@capybara-hq/kernel 0.1.0-rc.11 → 0.1.0-rc.13

package/dist/conversations/conversations.service.js

@@ -13,7 +13,7 @@ import { sql } from "kysely";
 import { AgentLookup, visibleTo } from "../agents/agent-lookup.js";
 import { BackgroundTaskStopper } from "../background/stop.js";
 import { unbindConversation } from "../channels/threads.js";
-import { ConversationEnvironments, } from "../environments/conversation-environments.js";
+import { ConversationDevices, } from "../devices/conversation-devices.js";
 import { ApiError } from "../errors.js";
 import { KernelDb } from "../infra/database/kernel-db.js";
 import { TransactionHost } from "../infra/database/transaction-host.js";
@@ -69,7 +69,7 @@ const COLUMNS = [
     "parent_conversation_id",
     "subagent_type",
     "archived_at",
-    "environment_id",
+    "device_id",
 ];
 function toView(r) {
     return {
@@ -86,7 +86,7 @@ function toView(r) {
         parentConversationId: r.parent_conversation_id,
         subagentType: r.subagent_type,
         archivedAt: r.archived_at,
-        environmentId: r.environment_id,
+        deviceId: r.device_id,
         activity: r.activity ?? null,
     };
 }
@@ -129,7 +129,7 @@ let ConversationsService = class ConversationsService {
     attachments;
     invoker;
     background;
-    environments;
+    devices;
     txHost;
     constructor(db, eventLog, agents, access, 
     /** Starts and stops the conversation's runs. */
@@ -144,8 +144,8 @@ let ConversationsService = class ConversationsService {
     invoker, 
     /** Stops a deleted conversation's background tasks. */
     background, 
-    /** The environment a new conversation is bound to (environments spec §4.1 item 1). */
-    environments, txHost) {
+    /** The device a new conversation is bound to (environments spec §4.1 item 1). */
+    devices, txHost) {
         this.db = db;
         this.eventLog = eventLog;
         this.agents = agents;
@@ -157,7 +157,7 @@ let ConversationsService = class ConversationsService {
         this.attachments = attachments;
         this.invoker = invoker;
         this.background = background;
-        this.environments = environments;
+        this.devices = devices;
         this.txHost = txHost;
     }
     /**
@@ -170,14 +170,14 @@ let ConversationsService = class ConversationsService {
             .catch((err) => this.log.warn("ensureRun on conversation open failed", { conversationId, err }));
     }
     /**
-     * Creates an empty conversation bound to its environment (`pick`, see
-     * {@link ConversationEnvironments.forNew}); an agent the account cannot use →
-     * `agent.not_found`, an environment it may not use → `environment.not_found` /
-     * `environment.unavailable`, and nothing is created.
+     * Creates an empty conversation bound to its device (`pick`, see
+     * {@link ConversationDevices.forNew}); an agent the account cannot use →
+     * `agent.not_found`, a device it may not use → `device.not_found` /
+     * `device.unavailable`, and nothing is created.
      */
     async create(orgId, accountId, agentId, pick = {}) {
         await this.agents.get(orgId, agentId, accountId);
-        const environmentId = await this.environments.forNew(orgId, accountId, pick);
+        const deviceId = await this.devices.forNew(orgId, accountId, pick);
         const row = await this.db
             .insertInto("conversations")
             .values({
@@ -185,7 +185,7 @@ let ConversationsService = class ConversationsService {
             org_id: orgId,
             agent_id: agentId,
             account_id: accountId,
-            environment_id: environmentId,
+            device_id: deviceId,
         })
             .returning(COLUMNS)
             .executeTakeFirstOrThrow();
@@ -205,12 +205,12 @@ let ConversationsService = class ConversationsService {
