@camstack/server 1.2.592 → 1.2.594

package/dist/core/addon/addon-registry.service.js

@@ -1,65 +1,26 @@
-"use strict";
 /* eslint-disable @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-argument, @typescript-eslint/no-unsafe-return, @typescript-eslint/no-unsafe-member-access -- pre-existing lint debt across this 2200-line orchestration class. The flagged sites (StorageService.setLocationManager / setSettingsBackend, LoggingService.addDestination, RouteRegistry, etc.) are typed as `unknown` by their owning services to break circular construction-order dependencies; runtime contracts are validated structurally. Tracked separately; do not amend in unrelated edits. */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AddonRegistryService = void 0;
-exports.shouldEvictMissingOnDisk = shouldEvictMissingOnDisk;
-exports.addonUpdatePayload = addonUpdatePayload;
-exports.parseDataPlaneEndpoints = parseDataPlaneEndpoints;
-exports.shouldEmitProviderRegisteredReady = shouldEmitProviderRegisteredReady;
-const addon_process_view_js_1 = require("./addon-process-view.js");
-const node_crypto_1 = require("node:crypto");
-const fs = __importStar(require("node:fs"));
-const os = __importStar(require("node:os"));
-const path = __importStar(require("node:path"));
-const system_1 = require("@camstack/system");
-const types_1 = require("@camstack/types");
-const client_1 = require("@trpc/client");
-const addon_call_gateway_js_1 = require("./addon-call-gateway.js");
-const addon_row_manifest_1 = require("./addon-row-manifest");
-const addon_settings_provider_js_1 = require("./addon-settings-provider.js");
-const device_meta_mirror_js_1 = require("./device-meta-mirror.js");
-const forked_custom_actions_js_1 = require("./forked-custom-actions.js");
-const integration_visibility_js_1 = require("./integration-visibility.js");
-const materialize_route_path_js_1 = require("./materialize-route-path.js");
-const package_dir_utils_1 = require("./package-dir-utils");
-const prune_misplaced_addons_js_1 = require("./prune-misplaced-addons.js");
-const runner_convergence_1 = require("./runner-convergence");
-const runner_serialization_1 = require("./runner-serialization");
-const runner_spawn_fanout_js_1 = require("./runner-spawn-fanout.js");
-const settings_door_wiring_js_1 = require("./settings-door-wiring.js");
+import { describeAddonProcess, NEVER_LOADED_PROCESS, } from './addon-process-view.js';
+import { randomUUID } from 'node:crypto';
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { AddonDepsManager, AddonHealthMonitor, AddonLoader, adaptBrokerToCluster, addonSettingsCapability, brokerTransportLink, CapabilityHandle, CapabilityRegistry, CustomActionRegistry, canServeDataPlane, createAddonDataPlaneFacility, createAddonPeerBytesFacility, createAddonService, createBrokerDeviceManagerApi, createKernelHwAccel, DeviceRegistry, describeProviderKindDrift, catalogNamespaceOf, deviceCapResolverLink, getCatalogRegistry, INFRA_CAPABILITIES, IntegrationRegistry, clusterAgentRecordKinds, clusterNodeHistoryRecordKind, integrationRegistryRecordKinds, localProviderLink, partitionIsolatedBuiltinIds, runHubAddonBoot, scopeKey, validateProviderRegistrations, waitUntilReady, asBrokerLike, } from '@camstack/system';
+import { ALL_CAPABILITY_DEFINITIONS, createDeviceProxy, createRecordsAccess, createSecretsAccess, DisposerChain, EventCategory, errMsg, isAgentOnlyPlacement, isIsolatedBuiltin, normalizeAddonInitResult, resolveAddonPlacement, resolveRunnerId, SHARE_VIEW_KINDS, } from '@camstack/types';
+import { createTRPCClient } from '@trpc/client';
+import { AddonCallGateway } from './addon-call-gateway.js';
+import { overlayDeclaration } from './addon-row-manifest';
+import { createAddonSettingsProvider } from './addon-settings-provider.js';
+import { DeviceMetaMirror } from './device-meta-mirror.js';
+import { childCatalogsFingerprint, summarizeChildCatalogs, toForkedCustomActionsSpec, } from './forked-custom-actions.js';
+import { createFilteredIntegrationRegistry } from './integration-visibility.js';
+import { coreAuthRecordKinds } from '../auth/record-kinds.js';
+import { materializeRoutePath } from './materialize-route-path.js';
+import { resolveHubClosurePackageDir } from './package-dir-utils';
+import { decidePrune, prunePlacementLeftovers } from './prune-misplaced-addons.js';
+import { planRunnerConvergence } from './runner-convergence';
+import { createRunnerSerializer } from './runner-serialization';
+import { spawnPlanConcurrently } from './runner-spawn-fanout.js';
+import { wireSettingsDoor } from './settings-door-wiring.js';
 /**
  * Decide whether an in-memory addon entry should be evicted because it is no
  * longer on disk (the uninstall path in `loadNewAddons`).
@@ -71,7 +32,7 @@ const settings_door_wiring_js_1 = require("./settings-door-wiring.js");
  * let a deploy of an unrelated addon silently unregister loki-logging on the
  * live hub.
  */
-function shouldEvictMissingOnDisk(entry, id, onDiskIds) {
+export function shouldEvictMissingOnDisk(entry, id, onDiskIds) {
     return (entry.source === 'installed' && entry.packageName !== '@camstack/system' && !onDiskIds.has(id));
 }
 /**
@@ -90,12 +51,18 @@ function shouldEvictMissingOnDisk(entry, id, onDiskIds) {
  * settings save, which emits the same category carrying no versions at all
  * (`parseAddonUpdateComplete`).
  */
-function addonUpdatePayload(fromVersion, toVersion) {
+export function addonUpdatePayload(fromVersion, toVersion) {
     return {
         ...(fromVersion !== null ? { fromVersion } : {}),
         toVersion,
     };
 }
+function isAddonDeclaration(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    const id = Reflect.get(value, 'id');
+    return typeof id === 'string' && id.length > 0;
+}
 /**
  * Type predicate: true when an `ISettingsBackend` also satisfies the
  * sync `ISettingsStore` contract (system/addon/device key-value ops)
@@ -110,10 +77,6 @@ function isSettingsStore(backend) {
         'getAllSystem',
         'getAllAddon',
         'setAllAddon',
-        'getAllProvider',
-        'setProvider',
-        'getAllDevice',
-        'setDevice',
         'getDeviceRuntimeState',
         'setDeviceRuntimeState',
         'clearDeviceRuntimeState',
@@ -195,7 +158,7 @@ function parseSerializableRouteDescriptors(raw) {
  * into typed data-plane endpoint descriptors (`prefix/access/baseUrl/secret`).
  * Pure data — the addon's `ctx.dataPlane` facility produced them.
  */
-function parseDataPlaneEndpoints(raw) {
+export function parseDataPlaneEndpoints(raw) {
     if (!Array.isArray(raw)) {
         throw new Error('data-planes: child returned a non-array endpoint set');
     }
@@ -236,7 +199,7 @@ function parseDataPlaneShare(value) {
     });
 }
 function isShareViewKind(value) {
-    return typeof value === 'string' && types_1.SHARE_VIEW_KINDS.includes(value);
+    return typeof value === 'string' && SHARE_VIEW_KINDS.includes(value);
 }
 // Phase 11 (settings redesign): `stripValue` helper and the legacy
 // `getAddonConfigSchema / getAddonConfig / updateAddonConfig` adapter
@@ -253,7 +216,7 @@ function isShareViewKind(value) {
  * accelerator-blind results. The addon emits `starting`/`ready`/`down`
  * itself (`autoEmitReadiness=false`, ready on probe-done).
