@camstack/system 1.2.443 → 1.2.445

package/assets/record-entries/icon.svg

@@ -0,0 +1,8 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="#0d9488" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+  <path d="M8 6h13"/>
+  <path d="M8 12h13"/>
+  <path d="M8 18h13"/>
+  <path d="M3 6h.01"/>
+  <path d="M3 12h.01"/>
+  <path d="M3 18h.01"/>
+</svg>

package/dist/addon-runner.js

@@ -2895,9 +2895,10 @@ var PeerAnsweredError = class extends Error {
 *    keychain owner-checks on this field, and until 2026-10-08 an unstamped
 *    call let a child's own `callerAddonId` through untouched.
 *
-* A hub in-process caller never reaches this function (`localProviderLink`
-* calls the provider directly), which is the one place a stated identity is
-* trusted. A non-object `args` (or `null`/array) is returned unchanged: there
+* Hub-main in-process contexts that bypass tRPC (addon-registry's stated
+* transports) never reach this function. Co-located broker/agent callers
+* stamp here inside `localProviderLink` before the zero-copy invoke.
+* A non-object `args` (or `null`/array) is returned unchanged: there
 * is nowhere to attach a key, and nowhere one could hide.
 */
 function stampCallerAddonId(args, callerAddonId) {
@@ -5319,6 +5320,29 @@ var CapabilityHandle = class {
 	}
 };
 //#endregion
+//#region src/kernel/moleculer/records-api-transport.ts
+function recordsTransportOf(api) {
+	const r = api.records;
+	return {
+		declareKinds: (input) => r.declareKinds.mutate(input),
+		get: (input) => r.get.query(input),
+		getMany: (input) => r.getMany.query(input),
+		secretRefs: (input) => r.secretRefs.query(input),
+		put: (input) => r.put.mutate(input),
+		putMany: (input) => r.putMany.mutate(input),
+		patch: (input) => r.patch.mutate(input),
+		delete: (input) => r.delete.mutate(input),
+		deleteMany: (input) => r.deleteMany.mutate(input),
+		query: (input) => r.query.query(input),
+		count: (input) => r.count.query(input),
+		histogram: (input) => r.histogram.query(input),
+		aggregate: (input) => r.aggregate.query(input),
+		deleteWhere: (input) => r.deleteWhere.mutate(input),
+		deleteDevice: (input) => r.deleteDevice.mutate(input),
+		allocateId: (input) => r.allocateId.mutate(input)
+	};
+}
+//#endregion
 //#region src/kernel/moleculer/children-batch-loader.ts
 /**
 * Narrow an untyped cap answer to the fields the reconcile reads.
@@ -5667,6 +5691,9 @@ function getWorkerNativeCapProvider(capName, deviceId) {
 	if (typeof raw !== "object" || Array.isArray(raw)) return void 0;
 	return raw;
 }
+function deviceHasStreamSources(device) {
+	return typeof Reflect.get(device, "getStreamSources") === "function";
+}
 function buildDeviceOpsProvider(device) {
 	const assertMatch = (incoming) => {
 		if (incoming !== device.id) throw new Error(`device-ops: deviceId mismatch — expected '${device.id}', got '${incoming}'`);
@@ -5674,9 +5701,8 @@ function buildDeviceOpsProvider(device) {
 	return {
 		getStreamSources: async (input) => {
 			assertMatch(input.deviceId);
-			const maybeCamera = device;
-			if (typeof maybeCamera.getStreamSources !== "function") return [];
-			return [...await maybeCamera.getStreamSources()];
+			if (!deviceHasStreamSources(device)) return [];
+			return [...await device.getStreamSources()];
 		},
 		getConfigEntries: async (input) => {
 			assertMatch(input.deviceId);
@@ -5726,7 +5752,7 @@ function createBrokerDeviceManagerApi(opts) {
 	const { api, addonId, nodeId, eventBus, registry } = opts;
 	const deviceSliceSource = (0, _camstack_types_addon.createEventBusSliceSource)({
 		eventBus,
-		api
+		api: (0, _camstack_types_addon.addonSliceHandleApi)(api)
 	});
 	let selfApi;
 	const childrenLoader = createChildrenBatchLoader({
@@ -5814,15 +5840,14 @@ function createBrokerDeviceManagerApi(opts) {
 				}
 				const finalProvider = (() => {
 					if (!cap.status || !cap.runtimeState || !runtimeStateRef) return provider;
