@ikenga/contract 0.9.1 → 0.11.0

package/dist/manifest.d.ts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-export declare const IKENGA_API_VERSION: 2;
+export declare const IKENGA_API_VERSION: 3;
 export declare const IKENGA_API_MIN_SUPPORTED: 1;
 export declare const AuthorSchema: z.ZodObject<{
     name: z.ZodString;
@@ -438,12 +438,19 @@ export declare const WebviewCapabilitySchema: z.ZodObject<{
     child_webviews: z.ZodDefault<z.ZodBoolean>;
     /** Named cookie/data partitions; empty = the implicit "default" partition. */
     partitions: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Browser engines this pkg may open panes with. `"webkit"` is the in-shell
+     *  child-webview; `"chrome"` is Managed mode (installed Chrome over CDP, its
+     *  own OS window). Defaults to `["webkit"]` so existing manifests are
+     *  unchanged. Mirrors `engines` in `WebviewCapability` (manifest.rs). */
+    engines: z.ZodDefault<z.ZodArray<z.ZodEnum<["webkit", "chrome"]>, "many">>;
 }, "strip", z.ZodTypeAny, {
     child_webviews: boolean;
     partitions: string[];
+    engines: ("webkit" | "chrome")[];
 }, {
     child_webviews?: boolean | undefined;
     partitions?: string[] | undefined;
+    engines?: ("webkit" | "chrome")[] | undefined;
 }>;
 export type WebviewCapability = z.infer<typeof WebviewCapabilitySchema>;
 /** Agent-ops host-bridge capability (api ≥ 2). Opt-in to the privileged
@@ -455,6 +462,105 @@ export type WebviewCapability = z.infer<typeof WebviewCapabilitySchema>;
  *  `AgentOpsCapability` in `shell/src-tauri/src/pkg/manifest.rs`. */
 export declare const AgentOpsCapabilitySchema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
 export type AgentOpsCapability = z.infer<typeof AgentOpsCapabilitySchema>;
+/** host.fetch capability (ADR-017, TRUSTED-only). Host-mediated HTTP proxy;
+ *  the shell makes the request and attaches auth from Stronghold — the key
+ *  never enters the iframe. URL allowlist = `permissions.net`. Mirrors
+ *  `HttpCapability` in `shell/src-tauri/src/pkg/manifest.rs`. */
+export declare const HttpCapabilitySchema: z.ZodObject<{
+    /** Name of a `capabilities.secrets` declaration whose resolved value the
+     *  shell attaches as the auth header. Omit = unauthenticated proxy. */
+    auth_secret: z.ZodOptional<z.ZodString>;
+    /** Header name for the auth secret. Default "Authorization". */
+    auth_header: z.ZodDefault<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    auth_header: string;
+    auth_secret?: string | undefined;
+}, {
+    auth_secret?: string | undefined;
+    auth_header?: string | undefined;
+}>;
+export type HttpCapability = z.infer<typeof HttpCapabilitySchema>;
+/** One named-secret declaration. `vault_key` is resolved host-side and never
+ *  reaches the iframe; the iframe sees only `hostContext.secrets[name]`.