         const prior = await this.findCreated(orgId, accountId, agentId, input.clientMessageId);
         if (prior)
             return prior;
-        const environmentId = await this.environments.forNew(orgId, accountId, pick);
+        const deviceId = await this.devices.forNew(orgId, accountId, pick);
         const next = await this.planSwitch(orgId, agent.definition, NO_SELECTION, input);
         const extra = await this.resolveExtra(orgId, accountId, input);
         const invoked = await this.prepareSkill(orgId, agentId, undefined, agent.definition, input);
         const id = randomUUID();
-        const all = await this.createIn({ id, orgId, accountId, agentId, environmentId }, input, next, extra, invoked);
+        const all = await this.createIn({ id, orgId, accountId, agentId, deviceId }, input, next, extra, invoked);
         const written = all?.at(-1);
         if (!all || !written) {
             const raced = await this.findCreated(orgId, accountId, agentId, input.clientMessageId);
@@ -233,7 +233,7 @@ let ConversationsService = class ConversationsService {
             org_id: orgId,
             agent_id: conv.agentId,
             account_id: accountId,
-            environment_id: conv.environmentId,
+            device_id: conv.deviceId,
             create_request_id: input.clientMessageId,
         })
             .onConflict((oc) => oc
@@ -482,16 +482,16 @@ let ConversationsService = class ConversationsService {
         LIMIT ${opts.limit + 1}
       )
       SELECT page.agent_id, page.latest_at, v.definition ->> 'name' AS agent_name,
-        cs.id, cs.org_id, cs.account_id, cs.title, cs.title_source, cs.selection, cs.last_seq,
+        a.profile_avatar, a.profile_updated_at, cs.id, cs.org_id, cs.account_id, cs.title, cs.title_source, cs.selection, cs.last_seq,
         cs.created_at, cs.updated_at, cs.parent_conversation_id, cs.subagent_type,
-        cs.archived_at, cs.environment_id, cs.activity
+        cs.archived_at, cs.device_id, cs.activity
       FROM page
       JOIN capybara.agents a ON a.id = page.agent_id
       JOIN capybara.agent_versions v ON v.agent_id = a.id AND v.version = a.current_version
       CROSS JOIN LATERAL (
         SELECT c.id, c.org_id, c.account_id, c.title, c.title_source, c.selection, c.last_seq,
           c.created_at, c.updated_at, c.parent_conversation_id, c.subagent_type,
-          c.archived_at, c.environment_id, ${activitySql("c")} AS activity
+          c.archived_at, c.device_id, ${activitySql("c")} AS activity
         FROM capybara.conversations c
         WHERE c.org_id = ${orgId} AND c.account_id = ${accountId} AND c.kind = 'chat'
           AND c.deleted_at IS NULL AND ${archivedFilter} ${searchFilter} ${stateFilter}
@@ -506,7 +506,14 @@ let ConversationsService = class ConversationsService {
         for (const r of rows) {
             if (current?.agent.id !== r.agent_id) {
                 current = {
-                    agent: { id: r.agent_id, name: r.agent_name ?? "" },
+                    agent: {
+                        id: r.agent_id,
+                        name: r.agent_name ?? "",
+                        profile: {
+                            avatar: r.profile_avatar,
+                            updatedAt: r.profile_updated_at.toISOString(),
+                        },
+                    },
                     latestAt: r.latest_at,
                     conversations: [],
                     more: false,
@@ -952,7 +959,7 @@ ConversationsService = __decorate([
     __param(8, Inject(AttachmentsService)),
     __param(9, Inject(SkillInvoker)),
     __param(10, Inject(BackgroundTaskStopper)),
-    __param(11, Inject(ConversationEnvironments)),
+    __param(11, Inject(ConversationDevices)),
     __param(12, Inject(TransactionHost))
 ], ConversationsService);
 export { ConversationsService };