-					const asRecord = provider;
-					if (typeof asRecord["getStatus"] === "function") return provider;
+					if (typeof Reflect.get(provider, "getStatus") === "function") return provider;
 					const rsRef = runtimeStateRef;
 					const defaultGetStatus = async ({ deviceId: dId }) => {
 						if (typeof dId === "number" && dId !== id) return null;
 						return rsRef.getCapState(cap.name) ?? null;
 					};
 					return {
-						...asRecord,
+						...provider,
 						getStatus: defaultGetStatus
 					};
 				})();
@@ -7380,8 +7405,9 @@ function localProviderLink(resolver, observerOpts) {
 			const fn = Reflect.get(provider, parsed.method);
 			if (typeof fn !== "function") return next(opWithDefaults);
 			if (observerOpts) recordCapUsage(observerOpts, parsed.capName, parsed.method);
+			const localInput = _camstack_types_addon.CALLER_STAMPED_CAPABILITIES.includes(parsed.capName) ? stampCallerAddonId(opWithDefaults.input, observerOpts?.callerAddonId) : opWithDefaults.input;
 			return observable((observer) => {
-				Promise.resolve(fn.call(provider, opWithDefaults.input)).then((data) => {
+				Promise.resolve(fn.call(provider, localInput)).then((data) => {
 					observer.next({ result: {
 						type: "data",
 						data
@@ -7398,7 +7424,7 @@ function localProviderLink(resolver, observerOpts) {
 function findServiceCandidates(broker, capName, method, forceServiceName) {
 	const actionSuffix = capActionSuffix(capName, method);
 	const bareAction = capBareAction(capName, method);
-	const services = broker.registry?.getServiceList?.({
+	const services = Reflect.get(broker, "registry")?.getServiceList?.({
 		onlyAvailable: true,
 		withActions: true
 	}) ?? [];
@@ -8432,7 +8458,11 @@ function createAddonPeerBytesFacility(args) {
 					res.destroy();
 				}, Math.max(1e3, Math.floor(stallMs / 4)));
 				stallTimer.unref();
-				const ended = await Promise.race([(0, node_events.once)(stream, "end").then(() => true), (0, node_events.once)(res, "close").then(() => false)]).catch(() => false);
+				const ended = await Promise.race([(0, node_events.once)(stream, "end").then(() => true), new Promise((resolve) => {
+					res.once("close", () => {
+						resolve(false);
+					});
+				})]).catch(() => false);
 				clearInterval(stallTimer);
 				if (ended) {
 					args.logger.info("peer-bytes: body sent", {
@@ -8742,6 +8772,10 @@ var AddonDepsManager = class {
 };
 //#endregion
 //#region src/kernel/moleculer/event-bus.ts
+/** Documented boundary: CamStack brokers are always `createBroker` products. */
+function asBrokerLike(broker) {
+	return broker;
+}
 /**
 * Topic prefix for clustered EventBus broadcasts. The `camstack.evt.`
 * namespace keeps our events disjoint from Moleculer internal events
@@ -8914,14 +8948,13 @@ function acceptInboundCrossNode(broker, category) {
 function registerEventBusService(broker) {
 	if (eventBusServiceInstalled.has(broker)) return;
 	eventBusServiceInstalled.add(broker);
-	const bkr = broker;
 	try {
-		bkr.createService({
+		broker.createService({
 			name: "$event-bus",
 			events: { [EVENT_TOPIC_WILDCARD](ctx) {
 				const event = ctx.params;
 				if (!event) return;
-				if (event.sourceNodeId === bkr.nodeID) return;
+				if (event.sourceNodeId === broker.nodeID) return;
 				if (!acceptInboundCrossNode(broker, event.category)) return;
 				deliverShared(getSharedBusState(broker), event);
 			} }
@@ -8929,7 +8962,7 @@ function registerEventBusService(broker) {
 	} catch (err) {
 		const msg = err instanceof Error ? err.message : String(err);
 		try {
-			bkr.logger?.warn?.(`[event-bus] failed to register $event-bus service: ${msg}`);
+			broker.logger?.warn?.(`[event-bus] failed to register $event-bus service: ${msg}`);
 		} catch {}
 	}
 }
@@ -8941,7 +8974,6 @@ function registerEventBusService(broker) {
 *   nothing and `getRecent` returns `[]`. Events are one-shot everywhere else.
