@camstack/server 1.0.2 → 1.0.3

package/dist/api/addon-upload.js

@@ -322,9 +322,23 @@ async function installToHub(reply, addonBridge, addonRegistry, addonPackageServi
             .listAddons()
             .filter((row) => row.manifest.packageName === result.name)
             .map((row) => row.manifest.id);
-        const addonsDir = path.resolve(process.env['CAMSTACK_DATA'] ?? 'camstack-data', 'addons');
-        fs.writeFileSync(path.join(addonsDir, result.name, '.install-source'), 'upload');
-        // Framework / system packages (`camstack.system: true`, e.g. @camstack/core)
+        // Must honour CAMSTACK_ADDONS_DIR — the runtime installs/loads addons
+        // from there (e.g. /data/node_modules), NOT from CAMSTACK_DATA/addons.
+        // Deriving the dir from CAMSTACK_DATA alone pointed the marker write at a
+        // non-existent path → unguarded ENOENT → HTTP 500, which aborted the
+        // handler before loadNewAddons()/restartAddon() ran, so uploads landed on
+        // disk but never hot-reloaded. Mirrors AddonPackageService.resolveAddonsDir().
+        const dataDir = path.resolve(process.env['CAMSTACK_DATA'] ?? 'camstack-data');
+        const addonsDir = process.env['CAMSTACK_ADDONS_DIR'] ?? path.resolve(dataDir, 'addons');
+        try {
+            fs.writeFileSync(path.join(addonsDir, result.name, '.install-source'), 'upload');
+        }
+        catch (err) {
+            logger.debug('Non-fatal: failed to write .install-source marker', {
+                meta: { error: err instanceof Error ? err.message : String(err) },
+            });
+        }
+        // Framework / system packages (`camstack.system: true`, e.g. @camstack/system)
         // ship hub builtins (sqlite-settings, filesystem-storage, …) that CANNOT be
         // hot-reloaded in place — an in-process `restartAddon` leaves them
         // uninitialized ("SqliteSettingsBackend not initialized"), breaking auth +

package/dist/api/bridge-addons.router.js

@@ -56,7 +56,7 @@ function createBridgeAddonsRouter(bridge, addonSearch, addonRegistry, toastServi
             // (stream-broker, detection-pipeline, motion-wasm, decoders,
             // audio) all live in @camstack/addon-pipeline.
             const REQUIRED = new Set([
-                '@camstack/core',
+                '@camstack/system',
                 '@camstack/addon-pipeline',
                 '@camstack/addon-pipeline-orchestrator',
                 '@camstack/addon-post-analysis',

package/dist/api/capabilities.router.js

@@ -4,7 +4,7 @@ exports.createCapabilitiesRouter = createCapabilitiesRouter;
 const zod_1 = require("zod");
 const server_1 = require("@trpc/server");
 const trpc_middleware_1 = require("./trpc/trpc.middleware");
-const kernel_1 = require("@camstack/kernel");
+const system_1 = require("@camstack/system");
 const collection_preference_1 = require("./core/collection-preference");
 // ─── Zod Schemas ───────────────────────────────────────────────────────────
 const setPreferenceInput = zod_1.z.discriminatedUnion('mode', [
@@ -43,7 +43,7 @@ function createCapabilitiesRouter(addonRegistry, configService, loggingService)
             return caps.map((cap) => ({
                 ...cap,
                 providerDetails: getProviderDetails(cap.providers),
-                isInfra: (0, kernel_1.isInfraCapability)(cap.name),
+                isInfra: (0, system_1.isInfraCapability)(cap.name),
             }));
         }),
         // ─── Get current preference for a capability ──────────────────────
@@ -98,7 +98,7 @@ function createCapabilitiesRouter(addonRegistry, configService, loggingService)
                         message: `Provider "${addonId}" is not registered for "${capability}"`,
                     });
                 }
-                const requiresRestart = (0, kernel_1.isInfraCapability)(capability);
+                const requiresRestart = (0, system_1.isInfraCapability)(capability);
                 if (!requiresRestart) {
                     // Hot-swap at runtime
                     await registry.setActiveSingleton(capability, addonId);

