@nextclaw/kernel 0.1.15-beta.3 → 0.1.15-beta.4

package/dist/index.js

@@ -1,6 +1,6 @@
 import { n as getUnsignedUpdateManifest, r as serializeUnsignedUpdateManifest, t as UpdateManifestReader } from "./update-manifest.types-C0qPrjGQ.js";
 import { createRequire } from "node:module";
-import { AgentRouteResolver, BUILTIN_MAIN_AGENT_ID, CONTEXT_COMPACTION_METADATA_KEY, ChannelManager, ChannelManager as ChannelManager$1, CommandRegistry, ConfigSchema, ContextBuilder, ContextCompactionService, ContextWindowBudgetService, CronService, CronTool, DEFAULT_PANELS_DIR, DEFAULT_SESSION_SEARCH_LIMIT, EditFileTool, ExecTool, GatewayTool, InputBudgetPruner, LLMProvider, ListDirTool, LiteLLMProvider, MAX_SESSION_SEARCH_LIMIT, MemoryGetTool, MemorySearchTool, MessageBus, MessageTool, ProviderRegistry, ReadFileTool, RequestedSkillsMetadataReader, SessionManager, SessionSearchManager, SkillsLoader, WebFetchTool, WebSearchTool, WriteFileTool, buildCompressingCompactionCheckpoint, buildConfigSchema, buildContextWindowSnapshot, buildMinimalSystemExecutionPrompt, buildReloadPlan, buildSessionRequestToolResult, buildToolCatalogEntries, createAssistantStreamDeltaControlMessage, createAssistantStreamResetControlMessage, createCompletedSessionRequest, createFailedSessionRequest, createRunningSessionRequest, createTypingStopControlMessage, diffConfigPaths, ensureDir, expandHome, findEffectiveAgentProfile, getConfigPath, getDataDir, getDataPath, getSessionsPath, getWorkspacePath, getWorkspacePathFromConfig, loadConfig, mergeExtensionConfigView, modelSupportsVision, normalizeInlineSecretRefs, normalizeToolParams, parseAgentScopedSessionKey, parseThinkingLevel, readCompressedContextCompactionCheckpoint, readOptionalString, readParentSessionId, readSessionProjectRoot, redactConfigObject, resolveConfigSecrets, resolveDefaultAgentProfileId, resolveProviderRuntime, resolveSessionWorkspacePath, resolveThinkingLevel, saveConfig, summarizeSessionRequestTask, toDisposable, toExtensionConfigView } from "@nextclaw/core";
+import { AgentRouteResolver, BUILTIN_MAIN_AGENT_ID, CONTEXT_COMPACTION_METADATA_KEY, ChannelManager, ChannelManager as ChannelManager$1, CommandRegistry, ConfigSchema, ContextBuilder, ContextCompactionService, ContextWindowBudgetService, CronService, CronTool, DEFAULT_PANELS_DIR, DEFAULT_SERVICE_APPS_DIR, DEFAULT_SESSION_SEARCH_LIMIT, EditFileTool, ExecTool, GatewayTool, InputBudgetPruner, LLMProvider, ListDirTool, LiteLLMProvider, MAX_SESSION_SEARCH_LIMIT, MemoryGetTool, MemorySearchTool, MessageBus, MessageTool, ProviderRegistry, ReadFileTool, RequestedSkillsMetadataReader, SessionManager, SessionSearchManager, SkillsLoader, WebFetchTool, WebSearchTool, WriteFileTool, buildCompressingCompactionCheckpoint, buildConfigSchema, buildContextWindowSnapshot, buildMinimalSystemExecutionPrompt, buildReloadPlan, buildSessionRequestToolResult, buildToolCatalogEntries, createAssistantStreamDeltaControlMessage, createAssistantStreamResetControlMessage, createCompletedSessionRequest, createFailedSessionRequest, createRunningSessionRequest, createTypingStopControlMessage, diffConfigPaths, ensureDir, expandHome, findEffectiveAgentProfile, getConfigPath, getDataDir, getDataPath, getSessionsPath, getWorkspacePath, getWorkspacePathFromConfig, loadConfig, mergeExtensionConfigView, modelSupportsVision, normalizeInlineSecretRefs, normalizeToolParams, parseAgentScopedSessionKey, parseThinkingLevel, readCompressedContextCompactionCheckpoint, readOptionalString, readParentSessionId, readSessionProjectRoot, redactConfigObject, resolveConfigSecrets, resolveDefaultAgentProfileId, resolveProviderRuntime, resolveSessionWorkspacePath, resolveThinkingLevel, saveConfig, summarizeSessionRequestTask, toDisposable, toExtensionConfigView } from "@nextclaw/core";
 import { createHash, randomUUID } from "node:crypto";
 import { appendFileSync, constants, existsSync, mkdirSync, readFileSync, readdirSync, rmSync, writeFileSync } from "node:fs";
 import { EventBus, Ingress, eventKeys, ingressKeys } from "@nextclaw/shared";
@@ -443,7 +443,7 @@ const runtimeRequire = createRequire(import.meta.url);
 function readString$7(value) {
 	return typeof value === "string" && value.trim() ? value.trim() : void 0;
 }
-function readStringArray(value) {
+function readStringArray$1(value) {
 	return Array.isArray(value) && value.every((item) => typeof item === "string") ? value : void 0;
 }
 function readStringRecord(value) {
@@ -502,7 +502,7 @@ function toManifest(value, rootDir) {
 		server: {
 			type: "stdio",
 			command,
-			...readStringArray(server.args) ? { args: readStringArray(server.args) } : {},
+			...readStringArray$1(server.args) ? { args: readStringArray$1(server.args) } : {},
 			...readStringRecord(server.env) ? { env: readStringRecord(server.env) } : {}
 		},
 		...record.contributes && typeof record.contributes === "object" && !Array.isArray(record.contributes) ? { contributes: record.contributes } : {}
@@ -603,7 +603,7 @@ function readString$6(value) {
 function readRecord$2(value) {
 	return value && typeof value === "object" && !Array.isArray(value) ? value : {};
 }
-function readRequiredString$2(value, name) {
+function readRequiredString$3(value, name) {
 	const trimmed = readString$6(value);
 	if (!trimmed) throw new Error(`${name} is required`);
 	return trimmed;
@@ -634,9 +634,9 @@ function readInboundAttachments(value) {
 function toInboundMessage(value) {
 	const payload = readRecord$2(value);
 	return {
-		channel: readRequiredString$2(payload.channelId, "channelId"),
-		chatId: readRequiredString$2(payload.conversationId, "conversationId"),
-		senderId: readRequiredString$2(payload.senderId, "senderId"),
+		channel: readRequiredString$3(payload.channelId, "channelId"),
+		chatId: readRequiredString$3(payload.conversationId, "conversationId"),
+		senderId: readRequiredString$3(payload.senderId, "senderId"),
 		content: readTextContent(payload.content),
 		timestamp: /* @__PURE__ */ new Date(),
 		attachments: readInboundAttachments(payload.attachments),
@@ -658,7 +658,7 @@ function normalizeAuthPollResult(value) {
