@camstack/system 1.2.444 → 1.2.446

package/dist/addon-runner.js

@@ -2895,9 +2895,10 @@ var PeerAnsweredError = class extends Error {
 *    keychain owner-checks on this field, and until 2026-10-08 an unstamped
 *    call let a child's own `callerAddonId` through untouched.
 *
-* A hub in-process caller never reaches this function (`localProviderLink`
-* calls the provider directly), which is the one place a stated identity is
-* trusted. A non-object `args` (or `null`/array) is returned unchanged: there
+* Hub-main in-process contexts that bypass tRPC (addon-registry's stated
+* transports) never reach this function. Co-located broker/agent callers
+* stamp here inside `localProviderLink` before the zero-copy invoke.
+* A non-object `args` (or `null`/array) is returned unchanged: there
 * is nowhere to attach a key, and nowhere one could hide.
 */
 function stampCallerAddonId(args, callerAddonId) {
@@ -5690,6 +5691,9 @@ function getWorkerNativeCapProvider(capName, deviceId) {
 	if (typeof raw !== "object" || Array.isArray(raw)) return void 0;
 	return raw;
 }
+function deviceHasStreamSources(device) {
+	return typeof Reflect.get(device, "getStreamSources") === "function";
+}
 function buildDeviceOpsProvider(device) {
 	const assertMatch = (incoming) => {
 		if (incoming !== device.id) throw new Error(`device-ops: deviceId mismatch — expected '${device.id}', got '${incoming}'`);
@@ -5697,9 +5701,8 @@ function buildDeviceOpsProvider(device) {
 	return {
 		getStreamSources: async (input) => {
 			assertMatch(input.deviceId);
-			const maybeCamera = device;
-			if (typeof maybeCamera.getStreamSources !== "function") return [];
-			return [...await maybeCamera.getStreamSources()];
+			if (!deviceHasStreamSources(device)) return [];
+			return [...await device.getStreamSources()];
 		},
 		getConfigEntries: async (input) => {
 			assertMatch(input.deviceId);
@@ -5749,7 +5752,7 @@ function createBrokerDeviceManagerApi(opts) {
 	const { api, addonId, nodeId, eventBus, registry } = opts;
 	const deviceSliceSource = (0, _camstack_types_addon.createEventBusSliceSource)({
 		eventBus,
-		api
+		api: (0, _camstack_types_addon.addonSliceHandleApi)(api)
 	});
 	let selfApi;
 	const childrenLoader = createChildrenBatchLoader({
@@ -5837,15 +5840,14 @@ function createBrokerDeviceManagerApi(opts) {
 				}
 				const finalProvider = (() => {
 					if (!cap.status || !cap.runtimeState || !runtimeStateRef) return provider;
-					const asRecord = provider;
-					if (typeof asRecord["getStatus"] === "function") return provider;
+					if (typeof Reflect.get(provider, "getStatus") === "function") return provider;
 					const rsRef = runtimeStateRef;
 					const defaultGetStatus = async ({ deviceId: dId }) => {
 						if (typeof dId === "number" && dId !== id) return null;
 						return rsRef.getCapState(cap.name) ?? null;
 					};
 					return {
-						...asRecord,
+						...provider,
 						getStatus: defaultGetStatus
 					};
 				})();
@@ -7403,8 +7405,9 @@ function localProviderLink(resolver, observerOpts) {
 			const fn = Reflect.get(provider, parsed.method);
 			if (typeof fn !== "function") return next(opWithDefaults);
 			if (observerOpts) recordCapUsage(observerOpts, parsed.capName, parsed.method);
+			const localInput = _camstack_types_addon.CALLER_STAMPED_CAPABILITIES.includes(parsed.capName) ? stampCallerAddonId(opWithDefaults.input, observerOpts?.callerAddonId) : opWithDefaults.input;
 			return observable((observer) => {
-				Promise.resolve(fn.call(provider, opWithDefaults.input)).then((data) => {
+				Promise.resolve(fn.call(provider, localInput)).then((data) => {
 					observer.next({ result: {
 						type: "data",
 						data
@@ -7421,7 +7424,7 @@ function localProviderLink(resolver, observerOpts) {
 function findServiceCandidates(broker, capName, method, forceServiceName) {
 	const actionSuffix = capActionSuffix(capName, method);
 	const bareAction = capBareAction(capName, method);
-	const services = broker.registry?.getServiceList?.({