  */
-function shouldEmitProviderRegisteredReady(capability) {
+export function shouldEmitProviderRegisteredReady(capability) {
     return capability !== 'platform-probe';
 }
 /**
@@ -264,11 +227,11 @@ function shouldEmitProviderRegisteredReady(capability) {
  * invisible for a week. Built once — `ALL_CAPABILITY_DEFINITIONS` is a frozen
  * generated array.
  */
-const DEVICE_SCOPED_CAP_NAMES = new Set(types_1.ALL_CAPABILITY_DEFINITIONS.filter((def) => def.scope === 'device').map((def) => def.name));
+const DEVICE_SCOPED_CAP_NAMES = new Set(ALL_CAPABILITY_DEFINITIONS.filter((def) => def.scope === 'device').map((def) => def.name));
 function isDeviceScopedCapName(capName) {
     return DEVICE_SCOPED_CAP_NAMES.has(capName);
 }
-class AddonRegistryService {
+export class AddonRegistryService {
     loggingService;
     eventBusService;
     configService;
@@ -283,7 +246,7 @@ class AddonRegistryService {
     // Task 7.1: hub-wide registry of addon custom actions. Populated on
     // each addon's initialize() (in-process path); Task 7.2 will dispatch
     // through this from the `api.addons.custom` tRPC procedure.
-    customActionRegistry = new system_1.CustomActionRegistry();
+    customActionRegistry = new CustomActionRegistry();
     /**
      * Fingerprint of the custom-action catalogs each UDS child last DESCRIBED
      * (keyed by child id), and the addon ids registered from that description.
@@ -337,9 +300,9 @@ class AddonRegistryService {
             const resolver = {
                 getByName: (capName) => reg.getSingleton(capName) ?? reg.getAllProviders(capName)[0] ?? null,
             };
-            const client = (0, client_1.createTRPCClient)({
+            const client = createTRPCClient({
                 links: [
-                    (0, system_1.localProviderLink)(resolver),
+                    localProviderLink(resolver),
                     // Device-scoped caps go through the hub's CapRouteResolver, which is
                     // the only authority that can route `(cap, deviceId)` into a FORKED
                     // child — and forked children are broker-less, so the Moleculer
@@ -348,8 +311,8 @@ class AddonRegistryService {
                     // `Service 'ptz.ptz.getOptions' is not found`, which is how the
                     // autotrack builtin came up switched on and unable to move a camera
                     // (2026-09-18).
-                    (0, system_1.deviceCapResolverLink)((capName, method, input) => this.moleculer.callCapabilityOnNode(this.moleculer.broker.nodeID, capName, method, input), isDeviceScopedCapName),
-                    (0, system_1.brokerTransportLink)(this.moleculer.broker),
+                    deviceCapResolverLink((capName, method, input) => this.moleculer.callCapabilityOnNode(this.moleculer.broker.nodeID, capName, method, input), isDeviceScopedCapName),
+                    brokerTransportLink(this.moleculer.broker),
                 ],
             });
             this.brokerApi = client;
@@ -364,9 +327,12 @@ class AddonRegistryService {
     activeStorageProvider = null;
     activeSettingsBackend = null;
     integrationRegistry = null;
+    clusterNodeHistoryStore = null;
+    clusterAgentRecords = null;
+    shareTokenService = null;
     // Device architecture — in-memory registry of live IDevice instances.
     // Persistence is owned by the `device-manager` capability addon.
-    deviceRegistry = new system_1.DeviceRegistry();
+    deviceRegistry = new DeviceRegistry();
     /**
      * Typed accessor for the Moleculer broker. The Moleculer `index.d.ts`
      * chains through `eventemitter2`, whose package.json has no `types`
@@ -379,7 +345,7 @@ class AddonRegistryService {
      * `this.broker.call(...)` / `this.broker.nodeID` lint clean.
      */
     get broker() {
-        return this.moleculer.broker;
+        return asBrokerLike(this.moleculer.broker);
     }
     constructor(loggingService, eventBusService, configService, storageService, capabilityService, moleculer, streamProbe) {
         this.loggingService = loggingService;
@@ -390,8 +356,8 @@ class AddonRegistryService {
         this.moleculer = moleculer;
         this.streamProbe = streamProbe;
         this.logger = this.loggingService.createLogger('AddonRegistry');
-        this.addonLoader = new system_1.AddonLoader(this.loggingService.createLogger('AddonLoader'));
-        this.deviceMirror = new device_meta_mirror_js_1.DeviceMetaMirror(async (deviceIds) => this.getBrokerApi().deviceManager.listAll.query({
+        this.addonLoader = new AddonLoader(this.loggingService.createLogger('AddonLoader'));
+        this.deviceMirror = new DeviceMetaMirror(async (deviceIds) => this.getBrokerApi().deviceManager.listAll.query({
             projection: 'slim',
             ...(deviceIds === null ? {} : { deviceIds: [...deviceIds] }),
         }), {
@@ -406,13 +372,13 @@ class AddonRegistryService {
         // reattempt failed addons. Operator visibility comes through
         // AddonLoadFailed / AddonLoadRecovered events consumed by
         // AlertCenter (see addon-health-monitor.ts spec).
-        this.healthMonitor = new system_1.AddonHealthMonitor({
+        this.healthMonitor = new AddonHealthMonitor({
             eventBus: this.eventBusService,
             logger: this.loggingService.createLogger('AddonHealthMonitor'),
             retryFn: (packageName) => this.tryReloadPackage(packageName),
         });
         // Create capability registry with config reader for singleton preferences
-        this.capabilityRegistry = new system_1.CapabilityRegistry(this.loggingService.createLogger('CapabilityRegistry'), this.eventBusService);
+        this.capabilityRegistry = new CapabilityRegistry(this.loggingService.createLogger('CapabilityRegistry'), this.eventBusService);
         // The preference readers answer "no preference" while the persisted
         // preferences cannot be read yet — before the settings door exists, or
         // while its one boot read is in flight (D675: `get` then THROWS rather
@@ -425,7 +391,7 @@ class AddonRegistryService {
             }
             catch (err) {
                 this.logger.debug('capability preference not readable yet — default applies until replay', {
-                    meta: { capability, error: (0, types_1.errMsg)(err) },
+                    meta: { capability, error: errMsg(err) },
                 });
                 return undefined;
             }
@@ -438,7 +404,7 @@ class AddonRegistryService {
             catch (err) {
                 this.logger.debug('capability preference not readable yet — default applies', {
                     tags: { nodeId },
-                    meta: { capability, error: (0, types_1.errMsg)(err) },
+                    meta: { capability, error: errMsg(err) },
                 });
                 return undefined;
             }
@@ -464,7 +430,7 @@ class AddonRegistryService {
             }
             catch (err) {
                 this.logger.debug('collection preference not readable yet, or malformed', {
-                    meta: { capability, error: (0, types_1.errMsg)(err) },
+                    meta: { capability, error: errMsg(err) },
                 });
                 return undefined;
             }
@@ -497,7 +463,7 @@ class AddonRegistryService {
         // Register the addon-settings singleton provider — replaces the
         // former `$addonHost` Moleculer service. The provider resolves
         // addonId → local addon instance (hub) or remote Moleculer call.
-        this.capabilityRegistry.declareCapability(system_1.addonSettingsCapability);
+        this.capabilityRegistry.declareCapability(addonSettingsCapability);
         // The SINGLE router for addon-level calls (routes / custom / settings).