 	if (!value) return null;
 	const record = readRecord$2(value);
 	return {
-		channel: readRequiredString$2(record.channel, "channel"),
+		channel: readRequiredString$3(record.channel, "channel"),
 		status: record.status,
 		message: readString$6(record.message),
 		nextPollMs: readOptionalNumber(record.nextPollMs),
@@ -805,7 +805,7 @@ var ExtensionRuntimeService = class {
 	};
 	handleChannelConfigGet = (envelope, context) => {
 		this.assertAuthorized(context);
-		const channelId = readRequiredString$2(readRecord$2(envelope.payload).channelId, "channelId");
+		const channelId = readRequiredString$3(readRecord$2(envelope.payload).channelId, "channelId");
 		return { config: this.options.getConfig().channels[channelId] ?? {} };
 	};
 	handleChannelMessageSubmit = async (envelope, context) => {
@@ -820,9 +820,9 @@ var ExtensionRuntimeService = class {
 	handleChannelCommandExecute = async (envelope, context) => {
 		this.assertAuthorized(context);
 		const payload = readRecord$2(envelope.payload);
-		const channel = readRequiredString$2(payload.channelId, "channelId");
-		const chatId = readRequiredString$2(payload.conversationId, "conversationId");
-		const senderId = readRequiredString$2(payload.senderId, "senderId");
+		const channel = readRequiredString$3(payload.channelId, "channelId");
+		const chatId = readRequiredString$3(payload.conversationId, "conversationId");
+		const senderId = readRequiredString$3(payload.senderId, "senderId");
 		const metadata = readRecord$2(payload.metadata);
 		const config = this.options.getConfig();
 		const registry = new CommandRegistry(config, this.options.sessionManager);
@@ -849,7 +849,7 @@ var ExtensionRuntimeService = class {
 			content: "",
 			ephemeral: true
 		};
-		return await registry.execute(readRequiredString$2(payload.commandName, "commandName"), readRecord$2(payload.args), {
+		return await registry.execute(readRequiredString$3(payload.commandName, "commandName"), readRecord$2(payload.args), {
 			channel,
 			chatId,
 			senderId,
@@ -859,7 +859,7 @@ var ExtensionRuntimeService = class {
 	handleExtensionResponse = (envelope, context) => {
 		this.assertAuthorized(context);
 		const payload = readRecord$2(envelope.payload);
-		const requestId = readRequiredString$2(payload.requestId, "requestId");
+		const requestId = readRequiredString$3(payload.requestId, "requestId");
 		const pending = this.pendingRequests.get(requestId);
 		if (!pending) return { accepted: false };
 		this.pendingRequests.delete(requestId);
@@ -1033,11 +1033,11 @@ var ExtensionManager = class {
 //#endregion
 //#region src/utils/model-message-vision.utils.ts
 const IMAGE_OMITTED_TEXT = "[Image omitted: the selected model is not configured for vision input.]";
-function isRecord$4(value) {
+function isRecord$6(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function isImageContentPart(value) {
-	if (!isRecord$4(value)) return false;
+	if (!isRecord$6(value)) return false;
 	const type = value.type;
 	return type === "image_url" || type === "input_image";
 }
@@ -1053,7 +1053,7 @@ function normalizeContentWithoutVision(content) {
 		};
 	});
 	if (!sawImage) return content;
-	const textParts = parts.filter((part) => isRecord$4(part) && part.type === "text" && typeof part.text === "string").map((part) => part.text.trim()).filter(Boolean);
+	const textParts = parts.filter((part) => isRecord$6(part) && part.type === "text" && typeof part.text === "string").map((part) => part.text.trim()).filter(Boolean);
 	if (textParts.length === parts.length) return textParts.join("\n\n");
 	return parts;
 }
@@ -2030,7 +2030,7 @@ function safeNcpSessionFilename(value) {
 function normalizeNcpAgentId(agentId) {
 	return agentId?.trim().toLowerCase() || void 0;
 }
-function isRecord$3(value) {
+function isRecord$5(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function toIsoString(value, fallback) {
@@ -2140,7 +2140,7 @@ function applyLimit(items, limit) {
 	if (!Number.isFinite(limit) || typeof limit !== "number" || limit <= 0) return items;
 	return items.slice(0, Math.trunc(limit));
 }
-function readOptionalString$5(value) {
+function readOptionalString$6(value) {
 	if (typeof value !== "string") return null;
 	const trimmed = value.trim();
 	return trimmed.length > 0 ? trimmed : null;
@@ -2176,7 +2176,7 @@ function mergeMetadataOverrides(metadata, overrides) {
 }
 function resolveSessionType(params) {
 	const { metadata, runtime, sessionType } = params;
-	return readOptionalString$5(runtime) ?? readOptionalString$5(metadata.runtime) ?? readOptionalString$5(sessionType) ?? readOptionalString$5(metadata.session_type) ?? DEFAULT_SESSION_TYPE;
+	return readOptionalString$6(runtime) ?? readOptionalString$6(metadata.runtime) ?? readOptionalString$6(sessionType) ?? readOptionalString$6(metadata.session_type) ?? DEFAULT_SESSION_TYPE;
 }
 function applySessionOverrides(params) {
 	const { lifecycle, metadata, model, parentSessionId, projectRoot, requestId, sessionType, thinkingLevel, title } = params;
@@ -2186,15 +2186,15 @@ function applySessionOverrides(params) {
 	metadata[CHILD_SESSION_LIFECYCLE_METADATA_KEY] = lifecycle;
 	if (parentSessionId) metadata[CHILD_SESSION_PARENT_METADATA_KEY] = parentSessionId;
 	if (requestId) metadata[CHILD_SESSION_REQUEST_METADATA_KEY] = requestId;
-	if (readOptionalString$5(model)) {
+	if (readOptionalString$6(model)) {
 		metadata.model = model?.trim();
 		metadata.preferred_model = model?.trim();
 	}
-	if (readOptionalString$5(thinkingLevel)) {
+	if (readOptionalString$6(thinkingLevel)) {
 		metadata.thinking = thinkingLevel?.trim();
 		metadata.preferred_thinking = thinkingLevel?.trim();
 	}
-	if (readOptionalString$5(projectRoot)) metadata.project_root = projectRoot?.trim();
+	if (readOptionalString$6(projectRoot)) metadata.project_root = projectRoot?.trim();
 }
 function isSessionSummaryRefreshEvent(event) {
 	switch (event.type) {
@@ -2217,9 +2217,9 @@ var NcpSessionManager = class {
