@kybernesis/kyberagent-extension-sdk 0.1.0-alpha

package/dist/index-M4tx9uKW.d.ts

@@ -0,0 +1,666 @@
+import { Schema } from 'effect';
+
+declare const ProviderRuntimeProjectionDescriptor: Schema.Struct<{
+    target: Schema.Literal<["direct-api", "codex-app-server", "claude-agent-sdk", "pi-agent-core"]>;
+    surface: Schema.Literal<["tool-schema", "dynamic-tool", "mcp-server", "skill-context", "host-surface"]>;
+    runtimeSourceId: Schema.optional<typeof Schema.String>;
+    namespace: Schema.optional<typeof Schema.String>;
+    toolIds: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    alwaysLoad: Schema.optional<typeof Schema.Boolean>;
+    notes: Schema.optional<Schema.Array$<typeof Schema.String>>;
+}>;
+type ProviderRuntimeProjectionDescriptor = Schema.Schema.Type<typeof ProviderRuntimeProjectionDescriptor>;
+
+declare const KernelPrincipalKind: Schema.Literal<["daemon", "host", "plugin", "skill", "sidecar", "bridge", "user"]>;
+type KernelPrincipalKind = Schema.Schema.Type<typeof KernelPrincipalKind>;
+declare const KernelPermissionId: Schema.Literal<["kernel.registry.read", "plugin.lifecycle.manage", "host.capabilities.read", "surface.render", "composer.capabilities.read", "composer.capabilities.invoke", "sidecars.launch", "threads.read", "threads.write", "settings.read", "settings.write", "artifacts.read", "artifacts.write", "screenshots.capture", "brain.read", "host.context.read", "host.command.invoke", "host.log.write"]>;
+type KernelPermissionId = Schema.Schema.Type<typeof KernelPermissionId>;
+declare const ExtensionHostSlot: Schema.Literal<["nav.sidebar", "workspace.surface", "settings.extensions", "chat.visual", "thread.tab.contextMenu", "companion.overlay", "background.sidecar"]>;
+type ExtensionHostSlot = Schema.Schema.Type<typeof ExtensionHostSlot>;
+declare const WorkspaceTabContributionMetadata: Schema.Struct<{
+    defaultVisible: Schema.optional<typeof Schema.Boolean>;
+    defaultLabel: Schema.optional<typeof Schema.String>;
+    allowRename: Schema.optional<typeof Schema.Boolean>;
+}>;
+type WorkspaceTabContributionMetadata = Schema.Schema.Type<typeof WorkspaceTabContributionMetadata>;
+declare const PluginManifestContribution: Schema.Struct<{
+    contributionId: typeof Schema.String;
+    kind: Schema.Literal<["skillTemplate", "composerCapability", "surface", "settingsPanel", "sidecar", "bridge", "providerAdapter", "contextualAction", "dataEndpoint"]>;
+    displayName: typeof Schema.String;
+    requiredHostCapabilities: Schema.Array$<Schema.Literal<["host.windows", "host.tray", "host.notifications", "host.embeddedViews", "host.filePicker", "host.localShell", "host.secretPrompt", "host.visualSelection", "host.localFilesystem", "host.terminal", "host.globalInput", "host.contextMenus", "host.accessibility"]>>;
+    requiredKernelPermissions: Schema.optional<Schema.Array$<Schema.Literal<["kernel.registry.read", "plugin.lifecycle.manage", "host.capabilities.read", "surface.render", "composer.capabilities.read", "composer.capabilities.invoke", "sidecars.launch", "threads.read", "threads.write", "settings.read", "settings.write", "artifacts.read", "artifacts.write", "screenshots.capture", "brain.read", "host.context.read", "host.command.invoke", "host.log.write"]>>>;
+    routeSegment: Schema.optional<typeof Schema.String>;
+    mount: Schema.optional<typeof Schema.String>;
+    presentationClass: Schema.optional<typeof Schema.String>;
+    hostSlots: Schema.optional<Schema.Array$<Schema.Literal<["nav.sidebar", "workspace.surface", "settings.extensions", "chat.visual", "thread.tab.contextMenu", "companion.overlay", "background.sidecar"]>>>;
+    workspaceTab: Schema.optional<Schema.Struct<{
+        defaultVisible: Schema.optional<typeof Schema.Boolean>;
+        defaultLabel: Schema.optional<typeof Schema.String>;
+        allowRename: Schema.optional<typeof Schema.Boolean>;
+    }>>;
+}>;
+type PluginManifestContribution = Schema.Schema.Type<typeof PluginManifestContribution>;
+declare const PluginThemeTokenSet: Schema.Struct<{
+    themeId: typeof Schema.String;
+    label: typeof Schema.String;
+    description: Schema.optional<typeof Schema.String>;
+    modes: Schema.Array$<Schema.Literal<["light", "dark"]>>;
+    tokens: Schema.Record$<Schema.Literal<["light", "dark"]>, Schema.Record$<typeof Schema.String, typeof Schema.String>>;
+}>;
+type PluginThemeTokenSet = Schema.Schema.Type<typeof PluginThemeTokenSet>;
+declare const PluginShipsState: Schema.Literal<["active", "inactive"]>;
+type PluginShipsState = Schema.Schema.Type<typeof PluginShipsState>;
+declare const KernelPluginRegistryEntry: Schema.Struct<{
+    manifest: Schema.Struct<{
+        pluginId: typeof Schema.String;
+        displayName: typeof Schema.String;
+        version: typeof Schema.String;
+        source: Schema.Literal<["bundled", "workspace", "user", "remote"]>;
+        manifestPath: Schema.optional<typeof Schema.String>;
+        contributions: Schema.Array$<Schema.Struct<{
+            contributionId: typeof Schema.String;
+            kind: Schema.Literal<["skillTemplate", "composerCapability", "surface", "settingsPanel", "sidecar", "bridge", "providerAdapter", "contextualAction", "dataEndpoint"]>;
+            displayName: typeof Schema.String;
+            requiredHostCapabilities: Schema.Array$<Schema.Literal<["host.windows", "host.tray", "host.notifications", "host.embeddedViews", "host.filePicker", "host.localShell", "host.secretPrompt", "host.visualSelection", "host.localFilesystem", "host.terminal", "host.globalInput", "host.contextMenus", "host.accessibility"]>>;
+            requiredKernelPermissions: Schema.optional<Schema.Array$<Schema.Literal<["kernel.registry.read", "plugin.lifecycle.manage", "host.capabilities.read", "surface.render", "composer.capabilities.read", "composer.capabilities.invoke", "sidecars.launch", "threads.read", "threads.write", "settings.read", "settings.write", "artifacts.read", "artifacts.write", "screenshots.capture", "brain.read", "host.context.read", "host.command.invoke", "host.log.write"]>>>;
+            routeSegment: Schema.optional<typeof Schema.String>;
+            mount: Schema.optional<typeof Schema.String>;
+            presentationClass: Schema.optional<typeof Schema.String>;
+            hostSlots: Schema.optional<Schema.Array$<Schema.Literal<["nav.sidebar", "workspace.surface", "settings.extensions", "chat.visual", "thread.tab.contextMenu", "companion.overlay", "background.sidecar"]>>>;
