@ikenga/contract 0.15.0 → 0.16.0

package/dist/manifest.d.ts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-export declare const IKENGA_API_VERSION: 3;
+export declare const IKENGA_API_VERSION: 4;
 export declare const IKENGA_API_MIN_SUPPORTED: 1;
 export declare const AuthorSchema: z.ZodObject<{
     name: z.ZodString;
@@ -89,6 +89,13 @@ export declare const PermissionsSchema: z.ZodDefault<z.ZodObject<{
      *  (pkgDeclaresScope). Mirrors `Permissions.engine` in the shell's
      *  manifest.rs — keep in lockstep. */
     engine: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Notification scopes. `"send"` gates the FE-side `host.notify` verb
+     *  (pkgDeclaresScope), which raises a real OS notification and therefore
+     *  reaches the user even when Ikenga is not the focused window — which is
+     *  why it is gated at all. Mirrors `Permissions.notify` in the shell's
+     *  manifest.rs — keep in lockstep. */
+    notify: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    events: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
 }, "strip", z.ZodTypeAny, {
     engine: string[];
     'shell.execute': string[];
@@ -98,6 +105,8 @@ export declare const PermissionsSchema: z.ZodDefault<z.ZodObject<{
     'sqlite.tables': string[];
     'supabase.tables': string[];
     'vault.keys': string[];
+    notify: string[];
+    events: string[];
 }, {
     engine?: string[] | undefined;
     'shell.execute'?: string[] | undefined;
@@ -107,6 +116,8 @@ export declare const PermissionsSchema: z.ZodDefault<z.ZodObject<{
     'sqlite.tables'?: string[] | undefined;
     'supabase.tables'?: string[] | undefined;
     'vault.keys'?: string[] | undefined;
+    notify?: string[] | undefined;
+    events?: string[] | undefined;
 }>>;
 export declare const NavEntrySchema: z.ZodObject<{
     id: z.ZodString;
@@ -129,18 +140,21 @@ export declare const NavEntrySchema: z.ZodObject<{
 }>;
 export declare const UiRouteSchema: z.ZodObject<{
     path: z.ZodString;
-    /** "iframe" | "component" (component is builtin-only) */
-    kind: z.ZodEnum<["iframe", "component"]>;
-    /** iframe: URL or pkg-relative html path. component: identifier. */
+    /** "iframe" | "component" | "webview" (component is builtin-only) */
+    kind: z.ZodEnum<["iframe", "component", "webview"]>;
+    /** iframe/webview: URL or pkg-relative html path. component: identifier. */
     source: z.ZodString;
+    partition: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     path: string;
-    kind: "iframe" | "component";
+    kind: "iframe" | "component" | "webview";
     source: string;
+    partition?: string | undefined;
 }, {
     path: string;
-    kind: "iframe" | "component";
+    kind: "iframe" | "component" | "webview";
     source: string;
+    partition?: string | undefined;
 }>;
 export declare const CommandPaletteEntrySchema: z.ZodObject<{
     id: z.ZodString;
@@ -171,6 +185,14 @@ export declare const SidePaneViewerSchema: z.ZodObject<{
     id: string;
     route: string;
 }>;
+export declare const ManifestUiSessionSchema: z.ZodObject<{
+    persistence: z.ZodEnum<["keep", "clear-on-exit", "ask"]>;
+}, "strip", z.ZodTypeAny, {
+    persistence: "keep" | "clear-on-exit" | "ask";
+}, {
+    persistence: "keep" | "clear-on-exit" | "ask";
+}>;
+export type ManifestUiSession = z.infer<typeof ManifestUiSessionSchema>;
 export declare const UiBlockSchema: z.ZodDefault<z.ZodObject<{
     nav: z.ZodDefault<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
@@ -193,18 +215,21 @@ export declare const UiBlockSchema: z.ZodDefault<z.ZodObject<{
     }>, "many">>;
     routes: z.ZodDefault<z.ZodArray<z.ZodObject<{
         path: z.ZodString;
-        /** "iframe" | "component" (component is builtin-only) */
-        kind: z.ZodEnum<["iframe", "component"]>;
-        /** iframe: URL or pkg-relative html path. component: identifier. */
+        /** "iframe" | "component" | "webview" (component is builtin-only) */
+        kind: z.ZodEnum<["iframe", "component", "webview"]>;
+        /** iframe/webview: URL or pkg-relative html path. component: identifier. */
         source: z.ZodString;
+        partition: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         path: string;
