@camstack/server 1.0.2 → 1.0.4

package/dist/core/addon/addon-registry.service.js

@@ -38,11 +38,11 @@ exports.AddonRegistryService = void 0;
 const os = __importStar(require("node:os"));
 const addon_row_manifest_1 = require("./addon-row-manifest");
 const types_1 = require("@camstack/types");
-const kernel_1 = require("@camstack/kernel");
-const kernel_2 = require("@camstack/kernel");
+const system_1 = require("@camstack/system");
+const system_2 = require("@camstack/system");
 const client_1 = require("@trpc/client");
-const kernel_3 = require("@camstack/kernel");
-const core_1 = require("@camstack/core");
+const system_3 = require("@camstack/system");
+const system_4 = require("@camstack/system");
 const node_crypto_1 = require("node:crypto");
 const path = __importStar(require("node:path"));
 const fs = __importStar(require("node:fs"));
@@ -55,7 +55,7 @@ const types_3 = require("@camstack/types");
  * Type predicate: true when an `ISettingsBackend` also satisfies the
  * sync `ISettingsStore` contract (system/addon/device key-value ops)
  * that ConfigManager expects. The default `SqliteSettingsBackend` in
- * `@camstack/core` implements both surfaces; forked addon backends may
+ * `@camstack/system` implements both surfaces; forked addon backends may
  * not, in which case we skip the ConfigService wiring.
  */
 function isSettingsStore(backend) {
@@ -174,7 +174,7 @@ class AddonRegistryService {
     // Task 7.1: hub-wide registry of addon custom actions. Populated on
     // each addon's initialize() (in-process path); Task 7.2 will dispatch
     // through this from the `api.addons.custom` tRPC procedure.
-    customActionRegistry = new kernel_1.CustomActionRegistry();
+    customActionRegistry = new system_1.CustomActionRegistry();
     /**
      * AddonIds whose group-runner disconnect is operator-initiated (update /
      * restart / uninstall). The Moleculer `$node.disconnected` handler skips
@@ -209,7 +209,7 @@ class AddonRegistryService {
                 getByName: (capName) => reg.getSingleton(capName) ?? reg.getAllProviders(capName)[0] ?? null,
             };
             const client = (0, client_1.createTRPCClient)({
-                links: [(0, kernel_2.localProviderLink)(resolver), (0, kernel_2.brokerTransportLink)(this.moleculer.broker)],
+                links: [(0, system_2.localProviderLink)(resolver), (0, system_2.brokerTransportLink)(this.moleculer.broker)],
             });
             this.brokerApi = client;
         }
@@ -225,7 +225,7 @@ class AddonRegistryService {
     integrationRegistry = null;
     // Device architecture — in-memory registry of live IDevice instances.
     // Persistence is owned by the `device-manager` capability addon.
-    deviceRegistry = new kernel_1.DeviceRegistry();
+    deviceRegistry = new system_1.DeviceRegistry();
     /**
      * Typed accessor for the Moleculer broker. The Moleculer `index.d.ts`
      * chains through `eventemitter2`, whose package.json has no `types`
@@ -249,7 +249,7 @@ class AddonRegistryService {
         this.moleculer = moleculer;
         this.streamProbe = streamProbe;
         this.logger = this.loggingService.createLogger('AddonRegistry');
-        this.addonLoader = new kernel_1.AddonLoader(this.loggingService.createLogger('AddonLoader'));
+        this.addonLoader = new system_1.AddonLoader(this.loggingService.createLogger('AddonLoader'));
         // Kernel-level addon health monitor — drives the 5-min boot grace
         // window + aggressive auto-retry loop (60s/120s/300s, never gives
         // up). Failures and recoveries are recorded by the load + init
@@ -257,13 +257,13 @@ class AddonRegistryService {
         // reattempt failed addons. Operator visibility comes through
         // AddonLoadFailed / AddonLoadRecovered events consumed by
         // AlertCenter (see addon-health-monitor.ts spec).
-        this.healthMonitor = new kernel_1.AddonHealthMonitor({
+        this.healthMonitor = new system_1.AddonHealthMonitor({
             eventBus: this.eventBusService,
             logger: this.loggingService.createLogger('AddonHealthMonitor'),
             retryFn: (packageName) => this.tryReloadPackage(packageName),
         });