+            workspaceTab: Schema.optional<Schema.Struct<{
+                defaultVisible: Schema.optional<typeof Schema.Boolean>;
+                defaultLabel: Schema.optional<typeof Schema.String>;
+                allowRename: Schema.optional<typeof Schema.Boolean>;
+            }>>;
+        }>>;
+        themeTokens: Schema.optional<Schema.Array$<Schema.Struct<{
+            themeId: typeof Schema.String;
+            label: typeof Schema.String;
+            description: Schema.optional<typeof Schema.String>;
+            modes: Schema.Array$<Schema.Literal<["light", "dark"]>>;
+            tokens: Schema.Record$<Schema.Literal<["light", "dark"]>, Schema.Record$<typeof Schema.String, typeof Schema.String>>;
+        }>>>;
+        ships: Schema.optional<Schema.Literal<["active", "inactive"]>>;
+    }>;
+    enablement: Schema.Literal<["enabled", "disabled"]>;
+    runtimeState: Schema.Literal<["inactive", "active", "blocked", "error"]>;
+    grantedPermissions: Schema.Array$<Schema.Literal<["kernel.registry.read", "plugin.lifecycle.manage", "host.capabilities.read", "surface.render", "composer.capabilities.read", "composer.capabilities.invoke", "sidecars.launch", "threads.read", "threads.write", "settings.read", "settings.write", "artifacts.read", "artifacts.write", "screenshots.capture", "brain.read", "host.context.read", "host.command.invoke", "host.log.write"]>>;
+    deniedPermissions: Schema.Array$<Schema.Literal<["kernel.registry.read", "plugin.lifecycle.manage", "host.capabilities.read", "surface.render", "composer.capabilities.read", "composer.capabilities.invoke", "sidecars.launch", "threads.read", "threads.write", "settings.read", "settings.write", "artifacts.read", "artifacts.write", "screenshots.capture", "brain.read", "host.context.read", "host.command.invoke", "host.log.write"]>>;
+}>;
+type KernelPluginRegistryEntry = Schema.Schema.Type<typeof KernelPluginRegistryEntry>;
+declare const KernelRegistrySnapshot: Schema.Struct<{
+    generatedAtMs: Schema.refine<number, typeof Schema.NonNegative>;
+    owner: Schema.Literal<["daemon/kernel"]>;
+    plugins: Schema.Array$<Schema.Struct<{
+        manifest: Schema.Struct<{
+            pluginId: typeof Schema.String;
+            displayName: typeof Schema.String;
+            version: typeof Schema.String;
+            source: Schema.Literal<["bundled", "workspace", "user", "remote"]>;
+            manifestPath: Schema.optional<typeof Schema.String>;
+            contributions: Schema.Array$<Schema.Struct<{
+                contributionId: typeof Schema.String;
+                kind: Schema.Literal<["skillTemplate", "composerCapability", "surface", "settingsPanel", "sidecar", "bridge", "providerAdapter", "contextualAction", "dataEndpoint"]>;
+                displayName: typeof Schema.String;
+                requiredHostCapabilities: Schema.Array$<Schema.Literal<["host.windows", "host.tray", "host.notifications", "host.embeddedViews", "host.filePicker", "host.localShell", "host.secretPrompt", "host.visualSelection", "host.localFilesystem", "host.terminal", "host.globalInput", "host.contextMenus", "host.accessibility"]>>;
+                requiredKernelPermissions: Schema.optional<Schema.Array$<Schema.Literal<["kernel.registry.read", "plugin.lifecycle.manage", "host.capabilities.read", "surface.render", "composer.capabilities.read", "composer.capabilities.invoke", "sidecars.launch", "threads.read", "threads.write", "settings.read", "settings.write", "artifacts.read", "artifacts.write", "screenshots.capture", "brain.read", "host.context.read", "host.command.invoke", "host.log.write"]>>>;
+                routeSegment: Schema.optional<typeof Schema.String>;
+                mount: Schema.optional<typeof Schema.String>;
+                presentationClass: Schema.optional<typeof Schema.String>;
+                hostSlots: Schema.optional<Schema.Array$<Schema.Literal<["nav.sidebar", "workspace.surface", "settings.extensions", "chat.visual", "thread.tab.contextMenu", "companion.overlay", "background.sidecar"]>>>;
+                workspaceTab: Schema.optional<Schema.Struct<{
+                    defaultVisible: Schema.optional<typeof Schema.Boolean>;
+                    defaultLabel: Schema.optional<typeof Schema.String>;
+                    allowRename: Schema.optional<typeof Schema.Boolean>;
+                }>>;
+            }>>;
+            themeTokens: Schema.optional<Schema.Array$<Schema.Struct<{
+                themeId: typeof Schema.String;
+                label: typeof Schema.String;
+                description: Schema.optional<typeof Schema.String>;
+                modes: Schema.Array$<Schema.Literal<["light", "dark"]>>;
+                tokens: Schema.Record$<Schema.Literal<["light", "dark"]>, Schema.Record$<typeof Schema.String, typeof Schema.String>>;
+            }>>>;
+            ships: Schema.optional<Schema.Literal<["active", "inactive"]>>;
+        }>;
+        enablement: Schema.Literal<["enabled", "disabled"]>;
+        runtimeState: Schema.Literal<["inactive", "active", "blocked", "error"]>;
+        grantedPermissions: Schema.Array$<Schema.Literal<["kernel.registry.read", "plugin.lifecycle.manage", "host.capabilities.read", "surface.render", "composer.capabilities.read", "composer.capabilities.invoke", "sidecars.launch", "threads.read", "threads.write", "settings.read", "settings.write", "artifacts.read", "artifacts.write", "screenshots.capture", "brain.read", "host.context.read", "host.command.invoke", "host.log.write"]>>;
+        deniedPermissions: Schema.Array$<Schema.Literal<["kernel.registry.read", "plugin.lifecycle.manage", "host.capabilities.read", "surface.render", "composer.capabilities.read", "composer.capabilities.invoke", "sidecars.launch", "threads.read", "threads.write", "settings.read", "settings.write", "artifacts.read", "artifacts.write", "screenshots.capture", "brain.read", "host.context.read", "host.command.invoke", "host.log.write"]>>;
+    }>>;
+    permissions: Schema.Array$<Schema.Struct<{
+        principalKind: Schema.Literal<["daemon", "host", "plugin", "skill", "sidecar", "bridge", "user"]>;
+        principalId: typeof Schema.String;
+        granted: Schema.Array$<Schema.Literal<["kernel.registry.read", "plugin.lifecycle.manage", "host.capabilities.read", "surface.render", "composer.capabilities.read", "composer.capabilities.invoke", "sidecars.launch", "threads.read", "threads.write", "settings.read", "settings.write", "artifacts.read", "artifacts.write", "screenshots.capture", "brain.read", "host.context.read", "host.command.invoke", "host.log.write"]>>;