 */
 function getBrokerEventBus(broker, options) {
-	const bkr = broker;
 	const state = getSharedBusState(broker, options?.retainRecent ?? false);
 	registerEventBusService(broker);
 	const warnTimestamps = (() => {
@@ -8956,19 +8988,19 @@ function getBrokerEventBus(broker, options) {
 		emit(event) {
 			const enriched = {
 				...event,
-				sourceNodeId: bkr.nodeID
+				sourceNodeId: broker.nodeID
 			};
 			deliverShared(state, enriched);
 			const topic = clusterEventTopic(event.category);
 			try {
-				bkr.broadcast(topic, enriched);
+				broker.broadcast(topic, enriched);
 			} catch (err) {
 				const cat = event.category;
 				const now = Date.now();
 				if (now - (warnTimestamps.get(`broadcast:${cat}`) ?? 0) > 6e4) {
 					warnTimestamps.set(`broadcast:${cat}`, now);
 					try {
-						bkr.logger?.warn?.(`[event-bus] broker.broadcast('${topic}') failed for category="${cat}" nodeID="${bkr.nodeID}": ${err instanceof Error ? err.message : String(err)}`);
+						broker.logger?.warn?.(`[event-bus] broker.broadcast('${topic}') failed for category="${cat}" nodeID="${broker.nodeID}": ${err instanceof Error ? err.message : String(err)}`);
 					} catch {}
 				}
 			}
@@ -9118,7 +9150,7 @@ function setPreferredProvider(capabilityName, addonId, brokerNodeId = "hub") {
 */
 var bindingSubscriberInstalled = /* @__PURE__ */ new Set();
 function ensureBindingSubscription(broker) {
-	const bkr = broker;
+	const bkr = asBrokerLike(broker);
 	if (bindingSubscriberInstalled.has(bkr.nodeID)) return;
 	bindingSubscriberInstalled.add(bkr.nodeID);
 	const handler = (payload) => {
@@ -9178,7 +9210,7 @@ var READINESS_RECONCILE_INTERVAL_MS = 6e4;
 * entries already observed locally.
 */
 function getOrInitReadinessRegistry(broker, eventBus, logger) {
-	const bkr = broker;
+	const bkr = asBrokerLike(broker);
 	const existing = brokerReadinessRegistries.get(broker);
 	if (existing) return existing;
 	const registry = new _camstack_types_addon.ReadinessRegistry({
@@ -9306,8 +9338,8 @@ function getOrInitReadinessRegistryForClient(client, eventBus, logger, nodeId) {
 function buildCapabilitiesAccess(broker, localRegs) {
 	const collectRemoteEntries = (capName) => {
 		if (broker === void 0) return [];
-		const bkr = broker;
-		const rawRegistry = Reflect.get(bkr, "registry");
+		const bkr = asBrokerLike(broker);
+		const rawRegistry = Reflect.get(broker, "registry");
 		if (rawRegistry === null || typeof rawRegistry !== "object" || !("getServiceList" in rawRegistry)) return [];
 		const services = rawRegistry.getServiceList({
 			onlyAvailable: true,
@@ -9390,7 +9422,7 @@ function buildCapabilitiesAccess(broker, localRegs) {
 * consumers (e.g. `await maybeProxy` mustn't hang).
 */
 function createRemoteProviderProxy(broker, serviceName, capName, nodeId, methods) {
-	const bkr = broker;
+	const bkr = asBrokerLike(broker);
 	const dispatcher = Object.create(null);
 	for (const method of methods) dispatcher[method] = (input) => {
 		return bkr.call(`${serviceName}.${capName}.${method}`, serializeTypedArrays(input), {
@@ -10129,7 +10161,7 @@ function createRunnerDeviceSettings(client, addonId, before = async () => {}) {
 //#region src/kernel/moleculer/addon-context-factory.ts
 /** This runtime's node id, regardless of mode (broker.nodeID or the UDS child nodeId). */
 function runtimeNodeId(runtime) {
-	return runtime.mode === "broker" ? runtime.broker.nodeID : runtime.nodeId;
+	return runtime.mode === "broker" ? asBrokerLike(runtime.broker).nodeID : runtime.nodeId;
 }
 /**
 * Adapt a Moleculer ServiceBroker to the camstack-types `IClusterBroker`
@@ -10139,7 +10171,7 @@ function runtimeNodeId(runtime) {
 * forward through a thin object instead of casting at the boundary.