         // Create capability registry with config reader for singleton preferences
-        this.capabilityRegistry = new kernel_1.CapabilityRegistry(this.loggingService.createLogger('CapabilityRegistry'), this.eventBusService);
+        this.capabilityRegistry = new system_1.CapabilityRegistry(this.loggingService.createLogger('CapabilityRegistry'), this.eventBusService);
         this.capabilityRegistry.setConfigReader((capability) => {
             try {
                 return this.configService.get(`capabilities.singleton.${capability}`) ?? undefined;
@@ -386,9 +386,12 @@ class AddonRegistryService {
                 return;
             this.capabilityRegistry.setSingletonActiveAddon(data.capName, data.addonId ?? null);
         });
-        // 2. Load all addons from data/addons/ directory (including core builtins)
+        // 2. Load all addons from the addons directory (including core builtins).
+        // Honors CAMSTACK_ADDONS_DIR (a `node_modules`-shaped dir on Docker/Electron
+        // so forked ESM addon runners resolve @camstack/* via walk-up — see the
+        // launcher). Defaults to `<dataDir>/addons` for dev.
         const dataDir = path.resolve(process.env.CAMSTACK_DATA ?? 'camstack-data');
-        const addonsDir = path.resolve(dataDir, 'addons');
+        const addonsDir = process.env.CAMSTACK_ADDONS_DIR ?? path.resolve(dataDir, 'addons');
         await this.addonLoader.loadFromDirectory(addonsDir);
         // Hand pre-init load failures (broken package.json, missing
         // dist, import-time errors) to the health monitor so its retry
@@ -447,7 +450,7 @@ class AddonRegistryService {
         });
         // Platform probing is no longer orchestrated by the backend. The
         // `platform-probe` capability (shipped as a core builtin under
-        // `@camstack/core/dist/builtins/platform-probe/` since Phase B of
+        // `@camstack/system/dist/builtins/platform-probe/` since Phase B of
         // the bundles refactor) exposes hardware + scored backends via
         // `ctx.api.platformProbe.*`; inference addons auto-configure
         // inside their own `onInitialize`.
@@ -481,7 +484,7 @@ class AddonRegistryService {
         // genuinely has no cross-process provider and the fallback returns null — wrappers
         // cleanly fall through to their own secondary strategy.
         {
-            const { buildNativeCapProxy } = await Promise.resolve().then(() => __importStar(require('@camstack/kernel')));
+            const { buildNativeCapProxy } = await Promise.resolve().then(() => __importStar(require('@camstack/system')));
             // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment -- moleculer types unresolvable; see `broker` getter docstring
             const broker = this.moleculer.broker;
             this.capabilityRegistry.setNativeFallback((capName, deviceId) => {
@@ -561,7 +564,7 @@ class AddonRegistryService {
         // one were declared — the mechanism stays available as an explicit
         // opt-in for future co-location needs.
         //
-        // `@camstack/core` builtins and `placement: 'agent-only'` addons are
+        // `@camstack/system` builtins and `placement: 'agent-only'` addons are
         // excluded from the plan (filtered inside `buildAddonGroupPlan`).
         // A failed runner spawn is logged and the addon surfaces as
         // `addon.error` — there is NO in-process-on-the-hub fallback (it
@@ -590,7 +593,7 @@ class AddonRegistryService {
                 }
             }
         }
-        // In-process boot for `@camstack/core` builtins. Core builtins stay
+        // In-process boot for `@camstack/system` builtins. Core builtins stay
         // resident on the hub process — they provide the storage / settings
         // / logging infrastructure every forked runner depends on, reachable
         // via the hub broker, so `buildAddonGroupPlan` excludes them from
@@ -599,14 +602,14 @@ class AddonRegistryService {
         // storage→settings→logging), then the remaining builtins in
         // capability-dependency order.
         //
-        // A core builtin is identified by `packageName === "@camstack/core"`,