         // It classifies in-process | hub-local-child (UDS) | remote-agent
         // (Moleculer) in ONE place — `resolveNode` reports only the BASE node
@@ -507,7 +473,7 @@ class AddonRegistryService {
         // down a dead `<addonId>.settings.*` Moleculer path because the old
         // `resolveNode` marked them non-local; now they route over UDS like
         // their routes + custom-actions already do.
-        this.addonCallGateway = new addon_call_gateway_js_1.AddonCallGateway({
+        this.addonCallGateway = new AddonCallGateway({
             hubNodeId: this.broker.nodeID,
             resolveNode: (addonId) => {
                 const entry = this.addonEntries.get(addonId);
@@ -524,7 +490,7 @@ class AddonRegistryService {
         // active-singleton preference can select a grouped addon (whose child id
         // is its `execution.group`, not its own id). Identity for ungrouped addons.
         this.moleculer.setRunnerIdResolver((addonId) => this.childIdForAddon(addonId));
-        const settingsProvider = (0, addon_settings_provider_js_1.createAddonSettingsProvider)({
+        const settingsProvider = createAddonSettingsProvider({
             getAddon: (addonId) => {
                 const entry = this.addonEntries.get(addonId);
                 return entry?.addon ?? null;
@@ -566,7 +532,7 @@ class AddonRegistryService {
         // `syncSystemAddonsCopy` race. Non-framework addons still load from the
         // addons dir unchanged. The addons-dir `@camstack/system` copy (if present,
         // seeded by the image entrypoint) is SKIPPED to avoid a double-load.
-        const closureSystemDir = (0, package_dir_utils_1.resolveHubClosurePackageDir)('@camstack/system');
+        const closureSystemDir = resolveHubClosurePackageDir('@camstack/system');
         if (closureSystemDir) {
             try {
                 await this.addonLoader.loadFromAddonDir(closureSystemDir);
@@ -595,10 +561,10 @@ class AddonRegistryService {
         // FAILED forever on a node where it cannot run. Fixing the installer was
         // necessary and not sufficient — nothing removed what was already there,
         // and a permanent red entry teaches people to ignore red entries.
-        (0, prune_misplaced_addons_js_1.prunePlacementLeftovers)((0, prune_misplaced_addons_js_1.decidePrune)(loadedAddons.map((a) => ({
+        prunePlacementLeftovers(decidePrune(loadedAddons.map((a) => ({
             packageName: a.packageName,
             dir: path.join(addonsDir, a.packageName),
-            placement: (0, types_1.resolveAddonPlacement)(a.declaration),
+            placement: resolveAddonPlacement(a.declaration),
         })), 'hub'), path.join(addonsDir, '@camstack'), {
             info: (msg, meta) => this.logger.info(msg, { meta }),
             warn: (msg, meta) => this.logger.warn(msg, { meta }),
@@ -606,7 +572,7 @@ class AddonRegistryService {
         for (const registered of loadedAddons) {
             // Skip agent-only addons — they never run on the hub, only on remote
             // agents that opt in via `execution.placement: 'agent-only'`.
-            if ((0, types_1.isAgentOnlyPlacement)(registered.declaration)) {
+            if (isAgentOnlyPlacement(registered.declaration)) {
                 this.logger.info('Skipping agent-only addon on hub', {
                     tags: { addonId: registered.declaration.id },
                     meta: { packageName: registered.packageName },
@@ -646,7 +612,7 @@ class AddonRegistryService {
                 this.loadAddonCatalogs(registered.packageName, this.addonEntries.get(registered.declaration.id)?.addonDir);
             }
             catch (err) {
-                const msg = (0, types_1.errMsg)(err);
+                const msg = errMsg(err);
                 this.logger.error('Failed to create instance of addon', {
                     tags: { addonId: registered.declaration.id },
                     meta: { error: msg },
@@ -692,7 +658,7 @@ class AddonRegistryService {
         // genuinely has no cross-process provider and the fallback returns null — wrappers
         // cleanly fall through to their own secondary strategy.
         {
-            const { buildNativeCapProxy } = await Promise.resolve().then(() => __importStar(require('@camstack/system')));
+            const { buildNativeCapProxy } = await import('@camstack/system');
             // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment -- moleculer types unresolvable; see `broker` getter docstring
             const broker = this.moleculer.broker;
             this.capabilityRegistry.setNativeFallback((capName, deviceId) => {
@@ -790,7 +756,7 @@ class AddonRegistryService {
         // that IS load-bearing is BETWEEN the waves in `runHubAddonBoot`, not
         // inside one.
         const spawnRunnerPlan = async (plan) => {
-            await (0, runner_spawn_fanout_js_1.spawnPlanConcurrently)(plan, async (runnerId, runnerAddons) => {
+            await spawnPlanConcurrently(plan, async (runnerId, runnerAddons) => {
                 try {
                     await this.initializeAddonGroup(runnerId, runnerAddons);
                     for (const { addonId } of runnerAddons) {
@@ -798,7 +764,7 @@ class AddonRegistryService {
                     }
                 }
                 catch (error) {
-                    const msg = (0, types_1.errMsg)(error);
+                    const msg = errMsg(error);
                     for (const { addonId } of runnerAddons) {
                         this.emitAddonLifecycleEvent('addon.error', addonId, {
                             error: msg,
@@ -820,10 +786,10 @@ class AddonRegistryService {
             const entry = this.addonEntries.get(id);
             return (entry?.packageName === '@camstack/system' &&
                 entry.declaration !== undefined &&
-                (0, types_1.isIsolatedBuiltin)(entry.declaration));
+                isIsolatedBuiltin(entry.declaration));
         });
         const isolatedBuiltins = new Set(isolatedBuiltinIds);
-        const { infra: isolatedInfraIds, consumers: isolatedConsumerIds } = (0, system_1.partitionIsolatedBuiltinIds)(isolatedBuiltinIds, (id) => {
+        const { infra: isolatedInfraIds, consumers: isolatedConsumerIds } = partitionIsolatedBuiltinIds(isolatedBuiltinIds, (id) => {
             const entry = this.addonEntries.get(id);
             return entry?.declaredCapabilities ?? [];
         });
@@ -843,7 +809,7 @@ class AddonRegistryService {
         // still mint the named hostname (Cloudflare 530, 2026-08-25).
         // `runHubAddonBoot` is the only sequence; a timeout on the engine wait
         // must NOT throw (1.2.151 crash-looped the starter).
-        await (0, system_1.runHubAddonBoot)({
+        await runHubAddonBoot({
             spawnIsolatedInfra: async () => {
                 if (isolatedInfraIds.length === 0)
                     return;
@@ -856,7 +822,7 @@ class AddonRegistryService {
                 if (isolatedInfraIds.length === 0)
                     return;
                 try {
-                    await (0, system_1.waitUntilReady)(() => this.capabilityRegistry.getCollection('data-store-provider').length > 0, {
+                    await waitUntilReady(() => this.capabilityRegistry.getCollection('data-store-provider').length > 0, {
                         timeoutMs: 30_000,
                         intervalMs: 50,
                         what: 'isolated data-store-provider engine',
@@ -864,14 +830,14 @@ class AddonRegistryService {
                 }
                 catch (err) {
                     this.logger.error('Isolated data-store-provider engine did not register in time', {
-                        meta: { error: (0, types_1.errMsg)(err), addonIds: isolatedInfraIds },
+                        meta: { error: errMsg(err), addonIds: isolatedInfraIds },
                     });
                 }
             },
             bootInProcessInfra: async () => {
                 // Pass 1 — infrastructure builtins. A failed REQUIRED infra cap
                 // aborts boot: nothing downstream can run without storage/settings.