+        denied: Schema.Array$<Schema.Literal<["kernel.registry.read", "plugin.lifecycle.manage", "host.capabilities.read", "surface.render", "composer.capabilities.read", "composer.capabilities.invoke", "sidecars.launch", "threads.read", "threads.write", "settings.read", "settings.write", "artifacts.read", "artifacts.write", "screenshots.capture", "brain.read", "host.context.read", "host.command.invoke", "host.log.write"]>>;
+    }>>;
+    availableHostCapabilities: Schema.Array$<Schema.Literal<["host.windows", "host.tray", "host.notifications", "host.embeddedViews", "host.filePicker", "host.localShell", "host.secretPrompt", "host.visualSelection", "host.localFilesystem", "host.terminal", "host.globalInput", "host.contextMenus", "host.accessibility"]>>;
+    contributions: Schema.Array$<Schema.Struct<{
+        contributionId: typeof Schema.String;
+        pluginId: typeof Schema.String;
+        kind: Schema.Literal<["skillTemplate", "composerCapability", "surface", "settingsPanel", "sidecar", "bridge", "providerAdapter", "contextualAction", "dataEndpoint"]>;
+        available: typeof Schema.Boolean;
+        hostSlots: Schema.optional<Schema.Array$<Schema.Literal<["nav.sidebar", "workspace.surface", "settings.extensions", "chat.visual", "thread.tab.contextMenu", "companion.overlay", "background.sidecar"]>>>;
+        requiredHostCapabilities: Schema.Array$<Schema.Literal<["host.windows", "host.tray", "host.notifications", "host.embeddedViews", "host.filePicker", "host.localShell", "host.secretPrompt", "host.visualSelection", "host.localFilesystem", "host.terminal", "host.globalInput", "host.contextMenus", "host.accessibility"]>>;
+        requiredKernelPermissions: Schema.Array$<Schema.Literal<["kernel.registry.read", "plugin.lifecycle.manage", "host.capabilities.read", "surface.render", "composer.capabilities.read", "composer.capabilities.invoke", "sidecars.launch", "threads.read", "threads.write", "settings.read", "settings.write", "artifacts.read", "artifacts.write", "screenshots.capture", "brain.read", "host.context.read", "host.command.invoke", "host.log.write"]>>;
+        missingHostCapabilities: Schema.Array$<Schema.Literal<["host.windows", "host.tray", "host.notifications", "host.embeddedViews", "host.filePicker", "host.localShell", "host.secretPrompt", "host.visualSelection", "host.localFilesystem", "host.terminal", "host.globalInput", "host.contextMenus", "host.accessibility"]>>;
+        missingKernelPermissions: Schema.Array$<Schema.Literal<["kernel.registry.read", "plugin.lifecycle.manage", "host.capabilities.read", "surface.render", "composer.capabilities.read", "composer.capabilities.invoke", "sidecars.launch", "threads.read", "threads.write", "settings.read", "settings.write", "artifacts.read", "artifacts.write", "screenshots.capture", "brain.read", "host.context.read", "host.command.invoke", "host.log.write"]>>;
+        deniedKernelPermissions: Schema.Array$<Schema.Literal<["kernel.registry.read", "plugin.lifecycle.manage", "host.capabilities.read", "surface.render", "composer.capabilities.read", "composer.capabilities.invoke", "sidecars.launch", "threads.read", "threads.write", "settings.read", "settings.write", "artifacts.read", "artifacts.write", "screenshots.capture", "brain.read", "host.context.read", "host.command.invoke", "host.log.write"]>>;
+    }>>;
+    surfaces: Schema.Array$<Schema.Struct<{
+        surfaceId: typeof Schema.String;
+        pluginId: typeof Schema.String;
+        available: typeof Schema.Boolean;
+        hostSlots: Schema.optional<Schema.Array$<Schema.Literal<["nav.sidebar", "workspace.surface", "settings.extensions", "chat.visual", "thread.tab.contextMenu", "companion.overlay", "background.sidecar"]>>>;
+        requiredHostCapabilities: Schema.Array$<Schema.Literal<["host.windows", "host.tray", "host.notifications", "host.embeddedViews", "host.filePicker", "host.localShell", "host.secretPrompt", "host.visualSelection", "host.localFilesystem", "host.terminal", "host.globalInput", "host.contextMenus", "host.accessibility"]>>;
+        requiredKernelPermissions: Schema.optional<Schema.Array$<Schema.Literal<["kernel.registry.read", "plugin.lifecycle.manage", "host.capabilities.read", "surface.render", "composer.capabilities.read", "composer.capabilities.invoke", "sidecars.launch", "threads.read", "threads.write", "settings.read", "settings.write", "artifacts.read", "artifacts.write", "screenshots.capture", "brain.read", "host.context.read", "host.command.invoke", "host.log.write"]>>>;
+        missingHostCapabilities: Schema.Array$<Schema.Literal<["host.windows", "host.tray", "host.notifications", "host.embeddedViews", "host.filePicker", "host.localShell", "host.secretPrompt", "host.visualSelection", "host.localFilesystem", "host.terminal", "host.globalInput", "host.contextMenus", "host.accessibility"]>>;
+        missingKernelPermissions: Schema.optional<Schema.Array$<Schema.Literal<["kernel.registry.read", "plugin.lifecycle.manage", "host.capabilities.read", "surface.render", "composer.capabilities.read", "composer.capabilities.invoke", "sidecars.launch", "threads.read", "threads.write", "settings.read", "settings.write", "artifacts.read", "artifacts.write", "screenshots.capture", "brain.read", "host.context.read", "host.command.invoke", "host.log.write"]>>>;
+        deniedKernelPermissions: Schema.optional<Schema.Array$<Schema.Literal<["kernel.registry.read", "plugin.lifecycle.manage", "host.capabilities.read", "surface.render", "composer.capabilities.read", "composer.capabilities.invoke", "sidecars.launch", "threads.read", "threads.write", "settings.read", "settings.write", "artifacts.read", "artifacts.write", "screenshots.capture", "brain.read", "host.context.read", "host.command.invoke", "host.log.write"]>>>;
+    }>>;
+}>;
+type KernelRegistrySnapshot = Schema.Schema.Type<typeof KernelRegistrySnapshot>;
+
+declare const NormalizedPluginExtensionContributionSet: Schema.Struct<{
+    surfaces: Schema.Array$<Schema.Struct<{
+        contributionId: typeof Schema.String;
+        kind: Schema.Literal<["skillTemplate", "composerCapability", "surface", "settingsPanel", "sidecar", "bridge", "providerAdapter", "contextualAction", "dataEndpoint"]>;
+        displayName: typeof Schema.String;