+        // A core builtin is identified by `packageName === "@camstack/system"`,
         // NOT by the absence of an `execution` declaration — a builtin may
         // still declare `execution` (e.g. `platform-probe`); the package
         // boundary is the selection criterion.
-        const isCoreBuiltin = (id) => this.addonEntries.get(id)?.packageName === '@camstack/core';
+        const isCoreBuiltin = (id) => this.addonEntries.get(id)?.packageName === '@camstack/system';
         // Pass 1 — infrastructure builtins. A failed REQUIRED infra cap
         // aborts boot: nothing downstream can run without storage/settings.
-        for (const infra of kernel_1.INFRA_CAPABILITIES) {
+        for (const infra of system_1.INFRA_CAPABILITIES) {
             const addonId = this.findAddonForCapability(infra.name, allIds);
             if (addonId) {
                 const entry = this.addonEntries.get(addonId);
@@ -642,7 +645,7 @@ class AddonRegistryService {
         }
         // Pass 2 — remaining core builtins, in capability-dependency order.
         const bootOrder = this.capabilityRegistry.getBootOrder();
-        const infraNames = new Set(kernel_1.INFRA_CAPABILITIES.map((c) => c.name));
+        const infraNames = new Set(system_1.INFRA_CAPABILITIES.map((c) => c.name));
         for (const capName of bootOrder) {
             if (infraNames.has(capName))
                 continue; // Handled in pass 1
@@ -783,7 +786,7 @@ class AddonRegistryService {
      */
     async tryReloadPackage(packageName) {
         const dataDir = path.resolve(process.env.CAMSTACK_DATA ?? 'camstack-data');
-        const addonsDir = path.resolve(dataDir, 'addons');
+        const addonsDir = process.env.CAMSTACK_ADDONS_DIR ?? path.resolve(dataDir, 'addons');
         const addonDir = path.join(addonsDir, packageName);
         if (!fs.existsSync(addonDir)) {
             throw new Error(`Package directory missing: ${addonDir}`);
@@ -1055,10 +1058,10 @@ class AddonRegistryService {
         // subprocess. The runner-spawn pass during initial boot already
         // spawned every eligible addon; `initializeAddon` is the per-addon
         // entry point reached by the hot-load / restart flows (and by the
-        // Pass 1/2/3 in-process boot for `@camstack/core` builtins). Fork
+        // Pass 1/2/3 in-process boot for `@camstack/system` builtins). Fork
         // only when the addon declares an `execution` block, ships an
         // on-disk `addonDir`, and is not `agent-only`; otherwise (only
-        // `@camstack/core` builtins reach the in-process path below) it
+        // `@camstack/system` builtins reach the in-process path below) it
         // boots in-process on the hub.
         if (this.isForkedAddonEntry(entry)) {
             // D5: one-addon-one-process. A forked addon ALWAYS boots in its
@@ -1129,7 +1132,7 @@ class AddonRegistryService {
             // D4: wrapper behaviour is read from the cap DEFINITION. The runtime
             // ProviderRegistration.kind/defaultActive are deprecated hints — if an
             // addon still sets them and they disagree, warn (the cap def wins).
-            const kindDrift = (0, kernel_1.describeProviderKindDrift)(capName, reg.capability, {
+            const kindDrift = (0, system_1.describeProviderKindDrift)(capName, reg.capability, {
                 // eslint-disable-next-line @typescript-eslint/no-deprecated -- this IS the drift detector; it reads the deprecated hint on purpose
                 kind: reg.kind,
                 // eslint-disable-next-line @typescript-eslint/no-deprecated -- this IS the drift detector; it reads the deprecated hint on purpose
@@ -1181,7 +1184,7 @@ class AddonRegistryService {
                 if (provider)
                     capturedProviders.set(capName, provider);
             }
-            (0, kernel_1.validateProviderRegistrations)(id, entry.declaration, capturedProviders, this.logger);
+            (0, system_1.validateProviderRegistrations)(id, entry.declaration, capturedProviders, this.logger);
         }
         await this.restoreAddonDevices(id, entry.addon);
         entry.initialized = true;
@@ -1196,7 +1199,7 @@ class AddonRegistryService {
                     return Object.keys(def.methods);