-        kind: "iframe" | "component";
+        kind: "iframe" | "component" | "webview";
         source: string;
+        partition?: string | undefined;
     }, {
         path: string;
-        kind: "iframe" | "component";
+        kind: "iframe" | "component" | "webview";
         source: string;
+        partition?: string | undefined;
     }>, "many">>;
     command_palette: z.ZodDefault<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
@@ -239,6 +264,13 @@ export declare const UiBlockSchema: z.ZodDefault<z.ZodObject<{
     csp: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>>;
     /** Per-directive Permission-Policy values. */
     permissions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>>;
+    session: z.ZodOptional<z.ZodObject<{
+        persistence: z.ZodEnum<["keep", "clear-on-exit", "ask"]>;
+    }, "strip", z.ZodTypeAny, {
+        persistence: "keep" | "clear-on-exit" | "ask";
+    }, {
+        persistence: "keep" | "clear-on-exit" | "ask";
+    }>>;
 }, "strip", z.ZodTypeAny, {
     nav: {
         label: string;
@@ -249,8 +281,9 @@ export declare const UiBlockSchema: z.ZodDefault<z.ZodObject<{
     }[];
     routes: {
         path: string;
-        kind: "iframe" | "component";
+        kind: "iframe" | "component" | "webview";
         source: string;
+        partition?: string | undefined;
     }[];
     command_palette: {
         label: string;
@@ -263,9 +296,15 @@ export declare const UiBlockSchema: z.ZodDefault<z.ZodObject<{
         id: string;
         route: string;
     }[];
+    session?: {
+        persistence: "keep" | "clear-on-exit" | "ask";
+    } | undefined;
     csp?: Record<string, string[]> | undefined;
     permissions?: Record<string, string[]> | undefined;
 }, {
+    session?: {
+        persistence: "keep" | "clear-on-exit" | "ask";
+    } | undefined;
     nav?: {
         label: string;
         id: string;
@@ -275,8 +314,9 @@ export declare const UiBlockSchema: z.ZodDefault<z.ZodObject<{
     }[] | undefined;
     routes?: {
         path: string;
-        kind: "iframe" | "component";
+        kind: "iframe" | "component" | "webview";
         source: string;
+        partition?: string | undefined;
     }[] | undefined;
     command_palette?: {
         label: string;
@@ -389,19 +429,19 @@ export declare const IykeBlockSchema: z.ZodObject<{
     }>, "many">>;
     events: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
 }, "strip", z.ZodTypeAny, {
+    events: string[];
     routes: {
         path: string;
         method: "GET" | "POST";
         handler: string;
     }[];
-    events: string[];
 }, {
+    events?: string[] | undefined;
     routes?: {
         path: string;
         method: "GET" | "POST";
         handler: string;
     }[] | undefined;
-    events?: string[] | undefined;
 }>;
 export declare const CronEntrySchema: z.ZodObject<{
     id: z.ZodString;
@@ -458,14 +498,23 @@ export declare const WebviewCapabilitySchema: z.ZodObject<{
      *  own OS window). Defaults to `["webkit"]` so existing manifests are
      *  unchanged. Mirrors `engines` in `WebviewCapability` (manifest.rs). */
     engines: z.ZodDefault<z.ZodArray<z.ZodEnum<["webkit", "chrome"]>, "many">>;
+    /** Origins this pkg's webviews may load. **Absent is permissive** (with a
+     *  host-side warning) so pre-v4 manifests keep mounting; `[]` is an explicit
+     *  deny-all; entries match exactly, as `*`, or as a `https://*.example.com`
+     *  subdomain glob. Mirrors `allowed_origins` in `manifest.rs` — absent and
+     *  empty are deliberately distinct, so this must stay `.optional()`, never
+     *  `.default([])`. */
+    allowed_origins: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
 }, "strip", z.ZodTypeAny, {
     child_webviews: boolean;
     partitions: string[];
     engines: ("webkit" | "chrome")[];
+    allowed_origins?: string[] | undefined;
 }, {
     child_webviews?: boolean | undefined;
     partitions?: string[] | undefined;
     engines?: ("webkit" | "chrome")[] | undefined;
+    allowed_origins?: string[] | undefined;
 }>;
 export type WebviewCapability = z.infer<typeof WebviewCapabilitySchema>;
 /** Agent-ops host-bridge capability (api ≥ 2). Opt-in to the privileged