+        requiredHostCapabilities: Schema.Array$<Schema.Literal<["host.windows", "host.tray", "host.notifications", "host.embeddedViews", "host.filePicker", "host.localShell", "host.secretPrompt", "host.visualSelection", "host.localFilesystem", "host.terminal", "host.globalInput", "host.contextMenus", "host.accessibility"]>>;
+        requiredKernelPermissions: Schema.optional<Schema.Array$<Schema.Literal<["kernel.registry.read", "plugin.lifecycle.manage", "host.capabilities.read", "surface.render", "composer.capabilities.read", "composer.capabilities.invoke", "sidecars.launch", "threads.read", "threads.write", "settings.read", "settings.write", "artifacts.read", "artifacts.write", "screenshots.capture", "brain.read", "host.context.read", "host.command.invoke", "host.log.write"]>>>;
+        routeSegment: Schema.optional<typeof Schema.String>;
+        mount: Schema.optional<typeof Schema.String>;
+        presentationClass: Schema.optional<typeof Schema.String>;
+        hostSlots: Schema.optional<Schema.Array$<Schema.Literal<["nav.sidebar", "workspace.surface", "settings.extensions", "chat.visual", "thread.tab.contextMenu", "companion.overlay", "background.sidecar"]>>>;
+        workspaceTab: Schema.optional<Schema.Struct<{
+            defaultVisible: Schema.optional<typeof Schema.Boolean>;
+            defaultLabel: Schema.optional<typeof Schema.String>;
+            allowRename: Schema.optional<typeof Schema.Boolean>;
+        }>>;
+    }>>;
+    settingsPanels: Schema.Array$<Schema.Struct<{
+        contributionId: typeof Schema.String;
+        kind: Schema.Literal<["skillTemplate", "composerCapability", "surface", "settingsPanel", "sidecar", "bridge", "providerAdapter", "contextualAction", "dataEndpoint"]>;
+        displayName: typeof Schema.String;
+        requiredHostCapabilities: Schema.Array$<Schema.Literal<["host.windows", "host.tray", "host.notifications", "host.embeddedViews", "host.filePicker", "host.localShell", "host.secretPrompt", "host.visualSelection", "host.localFilesystem", "host.terminal", "host.globalInput", "host.contextMenus", "host.accessibility"]>>;
+        requiredKernelPermissions: Schema.optional<Schema.Array$<Schema.Literal<["kernel.registry.read", "plugin.lifecycle.manage", "host.capabilities.read", "surface.render", "composer.capabilities.read", "composer.capabilities.invoke", "sidecars.launch", "threads.read", "threads.write", "settings.read", "settings.write", "artifacts.read", "artifacts.write", "screenshots.capture", "brain.read", "host.context.read", "host.command.invoke", "host.log.write"]>>>;
+        routeSegment: Schema.optional<typeof Schema.String>;
+        mount: Schema.optional<typeof Schema.String>;
+        presentationClass: Schema.optional<typeof Schema.String>;
+        hostSlots: Schema.optional<Schema.Array$<Schema.Literal<["nav.sidebar", "workspace.surface", "settings.extensions", "chat.visual", "thread.tab.contextMenu", "companion.overlay", "background.sidecar"]>>>;
+        workspaceTab: Schema.optional<Schema.Struct<{
+            defaultVisible: Schema.optional<typeof Schema.Boolean>;
+            defaultLabel: Schema.optional<typeof Schema.String>;
+            allowRename: Schema.optional<typeof Schema.Boolean>;
+        }>>;
+    }>>;
+    contributions: Schema.Array$<Schema.Struct<{
+        contributionId: typeof Schema.String;
+        kind: Schema.Literal<["skillTemplate", "composerCapability", "surface", "settingsPanel", "sidecar", "bridge", "providerAdapter", "contextualAction", "dataEndpoint"]>;
+        displayName: typeof Schema.String;
+        requiredHostCapabilities: Schema.Array$<Schema.Literal<["host.windows", "host.tray", "host.notifications", "host.embeddedViews", "host.filePicker", "host.localShell", "host.secretPrompt", "host.visualSelection", "host.localFilesystem", "host.terminal", "host.globalInput", "host.contextMenus", "host.accessibility"]>>;
+        requiredKernelPermissions: Schema.optional<Schema.Array$<Schema.Literal<["kernel.registry.read", "plugin.lifecycle.manage", "host.capabilities.read", "surface.render", "composer.capabilities.read", "composer.capabilities.invoke", "sidecars.launch", "threads.read", "threads.write", "settings.read", "settings.write", "artifacts.read", "artifacts.write", "screenshots.capture", "brain.read", "host.context.read", "host.command.invoke", "host.log.write"]>>>;
+        routeSegment: Schema.optional<typeof Schema.String>;
+        mount: Schema.optional<typeof Schema.String>;
+        presentationClass: Schema.optional<typeof Schema.String>;
+        hostSlots: Schema.optional<Schema.Array$<Schema.Literal<["nav.sidebar", "workspace.surface", "settings.extensions", "chat.visual", "thread.tab.contextMenu", "companion.overlay", "background.sidecar"]>>>;
+        workspaceTab: Schema.optional<Schema.Struct<{
+            defaultVisible: Schema.optional<typeof Schema.Boolean>;
+            defaultLabel: Schema.optional<typeof Schema.String>;
+            allowRename: Schema.optional<typeof Schema.Boolean>;
+        }>>;
+    }>>;
+    sidecars: Schema.Array$<Schema.Struct<{
+        sidecarId: typeof Schema.String;
+        displayName: typeof Schema.String;
+        pluginId: Schema.optional<typeof Schema.String>;
+        transport: Schema.Literal<["stdio", "http", "websocket"]>;
+        requestedHostCapabilities: Schema.Array$<Schema.Literal<["host.windows", "host.tray", "host.notifications", "host.embeddedViews", "host.filePicker", "host.localShell", "host.secretPrompt", "host.visualSelection", "host.localFilesystem", "host.terminal", "host.globalInput", "host.contextMenus", "host.accessibility"]>>;
+    }>>;
+    bridges: Schema.Array$<Schema.Struct<{
+        bridgeId: typeof Schema.String;
+        displayName: typeof Schema.String;
+        adapterKind: Schema.Literal<["kyberbot", "generic"]>;
+        pluginId: Schema.optional<typeof Schema.String>;
+        transport: Schema.Literal<["stdio", "http", "websocket"]>;
+        commandTypes: Schema.Array$<typeof Schema.String>;
+        eventTypes: Schema.Array$<typeof Schema.String>;
+    }>>;
+    permissions: Schema.Array$<Schema.Literal<["kernel.registry.read", "plugin.lifecycle.manage", "host.capabilities.read", "surface.render", "composer.capabilities.read", "composer.capabilities.invoke", "sidecars.launch", "threads.read", "threads.write", "settings.read", "settings.write", "artifacts.read", "artifacts.write", "screenshots.capture", "brain.read", "host.context.read", "host.command.invoke", "host.log.write"]>>;