 */
 function adaptBrokerToCluster(broker) {
-	const bkr = broker;
+	const bkr = asBrokerLike(broker);
 	return {
 		get nodeID() {
 			return bkr.nodeID;
@@ -10283,7 +10315,7 @@ async function buildAddonContext(runtime, declaration, dataDir, options) {
 	const scopedEventBus = runtime.mode === "broker" ? createBrokerEventBus(runtime.broker, addonId) : createUdsEventBus(runtime.client, addonId);
 	const deviceSliceSource = (0, _camstack_types_addon.createEventBusSliceSource)({
 		eventBus: scopedEventBus,
-		api
+		api: (0, _camstack_types_addon.addonSliceHandleApi)(api)
 	});
 	const workerDisposerChain = new _camstack_types_addon.DisposerChain({ onError: (err, index) => {
 		scopedLogger.error(`Disposer #${index} threw during teardown`, { meta: { error: err instanceof Error ? err.message : String(err) } });
@@ -10442,6 +10474,19 @@ async function buildAddonContext(runtime, declaration, dataDir, options) {
 		nodeId
 	});
 	workerDisposerChain.add(() => peerBytesFacility.dispose());
+	const secrets = (0, _camstack_types_addon.createSecretsAccess)({
+		owner: addonId,
+		transport: {
+			put: (input) => api.keychain.put.mutate({
+				ref: input.ref,
+				value: input.value
+			}),
+			resolve: (input) => api.keychain.resolve.query({ refs: [...input.refs] }),
+			delete: (input) => api.keychain.delete.mutate({ refs: [...input.refs] }),
+			getState: () => api.keychain.getState.query({})
+		},
+		eventBus: scopedEventBus
+	});
 	return {
 		id: addonId,
 		logger: scopedLogger,
@@ -10454,26 +10499,20 @@ async function buildAddonContext(runtime, declaration, dataDir, options) {
 		api,
 		deps: new AddonDepsManager(addonDataDir, scopedLogger),
 		settings: settingsView,
-		secrets: (0, _camstack_types_addon.createSecretsAccess)({
+		secrets,
+		records: (0, _camstack_types_addon.createRecordsAccess)({
 			owner: addonId,
-			transport: {
-				put: (input) => api.keychain.put.mutate({
-					ref: input.ref,
-					value: input.value
-				}),
-				resolve: (input) => api.keychain.resolve.query({ refs: [...input.refs] }),
-				delete: (input) => api.keychain.delete.mutate({ refs: [...input.refs] }),
-				getState: () => api.keychain.getState.query({})
-			},
-			eventBus: scopedEventBus
+			transport: recordsTransportOf(api),
+			secrets,
+			logger: scopedLogger
 		}),
 		kernel: (() => {
 			const streamProbe = runtime.mode === "broker" ? {
-				probe: (url, probeOptions) => runtime.broker.call("$stream-probe.probe", {
+				probe: (url, probeOptions) => asBrokerLike(runtime.broker).call("$stream-probe.probe", {
 					url,
 					force: probeOptions?.force ?? false
 				}),
-				probeField: (key, value) => runtime.broker.call("$stream-probe.probeField", {
+				probeField: (key, value) => asBrokerLike(runtime.broker).call("$stream-probe.probeField", {
 					key,
 					value
 				})

package/dist/addon-runner.mjs

@@ -3,7 +3,7 @@ import * as fs from "node:fs";
 import { createReadStream, createWriteStream, existsSync, readFileSync, readdirSync } from "node:fs";
 import * as path from "node:path";
 import { dirname, isAbsolute, join } from "node:path";