+ *  Mirrors `NamedSecret` in `shell/src-tauri/src/pkg/manifest.rs`. */
+export declare const NamedSecretSchema: z.ZodObject<{
+    name: z.ZodString;
+    /** Vault key (must be within permissions["vault.keys"]). Host-only. */
+    vault_key: z.ZodString;
+    /** When true, mount fails if the key is missing (Supabase `required`). */
+    required: z.ZodDefault<z.ZodBoolean>;
+    /** Optional value-format hint: "jwt" | "bearer" | "raw". String, not enum. */
+    format: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    name: string;
+    required: boolean;
+    vault_key: string;
+    format?: string | undefined;
+}, {
+    name: string;
+    vault_key: string;
+    format?: string | undefined;
+    required?: boolean | undefined;
+}>;
+export type NamedSecret = z.infer<typeof NamedSecretSchema>;
+/** Named-secret injection capability (ADR-017, TRUSTED-only). Generalizes the
+ *  Supabase hostContext handshake. Mirrors `SecretsCapability` in
+ *  `shell/src-tauri/src/pkg/manifest.rs`. */
+export declare const SecretsCapabilitySchema: z.ZodObject<{
+    declarations: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        /** Vault key (must be within permissions["vault.keys"]). Host-only. */
+        vault_key: z.ZodString;
+        /** When true, mount fails if the key is missing (Supabase `required`). */
+        required: z.ZodDefault<z.ZodBoolean>;
+        /** Optional value-format hint: "jwt" | "bearer" | "raw". String, not enum. */
+        format: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        name: string;
+        required: boolean;
+        vault_key: string;
+        format?: string | undefined;
+    }, {
+        name: string;
+        vault_key: string;
+        format?: string | undefined;
+        required?: boolean | undefined;
+    }>, "many">>;
+}, "strict", z.ZodTypeAny, {
+    declarations: {
+        name: string;
+        required: boolean;
+        vault_key: string;
+        format?: string | undefined;
+    }[];
+}, {
+    declarations?: {
+        name: string;
+        vault_key: string;
+        format?: string | undefined;
+        required?: boolean | undefined;
+    }[] | undefined;
+}>;
+export type SecretsCapability = z.infer<typeof SecretsCapabilitySchema>;
+/** Scoped Tauri invoke passthrough (ADR-017, TRUSTED-only). Presence gates
+ *  `host.invoke`; `commands` is the named-command allowlist matched (glob) by
+ *  `permissions_check::check_shell_execute` against the `host.invoke` command.
+ *
+ *  D-06: the allowlist is `invoke`'s OWN field, NOT `permissions["shell.execute"]`.
+ *  Reusing `shell.execute` would trip `requires_trust` → the pkg only ever reaches
+ *  user-`Granted`, never `AutoTrusted`, so `is_trusted_for_elevated()` is false and
+ *  `host.invoke` would always deny. Keeping the allowlist here lets a signed/builtin
+ *  pkg declare invokable commands while leaving `shell.execute` empty → AutoTrusted →
+ *  elevated. POLICY: named commands only, never `*` (not a general shell).
+ *  Mirrors `InvokeCapability` in `shell/src-tauri/src/pkg/manifest.rs`. */
+export declare const InvokeCapabilitySchema: z.ZodObject<{
+    commands: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+}, "strict", z.ZodTypeAny, {
+    commands: string[];
+}, {
+    commands?: string[] | undefined;
+}>;
+export type InvokeCapability = z.infer<typeof InvokeCapabilitySchema>;
 export declare const WindowBlockSchema: z.ZodObject<{
     label: z.ZodString;
     url: z.ZodString;
@@ -908,14 +1014,79 @@ export declare const ManifestSchema: z.ZodObject<{
             child_webviews: z.ZodDefault<z.ZodBoolean>;
             /** Named cookie/data partitions; empty = the implicit "default" partition. */
             partitions: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            /** Browser engines this pkg may open panes with. `"webkit"` is the in-shell
+             *  child-webview; `"chrome"` is Managed mode (installed Chrome over CDP, its
+             *  own OS window). Defaults to `["webkit"]` so existing manifests are
+             *  unchanged. Mirrors `engines` in `WebviewCapability` (manifest.rs). */
+            engines: z.ZodDefault<z.ZodArray<z.ZodEnum<["webkit", "chrome"]>, "many">>;
         }, "strip", z.ZodTypeAny, {
             child_webviews: boolean;
             partitions: string[];
+            engines: ("webkit" | "chrome")[];
         }, {
             child_webviews?: boolean | undefined;
             partitions?: string[] | undefined;