@@ -658,6 +707,14 @@ export declare const RequiresEntrySchema: z.ZodObject<{
     source?: "git" | "npx" | "catalog" | "local" | undefined;
 }>;
 export type RequiresEntry = z.infer<typeof RequiresEntrySchema>;
+export declare const ManifestAuthBridgeSchema: z.ZodObject<{
+    strategy: z.ZodEnum<["api-key", "cdp", "none"]>;
+}, "strip", z.ZodTypeAny, {
+    strategy: "api-key" | "cdp" | "none";
+}, {
+    strategy: "api-key" | "cdp" | "none";
+}>;
+export type ManifestAuthBridge = z.infer<typeof ManifestAuthBridgeSchema>;
 export declare const ManifestSchema: z.ZodObject<{
     /** Reverse-DNS, e.g. `com.ikenga.studio`. */
     id: z.ZodString;
@@ -665,6 +722,13 @@ export declare const ManifestSchema: z.ZodObject<{
     version: z.ZodString;
     /** Numeric string — host accepts versions in [MIN, CURRENT]. */
     ikenga_api: z.ZodString;
+    auth_bridge: z.ZodOptional<z.ZodObject<{
+        strategy: z.ZodEnum<["api-key", "cdp", "none"]>;
+    }, "strip", z.ZodTypeAny, {
+        strategy: "api-key" | "cdp" | "none";
+    }, {
+        strategy: "api-key" | "cdp" | "none";
+    }>>;
     /** Hint, not enforced: "skill" | "embedded" | "windowed" | "engine". */
     kind: z.ZodOptional<z.ZodString>;
     author: z.ZodOptional<z.ZodObject<{
@@ -755,6 +819,13 @@ export declare const ManifestSchema: z.ZodObject<{
          *  (pkgDeclaresScope). Mirrors `Permissions.engine` in the shell's
          *  manifest.rs — keep in lockstep. */
         engine: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        /** Notification scopes. `"send"` gates the FE-side `host.notify` verb
+         *  (pkgDeclaresScope), which raises a real OS notification and therefore
+         *  reaches the user even when Ikenga is not the focused window — which is
+         *  why it is gated at all. Mirrors `Permissions.notify` in the shell's
+         *  manifest.rs — keep in lockstep. */
+        notify: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        events: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
     }, "strip", z.ZodTypeAny, {
         engine: string[];
         'shell.execute': string[];
@@ -764,6 +835,8 @@ export declare const ManifestSchema: z.ZodObject<{
         'sqlite.tables': string[];
         'supabase.tables': string[];
         'vault.keys': string[];
+        notify: string[];
+        events: string[];
     }, {
         engine?: string[] | undefined;
         'shell.execute'?: string[] | undefined;
@@ -773,6 +846,8 @@ export declare const ManifestSchema: z.ZodObject<{
         'sqlite.tables'?: string[] | undefined;
         'supabase.tables'?: string[] | undefined;
         'vault.keys'?: string[] | undefined;
+        notify?: string[] | undefined;
+        events?: string[] | undefined;
     }>>;
     migrations: z.ZodOptional<z.ZodString>;
     settings: z.ZodOptional<z.ZodObject<{
@@ -839,18 +914,21 @@ export declare const ManifestSchema: z.ZodObject<{
         }>, "many">>;
         routes: z.ZodDefault<z.ZodArray<z.ZodObject<{
             path: z.ZodString;
-            /** "iframe" | "component" (component is builtin-only) */
-            kind: z.ZodEnum<["iframe", "component"]>;
-            /** iframe: URL or pkg-relative html path. component: identifier. */
+            /** "iframe" | "component" | "webview" (component is builtin-only) */
+            kind: z.ZodEnum<["iframe", "component", "webview"]>;
+            /** iframe/webview: URL or pkg-relative html path. component: identifier. */
             source: z.ZodString;
+            partition: z.ZodOptional<z.ZodString>;
         }, "strip", z.ZodTypeAny, {
             path: string;
-            kind: "iframe" | "component";
+            kind: "iframe" | "component" | "webview";
             source: string;
+            partition?: string | undefined;
         }, {
             path: string;
-            kind: "iframe" | "component";
+            kind: "iframe" | "component" | "webview";
             source: string;
+            partition?: string | undefined;
         }>, "many">>;
         command_palette: z.ZodDefault<z.ZodArray<z.ZodObject<{
             id: z.ZodString;
@@ -885,6 +963,13 @@ export declare const ManifestSchema: z.ZodObject<{
         csp: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>>;