-                for (const infra of system_1.INFRA_CAPABILITIES) {
+                for (const infra of INFRA_CAPABILITIES) {
                     const addonId = this.findAddonForCapability(infra.name, allIds);
                     if (addonId) {
                         const entry = this.addonEntries.get(addonId);
@@ -885,7 +851,7 @@ class AddonRegistryService {
                             this.wireCapabilities(addonId);
                         }
                         catch (error) {
-                            const msg = (0, types_1.errMsg)(error);
+                            const msg = errMsg(error);
                             this.emitAddonLifecycleEvent('addon.error', addonId, {
                                 error: msg,
                                 phase: 'init',
@@ -912,7 +878,7 @@ class AddonRegistryService {
             bootInProcessConsumers: async () => {
                 // Pass 2 — remaining core builtins, in capability-dependency order.
                 const bootOrder = this.capabilityRegistry.getBootOrder();
-                const infraNames = new Set(system_1.INFRA_CAPABILITIES.map((c) => c.name));
+                const infraNames = new Set(INFRA_CAPABILITIES.map((c) => c.name));
                 for (const capName of bootOrder) {
                     if (infraNames.has(capName))
                         continue; // Handled in pass 1
@@ -928,7 +894,7 @@ class AddonRegistryService {
                             this.wireCapabilities(id);
                         }
                         catch (error) {
-                            const msg = (0, types_1.errMsg)(error);
+                            const msg = errMsg(error);
                             this.emitAddonLifecycleEvent('addon.error', id, {
                                 error: msg,
                                 phase: 'init',
@@ -949,7 +915,7 @@ class AddonRegistryService {
                             this.wireCapabilities(id);
                         }
                         catch (error) {
-                            const msg = (0, types_1.errMsg)(error);
+                            const msg = errMsg(error);
                             this.emitAddonLifecycleEvent('addon.error', id, {
                                 error: msg,
                                 phase: 'init',
@@ -1007,7 +973,7 @@ class AddonRegistryService {
                 for (const [id, entry] of this.addonEntries.entries()) {
                     if (!entry.declaration)
                         continue;
-                    const runnerId = (0, types_1.resolveRunnerId)(entry.declaration, id);
+                    const runnerId = resolveRunnerId(entry.declaration, id);
                     if (`${this.broker.nodeID}/${runnerId}` !== nodeId)
                         continue;
                     // Skip operator-initiated restarts — `restartAddon` already
@@ -1029,7 +995,7 @@ class AddonRegistryService {
                 for (const [id, entry] of this.addonEntries.entries()) {
                     if (!entry.declaration)
                         continue;
-                    const runnerId = (0, types_1.resolveRunnerId)(entry.declaration, id);
+                    const runnerId = resolveRunnerId(entry.declaration, id);
                     if (`${this.broker.nodeID}/${runnerId}` !== nodeId)
                         continue;
                     this.healthMonitor.recordSuccess(entry.packageName, id);
@@ -1037,10 +1003,10 @@ class AddonRegistryService {
             });
         }
         this.eventBusService.emit({
-            id: (0, node_crypto_1.randomUUID)(),
+            id: randomUUID(),
             timestamp: new Date(),
             source: { type: 'core', id: 'addon-registry' },
-            category: types_1.EventCategory.SystemAddonsReady,
+            category: EventCategory.SystemAddonsReady,
             data: { activeAddons: initializedIds },
         });
     }
@@ -1085,7 +1051,7 @@ class AddonRegistryService {
                     this.healthMonitor.recordSuccess(packageName, id);
                 }
                 catch (err) {
-                    errors.push(`${id}: ${(0, types_1.errMsg)(err)}`);
+                    errors.push(`${id}: ${errMsg(err)}`);
                     this.healthMonitor.recordFailure(packageName, err, id);
                 }
             }
@@ -1164,15 +1130,56 @@ class AddonRegistryService {
      * values (D787). Never handed to an addon.
      */
     secretsForOwner(owner) {
-        return (0, types_1.createSecretsAccess)({
+        return createSecretsAccess({
             owner,
             transport: this.inProcessKeychainTransport(owner),
             eventBus: this.eventBusService,
         });
     }
+    /**
+     * A hub in-process records handle acting for `owner` (D881): the provider is
+     * reached straight, with the caller STATED - the one place a claim is trusted,
+     * as for the keychain. Only a system builtin's `ctx.records.forOwner` ever
+     * reaches a different owner.
+     */
+    recordsForOwner(owner, secrets) {
+        return createRecordsAccess({
+            owner,
+            transport: this.inProcessRecordsTransport(owner),
+            transportForOwner: (other) => this.inProcessRecordsTransport(other),
+            secrets,
+        });
+    }
+    inProcessRecordsTransport(owner) {
+        const provider = () => {
+            const p = this.capabilityRegistry.getSingleton('records');
+            if (p === null || p === undefined)
+                throw new Error('records provider is not registered');
+            return p;
+        };
+        const as = (input) => Object.assign({}, input, { callerAddonId: owner });
+        return {
+            declareKinds: (input) => provider().declareKinds(as(input)),
+            get: (input) => provider().get(as(input)),
+            getMany: (input) => provider().getMany(as(input)),
+            secretRefs: (input) => provider().secretRefs(as(input)),
+            put: (input) => provider().put(as(input)),
+            putMany: (input) => provider().putMany(as(input)),
+            patch: (input) => provider().patch(as(input)),
+            delete: (input) => provider().delete(as(input)),
+            deleteMany: (input) => provider().deleteMany(as(input)),
+            query: (input) => provider().query(as(input)),
+            count: (input) => provider().count(as(input)),
+            histogram: (input) => provider().histogram(as(input)),
+            aggregate: (input) => provider().aggregate(as(input)),
+            deleteWhere: (input) => provider().deleteWhere(as(input)),
+            deleteDevice: (input) => provider().deleteDevice(as(input)),
+            allocateId: (input) => provider().allocateId(as(input)),
+        };
+    }
     childIdForAddon(addonId) {
         const decl = this.addonEntries.get(addonId)?.declaration;
-        return decl ? (0, types_1.resolveRunnerId)(decl, addonId) : addonId;
+        return decl ? resolveRunnerId(decl, addonId) : addonId;
     }
     async mountAddonDataPlanes(addonId) {
         const registry = this.dataPlaneRegistry;
@@ -1195,7 +1202,7 @@ class AddonRegistryService {
         // Dropping is the safe direction: a data-plane that is absent from the
         // registry falls through to the control-route path, while a stale one
         // sends live traffic at a dead socket.