package/dist/api/core/cap-providers.js

@@ -72,7 +72,7 @@ const node_util_1 = require("node:util");
 const node_crypto_1 = require("node:crypto");
 const server_1 = require("@trpc/server");
 const types_1 = require("@camstack/types");
-const kernel_1 = require("@camstack/kernel");
+const system_1 = require("@camstack/system");
 const integration_id_backfill_1 = require("../../boot/integration-id-backfill");
 const collection_preference_js_1 = require("./collection-preference.js");
 const bulk_update_coordinator_js_1 = require("./bulk-update-coordinator.js");
@@ -445,7 +445,7 @@ function buildNodesProvider(agentRegistry, moleculer, addonRegistry) {
             return result;
         },
         getCapUsageGraph: async (input) => {
-            const reg = (0, kernel_1.getCapUsageRegistry)();
+            const reg = (0, system_1.getCapUsageRegistry)();
             return reg.getGraph({ windowSeconds: input.windowSeconds, nowMs: Date.now() });
         },
         setProcessLogLevel: async (input) => {
@@ -942,7 +942,7 @@ function buildAddonsProvider(ar, ps, ls, moleculer, configService, ctx, eb) {
         },
         logger: ls.createLogger('bulk-update'),
     });
-    const frameworkAllowSet = new Set(addon_package_service_js_1.FRAMEWORK_PACKAGE_ALLOWLIST);
+    const frameworkAllowSet = new Set([addon_package_service_js_1.SYSTEM_PACKAGE]);
     return {
         list: async () => {
             const rollbackable = ps.getRollbackablePackages();

package/dist/api/core/logs.router.js

@@ -5,7 +5,7 @@ exports.createLogsRouter = createLogsRouter;
  * Logs router — fixed core API (not a capability).
  *
  * Queries and streams log entries via `LoggingService` (thin NestJS DI
- * wrapper over `LogManager` from `@camstack/core`). Admin can read
+ * wrapper over `LogManager` from `@camstack/system`). Admin can read
  * everything; viewers/protected users only see entries matching their
  * allowed providers scope (filtered in `query`).
  */

package/dist/api/core/notifications.router.js

@@ -5,7 +5,7 @@ exports.createNotificationsRouter = createNotificationsRouter;
  * Notifications router — fixed core API (not a capability).
  *
  * Routes events by category to registered outputs. The NotificationService
- * is a singleton from @camstack/core; individual outputs are still provided
+ * is a singleton from @camstack/system; individual outputs are still provided
  * by addons via the `notification-output` capability collection.
  */
 const zod_1 = require("zod");

package/dist/api/core/repl.router.js

@@ -5,7 +5,7 @@ exports.createReplRouter = createReplRouter;
  * REPL router — fixed core API (not a capability).
  *
  * The REPL engine is a single NestJS-backed service in the backend
- * (`ReplEngineService` extends `ReplEngine` from `@camstack/core`).
+ * (`ReplEngineService` extends `ReplEngine` from `@camstack/system`).
  * Only super_admin can execute code.
  */
 const zod_1 = require("zod");

package/dist/api/health/health.routes.js

@@ -14,7 +14,7 @@ async function buildHubHealth(deps, proc = process) {
     const totalMem = memUsage.heapTotal + memUsage.external + memUsage.arrayBuffers;
     const memoryPercent = totalMem > 0 ? Math.round((memUsage.heapUsed / totalMem) * 100) : 0;
     return {
-        ok: true,
+        ok: deps.isReady(),
         nodeId: 'hub',
         version: deps.hubVersion,
         uptimeSeconds: Math.round(proc.uptime()),
@@ -39,7 +39,12 @@ async function fetchAgentHealth(deps, nodeId) {
     }
 }
 function registerHealthRoutes(fastify, deps) {
-    fastify.get('/health', async () => buildHubHealth(deps));
+    fastify.get('/health', async (_req, reply) => {
+        const health = await buildHubHealth(deps);
+        if (!health.ok)
+            reply.status(503);
+        return health;
+    });
     fastify.get('/health/agents', async () => {
         const nodes = await deps.agentRegistry.listNodes();
         return {