         /** Per-directive Permission-Policy values. */
         permissions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>>;
+        session: z.ZodOptional<z.ZodObject<{
+            persistence: z.ZodEnum<["keep", "clear-on-exit", "ask"]>;
+        }, "strip", z.ZodTypeAny, {
+            persistence: "keep" | "clear-on-exit" | "ask";
+        }, {
+            persistence: "keep" | "clear-on-exit" | "ask";
+        }>>;
     }, "strip", z.ZodTypeAny, {
         nav: {
             label: string;
@@ -895,8 +980,9 @@ export declare const ManifestSchema: z.ZodObject<{
         }[];
         routes: {
             path: string;
-            kind: "iframe" | "component";
+            kind: "iframe" | "component" | "webview";
             source: string;
+            partition?: string | undefined;
         }[];
         command_palette: {
             label: string;
@@ -909,9 +995,15 @@ export declare const ManifestSchema: z.ZodObject<{
             id: string;
             route: string;
         }[];
+        session?: {
+            persistence: "keep" | "clear-on-exit" | "ask";
+        } | undefined;
         csp?: Record<string, string[]> | undefined;
         permissions?: Record<string, string[]> | undefined;
     }, {
+        session?: {
+            persistence: "keep" | "clear-on-exit" | "ask";
+        } | undefined;
         nav?: {
             label: string;
             id: string;
@@ -921,8 +1013,9 @@ export declare const ManifestSchema: z.ZodObject<{
         }[] | undefined;
         routes?: {
             path: string;
-            kind: "iframe" | "component";
+            kind: "iframe" | "component" | "webview";
             source: string;
+            partition?: string | undefined;
         }[] | undefined;
         command_palette?: {
             label: string;
@@ -956,19 +1049,19 @@ export declare const ManifestSchema: z.ZodObject<{
         }>, "many">>;
         events: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
     }, "strip", z.ZodTypeAny, {
+        events: string[];
         routes: {
             path: string;
             method: "GET" | "POST";
             handler: string;
         }[];
-        events: string[];
     }, {
+        events?: string[] | undefined;
         routes?: {
             path: string;
             method: "GET" | "POST";
             handler: string;
         }[] | undefined;
-        events?: string[] | undefined;
     }>>;
     cron: z.ZodDefault<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
@@ -1046,14 +1139,23 @@ export declare const ManifestSchema: z.ZodObject<{
              *  own OS window). Defaults to `["webkit"]` so existing manifests are
              *  unchanged. Mirrors `engines` in `WebviewCapability` (manifest.rs). */
             engines: z.ZodDefault<z.ZodArray<z.ZodEnum<["webkit", "chrome"]>, "many">>;
+            /** Origins this pkg's webviews may load. **Absent is permissive** (with a
+             *  host-side warning) so pre-v4 manifests keep mounting; `[]` is an explicit
+             *  deny-all; entries match exactly, as `*`, or as a `https://*.example.com`
+             *  subdomain glob. Mirrors `allowed_origins` in `manifest.rs` — absent and
+             *  empty are deliberately distinct, so this must stay `.optional()`, never
+             *  `.default([])`. */
+            allowed_origins: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         }, "strip", z.ZodTypeAny, {
             child_webviews: boolean;
             partitions: string[];
             engines: ("webkit" | "chrome")[];
+            allowed_origins?: string[] | undefined;
         }, {
             child_webviews?: boolean | undefined;
             partitions?: string[] | undefined;
             engines?: ("webkit" | "chrome")[] | undefined;
+            allowed_origins?: string[] | undefined;
         }>>;
         agentOps: z.ZodOptional<z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>>;
         /** host.fetch proxy (ADR-017). Inert unless the pkg is trusted. */
@@ -1133,6 +1235,7 @@ export declare const ManifestSchema: z.ZodObject<{
             child_webviews: boolean;
             partitions: string[];
             engines: ("webkit" | "chrome")[];
