methodNotFound?: (capName: string, method: string) => never;
 }
 /**
  * Build a single capability's router (the runtime equivalent of one

package/dist/kernel/index.d.ts

@@ -65,7 +65,7 @@ export type { HubServiceDeps } from './moleculer/hub-service.js';
 export { createBrokerDeviceManagerApi, buildNativeCapProxy, buildUdsNativeCapProxy, mountNativeCapService, NATIVE_PROVIDER_SERVICE_INFIX, } from './moleculer/device-cap-proxy.js';
 export type { WorkerDeviceManagerOptions } from './moleculer/device-cap-proxy.js';
 export { getWorkerDeviceRegistry } from './moleculer/addon-context-factory.js';
-export { localProviderLink, brokerTransportLink, ipcChildLink, ipcParentLink, buildLinkChain, brokerCallForCap, } from './moleculer/trpc-links.js';
+export { localProviderLink, brokerTransportLink, ipcParentLink, buildLinkChain, brokerCallForCap, } from './moleculer/trpc-links.js';
 export type { LocalProviderResolver, BrokerCapCallOpts } from './moleculer/trpc-links.js';
 export { createProcessService } from './moleculer/process-service.js';
 export type { ProcessInfo } from './moleculer/process-service.js';

package/dist/kernel/moleculer/trpc-links.d.ts

@@ -1,7 +1,7 @@
 import { TRPCLink } from '@trpc/client';
 import { AnyRouter } from '@trpc/server';
 import { ServiceBroker } from 'moleculer';
-import { CapCallInput, LocalChildRegistry } from '../transport/index.js';
+import { CapCallInput } from '../transport/index.js';
 /**
  * Resolver for in-process capability providers.
  *
@@ -171,17 +171,6 @@ export interface BrokerTransportLinkOptions {
     readonly discoveryTimeoutMs?: number;
 }
 export declare function brokerTransportLink<TRouter extends AnyRouter>(broker: ServiceBroker, serviceMap?: Readonly<Record<string, string>>, observerOpts?: CapUsageObserverOptions, linkOptions?: BrokerTransportLinkOptions): TRPCLink<TRouter>;
-/**
- * Middle link that routes a cap op to a LOCAL addon-runner over UDS via the
- * `LocalChildRegistry`. If no local child owns `(capName, deviceId?)`, the op
- * passes through to `next(op)` (e.g. `brokerTransportLink` for remote agents),
- * so this link is transparent for everything it does not own.
- *
- * `deviceId` for device-scoped caps is read from `op.input` (the same place
- * the codegen'd device-scoped routers carry it); the full `op.input` is
- * forwarded as the child method's argument.
- */
-export declare function ipcChildLink<TRouter extends AnyRouter>(registry: LocalChildRegistry): TRPCLink<TRouter>;
 /**
  * Middle link that routes a child addon's outbound `ctx.api` cap call to the
  * parent hub over UDS via `callOut` (obtained at call-time so the child can

package/dist/kernel/transport/cap-route-resolver.d.ts

@@ -114,6 +114,19 @@ export interface AgentCapForwardParams {
      */
     readonly childId?: string;
     readonly deviceId?: number;
+    /**
+     * Out-of-band PROVIDER-selection hint — the twin of `CapCallMessage.addonId`
+     * (Task 7.5a). A GROUPED runner (`execution.group`) on an AGENT can host two
+     * co-located addons registering the SAME collection cap, exactly like the
+     * hub-local-uds case (`LocalChildRegistry.toCapCall`'s `addonId`, threaded by
+     * `buildCapCallFn`'s hub-local branch). Before this field existed, the hub had
+     * no channel to carry the selector across the hub→agent envelope — grouped-
+     * runner provider selection worked on the hub and silently fell back to
+     * "whichever provider is first" on an agent. Absent → the agent dispatch falls
+     * back to its sole provider for the cap (same fallback `child-cap-dispatch.ts`
+     * already has for a call that never carried the hint).
+     */
+    readonly addonId?: string;
 }
 /** The Moleculer service name that Task 6's agent registers. */
 export declare const AGENT_CAP_FWD_SERVICE: "$agent-cap-fwd";
@@ -170,7 +183,18 @@ export declare class CapRouteResolver {
      * caller then falls through to its remote-resolution branch.
      */
     resolveHubLocalUdsRoute(capName: string, deviceId?: number): HubLocalUdsRoute | null;
-    dispatch(route: CapRoute, method: string, args: unknown): Promise<unknown>;
+    /**
+     * @param addonId Optional out-of-band PROVIDER-selection hint (Task 7.5a):
+     *   the addonId of the provider the CALLER already resolved (e.g.
+     *   `buildCapCallFn`'s `deps.addonId` for a registered grouped-runner
+     *   provider). Only meaningful for `agent-child-forward` — a `remote-moleculer`
+     *   route already encodes the provider in its action name
+     *   (`${addonId}.${cap}.${method}`, via `NodeCapAuthority.getAddonId`), and a
+     *   `hub-local-uds` caller that already knows the addonId (`buildCapCallFn`)
+     *   talks to `LocalChildRegistry.callCapOnChild` directly rather than through
+     *   `dispatch`.
+     */
+    dispatch(route: CapRoute, method: string, args: unknown, addonId?: string): Promise<unknown>;
     /**
      * Inner dispatch: may throw CapRouteError (validation failures) or arbitrary
      * transport errors. The outer `dispatch` wraps non-CapRouteErrors.