package/dist/conversations/{environment-status.d.ts → device-status.d.ts}

@@ -1,24 +1,24 @@
-import { EnvironmentsService, type EnvironmentView } from "../environments/environments.service.js";
+import { DevicesService, type DeviceView } from "../devices/devices.service.js";
 import { KernelDb } from "../infra/database/kernel-db.js";
 import { ConversationAccess } from "./access.js";
 import { ConversationsService } from "./conversations.service.js";
 /**
- * The environment a conversation works in, for its page (environments spec §9: shown read only):
+ * The device a conversation works in, for its page (environments spec §9: shown read only):
  * a conversation the viewer may not see → `conversation.not_found`. A sub-agent shows its root
- * conversation's environment. Null while the conversation is unbound, or when its environment is
+ * conversation's device. Null while the conversation is unbound, or when its device is
  * deleted or no longer its owner's (its sandbox tools then fail).
  */
-export declare class ConversationEnvironmentStatus {
+export declare class ConversationDeviceStatus {
     /** Who may see the conversation (the rule of its event stream). */
     private readonly access;
-    /** The conversation whose environment it works in: a sub-agent's root, else itself. */
+    /** The conversation whose device it works in: a sub-agent's root, else itself. */
     private readonly conversations;
-    private readonly environments;
+    private readonly devices;
     private readonly db;
     constructor(
     /** Who may see the conversation (the rule of its event stream). */
     access: Pick<ConversationAccess, "isAccessible">, 
-    /** The conversation whose environment it works in: a sub-agent's root, else itself. */
-    conversations: Pick<ConversationsService, "sandboxConversationOf">, environments: Pick<EnvironmentsService, "get">, db: KernelDb);
-    get(orgId: string, conversationId: string, viewerAccountId: string): Promise<EnvironmentView | null>;
+    /** The conversation whose device it works in: a sub-agent's root, else itself. */
+    conversations: Pick<ConversationsService, "sandboxConversationOf">, devices: Pick<DevicesService, "get">, db: KernelDb);
+    get(orgId: string, conversationId: string, viewerAccountId: string): Promise<DeviceView | null>;
 }

package/dist/conversations/{environment-status.js → device-status.js}

@@ -8,31 +8,31 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
 import { Inject, Injectable } from "@nestjs/common";
-import { EnvironmentsService } from "../environments/environments.service.js";
+import { DevicesService } from "../devices/devices.service.js";
 import { ApiError } from "../errors.js";
 import { KernelDb } from "../infra/database/kernel-db.js";
 import { UUID_RE } from "../ui/registry.js";
 import { ConversationAccess } from "./access.js";
 import { ConversationsService } from "./conversations.service.js";
 /**
- * The environment a conversation works in, for its page (environments spec §9: shown read only):
+ * The device a conversation works in, for its page (environments spec §9: shown read only):
  * a conversation the viewer may not see → `conversation.not_found`. A sub-agent shows its root
- * conversation's environment. Null while the conversation is unbound, or when its environment is
+ * conversation's device. Null while the conversation is unbound, or when its device is
  * deleted or no longer its owner's (its sandbox tools then fail).
  */
-let ConversationEnvironmentStatus = class ConversationEnvironmentStatus {
+let ConversationDeviceStatus = class ConversationDeviceStatus {
     access;
     conversations;
-    environments;
+    devices;
     db;
     constructor(
     /** Who may see the conversation (the rule of its event stream). */
     access, 
-    /** The conversation whose environment it works in: a sub-agent's root, else itself. */
-    conversations, environments, db) {
+    /** The conversation whose device it works in: a sub-agent's root, else itself. */
+    conversations, devices, db) {
         this.access = access;
         this.conversations = conversations;
-        this.environments = environments;
+        this.devices = devices;
         this.db = db;
     }
     async get(orgId, conversationId, viewerAccountId) {
@@ -40,32 +40,32 @@ let ConversationEnvironmentStatus = class ConversationEnvironmentStatus {
             !(await this.access.isAccessible(orgId, conversationId, viewerAccountId))) {
             throw new ApiError("conversation.not_found", "Conversation not found");
         }
-        // a sub-agent works in its root conversation's environment (at every depth)
+        // a sub-agent works in its root conversation's device (at every depth)
         const root = await this.conversations.sandboxConversationOf(orgId, conversationId);
         const conv = await this.db
             .selectFrom("conversations")
-            .select(["account_id", "environment_id"])
+            .select(["account_id", "device_id"])
             .where("id", "=", root)
             .where("org_id", "=", orgId)
             .executeTakeFirst();
-        if (!conv?.environment_id)
+        if (!conv?.device_id)
             return null;
         try {
-            // the environment as its owner sees it (only the owner may use a personal environment)
-            return await this.environments.get(orgId, conv.account_id, conv.environment_id);
+            // the device as its owner sees it (only the owner may use a personal device)
+            return await this.devices.get(orgId, conv.account_id, conv.device_id);
         }
         catch (e) {
-            if (e instanceof ApiError && e.code === "environment.not_found")
+            if (e instanceof ApiError && e.code === "device.not_found")
                 return null;
             throw e;
         }
     }
 };
-ConversationEnvironmentStatus = __decorate([
+ConversationDeviceStatus = __decorate([
     Injectable(),
     __param(0, Inject(ConversationAccess)),
     __param(1, Inject(ConversationsService)),
-    __param(2, Inject(EnvironmentsService)),
+    __param(2, Inject(DevicesService)),
     __param(3, Inject(KernelDb))
-], ConversationEnvironmentStatus);
-export { ConversationEnvironmentStatus };
+], ConversationDeviceStatus);
+export { ConversationDeviceStatus };

