@nextclaw/kernel 0.10.2 → 0.11.0

package/dist/index.d.ts

@@ -1,9 +1,9 @@
 import { AUTOMATIC_UPDATE_CHECK_INTERVAL_MS, getAutomaticUpdateCheckDelay, resolveAutomaticUpdateCheckIntervalMs } from "./utils/automatic-update-check.utils.js";
 import { a as getUnsignedUpdateManifest, c as UpdateBlockReason, d as UpdateStatus, i as UpdateManifestReader, l as UpdateProgress, n as UpdateHostKind, o as serializeUnsignedUpdateManifest, r as UpdateManifest, s as InstallationKind, t as UnsignedUpdateManifest, u as UpdateSnapshot } from "./update-manifest.types-CQpbURTE.js";
-import { BaseChannel, Config, ContextCompactionCheckpoint, ContextCompactionPhase, ContextCompactionPlan, ContextWindowSnapshot, CreateAgentProfileInput, CreateSessionContextInheritanceInput, CreateSessionInput, CreatedSession, CronService, DiagnosticRuntime, EffectiveAgentProfile, ExtensionChannelBinding, ExtensionDiagnostic, ExtensionRegistry, ExtensionUiMetadata, GatewayController, InboundAttachment, InboundMessage, LLMProvider, LLMResponse, LLMResponse as LLMResponse$1, LLMStreamEvent, LLMStreamEvent as LLMStreamEvent$1, McpServerDefinition, McpServerDefinition as McpServerDefinition$1, MessageBus, ModelThinkingCapability, OutboundMessage, ProviderCatalogPlugin, ProviderCatalogPlugin as ProviderCatalogPlugin$1, ProviderModelDiscoveryResult, ProviderSpec, ProviderSpec as ProviderSpec$1, RequestSessionParams, RequestedSkillsMetadataReader, SearchConfig, SessionMessage, SessionRequestDispatcher, SessionRequestRecord, SessionRequestToolResult, SessionSearchService, SkillInfo, SkillInfo as SkillInfo$1, SkillScope, SpawnSessionAndRequestParams, ThinkingLevel, UpdateAgentProfileInput, buildCompressingCompactionCheckpoint, resolveThinkingLevel } from "@nextclaw/core";
+import { BaseChannel, Config, ContextCompactionCheckpoint, ContextCompactionPhase, ContextCompactionPlan, ContextWindowSnapshot, CreateAgentProfileInput, CreateSessionContextInheritanceInput, CreateSessionInput, CreatedSession, CronService, DiagnosticRuntime, EffectiveAgentProfile, ExtensionChannelBinding, ExtensionDiagnostic, ExtensionRegistry, ExtensionUiMetadata, GatewayController, InboundAttachment, InboundMessage, LLMProvider, LLMResponse, LLMResponse as LLMResponse$1, LLMStreamEvent, LLMStreamEvent as LLMStreamEvent$1, LocalExecutionClaimService, McpServerDefinition, McpServerDefinition as McpServerDefinition$1, MessageBus, ModelThinkingCapability, OutboundMessage, ProviderCatalogPlugin, ProviderCatalogPlugin as ProviderCatalogPlugin$1, ProviderModelDiscoveryResult, ProviderSpec, ProviderSpec as ProviderSpec$1, RequestSessionParams, RequestedSkillsMetadataReader, SearchConfig, SessionMessage, SessionRequestDispatcher, SessionRequestRecord, SessionRequestToolResult, SessionSearchService, SkillInfo, SkillInfo as SkillInfo$1, SkillScope, SpawnSessionAndRequestParams, ThinkingLevel, UpdateAgentProfileInput, buildCompressingCompactionCheckpoint, resolveThinkingLevel } from "@nextclaw/core";
 import { ListMessagesOptions, ListSessionsOptions, NcpAgentConversationStateManager, NcpAgentRuntime, NcpContextTail, NcpEndpointEvent, NcpEndpointEvent as NcpEndpointEvent$1, NcpEventType, NcpInputDelivery, NcpJsonValue, NcpLLMApi, NcpLLMApiInput, NcpLLMApiOptions, NcpMessage, NcpMessage as NcpMessage$1, NcpMessagePart, NcpResolvedInputDelivery, NcpRunHandle, NcpRunTriggerInput, NcpSessionApi, NcpSessionMessagePageInfo, NcpSessionPatch, NcpSessionSummary, NcpTool, NcpTool as NcpTool$1, OpenAIChatChunk, OpenAIChatMessage } from "@nextclaw/ncp";
-import { AgentRunSendIngressPayload, AppEventEmitOptions, AppEventEnvelope, AppEventHandler, AppEventKey, Contribution as Contribution$1, Disposer, Disposer as Disposer$1, EventBus, EventBus as EventBus$1, EventBusOptions, InboxDelivery, InboxDeliveryContentType, InboxDeliveryListView, InboxDeliverySource, InboxDeliveryStateAction, Ingress, Ingress as Ingress$1, IngressContext, IngressEnvelope, IngressHandler, Key, RuntimeModelSelectionMode, SystemObjectReferenceGroupDescriptor, SystemObjectReferenceItem, SystemObjectReferenceListView, SystemObjectResolvedReference, TypedKey, Unsubscribe, Unsubscribe as Unsubscribe$1, createTypedKey, eventKeys, ingressKeys } from "@nextclaw/shared";
 import { LocalAssetStore } from "@nextclaw/ncp-agent-runtime";
+import { AgentRunSendIngressPayload, AppEventEmitOptions, AppEventEnvelope, AppEventHandler, AppEventKey, Contribution as Contribution$1, Disposer, Disposer as Disposer$1, EventBus, EventBus as EventBus$1, EventBusOptions, InboxDelivery, InboxDeliveryContentType, InboxDeliveryListView, InboxDeliverySource, InboxDeliveryStateAction, Ingress, Ingress as Ingress$1, IngressContext, IngressEnvelope, IngressHandler, Key, RuntimeModelSelectionMode, SystemObjectReferenceGroupDescriptor, SystemObjectReferenceItem, SystemObjectReferenceListView, SystemObjectResolvedReference, TypedKey, Unsubscribe, Unsubscribe as Unsubscribe$1, createTypedKey, eventKeys, ingressKeys } from "@nextclaw/shared";
 import { AgentSessionRecord, ChatTarget, NcpReplyInput, RuntimeFactoryParams } from "@nextclaw/ncp-toolkit";
 import { AppInstallProgressHandler, AppNativeArtifactTarget, AppPlatformTargetService, AppRollbackResult, AppRuntimeIsolation, AppRuntimeProfile, AppStorageContext, AppStorageUsage, AppUninstallResult, AppUpdateResult } from "@nextclaw/app-runtime";
 import * as _$_nextclaw_mcp0 from "@nextclaw/mcp";
@@ -331,8 +331,9 @@ declare class ConfigManager {
 }
 //#endregion
 //#region src/managers/agent.manager.d.ts
-type ResolvedAgentProfile = EffectiveAgentProfile & {
+type ResolvedAgentProfile = Omit<EffectiveAgentProfile, "maxToolIterations"> & {
   contextTokens: number;
+  maxToolIterations: number;
   model: string;
   reservedContextTokens: number;
 };
@@ -409,6 +410,7 @@ type AgentRunSpec = {
   agentId: string;
   model: string;
   requestedModel: string | null;
+  maxToolIterations: number;
   maxTokens?: number;
   thinkingEffort?: ThinkingEffort | null;
   correlationId?: string;
@@ -470,7 +472,7 @@ declare class AgentContextWindowManager {
   private readonly toolProviderManager;
   private readonly runInputBudgetBySession;
   private readonly preflightService;
-  constructor(agentManager: AgentManager, contextProviderManager: ContextProviderManager, toolProviderManager: ToolProviderManager);
+  constructor(agentManager: AgentManager, contextProviderManager: ContextProviderManager, toolProviderManager: ToolProviderManager, assetStore?: LocalAssetStore | null);
   resolveRunSurface: (request: AgentRunRequest) => Promise<AgentRunSurface>;
   forgetSession: (sessionId: string) => void;
   previewSession: (params: {
@@ -506,7 +508,7 @@ type AgentRunContextCompactionInput = {
 };
 declare class AgentRunContextCompactionManager {
   private readonly preflightService;
-  constructor(agentManager: AgentManager, providerManager: LlmProviderRuntime);
+  constructor(agentManager: AgentManager, providerManager: LlmProviderRuntime, assetStore?: LocalAssetStore | null);
   runPreflight: (input: AgentRunContextCompactionInput) => AsyncIterable<NcpEndpointEvent$1>;
   runManual: (input: AgentRunContextCompactionInput) => Promise<readonly NcpEndpointEvent$1[]>;
   private run;
@@ -639,6 +641,14 @@ declare class NcpAgentSessionJournalStore {
   listSessionSummaries: (options?: {
     limit?: number;
   }) => Promise<NcpSessionSummary[]>;
+  listSessionSummaryPage: (options: {
+    page: number;
+    pageSize: number;
+    query?: string;
+  }) => Promise<{
+    sessions: NcpSessionSummary[];