+            engines?: ("webkit" | "chrome")[] | undefined;
         }>>;
         agentOps: z.ZodOptional<z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>>;
+        /** host.fetch proxy (ADR-017). Inert unless the pkg is trusted. */
+        http: z.ZodOptional<z.ZodObject<{
+            /** Name of a `capabilities.secrets` declaration whose resolved value the
+             *  shell attaches as the auth header. Omit = unauthenticated proxy. */
+            auth_secret: z.ZodOptional<z.ZodString>;
+            /** Header name for the auth secret. Default "Authorization". */
+            auth_header: z.ZodDefault<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            auth_header: string;
+            auth_secret?: string | undefined;
+        }, {
+            auth_secret?: string | undefined;
+            auth_header?: string | undefined;
+        }>>;
+        /** Named-secret injection (ADR-017). Inert unless trusted. */
+        secrets: z.ZodOptional<z.ZodObject<{
+            declarations: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                /** Vault key (must be within permissions["vault.keys"]). Host-only. */
+                vault_key: z.ZodString;
+                /** When true, mount fails if the key is missing (Supabase `required`). */
+                required: z.ZodDefault<z.ZodBoolean>;
+                /** Optional value-format hint: "jwt" | "bearer" | "raw". String, not enum. */
+                format: z.ZodOptional<z.ZodString>;
+            }, "strict", z.ZodTypeAny, {
+                name: string;
+                required: boolean;
+                vault_key: string;
+                format?: string | undefined;
+            }, {
+                name: string;
+                vault_key: string;
+                format?: string | undefined;
+                required?: boolean | undefined;
+            }>, "many">>;
+        }, "strict", z.ZodTypeAny, {
+            declarations: {
+                name: string;
+                required: boolean;
+                vault_key: string;
+                format?: string | undefined;
+            }[];
+        }, {
+            declarations?: {
+                name: string;
+                vault_key: string;
+                format?: string | undefined;
+                required?: boolean | undefined;
+            }[] | undefined;
+        }>>;
+        /** host.invoke passthrough (ADR-017). Inert unless trusted. */
+        invoke: z.ZodOptional<z.ZodObject<{
+            commands: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        }, "strict", z.ZodTypeAny, {
+            commands: string[];
+        }, {
+            commands?: string[] | undefined;
+        }>>;
     }, "strip", z.ZodTypeAny, {
         supabase?: {
             required: boolean;
@@ -926,8 +1097,24 @@ export declare const ManifestSchema: z.ZodObject<{
         webview?: {
             child_webviews: boolean;
             partitions: string[];
+            engines: ("webkit" | "chrome")[];
         } | undefined;
         agentOps?: {} | undefined;
+        http?: {
+            auth_header: string;
+            auth_secret?: string | undefined;
+        } | undefined;
+        secrets?: {
+            declarations: {
+                name: string;
+                required: boolean;
+                vault_key: string;
+                format?: string | undefined;
+            }[];
+        } | undefined;
+        invoke?: {
+            commands: string[];
+        } | undefined;
     }, {
         supabase?: {
             required?: boolean | undefined;
@@ -938,8 +1125,24 @@ export declare const ManifestSchema: z.ZodObject<{
         webview?: {
             child_webviews?: boolean | undefined;
             partitions?: string[] | undefined;
+            engines?: ("webkit" | "chrome")[] | undefined;
         } | undefined;
         agentOps?: {} | undefined;
+        http?: {
+            auth_secret?: string | undefined;
+            auth_header?: string | undefined;
+        } | undefined;
+        secrets?: {
+            declarations?: {
+                name: string;
+                vault_key: string;
+                format?: string | undefined;
+                required?: boolean | undefined;
+            }[] | undefined;
+        } | undefined;
+        invoke?: {
+            commands?: string[] | undefined;
+        } | undefined;
     }>>;
     /**
      * Engine-adapter manifest block. Present iff this pkg is an engine-*