package/dist/{manifest-python-deps-C9x9vrqt.js → manifest-python-deps-Bu8H1_rg.js}

@@ -4796,9 +4796,20 @@ var CapRouteResolver = class {
 			childId
 		};
 	}
-	async dispatch(route, method, args) {
+	/**
+	* @param addonId Optional out-of-band PROVIDER-selection hint (Task 7.5a):
+	*   the addonId of the provider the CALLER already resolved (e.g.
+	*   `buildCapCallFn`'s `deps.addonId` for a registered grouped-runner
+	*   provider). Only meaningful for `agent-child-forward` — a `remote-moleculer`
+	*   route already encodes the provider in its action name
+	*   (`${addonId}.${cap}.${method}`, via `NodeCapAuthority.getAddonId`), and a
+	*   `hub-local-uds` caller that already knows the addonId (`buildCapCallFn`)
+	*   talks to `LocalChildRegistry.callCapOnChild` directly rather than through
+	*   `dispatch`.
+	*/
+	async dispatch(route, method, args, addonId) {
 		try {
-			return await this.dispatchInner(route, method, args);
+			return await this.dispatchInner(route, method, args, addonId);
 		} catch (err) {
 			if (err instanceof CapRouteError) throw err;
 			const nodeId = this.routeNodeId(route);
@@ -4817,7 +4828,7 @@ var CapRouteResolver = class {
 	* Inner dispatch: may throw CapRouteError (validation failures) or arbitrary
 	* transport errors. The outer `dispatch` wraps non-CapRouteErrors.
 	*/
-	async dispatchInner(route, method, args) {
+	async dispatchInner(route, method, args, addonId) {
 		switch (route.kind) {
 			case "hub-in-process": return route.ref.invoke(method, args);
 			case "hub-local-uds": {
@@ -4863,7 +4874,8 @@ var CapRouteResolver = class {
 					method,
 					args,
 					...route.childId !== void 0 ? { childId: route.childId } : {},
-					...deviceId !== void 0 ? { deviceId } : {}
+					...deviceId !== void 0 ? { deviceId } : {},
+					...addonId !== void 0 ? { addonId } : {}
 				};
 				return callWithServiceDiscovery(this.broker, AGENT_CAP_FWD_SERVICE, AGENT_CAP_FWD_ACTION, params, {
 					nodeID: route.agentNodeId,
@@ -6448,45 +6460,6 @@ function brokerTransportLink(broker, serviceMap, observerOpts, linkOptions) {
 	};
 }
 /**
-* Middle link that routes a cap op to a LOCAL addon-runner over UDS via the
-* `LocalChildRegistry`. If no local child owns `(capName, deviceId?)`, the op
-* passes through to `next(op)` (e.g. `brokerTransportLink` for remote agents),
-* so this link is transparent for everything it does not own.
-*
-* `deviceId` for device-scoped caps is read from `op.input` (the same place
-* the codegen'd device-scoped routers carry it); the full `op.input` is
-* forwarded as the child method's argument.
-*/
-function ipcChildLink(registry) {
-	return () => {
-		return ({ op, next }) => {
-			const parsed = parsePath(op.path);
-			if (!parsed) return next(op);
-			const input = op.input;
-			const inputObj = input && typeof input === "object" && !Array.isArray(input) ? input : null;
-			const deviceId = inputObj && typeof inputObj.deviceId === "number" ? inputObj.deviceId : void 0;
-			if (registry.resolveChildId(parsed.capName, deviceId) === null) return next(op);
-			return observable((observer) => {
-				registry.callCap({
-					capName: parsed.capName,
-					method: parsed.method,
-					args: op.input,
-					deviceId
-				}).then((data) => {
-					observer.next({ result: {
-						type: "data",
-						data
-					} });
-					observer.complete();
-				}).catch((cause) => {
-					observer.error(_trpc_client.TRPCClientError.from(cause instanceof Error ? cause : new Error(String(cause))));
-				});
-				return () => {};
-			});
-		};
-	};
-}
-/**
 * Middle link that routes a child addon's outbound `ctx.api` cap call to the
 * parent hub over UDS via `callOut` (obtained at call-time so the child can
 * reconnect without rebuilding its tRPC client).
@@ -8581,12 +8554,6 @@ Object.defineProperty(exports, "installManifestPythonDeps", {
 		return installManifestPythonDeps;
 	}
 });
-Object.defineProperty(exports, "ipcChildLink", {
-	enumerable: true,
-	get: function() {
-		return ipcChildLink;
-	}
-});
 Object.defineProperty(exports, "ipcParentLink", {
 	enumerable: true,
 	get: function() {