-import { BOOT_RECOVERY_BACKOFF_MS, DATAPLANE_SECRET_HEADER, DEVICE_CHILDREN_BATCH_MAX, DeviceType, DisposerChain, ErrorI18nPayloadSchema, EventCategory, PEER_BYTES_CHUNK_BYTES, PEER_BYTES_MAX_OUTSTANDING, PEER_BYTES_STALL_MS, PEER_BYTES_TICKET_TTL_MS, ReadinessRegistry, ReadinessTimeoutError, asJsonObject, asString, collectZodSecretPaths, createDeviceProxy, createEventBusSliceSource, createSecretsAccess, describeCustomActions, deviceOpsCapability, emitReadiness, errMsg, expandCapMethods, isCollectionArrayMethodName, isProviderOptionalMethodName, maskUrlCredentials, normalizeAddonInitResult, readErrorI18n, readNodePin, resolveSecretViewsIn, scopeKey, scrubKnownSecrets, withCapInputDefaults } from "@camstack/types/addon";
+import { BOOT_RECOVERY_BACKOFF_MS, CALLER_STAMPED_CAPABILITIES, DATAPLANE_SECRET_HEADER, DEVICE_CHILDREN_BATCH_MAX, DeviceType, DisposerChain, ErrorI18nPayloadSchema, EventCategory, PEER_BYTES_CHUNK_BYTES, PEER_BYTES_MAX_OUTSTANDING, PEER_BYTES_STALL_MS, PEER_BYTES_TICKET_TTL_MS, ReadinessRegistry, ReadinessTimeoutError, addonSliceHandleApi, asJsonObject, asString, collectZodSecretPaths, createDeviceProxy, createEventBusSliceSource, createRecordsAccess, createSecretsAccess, describeCustomActions, deviceOpsCapability, emitReadiness, errMsg, expandCapMethods, isCollectionArrayMethodName, isProviderOptionalMethodName, maskUrlCredentials, normalizeAddonInitResult, readErrorI18n, readNodePin, resolveSecretViewsIn, scopeKey, scrubKnownSecrets, withCapInputDefaults } from "@camstack/types/addon";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import * as os from "node:os";
@@ -2871,9 +2871,10 @@ var PeerAnsweredError = class extends Error {
 *    keychain owner-checks on this field, and until 2026-10-08 an unstamped
 *    call let a child's own `callerAddonId` through untouched.
 *
-* A hub in-process caller never reaches this function (`localProviderLink`
-* calls the provider directly), which is the one place a stated identity is
-* trusted. A non-object `args` (or `null`/array) is returned unchanged: there
+* Hub-main in-process contexts that bypass tRPC (addon-registry's stated
+* transports) never reach this function. Co-located broker/agent callers
+* stamp here inside `localProviderLink` before the zero-copy invoke.
+* A non-object `args` (or `null`/array) is returned unchanged: there
 * is nowhere to attach a key, and nowhere one could hide.
 */
 function stampCallerAddonId(args, callerAddonId) {
@@ -5295,6 +5296,29 @@ var CapabilityHandle = class {
 	}
 };
 //#endregion
+//#region src/kernel/moleculer/records-api-transport.ts
+function recordsTransportOf(api) {
+	const r = api.records;
+	return {
+		declareKinds: (input) => r.declareKinds.mutate(input),
+		get: (input) => r.get.query(input),
+		getMany: (input) => r.getMany.query(input),
+		secretRefs: (input) => r.secretRefs.query(input),
+		put: (input) => r.put.mutate(input),
+		putMany: (input) => r.putMany.mutate(input),
+		patch: (input) => r.patch.mutate(input),
+		delete: (input) => r.delete.mutate(input),
+		deleteMany: (input) => r.deleteMany.mutate(input),
+		query: (input) => r.query.query(input),
+		count: (input) => r.count.query(input),
+		histogram: (input) => r.histogram.query(input),
+		aggregate: (input) => r.aggregate.query(input),
+		deleteWhere: (input) => r.deleteWhere.mutate(input),
+		deleteDevice: (input) => r.deleteDevice.mutate(input),
+		allocateId: (input) => r.allocateId.mutate(input)
+	};
+}
+//#endregion
 //#region src/kernel/moleculer/children-batch-loader.ts
 /**
 * Narrow an untyped cap answer to the fields the reconcile reads.