+    total: number;
+  }>;
   getSessionSummary: (sessionId: string) => Promise<NcpSessionSummary | null>;
   listUnfinishedRuns: () => Promise<UnfinishedNcpAgentRun[]>;
   listSessionMessages: (sessionId: string) => Promise<NcpMessage$1[]>;
@@ -761,6 +771,14 @@ declare class SessionManager implements NcpSessionApi {
   deleteSession: (sessionId: string) => Promise<void>;
   getSessionRecord: (sessionId: string) => Promise<AgentSessionRecord | null>;
   listSessions: (options?: ListSessionsOptions) => Promise<NcpSessionSummary[]>;
+  listSessionPage: (options: {
+    page: number;
+    pageSize: number;
+    query?: string;
+  }) => Promise<{
+    sessions: NcpSessionSummary[];
+    total: number;
+  }>;
   listSessionMessages: (sessionId: string, options?: ListMessagesOptions) => Promise<NcpMessage$1[]>;
   getSessionTokenUsage: (sessionId: string) => Promise<SessionTokenUsageSummary | null>;
   listSessionMessagePage: (sessionId: string, options: {
@@ -957,6 +975,7 @@ declare class AgentRunRequestManager {
   private readonly sessionManager;
   private readonly sessionRunManager;
   private readonly diagnostics?;
+  private readonly executionClaims?;
   readonly cleanups: Array<() => void>;
   private readonly observedSessionRuns;
   private readonly sessionCommandManager;
@@ -964,7 +983,7 @@ declare class AgentRunRequestManager {
   private readonly runtimeRuns;
   readonly pendingInputs: AgentRunInputDeliveryService;
   private started;
-  constructor(agentRuntimeManager: AgentRuntimeManager, agentManager: AgentManager, configManager: ConfigManager, agentContextWindowManager: AgentContextWindowManager, eventBus: EventBus$1, ingress: Ingress$1, sessionManager: SessionManager, sessionRunManager: SessionRunManager, diagnostics?: Pick<DiagnosticRuntime, "record"> | undefined);
+  constructor(agentRuntimeManager: AgentRuntimeManager, agentManager: AgentManager, configManager: ConfigManager, agentContextWindowManager: AgentContextWindowManager, eventBus: EventBus$1, ingress: Ingress$1, sessionManager: SessionManager, sessionRunManager: SessionRunManager, diagnostics?: Pick<DiagnosticRuntime, "record"> | undefined, executionClaims?: LocalExecutionClaimService | undefined);
   start: () => void;
   dispose: () => void;
   private handleSendRequest;
@@ -975,7 +994,10 @@ declare class AgentRunRequestManager {
   private send;
   private sendOnce;
   private startQueuedRun;
+  private resolveQueuedRunSpec;
+  private claimSessionExecutionOrFail;
   private startRuntimeRun;
+  private releaseExecutionClaim;
   private publishRunStartupFailure;
   private startNextQueuedRun;
   private observeSessionRun;
@@ -1095,6 +1117,14 @@ type AppPackageComponentSource = {
   runtimeProfile: AppRuntimeProfile;
   isolation: AppRuntimeIsolation;
 };
+type AppPackageUnavailableDiagnostic = {
+  appId: string;
+  message: string;
+};
+type AppPackageComponentSourceList = {
+  sources: AppPackageComponentSource[];
+  unavailablePackages: AppPackageUnavailableDiagnostic[];
+};
 type AppPackageComponentView = AppPackageComponentSource & {
   title?: string;
   description?: string;
@@ -1182,10 +1212,11 @@ type AppPackageConflict = {
   componentKind: AppPackageComponentKind;
   conflictingSource: string;
 };
+type AppPackageUninstallRollback = () => Promise<void>;
 type AppPackageRuntimeHooks = {
   assertCanActivate: (sources: AppPackageComponentSource[]) => Promise<void>;
   beforeDeactivate: (sources: AppPackageComponentSource[]) => Promise<void>;
-  beforeUninstall: (sources: AppPackageComponentSource[]) => Promise<void>;
+  beforeUninstall: (sources: AppPackageComponentSource[]) => Promise<AppPackageUninstallRollback | void>;
 };
 type AppPackageErrorCode = "APP_PACKAGE_CONFLICT" | "APP_PACKAGE_INCOMPATIBLE" | "APP_PACKAGE_NOT_FOUND" | "APP_PACKAGE_OPERATION_FAILED";
 declare class AppPackageError extends Error {
@@ -1224,6 +1255,7 @@ declare class AppPackageManager {
   }>>;
   getPackage: (appId: string) => Promise<AppPackageView>;
   listActiveComponentSources: () => Promise<AppPackageComponentSource[]>;
+  listActiveComponentSourcesWithDiagnostics: () => Promise<AppPackageComponentSourceList>;
   listOperations: () => Promise<AppPackageOperationList>;
   startOperation: (input: AppPackageOperationInput) => Promise<AppPackageOperationView>;
   install: (source: string, registryUrl?: string, onProgress?: AppInstallProgressHandler) => Promise<AppPackageView>;
@@ -1315,20 +1347,570 @@ declare class AppDataManager {
     }>>;
     listWorkspaceDataOwners: () => Promise<WorkspaceDataOwner[]>;
   });
-  start: () => Promise<void>;
-  list: () => Promise<AppDataList>;
-  deleteRetained: (dataId: string, confirmAppId: string) => Promise<AppDataDeleteResult>;
-  private deletePackageData;
-  private deleteWorkspaceData;
-  private toEntry;
-  private createDataId;
-  private parseDataId;
-  private isPackageActive;
-  private isWorkspaceServiceActive;
-  private getWorkspaceInstancesRoot;
-  private workspaceScope;
-  private rethrowMissing;
-  private isMissingFileError;
+  start: () => Promise<void>;
+  list: () => Promise<AppDataList>;
+  deleteRetained: (dataId: string, confirmAppId: string) => Promise<AppDataDeleteResult>;
+  private deletePackageData;
+  private deleteWorkspaceData;
+  private toEntry;
+  private createDataId;
+  private parseDataId;
+  private isPackageActive;
+  private isWorkspaceServiceActive;
+  private getWorkspaceInstancesRoot;
+  private workspaceScope;
+  private rethrowMissing;
+  private isMissingFileError;
+}
+//#endregion
+//#region src/features/capability-grants/types/capability-grant.types.d.ts
+type CapabilityGrantSubject = {
+  type: string;
+  id: string;
+};
+type CapabilityGrantResource = {
+  type: string;
+  target: unknown;
+};
+type CapabilityGrantRequest = {
+  subject: CapabilityGrantSubject;
+  resource: CapabilityGrantResource;
+  access: string[];
+  declarationFingerprint: string;
+};
+type CapabilityGrant = CapabilityGrantRequest & {
+  grantedAt: string;
+  lastUsedAt?: string;
+};
+type CapabilityGrantFilter = {
+  subject?: Partial<CapabilityGrantSubject>;
+  resourceType?: string;
+  target?: unknown;
+  access?: string[];
+};
+type CapabilityGrantDecision = {
+  granted: true;
+  grant: CapabilityGrant;
+} | {
+  granted: false;
+  reason: "authorization_required";
+};
+//#endregion
+//#region src/features/capability-grants/managers/capability-grant.manager.d.ts
+type CapabilityGrantListener = (grants: CapabilityGrant[]) => void | Promise<void>;
+type CapabilityGrantRevocationListener = CapabilityGrantListener;
+declare class CapabilityGrantManager {
+  private readonly store;
+  private readonly grantListeners;
+  private readonly revocationListeners;
+  constructor(storePath: string);
+  check: (request: CapabilityGrantRequest) => Promise<CapabilityGrantDecision>;
+  require: (request: CapabilityGrantRequest) => Promise<CapabilityGrant>;
+  grant: (request: CapabilityGrantRequest, grantedAt?: string) => Promise<CapabilityGrant>;
+  list: (filter?: CapabilityGrantFilter) => Promise<CapabilityGrant[]>;
+  revoke: (filter: CapabilityGrantFilter) => Promise<CapabilityGrant[]>;
+  revokeMatching: (matches: (grant: CapabilityGrant) => boolean) => Promise<CapabilityGrant[]>;
+  import: (grants: CapabilityGrant[]) => Promise<void>;
+  replace: (grants: CapabilityGrant[]) => Promise<void>;
+  onGranted: (listener: CapabilityGrantListener) => (() => void);
+  onRevoked: (listener: CapabilityGrantRevocationListener) => (() => void);