package/dist/api/trpc/cap-route-error-formatter.js

@@ -16,7 +16,7 @@ exports.formatTrpcError = formatTrpcError;
  *
  * The formatter is EXPORTED for unit testing (no side-effects, pure function).
  */
-const kernel_1 = require("@camstack/kernel");
+const system_1 = require("@camstack/system");
 // ---------------------------------------------------------------------------
 // Type guards
 // ---------------------------------------------------------------------------
@@ -56,7 +56,7 @@ function extractCapRouteError(err) {
     for (let depth = 0; depth < 8; depth++) {
         if (current === null || current === undefined)
             return null;
-        if (current instanceof kernel_1.CapRouteError) {
+        if (current instanceof system_1.CapRouteError) {
             return current;
         }
         // Duck-type fallback: err.name + err.reason field present
@@ -83,7 +83,7 @@ function extractCapRouteError(err) {
                 const rawCapName = Reflect.get(current, 'capName');
                 const capName = typeof rawCapName === 'string' ? rawCapName : '(unknown)';
                 // Build a minimal object with the same shape — enough for the formatter.
-                const synthetic = Object.assign(new kernel_1.CapRouteError(capName, undefined, {
+                const synthetic = Object.assign(new system_1.CapRouteError(capName, undefined, {
                     reason,
                     rejected,
                     ...(typeof nodeId === 'string' ? { nodeId } : {}),

package/dist/api/trpc/core-cap-bridge.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildCoreCapService = buildCoreCapService;
-const kernel_1 = require("@camstack/kernel");
+const system_1 = require("@camstack/system");
 const trpc_middleware_js_1 = require("./trpc.middleware.js");
 const trpc_context_js_1 = require("./trpc.context.js");
 /**
@@ -111,5 +111,5 @@ function buildCoreCapService(appRouter) {
         const method = path.slice(dot + 1);
         actions.push({ actionName: `${toKebab(namespace)}.${method}`, invoke });
     }
-    return (0, kernel_1.createCoreCapService)({ actions });
+    return (0, system_1.createCoreCapService)({ actions });
 }

package/dist/api/trpc/generated-cap-routers.js

@@ -140,7 +140,7 @@ exports.createCapRouter_zoneAnalytics = createCapRouter_zoneAnalytics;
 exports.createCapRouter_zoneRules = createCapRouter_zoneRules;
 exports.createCapRouter_zones = createCapRouter_zones;
 const server_1 = require("@trpc/server");
-const kernel_1 = require("@camstack/kernel");
+const system_1 = require("@camstack/system");
 const zod_1 = require("zod");
 const trpc_middleware_js_1 = require("./trpc.middleware.js");
 const types_1 = require("@camstack/types");
@@ -259,7 +259,7 @@ function requireCapProvider(name, getProvider) {
         throw new server_1.TRPCError({
             code: 'PRECONDITION_FAILED',
             message: `Capability "${name}" provider not available`,
-            cause: new kernel_1.CapRouteError(name, undefined, {
+            cause: new system_1.CapRouteError(name, undefined, {
                 reason: 'no-provider',
                 rejected: [{ kind: 'hub-in-process', why: 'no provider bound for this cap' }],
             }),
@@ -285,7 +285,7 @@ function resolveProvider(capName, nodeId, getLocal, createProxy) {
         throw new server_1.TRPCError({
             code: 'PRECONDITION_FAILED',
             message: `Capability "${capName}" provider not available`,
-            cause: new kernel_1.CapRouteError(capName, undefined, {
+            cause: new system_1.CapRouteError(capName, undefined, {
                 reason: 'no-provider',
                 rejected: [{ kind: 'hub-in-process', why: 'no provider bound for this cap/device' }],
             }),
@@ -302,7 +302,7 @@ function resolveProvider(capName, nodeId, getLocal, createProxy) {
         throw new server_1.TRPCError({
             code: 'PRECONDITION_FAILED',
             message: `Capability "${capName}" not available on node "${nodeId}"`,
-            cause: new kernel_1.CapRouteError(capName, undefined, {
+            cause: new system_1.CapRouteError(capName, undefined, {
                 reason: 'no-provider',
                 nodeId,
                 rejected: [{ kind: 'remote-moleculer', why: `cap not available on node "${nodeId}"` }],

package/dist/boot/boot-config.js

@@ -208,10 +208,10 @@ async function setupInfra(configPath, bootstrapConfig) {
     // --- Phase 2c: TLS certificate setup ---
     let tlsOptions;
     if (config.tls.enabled) {
-        // Use require() instead of import() — the ESM build of @camstack/core has
+        // Use require() instead of import() — the ESM build of @camstack/system has
         // broken chunks with require("fs") when leaked .js files exist in core/src/.
         // CJS build works correctly and tsx supports require().
-        const core = require('@camstack/core');
+        const core = require('@camstack/system');
         const { ensureTlsCert, loadTlsCert } = core;
         if (config.tls.certPath && config.tls.keyPath) {
             // User-provided cert