+            allowed_origins?: string[] | undefined;
         } | undefined;
         agentOps?: {} | undefined;
         http?: {
@@ -1161,6 +1264,7 @@ export declare const ManifestSchema: z.ZodObject<{
             child_webviews?: boolean | undefined;
             partitions?: string[] | undefined;
             engines?: ("webkit" | "chrome")[] | undefined;
+            allowed_origins?: string[] | undefined;
         } | undefined;
         agentOps?: {} | undefined;
         http?: {
@@ -1369,6 +1473,8 @@ export declare const ManifestSchema: z.ZodObject<{
         'sqlite.tables': string[];
         'supabase.tables': string[];
         'vault.keys': string[];
+        notify: string[];
+        events: string[];
     };
     ikenga_api: string;
     targets: string[];
@@ -1389,8 +1495,9 @@ export declare const ManifestSchema: z.ZodObject<{
         }[];
         routes: {
             path: string;
-            kind: "iframe" | "component";
+            kind: "iframe" | "component" | "webview";
             source: string;
+            partition?: string | undefined;
         }[];
         command_palette: {
             label: string;
@@ -1403,6 +1510,9 @@ export declare const ManifestSchema: z.ZodObject<{
             id: string;
             route: string;
         }[];
+        session?: {
+            persistence: "keep" | "clear-on-exit" | "ask";
+        } | undefined;
         csp?: Record<string, string[]> | undefined;
         permissions?: Record<string, string[]> | undefined;
     };
@@ -1437,6 +1547,7 @@ export declare const ManifestSchema: z.ZodObject<{
             child_webviews: boolean;
             partitions: string[];
             engines: ("webkit" | "chrome")[];
+            allowed_origins?: string[] | undefined;
         } | undefined;
         agentOps?: {} | undefined;
         http?: {
@@ -1471,6 +1582,9 @@ export declare const ManifestSchema: z.ZodObject<{
         };
         display?: string | undefined;
     } | undefined;
+    auth_bridge?: {
+        strategy: "api-key" | "cdp" | "none";
+    } | undefined;
     migrations?: string | undefined;
     settings?: {
         schema: {
@@ -1483,12 +1597,12 @@ export declare const ManifestSchema: z.ZodObject<{
         }[];
     } | undefined;
     iyke?: {
+        events: string[];
         routes: {
             path: string;
             method: "GET" | "POST";
             handler: string;
         }[];
-        events: string[];
     } | undefined;
     window?: {
         label: string;
@@ -1551,6 +1665,7 @@ export declare const ManifestSchema: z.ZodObject<{
             child_webviews?: boolean | undefined;
             partitions?: string[] | undefined;
             engines?: ("webkit" | "chrome")[] | undefined;
+            allowed_origins?: string[] | undefined;
         } | undefined;
         agentOps?: {} | undefined;
         http?: {
@@ -1594,6 +1709,11 @@ export declare const ManifestSchema: z.ZodObject<{
         'sqlite.tables'?: string[] | undefined;
         'supabase.tables'?: string[] | undefined;
         'vault.keys'?: string[] | undefined;
+        notify?: string[] | undefined;
+        events?: string[] | undefined;
+    } | undefined;
+    auth_bridge?: {
+        strategy: "api-key" | "cdp" | "none";
     } | undefined;
     targets?: string[] | undefined;
     sidecars?: {
@@ -1615,6 +1735,9 @@ export declare const ManifestSchema: z.ZodObject<{
         }[] | undefined;
     } | undefined;
     ui?: {
+        session?: {
+            persistence: "keep" | "clear-on-exit" | "ask";
+        } | undefined;
         nav?: {
             label: string;
             id: string;
@@ -1624,8 +1747,9 @@ export declare const ManifestSchema: z.ZodObject<{
         }[] | undefined;
         routes?: {
             path: string;
-            kind: "iframe" | "component";
+            kind: "iframe" | "component" | "webview";
             source: string;
+            partition?: string | undefined;
         }[] | undefined;
         command_palette?: {
             label: string;
@@ -1642,12 +1766,12 @@ export declare const ManifestSchema: z.ZodObject<{
         permissions?: Record<string, string[]> | undefined;
     } | undefined;
     iyke?: {