+	const services = Reflect.get(broker, "registry")?.getServiceList?.({
 		onlyAvailable: true,
 		withActions: true
 	}) ?? [];
@@ -8455,7 +8458,11 @@ function createAddonPeerBytesFacility(args) {
 					res.destroy();
 				}, Math.max(1e3, Math.floor(stallMs / 4)));
 				stallTimer.unref();
-				const ended = await Promise.race([(0, node_events.once)(stream, "end").then(() => true), (0, node_events.once)(res, "close").then(() => false)]).catch(() => false);
+				const ended = await Promise.race([(0, node_events.once)(stream, "end").then(() => true), new Promise((resolve) => {
+					res.once("close", () => {
+						resolve(false);
+					});
+				})]).catch(() => false);
 				clearInterval(stallTimer);
 				if (ended) {
 					args.logger.info("peer-bytes: body sent", {
@@ -8765,6 +8772,10 @@ var AddonDepsManager = class {
 };
 //#endregion
 //#region src/kernel/moleculer/event-bus.ts
+/** Documented boundary: CamStack brokers are always `createBroker` products. */
+function asBrokerLike(broker) {
+	return broker;
+}
 /**
 * Topic prefix for clustered EventBus broadcasts. The `camstack.evt.`
 * namespace keeps our events disjoint from Moleculer internal events
@@ -8937,14 +8948,13 @@ function acceptInboundCrossNode(broker, category) {
 function registerEventBusService(broker) {
 	if (eventBusServiceInstalled.has(broker)) return;
 	eventBusServiceInstalled.add(broker);
-	const bkr = broker;
 	try {
-		bkr.createService({
+		broker.createService({
 			name: "$event-bus",
 			events: { [EVENT_TOPIC_WILDCARD](ctx) {
 				const event = ctx.params;
 				if (!event) return;
-				if (event.sourceNodeId === bkr.nodeID) return;
+				if (event.sourceNodeId === broker.nodeID) return;
 				if (!acceptInboundCrossNode(broker, event.category)) return;
 				deliverShared(getSharedBusState(broker), event);
 			} }
@@ -8952,7 +8962,7 @@ function registerEventBusService(broker) {
 	} catch (err) {
 		const msg = err instanceof Error ? err.message : String(err);
 		try {
-			bkr.logger?.warn?.(`[event-bus] failed to register $event-bus service: ${msg}`);
+			broker.logger?.warn?.(`[event-bus] failed to register $event-bus service: ${msg}`);
 		} catch {}
 	}
 }
@@ -8964,7 +8974,6 @@ function registerEventBusService(broker) {
 *   nothing and `getRecent` returns `[]`. Events are one-shot everywhere else.
 */
 function getBrokerEventBus(broker, options) {
-	const bkr = broker;
 	const state = getSharedBusState(broker, options?.retainRecent ?? false);
 	registerEventBusService(broker);
 	const warnTimestamps = (() => {
@@ -8979,19 +8988,19 @@ function getBrokerEventBus(broker, options) {
 		emit(event) {
 			const enriched = {
 				...event,
-				sourceNodeId: bkr.nodeID
+				sourceNodeId: broker.nodeID
 			};
 			deliverShared(state, enriched);
 			const topic = clusterEventTopic(event.category);
 			try {
-				bkr.broadcast(topic, enriched);
+				broker.broadcast(topic, enriched);
 			} catch (err) {
 				const cat = event.category;
 				const now = Date.now();
 				if (now - (warnTimestamps.get(`broadcast:${cat}`) ?? 0) > 6e4) {
 					warnTimestamps.set(`broadcast:${cat}`, now);
 					try {
-						bkr.logger?.warn?.(`[event-bus] broker.broadcast('${topic}') failed for category="${cat}" nodeID="${bkr.nodeID}": ${err instanceof Error ? err.message : String(err)}`);
+						broker.logger?.warn?.(`[event-bus] broker.broadcast('${topic}') failed for category="${cat}" nodeID="${broker.nodeID}": ${err instanceof Error ? err.message : String(err)}`);
 					} catch {}
 				}
 			}
@@ -9141,7 +9150,7 @@ function setPreferredProvider(capabilityName, addonId, brokerNodeId = "hub") {
 */
 var bindingSubscriberInstalled = /* @__PURE__ */ new Set();
 function ensureBindingSubscription(broker) {
-	const bkr = broker;
+	const bkr = asBrokerLike(broker);
 	if (bindingSubscriberInstalled.has(bkr.nodeID)) return;
 	bindingSubscriberInstalled.add(bkr.nodeID);
 	const handler = (payload) => {
@@ -9201,7 +9210,7 @@ var READINESS_RECONCILE_INTERVAL_MS = 6e4;
 * entries already observed locally.