package/dist/conversations/event-log.d.ts

@@ -132,7 +132,7 @@ export declare class EventLog {
     findByIdem(conversationId: string, idemKey: string): Promise<ConversationEvent | undefined>;
     /**
      * The conversation's latest event of `type` (by seq); undefined without one. `skills_catalog`
-     * (0025) and `environment_paths` (0094) have partial indexes that answer it directly; other
+     * (0025) and `device_paths` (0094) have partial indexes that answer it directly; other
      * types scan the conversation's events backwards on the (conversation_id, seq) key, the whole
      * conversation when it has none.
      */

package/dist/conversations/event-log.js

@@ -246,7 +246,7 @@ let EventLog = class EventLog {
     }
     /**
      * The conversation's latest event of `type` (by seq); undefined without one. `skills_catalog`
-     * (0025) and `environment_paths` (0094) have partial indexes that answer it directly; other
+     * (0025) and `device_paths` (0094) have partial indexes that answer it directly; other
      * types scan the conversation's events backwards on the (conversation_id, seq) key, the whole
      * conversation when it has none.
      */

package/dist/conversations/events.d.ts

@@ -516,7 +516,7 @@ export declare const ConversationEventSchema: z.ZodDiscriminatedUnion<[z.ZodObje
         removed: z.ZodArray<z.ZodString>;
     }, z.core.$strip>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"environment_paths">;
+    type: z.ZodLiteral<"device_paths">;
     payload: z.ZodObject<{
         roots: z.ZodObject<{
             workspace: z.ZodString;
@@ -809,6 +809,7 @@ export declare const ConversationEventSchema: z.ZodDiscriminatedUnion<[z.ZodObje
                 deny: z.ZodOptional<z.ZodArray<z.ZodString>>;
             }, z.core.$strict>>;
             toolPolicies: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEnum<{
+                allow: "allow";
                 ask: "ask";
                 deny: "deny";
             }>>>;

package/dist/conversations/events.js

@@ -447,10 +447,10 @@ export const ConversationEventSchema = z.discriminatedUnion("type", [
      * The directories of the instance a sandbox tool call entered, when they differ from the
      * defaults (environments spec §13.1: a connected machine's real paths). Written once per
      * conversation and roots, before that call's result. **Model-visible**: rendered at its position
-     * as a system message (`environmentPathsText`); a summary covering it is followed by the latest
+     * as a system message (`devicePathsText`); a summary covering it is followed by the latest
      * one again.
      */
-    ev("environment_paths", z.object({
+    ev("device_paths", z.object({
         roots: z.object({
             workspace: z.string().min(1).max(4096),
             skills: z.string().min(1).max(4096),