@@ -1099,6 +1302,12 @@ export declare const ManifestSchema: z.ZodObject<{
         ref?: string | undefined;
         source?: "git" | "npx" | "catalog" | "local" | undefined;
     }>, "many">>;
+    /** Optional ed25519 signature over the normalized manifest JSON (sort keys,
+     *  strip `signature` before signing). Format `"ed25519:<base64>"`. Present
+     *  on notarized registry pkgs; verified at install against the publisher key
+     *  the signed registry index named. Absent → pkg isn't trusted (no elevated
+     *  caps). Mirrors `signature: Option<String>` on the Rust `Manifest`. */
+    signature: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     mcp: {
         args: string[];
@@ -1190,8 +1399,48 @@ export declare const ManifestSchema: z.ZodObject<{
         webview?: {
             child_webviews: boolean;
             partitions: string[];
+            engines: ("webkit" | "chrome")[];
         } | undefined;
         agentOps?: {} | undefined;
+        http?: {
+            auth_header: string;
+            auth_secret?: string | undefined;
+        } | undefined;
+        secrets?: {
+            declarations: {
+                name: string;
+                required: boolean;
+                vault_key: string;
+                format?: string | undefined;
+            }[];
+        } | undefined;
+        invoke?: {
+            commands: string[];
+        } | undefined;
+    } | undefined;
+    engine?: {
+        capabilities: {
+            mcp: boolean;
+            streaming: boolean;
+            toolUse: boolean;
+            thinking: boolean;
+            artifacts: boolean;
+            fileAttachments: boolean;
+            imageInput: boolean;
+            slashCommands: boolean;
+            modelSwitching: boolean;
+            promptCaching: boolean;
+            agenticTools: boolean;
+            sessionResume: boolean;
+        };
+        agentId: string;
+        onboarding: {
+            requiredVaultKeys: string[];
+            requiredEnvVars: string[];
+            authCommand?: string | undefined;
+            docsUrl?: string | undefined;
+        };
+        display?: string | undefined;
     } | undefined;
     kind?: string | undefined;
     migrations?: string | undefined;
@@ -1219,30 +1468,7 @@ export declare const ManifestSchema: z.ZodObject<{
         decorations?: boolean | undefined;
         menu?: string | undefined;
     } | undefined;
-    engine?: {
-        capabilities: {
-            mcp: boolean;
-            streaming: boolean;
-            toolUse: boolean;
-            thinking: boolean;
-            artifacts: boolean;
-            fileAttachments: boolean;
-            imageInput: boolean;
-            slashCommands: boolean;
-            modelSwitching: boolean;
-            promptCaching: boolean;
-            agenticTools: boolean;
-            sessionResume: boolean;
-        };
-        agentId: string;
-        onboarding: {
-            requiredVaultKeys: string[];
-            requiredEnvVars: string[];
-            authCommand?: string | undefined;
-            docsUrl?: string | undefined;
-        };
-        display?: string | undefined;
-    } | undefined;
+    signature?: string | undefined;
 }, {
     id: string;
     name: string;
@@ -1280,8 +1506,48 @@ export declare const ManifestSchema: z.ZodObject<{
         webview?: {
             child_webviews?: boolean | undefined;
             partitions?: string[] | undefined;
+            engines?: ("webkit" | "chrome")[] | undefined;
         } | undefined;
         agentOps?: {} | undefined;
+        http?: {
+            auth_secret?: string | undefined;
+            auth_header?: string | undefined;
+        } | undefined;
+        secrets?: {
+            declarations?: {
+                name: string;
+                vault_key: string;
+                format?: string | undefined;
+                required?: boolean | undefined;
+            }[] | undefined;
+        } | undefined;
+        invoke?: {
+            commands?: string[] | undefined;
+        } | undefined;
+    } | undefined;
+    engine?: {
+        capabilities: {
+            mcp: boolean;
+            streaming: boolean;
+            toolUse: boolean;
+            thinking: boolean;
+            artifacts: boolean;
+            fileAttachments: boolean;
+            imageInput: boolean;
+            slashCommands: boolean;
+            modelSwitching: boolean;
+            promptCaching: boolean;