+}
+//#endregion
+//#region src/features/capability-grants/services/capability-grant-legacy-migration.service.d.ts
+declare class CapabilityGrantLegacyMigrationService {
+  private readonly params;
+  private readonly sources;
+  constructor(params: {
+    capabilityGrantManager: CapabilityGrantManager;
+    markerPath: string;
+    validateGrant: (grant: CapabilityGrant) => Promise<boolean>;
+    workspacePath: string;
+  });
+  migrate: () => Promise<void>;
+  private readSources;
+  private assertImported;
+  private restore;
+}
+//#endregion
+//#region src/features/capability-grants/stores/capability-grant.store.d.ts
+declare class CapabilityGrantStore {
+  private readonly storePath;
+  private writeQueue;
+  constructor(storePath: string);
+  read: () => Promise<CapabilityGrant[]>;
+  replace: (grants: CapabilityGrant[]) => Promise<void>;
+  mutateGrants: (update: (grants: CapabilityGrant[]) => CapabilityGrant[]) => Promise<CapabilityGrant[]>;
+  private mutate;
+  private load;
+  private save;
+}
+//#endregion
+//#region src/features/capability-grants/utils/capability-grant.utils.d.ts
+declare function normalizeCapabilityGrantRequest(request: CapabilityGrantRequest): CapabilityGrantRequest;
+declare function createCapabilityDeclarationFingerprint(value: unknown): string;
+declare function getCapabilityGrantKey(request: CapabilityGrantRequest): string;
+declare function capabilityGrantCovers(grant: CapabilityGrant, request: CapabilityGrantRequest): boolean;
+declare function matchesCapabilityGrantFilter(grant: CapabilityGrant, filter: CapabilityGrantFilter): boolean;
+//#endregion
+//#region src/types/service-app.types.d.ts
+type ServiceAppProtocol = "mcp";
+type ServiceActionRisk = "read" | "write" | "external" | "dangerous";
+type ServiceAppRuntimeStatus = "idle" | "starting" | "running" | "failed" | "stopped";
+type ServiceAppManifestAction = {
+  risk?: ServiceActionRisk;
+  title?: string;
+  description?: string;
+  inputSchema?: Record<string, unknown>;
+};
+type ServiceAppManifest = {
+  id: string;
+  title: string;
+  description?: string;
+  enabled: boolean;
+  protocol: ServiceAppProtocol;
+  command: string;
+  args: string[];
+  actions: Record<string, ServiceAppManifestAction>;
+};
+type ServiceAppRecord = {
+  id: string;
+  title: string;
+  description?: string;
+  dirPath: string;
+  manifestPath: string;
+  command?: string;
+  args?: string[];
+  cwd: string;
+  enabled: boolean;
+  protocol: ServiceAppProtocol;
+  status: ServiceAppRuntimeStatus;
+  lastError?: string;
+  lastStartedAt?: string;
+  lastReadyAt?: string;
+  lastFailedAt?: string;
+  sourceKind?: "workspace" | "package";
+  packageId?: string;
+  packageVersion?: string;
+  packageDirectory?: string;
+  dataDirectory?: string;
+  instanceId?: string;
+  storage?: AppStorageContext;
+  isolation?: AppRuntimeIsolation;
+};
+type ServiceActionGrantState = "granted" | "not-granted" | "not-declared";
+type ServiceActionRuntimeState = "matched" | "missing" | "undeclared";
+type ServiceAction = {
+  id: string;
+  appId: string;
+  name: string;
+  title?: string;
+  description?: string;
+  inputSchema?: Record<string, unknown>;
+  risk: ServiceActionRisk;
+  runtimeState?: ServiceActionRuntimeState;
+  grantState?: ServiceActionGrantState;
+};
+type ServiceActionCaller = {
+  surface: "panel-app";
+  appId: string;
+};
+type ServiceActionGrant = {
+  caller: ServiceActionCaller;
+  actionId: string;
+  risk: ServiceActionRisk;
+  grantedAt: string;
+};
+type ServiceActionInvokeRequest = {
+  caller: ServiceActionCaller;
+  declaredActions: string[];
+  input?: Record<string, unknown>;
+};
+type ServiceActionInvokeResult = {
+  actionId: string;
+  result: unknown;
+};
+type ServiceActionGrantRequest = {
+  caller: ServiceActionCaller;
+  declaredActions: string[];
+};
+//#endregion
+//#region src/types/panel-app.types.d.ts
+type PanelAppEntry = {
+  id: string;
+  appId: string;
+  fileName: string;
+  kind: "single-file" | "folder";
+  title: string;
+  description?: string;
+  icon?: string;
+  contentPath: string;
+  createdAt: string;
+  updatedAt: string;
+  sizeBytes: number;
+  favorite: boolean;
+  mainSidebar: boolean;
+  mainSidebarOrder?: number;
+  clientDeclared: boolean;
+  clientGranted: boolean;
+  lastOpenedAt?: string;
+  openCount: number;
+  sourceKind: "workspace" | "package";
+  packageId?: string;
+  packageVersion?: string;
+};
+type PanelAppList = {
+  workspacePath: string;
+  panelsPath: string;
+  entries: PanelAppEntry[];
+  unavailablePackages: Array<{
+    appId: string;
+    message: string;
+  }>;
+};
+type PanelAppContent = {
+  id: string;
+  appId: string;
+  fileName: string;
+  html: string;
+  contentType: "text/html; charset=utf-8";
+  capabilities: string[];
+  clientDeclared: boolean;
+  clientGranted: boolean;
+  serviceActions: string[];
+};
+type PanelAppDeleteResult = {
+  deleted: true;
+  fileName: string;
+  id: string;
+};
+type PanelAppBridgeSession = {
+  id: string;
+  token: string;
+  appId: string;
+  caller: ServiceActionCaller;
+  declaredCapabilities: string[];
+  declaredActions: string[];
+  clientDeclared: boolean;
+  createdAt: string;
+  expiresAt: string;
+};
+type PanelAppErrorCode = "AGENT_OBJECT_REQUEST_FAILED" | "AGENT_OBJECT_RESULT_NOT_SUBMITTED" | "AGENT_OBJECT_RESULT_SCHEMA_INVALID" | "AGENT_OBJECT_RESULT_TIMEOUT" | "AUTHORIZATION_REQUIRED" | "PANEL_APP_AGENT_REQUEST_INVALID" | "PANEL_APP_ASSET_TOKEN_EXPIRED" | "PANEL_APP_ASSET_TOKEN_INVALID" | "PANEL_APP_BRIDGE_SESSION_NOT_FOUND" | "PANEL_APP_CAPABILITY_NOT_DECLARED" | "PANEL_APP_CLIENT_NOT_DECLARED" | "PANEL_APP_INVALID_ASSET_PATH" | "PANEL_APP_INVALID_ID" | "PANEL_APP_INVALID_SOURCE_PATH" | "PANEL_APP_MANIFEST_INVALID" | "PANEL_APP_MANAGED_SOURCE" | "PANEL_APP_NOT_FOUND" | "PANEL_APP_READ_FAILED";
+declare class PanelAppError extends Error {
+  readonly code: PanelAppErrorCode;
+  constructor(code: PanelAppErrorCode, message: string);
+}
+declare function isPanelAppError(error: unknown): error is PanelAppError;
+declare const PANEL_APP_AGENT_CAPABILITIES: readonly ["agent:send", "agent:generateObject"];
+type PanelAppAgentCapability = typeof PANEL_APP_AGENT_CAPABILITIES[number];
+declare function isPanelAppAgentCapability(value: unknown): value is PanelAppAgentCapability;
+type PanelAppClientGrant = {
+  appId: string;
+  grantedAt: string;
+};
+type PanelAppCapabilityGrantCaller = {
+  surface: "panel-app";
+  appId: string;
+};
+type PanelAppCapabilityGrant = {
+  caller: PanelAppCapabilityGrantCaller;
+  capability: PanelAppAgentCapability;
+  grantedAt: string;
+};
+type PanelAppAgentSendPayload = {
+  sessionId?: string;
+  peerId?: string;
+  content: NcpMessagePart[];
+  message?: never;
+  metadata?: Record<string, unknown>;
+} | {
+  sessionId?: string;
+  peerId?: string;
+  message: NcpMessage$1 | (Omit<NcpMessage$1, "sessionId"> & {
+    sessionId?: string;
+  });
+  content?: never;
+  metadata?: Record<string, unknown>;
+};
+type PanelAppAgentSendRequest = {
+  payload: PanelAppAgentSendPayload;
+};
+type PanelAppAgentSendResult = NcpRunHandle;
+type PanelAppAgentRunClient = {
+  send: (input: AgentRunSendIngressPayload) => Promise<NcpRunHandle>;
+  sendAndStreamEvents: (input: AgentRunSendIngressPayload) => AsyncGenerator<NcpEndpointEvent$1>;
+};
+type PanelAppAgentGenerateObjectInput = {
+  peerId: string;
+  prompt: string;
+  context?: unknown;
+  schema: Record<string, unknown>;