package/dist/boot/post-boot.service.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PostBootService = void 0;
 const node_crypto_1 = require("node:crypto");
-const kernel_1 = require("@camstack/kernel");
+const system_1 = require("@camstack/system");
 const types_1 = require("@camstack/types");
 class PostBootService {
     eventBus;
@@ -57,7 +57,7 @@ class PostBootService {
         this.emitRestartCompletedIfPending(dataPath);
     }
     emitRestartCompletedIfPending(dataDir) {
-        const marker = (0, kernel_1.readPendingRestart)(dataDir);
+        const marker = (0, system_1.readPendingRestart)(dataDir);
         if (marker === null)
             return;
         const payload = {

package/dist/core/addon/addon-call-gateway.js

@@ -11,7 +11,7 @@ class AddonCallGateway {
      * Classify where an addon runs. `nodeId: 'hub'` from a caller means "the hub
      * cluster", NOT "force in-process" — a forked hub-local addon is still a
      * `hub-local-child` (UDS), never the in-process path (which is only the
-     * `@camstack/core` builtins that have no forked runner).
+     * `@camstack/system` builtins that have no forked runner).
      */
     classify(addonId, explicitNodeId) {
         const resolved = this.deps.resolveNode(addonId);

package/dist/core/addon/addon-package.service.js

@@ -33,7 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AddonPackageService = exports.FRAMEWORK_PACKAGE_ALLOWLIST = void 0;
+exports.AddonPackageService = exports.SYSTEM_PACKAGE = void 0;
 exports.isFrameworkPackage = isFrameworkPackage;
 const fs = __importStar(require("node:fs"));
 const path = __importStar(require("node:path"));
@@ -42,30 +42,17 @@ const node_child_process_1 = require("node:child_process");
 const node_util_1 = require("node:util");
 const node_crypto_1 = require("node:crypto");
 const types_1 = require("@camstack/types");
-const kernel_1 = require("@camstack/kernel");
+const system_1 = require("@camstack/system");
 const execFileAsync = (0, node_util_1.promisify)(node_child_process_1.execFile);
 /**
- * Framework packages (manifest `camstack.system: true`) that the
- * `updateFrameworkPackage` cap method is allowed to update. Any other
- * `packageName` is rejected.
- *
- * Mirror of `camstack.system: true` in
- *   packages/{types,kernel,core,sdk,ui-library,shm-ring}/package.json
+ * The single host-provided framework package. As of 2026-06-22 the framework is
+ * one bundle: @camstack/system (kernel + core; types/sdk inlined at runtime,
+ * shm-ring is a private native dep). There is no multi-entry allowlist.
  */
-exports.FRAMEWORK_PACKAGE_ALLOWLIST = [
-    '@camstack/types',
-    '@camstack/kernel',
-    '@camstack/core',
-    '@camstack/sdk',
-    '@camstack/ui-library',
-    // Phase 5 / D9 — the cross-platform shared-memory frame plane. A system
-    // package (native N-API module + `FrameRing`) the stream-broker / decoder /
-    // frame consumers all depend on; it can't be uninstalled.
-    '@camstack/shm-ring',
-];
-/** Test-only: exported for spec parity check against the manifest. */
+exports.SYSTEM_PACKAGE = '@camstack/system';
+/** Returns true only for the single host-provided framework package. */
 function isFrameworkPackage(packageName) {
-    return exports.FRAMEWORK_PACKAGE_ALLOWLIST.includes(packageName);
+    return packageName === exports.SYSTEM_PACKAGE;
 }
 // ---------------------------------------------------------------------------
 // Typed JSON helpers
@@ -111,7 +98,7 @@ function asRecord(value) {
 // Constants
 // ---------------------------------------------------------------------------
 /** Core packages that live in the server's own node_modules */
-const CORE_MANAGED_PACKAGES = ['@camstack/core', '@camstack/types'];
+const CORE_MANAGED_PACKAGES = ['@camstack/system', '@camstack/types'];
 class AddonPackageService {
     loggingService;
     eventBusService;
@@ -120,7 +107,7 @@ class AddonPackageService {
     notificationService;
     toastService;
     logger;
-    /** AddonInstaller from @camstack/kernel (may be null if kernel unavailable) */
+    /** AddonInstaller from @camstack/system (may be null if kernel unavailable) */
     installer = null;
     /** AddonLoader for reloadPackages (may be null) */
     loader = null;
@@ -155,9 +142,8 @@ class AddonPackageService {
         // Initialize installer eagerly (no async needed).