+        events?: string[] | undefined;
         routes?: {
             path: string;
             method: "GET" | "POST";
             handler: string;
         }[] | undefined;
-        events?: string[] | undefined;
     } | undefined;
     window?: {
         label: string;
@@ -1671,6 +1795,13 @@ export declare const PkgManifestSchema: z.ZodObject<{
     version: z.ZodString;
     /** Numeric string — host accepts versions in [MIN, CURRENT]. */
     ikenga_api: z.ZodString;
+    auth_bridge: z.ZodOptional<z.ZodObject<{
+        strategy: z.ZodEnum<["api-key", "cdp", "none"]>;
+    }, "strip", z.ZodTypeAny, {
+        strategy: "api-key" | "cdp" | "none";
+    }, {
+        strategy: "api-key" | "cdp" | "none";
+    }>>;
     /** Hint, not enforced: "skill" | "embedded" | "windowed" | "engine". */
     kind: z.ZodOptional<z.ZodString>;
     author: z.ZodOptional<z.ZodObject<{
@@ -1761,6 +1892,13 @@ export declare const PkgManifestSchema: z.ZodObject<{
          *  (pkgDeclaresScope). Mirrors `Permissions.engine` in the shell's
          *  manifest.rs — keep in lockstep. */
         engine: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        /** Notification scopes. `"send"` gates the FE-side `host.notify` verb
+         *  (pkgDeclaresScope), which raises a real OS notification and therefore
+         *  reaches the user even when Ikenga is not the focused window — which is
+         *  why it is gated at all. Mirrors `Permissions.notify` in the shell's
+         *  manifest.rs — keep in lockstep. */
+        notify: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        events: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
     }, "strip", z.ZodTypeAny, {
         engine: string[];
         'shell.execute': string[];
@@ -1770,6 +1908,8 @@ export declare const PkgManifestSchema: z.ZodObject<{
         'sqlite.tables': string[];
         'supabase.tables': string[];
         'vault.keys': string[];
+        notify: string[];
+        events: string[];
     }, {
         engine?: string[] | undefined;
         'shell.execute'?: string[] | undefined;
@@ -1779,6 +1919,8 @@ export declare const PkgManifestSchema: z.ZodObject<{
         'sqlite.tables'?: string[] | undefined;
         'supabase.tables'?: string[] | undefined;
         'vault.keys'?: string[] | undefined;
+        notify?: string[] | undefined;
+        events?: string[] | undefined;
     }>>;
     migrations: z.ZodOptional<z.ZodString>;
     settings: z.ZodOptional<z.ZodObject<{
@@ -1845,18 +1987,21 @@ export declare const PkgManifestSchema: z.ZodObject<{
         }>, "many">>;
         routes: z.ZodDefault<z.ZodArray<z.ZodObject<{
             path: z.ZodString;
-            /** "iframe" | "component" (component is builtin-only) */
-            kind: z.ZodEnum<["iframe", "component"]>;
-            /** iframe: URL or pkg-relative html path. component: identifier. */
+            /** "iframe" | "component" | "webview" (component is builtin-only) */
+            kind: z.ZodEnum<["iframe", "component", "webview"]>;
+            /** iframe/webview: URL or pkg-relative html path. component: identifier. */
             source: z.ZodString;
+            partition: z.ZodOptional<z.ZodString>;
         }, "strip", z.ZodTypeAny, {
             path: string;
-            kind: "iframe" | "component";
+            kind: "iframe" | "component" | "webview";
             source: string;
+            partition?: string | undefined;
         }, {
             path: string;
-            kind: "iframe" | "component";
+            kind: "iframe" | "component" | "webview";
             source: string;
+            partition?: string | undefined;
         }>, "many">>;
         command_palette: z.ZodDefault<z.ZodArray<z.ZodObject<{
             id: z.ZodString;
@@ -1891,6 +2036,13 @@ export declare const PkgManifestSchema: z.ZodObject<{
         csp: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>>;
         /** Per-directive Permission-Policy values. */
         permissions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>>;
+        session: z.ZodOptional<z.ZodObject<{
+            persistence: z.ZodEnum<["keep", "clear-on-exit", "ask"]>;
+        }, "strip", z.ZodTypeAny, {