+  title?: string;
+  timeoutMs?: number;
+};
+type PanelAppAgentGenerateObjectRequest = {
+  input: PanelAppAgentGenerateObjectInput;
+};
+type PanelAppAgentGenerateObjectResult = {
+  result: unknown;
+};
+//#endregion
+//#region src/features/capability-grants/utils/capability-grant-resource.utils.d.ts
+declare function createPanelAppClientGrantRequest(appId: string): CapabilityGrantRequest;
+declare function createPanelAppAgentGrantRequest(caller: ServiceActionCaller, capability: PanelAppAgentCapability): CapabilityGrantRequest;
+declare function createServiceActionGrantRequest(caller: ServiceActionCaller, action: ServiceAction): CapabilityGrantRequest;
+declare function readServiceActionTargetId(target: unknown): string | null;
+//#endregion
+//#region src/features/desktop-host/types/desktop-host.types.d.ts
+declare const DESKTOP_HOST_PROTOCOL_VERSION: 1;
+declare const DESKTOP_HOST_ACCESS: readonly ["ui.read", "ui.observe", "ui.write", "screen.capture-window", "input.keyboard", "input.pointer"];
+type DesktopHostAccess = typeof DESKTOP_HOST_ACCESS[number];
+type DesktopApplicationTarget = {
+  applicationId: string;
+};
+type ResolvedDesktopApplicationTarget = {
+  platform: "darwin";
+  applicationId: string;
+  bundleId: string;
+} | {
+  platform: "win32";
+  applicationId: string;
+  appUserModelId?: string;
+  executableIdentity?: string;
+} | {
+  platform: "linux";
+  applicationId: string;
+  desktopFileId?: string;
+  executableIdentity?: string;
+};
+type DesktopHostCaller = {
+  extensionId?: string;
+  agentId?: string;
+  sessionId?: string;
+  agentRunId?: string;
+  subscriptionId?: string;
+};
+type DesktopHostMethod = "host.hello" | "host.status" | "host.application.resolve" | "host.permissions.get" | "host.permissions.request" | "host.permissions.openSettings" | "host.ui.snapshot" | "host.ui.action" | "host.ui.observe" | "host.ui.unobserve" | "host.screen.captureWindow" | "host.input.click" | "host.input.typeText" | "host.input.pressKey";
+type DesktopHostRequest = {
+  protocolVersion: typeof DESKTOP_HOST_PROTOCOL_VERSION;
+  requestId: string;
+  token: string;
+  method: DesktopHostMethod;
+  caller: DesktopHostCaller;
+  payload: unknown;
+};
+type DesktopHostResponse = {
+  protocolVersion: typeof DESKTOP_HOST_PROTOCOL_VERSION;
+  requestId: string;
+  ok: boolean;
+  result?: unknown;
+  error?: DesktopCapabilityError;
+};
+type DesktopHostEvent = {
+  protocolVersion: typeof DESKTOP_HOST_PROTOCOL_VERSION;
+  type: "host.event";
+  watchId: string;
+  event: unknown;
+};
+type DesktopHostStatus = {
+  online: boolean;
+  platform?: NodeJS.Platform;
+  protocolVersion?: number;
+  supportedAccess: DesktopHostAccess[];
+  supportedOperations: DesktopHostMethod[];
+  permissions: {
+    accessibility: "granted" | "not_granted" | "not_supported" | "unknown";
+    screenCapture: "granted" | "not_granted" | "not_supported" | "unknown";
+  };
+};
+type DesktopCapabilityErrorCode = "desktop_host_unavailable" | "desktop_host_protocol_mismatch" | "unsupported_platform" | "permission_not_granted" | "capability_not_declared" | "authorization_required" | "authorization_denied" | "target_not_running" | "window_not_found" | "element_not_found" | "stale_target" | "operation_not_supported" | "payload_limit_exceeded" | "host_operation_failed";
+type DesktopCapabilityError = {
+  code: DesktopCapabilityErrorCode;
+  message: string;
+  recovery?: {
+    action: "open_settings" | "start_desktop" | "show_authorization" | "refresh_target" | "update_desktop";
+  };
+  request?: unknown;
+};
+type DesktopHostCapabilityDeclaration = {
+  access: DesktopHostAccess[];
+};
+type DesktopHostManifest = {
+  id: string;
+  contributes?: {
+    hostCapabilities?: {
+      desktopAutomation?: DesktopHostCapabilityDeclaration;
+    };
+  };
+};
+//#endregion
+//#region src/features/desktop-host/services/desktop-host.service.d.ts
+type DesktopHostEventListener = (event: DesktopHostEvent) => void;
+/**
+ * The Kernel-facing boundary for the local desktop host.  A runtime host owns
+ * its platform implementation; the Kernel owns grants and caller identity.
+ */
+type DesktopHost = {
+  status: () => Promise<DesktopHostStatus>;
+  invoke: <T>(method: DesktopHostMethod, payload: Record<string, unknown>, caller: DesktopHostCaller) => Promise<T>;
+  onEvent: (listener: DesktopHostEventListener) => () => void;
+  dispose: () => Promise<void>;
+};
+declare function createDesktopHostError(error: DesktopCapabilityError): Error;
+/** Used by short-lived Kernel entry points which do not own a local host. */
+declare class UnavailableDesktopHost implements DesktopHost {
+  status: () => Promise<DesktopHostStatus>;
+  invoke: <T>() => Promise<T>;
+  onEvent: () => (() => void);
+  dispose: () => Promise<void>;
+}
+//#endregion
+//#region src/features/desktop-host/managers/desktop-host-capability.manager.d.ts
+declare class DesktopHostCapabilityManager {
+  private readonly options;
+  private readonly watches;
+  private readonly removeEventListener;
+  private readonly removeGrantListener;
+  private readonly removeRevocationListener;
+  constructor(options: {
+    capabilityGrantManager: CapabilityGrantManager;
+    host: DesktopHost;
+    findManifest: (extensionId: string) => DesktopHostManifest;
+    hasAgent?: (agentId: string) => boolean;
+    onAuthorizationRequired?: (input: {
+      applicationId: string;
+      caller: DesktopHostCaller;
+      request: CapabilityGrantRequest;
+    }) => void;
+    onEvent?: (input: {
+      extensionId: string;
+      generation: string;
+      watchId: string;
+      event: unknown;
+    }) => void;
+    onObservationAuthorizationRevoked?: (input: {
+      extensionId: string;
+      subscriptionId: string;
+    }) => Promise<void>;
+    onObservationAuthorizationGranted?: (input: {
+      extensionId: string;
+    }) => Promise<void>;
+  });
+  status: () => Promise<DesktopHostStatus>;
+  getPermissions: () => Promise<DesktopHostStatus["permissions"]>;
+  requestPermissions: () => Promise<DesktopHostStatus["permissions"]>;
+  openPermissionSettings: () => Promise<{
+    opened: boolean;
+  }>;
+  grantAccess: (request: CapabilityGrantRequest) => Promise<CapabilityGrant>;
+  invoke: <T>(input: {
+    extensionId: string;
+    generation: string;
+    method: DesktopHostMethod;
+    payload: Record<string, unknown>;
+    caller?: Omit<DesktopHostCaller, "extensionId">;
+  }) => Promise<T>;
+  private invokeUnscopedExtensionMethod;
+  invokeAgent: <T>(input: {
+    agentId: string;
+    sessionId: string;
+    agentRunId?: string;
+    source?: "legacy-tool" | "desktop";
+    method: "host.status" | "host.ui.snapshot" | "host.screen.captureWindow" | "host.ui.action" | "host.input.click" | "host.input.typeText" | "host.input.pressKey";
+    payload: Record<string, unknown>;
+  }) => Promise<T>;
+  releaseExtensionWatches: (extensionId: string, generation?: string) => Promise<void>;
+  private validateGrantRequest;
+  private removeWatch;
+  private requireGrant;
+  private requireAgentGrant;
+  private requireKnownAgent;
+  stop: () => Promise<void>;
+  dispose: () => Promise<void>;
+  private releaseAllWatches;
+}
+//#endregion
+//#region src/features/desktop-host/services/desktop-node-repl.service.d.ts
+/**
+ * Codex-style code entry point: a session-scoped REPL worker receives a small
+ * desktop SDK and no host Node.js capabilities. The SDK still delegates every
+ * operation to the normal state, grant, and audit owners.