                 };
                 // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment -- createAddonService return type unresolvable due to upstream eventemitter2/moleculer type chain
-                const schema = (0, kernel_1.createAddonService)(entry.addon, entry.declaration, {
+                const schema = (0, system_1.createAddonService)(entry.addon, entry.declaration, {
                     methodResolver,
                     providers: capturedProviders,
                 });
@@ -1380,7 +1383,7 @@ class AddonRegistryService {
             }
             // D5: a forked addon ALWAYS restarts via `$process.restart` above
             // (process restart — no in-process hot-reload of a live forked
-            // addon). This branch is reached only by `@camstack/core` builtins
+            // addon). This branch is reached only by `@camstack/system` builtins
             // — they have no runner and legitimately reload in-process:
             // shutdown, unregister, re-initialize, re-wire.
             if (entry.initialized && entry.addon.shutdown) {
@@ -1469,7 +1472,7 @@ class AddonRegistryService {
     }
     findAddonDirOnDisk(addonId) {
         const dataDir = path.resolve(process.env.CAMSTACK_DATA ?? 'camstack-data');
-        const addonsDir = path.resolve(dataDir, 'addons');
+        const addonsDir = process.env.CAMSTACK_ADDONS_DIR ?? path.resolve(dataDir, 'addons');
         if (!fs.existsSync(addonsDir))
             return null;
         const visit = (pkgDir) => {
@@ -1570,7 +1573,7 @@ class AddonRegistryService {
      * True when the entry boots in its own forked runner. This MUST mirror
      * the fork authority `buildAddonGroupPlan`, which spawns a runner for
      * every addon that ships an on-disk `addonDir` + a manifest
-     * `declaration`, is NOT a `@camstack/core` builtin, and is NOT
+     * `declaration`, is NOT a `@camstack/system` builtin, and is NOT
      * `agent-only`. The `execution` block is OPTIONAL — an addon with no
      * `execution` declaration still forks on its own dedicated runner
      * (`resolveRunnerId` falls back to the addon id). Requiring `execution`
@@ -1579,13 +1582,13 @@ class AddonRegistryService {
      * in-process by this predicate, so its route-mount took the co-located
      * path and received the async UDS cap proxy whose `getRoutes()` returns
      * a Promise (→ `getRoutes(...).map is not a function`). Only
-     * `@camstack/core` builtins boot in-process on the hub. The type
+     * `@camstack/system` builtins boot in-process on the hub. The type
      * predicate narrows both `addonDir` and `declaration` for callers.
      */
     isForkedAddonEntry(entry) {
         return !!(entry.declaration &&
             entry.addonDir &&
-            entry.packageName !== '@camstack/core' &&
+            entry.packageName !== '@camstack/system' &&
             (0, types_1.resolveAddonPlacement)(entry.declaration) !== 'agent-only');
     }
     /** Per-entry helper used by `listAddons()` to mark a row removable / not. */
@@ -1675,7 +1678,7 @@ class AddonRegistryService {
      */
     scanFailedToLoadPackages(seenPackages) {
         const dataDir = path.resolve(process.env.CAMSTACK_DATA ?? 'camstack-data');
-        const addonsDir = path.resolve(dataDir, 'addons');
+        const addonsDir = process.env.CAMSTACK_ADDONS_DIR ?? path.resolve(dataDir, 'addons');
         if (!fs.existsSync(addonsDir))
             return [];
         const out = [];
@@ -1791,7 +1794,7 @@ class AddonRegistryService {
     async listAddonProcesses() {
         const result = [];
         // Collect hub PID and fetch stats
-        const { getPidStats } = await Promise.resolve().then(() => __importStar(require('@camstack/core')));
+        const { getPidStats } = await Promise.resolve().then(() => __importStar(require('@camstack/system')));
         const pidStats = await getPidStats([process.pid]);
         // In-process addons
         const hubStats = pidStats.get(process.pid);
@@ -1832,9 +1835,9 @@ class AddonRegistryService {
      */
     async loadNewAddons() {
         const dataDir = path.resolve(process.env.CAMSTACK_DATA ?? 'camstack-data');