+            persistence: "keep" | "clear-on-exit" | "ask";
+        }, {
+            persistence: "keep" | "clear-on-exit" | "ask";
+        }>>;
     }, "strip", z.ZodTypeAny, {
         nav: {
             label: string;
@@ -1901,8 +2053,9 @@ export declare const PkgManifestSchema: z.ZodObject<{
         }[];
         routes: {
             path: string;
-            kind: "iframe" | "component";
+            kind: "iframe" | "component" | "webview";
             source: string;
+            partition?: string | undefined;
         }[];
         command_palette: {
             label: string;
@@ -1915,9 +2068,15 @@ export declare const PkgManifestSchema: z.ZodObject<{
             id: string;
             route: string;
         }[];
+        session?: {
+            persistence: "keep" | "clear-on-exit" | "ask";
+        } | undefined;
         csp?: Record<string, string[]> | undefined;
         permissions?: Record<string, string[]> | undefined;
     }, {
+        session?: {
+            persistence: "keep" | "clear-on-exit" | "ask";
+        } | undefined;
         nav?: {
             label: string;
             id: string;
@@ -1927,8 +2086,9 @@ export declare const PkgManifestSchema: z.ZodObject<{
         }[] | undefined;
         routes?: {
             path: string;
-            kind: "iframe" | "component";
+            kind: "iframe" | "component" | "webview";
             source: string;
+            partition?: string | undefined;
         }[] | undefined;
         command_palette?: {
             label: string;
@@ -1962,19 +2122,19 @@ export declare const PkgManifestSchema: z.ZodObject<{
         }>, "many">>;
         events: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
     }, "strip", z.ZodTypeAny, {
+        events: string[];
         routes: {
             path: string;
             method: "GET" | "POST";
             handler: string;
         }[];
-        events: string[];
     }, {
+        events?: string[] | undefined;
         routes?: {
             path: string;
             method: "GET" | "POST";
             handler: string;
         }[] | undefined;
-        events?: string[] | undefined;
     }>>;
     cron: z.ZodDefault<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
@@ -2052,14 +2212,23 @@ export declare const PkgManifestSchema: z.ZodObject<{
              *  own OS window). Defaults to `["webkit"]` so existing manifests are
              *  unchanged. Mirrors `engines` in `WebviewCapability` (manifest.rs). */
             engines: z.ZodDefault<z.ZodArray<z.ZodEnum<["webkit", "chrome"]>, "many">>;
+            /** Origins this pkg's webviews may load. **Absent is permissive** (with a
+             *  host-side warning) so pre-v4 manifests keep mounting; `[]` is an explicit
+             *  deny-all; entries match exactly, as `*`, or as a `https://*.example.com`
+             *  subdomain glob. Mirrors `allowed_origins` in `manifest.rs` — absent and
+             *  empty are deliberately distinct, so this must stay `.optional()`, never
+             *  `.default([])`. */
+            allowed_origins: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         }, "strip", z.ZodTypeAny, {
             child_webviews: boolean;
             partitions: string[];
             engines: ("webkit" | "chrome")[];
+            allowed_origins?: string[] | undefined;
         }, {
             child_webviews?: boolean | undefined;
             partitions?: string[] | undefined;
             engines?: ("webkit" | "chrome")[] | undefined;
+            allowed_origins?: string[] | undefined;
         }>>;
         agentOps: z.ZodOptional<z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>>;
         /** host.fetch proxy (ADR-017). Inert unless the pkg is trusted. */
@@ -2139,6 +2308,7 @@ export declare const PkgManifestSchema: z.ZodObject<{
             child_webviews: boolean;
             partitions: string[];
             engines: ("webkit" | "chrome")[];
+            allowed_origins?: string[] | undefined;
         } | undefined;
         agentOps?: {} | undefined;
         http?: {
@@ -2167,6 +2337,7 @@ export declare const PkgManifestSchema: z.ZodObject<{
             child_webviews?: boolean | undefined;
             partitions?: string[] | undefined;