-        if (!(0, system_1.canServeDataPlane)({
+        if (!canServeDataPlane({
             hasEntry: entry !== undefined,
             isForked: entry !== undefined && this.isForkedAddonEntry(entry),
             childKnown: childRegistry !== null && childRegistry.isChildKnown(this.childIdForAddon(addonId)),
@@ -1280,16 +1287,16 @@ class AddonRegistryService {
      */
     wireDeviceParentMirror() {
         for (const category of [
-            types_1.EventCategory.DeviceMetaChanged,
-            types_1.EventCategory.DeviceRegistered,
-            types_1.EventCategory.DeviceUnregistered,
-            types_1.EventCategory.DeviceProvisioned,
+            EventCategory.DeviceMetaChanged,
+            EventCategory.DeviceRegistered,
+            EventCategory.DeviceUnregistered,
+            EventCategory.DeviceProvisioned,
         ]) {
             this.eventBusService.subscribe({ category }, (event) => {
                 this.deviceMirror.onDeviceEvent(event.data);
             });
         }
-        this.eventBusService.subscribe({ category: types_1.EventCategory.SystemAddonsReady }, () => {
+        this.eventBusService.subscribe({ category: EventCategory.SystemAddonsReady }, () => {
             void this.deviceMirror.refreshAll();
         });
     }
@@ -1297,6 +1304,43 @@ class AddonRegistryService {
     loadCollectionPreferences() {
         // TODO: implement CapabilityRegistry.loadDisabledProviders() to restore persisted preferences
     }
+    /** Durable cluster-node history (A1) — bind records kind after orphan declare. */
+    setClusterNodeHistoryStore(store) {
+        this.clusterNodeHistoryStore = store;
+        this.bindClusterNodeHistoryRecordsKind();
+    }
+    bindClusterNodeHistoryRecordsKind() {
+        const clusterStore = this.clusterNodeHistoryStore;
+        const records = this.clusterAgentRecords;
+        if (clusterStore === null || records === null)
+            return;
+        const kind = records.kind(clusterNodeHistoryRecordKind);
+        clusterStore.bindRecordsKind(() => kind);
+    }
+    setShareTokenService(service) {
+        this.shareTokenService = service;
+    }
+    async wireHubMainOrphanRecords(store) {
+        const recordsCap = this.capabilityRegistry.getSingleton('records');
+        if (recordsCap === null || recordsCap === undefined)
+            return;
+        const integrationRecords = this.recordsForOwner('integration-registry', this.secretsForOwner('integration-registry'));
+        await integrationRecords.declare(integrationRegistryRecordKinds);
+        this.integrationRegistry = new IntegrationRegistry(store, IntegrationRegistry.recordStoresOf(integrationRecords));
+        await this.integrationRegistry.initialize();
+        this.logger.info('IntegrationRegistry initialized (records)', { meta: { phase: 'v2' } });
+        const clusterRecords = this.recordsForOwner('cluster-agent', this.secretsForOwner('cluster-agent'));
+        await clusterRecords.declare(clusterAgentRecordKinds);
+        this.clusterAgentRecords = clusterRecords;
+        this.bindClusterNodeHistoryRecordsKind();
+        const shareTokens = this.shareTokenService;
+        if (shareTokens !== null) {
+            const coreRecords = this.recordsForOwner('core-auth', this.secretsForOwner('core-auth'));
+            await coreRecords.declare(coreAuthRecordKinds);
+            const shareKind = coreRecords.kind(coreAuthRecordKinds['share-view-tokens']);
+            shareTokens.bindShareTokensKind(() => shareKind);
+        }
+    }
     /**
      * Returns the IntegrationRegistry filtered to exclude orphaned integrations
      * (where the addon is not currently installed). Orphaned data stays in DB
@@ -1328,7 +1372,7 @@ class AddonRegistryService {
      * `integration-visibility.ts`, on its own, with its own tests.
      */
     createFilteredRegistry(raw) {
-        return (0, integration_visibility_js_1.createFilteredIntegrationRegistry)({
+        return createFilteredIntegrationRegistry({
             raw,
             // The LIVE map, not a snapshot: an addon registered after this wrapper
             // was built is installed, and a stale copy would refuse its first write.
@@ -1370,8 +1414,8 @@ class AddonRegistryService {
     loadAddonCatalogs(packageName, addonDir) {
         if (addonDir === undefined)
             return;
-        const ns = (0, system_1.catalogNamespaceOf)(packageName);
-        const catalogs = (0, system_1.getCatalogRegistry)((message) => this.logger.warn(message, { meta: { ns } }));
+        const ns = catalogNamespaceOf(packageName);
+        const catalogs = getCatalogRegistry((message) => this.logger.warn(message, { meta: { ns } }));
         catalogs.clear(ns);
         catalogs.loadAddonDir(ns, addonDir);
     }
@@ -1425,7 +1469,7 @@ class AddonRegistryService {
                 await this.ensureForkedRunner(id, { restart: false });
             }
             catch (err) {
-                const msg = (0, types_1.errMsg)(err);
+                const msg = errMsg(err);
                 this.logger.error('Failed to spawn isolated runner for addon', {
                     tags: { addonId: id },
                     meta: { error: msg },
@@ -1449,7 +1493,7 @@ class AddonRegistryService {
         // resolves native addon ids for getBindings, lists registered wrappers,
         // etc. Inject before initialize() runs so the addon's onInitialize can
         // rely on it.
-        const initResult = (0, types_1.normalizeAddonInitResult)(await entry.addon.initialize(context));
+        const initResult = normalizeAddonInitResult(await entry.addon.initialize(context));
         // NOTE: `postBrokerStart()` is deliberately NOT called here. It used to
         // fire right after `initialize()` and would emit readiness events whose
         // subscribers (remote workers) immediately called `ctx.api.<addon>.*` —
@@ -1463,7 +1507,7 @@ class AddonRegistryService {
             // D4: wrapper behaviour is read from the cap DEFINITION. The runtime
             // ProviderRegistration.kind/defaultActive are deprecated hints — if an
             // addon still sets them and they disagree, warn (the cap def wins).
-            const kindDrift = (0, system_1.describeProviderKindDrift)(capName, reg.capability, {
+            const kindDrift = describeProviderKindDrift(capName, reg.capability, {
                 // eslint-disable-next-line @typescript-eslint/no-deprecated -- this IS the drift detector; it reads the deprecated hint on purpose
                 kind: reg.kind,
                 // eslint-disable-next-line @typescript-eslint/no-deprecated -- this IS the drift detector; it reads the deprecated hint on purpose
@@ -1495,7 +1539,7 @@ class AddonRegistryService {
             catch (err) {
                 this.logger.error('Failed to register custom actions for addon', {
                     tags: { addonId: id },
-                    meta: { error: (0, types_1.errMsg)(err) },
+                    meta: { error: errMsg(err) },
                 });
                 throw err;
             }
@@ -1515,7 +1559,7 @@ class AddonRegistryService {
                 if (provider)
                     capturedProviders.set(capName, provider);
             }
-            (0, system_1.validateProviderRegistrations)(id, entry.declaration, capturedProviders, this.logger);
+            validateProviderRegistrations(id, entry.declaration, capturedProviders, this.logger);
         }
         await this.restoreAddonDevices(id, entry.addon);
         entry.initialized = true;
@@ -1530,7 +1574,7 @@ class AddonRegistryService {
                     return Object.keys(def.methods);
                 };
                 // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment -- createAddonService return type unresolvable due to upstream eventemitter2/moleculer type chain
-                const schema = (0, system_1.createAddonService)(entry.addon, entry.declaration, {
+                const schema = createAddonService(entry.addon, entry.declaration, {
                     methodResolver,
                     providers: capturedProviders,
                 });
@@ -1539,7 +1583,7 @@ class AddonRegistryService {
             catch (err) {
                 this.logger.warn('Failed to register Moleculer service', {
                     tags: { addonId: id },
-                    meta: { error: (0, types_1.errMsg)(err) },
+                    meta: { error: errMsg(err) },
                 });
             }
         }
@@ -1598,7 +1642,7 @@ class AddonRegistryService {
         catch (err) {
             this.logger.error('restoreDevices failed for addon', {
                 tags: { addonId },
-                meta: { error: (0, types_1.errMsg)(err) },
+                meta: { error: errMsg(err) },
             });
         }
     }
@@ -1698,7 +1742,7 @@ class AddonRegistryService {
                     errors.push(res.error ?? `restart of "${addonId}" reported failure`);
             }
             catch (err) {
-                errors.push(`restart of "${addonId}" threw: ${(0, types_1.errMsg)(err)}`);
+                errors.push(`restart of "${addonId}" threw: ${errMsg(err)}`);
             }
         }
         return { success: errors.length === 0, restarted, errors };
@@ -1723,7 +1767,7 @@ class AddonRegistryService {
         // suppressing the siblings too, each would flash a spurious "Failed to load".