+ */
+declare class DesktopNodeReplService {
+  private readonly sessionState;
+  private readonly workers;
+  constructor(sessionState: DesktopSessionStateService);
+  execute: (input: DesktopSessionCaller & {
+    code: unknown;
+    signal?: AbortSignal;
+  }) => Promise<unknown>;
+  dispose: () => void;
+  private getOrCreateWorker;
+  private handleWorkerMessage;
+  private invokeDesktop;
+  private resolve;
+  private reject;
+  private scheduleIdleStop;
+  private stopWorker;
+}
+//#endregion
+//#region src/features/desktop-host/services/desktop-session-state.service.d.ts
+type DesktopSessionCaller = {
+  agentId: string;
+  sessionId: string;
+  agentRunId?: string;
+};
+type DesktopSnapshotOptions = {
+  target: {
+    applicationId: string;
+  };
+  source?: "accessibility" | "screen" | "both";
+  detail?: "low" | "high";
+  maxDepth?: number;
+  maxNodes?: number;
+};
+/** Owns short-lived AX element references for one Agent session. */
+declare class DesktopSessionStateService {
+  private readonly manager;
+  private readonly statesBySession;
+  constructor(manager: DesktopHostCapabilityManager);
+  snapshot: (caller: DesktopSessionCaller, options: DesktopSnapshotOptions) => Promise<unknown>;
+  setValue: (caller: DesktopSessionCaller, input: {
+    target: {
+      applicationId: string;
+    };
+    stateId: string;
+    elementIndex: number;
+    value: string;
+  }) => Promise<unknown>;
+  click: (caller: DesktopSessionCaller, input: {
+    target: {
+      applicationId: string;
+    };
+    stateId: string;
+    elementIndex?: number;
+    coordinate?: {
+      x: number;
+      y: number;
+    };
+  }) => Promise<unknown>;
+  typeText: (caller: DesktopSessionCaller, input: {
+    target: {
+      applicationId: string;
+    };
+    stateId: string;
+    text: string;
+  }) => Promise<unknown>;
+  pressKey: (caller: DesktopSessionCaller, input: {
+    target: {
+      applicationId: string;
+    };
+    stateId: string;
+    key: string;
+    modifiers?: string[];
+  }) => Promise<unknown>;
+  private perform;
+  private remember;
+  private sessionStates;
 }
 //#endregion
 //#region src/features/observation/types/observation.types.d.ts
@@ -1533,6 +2115,13 @@ declare class ObservationManager {
   }>;
   onExtensionObservationRuntimeExited: (extensionId: string) => void;
   onExtensionObservationRuntimeReady: (extensionId: string) => Promise<void>;
+  onDesktopObservationAuthorizationRevoked: (input: {
+    extensionId: string;
+    subscriptionId: string;
+  }) => Promise<void>;
+  onDesktopObservationAuthorizationGranted: (input: {
+    extensionId: string;
+  }) => Promise<void>;
   buildContextTail: (input: BuildContextTailInput) => Promise<ObservationContextTail | undefined>;
   discoverObservations: (input?: {
     query?: string;
@@ -1609,6 +2198,11 @@ type ExtensionManifest = {
         replay?: "supported" | "unsupported";
       };
     };
+    hostCapabilities?: {
+      desktopAutomation?: {
+        access: Array<"ui.read" | "ui.observe" | "ui.write" | "screen.capture-window" | "input.keyboard" | "input.pointer">;
+      };
+    };
     channels?: Array<{
       id: string;
       name?: string;
@@ -1688,6 +2282,9 @@ type ExtensionManagerOptions = {
   messageBus: Pick<MessageBus, "publishInbound">;
   sessionManager: SessionManager;
   observations: ObservationManager;
+  capabilityGrantManager: CapabilityGrantManager;
+  desktopHost: DesktopHost;
+  hasAgent: (agentId: string) => boolean;
 };
 type ExtensionLoadParams = {
   config?: Config;
@@ -1711,9 +2308,11 @@ declare class ExtensionManager {
     endpoint: string | null;
   }) => Promise<void>;
   stop: () => Promise<void>;
+  dispose: () => Promise<void>;
   getExtensionRegistry: () => ExtensionRegistry;
   getChannelBindings: () => ExtensionChannelBinding[];
   getUiMetadata: () => ExtensionUiMetadata[];
+  getDesktopHost: () => DesktopHostCapabilityManager;
   getRuntimeStatus: () => ExtensionRuntimeStatus[];
   getManifests: () => ExtensionManifest[];
   authenticateEventStreamCredential: (input: {
@@ -1946,206 +2545,6 @@ type PanelAppPreferencesUpdate = {
   mainSidebar?: boolean;
 };
 //#endregion
-//#region src/stores/panel-app-client-grant.store.d.ts
-type PanelAppClientGrant = {
-  appId: string;
-  grantedAt: string;
-};
-//#endregion
-//#region src/types/service-app.types.d.ts
-type ServiceAppProtocol = "mcp";
-type ServiceActionRisk = "read" | "write" | "external" | "dangerous";
-type ServiceAppRuntimeStatus = "idle" | "starting" | "running" | "failed" | "stopped";
-type ServiceAppManifestAction = {
-  risk?: ServiceActionRisk;
-  title?: string;
-  description?: string;
-  inputSchema?: Record<string, unknown>;
-};
-type ServiceAppManifest = {
-  id: string;
-  title: string;
-  description?: string;
-  enabled: boolean;
-  protocol: ServiceAppProtocol;
-  command: string;
-  args: string[];
-  actions: Record<string, ServiceAppManifestAction>;
-};
-type ServiceAppRecord = {
-  id: string;
-  title: string;
-  description?: string;
-  dirPath: string;
-  manifestPath: string;
-  command?: string;
-  args?: string[];
-  cwd: string;
-  enabled: boolean;
-  protocol: ServiceAppProtocol;
-  status: ServiceAppRuntimeStatus;
-  lastError?: string;
-  lastStartedAt?: string;
-  lastReadyAt?: string;
-  lastFailedAt?: string;
-  sourceKind?: "workspace" | "package";
-  packageId?: string;
-  packageVersion?: string;
-  packageDirectory?: string;
-  dataDirectory?: string;
-  instanceId?: string;
-  storage?: AppStorageContext;
-  isolation?: AppRuntimeIsolation;
-};
-type ServiceActionGrantState = "granted" | "not-granted" | "not-declared";
-type ServiceActionRuntimeState = "matched" | "missing" | "undeclared";
-type ServiceAction = {
-  id: string;
-  appId: string;
-  name: string;
-  title?: string;
-  description?: string;
-  inputSchema?: Record<string, unknown>;
-  risk: ServiceActionRisk;
-  runtimeState?: ServiceActionRuntimeState;
-  grantState?: ServiceActionGrantState;
-};
-type ServiceActionCaller = {
-  surface: "panel-app";
-  appId: string;
-};
-type ServiceActionGrant = {
-  caller: ServiceActionCaller;
-  actionId: string;
-  risk: ServiceActionRisk;
-  grantedAt: string;
-};
-type ServiceActionInvokeRequest = {
-  caller: ServiceActionCaller;
-  declaredActions: string[];
-  input?: Record<string, unknown>;
-};
-type ServiceActionInvokeResult = {
-  actionId: string;
-  result: unknown;
-};
-type ServiceActionGrantRequest = {
-  caller: ServiceActionCaller;
-  declaredActions: string[];
-};
-//#endregion
-//#region src/types/panel-app.types.d.ts
-type PanelAppEntry = {
-  id: string;
-  appId: string;
-  fileName: string;
-  kind: "single-file" | "folder";
-  title: string;
-  description?: string;
-  icon?: string;
-  contentPath: string;
-  createdAt: string;
-  updatedAt: string;
-  sizeBytes: number;
-  favorite: boolean;
-  mainSidebar: boolean;
-  mainSidebarOrder?: number;
-  clientDeclared: boolean;
-  clientGranted: boolean;
-  lastOpenedAt?: string;
-  openCount: number;
-  sourceKind: "workspace" | "package";
-  packageId?: string;