@@ -5643,6 +5667,9 @@ function getWorkerNativeCapProvider(capName, deviceId) {
 	if (typeof raw !== "object" || Array.isArray(raw)) return void 0;
 	return raw;
 }
+function deviceHasStreamSources(device) {
+	return typeof Reflect.get(device, "getStreamSources") === "function";
+}
 function buildDeviceOpsProvider(device) {
 	const assertMatch = (incoming) => {
 		if (incoming !== device.id) throw new Error(`device-ops: deviceId mismatch — expected '${device.id}', got '${incoming}'`);
@@ -5650,9 +5677,8 @@ function buildDeviceOpsProvider(device) {
 	return {
 		getStreamSources: async (input) => {
 			assertMatch(input.deviceId);
-			const maybeCamera = device;
-			if (typeof maybeCamera.getStreamSources !== "function") return [];
-			return [...await maybeCamera.getStreamSources()];
+			if (!deviceHasStreamSources(device)) return [];
+			return [...await device.getStreamSources()];
 		},
 		getConfigEntries: async (input) => {
 			assertMatch(input.deviceId);
@@ -5702,7 +5728,7 @@ function createBrokerDeviceManagerApi(opts) {
 	const { api, addonId, nodeId, eventBus, registry } = opts;
 	const deviceSliceSource = createEventBusSliceSource({
 		eventBus,
-		api
+		api: addonSliceHandleApi(api)
 	});
 	let selfApi;
 	const childrenLoader = createChildrenBatchLoader({
@@ -5790,15 +5816,14 @@ function createBrokerDeviceManagerApi(opts) {
 				}
 				const finalProvider = (() => {
 					if (!cap.status || !cap.runtimeState || !runtimeStateRef) return provider;
-					const asRecord = provider;
-					if (typeof asRecord["getStatus"] === "function") return provider;
+					if (typeof Reflect.get(provider, "getStatus") === "function") return provider;
 					const rsRef = runtimeStateRef;
 					const defaultGetStatus = async ({ deviceId: dId }) => {
 						if (typeof dId === "number" && dId !== id) return null;
 						return rsRef.getCapState(cap.name) ?? null;
 					};
 					return {
-						...asRecord,
+						...provider,
 						getStatus: defaultGetStatus
 					};
 				})();
@@ -7356,8 +7381,9 @@ function localProviderLink(resolver, observerOpts) {
 			const fn = Reflect.get(provider, parsed.method);
 			if (typeof fn !== "function") return next(opWithDefaults);
 			if (observerOpts) recordCapUsage(observerOpts, parsed.capName, parsed.method);
+			const localInput = CALLER_STAMPED_CAPABILITIES.includes(parsed.capName) ? stampCallerAddonId(opWithDefaults.input, observerOpts?.callerAddonId) : opWithDefaults.input;
 			return observable((observer) => {
-				Promise.resolve(fn.call(provider, opWithDefaults.input)).then((data) => {
+				Promise.resolve(fn.call(provider, localInput)).then((data) => {
 					observer.next({ result: {
 						type: "data",
 						data
@@ -7374,7 +7400,7 @@ function localProviderLink(resolver, observerOpts) {
 function findServiceCandidates(broker, capName, method, forceServiceName) {
 	const actionSuffix = capActionSuffix(capName, method);
 	const bareAction = capBareAction(capName, method);
-	const services = broker.registry?.getServiceList?.({
+	const services = Reflect.get(broker, "registry")?.getServiceList?.({
 		onlyAvailable: true,
 		withActions: true
 	}) ?? [];
@@ -8408,7 +8434,11 @@ function createAddonPeerBytesFacility(args) {
 					res.destroy();
 				}, Math.max(1e3, Math.floor(stallMs / 4)));
 				stallTimer.unref();
-				const ended = await Promise.race([once(stream, "end").then(() => true), once(res, "close").then(() => false)]).catch(() => false);
+				const ended = await Promise.race([once(stream, "end").then(() => true), new Promise((resolve) => {
+					res.once("close", () => {
+						resolve(false);
+					});
+				})]).catch(() => false);
 				clearInterval(stallTimer);
 				if (ended) {
 					args.logger.info("peer-bytes: body sent", {
@@ -8718,6 +8748,10 @@ var AddonDepsManager = class {
 };
 //#endregion
 //#region src/kernel/moleculer/event-bus.ts
+/** Documented boundary: CamStack brokers are always `createBroker` products. */
+function asBrokerLike(broker) {
+	return broker;
+}
 /**
 * Topic prefix for clustered EventBus broadcasts. The `camstack.evt.`
 * namespace keeps our events disjoint from Moleculer internal events
@@ -8890,14 +8924,13 @@ function acceptInboundCrossNode(broker, category) {
 function registerEventBusService(broker) {
 	if (eventBusServiceInstalled.has(broker)) return;
 	eventBusServiceInstalled.add(broker);
-	const bkr = broker;
 	try {
-		bkr.createService({
+		broker.createService({
 			name: "$event-bus",
 			events: { [EVENT_TOPIC_WILDCARD](ctx) {
 				const event = ctx.params;
 				if (!event) return;
-				if (event.sourceNodeId === bkr.nodeID) return;
+				if (event.sourceNodeId === broker.nodeID) return;
 				if (!acceptInboundCrossNode(broker, event.category)) return;
 				deliverShared(getSharedBusState(broker), event);
 			} }
@@ -8905,7 +8938,7 @@ function registerEventBusService(broker) {
 	} catch (err) {
 		const msg = err instanceof Error ? err.message : String(err);
 		try {
-			bkr.logger?.warn?.(`[event-bus] failed to register $event-bus service: ${msg}`);
+			broker.logger?.warn?.(`[event-bus] failed to register $event-bus service: ${msg}`);
 		} catch {}
 	}
 }
@@ -8917,7 +8950,6 @@ function registerEventBusService(broker) {
 *   nothing and `getRecent` returns `[]`. Events are one-shot everywhere else.