+            agenticTools: boolean;
+            sessionResume: boolean;
+        };
+        agentId: string;
+        display?: string | undefined;
+        onboarding?: {
+            requiredVaultKeys?: string[] | undefined;
+            requiredEnvVars?: string[] | undefined;
+            authCommand?: string | undefined;
+            docsUrl?: string | undefined;
+        } | undefined;
     } | undefined;
     kind?: string | undefined;
     permissions?: {
@@ -1359,34 +1625,11 @@ export declare const ManifestSchema: z.ZodObject<{
         decorations?: boolean | undefined;
         menu?: string | undefined;
     } | undefined;
-    engine?: {
-        capabilities: {
-            mcp: boolean;
-            streaming: boolean;
-            toolUse: boolean;
-            thinking: boolean;
-            artifacts: boolean;
-            fileAttachments: boolean;
-            imageInput: boolean;
-            slashCommands: boolean;
-            modelSwitching: boolean;
-            promptCaching: boolean;
-            agenticTools: boolean;
-            sessionResume: boolean;
-        };
-        agentId: string;
-        display?: string | undefined;
-        onboarding?: {
-            requiredVaultKeys?: string[] | undefined;
-            requiredEnvVars?: string[] | undefined;
-            authCommand?: string | undefined;
-            docsUrl?: string | undefined;
-        } | undefined;
-    } | undefined;
     screenshots?: {
         path: string;
         caption?: string | undefined;
     }[] | undefined;
+    signature?: string | undefined;
 }>;
 export type Manifest = z.infer<typeof ManifestSchema>;
 /** Alias retained for symmetry with the Rust side / external consumers. */
@@ -1761,14 +2004,79 @@ export declare const PkgManifestSchema: z.ZodObject<{
             child_webviews: z.ZodDefault<z.ZodBoolean>;
             /** Named cookie/data partitions; empty = the implicit "default" partition. */
             partitions: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            /** Browser engines this pkg may open panes with. `"webkit"` is the in-shell
+             *  child-webview; `"chrome"` is Managed mode (installed Chrome over CDP, its
+             *  own OS window). Defaults to `["webkit"]` so existing manifests are
+             *  unchanged. Mirrors `engines` in `WebviewCapability` (manifest.rs). */
+            engines: z.ZodDefault<z.ZodArray<z.ZodEnum<["webkit", "chrome"]>, "many">>;
         }, "strip", z.ZodTypeAny, {
             child_webviews: boolean;
             partitions: string[];
+            engines: ("webkit" | "chrome")[];
         }, {
             child_webviews?: boolean | undefined;
             partitions?: string[] | undefined;
+            engines?: ("webkit" | "chrome")[] | undefined;
         }>>;
         agentOps: z.ZodOptional<z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>>;
+        /** host.fetch proxy (ADR-017). Inert unless the pkg is trusted. */
+        http: z.ZodOptional<z.ZodObject<{
+            /** Name of a `capabilities.secrets` declaration whose resolved value the
+             *  shell attaches as the auth header. Omit = unauthenticated proxy. */
+            auth_secret: z.ZodOptional<z.ZodString>;
+            /** Header name for the auth secret. Default "Authorization". */
+            auth_header: z.ZodDefault<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            auth_header: string;
+            auth_secret?: string | undefined;
+        }, {
+            auth_secret?: string | undefined;
+            auth_header?: string | undefined;
+        }>>;
+        /** Named-secret injection (ADR-017). Inert unless trusted. */
+        secrets: z.ZodOptional<z.ZodObject<{
+            declarations: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                /** Vault key (must be within permissions["vault.keys"]). Host-only. */
+                vault_key: z.ZodString;
+                /** When true, mount fails if the key is missing (Supabase `required`). */
+                required: z.ZodDefault<z.ZodBoolean>;
+                /** Optional value-format hint: "jwt" | "bearer" | "raw". String, not enum. */
+                format: z.ZodOptional<z.ZodString>;
+            }, "strict", z.ZodTypeAny, {
+                name: string;
+                required: boolean;
+                vault_key: string;
+                format?: string | undefined;
+            }, {
+                name: string;