-  packageVersion?: string;
-};
-type PanelAppList = {
-  workspacePath: string;
-  panelsPath: string;
-  entries: PanelAppEntry[];
-};
-type PanelAppContent = {
-  id: string;
-  appId: string;
-  fileName: string;
-  html: string;
-  contentType: "text/html; charset=utf-8";
-  capabilities: string[];
-  clientDeclared: boolean;
-  clientGranted: boolean;
-  serviceActions: string[];
-};
-type PanelAppDeleteResult = {
-  deleted: true;
-  fileName: string;
-  id: string;
-};
-type PanelAppBridgeSession = {
-  id: string;
-  token: string;
-  appId: string;
-  caller: ServiceActionCaller;
-  declaredCapabilities: string[];
-  declaredActions: string[];
-  clientDeclared: boolean;
-  createdAt: string;
-  expiresAt: string;
-};
-type PanelAppErrorCode = "AGENT_OBJECT_REQUEST_FAILED" | "AGENT_OBJECT_RESULT_NOT_SUBMITTED" | "AGENT_OBJECT_RESULT_SCHEMA_INVALID" | "AGENT_OBJECT_RESULT_TIMEOUT" | "AUTHORIZATION_REQUIRED" | "PANEL_APP_AGENT_REQUEST_INVALID" | "PANEL_APP_ASSET_TOKEN_EXPIRED" | "PANEL_APP_ASSET_TOKEN_INVALID" | "PANEL_APP_BRIDGE_SESSION_NOT_FOUND" | "PANEL_APP_CAPABILITY_NOT_DECLARED" | "PANEL_APP_CLIENT_NOT_DECLARED" | "PANEL_APP_INVALID_ASSET_PATH" | "PANEL_APP_INVALID_ID" | "PANEL_APP_INVALID_SOURCE_PATH" | "PANEL_APP_MANIFEST_INVALID" | "PANEL_APP_MANAGED_SOURCE" | "PANEL_APP_NOT_FOUND" | "PANEL_APP_READ_FAILED";
-declare class PanelAppError extends Error {
-  readonly code: PanelAppErrorCode;
-  constructor(code: PanelAppErrorCode, message: string);
-}
-declare function isPanelAppError(error: unknown): error is PanelAppError;
-declare const PANEL_APP_AGENT_CAPABILITIES: readonly ["agent:send", "agent:generateObject"];
-type PanelAppAgentCapability = typeof PANEL_APP_AGENT_CAPABILITIES[number];
-declare function isPanelAppAgentCapability(value: unknown): value is PanelAppAgentCapability;
-type PanelAppCapabilityGrantCaller = {
-  surface: "panel-app";
-  appId: string;
-};
-type PanelAppCapabilityGrant = {
-  caller: PanelAppCapabilityGrantCaller;
-  capability: PanelAppAgentCapability;
-  grantedAt: string;
-};
-type PanelAppAgentSendPayload = {
-  sessionId?: string;
-  peerId?: string;
-  content: NcpMessagePart[];
-  message?: never;
-  metadata?: Record<string, unknown>;
-} | {
-  sessionId?: string;
-  peerId?: string;
-  message: NcpMessage$1 | (Omit<NcpMessage$1, "sessionId"> & {
-    sessionId?: string;
-  });
-  content?: never;
-  metadata?: Record<string, unknown>;
-};
-type PanelAppAgentSendRequest = {
-  payload: PanelAppAgentSendPayload;
-};
-type PanelAppAgentSendResult = NcpRunHandle;
-type PanelAppAgentRunClient = {
-  send: (input: AgentRunSendIngressPayload) => Promise<NcpRunHandle>;
-  sendAndStreamEvents: (input: AgentRunSendIngressPayload) => AsyncGenerator<NcpEndpointEvent$1>;
-};
-type PanelAppAgentGenerateObjectInput = {
-  peerId: string;
-  prompt: string;
-  context?: unknown;
-  schema: Record<string, unknown>;
-  title?: string;
-  timeoutMs?: number;
-};
-type PanelAppAgentGenerateObjectRequest = {
-  input: PanelAppAgentGenerateObjectInput;
-};
-type PanelAppAgentGenerateObjectResult = {
-  result: unknown;
-};
-//#endregion
 //#region src/utils/panel-app-source.utils.d.ts
 type PanelAppAssetContentType = "application/javascript; charset=utf-8" | "application/json; charset=utf-8" | "application/octet-stream" | "image/png" | "image/svg+xml; charset=utf-8" | "image/webp" | "text/css; charset=utf-8" | "text/plain; charset=utf-8";
 type PanelAppAsset = {
@@ -2163,12 +2562,15 @@ declare class PanelAppManager {
   private readonly sourceService;
   private readonly packageStateManager;
   private readonly entryPresenter;
+  private readonly removalService;
   constructor(params: {
     agentRunClient?: PanelAppAgentRunClient;
     configManager: ConfigManager;
     eventBus?: EventBus$1;
     ingress?: Ingress$1;
     listPackageComponentSources?: () => Promise<AppPackageComponentSource[]>;
+    listPackageComponentDiagnostics?: () => Promise<AppPackageUnavailableDiagnostic[]>;
+    capabilityGrantManager: CapabilityGrantManager;
   });
   listPanelApps: () => Promise<PanelAppList>;
   getPanelAppContent: (id: string, sourcePath?: string) => Promise<PanelAppContent>;
@@ -2186,6 +2588,7 @@ declare class PanelAppManager {
   }) => Promise<PanelAppBridgeSession>;
   grantPanelAppClient: (appId: string) => Promise<PanelAppClientGrant>;
   revokePanelAppClient: (appId: string) => Promise<void>;
+  matchesCapabilityGrant: (grant: CapabilityGrant) => Promise<boolean>;
   resolvePanelAppBridgeSession: (token: string) => PanelAppBridgeSession;
   deletePanelAppBridgeSession: (token: string) => void;
   sendAgentMessage: (bridgeSessionToken: string, payload: PanelAppAgentSendPayload) => Promise<PanelAppAgentSendResult>;
@@ -2198,14 +2601,14 @@ declare class PanelAppManager {
   private getPanelsPath;
   private createAssetBaseHref;
   private createStateStore;
-  private createCapabilityGrantStore;
-  private createClientGrantStore;
   private resolvePanelAppFileName;
   assertCanActivatePackageComponents: (components: AppPackageComponentSource[]) => Promise<void>;
   deactivatePackageComponents: (components: AppPackageComponentSource[]) => void;
-  removePackageComponentState: (components: AppPackageComponentSource[]) => Promise<void>;
+  preparePackageComponentDeactivation: (components: AppPackageComponentSource[]) => (() => Promise<void>);
+  removePackageComponentState: (components: AppPackageComponentSource[]) => Promise<() => Promise<void>>;
   private deleteExpiredBridgeSessions;
   private deleteBridgeSessionsByPanelAppId;
+  private suspendBridgeSessionsByPanelAppId;
   private isPanelAppClientGranted;
   private isMissingFileError;
 }
@@ -2275,6 +2678,7 @@ declare class McpServiceAppRuntimeService {
     actionName: string;
     input: Record<string, unknown>;
   }) => Promise<unknown>;
+  stop: (appId: string) => Promise<void>;
   restart: (appId: string) => Promise<void>;
   dispose: () => Promise<void>;
   private toMcpServerRecord;
@@ -2320,11 +2724,14 @@ declare class ServiceAppManager {
   private readonly removalService;
   private readonly runtimeService;
   private readonly recordService;
+  private readonly actionGrants;
+  private readonly packageRuntime;
   private reconciliationDiagnostics;
   constructor(params: {
     configManager: ConfigManager;
     runtimeService?: ServiceAppRuntime;
     listPackageComponentSources?: () => Promise<AppPackageComponentSource[]>;
+    capabilityGrantManager: CapabilityGrantManager;
   });
   start: () => Promise<void>;
   listServiceApps: () => Promise<ServiceAppList>;
@@ -2340,13 +2747,15 @@ declare class ServiceAppManager {
   grantServiceActions: (actionIds: readonly string[], request: ServiceActionGrantRequest) => Promise<ServiceActionGrant[]>;
   listServiceActionGrants: () => Promise<ServiceActionGrant[]>;
   revokeServiceAction: (caller: ServiceActionCaller, actionId: string) => Promise<void>;
+  matchesCapabilityGrant: (grant: CapabilityGrant) => Promise<boolean>;
   restartServiceApp: (appId: string) => Promise<ServiceAppRecord>;