-        const addonsDir = path.resolve(dataDir, 'addons');
+        const addonsDir = process.env.CAMSTACK_ADDONS_DIR ?? path.resolve(dataDir, 'addons');
         // Create a fresh loader to discover what's on disk (for diffing against existing)
-        const freshLoader = new kernel_1.AddonLoader(this.loggingService.createLogger('AddonLoader'));
+        const freshLoader = new system_1.AddonLoader(this.loggingService.createLogger('AddonLoader'));
         await freshLoader.loadFromDirectory(addonsDir);
         const loaded = [];
         const failed = [];
@@ -1916,7 +1919,7 @@ class AddonRegistryService {
         // D5: every non-core addon lives in its own runner subprocess. The
         // uninstall consolidation is "stop the runner"; the runner exits and
         // re-handshakes the hub WITHOUT the removed addon (D3 machinery).
-        // Only `@camstack/core` builtins — which have no runner — take the
+        // Only `@camstack/system` builtins — which have no runner — take the
         // in-process `shutdown()` + disposer-drain path.
         const onDiskIds = new Set(freshLoader.listAddons().map((a) => a.declaration.id));
         for (const [id, entry] of this.addonEntries) {
@@ -1948,7 +1951,7 @@ class AddonRegistryService {
                     }
                 }
                 else if (entry.initialized) {
-                    // `@camstack/core` builtin — reload model is in-process.
+                    // `@camstack/system` builtin — reload model is in-process.
                     try {
                         await entry.addon.shutdown();
                     }
@@ -2047,7 +2050,7 @@ class AddonRegistryService {
                         this.configService.setSettingsStore(provider);
                     }
                     this.storageService.setSettingsBackend(provider);
-                    this.integrationRegistry = new core_1.IntegrationRegistry(provider);
+                    this.integrationRegistry = new system_4.IntegrationRegistry(provider);
                     void this.integrationRegistry.initialize().then(() => {
                         this.logger.info('IntegrationRegistry initialized', { meta: { phase: 'v2' } });
                     });
@@ -2129,7 +2132,7 @@ class AddonRegistryService {
         if (!routeProvider)
             return;
         // ── Forked addon: fetch handler-stripped routes over UDS (F3) ──────
-        // EVERY non-`@camstack/core` addon forks (the fork authority is
+        // EVERY non-`@camstack/system` addon forks (the fork authority is
         // `buildAddonGroupPlan`, which does NOT require an `execution` block — an
         // addon like `auth-oidc` with no `execution` still runs in its own
         // runner). `isForkedAddonEntry` now mirrors that rule. For a forked addon
@@ -2163,7 +2166,7 @@ class AddonRegistryService {
             });
             return;
         }
-        // ── Co-located addon (`@camstack/core` builtin): live handlers, register
+        // ── Co-located addon (`@camstack/system` builtin): live handlers, register
         // the provider directly. The route handlers run in-process against the
         // real Fastify reply, so no wire bridge is needed.
         addonRouteRegistry.registerRoutes(routeProvider.id, routeProvider);
@@ -2404,7 +2407,7 @@ class AddonRegistryService {
             probe: (url, options) => this.streamProbe.probe(url, options),
             probeField: (key, value) => this.streamProbe.probeField(key, value),
         };
-        const deviceManagerApi = (0, kernel_1.createBrokerDeviceManagerApi)({
+        const deviceManagerApi = (0, system_1.createBrokerDeviceManagerApi)({
             api: this.getBrokerApi(),
             addonId,
             nodeId: this.broker.nodeID,
@@ -2418,11 +2421,11 @@ class AddonRegistryService {
         const rr = this.moleculer.readinessRegistry;
         const capHandleCache = new Map();
         function getOrCreateHandle(capName, scope, timeoutMs) {
-            const key = `${capName}::${(0, kernel_1.scopeKey)(scope)}`;
+            const key = `${capName}::${(0, system_1.scopeKey)(scope)}`;
             const existing = capHandleCache.get(key);
             if (existing)