 */
 function getOrInitReadinessRegistry(broker, eventBus, logger) {
-	const bkr = broker;
+	const bkr = asBrokerLike(broker);
 	const existing = brokerReadinessRegistries.get(broker);
 	if (existing) return existing;
 	const registry = new _camstack_types_addon.ReadinessRegistry({
@@ -9329,8 +9338,8 @@ function getOrInitReadinessRegistryForClient(client, eventBus, logger, nodeId) {
 function buildCapabilitiesAccess(broker, localRegs) {
 	const collectRemoteEntries = (capName) => {
 		if (broker === void 0) return [];
-		const bkr = broker;
-		const rawRegistry = Reflect.get(bkr, "registry");
+		const bkr = asBrokerLike(broker);
+		const rawRegistry = Reflect.get(broker, "registry");
 		if (rawRegistry === null || typeof rawRegistry !== "object" || !("getServiceList" in rawRegistry)) return [];
 		const services = rawRegistry.getServiceList({
 			onlyAvailable: true,
@@ -9413,7 +9422,7 @@ function buildCapabilitiesAccess(broker, localRegs) {
 * consumers (e.g. `await maybeProxy` mustn't hang).
 */
 function createRemoteProviderProxy(broker, serviceName, capName, nodeId, methods) {
-	const bkr = broker;
+	const bkr = asBrokerLike(broker);
 	const dispatcher = Object.create(null);
 	for (const method of methods) dispatcher[method] = (input) => {
 		return bkr.call(`${serviceName}.${capName}.${method}`, serializeTypedArrays(input), {
@@ -10152,7 +10161,7 @@ function createRunnerDeviceSettings(client, addonId, before = async () => {}) {
 //#region src/kernel/moleculer/addon-context-factory.ts
 /** This runtime's node id, regardless of mode (broker.nodeID or the UDS child nodeId). */
 function runtimeNodeId(runtime) {
-	return runtime.mode === "broker" ? runtime.broker.nodeID : runtime.nodeId;
+	return runtime.mode === "broker" ? asBrokerLike(runtime.broker).nodeID : runtime.nodeId;
 }
 /**
 * Adapt a Moleculer ServiceBroker to the camstack-types `IClusterBroker`
@@ -10162,7 +10171,7 @@ function runtimeNodeId(runtime) {
 * forward through a thin object instead of casting at the boundary.