+    deniedPermissions: Schema.Array$<Schema.Literal<["kernel.registry.read", "plugin.lifecycle.manage", "host.capabilities.read", "surface.render", "composer.capabilities.read", "composer.capabilities.invoke", "sidecars.launch", "threads.read", "threads.write", "settings.read", "settings.write", "artifacts.read", "artifacts.write", "screenshots.capture", "brain.read", "host.context.read", "host.command.invoke", "host.log.write"]>>;
+    themeTokens: Schema.Array$<Schema.Struct<{
+        themeId: typeof Schema.String;
+        label: typeof Schema.String;
+        description: Schema.optional<typeof Schema.String>;
+        modes: Schema.Array$<Schema.Literal<["light", "dark"]>>;
+        tokens: Schema.Record$<Schema.Literal<["light", "dark"]>, Schema.Record$<typeof Schema.String, typeof Schema.String>>;
+    }>>;
+    hostCapabilities: Schema.Array$<Schema.Literal<["host.windows", "host.tray", "host.notifications", "host.embeddedViews", "host.filePicker", "host.localShell", "host.secretPrompt", "host.visualSelection", "host.localFilesystem", "host.terminal", "host.globalInput", "host.contextMenus", "host.accessibility"]>>;
+    providerProjections: Schema.Array$<Schema.Struct<{
+        target: Schema.Literal<["direct-api", "codex-app-server", "claude-agent-sdk", "pi-agent-core"]>;
+        surface: Schema.Literal<["tool-schema", "dynamic-tool", "mcp-server", "skill-context", "host-surface"]>;
+        runtimeSourceId: Schema.optional<typeof Schema.String>;
+        namespace: Schema.optional<typeof Schema.String>;
+        toolIds: Schema.optional<Schema.Array$<typeof Schema.String>>;
+        alwaysLoad: Schema.optional<typeof Schema.Boolean>;
+        notes: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    }>>;
+    outboundOrigins: Schema.Array$<typeof Schema.String>;
+    ships: Schema.optional<Schema.Literal<["active", "inactive"]>>;
+}>;
+type NormalizedPluginExtensionContributionSet = Schema.Schema.Type<typeof NormalizedPluginExtensionContributionSet>;
+
+declare const SidecarDeclaration: Schema.Struct<{
+    sidecarId: typeof Schema.String;
+    displayName: typeof Schema.String;
+    pluginId: Schema.optional<typeof Schema.String>;
+    transport: Schema.Literal<["stdio", "http", "websocket"]>;
+    requestedHostCapabilities: Schema.Array$<Schema.Literal<["host.windows", "host.tray", "host.notifications", "host.embeddedViews", "host.filePicker", "host.localShell", "host.secretPrompt", "host.visualSelection", "host.localFilesystem", "host.terminal", "host.globalInput", "host.contextMenus", "host.accessibility"]>>;
+}>;
+type SidecarDeclaration = Schema.Schema.Type<typeof SidecarDeclaration>;
+
+declare const BridgeDeclaration: Schema.Struct<{
+    bridgeId: typeof Schema.String;
+    displayName: typeof Schema.String;
+    adapterKind: Schema.Literal<["kyberbot", "generic"]>;
+    pluginId: Schema.optional<typeof Schema.String>;
+    transport: Schema.Literal<["stdio", "http", "websocket"]>;
+    commandTypes: Schema.Array$<typeof Schema.String>;
+    eventTypes: Schema.Array$<typeof Schema.String>;
+}>;
+type BridgeDeclaration = Schema.Schema.Type<typeof BridgeDeclaration>;
+
+/** A host-attested active-agent name. Branded so an unvalidated string can't
+ *  masquerade as the active agent — mint it only via {@link makeAgentId} (or the
+ *  wire decode, which the route stamps host-side; never trust a payload value). */
+declare const AgentId: Schema.brand<typeof Schema.String, "AgentId">;
+type AgentId = Schema.Schema.Type<typeof AgentId>;
+/** Mint an {@link AgentId} from a host-attested name. Throws on blank — the brand is
+ *  not a licence to thread an empty name. Lowercased to match the agent-registry key
+ *  convention (the route + proxy already lowercase). */
+declare function makeAgentId(attestedName: string): AgentId;
+/**
+ * The typed argument bag for `op:'query'` — carried in `SeamRequest.payload`.
+ * `filter` is an op-specific predicate bag (extension-interpreted); `limit`
+ * caps the row count. The runtime validates this before dispatching a query, so
+ * a malformed query is a typed `seam.invalid_query`, not a handler surprise.
+ */
+declare const SeamQueryPayload: Schema.Struct<{
+    filter: Schema.optional<Schema.Record$<typeof Schema.String, typeof Schema.Unknown>>;
+    limit: Schema.optional<Schema.refine<number, typeof Schema.NonNegative>>;
+}>;
+type SeamQueryPayload = Schema.Schema.Type<typeof SeamQueryPayload>;
+/**
+ * The typed argument bag for `op:'describe'` — flow ⑤ config cadence. The host
+ * pushes its current config state (model / mode) and the extension returns the
+ * contributions valid for that state. Read at init and on config CHANGE, not per
+ * keystroke — a cadence, not a stream. The runtime validates this before
+ * dispatch, so a malformed describe is a typed `seam.invalid_describe`.
+ */
+declare const SeamDescribePayload: Schema.Struct<{
+    model: Schema.optional<typeof Schema.String>;
+    mode: Schema.optional<typeof Schema.String>;
+}>;
+type SeamDescribePayload = Schema.Schema.Type<typeof SeamDescribePayload>;
+/**
+ * The typed argument bag for `op:'invoke'` — flow ① composer dispatch. The host
+ * invokes a named command an extension declared (mirroring the skill path
+ * `/skills/:name/invoke`, but routed over the seam): `commandId` selects which
+ * declared command, `args` is the invocation bag. The runtime validates this
+ * before dispatch, so a malformed invoke is a typed `seam.invalid_invoke`.
+ */
+declare const SeamInvokePayload: Schema.Struct<{
+    commandId: typeof Schema.String;
+    args: Schema.optional<Schema.Record$<typeof Schema.String, typeof Schema.Unknown>>;
+}>;
+type SeamInvokePayload = Schema.Schema.Type<typeof SeamInvokePayload>;
+/**
+ * The result-bearing response — the piece BridgeCommandResponse lacks. A
+ * discriminated union on `ok`: success carries `data`, failure carries `error`.
+ */
+declare const SeamResponse: Schema.Union<[Schema.Struct<{
+    ok: Schema.Literal<[true]>;
+    data: typeof Schema.Unknown;
+}>, Schema.Struct<{
+    ok: Schema.Literal<[false]>;
+    error: Schema.Struct<{
+        code: typeof Schema.String;
+        message: typeof Schema.String;
+        details: Schema.optional<typeof Schema.Unknown>;
+    }>;
+}>]>;
+type SeamResponse = Schema.Schema.Type<typeof SeamResponse>;
+/**
+ * A push event emitted by a contribution (flow ④). Distinct from the transport's
+ * BridgeEventEnvelope: this is addressed at the seam level (extension +
+ * contribution), not the bridge level.