package/dist/ctx/create-ctx.d.ts

@@ -1,4 +1,4 @@
-import { type ExtensionContext, type ExtensionManifest, type ExtensionPointRef, type Logger, type ToolHandler, type ToolSpec } from "@capybara-hq/plugin-sdk";
+import { type ExtensionContext, type ExtensionManifest, type ExtensionPointRef, type Logger, resolveUiSlots, type ToolHandler, type ToolSpec } from "@capybara-hq/plugin-sdk";
 import type { Redis } from "ioredis";
 import { Kysely } from "kysely";
 import { type RegisteredHook } from "../extensions/hooks.js";
@@ -72,8 +72,15 @@ export interface ExtensionPointAccess {
  * required bootstrap plugins, see `extensions/enabled.ts`), not cached.
  */
 export declare function queryEnabledPlugins(db: Kysely<any>, orgId: string): Promise<Set<string>>;
+/**
+ * Whether the account is, right now, an active super admin (one query): what a platform embed
+ * token and the platform refresh stream re-check.
+ */
+export declare function currentPlatformAccount(db: KernelDeps["db"], accountId: string): Promise<boolean>;
 /** 插件的 PG schema 名：`plugin_<name>`，name 中的 `-` 换成 `_`。 */
 export declare function pluginSchemaName(name: string): string;
+/** What {@link resolveUiSlots} returns for a manifest. */
+export type UiResolution = ReturnType<typeof resolveUiSlots>;
 /** 内核视角的插件 ctx：插件契约之外还带宿主要用的登记信息与关闭方法。 */
 export type KernelExtensionContext = ExtensionContext & {
     /** 本实例的登记账（C17）：每次登记记一笔，撤销时逐项撤销。 */
@@ -92,6 +99,8 @@ export type KernelExtensionContext = ExtensionContext & {
     registeredTools: RegisteredTool[];
     /** Hooks registered through `ctx.hooks.on` (registration order). */
     registeredHooks: RegisteredHook[];
+    /** The manifest's `ui` resolved against the slot catalog once per load (UI slots spec §3.2). */
+    uiResolution: UiResolution;
     /** 经 `ctx.ui.view` 注册的视图（按贡献 id）。 */
     uiViews: ReadonlyMap<string, UiRender>;
     /** 经 `ctx.ui.action` 注册的动作处理函数（按贡献 id）。 */