 */
 function adaptBrokerToCluster(broker) {
-	const bkr = broker;
+	const bkr = asBrokerLike(broker);
 	return {
 		get nodeID() {
 			return bkr.nodeID;
@@ -10306,7 +10315,7 @@ async function buildAddonContext(runtime, declaration, dataDir, options) {
 	const scopedEventBus = runtime.mode === "broker" ? createBrokerEventBus(runtime.broker, addonId) : createUdsEventBus(runtime.client, addonId);
 	const deviceSliceSource = (0, _camstack_types_addon.createEventBusSliceSource)({
 		eventBus: scopedEventBus,
-		api
+		api: (0, _camstack_types_addon.addonSliceHandleApi)(api)
 	});
 	const workerDisposerChain = new _camstack_types_addon.DisposerChain({ onError: (err, index) => {
 		scopedLogger.error(`Disposer #${index} threw during teardown`, { meta: { error: err instanceof Error ? err.message : String(err) } });
@@ -10499,11 +10508,11 @@ async function buildAddonContext(runtime, declaration, dataDir, options) {
 		}),
 		kernel: (() => {
 			const streamProbe = runtime.mode === "broker" ? {
-				probe: (url, probeOptions) => runtime.broker.call("$stream-probe.probe", {
+				probe: (url, probeOptions) => asBrokerLike(runtime.broker).call("$stream-probe.probe", {
 					url,
 					force: probeOptions?.force ?? false
 				}),
-				probeField: (key, value) => runtime.broker.call("$stream-probe.probeField", {
+				probeField: (key, value) => asBrokerLike(runtime.broker).call("$stream-probe.probeField", {
 					key,
 					value
 				})

package/dist/addon-runner.mjs

@@ -3,7 +3,7 @@ import * as fs from "node:fs";
 import { createReadStream, createWriteStream, existsSync, readFileSync, readdirSync } from "node:fs";
 import * as path from "node:path";
 import { dirname, isAbsolute, join } from "node:path";
-import { BOOT_RECOVERY_BACKOFF_MS, DATAPLANE_SECRET_HEADER, DEVICE_CHILDREN_BATCH_MAX, DeviceType, DisposerChain, ErrorI18nPayloadSchema, EventCategory, PEER_BYTES_CHUNK_BYTES, PEER_BYTES_MAX_OUTSTANDING, PEER_BYTES_STALL_MS, PEER_BYTES_TICKET_TTL_MS, ReadinessRegistry, ReadinessTimeoutError, asJsonObject, asString, collectZodSecretPaths, createDeviceProxy, createEventBusSliceSource, createRecordsAccess, createSecretsAccess, describeCustomActions, deviceOpsCapability, emitReadiness, errMsg, expandCapMethods, isCollectionArrayMethodName, isProviderOptionalMethodName, maskUrlCredentials, normalizeAddonInitResult, readErrorI18n, readNodePin, resolveSecretViewsIn, scopeKey, scrubKnownSecrets, withCapInputDefaults } from "@camstack/types/addon";
+import { BOOT_RECOVERY_BACKOFF_MS, CALLER_STAMPED_CAPABILITIES, DATAPLANE_SECRET_HEADER, DEVICE_CHILDREN_BATCH_MAX, DeviceType, DisposerChain, ErrorI18nPayloadSchema, EventCategory, PEER_BYTES_CHUNK_BYTES, PEER_BYTES_MAX_OUTSTANDING, PEER_BYTES_STALL_MS, PEER_BYTES_TICKET_TTL_MS, ReadinessRegistry, ReadinessTimeoutError, addonSliceHandleApi, asJsonObject, asString, collectZodSecretPaths, createDeviceProxy, createEventBusSliceSource, createRecordsAccess, createSecretsAccess, describeCustomActions, deviceOpsCapability, emitReadiness, errMsg, expandCapMethods, isCollectionArrayMethodName, isProviderOptionalMethodName, maskUrlCredentials, normalizeAddonInitResult, readErrorI18n, readNodePin, resolveSecretViewsIn, scopeKey, scrubKnownSecrets, withCapInputDefaults } from "@camstack/types/addon";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import * as os from "node:os";
@@ -2871,9 +2871,10 @@ var PeerAnsweredError = class extends Error {
 *    keychain owner-checks on this field, and until 2026-10-08 an unstamped
 *    call let a child's own `callerAddonId` through untouched.
 *
-* A hub in-process caller never reaches this function (`localProviderLink`
-* calls the provider directly), which is the one place a stated identity is
-* trusted. A non-object `args` (or `null`/array) is returned unchanged: there
+* Hub-main in-process contexts that bypass tRPC (addon-registry's stated
+* transports) never reach this function. Co-located broker/agent callers
+* stamp here inside `localProviderLink` before the zero-copy invoke.