+ */
+declare const SeamEvent: Schema.Struct<{
+    extensionId: typeof Schema.String;
+    contributionId: typeof Schema.String;
+    type: typeof Schema.String;
+    payload: Schema.Record$<typeof Schema.String, typeof Schema.Unknown>;
+    observedAtMs: Schema.refine<number, typeof Schema.NonNegative>;
+}>;
+type SeamEvent = Schema.Schema.Type<typeof SeamEvent>;
+/**
+ * A standing subscription to a contribution's events — the filter the host
+ * registers so only matching SeamEvents are pushed to it.
+ */
+declare const Subscription: Schema.Struct<{
+    subscriptionId: typeof Schema.String;
+    extensionId: typeof Schema.String;
+    contributionId: typeof Schema.String;
+    eventTypes: Schema.optional<Schema.Array$<typeof Schema.String>>;
+}>;
+type Subscription = Schema.Schema.Type<typeof Subscription>;
+
+declare const HostCapabilityId: Schema.Literal<["host.windows", "host.tray", "host.notifications", "host.embeddedViews", "host.filePicker", "host.localShell", "host.secretPrompt", "host.visualSelection", "host.localFilesystem", "host.terminal", "host.globalInput", "host.contextMenus", "host.accessibility"]>;
+type HostCapabilityId = Schema.Schema.Type<typeof HostCapabilityId>;
+
+/**
+ * The host↔extension seam, as interfaces — the Phase-2 spine of the SDK-coherence
+ * program (docs/61). This is the GROWN contract that docs/62 (HOST port), docs/63
+ * (EXT port) and docs/64 (responsibility map) describe; this file is the real,
+ * compiler-checked TypeScript those docs annotate. The markdown explains the WHY;
+ * THIS is the deliverable.
+ *
+ * FREEZE STATUS (ADR-5 + ADR-6): this module is the contract — mostly type-only
+ * (the port interfaces, SeamCallContext, BlockedReason). It also holds a SMALL,
+ * SANCTIONED runtime core: the shared gate factory `gatedHostPort`, the branded
+ * construction helpers `makeAgentId`/`makeSeamCallContext`, and `SeamPermissionDenied`.
+ * Per ADR-6 these live HERE deliberately so the Phase-5 production host and the
+ * InMemoryHost import the IDENTICAL gate — the "same gate" guarantee is structural,
+ * not a doc claim. That is the only runtime here; the conforming IMPLEMENTATIONS (the
+ * production host adapter, per-extension answering ports) still land in **Phase 5**.
+ *
+ * TRANSITION NOTE: the canonical host port lives here as `HostPort`, and the brain
+ * port types are now defined HERE (the canonical home). The narrow 1-channel
+ * `ExtensionHostPort` in `./testing/host-port.ts` re-exports these and is the seed
+ * `InMemoryHost` still implements for back-compat; Phase 5 retires it once the
+ * grown `HostPort` path is the only one.
+ */
+
+type BrainStatsView = {
+    entities: number;
+    notes: number;
+};
+type BrainHit = {
+    id: string;
+    title: string;
+    score: number;
+};
+/** The read surface an extension receives for the brain channel (host-owned). */
+interface BrainReadPort {
+    stats(): Promise<BrainStatsView>;
+    query(text: string, opts?: {
+        limit?: number;
+    }): Promise<BrainHit[]>;
+}
+/** The host-attested principal. Carries HOW it was attested; it is stamped host-side
+ *  (frame origin / session) and NEVER read from a request payload (DIV-5). */
+interface VerifiedPrincipal {
+    readonly kind: KernelPrincipalKind;
+    readonly id: string;
+    /** The trust source. Absence of a known source ⇒ untrusted. */
+    readonly attestedBy: 'frame-origin' | 'session';
+}
+/** Injected with every host port and passed into every EXT-port call. The active
+ *  agent rides HERE (ambient), not as a per-method argument — so no dispatch path
+ *  can forget or forge it. */
+interface SeamCallContext {
+    readonly principal: VerifiedPrincipal;
+    readonly activeAgent: AgentId;
+    readonly hostId?: string;
+    readonly requestedAtMs: number;
+}
+/** The host-context snapshot an extension may READ over the gated seam (host stays
+ *  the holder; the extension only ever gets a serialized snapshot). */
+interface HostContextSnapshot {
+    readonly activeAgent: AgentId;
+    readonly [key: string]: unknown;
+}
+/** host.context.read — a gated read of the serialized host context. */
+interface HostContextPort {
+    snapshot(): Promise<HostContextSnapshot>;
+}
+/** A command the host advertises as invokable-by-name (the allowlist entry). */
+interface HostCommandDescriptor {
+    readonly commandId: string;
+    readonly displayName: string;
+}
+/** host.command.invoke — the extension ASKS the host to run an allowlisted command
+ *  by name; the host authorizes + runs it. The extension never acts directly. */
+interface HostCommandPort {
+    describe(): Promise<readonly HostCommandDescriptor[]>;
+    invoke(commandId: string, args?: Record<string, unknown>): Promise<SeamResponse>;
+}
+/** Events the host pushes to a subscribing extension (host→ext leg of the Events
+ *  contract). Optional on the host port pending the docs/63 D6 ownership call. */
+interface HostEventPort {
+    subscribe(sub: Subscription, emit: (event: SeamEvent) => void): () => void;
+}
+/** The grown HOST port. One interface carrying the host-owned contracts; the active
+ *  agent + principal ride on `ctx`. Both the production host AND `InMemoryHost`
+ *  implement this (Phase 5). Supersedes the narrow `ExtensionHostPort` seed. */
+interface HostPort {
+    readonly ctx: SeamCallContext;
+    readonly brain: BrainReadPort;
+    readonly context: HostContextPort;
+    readonly command: HostCommandPort;
+    readonly events?: HostEventPort;
+}
+/** The shared gate (declaration is NOT the grant — DIV-2). BOTH adapters wrap their
+ *  raw port in this single factory, so `InMemoryHost` enforces the SAME gate as
+ *  production and a unit test can't pass where prod would deny (SDK-N3). The
+ *  implementation (`gatedHostPort`, below) lives in THIS shared, non-testing module
+ *  precisely so the production host can import the SAME factory — the "same gate"
+ *  guarantee is structural, not a doc claim. */
+type GatedHostPortFactory = (inner: HostPort, grants: ReadonlySet<KernelPermissionId>) => HostPort;
+/** Why a port was withheld. A discriminated union, replacing the single opaque
+ *  `'blocked'` runtime state (DIV-3); `inactive.scope` makes the per-agent vs
+ *  machine question explicit (DIV-7). */
+type BlockedReason = {
+    readonly cause: 'inactive';
+    readonly scope: 'agent' | 'machine';
+} | {
+    readonly cause: 'missing-host-capability';
+    readonly missing: readonly HostCapabilityId[];
+} | {
+    readonly cause: 'denied-permission';
+    readonly denied: readonly KernelPermissionId[];
+} | {
+    readonly cause: 'unmet-requirement';
+    readonly requirement: 'remote-config' | 'dependency-install' | 'connector-auth';