 		const { agentId: requestedAgentId, metadataOverrides, model, parentSessionId: rawParentSessionId, projectRoot, requestId: rawRequestId, runtime, sessionId: requestedSessionId, sessionType: requestedSessionType, sourceSessionId, sourceSessionMetadata, task, thinkingLevel, title: requestedTitle } = params;
 		const sourceRecord = sourceSessionId ? await this.getSessionRecord(sourceSessionId) : null;
 		const metadata = cloneInheritedMetadata(sourceSessionMetadata);
-		const title = readOptionalString$5(requestedTitle) ?? summarizeTask(task);
-		const parentSessionId = readOptionalString$5(rawParentSessionId);
-		const requestId = readOptionalString$5(rawRequestId);
+		const title = readOptionalString$6(requestedTitle) ?? summarizeTask(task);
+		const parentSessionId = readOptionalString$6(rawParentSessionId);
+		const requestId = readOptionalString$6(rawRequestId);
 		const sessionType = resolveSessionType({
 			runtime,
 			sessionType: requestedSessionType,
@@ -2238,8 +2238,8 @@ var NcpSessionManager = class {
 		});
 		const now = (/* @__PURE__ */ new Date()).toISOString();
 		const nextMetadata = mergeMetadataOverrides(metadata, metadataOverrides);
-		const agentId = readOptionalString$5(requestedAgentId) ?? readOptionalString$5(sourceRecord?.agentId) ?? BUILTIN_MAIN_AGENT_ID;
-		const sessionId = readOptionalString$5(requestedSessionId) ?? buildSessionId();
+		const agentId = readOptionalString$6(requestedAgentId) ?? readOptionalString$6(sourceRecord?.agentId) ?? BUILTIN_MAIN_AGENT_ID;
+		const sessionId = readOptionalString$6(requestedSessionId) ?? buildSessionId();
 		const record = {
 			sessionId,
 			...agentId ? { agentId } : {},
@@ -2444,12 +2444,83 @@ var PanelAppStateStore = class {
 	isMissingFileError = (error) => typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
 };
 //#endregion
+//#region src/utils/panel-app-bridge.utils.ts
+const PANEL_APP_BRIDGE_MARKER = "nextclaw:panel-app-service-actions:request";
+function injectPanelAppBridgeScript(html) {
+	if (html.includes(PANEL_APP_BRIDGE_MARKER)) return html;
+	const script = `<script>${getPanelAppBridgeScript()}<\/script>`;
+	const headMatch = /<head(?:\s[^>]*)?>/i.exec(html);
+	if (headMatch?.index !== void 0) {
+		const insertAt = headMatch.index + headMatch[0].length;
+		return `${html.slice(0, insertAt)}${script}${html.slice(insertAt)}`;
+	}
+	return `${script}${html}`;
+}
+function getPanelAppBridgeScript() {
+	return `
+(() => {
+  const requestType = "nextclaw:panel-app-service-actions:request";
+  const responseType = "nextclaw:panel-app-service-actions:response";
+  const pending = new Map();
+  let counter = 0;
+
+  function createRequestId() {
+    counter += 1;
+    return "panel-bridge-" + Date.now().toString(36) + "-" + counter.toString(36);
+  }
+
+  function request(method, payload) {
+    const requestId = createRequestId();
+    return new Promise((resolve, reject) => {
+      pending.set(requestId, { resolve, reject });
+      window.parent.postMessage({ type: requestType, requestId, method, payload }, "*");
+    });
+  }
+
+  window.addEventListener("message", (event) => {
+    const data = event.data;
+    if (!data || data.type !== responseType || typeof data.requestId !== "string") {
+      return;
+    }
+    const entry = pending.get(data.requestId);
+    if (!entry) {
+      return;
+    }
+    pending.delete(data.requestId);
+    if (data.ok) {
+      entry.resolve(data.data);
+      return;
+    }
+    const error = new Error(data.error?.message || "NextClaw panel bridge request failed.");
+    error.code = data.error?.code;
+    error.details = data.error?.details;
+    entry.reject(error);
+  });
+
+  const existing = window.nextclaw && typeof window.nextclaw === "object" ? window.nextclaw : {};
+  Object.defineProperty(window, "nextclaw", {
+    configurable: true,
+    value: {
+      ...existing,
+      serviceActions: {
+        list: () => request("list", {}),
+        invoke: (actionId, input) => request("invoke", { actionId, input }),
+        requestGrant: (actionId) => request("requestGrant", { actionId }),
+        revokeGrant: (actionId) => request("revokeGrant", { actionId })
+      }
+    }
+  });
+})();
+`.trim();
+}
+//#endregion
 //#region src/utils/panel-app-manifest.utils.ts
 function parsePanelAppManifest(html) {
 	return {
 		...readHtmlTitle(html),
 		...readStandardIcon(html),
-		...readPanelAppMeta(html)
+		...readPanelAppMeta(html),
+		serviceActions: readPanelAppServiceActions(html)
 	};
 }
 function readPanelAppMeta(html) {
@@ -2496,6 +2567,11 @@ function readHtmlAttribute(attributes, attribute) {
 	const match = attributes.match(new RegExp(`(?:^|\\s)${attribute}\\s*=\\s*(["'])(.*?)\\1`, "i"));
 	return match?.[2] ? decodeHtmlAttribute(match[2]) : void 0;
 }
+function readPanelAppServiceActions(html) {
+	const content = readMetaContent(html, "nextclaw-panel-actions", "attribute");
+	if (!content) return [];
+	return [...new Set(content.split(/[,\s]+/).map((entry) => entry.trim()).filter(Boolean))];
+}
 function normalizeTextValue(value) {
 	return decodeHtmlAttribute(value ?? "").replace(/\s+/g, " ").trim() || void 0;
 }
@@ -2525,6 +2601,7 @@ function isPanelAppError(error) {
 	return error instanceof PanelAppError;
 }
 var PanelAppManager = class {
+	bridgeSessions = /* @__PURE__ */ new Map();
 	constructor(params) {
 		this.params = params;
 	}
@@ -2545,11 +2622,13 @@ var PanelAppManager = class {
 		try {
 			if (!(await stat(filePath)).isFile()) throw new PanelAppError("PANEL_APP_NOT_FOUND", "panel app not found");
 			const html = await readFile(filePath, "utf8");
+			const manifest = parsePanelAppManifest(html);
 			return {
 				id: this.encodePanelAppId(fileName),
 				fileName,
-				html,
-				contentType: PANEL_APP_CONTENT_TYPE
+				html: injectPanelAppBridgeScript(html),
+				contentType: PANEL_APP_CONTENT_TYPE,
+				serviceActions: manifest.serviceActions
 			};
 		} catch (error) {
 			if (isPanelAppError(error)) throw error;
@@ -2557,6 +2636,35 @@ var PanelAppManager = class {
 			throw new PanelAppError("PANEL_APP_READ_FAILED", error instanceof Error ? error.message : String(error));
 		}
 	};