 */
 function getBrokerEventBus(broker, options) {
-	const bkr = broker;
 	const state = getSharedBusState(broker, options?.retainRecent ?? false);
 	registerEventBusService(broker);
 	const warnTimestamps = (() => {
@@ -8932,19 +8964,19 @@ function getBrokerEventBus(broker, options) {
 		emit(event) {
 			const enriched = {
 				...event,
-				sourceNodeId: bkr.nodeID
+				sourceNodeId: broker.nodeID
 			};
 			deliverShared(state, enriched);
 			const topic = clusterEventTopic(event.category);
 			try {
-				bkr.broadcast(topic, enriched);
+				broker.broadcast(topic, enriched);
 			} catch (err) {
 				const cat = event.category;
 				const now = Date.now();
 				if (now - (warnTimestamps.get(`broadcast:${cat}`) ?? 0) > 6e4) {
 					warnTimestamps.set(`broadcast:${cat}`, now);
 					try {
-						bkr.logger?.warn?.(`[event-bus] broker.broadcast('${topic}') failed for category="${cat}" nodeID="${bkr.nodeID}": ${err instanceof Error ? err.message : String(err)}`);
+						broker.logger?.warn?.(`[event-bus] broker.broadcast('${topic}') failed for category="${cat}" nodeID="${broker.nodeID}": ${err instanceof Error ? err.message : String(err)}`);
 					} catch {}
 				}
 			}
@@ -9094,7 +9126,7 @@ function setPreferredProvider(capabilityName, addonId, brokerNodeId = "hub") {
 */
 var bindingSubscriberInstalled = /* @__PURE__ */ new Set();
 function ensureBindingSubscription(broker) {
-	const bkr = broker;
+	const bkr = asBrokerLike(broker);
 	if (bindingSubscriberInstalled.has(bkr.nodeID)) return;
 	bindingSubscriberInstalled.add(bkr.nodeID);
 	const handler = (payload) => {
@@ -9154,7 +9186,7 @@ var READINESS_RECONCILE_INTERVAL_MS = 6e4;
 * entries already observed locally.
 */
 function getOrInitReadinessRegistry(broker, eventBus, logger) {
-	const bkr = broker;
+	const bkr = asBrokerLike(broker);
 	const existing = brokerReadinessRegistries.get(broker);
 	if (existing) return existing;
 	const registry = new ReadinessRegistry({
@@ -9282,8 +9314,8 @@ function getOrInitReadinessRegistryForClient(client, eventBus, logger, nodeId) {
 function buildCapabilitiesAccess(broker, localRegs) {
 	const collectRemoteEntries = (capName) => {
 		if (broker === void 0) return [];
-		const bkr = broker;
-		const rawRegistry = Reflect.get(bkr, "registry");
+		const bkr = asBrokerLike(broker);
+		const rawRegistry = Reflect.get(broker, "registry");
 		if (rawRegistry === null || typeof rawRegistry !== "object" || !("getServiceList" in rawRegistry)) return [];
 		const services = rawRegistry.getServiceList({
 			onlyAvailable: true,
@@ -9366,7 +9398,7 @@ function buildCapabilitiesAccess(broker, localRegs) {
 * consumers (e.g. `await maybeProxy` mustn't hang).