         const suppressed = new Set([addonId]);
         if (this.isForkedAddonEntry(entry)) {
-            const runnerId = (0, types_1.resolveRunnerId)(entry.declaration, addonId);
+            const runnerId = resolveRunnerId(entry.declaration, addonId);
             for (const { addonId: siblingId } of this.buildAddonGroupPlan([
                 ...this.addonEntries.keys(),
             ]).get(runnerId) ?? []) {
@@ -1857,7 +1901,7 @@ class AddonRegistryService {
             return { success: true };
         }
         catch (err) {
-            const msg = (0, types_1.errMsg)(err);
+            const msg = errMsg(err);
             this.logger.error('Failed to restart addon', { tags: { addonId }, meta: { error: msg } });
             this.emitAddonLifecycleEvent('addon.error', addonId, {
                 error: msg,
@@ -2049,10 +2093,10 @@ class AddonRegistryService {
         // The real process-service state of each addon's runner (D877) - the last
         // `refreshRunnerStates()` answer; `unknown` before the first one.
         const runnerStates = this.runnerStates;
-        const processFor = (id, entry) => (0, addon_process_view_js_1.describeAddonProcess)({
+        const processFor = (id, entry) => describeAddonProcess({
             forked: this.runsInOwnRunner(entry),
             initialized: entry.initialized === true,
-            runnerId: entry.declaration ? (0, types_1.resolveRunnerId)(entry.declaration, id) : id,
+            runnerId: entry.declaration ? resolveRunnerId(entry.declaration, id) : id,
             runners: runnerStates,
             hubPid: process.pid,
         });
@@ -2074,7 +2118,7 @@ class AddonRegistryService {
                 }
                 catch (err) {
                     this.logger.debug('Failed to read install-source marker for addon', {
-                        meta: { error: (0, types_1.errMsg)(err) },
+                        meta: { error: errMsg(err) },
                     });
                 }
             }
@@ -2087,7 +2131,7 @@ class AddonRegistryService {
                     // `overlayDeclaration` — this is what keeps Home Assistant
                     // (post broker rework: broker + device-adoption) visible in the
                     // "+ New Integration" picker.
-                    ...(0, addon_row_manifest_1.overlayDeclaration)(entry.addon.manifest, entry.declaration),
+                    ...overlayDeclaration(entry.addon.manifest, entry.declaration),
                     packageName: entry.packageName,
                     packageVersion: entry.packageVersion,
                     packageDisplayName: entry.packageDisplayName,
@@ -2173,11 +2217,12 @@ class AddonRegistryService {
                     ...(bundleRaw.icon !== undefined ? { icon: bundleRaw.icon } : {}),
                 }
                 : undefined;
-            for (const decl of addons) {
-                const id = typeof decl['id'] === 'string' ? decl['id'] : '';
-                const name = typeof decl['name'] === 'string' ? decl['name'] : id;
-                if (!id)
+            for (const rawDecl of addons) {
+                if (!isAddonDeclaration(rawDecl))
                     continue;
+                const decl = rawDecl;
+                const id = decl.id;
+                const name = typeof decl.name === 'string' ? decl.name : id;
                 const manifest = {
                     ...decl,
                     id,
@@ -2194,7 +2239,7 @@ class AddonRegistryService {
                     declaration: decl,
                     source: 'installed',
                     ...(installSource ? { installSource } : {}),
-                    process: addon_process_view_js_1.NEVER_LOADED_PROCESS,
+                    process: NEVER_LOADED_PROCESS,
                 });
             }
         };
@@ -2246,7 +2291,7 @@ class AddonRegistryService {
         const dataDir = path.resolve(process.env.CAMSTACK_DATA ?? 'camstack-data');
         const addonsDir = process.env.CAMSTACK_ADDONS_DIR ?? path.resolve(dataDir, 'addons');
         // Create a fresh loader to discover what's on disk (for diffing against existing)
-        const freshLoader = new system_1.AddonLoader(this.loggingService.createLogger('AddonLoader'));
+        const freshLoader = new AddonLoader(this.loggingService.createLogger('AddonLoader'));
         await freshLoader.loadFromDirectory(addonsDir);
         const loaded = [];
         const failed = [];
@@ -2277,7 +2322,7 @@ class AddonRegistryService {
             // hub-side every agent-only provider (e.g. `hub-forwarder`),
             // and a hub-resident `hub-forwarder` creates a write→ingest→
             // write feedback loop because the hub IS the log-receiver.
-            if ((0, types_1.isAgentOnlyPlacement)(registered.declaration)) {
+            if (isAgentOnlyPlacement(registered.declaration)) {
                 this.logger.debug('loadNewAddons: skipping agent-only addon on hub', {
                     tags: { addonId: registered.declaration.id },
                 });
@@ -2315,7 +2360,7 @@ class AddonRegistryService {
                 this.emitAddonLifecycleEvent('addon.installed', registered.declaration.id);
             }
             catch (err) {
-                const msg = (0, types_1.errMsg)(err);
+                const msg = errMsg(err);
                 const stack = err instanceof Error ? err.stack : undefined;
                 this.logger.error('Failed to hot-load addon', {
                     tags: { addonId: registered.declaration.id },
@@ -2355,7 +2400,7 @@ class AddonRegistryService {
                     catch (err) {
                         this.logger.warn('Non-fatal: failed to stop runner for removed addon', {
                             tags: { addonId: id },
-                            meta: { error: (0, types_1.errMsg)(err) },
+                            meta: { error: errMsg(err) },
                         });
                     }
                 }
@@ -2369,7 +2414,7 @@ class AddonRegistryService {
                     catch (err) {
                         this.logger.debug('Non-fatal: shutdown error for removed addon', {
                             tags: { addonId: id },
-                            meta: { error: (0, types_1.errMsg)(err) },
+                            meta: { error: errMsg(err) },
                         });
                     }
                     await this.drainDisposerChain(id);
@@ -2446,7 +2491,7 @@ class AddonRegistryService {
                 }
                 catch (err) {
                     this.logger.warn('emitReady failed', {
-                        meta: { capability, addonId, error: (0, types_1.errMsg)(err) },
+                        meta: { capability, addonId, error: errMsg(err) },
                     });
                 }
             }
@@ -2508,14 +2553,21 @@ class AddonRegistryService {
                     const store = this.capabilityRegistry.getProviderByAddon('settings-store', addonId);
                     if (!store)
                         return;
-                    void (0, settings_door_wiring_js_1.wireSettingsDoor)({
+                    void wireSettingsDoor({
                         configService: this.configService,
                         registry: this.capabilityRegistry,
                         logger: this.logger,
                     }, store);
-                    this.integrationRegistry = new system_1.IntegrationRegistry(store);
-                    void this.integrationRegistry.initialize().then(() => {
-                        this.logger.info('IntegrationRegistry initialized', { meta: { phase: 'v2' } });
+                    void this.wireHubMainOrphanRecords(store).catch((err) => {
+                        this.logger.warn('hub-main records wiring failed (best-effort)', {
+                            meta: { error: errMsg(err) },
+                        });
+                        this.integrationRegistry = new IntegrationRegistry(store);
+                        void this.integrationRegistry.initialize().then(() => {
+                            this.logger.info('IntegrationRegistry initialized (legacy)', {
+                                meta: { phase: 'v2' },
+                            });
+                        });
                     });
                     this.loadCollectionPreferences();
                     // DeviceStore/ConfigStore are owned by the `device-persistence`
@@ -2552,7 +2604,7 @@ class AddonRegistryService {
                     // subscriber unobserved.