+	getPanelAppBridgeScript = () => getPanelAppBridgeScript();
+	createPanelAppBridgeSession = async (params) => {
+		const content = await this.getPanelAppContent(params.id);
+		const now = /* @__PURE__ */ new Date();
+		const session = {
+			id: randomUUID(),
+			token: randomUUID(),
+			panelAppId: content.id,
+			tabId: params.tabId,
+			caller: {
+				surface: "panel-app",
+				appId: content.id
+			},
+			declaredActions: content.serviceActions,
+			createdAt: now.toISOString(),
+			expiresAt: new Date(now.getTime() + 3600 * 1e3).toISOString()
+		};
+		this.bridgeSessions.set(session.token, session);
+		return session;
+	};
+	resolvePanelAppBridgeSession = (token) => {
+		this.deleteExpiredBridgeSessions();
+		const session = this.bridgeSessions.get(token.trim());
+		if (!session) throw new PanelAppError("PANEL_APP_BRIDGE_SESSION_NOT_FOUND", "panel app bridge session not found");
+		return session;
+	};
+	deletePanelAppBridgeSession = (token) => {
+		this.bridgeSessions.delete(token.trim());
+	};
 	updatePanelAppPreferences = async (id, preferences) => {
 		const fileName = await this.resolvePanelAppFileName(id);
 		const panelsPath = this.getPanelsPath(this.getWorkspacePath());
@@ -2628,9 +2736,559 @@ var PanelAppManager = class {
 	toPanelAppTitle = (fileName) => fileName.slice(0, -11).replace(/[-_]+/g, " ").trim() || fileName;
 	comparePanelApps = (left, right) => Number(right.favorite) - Number(left.favorite) || this.compareIsoDesc(left.lastOpenedAt, right.lastOpenedAt) || this.compareIsoDesc(left.updatedAt, right.updatedAt) || left.title.localeCompare(right.title);
 	compareIsoDesc = (left, right) => new Date(right ?? 0).getTime() - new Date(left ?? 0).getTime();
+	deleteExpiredBridgeSessions = () => {
+		const now = Date.now();
+		for (const [token, session] of this.bridgeSessions) if (new Date(session.expiresAt).getTime() <= now) this.bridgeSessions.delete(token);
+	};
 	isMissingFileError = (error) => typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
 };
 //#endregion
+//#region src/utils/service-action.utils.ts
+const DEFAULT_SERVICE_ACTION_RISK = "dangerous";
+function buildServiceActionId(appId, actionName) {
+	return `${appId}.${actionName}`;
+}
+function getServiceActionName(actionId, appId) {
+	const prefix = `${appId}.`;
+	if (!actionId.startsWith(prefix)) throw new Error("service action does not belong to service app.");
+	const name = actionId.slice(prefix.length).trim();
+	if (!name) throw new Error("service action name is required.");
+	return name;
+}
+function getServiceActionCallerKey(caller) {
+	return `${caller.surface}:${caller.appId}`;
+}
+function parseServiceActionCallerKey(key) {
+	const [surface, appId, ...rest] = key.split(":");
+	if (surface !== "panel-app" || !appId || rest.length > 0) return null;
+	return {
+		surface,
+		appId
+	};
+}
+function resolveServiceActionGrantState({ actionId, declaredActions, granted }) {
+	if (declaredActions && !declaredActions.includes(actionId)) return "not-declared";
+	return granted ? "granted" : "not-granted";
+}
+//#endregion
+//#region src/services/mcp-service-app-runtime.service.ts
+var McpServiceAppRuntimeService = class {
+	lifecycleManager;
+	states = /* @__PURE__ */ new Map();
+	constructor(params) {
+		this.params = params;
+		this.lifecycleManager = new McpServerLifecycleManager({ getConfig: params.getConfig });
+	}
+	getStatus = (appId) => {
+		return this.states.get(appId) ?? { status: "idle" };
+	};
+	listActions = async ({ app, manifest }) => {
+		if (!app.enabled) return [];
+		const lastStartedAt = (/* @__PURE__ */ new Date()).toISOString();
+		this.states.set(app.id, {
+			status: "starting",
+			lastStartedAt
+		});
+		try {
+			const state = await this.lifecycleManager.warmServer(this.toMcpServerRecord(app, manifest));
+			this.states.set(app.id, {
+				status: "running",
+				lastStartedAt,
+				lastReadyAt: state.lastReadyAt
+			});
+			return state.tools.map((tool) => this.toServiceAction(manifest, tool));
+		} catch (error) {
+			const lastError = error instanceof Error ? error.message : String(error);
+			this.states.set(app.id, {
+				status: "failed",
+				lastError,
+				lastStartedAt,
+				lastFailedAt: (/* @__PURE__ */ new Date()).toISOString()
+			});
+			return [];
+		}
+	};
+	invokeAction = async ({ app, manifest, actionName, input }) => {
+		const lastStartedAt = (/* @__PURE__ */ new Date()).toISOString();
+		this.states.set(app.id, {
+			status: "starting",
+			lastStartedAt
+		});
+		try {
+			const result = await this.lifecycleManager.callTool(this.toMcpServerRecord(app, manifest), actionName, input);
+			this.states.set(app.id, {
+				status: "running",
+				lastStartedAt,
+				lastReadyAt: (/* @__PURE__ */ new Date()).toISOString()
+			});
+			return result;
+		} catch (error) {
+			const lastError = error instanceof Error ? error.message : String(error);
+			this.states.set(app.id, {
+				status: "failed",
+				lastError,
+				lastStartedAt,
+				lastFailedAt: (/* @__PURE__ */ new Date()).toISOString()
+			});
+			throw error;
+		}
+	};
+	restart = async (appId) => {
+		await this.lifecycleManager.closeServer(appId);
+		this.states.set(appId, { status: "idle" });
+	};
+	dispose = async () => {
+		await this.lifecycleManager.closeAll();
+		this.states.clear();
+	};
+	toMcpServerRecord = (app, manifest) => ({
+		name: app.id,
+		definition: {
+			enabled: manifest.enabled,
+			transport: {
+				type: "stdio",
+				command: manifest.command,
+				args: manifest.args,
+				cwd: app.dirPath,
+				env: {},
+				stderr: "pipe"
+			},
+			scope: {
+				allAgents: false,
+				agents: []
+			},
+			policy: {
+				trust: "explicit",
+				start: "eager"
+			}
+		}
+	});
+	toServiceAction = (manifest, tool) => {
+		const actionId = buildServiceActionId(manifest.id, tool.toolName);
+		const manifestAction = manifest.actions[tool.toolName];
+		const risk = manifestAction?.risk ?? "dangerous";
+		return {
+			id: actionId,
+			appId: manifest.id,
+			name: tool.toolName,
+			title: manifestAction?.title ?? tool.toolName,
+			description: manifestAction?.description ?? tool.description,