                 return existing;
-            const handle = new kernel_1.CapabilityHandle(capName, scope, rr, timeoutMs);
+            const handle = new system_1.CapabilityHandle(capName, scope, rr, timeoutMs);
             capHandleCache.set(key, handle);
             return handle;
         }
@@ -2455,15 +2458,15 @@ class AddonRegistryService {
                     return registry.capabilityRegistry.getSingleton(capName) ?? undefined;
                 },
             },
-            deps: new kernel_3.AddonDepsManager(dataDir, logger),
+            deps: new system_3.AddonDepsManager(dataDir, logger),
             kernel: {
                 localNodeId: this.broker.nodeID,
                 storage: storageProvider ?? undefined,
                 deviceRegistry: this.deviceRegistry ?? undefined,
                 devices: deviceManagerApi,
-                cluster: { broker: (0, kernel_1.adaptBrokerToCluster)(this.moleculer.broker) },
+                cluster: { broker: (0, system_1.adaptBrokerToCluster)(this.moleculer.broker) },
                 streamProbe: kernelStreamProbe,
-                hwaccel: (0, kernel_1.createKernelHwAccel)(),
+                hwaccel: (0, system_1.createKernelHwAccel)(),
                 capabilityRegistry: this.capabilityRegistry,
                 // Per-addon storage-location declarations across every installed
                 // addon — surfaced from the kernel's AddonLoader so the
@@ -2567,7 +2570,7 @@ class AddonRegistryService {
      *     passes a live JS reference across a process boundary any more.
      *
      * Addons with `placement: 'agent-only'` are dropped (they don't run on
-     * the hub). `@camstack/core` builtins are dropped too — they stay
+     * the hub). `@camstack/system` builtins are dropped too — they stay
      * in-process on the hub (every forked runner connects to the hub
      * broker via static-URL TCP transit, so cap providers hosted on the
      * hub broker are reachable from any runner with one hop; moving them
@@ -2583,7 +2586,7 @@ class AddonRegistryService {
             const entry = this.addonEntries.get(id);
             if (!entry?.declaration || !entry.addonDir)
                 continue;
-            if (entry.packageName === '@camstack/core')
+            if (entry.packageName === '@camstack/system')
                 continue;
             const placement = (0, types_1.resolveAddonPlacement)(entry.declaration);
             if (placement === 'agent-only')
@@ -2631,7 +2634,7 @@ class AddonRegistryService {
         for (const { addonId } of addons) {
             await this.registerForkedAddonCustomActions(addonId, runnerId);
             // Mark the entry initialized so the in-process core-builtin boot
-            // passes skip it (those passes only touch `@camstack/core`).
+            // passes skip it (those passes only touch `@camstack/system`).
             const entry = this.addonEntries.get(addonId);
             if (entry) {
                 entry.initialized = true;
@@ -2701,7 +2704,14 @@ class AddonRegistryService {
             // Cache-bust so a hot-updated bundle is re-read instead of served
             // from Node's ESM module cache.
             const cacheBustedUrl = `${(0, node_url_1.pathToFileURL)(entryPath).href}?t=${Date.now()}`;
-            const modUnknown = await Promise.resolve(`${cacheBustedUrl}`).then(s => __importStar(require(s)));
+            // A plain `await import()` here is downleveled by tsc (the backend builds
+            // with `module: CommonJS`) into a `require()`-based shim. `require()` then
+            // treats the `?t=…` cache-bust query as part of the literal filename and
+            // throws MODULE_NOT_FOUND for EVERY forked addon — so no forked addon's
+            // custom-action catalog ever loaded. Use a native dynamic import the
+            // compiler won't rewrite, so Node's ESM loader handles the query string.
+            const nativeImport = new Function('specifier', 'return import(specifier)');
+            const modUnknown = await nativeImport(cacheBustedUrl);
             catalog =
                 modUnknown && typeof modUnknown === 'object'
                     ? modUnknown['customActions']