                     void this.mountAddonRoutes(addonId).catch((err) => {
                         this.logger.error('Failed to mount addon routes', {
-                            meta: { phase: 'v2', addonId, error: (0, types_1.errMsg)(err) },
+                            meta: { phase: 'v2', addonId, error: errMsg(err) },
                         });
                     });
                     break;
@@ -2566,7 +2618,7 @@ class AddonRegistryService {
             // restart (the child re-handshakes → caps re-register → this re-fires).
             void this.mountAddonDataPlanes(addonId).catch((err) => {
                 this.logger.error('Failed to mount addon data-planes', {
-                    meta: { phase: 'v2', addonId, error: (0, types_1.errMsg)(err) },
+                    meta: { phase: 'v2', addonId, error: errMsg(err) },
                 });
             });
         });
@@ -2677,7 +2729,7 @@ class AddonRegistryService {
                     method: route.method,
                     // The CONCRETE path, not the pattern: the child re-matches it and
                     // would otherwise bind every param to its own `:placeholder`.
-                    path: (0, materialize_route_path_js_1.materializeRoutePath)(route.path, req.params),
+                    path: materializeRoutePath(route.path, req.params),
                     params: req.params,
                     query: req.query,
                     body: req.body,
@@ -2716,7 +2768,7 @@ class AddonRegistryService {
     emitAddonLifecycleEvent(eventType, addonId, data) {
         const entry = this.addonEntries.get(addonId);
         this.eventBusService.emit({
-            id: (0, node_crypto_1.randomUUID)(),
+            id: randomUUID(),
             timestamp: new Date(),
             source: {
                 type: 'addon',
@@ -2748,10 +2800,10 @@ class AddonRegistryService {
         const declaredCaps = entry.declaredCapabilities.map((c) => c.name);
         if (declaredCaps.includes('addon-pages-source')) {
             this.eventBusService.emit({
-                id: (0, node_crypto_1.randomUUID)(),
+                id: randomUUID(),
                 timestamp: new Date(),
                 source: { type: 'addon', id: addonId },
-                category: types_1.EventCategory.AddonPageReady,
+                category: EventCategory.AddonPageReady,
                 data: { addonId, packageName: entry.packageName },
             });
         }
@@ -2762,10 +2814,10 @@ class AddonRegistryService {
         // reload.
         if (declaredCaps.includes('addon-widgets-source')) {
             this.eventBusService.emit({
-                id: (0, node_crypto_1.randomUUID)(),
+                id: randomUUID(),
                 timestamp: new Date(),
                 source: { type: 'addon', id: addonId },
-                category: types_1.EventCategory.AddonWidgetReady,
+                category: EventCategory.AddonWidgetReady,
                 data: { addonId, packageName: entry.packageName },
             });
         }
@@ -2842,7 +2894,7 @@ class AddonRegistryService {
             probe: (url, options) => this.streamProbe.probe(url, options),
             probeField: (key, value) => this.streamProbe.probeField(key, value),
         };
-        const deviceManagerApi = (0, system_1.createBrokerDeviceManagerApi)({
+        const deviceManagerApi = createBrokerDeviceManagerApi({
             api: this.getBrokerApi(),
             addonId,
             nodeId: this.broker.nodeID,
@@ -2860,11 +2912,11 @@ class AddonRegistryService {
         const rr = this.moleculer.readinessRegistry;
         const capHandleCache = new Map();
         function getOrCreateHandle(capName, scope, timeoutMs) {
-            const key = `${capName}::${(0, system_1.scopeKey)(scope)}`;
+            const key = `${capName}::${scopeKey(scope)}`;
             const existing = capHandleCache.get(key);
             if (existing)
                 return existing;
-            const handle = new system_1.CapabilityHandle(capName, scope, rr, timeoutMs);
+            const handle = new CapabilityHandle(capName, scope, rr, timeoutMs);
             capHandleCache.set(key, handle);
             return handle;
         }
@@ -2881,7 +2933,7 @@ class AddonRegistryService {
                 registry.dataPlaneRegistry?.registerAddon(id, endpoints);
             },
         };
-        const dataPlaneFacility = (0, system_1.createAddonDataPlaneFacility)({
+        const dataPlaneFacility = createAddonDataPlaneFacility({
             addonId,
             logger,
             sink: dataPlaneSink,
@@ -2890,12 +2942,22 @@ class AddonRegistryService {
         // Addon→addon byte transport (`ctx.peerBytes`, D613) for a co-located hub
         // builtin, on the same terms a forked addon gets it. `broker.nodeID` IS the
         // host node here — hub-main has no runner suffix.
-        const peerBytesFacility = (0, system_1.createAddonPeerBytesFacility)({
+        const peerBytesFacility = createAddonPeerBytesFacility({
             addonId,
             logger,
             nodeId: this.broker.nodeID,
         });
         this.getOrCreateDisposerChain(addonId).add(() => peerBytesFacility.dispose());
+        // This builtin's keychain values (D787). In-process, so the caller is
+        // STATED (no wire, no stamp) - the one place the keychain trusts a claim.
+        // `forOwner` is the door a system builtin (device-manager,
+        // storage-orchestrator) uses to keep another addon's values.
+        const secrets = createSecretsAccess({
+            owner: addonId,
+            transport: this.inProcessKeychainTransport(addonId),
+            transportForOwner: (owner) => this.inProcessKeychainTransport(owner),
+            eventBus: this.eventBusService,
+        });
         const ctx = {
             id: `addon:${addonId}`,
             logger,
@@ -2933,7 +2995,7 @@ class AddonRegistryService {
                     return registry.capabilityRegistry.getSingleton(capName) ?? undefined;
                 },
             },
-            deps: new system_1.AddonDepsManager(dataDir, logger),
+            deps: new AddonDepsManager(dataDir, logger),
             kernel: {
                 localNodeId: this.broker.nodeID,
                 // The keychain accepts a grouped runner's stamp (its group id) for the
@@ -2942,9 +3004,9 @@ class AddonRegistryService {
                 storage: storageProvider ?? undefined,
                 deviceRegistry: this.deviceRegistry ?? undefined,
                 devices: deviceManagerApi,
-                cluster: { broker: (0, system_1.adaptBrokerToCluster)(this.moleculer.broker) },
+                cluster: { broker: adaptBrokerToCluster(this.moleculer.broker) },
                 streamProbe: kernelStreamProbe,
-                hwaccel: (0, system_1.createKernelHwAccel)(),
+                hwaccel: createKernelHwAccel(),
                 capabilityRegistry: this.capabilityRegistry,
                 // Per-addon storage-location declarations across every installed
                 // addon — surfaced from the kernel's AddonLoader so the
@@ -2980,19 +3042,15 @@ class AddonRegistryService {
             fetchDevice: async (deviceId) => {
                 const api = registry.getBrokerApi();
                 const binding = await api.deviceManager.getBindings.query({ deviceId });
-                return (0, types_1.createDeviceProxy)(api, binding);
+                return createDeviceProxy(api, binding);
             },
             settings: settingsView,
-            // This builtin's keychain values (D787). In-process, so the caller is
-            // STATED (no wire, no stamp) — the one place the keychain trusts a
-            // claim. `forOwner` is the door a system builtin (device-manager,
-            // storage-orchestrator) uses to keep another addon's values.