+                vault_key: string;
+                format?: string | undefined;
+                required?: boolean | undefined;
+            }>, "many">>;
+        }, "strict", z.ZodTypeAny, {
+            declarations: {
+                name: string;
+                required: boolean;
+                vault_key: string;
+                format?: string | undefined;
+            }[];
+        }, {
+            declarations?: {
+                name: string;
+                vault_key: string;
+                format?: string | undefined;
+                required?: boolean | undefined;
+            }[] | undefined;
+        }>>;
+        /** host.invoke passthrough (ADR-017). Inert unless trusted. */
+        invoke: z.ZodOptional<z.ZodObject<{
+            commands: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        }, "strict", z.ZodTypeAny, {
+            commands: string[];
+        }, {
+            commands?: string[] | undefined;
+        }>>;
     }, "strip", z.ZodTypeAny, {
         supabase?: {
             required: boolean;
@@ -1779,8 +2087,24 @@ export declare const PkgManifestSchema: z.ZodObject<{
         webview?: {
             child_webviews: boolean;
             partitions: string[];
+            engines: ("webkit" | "chrome")[];
         } | undefined;
         agentOps?: {} | undefined;
+        http?: {
+            auth_header: string;
+            auth_secret?: string | undefined;
+        } | undefined;
+        secrets?: {
+            declarations: {
+                name: string;
+                required: boolean;
+                vault_key: string;
+                format?: string | undefined;
+            }[];
+        } | undefined;
+        invoke?: {
+            commands: string[];
+        } | undefined;
     }, {
         supabase?: {
             required?: boolean | undefined;
@@ -1791,8 +2115,24 @@ export declare const PkgManifestSchema: z.ZodObject<{
         webview?: {
             child_webviews?: boolean | undefined;
             partitions?: string[] | undefined;
+            engines?: ("webkit" | "chrome")[] | undefined;
         } | undefined;
         agentOps?: {} | undefined;
+        http?: {
+            auth_secret?: string | undefined;
+            auth_header?: string | undefined;
+        } | undefined;
+        secrets?: {
+            declarations?: {
+                name: string;
+                vault_key: string;
+                format?: string | undefined;
+                required?: boolean | undefined;
+            }[] | undefined;
+        } | undefined;
+        invoke?: {
+            commands?: string[] | undefined;
+        } | undefined;
     }>>;
     /**
      * Engine-adapter manifest block. Present iff this pkg is an engine-*
@@ -1952,6 +2292,12 @@ export declare const PkgManifestSchema: z.ZodObject<{
         ref?: string | undefined;
         source?: "git" | "npx" | "catalog" | "local" | undefined;
     }>, "many">>;
+    /** Optional ed25519 signature over the normalized manifest JSON (sort keys,
+     *  strip `signature` before signing). Format `"ed25519:<base64>"`. Present
+     *  on notarized registry pkgs; verified at install against the publisher key
+     *  the signed registry index named. Absent → pkg isn't trusted (no elevated
+     *  caps). Mirrors `signature: Option<String>` on the Rust `Manifest`. */
+    signature: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     mcp: {
         args: string[];
@@ -2043,8 +2389,48 @@ export declare const PkgManifestSchema: z.ZodObject<{
         webview?: {
             child_webviews: boolean;
             partitions: string[];
+            engines: ("webkit" | "chrome")[];
         } | undefined;
         agentOps?: {} | undefined;
+        http?: {
+            auth_header: string;
+            auth_secret?: string | undefined;
+        } | undefined;
+        secrets?: {
+            declarations: {
+                name: string;
+                required: boolean;
+                vault_key: string;
+                format?: string | undefined;
+            }[];
+        } | undefined;
+        invoke?: {
+            commands: string[];
+        } | undefined;
+    } | undefined;
+    engine?: {
+        capabilities: {
+            mcp: boolean;
+            streaming: boolean;
+            toolUse: boolean;
+            thinking: boolean;
+            artifacts: boolean;
+            fileAttachments: boolean;
+            imageInput: boolean;