   listWorkspaceDataOwners: () => Promise<WorkspaceServiceDataOwner[]>;
   deleteServiceApp: (appId: string, purgeData?: boolean) => Promise<ServiceAppDeleteResult>;
   dispose: () => Promise<void>;
   assertCanActivatePackageComponents: (components: AppPackageComponentSource[]) => Promise<void>;
   deactivatePackageComponents: (components: AppPackageComponentSource[]) => Promise<void>;
-  removePackageComponentGrants: (components: AppPackageComponentSource[]) => Promise<void>;
+  preparePackageComponentDeactivation: (components: AppPackageComponentSource[]) => Promise<() => Promise<void>>;
+  removePackageComponentGrants: (components: AppPackageComponentSource[]) => Promise<() => Promise<void>>;
   private withGrantState;
   private requireServiceAction;
   private requireServiceAppForAction;
@@ -2358,12 +2767,11 @@ declare class ServiceAppManager {
   private getWorkspacePath;
   private getServiceAppsPath;
   private getServiceAppLockPath;
-  private createGrantStore;
   private listPackageComponentSources;
   private listServiceAppDirNames;
   private isMissingFileError;
 }
-type ServiceAppRuntime = Pick<McpServiceAppRuntimeService, "dispose" | "getStatus" | "invokeAction" | "listActions" | "restart">; //# sourceMappingURL=service-app.manager.d.ts.map
+type ServiceAppRuntime = Pick<McpServiceAppRuntimeService, "dispose" | "getStatus" | "invokeAction" | "listActions" | "restart" | "stop">; //# sourceMappingURL=service-app.manager.d.ts.map
 //#endregion
 //#region src/utils/skill-frontmatter.utils.d.ts
 type LocalizedTextMap = Record<string, string>;
@@ -2474,6 +2882,20 @@ declare function dispatchAgentRuntimeSessionRequest(input: {
 }): Promise<void>;
 declare function createAgentRuntimeSessionRequestDispatcher(options: AgentRuntimeSessionRequestDispatcherOptions): SessionRequestDispatcher;
 //#endregion
+//#region src/features/feature-controls/types/feature-controls.types.d.ts
+type ProductFeatureControls = {
+  desktopAutomation: {
+    available: boolean;
+  };
+};
+//#endregion
+//#region src/features/feature-controls/services/feature-controls.service.d.ts
+declare class FeatureControlsService {
+  private readonly desktopHost;
+  constructor(desktopHost: DesktopHost);
+  get: () => Promise<ProductFeatureControls>;
+}
+//#endregion
 //#region src/app/nextclaw-kernel.d.ts
 type NextclawKernelOptions = {
   homeDir?: string;
@@ -2481,6 +2903,7 @@ type NextclawKernelOptions = {
   builtInAppsDirectory?: string;
   productVersion?: string;
   productActivitySink?: ProductActivitySink;
+  desktopHost?: DesktopHost;
 };
 type NextclawKernelRuntimeControl<TGatewayInput, TUiInput, TStartInput> = {
   gateway: (input: TGatewayInput) => Promise<void>;
@@ -2533,12 +2956,14 @@ declare class NextclawKernel {
   readonly toolProviderManager: ToolProviderManager;
   readonly agentRunRequestManager: AgentRunRequestManager;
   readonly observations: ObservationManager;
+  readonly capabilityGrants: CapabilityGrantManager;
+  readonly featureControls: FeatureControlsService;
+  private readonly capabilityGrantLegacyMigration;
   private readonly ncpAgentSessionJournalStore;
   private readonly contributions;
   private gatewayController;
   constructor(options?: NextclawKernelOptions);
-  private createContributions;
-  private installAppPackageRuntimeHooks;
+  private createCapabilityGrantLegacyMigration;
   listSessionTypes: (params?: AgentRuntimeSessionTypeDescribeParams) => Promise<{
     defaultType: string;
     options: AgentRuntimeSessionTypeOption[];
@@ -3091,10 +3516,11 @@ type ContextCompactionPendingWork = {
 };
 declare class ContextCompactionPreflightService {
   private readonly agentManager;
+  private readonly assetStore;
   private readonly compactionService;
   private readonly contextWindowBudgetService;
   private readonly summaryGenerationService;
-  constructor(agentManager: AgentManager, providerManager?: LlmProviderRuntime);
+  constructor(agentManager: AgentManager, providerManager?: LlmProviderRuntime, assetStore?: LocalAssetStore | null);
   preview: (params: {
     completeInputBudget?: boolean;
     contextBlocks?: readonly string[];
@@ -3240,5 +3666,5 @@ declare function resolveLegacyEventType(message: SessionMessage): string;
 declare function getUiContentParamsBootstrapScript(): string;
 declare function injectUiContentParamsBootstrap(html: string): string;
 //#endregion
-export { AUTOMATIC_UPDATE_CHECK_INTERVAL_MS, AccessLoginResult, AccessManager, AccessManagerOptions, AccessPasswordStatus, AccessPrincipal, AccessRole, AccessSessionRecord, AccessSessionState, AgentManager, AgentManagerOptions, AgentRunClient, type AgentRunReply, type AgentRunReplyOptions, AgentRunSession, type AgentRunStreamOptions, type AgentRuntimeEntry, type AgentRuntimeProviderRegistration, AgentRuntimeSessionRequestDispatcherOptions, type AgentRuntimeSessionTypeCatalog, type AgentRuntimeSessionTypeDescribeParams, AgentRuntimeSessionTypeIcon, type AgentRuntimeSessionTypeOption, AgentRuntimeSessionTypeProvider, AppDataDeleteResult, AppDataDiagnostic, AppDataEntry, AppDataError, AppDataErrorCode, AppDataLifecycle, AppDataList, AppDataManager, AppDataSource, type AppEventEmitOptions, type AppEventEnvelope, type AppEventHandler, type AppEventKey, AppPackageComponentKind, AppPackageComponentSource, AppPackageComponentView, AppPackageConflict, AppPackageError, AppPackageErrorCode, AppPackageHostTarget, AppPackageList, AppPackageManager, AppPackageOperationAction, AppPackageOperationInput, AppPackageOperationList, AppPackageOperationResult, AppPackageOperationStatus, AppPackageOperationView, AppPackageRuntimeHooks, AppPackageView, type AssetApi, AutomationManager, AutomationManagerOptions, BindContextInput, type BuildAgentRunSendPayloadParams, BuildContextTailInput, BuiltinNarpRuntimeProviderService, CONTEXT_COMPACTION_CONTINUATION_TEXT, CONTEXT_COMPACTION_PROJECTION_KIND, CONTEXT_COMPACTION_PROJECTION_METADATA_KEY, CONTEXT_COMPACTION_SYSTEM_PREAMBLE, CONTEXT_COMPACTION_TIMELINE_KIND, ChannelManager, ChannelReplyRouterDispatchParams, CommandRegistry, ConfigManager, ConfigManagerOptions, ConfigManagerRuntimeHooks, ConfigMutationResult, ContextBinding, type ContextBlock, ContextCompactionJournalRecoveryService, ContextCompactionModelProjection, ContextCompactionPreflightBeginResult, ContextCompactionPreflightResult, ContextCompactionPreflightService, ContextCompactionTimelineCheckpoint, ContextCompactionTrigger, type ContextProvider, type ContextProviderRequest, Contribution, CreateAgentRunSessionParams, CreateInboxDeliveryInput, CreateProjectInput, DEFAULT_AGENT_RUNTIME_ENTRY_ID, DEFAULT_SERVICE_ACTION_RISK, DirectPromptDispatchExecution, DirectPromptDispatchParams, DirectPromptDispatchResult, type Disposer, EventAdmissionPolicy, EventBus, type EventBusOptions, EventDelivery, EventSubscription, EventSubscriptionBudget, ExtensionLoadProgress, ExtensionLoadResult, ExtensionManager, type ExtensionRuntimeStatus, GatewayInboundLoopRuntime, GatewayInboundProcessor, type IContextRegistry, type IKernel, type IMcpRegistry, type IModelRegistry, type INextclawAgent, type INextclawAgentRegistry, type