             engines?: ("webkit" | "chrome")[] | undefined;
+            allowed_origins?: string[] | undefined;
         } | undefined;
         agentOps?: {} | undefined;
         http?: {
@@ -2375,6 +2546,8 @@ export declare const PkgManifestSchema: z.ZodObject<{
         'sqlite.tables': string[];
         'supabase.tables': string[];
         'vault.keys': string[];
+        notify: string[];
+        events: string[];
     };
     ikenga_api: string;
     targets: string[];
@@ -2395,8 +2568,9 @@ export declare const PkgManifestSchema: z.ZodObject<{
         }[];
         routes: {
             path: string;
-            kind: "iframe" | "component";
+            kind: "iframe" | "component" | "webview";
             source: string;
+            partition?: string | undefined;
         }[];
         command_palette: {
             label: string;
@@ -2409,6 +2583,9 @@ export declare const PkgManifestSchema: z.ZodObject<{
             id: string;
             route: string;
         }[];
+        session?: {
+            persistence: "keep" | "clear-on-exit" | "ask";
+        } | undefined;
         csp?: Record<string, string[]> | undefined;
         permissions?: Record<string, string[]> | undefined;
     };
@@ -2443,6 +2620,7 @@ export declare const PkgManifestSchema: z.ZodObject<{
             child_webviews: boolean;
             partitions: string[];
             engines: ("webkit" | "chrome")[];
+            allowed_origins?: string[] | undefined;
         } | undefined;
         agentOps?: {} | undefined;
         http?: {
@@ -2477,6 +2655,9 @@ export declare const PkgManifestSchema: z.ZodObject<{
         };
         display?: string | undefined;
     } | undefined;
+    auth_bridge?: {
+        strategy: "api-key" | "cdp" | "none";
+    } | undefined;
     migrations?: string | undefined;
     settings?: {
         schema: {
@@ -2489,12 +2670,12 @@ export declare const PkgManifestSchema: z.ZodObject<{
         }[];
     } | undefined;
     iyke?: {
+        events: string[];
         routes: {
             path: string;
             method: "GET" | "POST";
             handler: string;
         }[];
-        events: string[];
     } | undefined;
     window?: {
         label: string;
@@ -2557,6 +2738,7 @@ export declare const PkgManifestSchema: z.ZodObject<{
             child_webviews?: boolean | undefined;
             partitions?: string[] | undefined;
             engines?: ("webkit" | "chrome")[] | undefined;
+            allowed_origins?: string[] | undefined;
         } | undefined;
         agentOps?: {} | undefined;
         http?: {
@@ -2600,6 +2782,11 @@ export declare const PkgManifestSchema: z.ZodObject<{
         'sqlite.tables'?: string[] | undefined;
         'supabase.tables'?: string[] | undefined;
         'vault.keys'?: string[] | undefined;
+        notify?: string[] | undefined;
+        events?: string[] | undefined;
+    } | undefined;
+    auth_bridge?: {
+        strategy: "api-key" | "cdp" | "none";
     } | undefined;
     targets?: string[] | undefined;
     sidecars?: {
@@ -2621,6 +2808,9 @@ export declare const PkgManifestSchema: z.ZodObject<{
         }[] | undefined;
     } | undefined;
     ui?: {
+        session?: {
+            persistence: "keep" | "clear-on-exit" | "ask";
+        } | undefined;
         nav?: {
             label: string;
             id: string;
@@ -2630,8 +2820,9 @@ export declare const PkgManifestSchema: z.ZodObject<{
         }[] | undefined;
         routes?: {
             path: string;
-            kind: "iframe" | "component";
+            kind: "iframe" | "component" | "webview";
             source: string;
+            partition?: string | undefined;
         }[] | undefined;
         command_palette?: {
             label: string;
@@ -2648,12 +2839,12 @@ export declare const PkgManifestSchema: z.ZodObject<{
         permissions?: Record<string, string[]> | undefined;
     } | undefined;
     iyke?: {
+        events?: string[] | undefined;
         routes?: {
             path: string;
             method: "GET" | "POST";
             handler: string;
         }[] | undefined;
-        events?: string[] | undefined;
     } | undefined;
     window?: {
         label: string;