-            secrets: (0, types_1.createSecretsAccess)({
-                owner: addonId,
-                transport: this.inProcessKeychainTransport(addonId),
-                transportForOwner: (owner) => this.inProcessKeychainTransport(owner),
-                eventBus: this.eventBusService,
-            }),
+            secrets,
+            // This builtin's record kinds (D881). In-process, so the caller is STATED
+            // (no wire, no stamp): the same single place identity is trusted as for
+            // the keychain. `ctx.records` is the owner's own door; a builtin that
+            // acts for another owner (the entries service) builds one with `recordsForOwner`.
+            records: this.recordsForOwner(addonId, secrets),
             useCapability(capName, scope = { type: 'global' }) {
                 return getOrCreateHandle(capName, scope, 15_000);
             },
@@ -3057,10 +3115,10 @@ class AddonRegistryService {
         let chain = this.disposerChains.get(addonId);
         if (chain == null) {
             const log = this.loggingService.createLogger().withTags({ addonId });
-            chain = new types_1.DisposerChain({
+            chain = new DisposerChain({
                 onError: (err, index) => {
                     log.error(`Disposer #${index} threw during teardown`, {
-                        meta: { error: (0, types_1.errMsg)(err) },
+                        meta: { error: errMsg(err) },
                     });
                 },
             });
@@ -3119,7 +3177,7 @@ class AddonRegistryService {
                 continue;
             if (!this.runsInOwnRunner(entry))
                 continue;
-            const runnerId = (0, types_1.resolveRunnerId)(entry.declaration, id);
+            const runnerId = resolveRunnerId(entry.declaration, id);
             const bucket = plan.get(runnerId) ?? [];
             bucket.push({ addonId: id, addonDir: entry.addonDir });
             plan.set(runnerId, bucket);
@@ -3140,11 +3198,11 @@ class AddonRegistryService {
     runsInOwnRunner(entry) {
         if (!entry.declaration || !entry.addonDir)
             return false;
-        if ((0, types_1.resolveAddonPlacement)(entry.declaration) === 'agent-only')
+        if (resolveAddonPlacement(entry.declaration) === 'agent-only')
             return false;
         if (entry.packageName !== '@camstack/system')
             return true;
-        return (0, types_1.isIsolatedBuiltin)(entry.declaration);
+        return isIsolatedBuiltin(entry.declaration);
     }
     /**
      * Spawn ONE runner subprocess that hosts every addon in `addons` and
@@ -3182,7 +3240,7 @@ class AddonRegistryService {
                     // Unserialized the loser almost never got here — it spawned a SECOND
                     // runner instead, which is the defect. Serializing makes the loser
                     // reliable, so the promise has to be kept rather than documented.
-                    if (!/already running/i.test((0, types_1.errMsg)(err)))
+                    if (!/already running/i.test(errMsg(err)))
                         throw err;
                     this.logger.info('initializeAddonGroup: runner already running — nothing to spawn', {
                         meta: { runnerId, addonIds: addons.map((a) => a.addonId) },
@@ -3191,7 +3249,7 @@ class AddonRegistryService {
             });
         }
         catch (err) {
-            throw new Error(`Failed to spawn runner "${runnerId}" (${addons.length} addons): ${(0, types_1.errMsg)(err)}`, { cause: err });
+            throw new Error(`Failed to spawn runner "${runnerId}" (${addons.length} addons): ${errMsg(err)}`, { cause: err });
         }
         // Provider registration for cap methods is handled by
         // `CapabilityBridge.onProviderConnected` once the runner's INFO heartbeat
@@ -3232,7 +3290,7 @@ class AddonRegistryService {
         }
         catch (err) {
             this.logger.warn('could not list the runner processes - addon process state is unknown', {
-                meta: { error: (0, types_1.errMsg)(err) },
+                meta: { error: errMsg(err) },
             });
             return null;
         }
@@ -3296,13 +3354,13 @@ class AddonRegistryService {
      * two live episodes this closes and why the lock inside `process-service`
      * could not.
      */
-    serializeRunner = (0, runner_serialization_1.createRunnerSerializer)();
+    serializeRunner = createRunnerSerializer();
     async ensureForkedRunner(addonId, opts) {
         const entry = this.addonEntries.get(addonId);
         if (!entry?.declaration || !entry.addonDir) {
             throw new Error(`ensureForkedRunner("${addonId}") requires an on-disk forked addon`);
         }
-        const runnerId = (0, types_1.resolveRunnerId)(entry.declaration, addonId);
+        const runnerId = resolveRunnerId(entry.declaration, addonId);
         const roster = this.buildAddonGroupPlan([...this.addonEntries.keys()]).get(runnerId) ?? [
             { addonId, addonDir: entry.addonDir },
         ];
@@ -3325,12 +3383,12 @@ class AddonRegistryService {
         // action atomic, and the unit that matters is the sequence.
         return this.serializeRunner(runnerId, async () => {
             const running = await this.listRunnerProcesses();
-            const plan = (0, runner_convergence_1.planRunnerConvergence)(runnerId, roster.map((r) => r.addonId), running, { restart: effectiveRestart });
+            const plan = planRunnerConvergence(runnerId, roster.map((r) => r.addonId), running, { restart: effectiveRestart });
             // 1. Tear down every stale/mismatched runner that hosts a roster member.
             for (const name of plan.stop) {
                 await this.broker.call('$process.stop', { name }).catch((err) => {
                     this.logger.warn('ensureForkedRunner: failed to stop stale runner (continuing)', {
-                        meta: { runnerId, stale: name, error: (0, types_1.errMsg)(err) },
+                        meta: { runnerId, stale: name, error: errMsg(err) },
                     });
                 });
             }
@@ -3341,7 +3399,7 @@ class AddonRegistryService {
                     .catch((err) => {
                     // A concurrent path may have won the spawn race — treat "already
                     // running" as success (idempotent), rethrow anything else.
-                    if (!/already running/i.test((0, types_1.errMsg)(err)))
+                    if (!/already running/i.test(errMsg(err)))
                         throw err;
                 });
                 this.recentGroupRespawns.set(runnerId, Date.now());
@@ -3401,7 +3459,7 @@ class AddonRegistryService {
         const catalogs = child.customActions;
         if (catalogs === undefined)
             return;
-        const fingerprint = (0, forked_custom_actions_js_1.childCatalogsFingerprint)(catalogs);
+        const fingerprint = childCatalogsFingerprint(catalogs);
         if (this.childCatalogFingerprints.get(child.childId) === fingerprint)
             return;
         this.childCatalogFingerprints.set(child.childId, fingerprint);
@@ -3416,9 +3474,9 @@ class AddonRegistryService {
                 this.customActionRegistry.unregisterAddon(addonId);
                 continue;
             }
-            this.customActionRegistry.registerAddon(addonId, (0, forked_custom_actions_js_1.toForkedCustomActionsSpec)(descriptor), (action, input, caller) => this.dispatchForkedCustomAction(addonId, action, input, caller));
+            this.customActionRegistry.registerAddon(addonId, toForkedCustomActionsSpec(descriptor), (action, input, caller) => this.dispatchForkedCustomAction(addonId, action, input, caller));
         }
-        const summary = (0, forked_custom_actions_js_1.summarizeChildCatalogs)(catalogs);
+        const summary = summarizeChildCatalogs(catalogs);
         this.logger.info('UDS child custom-action catalogs applied', {
             meta: {
                 childId: child.childId,
@@ -3446,4 +3504,3 @@ class AddonRegistryService {
         });
     }
 }
-exports.AddonRegistryService = AddonRegistryService;