+    readonly detail?: string;
+};
+/** The activation authority's verdict (docs/64 §4): hand over a gated port, or
+ *  withhold it with a typed cause. The runner calls this BEFORE injecting a port. */
+type PortInjectionResult = {
+    readonly ok: true;
+    readonly port: HostPort;
+} | {
+    readonly ok: false;
+    readonly blocked: BlockedReason;
+};
+/** kind: dataEndpoint — Data contract. Headless; answers a query with its OWN rows. */
+interface DataEndpointPort {
+    query(payload: SeamQueryPayload, ctx: SeamCallContext): Promise<ReadonlyArray<Record<string, unknown>>>;
+}
+/** What a composer capability advertises as valid for a given host config. */
+interface ComposerDescriptor {
+    readonly commands: readonly {
+        readonly commandId: string;
+        readonly displayName: string;
+    }[];
+}
+/** kind: composerCapability — Composer contract. Describe valid commands, then run one. */
+interface ComposerCapabilityPort {
+    describe(payload: SeamDescribePayload, ctx: SeamCallContext): Promise<ComposerDescriptor>;
+    invoke(payload: SeamInvokePayload, ctx: SeamCallContext): Promise<SeamResponse>;
+}
+/** kind: contextualAction / chat source — Chat contract. A single invoke round-trip. */
+interface InvokablePort {
+    invoke(payload: SeamInvokePayload, ctx: SeamCallContext): Promise<SeamResponse>;
+}
+/** Events contract — the ext emits; the host subscribes with a filter. subscribe +
+ *  push are two methods of ONE port (resolves the docs/56 "two-directions" flag). */
+interface EventSourcePort {
+    subscribe(sub: Subscription, emit: (event: SeamEvent) => void, ctx: SeamCallContext): () => void;
+}
+/** Any contribution the host may call into. RENDERING kinds (surface, settingsPanel)
+ *  implement none of these — they render and CONSUME the host port instead. */
+type AnsweringPort = DataEndpointPort | ComposerCapabilityPort | InvokablePort | EventSourcePort;
+/** What the runner (production host, or `InMemoryHost` in tests) gives and gets for
+ *  one extension: the injected, already-gated HOST port it consumes, and the
+ *  answering EXT ports — keyed by contributionId — the host may call. */
+interface ExtensionRuntime {
+    readonly host: HostPort;
+    readonly contributions: ReadonlyMap<string, AnsweringPort>;
+}
+/** Assemble a SeamCallContext from already-attested parts. */
+declare function makeSeamCallContext(parts: {
+    principal: VerifiedPrincipal;
+    activeAgent: AgentId;
+    hostId?: string;
+    requestedAtMs: number;
+}): SeamCallContext;
+/** Thrown by a gated host port when a host-owned capability is reached without its
+ *  grant (C5). Carries the missing permission so callers can map it to a typed
+ *  `seam.permission_denied` SeamError. */
+declare class SeamPermissionDenied extends Error {
+    readonly permission: KernelPermissionId;
+    readonly code: "seam.permission_denied";
+    constructor(permission: KernelPermissionId);
+}
+/**
+ * The shared permission gate. BOTH the production host (Phase 5) and `InMemoryHost`
+ * wrap their raw `HostPort` in THIS one factory, so the in-memory harness enforces
+ * the SAME gate as production (SDK-N3 / docs/62 §3). Access to a host-owned
+ * capability without its grant throws a typed `SeamPermissionDenied` (C5). Events
+ * are ext-owned and ungated (docs/63 D6). Lives in this shared, non-testing module
+ * so the production host can import it directly — no test-module dependency.
+ */
+declare const gatedHostPort: GatedHostPortFactory;
+
+declare const EXTENSION_HOST_SLOTS: readonly ["nav.sidebar", "workspace.surface", "settings.extensions", "chat.visual", "thread.tab.contextMenu", "companion.overlay", "background.sidecar"];
+type ExtensionSurfaceDefinition = PluginManifestContribution & {
+    kind: 'surface';
+};
+type ExtensionWorkspaceTabDefinition = WorkspaceTabContributionMetadata;
+type ExtensionSettingsPanelDefinition = PluginManifestContribution & {
+    kind: 'settingsPanel';
+};
+type ExtensionComposerCapabilityDefinition = PluginManifestContribution & {
+    kind: 'composerCapability';
+};
+type ExtensionContextualActionDefinition = PluginManifestContribution & {
+    kind: 'contextualAction';
+};
+type ExtensionSidecarContributionDefinition = PluginManifestContribution & {
+    kind: 'sidecar';
+};
+type ExtensionBridgeContributionDefinition = PluginManifestContribution & {
+    kind: 'bridge';
+};
+/**
+ * A headless, queryable data source addressed by the seam `query` op. Distinct
+ * from a surface (which renders): a data endpoint *answers* queries and may have
+ * no UI at all (e.g. agent-only data, or a remote agent with no renderer). One
+ * endpoint can back many surfaces — they query it, they don't own its data.
+ */
+type ExtensionDataEndpointDefinition = PluginManifestContribution & {
+    kind: 'dataEndpoint';
+};
+type ExtensionContributionDefinition = ExtensionSurfaceDefinition | ExtensionSettingsPanelDefinition | ExtensionComposerCapabilityDefinition | ExtensionContextualActionDefinition | ExtensionSidecarContributionDefinition | ExtensionBridgeContributionDefinition | ExtensionDataEndpointDefinition | PluginManifestContribution;
+type ExtensionDefinition = {
+    pluginId: string;
+    displayName: string;
+    version?: string;
+    ships?: PluginShipsState;
+    contributions?: readonly ExtensionContributionDefinition[];
+    surfaces?: readonly ExtensionSurfaceDefinition[];
+    settingsPanels?: readonly ExtensionSettingsPanelDefinition[];
+    composerCapabilities?: readonly ExtensionComposerCapabilityDefinition[];
+    contextualActions?: readonly ExtensionContextualActionDefinition[];
+    sidecarContributions?: readonly ExtensionSidecarContributionDefinition[];
+    bridgeContributions?: readonly ExtensionBridgeContributionDefinition[];
+    dataEndpoints?: readonly ExtensionDataEndpointDefinition[];
+    sidecars?: readonly SidecarDeclaration[];
+    bridges?: readonly BridgeDeclaration[];
+    themeTokens?: readonly PluginThemeTokenSet[];
+    hostCapabilities?: readonly HostCapabilityId[];
+    providerProjections?: readonly ProviderRuntimeProjectionDescriptor[];
+    permissions?: readonly KernelPermissionId[];
+    deniedPermissions?: readonly KernelPermissionId[];
+    outboundOrigins?: readonly string[];
+};
+/** The contributionId half of a builder input: EITHER typed key fields (derived)
+ *  OR a legacy raw string (deprecated). The XOR keeps authors from supplying both. */
+type ContributionKeyInput = {
+    ext: string;
+    name?: string;
+    contributionId?: undefined;
+} | {
+    contributionId: string;
+    ext?: undefined;
+    name?: undefined;
+};
+/** A builder input = the contribution's own fields (minus kind + the id) plus the
+ *  id supplied as typed fields or a legacy string. */