+			inputSchema: tool.parameters,
+			risk
+		};
+	};
+};
+//#endregion
+//#region src/stores/service-action-grant.store.ts
+const EMPTY_GRANTS = {
+	version: 1,
+	grants: {}
+};
+var ServiceActionGrantStore = class {
+	constructor(storePath) {
+		this.storePath = storePath;
+	}
+	isGranted = async (caller, actionId) => {
+		const data = await this.load();
+		return Boolean(data.grants[getServiceActionCallerKey(caller)]?.actions[actionId]);
+	};
+	grant = async ({ actionId, caller, grantedAt, risk }) => {
+		const data = await this.load();
+		const callerKey = getServiceActionCallerKey(caller);
+		const callerGrants = data.grants[callerKey] ?? { actions: {} };
+		callerGrants.actions[actionId] = {
+			grantedAt,
+			risk
+		};
+		data.grants[callerKey] = callerGrants;
+		await this.save(data);
+		return {
+			caller,
+			actionId,
+			risk,
+			grantedAt
+		};
+	};
+	list = async () => {
+		const data = await this.load();
+		return Object.entries(data.grants).flatMap(([callerKey, callerGrants]) => {
+			const caller = parseServiceActionCallerKey(callerKey);
+			if (!caller) return [];
+			return Object.entries(callerGrants.actions).map(([actionId, grant]) => ({
+				caller,
+				actionId,
+				risk: grant.risk,
+				grantedAt: grant.grantedAt
+			}));
+		}).sort((left, right) => new Date(right.grantedAt).getTime() - new Date(left.grantedAt).getTime());
+	};
+	revoke = async (caller, actionId) => {
+		const data = await this.load();
+		const callerKey = getServiceActionCallerKey(caller);
+		const callerGrants = data.grants[callerKey];
+		if (!callerGrants) return;
+		delete callerGrants.actions[actionId];
+		if (Object.keys(callerGrants.actions).length === 0) delete data.grants[callerKey];
+		await this.save(data);
+	};
+	load = async () => {
+		try {
+			return normalizeStoreData(JSON.parse(await readFile(this.storePath, "utf8")));
+		} catch (error) {
+			if (isMissingFileError(error)) return structuredClone(EMPTY_GRANTS);
+			throw error;
+		}
+	};
+	save = async (data) => {
+		await mkdir(dirname(this.storePath), { recursive: true });
+		await writeFile(this.storePath, `${JSON.stringify(data, null, 2)}\n`, "utf8");
+	};
+};
+function normalizeStoreData(value) {
+	if (!isRecord$4(value) || value.version !== 1 || !isRecord$4(value.grants)) return structuredClone(EMPTY_GRANTS);
+	const grants = {};
+	for (const [callerKey, callerValue] of Object.entries(value.grants)) {
+		if (!isRecord$4(callerValue) || !isRecord$4(callerValue.actions)) continue;
+		const actions = {};
+		for (const [actionId, actionValue] of Object.entries(callerValue.actions)) if (isRecord$4(actionValue) && typeof actionValue.grantedAt === "string" && isServiceActionRisk(actionValue.risk)) actions[actionId] = {
+			grantedAt: actionValue.grantedAt,
+			risk: actionValue.risk
+		};
+		grants[callerKey] = { actions };
+	}
+	return {
+		version: 1,
+		grants
+	};
+}
+function isServiceActionRisk(value) {
+	return value === "read" || value === "write" || value === "external" || value === "dangerous";
+}
+function isRecord$4(value) {
+	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function isMissingFileError(error) {
+	return isRecord$4(error) && error.code === "ENOENT";
+}
+//#endregion
+//#region src/utils/service-app-manifest.utils.ts
+const SERVICE_APP_ID_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+const SERVICE_ACTION_RISKS = new Set([
+	"read",
+	"write",
+	"external",
+	"dangerous"
+]);
+const SERVICE_APP_MANIFEST_FILE_NAME = "service-app.json";
+function getServiceAppManifestPath(dirPath) {
+	return join(dirPath, SERVICE_APP_MANIFEST_FILE_NAME);
+}
+async function readServiceAppManifest(dirPath) {
+	return parseServiceAppManifest(await readFile(getServiceAppManifestPath(dirPath), "utf8"));
+}
+function parseServiceAppManifest(raw) {
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch (error) {
+		throw new Error(`service-app.json is not valid JSON: ${error instanceof Error ? error.message : String(error)}`);
+	}
+	if (!isRecord$3(parsed)) throw new Error("service-app.json must contain an object.");
+	const id = readRequiredString$2(parsed, "id");
+	if (!SERVICE_APP_ID_PATTERN.test(id)) throw new Error("service app id must be kebab-case.");
+	const protocol = readOptionalString$5(parsed, "protocol") ?? "mcp";
+	if (protocol !== "mcp") throw new Error("service app protocol must be mcp.");
+	return {
+		id,
+		title: readRequiredString$2(parsed, "title"),
+		description: readOptionalString$5(parsed, "description"),
+		enabled: readOptionalBoolean$1(parsed, "enabled") ?? true,
+		protocol,
+		command: readRequiredString$2(parsed, "command"),
+		args: readStringArray(parsed.args, "args"),
+		actions: readManifestActions(parsed.actions)
+	};
+}
+function readManifestActions(value) {
+	if (value === void 0) throw new Error("service app actions are required.");
+	if (!isRecord$3(value)) throw new Error("service app actions must be an object.");
+	if (Object.keys(value).length === 0) throw new Error("service app actions cannot be empty.");
+	const actions = {};
+	for (const [name, action] of Object.entries(value)) {
+		if (!name.trim()) throw new Error("service app action name cannot be empty.");
+		if (!isRecord$3(action)) throw new Error(`service app action ${name} must be an object.`);
+		const risk = readOptionalString$5(action, "risk");
+		if (risk !== void 0 && !SERVICE_ACTION_RISKS.has(risk)) throw new Error(`service app action ${name} has invalid risk.`);
+		const inputSchema = action.inputSchema;
+		if (inputSchema !== void 0 && !isRecord$3(inputSchema)) throw new Error(`service app action ${name} inputSchema must be an object.`);
+		actions[name] = {
+			risk,
+			title: readOptionalString$5(action, "title"),
+			description: readOptionalString$5(action, "description"),
+			inputSchema
+		};
+	}
+	return actions;
+}
+function readRequiredString$2(record, key) {
+	const value = readOptionalString$5(record, key);
+	if (!value) throw new Error(`service app ${key} is required.`);
+	return value;
+}
+function readOptionalString$5(record, key) {