+* A non-object `args` (or `null`/array) is returned unchanged: there
 * is nowhere to attach a key, and nowhere one could hide.
 */
 function stampCallerAddonId(args, callerAddonId) {
@@ -5666,6 +5667,9 @@ function getWorkerNativeCapProvider(capName, deviceId) {
 	if (typeof raw !== "object" || Array.isArray(raw)) return void 0;
 	return raw;
 }
+function deviceHasStreamSources(device) {
+	return typeof Reflect.get(device, "getStreamSources") === "function";
+}
 function buildDeviceOpsProvider(device) {
 	const assertMatch = (incoming) => {
 		if (incoming !== device.id) throw new Error(`device-ops: deviceId mismatch — expected '${device.id}', got '${incoming}'`);
@@ -5673,9 +5677,8 @@ function buildDeviceOpsProvider(device) {
 	return {
 		getStreamSources: async (input) => {
 			assertMatch(input.deviceId);
-			const maybeCamera = device;
-			if (typeof maybeCamera.getStreamSources !== "function") return [];
-			return [...await maybeCamera.getStreamSources()];
+			if (!deviceHasStreamSources(device)) return [];
+			return [...await device.getStreamSources()];
 		},
 		getConfigEntries: async (input) => {
 			assertMatch(input.deviceId);
@@ -5725,7 +5728,7 @@ function createBrokerDeviceManagerApi(opts) {
 	const { api, addonId, nodeId, eventBus, registry } = opts;
 	const deviceSliceSource = createEventBusSliceSource({
 		eventBus,
-		api
+		api: addonSliceHandleApi(api)
 	});
 	let selfApi;
 	const childrenLoader = createChildrenBatchLoader({
@@ -5813,15 +5816,14 @@ function createBrokerDeviceManagerApi(opts) {
 				}
 				const finalProvider = (() => {
 					if (!cap.status || !cap.runtimeState || !runtimeStateRef) return provider;
-					const asRecord = provider;
-					if (typeof asRecord["getStatus"] === "function") return provider;
+					if (typeof Reflect.get(provider, "getStatus") === "function") return provider;
 					const rsRef = runtimeStateRef;
 					const defaultGetStatus = async ({ deviceId: dId }) => {
 						if (typeof dId === "number" && dId !== id) return null;
 						return rsRef.getCapState(cap.name) ?? null;
 					};
 					return {
-						...asRecord,
+						...provider,
 						getStatus: defaultGetStatus
 					};
 				})();
@@ -7379,8 +7381,9 @@ function localProviderLink(resolver, observerOpts) {
 			const fn = Reflect.get(provider, parsed.method);
 			if (typeof fn !== "function") return next(opWithDefaults);
 			if (observerOpts) recordCapUsage(observerOpts, parsed.capName, parsed.method);
+			const localInput = CALLER_STAMPED_CAPABILITIES.includes(parsed.capName) ? stampCallerAddonId(opWithDefaults.input, observerOpts?.callerAddonId) : opWithDefaults.input;
 			return observable((observer) => {
-				Promise.resolve(fn.call(provider, opWithDefaults.input)).then((data) => {
+				Promise.resolve(fn.call(provider, localInput)).then((data) => {
 					observer.next({ result: {
 						type: "data",
 						data
@@ -7397,7 +7400,7 @@ function localProviderLink(resolver, observerOpts) {
 function findServiceCandidates(broker, capName, method, forceServiceName) {
 	const actionSuffix = capActionSuffix(capName, method);
 	const bareAction = capBareAction(capName, method);
-	const services = broker.registry?.getServiceList?.({
+	const services = Reflect.get(broker, "registry")?.getServiceList?.({
 		onlyAvailable: true,
 		withActions: true
 	}) ?? [];
@@ -8431,7 +8434,11 @@ function createAddonPeerBytesFacility(args) {
 					res.destroy();
 				}, Math.max(1e3, Math.floor(stallMs / 4)));
 				stallTimer.unref();
-				const ended = await Promise.race([once(stream, "end").then(() => true), once(res, "close").then(() => false)]).catch(() => false);