package/dist/core/addon-bridge/addon-bridge.service.js

@@ -69,9 +69,9 @@ class AddonBridgeService {
         // Initialize installer eagerly in constructor (no async needed).
         // This ensures install/uninstall works even before onModuleInit completes.
         try {
-            const kernel = require('@camstack/kernel');
+            const kernel = require('@camstack/system');
             const dataDir = process.env.CAMSTACK_DATA ?? 'camstack-data';
-            const addonsDir = path.resolve(dataDir, 'addons');
+            const addonsDir = process.env.CAMSTACK_ADDONS_DIR ?? path.resolve(dataDir, 'addons');
             const workspacePackagesDir = kernel.detectWorkspacePackagesDir(__dirname);
             this.installer = new kernel.AddonInstaller({
                 addonsDir,
@@ -87,10 +87,10 @@ class AddonBridgeService {
     async onModuleInit() {
         this.logger.info('Initializing addon bridge (package management only)...');
         try {
-            const kernel = await Promise.resolve().then(() => __importStar(require('@camstack/kernel')));
+            const kernel = await Promise.resolve().then(() => __importStar(require('@camstack/system')));
             this.loader = new kernel.AddonLoader(this.logger.child('AddonLoader'));
             const dataDir = process.env.CAMSTACK_DATA ?? 'camstack-data';
-            const addonsDir = path.resolve(dataDir, 'addons');
+            const addonsDir = process.env.CAMSTACK_ADDONS_DIR ?? path.resolve(dataDir, 'addons');
             await this.loader.loadFromDirectory(addonsDir);
             this.available = true;
             this.logger.info('Addon bridge initialized', {
@@ -134,10 +134,10 @@ class AddonBridgeService {
             this.logger.warn('reloadPackages called but bridge is unavailable — skipping');
             return;
         }
-        const kernel = await Promise.resolve().then(() => __importStar(require('@camstack/kernel')));
+        const kernel = await Promise.resolve().then(() => __importStar(require('@camstack/system')));
         this.loader = new kernel.AddonLoader(this.logger.child('AddonLoader'));
         const dataDir = process.env.CAMSTACK_DATA ?? 'camstack-data';
-        const addonsDir = path.resolve(dataDir, 'addons');
+        const addonsDir = process.env.CAMSTACK_ADDONS_DIR ?? path.resolve(dataDir, 'addons');
         await this.loader.loadFromDirectory(addonsDir);
         this.logger.info('Reloaded', { meta: { count: this.loader.listAddons().length } });
     }

package/dist/core/addon-pages/addon-pages.service.js

@@ -42,7 +42,7 @@ const fs = __importStar(require("node:fs"));
  *
  * The public listing surface (`addonPages.listPages` on the AppRouter)
  * has been split out of this class — it now lives in the
- * `addon-pages-aggregator` builtin (`@camstack/core/builtins/...`)
+ * `addon-pages-aggregator` builtin (`@camstack/system/builtins/...`)
  * which walks every `addon-pages-source` collection provider and
  * stamps versioned `bundleUrl`s. The split lets both ends flow through
  * codegen instead of relying on a hand-written wrapper.

package/dist/core/auth/auth.service.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthService = void 0;
-const core_1 = require("@camstack/core");
-class AuthService extends core_1.AuthManager {
+const system_1 = require("@camstack/system");
+class AuthService extends system_1.AuthManager {
     constructor(config) {
         super(config);
     }

package/dist/core/config/config.schema.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RUNTIME_DEFAULTS = exports.bootstrapSchema = void 0;
-// Re-export from @camstack/kernel
-var kernel_1 = require("@camstack/kernel");
-Object.defineProperty(exports, "bootstrapSchema", { enumerable: true, get: function () { return kernel_1.bootstrapSchema; } });
-Object.defineProperty(exports, "RUNTIME_DEFAULTS", { enumerable: true, get: function () { return kernel_1.RUNTIME_DEFAULTS; } });
+// Re-export from @camstack/system
+var system_1 = require("@camstack/system");
+Object.defineProperty(exports, "bootstrapSchema", { enumerable: true, get: function () { return system_1.bootstrapSchema; } });
+Object.defineProperty(exports, "RUNTIME_DEFAULTS", { enumerable: true, get: function () { return system_1.RUNTIME_DEFAULTS; } });

package/dist/core/config/config.service.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ConfigService = void 0;
-const kernel_1 = require("@camstack/kernel");
-class ConfigService extends kernel_1.ConfigManager {
+const system_1 = require("@camstack/system");
+class ConfigService extends system_1.ConfigManager {
     constructor(configPath) {
         super(configPath);
     }

package/dist/core/events/event-bus.service.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.EventBusService = void 0;
-const kernel_1 = require("@camstack/kernel");
+const system_1 = require("@camstack/system");
 /**
  * Hub-side event bus. Pre-broker boot the service buffers nothing —
  * subscribers / emits are no-ops until `attachBroker` lands the
@@ -36,7 +36,7 @@ class EventBusService {
         if (this.broker === broker)
             return;
         this.broker = broker;
-        const inner = (0, kernel_1.getBrokerEventBus)(broker);
+        const inner = (0, system_1.getBrokerEventBus)(broker);
         this.inner = inner;
         // Replay deferred subscriptions onto the real bus.
         for (const sub of this.deferredSubs) {