+	return typeof record[key] === "string" && record[key].trim() ? record[key].trim() : void 0;
+}
+function readOptionalBoolean$1(record, key) {
+	if (record[key] === void 0) return;
+	if (typeof record[key] !== "boolean") throw new Error(`service app ${key} must be boolean.`);
+	return record[key];
+}
+function readStringArray(value, key) {
+	if (value === void 0) return [];
+	if (!Array.isArray(value) || value.some((entry) => typeof entry !== "string")) throw new Error(`service app ${key} must be a string array.`);
+	return value;
+}
+function isRecord$3(value) {
+	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+//#endregion
+//#region src/managers/service-app.manager.ts
+const SERVICE_ACTION_GRANTS_FILE_NAME = ".service-action-grants.json";
+var ServiceAppError = class extends Error {
+	constructor(code, message) {
+		super(message);
+		this.code = code;
+		this.name = "ServiceAppError";
+	}
+};
+function isServiceAppError(error) {
+	return error instanceof ServiceAppError;
+}
+var ServiceAppManager = class {
+	runtimeService;
+	constructor(params) {
+		this.params = params;
+		this.runtimeService = params.runtimeService ?? new McpServiceAppRuntimeService({ getConfig: () => params.configManager.config });
+	}
+	listServiceApps = async () => {
+		const workspacePath = this.getWorkspacePath();
+		const serviceAppsPath = this.getServiceAppsPath(workspacePath);
+		const dirNames = await this.listServiceAppDirNames(serviceAppsPath);
+		return {
+			workspacePath,
+			serviceAppsPath,
+			entries: (await Promise.all(dirNames.map((dirName) => this.buildServiceAppRecord(serviceAppsPath, dirName)))).filter((entry) => Boolean(entry)).sort((left, right) => left.title.localeCompare(right.title))
+		};
+	};
+	getServiceApp = async (appId) => {
+		const { record } = await this.requireServiceApp(appId);
+		return record;
+	};
+	listServiceActions = async (params = {}) => {
+		const actions = (params.appId ? [await this.requireServiceApp(params.appId)] : await this.listValidServiceApps()).flatMap(({ manifest, record }) => this.listManifestActions(record, manifest));
+		return await Promise.all(actions.map(async (action) => await this.withGrantState(action, params)));
+	};
+	discoverServiceAppActions = async (appId) => {
+		const { manifest, record } = await this.requireServiceApp(appId);
+		const runtimeActions = await this.runtimeService.listActions({
+			app: record,
+			manifest
+		});
+		return this.mergeRuntimeActions(record, manifest, runtimeActions);
+	};
+	invokeServiceAction = async (actionId, request) => {
+		this.assertCaller(request.caller);
+		this.assertDeclaredAction(actionId, request.declaredActions);
+		const { manifest, record } = await this.requireServiceAppForAction(actionId);
+		const actionName = getServiceActionName(actionId, record.id);
+		if (!Object.hasOwn(manifest.actions, actionName)) throw new ServiceAppError("SERVICE_APP_ACTION_NOT_FOUND", "service action not found");
+		if (!await this.createGrantStore().isGranted(request.caller, actionId)) throw new ServiceAppError("AUTHORIZATION_REQUIRED", `This panel app needs permission to call ${actionId}.`);
+		return {
+			actionId,
+			result: await this.runtimeService.invokeAction({
+				app: record,
+				manifest,
+				actionName,
+				input: request.input ?? {}
+			})
+		};
+	};
+	grantServiceAction = async (actionId, request) => {
+		this.assertCaller(request.caller);
+		this.assertDeclaredAction(actionId, request.declaredActions);
+		const action = await this.requireServiceAction(actionId);
+		return await this.createGrantStore().grant({
+			caller: request.caller,
+			actionId,
+			risk: action.risk,
+			grantedAt: (/* @__PURE__ */ new Date()).toISOString()
+		});
+	};
+	listServiceActionGrants = async () => {
+		return await this.createGrantStore().list();
+	};
+	revokeServiceAction = async (caller, actionId) => {
+		this.assertCaller(caller);
+		await this.createGrantStore().revoke(caller, actionId);
+	};
+	restartServiceApp = async (appId) => {
+		const { record } = await this.requireServiceApp(appId);
+		await this.runtimeService.restart(record.id);
+		return await this.getServiceApp(appId);
+	};
+	dispose = async () => {
+		await this.runtimeService.dispose();
+	};
+	withGrantState = async (action, params) => {
+		if (!params.caller) return action;
+		const granted = await this.createGrantStore().isGranted(params.caller, action.id);
+		return {
+			...action,
+			grantState: resolveServiceActionGrantState({
+				actionId: action.id,
+				declaredActions: params.declaredActions,
+				granted
+			})
+		};
+	};
+	requireServiceAction = async (actionId) => {
+		const { manifest, record } = await this.requireServiceAppForAction(actionId);
+		const action = this.listManifestActions(record, manifest).find((entry) => entry.id === actionId);
+		if (!action) throw new ServiceAppError("SERVICE_APP_ACTION_NOT_FOUND", "service action not found");
+		return action;
+	};
+	requireServiceAppForAction = async (actionId) => {
+		const appId = actionId.split(".")[0]?.trim();
+		if (!appId) throw new ServiceAppError("SERVICE_APP_INVALID_ACTION", "service action id is invalid");
+		return await this.requireServiceApp(appId);
+	};
+	listManifestActions = (record, manifest) => {
+		if (!record.enabled) return [];
+		return Object.entries(manifest.actions).map(([name, action]) => ({
+			id: buildServiceActionId(record.id, name),
+			appId: record.id,
+			name,
+			title: action.title ?? name,
+			description: action.description,
+			inputSchema: action.inputSchema,
+			risk: action.risk ?? "dangerous"
+		})).sort((left, right) => left.id.localeCompare(right.id));
+	};
+	mergeRuntimeActions = (record, manifest, runtimeActions) => {
+		const runtimeByName = new Map(runtimeActions.map((action) => [action.name, action]));
+		const declared = this.listManifestActions(record, manifest).map((action) => {
+			const runtimeAction = runtimeByName.get(action.name);
+			return {
+				...action,
+				description: runtimeAction?.description ?? action.description,
+				inputSchema: runtimeAction?.inputSchema ?? action.inputSchema,