+				const ended = await Promise.race([once(stream, "end").then(() => true), new Promise((resolve) => {
+					res.once("close", () => {
+						resolve(false);
+					});
+				})]).catch(() => false);
 				clearInterval(stallTimer);
 				if (ended) {
 					args.logger.info("peer-bytes: body sent", {
@@ -8741,6 +8748,10 @@ var AddonDepsManager = class {
 };
 //#endregion
 //#region src/kernel/moleculer/event-bus.ts
+/** Documented boundary: CamStack brokers are always `createBroker` products. */
+function asBrokerLike(broker) {
+	return broker;
+}
 /**
 * Topic prefix for clustered EventBus broadcasts. The `camstack.evt.`
 * namespace keeps our events disjoint from Moleculer internal events
@@ -8913,14 +8924,13 @@ function acceptInboundCrossNode(broker, category) {
 function registerEventBusService(broker) {
 	if (eventBusServiceInstalled.has(broker)) return;
 	eventBusServiceInstalled.add(broker);
-	const bkr = broker;
 	try {
-		bkr.createService({
+		broker.createService({
 			name: "$event-bus",
 			events: { [EVENT_TOPIC_WILDCARD](ctx) {
 				const event = ctx.params;
 				if (!event) return;
-				if (event.sourceNodeId === bkr.nodeID) return;
+				if (event.sourceNodeId === broker.nodeID) return;
 				if (!acceptInboundCrossNode(broker, event.category)) return;
 				deliverShared(getSharedBusState(broker), event);
 			} }
@@ -8928,7 +8938,7 @@ function registerEventBusService(broker) {
 	} catch (err) {
 		const msg = err instanceof Error ? err.message : String(err);
 		try {
-			bkr.logger?.warn?.(`[event-bus] failed to register $event-bus service: ${msg}`);
+			broker.logger?.warn?.(`[event-bus] failed to register $event-bus service: ${msg}`);
 		} catch {}
 	}
 }
@@ -8940,7 +8950,6 @@ function registerEventBusService(broker) {
 *   nothing and `getRecent` returns `[]`. Events are one-shot everywhere else.
 */
 function getBrokerEventBus(broker, options) {
-	const bkr = broker;
 	const state = getSharedBusState(broker, options?.retainRecent ?? false);
 	registerEventBusService(broker);
 	const warnTimestamps = (() => {
@@ -8955,19 +8964,19 @@ function getBrokerEventBus(broker, options) {
 		emit(event) {
 			const enriched = {
 				...event,
-				sourceNodeId: bkr.nodeID
+				sourceNodeId: broker.nodeID
 			};
 			deliverShared(state, enriched);
 			const topic = clusterEventTopic(event.category);
 			try {
-				bkr.broadcast(topic, enriched);
+				broker.broadcast(topic, enriched);
 			} catch (err) {
 				const cat = event.category;
 				const now = Date.now();
 				if (now - (warnTimestamps.get(`broadcast:${cat}`) ?? 0) > 6e4) {
 					warnTimestamps.set(`broadcast:${cat}`, now);
 					try {
-						bkr.logger?.warn?.(`[event-bus] broker.broadcast('${topic}') failed for category="${cat}" nodeID="${bkr.nodeID}": ${err instanceof Error ? err.message : String(err)}`);
+						broker.logger?.warn?.(`[event-bus] broker.broadcast('${topic}') failed for category="${cat}" nodeID="${broker.nodeID}": ${err instanceof Error ? err.message : String(err)}`);
 					} catch {}
 				}
 			}
@@ -9117,7 +9126,7 @@ function setPreferredProvider(capabilityName, addonId, brokerNodeId = "hub") {
 */
 var bindingSubscriberInstalled = /* @__PURE__ */ new Set();
 function ensureBindingSubscription(broker) {
-	const bkr = broker;
+	const bkr = asBrokerLike(broker);
 	if (bindingSubscriberInstalled.has(bkr.nodeID)) return;
 	bindingSubscriberInstalled.add(bkr.nodeID);
 	const handler = (payload) => {
@@ -9177,7 +9186,7 @@ var READINESS_RECONCILE_INTERVAL_MS = 6e4;
 * entries already observed locally.