package/dist/ctx/create-ctx.js

@@ -1,4 +1,4 @@
-import { EXTENSION_POINTS, ExtensionPermissionError, ExtensionPointUnavailableError, FILE_PREVIEW_EXTENSION_POINT, OBJECT_STORE_EXTENSION_POINT, parseExtensionPoint, validateFilePreviewProvider, validateToolSpec, } from "@capybara-hq/plugin-sdk";
+import { EXTENSION_POINTS, ExtensionPermissionError, ExtensionPointUnavailableError, FILE_PREVIEW_EXTENSION_POINT, OBJECT_STORE_EXTENSION_POINT, parseExtensionPoint, resolveUiSlots, validateFilePreviewProvider, validateToolSpec, } from "@capybara-hq/plugin-sdk";
 import { Command, ConnectionBuilder, ControlledTransactionBuilder, Kysely, TransactionBuilder, } from "kysely";
 import { conversationTopic } from "../conversations/event-log.js";
 import { kernelDb } from "../db/kernel-schema.js";
@@ -7,7 +7,7 @@ import { checkHookRegistration } from "../extensions/hooks.js";
 import { RegistrationLedger } from "../extensions/ledger.js";
 import { audit } from "../identity/audit.js";
 import { PrefixedStorage } from "../storage/storage.service.js";
-import { canUsePlace, orgUiTopic, PluginUiRegistration, } from "../ui/registry.js";
+import { canUseSlot, orgUiTopic, PLATFORM_UI_TOPIC, PluginUiRegistration, } from "../ui/registry.js";
 import { createBus } from "./bus.js";
 import { createKv } from "./kv.js";
 import { createLock } from "./lock.js";
@@ -39,6 +39,20 @@ async function currentEmbedRole(db, plugin, orgId, accountId) {
         .executeTakeFirst();
     return row?.role;
 }
+/**
+ * Whether the account is, right now, an active super admin (one query): what a platform embed
+ * token and the platform refresh stream re-check.
+ */
+export async function currentPlatformAccount(db, accountId) {
+    const row = await kernelDb(db)
+        .selectFrom("accounts")
+        .select("accounts.id")
+        .where("accounts.id", "=", accountId)
+        .where("accounts.status", "=", "active")
+        .where("accounts.is_super_admin", "=", true)
+        .executeTakeFirst();
+    return row !== undefined;
+}
 /** `ui.invalidate` 目标的一条查询：插件在该组织启用，且（带对话时）对话属于该组织。 */
 async function invalidateTargetOk(db, plugin, orgId, conversationId) {
     const k = kernelDb(db);
@@ -248,7 +262,10 @@ export function createExtensionContext(deps, manifest, deploymentConfig, extensi
     ]);
     const uiReg = new PluginUiRegistration(manifest, deny);
     const embedTokens = deps.embedTokens;
-    const uiPlaces = new Map((manifest.ui ?? []).map((c) => [c.id, c.place]));
+    const uiResolution = resolveUiSlots(manifest.ui);
+    const uiSlots = new Map(uiResolution.resolved.map((r) => [r.contribution.id, r.slot]));
+    /** Ids of the extension's `platform.page` contributions (their invalidate takes no orgId). */
+    const platformUi = new Set([...uiSlots].filter(([, s]) => s.id === "platform.page").map(([id]) => id));
     /** 校验能力可取用（非 brokered、已在清单声明），返回其登记信息。 */
     const checkExtensionPoint = (ref) => {
         const capName = parseExtensionPoint(ref).name;
@@ -482,9 +499,15 @@ export function createExtensionContext(deps, manifest, deploymentConfig, extensi
                 });
             },
             // 目标先核对（一条查询）：插件在 orgId 启用；带对话时对话属于 orgId。不满足就只记 debug、不发
-            // （插件拿着过期或别的组织的 id 调用不是错误，但不能借它往别的组织的流里发刷新）
+            // （插件拿着过期或别的组织的 id 调用不是错误，但不能借它往别的组织的流里发刷新）。A `platform.page`
+            // contribution takes no orgId and refreshes the platform stream (super admins only)
             async invalidate(target) {
-                const t = uiReg.target(target);
+                const t = uiReg.target(target, platformUi);
+                const msg = { kind: "ui", plugin: name, contribution: t.contribution };
+                if (t.scope === "platform") {
+                    await kernelBus.publish(PLATFORM_UI_TOPIC, msg);
+                    return;
+                }
                 if (!(await invalidateTargetOk(deps.db, name, t.orgId, t.conversationId))) {
                     deps.log.debug?.("plugin ui invalidate ignored: plugin not enabled or conversation not in org", {
                         plugin: name,
@@ -494,22 +517,33 @@ export function createExtensionContext(deps, manifest, deploymentConfig, extensi
                     });
                     return;
                 }
-                const msg = { kind: "ui", plugin: name, contribution: t.contribution };
                 await kernelBus.publish(t.conversationId !== undefined
                     ? conversationTopic(t.conversationId)
                     : orgUiTopic(t.orgId), msg);
             },
             // 只认签给本插件、未过期、未篡改的令牌（见 ui/embed-token.ts）；再用一条查询核对此刻：本插件仍在该组织
             // 启用、组织未删除、账号 active 且仍是成员（每次查 PG、不缓存：停用插件、离职、停用账号后已签出的令牌立即失效）。
-            // 返回的 role 是此刻的角色；组织页面的令牌在调用者已降为 guest 时失效（A38）。其余一律 null
+            // 返回的 role 是此刻的角色；令牌在此刻的角色低于贡献所在位置的 minRole 时失效（A38, UI slots spec §7）。
+            // A platform token: the contribution is a `platform.page` and the account is still an active
+            // super admin. A token of one scope never verifies for the other's slots. 其余一律 null
             async verifyEmbedToken(token) {
                 const claims = embedTokens.verify(token, name);
                 if (claims === null)
                     return null;
-                const role = await currentEmbedRole(deps.db, name, claims.orgId, claims.accountId);