+				runtimeState: runtimeAction ? "matched" : "missing"
+			};
+		});
+		const undeclared = runtimeActions.filter((action) => !Object.hasOwn(manifest.actions, action.name)).map((action) => ({
+			...action,
+			risk: DEFAULT_SERVICE_ACTION_RISK,
+			runtimeState: "undeclared"
+		}));
+		return [...declared, ...undeclared].sort((left, right) => left.id.localeCompare(right.id));
+	};
+	requireServiceApp = async (appId) => {
+		const dirPath = join(this.getServiceAppsPath(this.getWorkspacePath()), appId);
+		try {
+			if (!(await stat(dirPath)).isDirectory()) throw new ServiceAppError("SERVICE_APP_NOT_FOUND", "service app not found");
+			const manifest = await readServiceAppManifest(dirPath);
+			if (manifest.id !== appId) throw new ServiceAppError("SERVICE_APP_INVALID_MANIFEST", "service app manifest id must match directory name");
+			return {
+				manifest,
+				record: this.toServiceAppRecord(dirPath, manifest)
+			};
+		} catch (error) {
+			if (isServiceAppError(error)) throw error;
+			if (this.isMissingFileError(error)) throw new ServiceAppError("SERVICE_APP_NOT_FOUND", "service app not found");
+			throw new ServiceAppError("SERVICE_APP_READ_FAILED", error instanceof Error ? error.message : String(error));
+		}
+	};
+	listValidServiceApps = async () => {
+		const workspacePath = this.getWorkspacePath();
+		const serviceAppsPath = this.getServiceAppsPath(workspacePath);
+		const dirNames = await this.listServiceAppDirNames(serviceAppsPath);
+		return (await Promise.all(dirNames.map(async (dirName) => {
+			const dirPath = join(serviceAppsPath, dirName);
+			try {
+				const manifest = await readServiceAppManifest(dirPath);
+				return {
+					manifest,
+					record: this.toServiceAppRecord(dirPath, manifest)
+				};
+			} catch {
+				return null;
+			}
+		}))).filter((entry) => Boolean(entry));
+	};
+	buildServiceAppRecord = async (serviceAppsPath, dirName) => {
+		const dirPath = join(serviceAppsPath, dirName);
+		try {
+			const manifest = await readServiceAppManifest(dirPath);
+			return this.toServiceAppRecord(dirPath, manifest);
+		} catch (error) {
+			if (this.isMissingFileError(error)) return null;
+			return {
+				id: dirName,
+				title: toTitle(dirName),
+				dirPath,
+				manifestPath: getServiceAppManifestPath(dirPath),
+				cwd: dirPath,
+				enabled: false,
+				protocol: "mcp",
+				status: "failed",
+				lastError: error instanceof Error ? error.message : String(error)
+			};
+		}
+	};
+	toServiceAppRecord = (dirPath, manifest) => {
+		const runtimeStatus = this.runtimeService.getStatus(manifest.id);
+		const record = {
+			id: manifest.id,
+			title: manifest.title,
+			dirPath,
+			manifestPath: getServiceAppManifestPath(dirPath),
+			command: manifest.command,
+			args: manifest.args,
+			cwd: dirPath,
+			enabled: manifest.enabled,
+			protocol: manifest.protocol,
+			status: manifest.enabled ? runtimeStatus.status : "stopped"
+		};
+		if (manifest.description) record.description = manifest.description;
+		if (runtimeStatus.lastError) record.lastError = runtimeStatus.lastError;
+		if (runtimeStatus.lastStartedAt) record.lastStartedAt = runtimeStatus.lastStartedAt;
+		if (runtimeStatus.lastReadyAt) record.lastReadyAt = runtimeStatus.lastReadyAt;
+		if (runtimeStatus.lastFailedAt) record.lastFailedAt = runtimeStatus.lastFailedAt;
+		return record;
+	};
+	assertCaller = (caller) => {
+		if (caller.surface !== "panel-app" || !caller.appId.trim()) throw new ServiceAppError("SERVICE_APP_INVALID_CALLER", "service action caller is invalid");
+	};
+	assertDeclaredAction = (actionId, declaredActions) => {
+		if (!declaredActions.includes(actionId)) throw new ServiceAppError("SERVICE_APP_ACTION_NOT_DECLARED", "panel app did not declare this service action");
+	};
+	getWorkspacePath = () => getWorkspacePathFromConfig(this.params.configManager.config);
+	getServiceAppsPath = (workspacePath) => join(workspacePath, DEFAULT_SERVICE_APPS_DIR);
+	createGrantStore = () => new ServiceActionGrantStore(join(this.getServiceAppsPath(this.getWorkspacePath()), SERVICE_ACTION_GRANTS_FILE_NAME));
+	listServiceAppDirNames = async (serviceAppsPath) => {
+		try {
+			return (await readdir(serviceAppsPath, { withFileTypes: true })).filter((entry) => entry.isDirectory() && !entry.name.startsWith(".")).map((entry) => entry.name);
+		} catch (error) {
+			if (this.isMissingFileError(error)) return [];
+			throw new ServiceAppError("SERVICE_APP_READ_FAILED", error instanceof Error ? error.message : String(error));
+		}
+	};
+	isMissingFileError = (error) => Boolean(error) && typeof error === "object" && error.code === "ENOENT";
+};
+function toTitle(value) {
+	return basename(value).replace(/[-_]+/g, " ").trim() || value;
+}
+//#endregion
 //#region src/utils/skill-frontmatter.utils.ts
 function parseSkillFrontmatter(raw) {
 	const frontmatter = parseFrontmatterBlock(raw);
@@ -2838,7 +3496,7 @@ var NcpAgentSessionMetadataStore = class {
 	read = async (sessionId, activitySnapshot) => {
 		try {
 			const parsed = JSON.parse(await readFile(this.metadataPath(sessionId), "utf-8"));
-			if (!isRecord$3(parsed) || parsed._type !== "metadata" || !isRecord$3(parsed.metadata)) throw new Error(`invalid ncp agent session metadata sidecar: ${sessionId}`);
+			if (!isRecord$5(parsed) || parsed._type !== "metadata" || !isRecord$5(parsed.metadata)) throw new Error(`invalid ncp agent session metadata sidecar: ${sessionId}`);
 			const createdAt = toIsoString(parsed.created_at, activitySnapshot.createdAt);
 			const agentId = normalizeNcpAgentId(typeof parsed.agent_id === "string" ? parsed.agent_id : void 0);
 			return {
@@ -2939,7 +3597,7 @@ var NcpAgentSessionSummaryIndexStore = class {
 function serializeJournalEntry(entry) {
 	const serialized = JSON.stringify(entry);
 	if (!serialized) throw new Error("ncp agent session journal entry serialization produced empty output");
-	if (!isRecord$3(JSON.parse(serialized))) throw new Error("ncp agent session journal entry serialization produced a non-object entry");
+	if (!isRecord$5(JSON.parse(serialized))) throw new Error("ncp agent session journal entry serialization produced a non-object entry");