         // Ensures install/uninstall works before full module init completes.
         try {
-            const dataDir = process.env.CAMSTACK_DATA ?? 'camstack-data';
-            const addonsDir = path.resolve(dataDir, 'addons');
-            const workspacePackagesDir = (0, kernel_1.detectWorkspacePackagesDir)(__dirname);
+            const addonsDir = this.resolveAddonsDir();
+            const workspacePackagesDir = (0, system_1.detectWorkspacePackagesDir)(__dirname);
             // `CAMSTACK_NPM_REGISTRY` override exists primarily for the e2e
             // harness — it points the installer at a sandboxed verdaccio so
             // the CLI-vs-npm version-interaction tests don't hit the public
@@ -166,12 +152,12 @@ class AddonPackageService {
             // AddonInstaller). Both the `npm install` shell-out AND the
             // metadata HTTPS fetch honour this value.
             const registry = process.env['CAMSTACK_NPM_REGISTRY'];
-            this.installer = new kernel_1.AddonInstaller({
+            this.installer = new system_1.AddonInstaller({
                 addonsDir,
                 workspacePackagesDir: workspacePackagesDir ?? undefined,
                 ...(registry ? { registry } : {}),
             });
-            (0, kernel_1.ensureDir)(addonsDir);
+            (0, system_1.ensureDir)(addonsDir);
         }
         catch (error) {
             const msg = (0, types_1.errMsg)(error);
@@ -480,7 +466,7 @@ class AddonPackageService {
     /** List all installed addon packages */
     listInstalled() {
         if (!this.installer) {
-            throw new Error('AddonInstaller is not available — cannot list installed packages. Ensure @camstack/kernel is installed and the addons directory is accessible');
+            throw new Error('AddonInstaller is not available — cannot list installed packages. Ensure @camstack/system is installed and the addons directory is accessible');
         }
         return this.installer.listInstalled();
     }
@@ -494,14 +480,14 @@ class AddonPackageService {
      *
      * Fallback: if the registry hasn't loaded yet (early-boot install
      * paths, tests with stub registries), fall back to the legacy list
-     * so we don't accidentally allow uninstalling `@camstack/core` etc.
+     * so we don't accidentally allow uninstalling `@camstack/system` etc.
      * during a window where protection metadata isn't yet readable.
      */
     isProtected(name) {
         const fromRegistry = this.addonRegistry?.isPackageProtected?.(name);
         if (typeof fromRegistry === 'boolean')
             return fromRegistry;
-        return kernel_1.AddonInstaller.REQUIRED_PACKAGES.includes(name);
+        return system_1.AddonInstaller.REQUIRED_PACKAGES.includes(name);
     }
     /**
      * Set of package names with a pending pre-update backup on disk —
@@ -804,7 +790,7 @@ class AddonPackageService {
             // hub/node_modules/@camstack/ — addons resolve everything from
             // their own inlined deps.
             const addonsDir = this.resolveAddonsDir();
-            const { installPackageFromNpmSync } = await Promise.resolve().then(() => __importStar(require('@camstack/kernel')));
+            const { installPackageFromNpmSync } = await Promise.resolve().then(() => __importStar(require('@camstack/system')));
             const dirName = name.replace(/^@camstack\//, '');
             const targetDir = path.join(addonsDir, dirName);
             const packageSpec = version ? `${name}@${version}` : name;
@@ -843,7 +829,7 @@ class AddonPackageService {
             ...(requestedBy !== undefined ? { requestedBy } : {}),
         };
         try {
-            (0, kernel_1.writePendingRestart)(this.resolveDataDir(), payload);
+            (0, system_1.writePendingRestart)(this.resolveDataDir(), payload);
         }
         catch (err) {
             // Marker write failure shouldn't block the restart — log + continue.
@@ -859,7 +845,7 @@ class AddonPackageService {
             data: payload,
         });
         // 10s grace gives in-flight requests time to drain.
-        (0, kernel_1.scheduleSelfRestart)({ delayMs: 10_000 });
+        (0, system_1.scheduleSelfRestart)({ delayMs: 10_000 });
     }
     // =========================================================================
     // Framework live-update