-                if (role === undefined)
+                const slot = uiSlots.get(claims.contribution);
+                if (claims.scope === "platform") {
+                    if (slot?.id !== "platform.page")
+                        return null;
+                    return (await currentPlatformAccount(deps.db, claims.accountId)) ? claims : null;
+                }
+                if (claims.scope !== "org" || claims.orgId === undefined)
                     return null;
-                if (!canUsePlace(uiPlaces.get(claims.contribution) ?? "page", role))
+                // the contribution's slot as loaded now: never `platform.page` through an org token, and the
+                // current role still meets the slot's minRole (a demoted caller's token stops working)
+                if (slot === undefined || slot.id === "platform.page")
+                    return null;
+                const role = await currentEmbedRole(deps.db, name, claims.orgId, claims.accountId);
+                if (role === undefined || !canUseSlot(slot, role))
                     return null;
                 return { ...claims, role };
             },
@@ -521,14 +555,15 @@ export function createExtensionContext(deps, manifest, deploymentConfig, extensi
             if (provided.has(extensionPoint)) {
                 throw new Error(`plugin ${name}: extension point ${extensionPoint} provided more than once`);
             }
-            if (extensionPoint === FILE_PREVIEW_EXTENSION_POINT)
-                checkFilePreviewProvider(manifest, impl);
-            provided.set(extensionPoint, impl);
+            const served = extensionPoint === FILE_PREVIEW_EXTENSION_POINT
+                ? checkFilePreviewProvider(manifest, impl, uiResolution, deps.log)
+                : impl;
+            provided.set(extensionPoint, served);
             ledger.add({
                 kind: "provide",
                 key: extensionPoint,
                 dispose: async () => {
-                    if (provided.get(extensionPoint) === impl)
+                    if (provided.get(extensionPoint) === served)
                         provided.delete(extensionPoint);
                 },
             });
@@ -547,6 +582,7 @@ export function createExtensionContext(deps, manifest, deploymentConfig, extensi
         provided,
         registeredTools,
         registeredHooks,
+        uiResolution,
         uiViews: uiReg.views,
         uiActions: uiReg.actions,
         ledger,
@@ -601,21 +637,46 @@ export function createExtensionContext(deps, manifest, deploymentConfig, extensi
 /**
  * A `file-preview@1` provider must be valid when it is provided (setup fails otherwise): the shape
  * ({@link validateFilePreviewProvider}), and every `embed` names a ui contribution of this extension
- * with `kind: "embed"` and `place: "file-preview"`.
+ * with `kind: "embed"` that resolved to the slot `file.preview` (from `slot` or the deprecated
+ * `place`). A previewer whose embed names an embed contribution dropped at load (unknown slot or
+ * slot version, UI slots spec §3.2) is left out instead, with one warn per load: the returned
+ * provider is what the kernel serves.
  */
-function checkFilePreviewProvider(manifest, impl) {
+function checkFilePreviewProvider(manifest, impl, ui, log) {
     const problems = validateFilePreviewProvider(impl);
-    if (problems.length === 0) {
-        const embeds = new Set((manifest.ui ?? [])
-            .filter((c) => c.kind === "embed" && c.place === "file-preview")
-            .map((c) => c.id));
-        impl.previewers.forEach((p, i) => {
-            if (p.embed !== undefined && !embeds.has(p.embed)) {
-                problems.push(`previewers[${i}].embed "${p.embed}" is not a ui contribution { kind: "embed", place: "file-preview" }`);
-            }
-        });
+    if (problems.length > 0) {
+        throw new Error(`plugin ${manifest.name}: invalid ${FILE_PREVIEW_EXTENSION_POINT} provider: ${problems.join("; ")}`);
     }
+    const embeds = new Set(ui.resolved
+        .filter((r) => r.contribution.kind === "embed" && r.slot.id === "file.preview")
+        .map((r) => r.contribution.id));
+    const droppedEmbeds = new Map(ui.dropped
+        .filter((d) => manifest.ui?.some((c) => c.id === d.id && c.kind === "embed"))
+        .map((d) => [d.id, d]));
+    const provider = impl;
+    const kept = [];
+    const dropped = [];
+    provider.previewers.forEach((p, i) => {
+        if (p.embed === undefined || embeds.has(p.embed)) {
+            kept.push(p);
+            return;
+        }
+        const d = droppedEmbeds.get(p.embed);
+        if (d !== undefined) {
+            dropped.push({ previewer: p.id, embed: p.embed, ref: d.ref, reason: d.reason });
+            return;
+        }
+        problems.push(`previewers[${i}].embed "${p.embed}" is not a ui contribution { kind: "embed", slot: "file.preview" }`);
+    });
     if (problems.length > 0) {
         throw new Error(`plugin ${manifest.name}: invalid ${FILE_PREVIEW_EXTENSION_POINT} provider: ${problems.join("; ")}`);
     }
+    if (dropped.length === 0)
+        return impl;
+    log.warn("plugin file previewers dropped", {
+        plugin: manifest.name,
+        version: manifest.version,
+        previewers: dropped,
+    });
+    return { ...provider, previewers: kept };
 }