 */
 function createRemoteProviderProxy(broker, serviceName, capName, nodeId, methods) {
-	const bkr = broker;
+	const bkr = asBrokerLike(broker);
 	const dispatcher = Object.create(null);
 	for (const method of methods) dispatcher[method] = (input) => {
 		return bkr.call(`${serviceName}.${capName}.${method}`, serializeTypedArrays(input), {
@@ -10105,7 +10137,7 @@ function createRunnerDeviceSettings(client, addonId, before = async () => {}) {
 //#region src/kernel/moleculer/addon-context-factory.ts
 /** This runtime's node id, regardless of mode (broker.nodeID or the UDS child nodeId). */
 function runtimeNodeId(runtime) {
-	return runtime.mode === "broker" ? runtime.broker.nodeID : runtime.nodeId;
+	return runtime.mode === "broker" ? asBrokerLike(runtime.broker).nodeID : runtime.nodeId;
 }
 /**
 * Adapt a Moleculer ServiceBroker to the camstack-types `IClusterBroker`
@@ -10115,7 +10147,7 @@ function runtimeNodeId(runtime) {
 * forward through a thin object instead of casting at the boundary.
 */
 function adaptBrokerToCluster(broker) {
-	const bkr = broker;
+	const bkr = asBrokerLike(broker);
 	return {
 		get nodeID() {
 			return bkr.nodeID;
@@ -10259,7 +10291,7 @@ async function buildAddonContext(runtime, declaration, dataDir, options) {
 	const scopedEventBus = runtime.mode === "broker" ? createBrokerEventBus(runtime.broker, addonId) : createUdsEventBus(runtime.client, addonId);
 	const deviceSliceSource = createEventBusSliceSource({
 		eventBus: scopedEventBus,
-		api
+		api: addonSliceHandleApi(api)
 	});
 	const workerDisposerChain = new DisposerChain({ onError: (err, index) => {
 		scopedLogger.error(`Disposer #${index} threw during teardown`, { meta: { error: err instanceof Error ? err.message : String(err) } });
@@ -10418,6 +10450,19 @@ async function buildAddonContext(runtime, declaration, dataDir, options) {
 		nodeId
 	});
 	workerDisposerChain.add(() => peerBytesFacility.dispose());
+	const secrets = createSecretsAccess({
+		owner: addonId,
+		transport: {
+			put: (input) => api.keychain.put.mutate({
+				ref: input.ref,
+				value: input.value
+			}),
+			resolve: (input) => api.keychain.resolve.query({ refs: [...input.refs] }),
+			delete: (input) => api.keychain.delete.mutate({ refs: [...input.refs] }),
+			getState: () => api.keychain.getState.query({})
+		},
+		eventBus: scopedEventBus
+	});
 	return {
 		id: addonId,
 		logger: scopedLogger,
@@ -10430,26 +10475,20 @@ async function buildAddonContext(runtime, declaration, dataDir, options) {
 		api,
 		deps: new AddonDepsManager(addonDataDir, scopedLogger),
 		settings: settingsView,
-		secrets: createSecretsAccess({
+		secrets,
+		records: createRecordsAccess({
 			owner: addonId,
-			transport: {
-				put: (input) => api.keychain.put.mutate({
-					ref: input.ref,
-					value: input.value
-				}),
-				resolve: (input) => api.keychain.resolve.query({ refs: [...input.refs] }),
-				delete: (input) => api.keychain.delete.mutate({ refs: [...input.refs] }),
-				getState: () => api.keychain.getState.query({})
-			},
-			eventBus: scopedEventBus
+			transport: recordsTransportOf(api),
+			secrets,
+			logger: scopedLogger
 		}),
 		kernel: (() => {
 			const streamProbe = runtime.mode === "broker" ? {
-				probe: (url, probeOptions) => runtime.broker.call("$stream-probe.probe", {
+				probe: (url, probeOptions) => asBrokerLike(runtime.broker).call("$stream-probe.probe", {
 					url,
 					force: probeOptions?.force ?? false
 				}),
-				probeField: (key, value) => runtime.broker.call("$stream-probe.probeField", {
+				probeField: (key, value) => asBrokerLike(runtime.broker).call("$stream-probe.probeField", {
 					key,
 					value
 				})