package/dist/core/feature/feature.service.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.FeatureService = void 0;
-const core_1 = require("@camstack/core");
-class FeatureService extends core_1.FeatureManager {
+const system_1 = require("@camstack/system");
+class FeatureService extends system_1.FeatureManager {
     constructor(configService) {
         super(configService);
     }

package/dist/core/lifecycle/lifecycle-state-machine.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LifecycleStateMachine = void 0;
-// Re-export from @camstack/core — LifecycleStateMachine is already a plain class
-var core_1 = require("@camstack/core");
-Object.defineProperty(exports, "LifecycleStateMachine", { enumerable: true, get: function () { return core_1.LifecycleStateMachine; } });
+// Re-export from @camstack/system — LifecycleStateMachine is already a plain class
+var system_1 = require("@camstack/system");
+Object.defineProperty(exports, "LifecycleStateMachine", { enumerable: true, get: function () { return system_1.LifecycleStateMachine; } });

package/dist/core/logging/log-ring-buffer.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LogRingBuffer = void 0;
-// Re-export from @camstack/core
-var core_1 = require("@camstack/core");
-Object.defineProperty(exports, "LogRingBuffer", { enumerable: true, get: function () { return core_1.LogRingBuffer; } });
+// Re-export from @camstack/system
+var system_1 = require("@camstack/system");
+Object.defineProperty(exports, "LogRingBuffer", { enumerable: true, get: function () { return system_1.LogRingBuffer; } });

package/dist/core/logging/logging.service.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LoggingService = void 0;
-const core_1 = require("@camstack/core");
+const system_1 = require("@camstack/system");
 const types_1 = require("@camstack/types");
 /** Baseline tags every hub-local logger gets, so console output never
  *  falls back to `?` for the agent slot. Hub-local addons already
@@ -13,7 +13,7 @@ const types_1 = require("@camstack/types");
  *  forked workers via `$hub.log` carry their own `tags.pid` which
  *  wins over this baseline (right-biased merge in `writeFromWorker`). */
 const HUB_BASELINE_TAGS = { agentId: 'hub', nodeId: 'hub', pid: process.pid };
-class LoggingService extends core_1.LogManager {
+class LoggingService extends system_1.LogManager {
     /**
      * Device-name cache consulted by the formatter when a log line
      * carries `tags.deviceId` but no explicit `deviceName`. Populated
@@ -31,7 +31,7 @@ class LoggingService extends core_1.LogManager {
         super(perAddonCapacity);
         // Enriches every emitted LogEntry with `tags.deviceName` before
         // destinations / subscribers see it — works across bundled copies
-        // of `@camstack/core` (addon packages) because the mutation
+        // of `@camstack/system` (addon packages) because the mutation
         // happens upstream of their formatters.
         this.setDeviceNameLookup((id) => this.deviceNames.get(id) ?? null);
     }

package/dist/core/logging/scoped-logger.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ScopedLogger = void 0;
-// Re-export from @camstack/core
-var core_1 = require("@camstack/core");
-Object.defineProperty(exports, "ScopedLogger", { enumerable: true, get: function () { return core_1.ScopedLogger; } });
+// Re-export from @camstack/system
+var system_1 = require("@camstack/system");
+Object.defineProperty(exports, "ScopedLogger", { enumerable: true, get: function () { return system_1.ScopedLogger; } });

package/dist/core/moleculer/cap-route-authority.js

@@ -1,10 +1,10 @@
 "use strict";
 /**
  * Adapter factories that bridge the server-side registry/service state into the
- * narrow interfaces that CapRouteResolver (in @camstack/kernel) requires.
+ * narrow interfaces that CapRouteResolver (in @camstack/system) requires.
  *
  * Layer note: this file is in server/backend and may import server-side types.
- * The resolver itself (in @camstack/kernel) must NOT import from here —
+ * The resolver itself (in @camstack/system) must NOT import from here —
  * it depends only on the narrow interfaces (NodeCapAuthority, InProcessProviderLookup)
  * defined in the kernel. These factories are the wiring adapters.
  *