@@ -878,7 +864,7 @@ class AddonPackageService {
      */
     async listFrameworkPackages() {
         const registry = process.env['CAMSTACK_NPM_REGISTRY'];
-        const rows = await Promise.all(exports.FRAMEWORK_PACKAGE_ALLOWLIST.map(async (packageName) => {
+        const rows = await Promise.all([exports.SYSTEM_PACKAGE].map(async (packageName) => {
             const manifest = readResolvedPackageManifest(packageName);
             const currentVersion = manifest !== null && typeof manifest['version'] === 'string'
                 ? manifest['version']
@@ -932,8 +918,8 @@ class AddonPackageService {
      */
     async updateFrameworkPackage(input) {
         const { packageName } = input;
-        if (!exports.FRAMEWORK_PACKAGE_ALLOWLIST.includes(packageName)) {
-            throw new Error(`updateFrameworkPackage: '${packageName}' is not a framework package. Allowed: ${exports.FRAMEWORK_PACKAGE_ALLOWLIST.join(', ')}`);
+        if (packageName !== exports.SYSTEM_PACKAGE) {
+            throw new Error(`updateFrameworkPackage: '${packageName}' is not a framework package. Allowed: ${exports.SYSTEM_PACKAGE}`);
         }
         const appRoot = resolveFrameworkPackageAppRoot(packageName, this.logger);
         const fromManifest = readResolvedPackageManifest(packageName);
@@ -971,7 +957,7 @@ class AddonPackageService {
             ...(input.requestedBy !== undefined ? { requestedBy: input.requestedBy } : {}),
         };
         try {
-            (0, kernel_1.writePendingRestart)(this.resolveDataDir(), markerPayload);
+            (0, system_1.writePendingRestart)(this.resolveDataDir(), markerPayload);
         }
         catch (err) {
             // The npm install already completed — the restart will still
@@ -987,7 +973,7 @@ class AddonPackageService {
             category: types_1.EventCategory.SystemRestarting,
             data: markerPayload,
         });
-        (0, kernel_1.scheduleSelfRestart)({ delayMs: 500 });
+        (0, system_1.scheduleSelfRestart)({ delayMs: 500 });
         return { packageName, fromVersion, toVersion, restartingAt };
     }
     // =========================================================================
@@ -996,10 +982,9 @@ class AddonPackageService {
     /** Re-discover addons from the addons directory (call after install/uninstall) */
     async reloadPackages() {
         try {
-            const kernel = await Promise.resolve().then(() => __importStar(require('@camstack/kernel')));
+            const kernel = await Promise.resolve().then(() => __importStar(require('@camstack/system')));
             this.loader = new kernel.AddonLoader(this.logger.child('AddonLoader'));
-            const dataDir = process.env.CAMSTACK_DATA ?? 'camstack-data';
-            const addonsDir = path.resolve(dataDir, 'addons');
+            const addonsDir = this.resolveAddonsDir();
             await this.loader.loadFromDirectory(addonsDir);
             this.logger.info('Reloaded', { meta: { count: this.loader.listAddons().length } });
         }
@@ -1402,13 +1387,22 @@ class AddonPackageService {
     }
     /** Resolve the addons directory from config or fall back to default */
     resolveAddonsDir() {
+        // Must match where the runtime LOADS addons (launcher.ts +
+        // addon-registry.service.ts honor CAMSTACK_ADDONS_DIR). If this service
+        // installed/reloaded from a different dir than the runtime loads, a
+        // post-install reload re-registers the hub node from an INCOMPLETE set
+        // (registerNode replaces the cap set atomically) — dropping in-process
+        // builtins like device-manager/addon-pages/addon-widgets.
+        const envDir = process.env.CAMSTACK_ADDONS_DIR;
+        if (envDir && envDir.trim().length > 0)
+            return path.resolve(envDir);
         const dataPath = this.configService.get('server.dataPath') ?? 'camstack-data';
         return path.resolve(dataPath, 'addons');
     }
     /** Throw if installer was not initialised */
     requireInstaller() {
         if (!this.installer) {
-            throw new Error('AddonInstaller is not available -- @camstack/kernel may not be installed');
+            throw new Error('AddonInstaller is not available -- @camstack/system may not be installed');
         }
     }
     /** Send notification and toast for a successful package update */