+type BuilderInput<T extends PluginManifestContribution> = Omit<T, 'kind' | 'contributionId'> & ContributionKeyInput;
+declare function defineSurface(surface: BuilderInput<ExtensionSurfaceDefinition>): ExtensionSurfaceDefinition;
+declare function defineSettingsPanel(panel: BuilderInput<ExtensionSettingsPanelDefinition>): ExtensionSettingsPanelDefinition;
+declare function defineComposerCapability(capability: BuilderInput<ExtensionComposerCapabilityDefinition>): ExtensionComposerCapabilityDefinition;
+declare function defineContextualAction(action: BuilderInput<ExtensionContextualActionDefinition>): ExtensionContextualActionDefinition;
+declare function defineSidecarContribution(sidecar: BuilderInput<ExtensionSidecarContributionDefinition>): ExtensionSidecarContributionDefinition;
+declare function defineBridgeContribution(bridge: BuilderInput<ExtensionBridgeContributionDefinition>): ExtensionBridgeContributionDefinition;
+declare function defineDataEndpoint(endpoint: Omit<BuilderInput<ExtensionDataEndpointDefinition>, 'requiredHostCapabilities'> & {
+    requiredHostCapabilities?: ExtensionDataEndpointDefinition['requiredHostCapabilities'];
+}): ExtensionDataEndpointDefinition;
+declare function defineSidecar(sidecar: SidecarDeclaration): SidecarDeclaration;
+declare function defineBridge(bridge: BridgeDeclaration): BridgeDeclaration;
+declare function defineThemeTokens(themeTokens: PluginThemeTokenSet): PluginThemeTokenSet;
+declare function defineProviderRuntimeProjection(projection: ProviderRuntimeProjectionDescriptor): ProviderRuntimeProjectionDescriptor;
+declare function defineExtension(definition: ExtensionDefinition): ExtensionDefinition;
+declare function emitExtensionContributionSet(definition: ExtensionDefinition): NormalizedPluginExtensionContributionSet;
+declare function requiresHostCapabilities(...capabilities: HostCapabilityId[]): HostCapabilityId[];
+/**
+ * The ONE canonical "no host capability" form (C14 / NEW-E5). "None" was expressed
+ * three ways — `requiresHostCapabilities()` (empty call), `[]`, and omitted — which
+ * drifted across plugins. This collapses all three to a single value: `undefined`/`[]`
+ * → `[]`. Duplicates are removed but DECLARED ORDER IS PRESERVED, so normalizing an
+ * existing non-empty declaration never reorders a generated manifest (no drift).
+ */
+declare function canonicalHostCapabilities(value?: readonly HostCapabilityId[]): readonly HostCapabilityId[];
+declare function requiresKernelPermissions(...permissions: KernelPermissionId[]): KernelPermissionId[];
+declare function hostSlots(...slots: ExtensionHostSlot[]): ExtensionHostSlot[];
+declare function workspaceTab(tab?: ExtensionWorkspaceTabDefinition): ExtensionWorkspaceTabDefinition;
+declare function validateExtensionDefinition(definition: ExtensionDefinition): string[];
+/**
+ * Cross-reference invariant (C15 / SDK-N2): contribution ⊆ extension — for KERNEL
+ * PERMISSIONS. A contribution may only require a kernel permission the extension
+ * DECLARES at the top level. "Declared" = `permissions` ∪ `deniedPermissions`: the
+ * extension must own the permission in its manifest, but it may be in the DENIED bucket
+ * — the gate decides grant-vs-deny at runtime (the default-deny model, KYB-176). A
+ * contribution requiring a permission the extension declares NOWHERE (neither granted
+ * nor denied) is the real breach, because the extension never owned it. Returns one
+ * error per breach.
+ *
+ * HOST CAPABILITIES are deliberately NOT subset-checked (DIV-8, 2026-06-30): the
+ * codebase models them as contribution-scoped — 16 of 17 first-party plugins declare
+ * host capabilities only at the contribution level, and the real host-capability
+ * invariant ("can this surface render on this host?") is checked host-side per
+ * contribution (KernelSurfaceAvailability), not as a subset of an extension-level list.
+ * `deriveExtensionHostCapabilities` exposes the union for reporting if a caller wants
+ * the extension's total host-capability footprint.
+ */
+declare function validateDefinitionCrossRefs(definition: ExtensionDefinition): string[];
+/**
+ * The extension's total host-capability footprint: the union of every contribution's
+ * `requiredHostCapabilities` plus any declared at the extension level (DIV-8). Derived,
+ * not hand-authored — so it can't drift from what the contributions actually need.
+ */
+declare function deriveExtensionHostCapabilities(definition: ExtensionDefinition): readonly HostCapabilityId[];
+
+export { defineContextualAction as $, type AnsweringPort as A, type BrainReadPort as B, type ComposerCapabilityPort as C, type DataEndpointPort as D, type ExtensionDefinition as E, type HostEventPort as F, type GatedHostPortFactory as G, type HostPort as H, type InvokablePort as I, KernelPluginRegistryEntry as J, KernelPermissionId as K, KernelRegistrySnapshot as L, PluginManifestContribution as M, NormalizedPluginExtensionContributionSet as N, PluginShipsState as O, type PortInjectionResult as P, PluginThemeTokenSet as Q, ProviderRuntimeProjectionDescriptor as R, type SeamCallContext as S, SeamPermissionDenied as T, SidecarDeclaration as U, type VerifiedPrincipal as V, WorkspaceTabContributionMetadata as W, canonicalHostCapabilities as X, defineBridge as Y, defineBridgeContribution as Z, defineComposerCapability as _, type BrainStatsView as a, defineDataEndpoint as a0, defineExtension as a1, defineProviderRuntimeProjection as a2, defineSettingsPanel as a3, defineSidecar as a4, defineSidecarContribution as a5, defineSurface as a6, defineThemeTokens as a7, deriveExtensionHostCapabilities as a8, emitExtensionContributionSet as a9, gatedHostPort as aa, hostSlots as ab, makeAgentId as ac, makeSeamCallContext as ad, requiresHostCapabilities as ae, requiresKernelPermissions as af, validateDefinitionCrossRefs as ag, validateExtensionDefinition as ah, workspaceTab as ai, type BrainHit as b, SeamResponse as c, AgentId as d, type BlockedReason as e, BridgeDeclaration as f, type ComposerDescriptor as g, type ContributionKeyInput as h, EXTENSION_HOST_SLOTS as i, type EventSourcePort as j, type ExtensionBridgeContributionDefinition as k, type ExtensionComposerCapabilityDefinition as l, type ExtensionContextualActionDefinition as m, type ExtensionContributionDefinition as n, type ExtensionDataEndpointDefinition as o, ExtensionHostSlot as p, type ExtensionRuntime as q, type ExtensionSettingsPanelDefinition as r, type ExtensionSidecarContributionDefinition as s, type ExtensionSurfaceDefinition as t, type ExtensionWorkspaceTabDefinition as u, HostCapabilityId as v, type HostCommandDescriptor as w, type HostCommandPort as x, type HostContextPort as y, type HostContextSnapshot as z };