 */
 function getOrInitReadinessRegistry(broker, eventBus, logger) {
-	const bkr = broker;
+	const bkr = asBrokerLike(broker);
 	const existing = brokerReadinessRegistries.get(broker);
 	if (existing) return existing;
 	const registry = new ReadinessRegistry({
@@ -9305,8 +9314,8 @@ function getOrInitReadinessRegistryForClient(client, eventBus, logger, nodeId) {
 function buildCapabilitiesAccess(broker, localRegs) {
 	const collectRemoteEntries = (capName) => {
 		if (broker === void 0) return [];
-		const bkr = broker;
-		const rawRegistry = Reflect.get(bkr, "registry");
+		const bkr = asBrokerLike(broker);
+		const rawRegistry = Reflect.get(broker, "registry");
 		if (rawRegistry === null || typeof rawRegistry !== "object" || !("getServiceList" in rawRegistry)) return [];
 		const services = rawRegistry.getServiceList({
 			onlyAvailable: true,
@@ -9389,7 +9398,7 @@ function buildCapabilitiesAccess(broker, localRegs) {
 * consumers (e.g. `await maybeProxy` mustn't hang).
 */
 function createRemoteProviderProxy(broker, serviceName, capName, nodeId, methods) {
-	const bkr = broker;
+	const bkr = asBrokerLike(broker);
 	const dispatcher = Object.create(null);
 	for (const method of methods) dispatcher[method] = (input) => {
 		return bkr.call(`${serviceName}.${capName}.${method}`, serializeTypedArrays(input), {
@@ -10128,7 +10137,7 @@ function createRunnerDeviceSettings(client, addonId, before = async () => {}) {
 //#region src/kernel/moleculer/addon-context-factory.ts
 /** This runtime's node id, regardless of mode (broker.nodeID or the UDS child nodeId). */
 function runtimeNodeId(runtime) {
-	return runtime.mode === "broker" ? runtime.broker.nodeID : runtime.nodeId;
+	return runtime.mode === "broker" ? asBrokerLike(runtime.broker).nodeID : runtime.nodeId;
 }
 /**
 * Adapt a Moleculer ServiceBroker to the camstack-types `IClusterBroker`
@@ -10138,7 +10147,7 @@ function runtimeNodeId(runtime) {
 * forward through a thin object instead of casting at the boundary.
 */
 function adaptBrokerToCluster(broker) {
-	const bkr = broker;
+	const bkr = asBrokerLike(broker);
 	return {
 		get nodeID() {
 			return bkr.nodeID;
@@ -10282,7 +10291,7 @@ async function buildAddonContext(runtime, declaration, dataDir, options) {
 	const scopedEventBus = runtime.mode === "broker" ? createBrokerEventBus(runtime.broker, addonId) : createUdsEventBus(runtime.client, addonId);
 	const deviceSliceSource = createEventBusSliceSource({
 		eventBus: scopedEventBus,
-		api
+		api: addonSliceHandleApi(api)
 	});
 	const workerDisposerChain = new DisposerChain({ onError: (err, index) => {
 		scopedLogger.error(`Disposer #${index} threw during teardown`, { meta: { error: err instanceof Error ? err.message : String(err) } });
@@ -10475,11 +10484,11 @@ async function buildAddonContext(runtime, declaration, dataDir, options) {
 		}),
 		kernel: (() => {
 			const streamProbe = runtime.mode === "broker" ? {
-				probe: (url, probeOptions) => runtime.broker.call("$stream-probe.probe", {
+				probe: (url, probeOptions) => asBrokerLike(runtime.broker).call("$stream-probe.probe", {
 					url,
 					force: probeOptions?.force ?? false
 				}),
-				probeField: (key, value) => runtime.broker.call("$stream-probe.probeField", {
+				probeField: (key, value) => asBrokerLike(runtime.broker).call("$stream-probe.probeField", {
 					key,
 					value
 				})