 	return serialized;
 }
 var NcpAgentSessionJournalStore = class {
@@ -3155,15 +3813,15 @@ var NcpAgentSessionJournalStore = class {
 				console.warn(`[ncp-agent-session-journal] skipped corrupted journal line ${index + 1}: ${error instanceof Error ? error.message : String(error)}`);
 				continue;
 			}
-			if (!isRecord$3(parsed)) continue;
+			if (!isRecord$5(parsed)) continue;
 			if (parsed._type === "metadata") {
-				metadata = isRecord$3(parsed.metadata) ? structuredClone(parsed.metadata) : {};
+				metadata = isRecord$5(parsed.metadata) ? structuredClone(parsed.metadata) : {};
 				agentId = normalizeNcpAgentId(typeof parsed.agent_id === "string" ? parsed.agent_id : void 0);
 				createdAt = toIsoString(parsed.created_at, createdAt);
 				updatedAt = toIsoString(parsed.updated_at, updatedAt);
 				continue;
 			}
-			if (parsed._type === "event" && isRecord$3(parsed.event)) {
+			if (parsed._type === "event" && isRecord$5(parsed.event)) {
 				const seq = Number(parsed.seq);
 				nextSeq = Math.max(nextSeq, Number.isFinite(seq) ? Math.trunc(seq) + 1 : nextSeq);
 				updatedAt = toIsoString(parsed.timestamp, updatedAt);
@@ -6661,6 +7319,7 @@ var NextclawKernel = class {
 	mcpManager;
 	ncpSessionManager;
 	panelAppManager;
+	serviceAppManager;
 	extensions;
 	ncpAgentSessionJournalStore;
 	kernelBranch;
@@ -6689,6 +7348,7 @@ var NextclawKernel = class {
 			providerManager: this.llmProviders
 		});
 		this.panelAppManager = new PanelAppManager({ configManager: this.configManager });
+		this.serviceAppManager = new ServiceAppManager({ configManager: this.configManager });
 		this.extensions = new ExtensionManager({
 			configManager: this.configManager,
 			eventBus: this.eventBus,
@@ -6740,6 +7400,7 @@ var NextclawKernel = class {
 		for (const contribution of [...this.contributions].reverse()) await contribution.dispose();
 		this.ncpSessionManager.dispose();
 		await this.mcpManager.dispose();
+		await this.serviceAppManager.dispose();
 		await this.sessionSearch.dispose();
 	};
 };
@@ -7225,6 +7886,6 @@ function resolveLegacyEventType(message) {
 	return `message.${role || "other"}`;
 }
 //#endregion
-export { AgentManager, AgentRunClient, AgentRuntimeRegistry, AutomationManager, BuiltinNarpRuntimeProviderService, CONTEXT_COMPACTION_TIMELINE_KIND, ChannelManager, ConfigManager, ContextCompactionPreflightService, ContextWindowPreviewManager, DEFAULT_AGENT_RUNTIME_ENTRY_ID, ExtensionManager, GatewayInboundProcessor, LlmProviderManager, LlmUsageManager, LlmUsageStore, McpManager, NARP_HTTP_RUNTIME_KIND, NARP_STDIO_RUNTIME_KIND, NEXTCLAW_TIMELINE_KIND_METADATA_KEY, NcpAgentSessionJournalStore, NcpSessionManager, NextclawKernel, PanelAppError, PanelAppManager, ProviderManagerNcpLLMApi, SessionRequestManager, SkillManager, UpdateManifestReader, buildAgentRunSendPayload, buildContextCompactionTimelineNcpMessage, buildLlmUsageSummary, buildLocalizedTextMap, buildSessionOrchestrationSection, createAgentRuntimeSessionRequestDispatcher, createAssetTools, createContextWindowSignature, createLlmUsageRecord, dispatchAgentRuntimeSessionRequest, dispatchChannelReplyRoute, dispatchPromptOverNcp, getUnsignedUpdateManifest, hasLlmUsageTelemetry, isContextCompactionTimelineMessage, isContextWindowSnapshot, isPanelAppError, isReplyCapableChannel, listExtensionChannelIds, normalizeAgentRuntimeSessionTypeIcon, normalizeLlmUsageModel, normalizeOptionalString, parseSkillFrontmatter, projectNcpMessagesWithContextCompaction, readContextWindowEventSessionId, readLearningLoopRuntimeConfig, readMetadataModel, readMetadataThinking, resolveAgentRuntimeEntries, resolveChannelReplyRoute, resolveEffectiveModel, resolveLegacyEventType, resolveNextclawNcpRunContext, resolveSessionChannelContext, runGatewayInboundLoop, sanitizeLlmUsage, serializeUnsignedUpdateManifest, shouldRefreshContextWindowDuringStream, shouldRefreshContextWindowImmediately, stripSkillFrontmatter, syncSessionThinkingPreference, toNcpMessages, upsertContextCompactionTimelineMessage, waitForAgentRuntimeSessionReply };
+export { AgentManager, AgentRunClient, AgentRuntimeRegistry, AutomationManager, BuiltinNarpRuntimeProviderService, CONTEXT_COMPACTION_TIMELINE_KIND, ChannelManager, ConfigManager, ContextCompactionPreflightService, ContextWindowPreviewManager, DEFAULT_AGENT_RUNTIME_ENTRY_ID, ExtensionManager, GatewayInboundProcessor, LlmProviderManager, LlmUsageManager, LlmUsageStore, McpManager, NARP_HTTP_RUNTIME_KIND, NARP_STDIO_RUNTIME_KIND, NEXTCLAW_TIMELINE_KIND_METADATA_KEY, NcpAgentSessionJournalStore, NcpSessionManager, NextclawKernel, PanelAppError, PanelAppManager, ProviderManagerNcpLLMApi, ServiceAppError, ServiceAppManager, SessionRequestManager, SkillManager, UpdateManifestReader, buildAgentRunSendPayload, buildContextCompactionTimelineNcpMessage, buildLlmUsageSummary, buildLocalizedTextMap, buildSessionOrchestrationSection, createAgentRuntimeSessionRequestDispatcher, createAssetTools, createContextWindowSignature, createLlmUsageRecord, dispatchAgentRuntimeSessionRequest, dispatchChannelReplyRoute, dispatchPromptOverNcp, getUnsignedUpdateManifest, hasLlmUsageTelemetry, isContextCompactionTimelineMessage, isContextWindowSnapshot, isPanelAppError, isReplyCapableChannel, isServiceAppError, listExtensionChannelIds, normalizeAgentRuntimeSessionTypeIcon, normalizeLlmUsageModel, normalizeOptionalString, parseSkillFrontmatter, projectNcpMessagesWithContextCompaction, readContextWindowEventSessionId, readLearningLoopRuntimeConfig, readMetadataModel, readMetadataThinking, resolveAgentRuntimeEntries, resolveChannelReplyRoute, resolveEffectiveModel, resolveLegacyEventType, resolveNextclawNcpRunContext, resolveSessionChannelContext, runGatewayInboundLoop, sanitizeLlmUsage, serializeUnsignedUpdateManifest, shouldRefreshContextWindowDuringStream, shouldRefreshContextWindowImmediately, stripSkillFrontmatter, syncSessionThinkingPreference, toNcpMessages, upsertContextCompactionTimelineMessage, waitForAgentRuntimeSessionReply };
 
 //# sourceMappingURL=index.js.map