+            slashCommands: boolean;
+            modelSwitching: boolean;
+            promptCaching: boolean;
+            agenticTools: boolean;
+            sessionResume: boolean;
+        };
+        agentId: string;
+        onboarding: {
+            requiredVaultKeys: string[];
+            requiredEnvVars: string[];
+            authCommand?: string | undefined;
+            docsUrl?: string | undefined;
+        };
+        display?: string | undefined;
     } | undefined;
     kind?: string | undefined;
     migrations?: string | undefined;
@@ -2072,30 +2458,7 @@ export declare const PkgManifestSchema: z.ZodObject<{
         decorations?: boolean | undefined;
         menu?: string | undefined;
     } | undefined;
-    engine?: {
-        capabilities: {
-            mcp: boolean;
-            streaming: boolean;
-            toolUse: boolean;
-            thinking: boolean;
-            artifacts: boolean;
-            fileAttachments: boolean;
-            imageInput: boolean;
-            slashCommands: boolean;
-            modelSwitching: boolean;
-            promptCaching: boolean;
-            agenticTools: boolean;
-            sessionResume: boolean;
-        };
-        agentId: string;
-        onboarding: {
-            requiredVaultKeys: string[];
-            requiredEnvVars: string[];
-            authCommand?: string | undefined;
-            docsUrl?: string | undefined;
-        };
-        display?: string | undefined;
-    } | undefined;
+    signature?: string | undefined;
 }, {
     id: string;
     name: string;
@@ -2133,8 +2496,48 @@ export declare const PkgManifestSchema: z.ZodObject<{
         webview?: {
             child_webviews?: boolean | undefined;
             partitions?: string[] | undefined;
+            engines?: ("webkit" | "chrome")[] | undefined;
         } | undefined;
         agentOps?: {} | undefined;
+        http?: {
+            auth_secret?: string | undefined;
+            auth_header?: string | undefined;
+        } | undefined;
+        secrets?: {
+            declarations?: {
+                name: string;
+                vault_key: string;
+                format?: string | undefined;
+                required?: boolean | undefined;
+            }[] | undefined;
+        } | undefined;
+        invoke?: {
+            commands?: string[] | undefined;
+        } | undefined;
+    } | undefined;
+    engine?: {
+        capabilities: {
+            mcp: boolean;
+            streaming: boolean;
+            toolUse: boolean;
+            thinking: boolean;
+            artifacts: boolean;
+            fileAttachments: boolean;
+            imageInput: boolean;
+            slashCommands: boolean;
+            modelSwitching: boolean;
+            promptCaching: boolean;
+            agenticTools: boolean;
+            sessionResume: boolean;
+        };
+        agentId: string;
+        display?: string | undefined;
+        onboarding?: {
+            requiredVaultKeys?: string[] | undefined;
+            requiredEnvVars?: string[] | undefined;
+            authCommand?: string | undefined;
+            docsUrl?: string | undefined;
+        } | undefined;
     } | undefined;
     kind?: string | undefined;
     permissions?: {
@@ -2212,34 +2615,11 @@ export declare const PkgManifestSchema: z.ZodObject<{
         decorations?: boolean | undefined;
         menu?: string | undefined;
     } | undefined;
-    engine?: {
-        capabilities: {
-            mcp: boolean;
-            streaming: boolean;
-            toolUse: boolean;
-            thinking: boolean;
-            artifacts: boolean;
-            fileAttachments: boolean;
-            imageInput: boolean;
-            slashCommands: boolean;
-            modelSwitching: boolean;
-            promptCaching: boolean;
-            agenticTools: boolean;
-            sessionResume: boolean;
-        };
-        agentId: string;
-        display?: string | undefined;
-        onboarding?: {
-            requiredVaultKeys?: string[] | undefined;
-            requiredEnvVars?: string[] | undefined;
-            authCommand?: string | undefined;
-            docsUrl?: string | undefined;
-        } | undefined;
-    } | undefined;
     screenshots?: {
         path: string;
         caption?: string | undefined;
     }[] | undefined;
+    signature?: string | undefined;
 }>;
 export type PkgManifest = Manifest;
 /** Convert a reverse-DNS id to a slug: `com.ikenga.studio` → `com-ikenga-studio`. */