INextclawAgentSessions, type INextclawContributionRegistry, type INextclawHarness, type INextclawRun, type INextclawSession, type INextclawSessionRegistry, type IRuntimeRegistry, type IToolRegistry, InboxDeliveryError, InboxDeliveryErrorCode, InboxDeliveryManager, InboxDeliveryManagerOptions, Ingress, type IngressContext, type IngressEnvelope, type IngressHandler, InstallationKind, InstalledSkillDetail, InstalledSkillSummary, InstalledSkillsList, JsonPointer, JsonValue, type Key, type LLMResponse, type LLMStreamEvent, type LearningLoopRuntimeConfig, LlmProviderManager, LlmProviderRuntime, LlmUsageManager, LlmUsageManagerOptions, LlmUsageRecord, LlmUsageSnapshot, LlmUsageStats, LlmUsageStore, LlmUsageStoreOptions, LlmUsageSummary, LocalizedTextMap, MAX_INBOX_DELIVERY_CONTENT_LENGTH, type McpCatalogFilter, McpManager, type McpServerDefinition, type McpServerRecord, McpServiceAppRuntimeService, type McpToolCallInput, type McpToolCatalogEntry, type ModelChatInput, NARP_HTTP_RUNTIME_KIND, NARP_STDIO_RUNTIME_KIND, NEXTCLAW_TIMELINE_KIND_METADATA_KEY, NcpAgentSessionJournalStore, type NcpEndpointEvent, type NcpMessage, type NcpTool, type NextclawAgentDefinition, type NextclawContributionDescriptor, NextclawHarness, NextclawHarnessError, type NextclawHarnessErrorCode, type NextclawHarnessOptions, NextclawKernel, NextclawKernelOptions, NextclawNcpResolvedAgentProfile, NextclawNcpResolvedRunContext, NextclawNcpRunContextResolveParams, type NextclawRunStatus, type NextclawSessionCreateInput, type NextclawSessionRunInput, type NextclawTaskInput, type NextclawTaskResult, ObservationCapabilityDescriptor, ObservationContextTail, ObservationEvent, ObservationEventAdmissionDecision, ObservationExtensionRuntime, ObservationManager, ObservationManagerOptions, ObservationRef, ObservationRelationshipStatus, ObservationState, ObservationTarget, PANEL_APP_AGENT_CAPABILITIES, PROJECT_TEMPLATE_IDS, PROVIDER_MODEL_CATALOG_REFRESH_INTERVAL_MS, PanelAppAgentCapability, PanelAppAgentGenerateObjectInput, PanelAppAgentGenerateObjectRequest, PanelAppAgentGenerateObjectResult, PanelAppAgentRunClient, PanelAppAgentSendPayload, PanelAppAgentSendRequest, PanelAppAgentSendResult, PanelAppAssetTokenService, PanelAppBridgeSession, PanelAppCapabilityGrant, PanelAppCapabilityGrantCaller, type PanelAppClientGrant, PanelAppContent, PanelAppDeleteResult, PanelAppEntry, PanelAppError, PanelAppErrorCode, PanelAppList, PanelAppManager, type PanelAppPreferencesUpdate, PreferenceEntry, PreferenceError, PreferenceErrorCode, PreferenceJsonValue, PreferenceManager, PreferenceManagerOptions, ProductActivityKind, ProductActivitySignal, ProductActivitySink, ProductActivitySource, ProjectError, ProjectErrorCode, ProjectManager, ProjectManagerOptions, ProjectRecord, ProjectTemplate, ProjectTemplateId, type ProviderCatalogPlugin, ProviderManagerNcpLLMApi, ProviderModelCatalogEntry, ProviderModelCatalogManager, ProviderModelCatalogSnapshot, ProviderModelsDiscoverInput, type ProviderSpec, ResolvedAgentProfile, SERVICE_APP_MANIFEST_FILE_NAME, ServiceAction, ServiceActionCaller, ServiceActionGrant, ServiceActionGrantRequest, ServiceActionGrantState, ServiceActionInvokeRequest, ServiceActionInvokeResult, ServiceActionRisk, ServiceActionRuntimeState, ServiceAppDeleteResult, ServiceAppError, type ServiceAppErrorCode, ServiceAppList, ServiceAppManager, ServiceAppManifest, ServiceAppManifestAction, ServiceAppProtocol, ServiceAppRecord, ServiceAppRuntimeStatus, SessionContextCompactionError, SessionContextCompactionErrorCode, SessionContextCompactionManager, SessionContextCompactionResult, SessionManager, SessionManagerOptions, SessionMessageCursorError, SessionMessagePage, SessionModelTokenUsage, type SessionPendingInput, type SessionQueuedInput, SessionRequestManager, SessionRequestManagerOptions, SessionSettingsError, SessionSettingsPatch, type SessionSteerQueuedInputResult, SessionTokenUsageStatus, SessionTokenUsageSummary, SessionTokenUsageTotals, SkillFrontmatter, type SkillInfo, SkillManager, type SkillScope, SubscribeEventsInput, SystemObjectReferenceError, SystemObjectReferenceErrorCode, SystemObjectReferenceManager, SystemObjectReferenceProvider, SystemObjectReferenceSnapshotSource, type TypedKey, TypedPredicate, UnsignedUpdateManifest, type Unsubscribe, UpdateBlockReason, UpdateHostKind, UpdateManifest, UpdateManifestReader, UpdateProgress, UpdateSnapshot, UpdateStatus, type WorkspaceServiceDataOwner, assertObservationJsonValue, assertObservationPredicate, buildAgentRunSendPayload, buildContextCompactionModelProjection, buildContextCompactionTimelineNcpMessage, buildLlmUsageSummary, buildLocalizedTextMap, buildNextclawNcpRunContext, buildObservationEventModelMessage, buildServiceActionId, createAgentRuntimeSessionRequestDispatcher, createAssetTools, createContextCompactionMessageId, createContextWindowSignature, createCronJobSystemObjectProvider, createInboxDeliverySystemObjectProvider, createLlmUsageRecord, createTypedKey, describeAgentRuntimeSessionTypes, dispatchAgentRuntimeSessionRequest, dispatchChannelReplyRoute, dispatchPromptOverNcp, dispatchPromptOverNcpResult, evaluateObservationEventAdmission, eventKeys, getAutomaticUpdateCheckDelay, getServiceActionName, getServiceAppManifestPath, getUiContentParamsBootstrapScript, getUnsignedUpdateManifest, hasLlmUsageTelemetry, ingressKeys, injectUiContentParamsBootstrap, isAppDataError, isAppPackageError, isContextCompactionProjectionMessage, isContextCompactionTimelineMessage, isContextWindowSnapshot, isInboxDeliveryError, isPanelAppAgentCapability, isPanelAppError, isPreferenceError, isProjectError, isReplyCapableChannel, isServiceAppError, isSessionContextCompactionError, isSessionMessageCursorError, isSessionSettingsError, isSystemObjectReferenceError, listExtensionChannelIds, listServiceAppManifestActions, matchesObservationPredicate, mergeServiceAppRuntimeActions, normalizeAgentRuntimeSessionTypeIcon, normalizeLlmUsageModel, normalizeOptionalString, parseObservationDuration, parseServiceAppManifest, parseSkillFrontmatter, readContextCompactionCheckpoint, readContextWindowEventSessionId, readJsonPointer, readLatestContextCompactionCheckpoint, readLearningLoopRuntimeConfig, readMetadataModel, readMetadataThinking, readServiceAppManifest, resolveAgentRuntimeEntries, resolveAutomaticUpdateCheckIntervalMs, resolveChannelReplyRoute, resolveEffectiveModel, resolveLegacyEventType, resolveSessionChannelContext, runGatewayInboundLoop, runNextclawTask, sanitizeLlmUsage, serializeContextTail, serializeUnsignedUpdateManifest, shouldRefreshContextWindowDuringStream, shouldRefreshContextWindowImmediately, startPromptOverNcpExecution, stripSkillFrontmatter, syncSessionThinkingPreference, toBoundedJson, toNcpMessages, waitForAgentRuntimeSessionReply };
+export { AUTOMATIC_UPDATE_CHECK_INTERVAL_MS, AccessLoginResult, AccessManager, AccessManagerOptions, AccessPasswordStatus, AccessPrincipal, AccessRole, AccessSessionRecord, AccessSessionState, AgentManager, AgentManagerOptions, AgentRunClient, type AgentRunReply, type AgentRunReplyOptions, AgentRunSession, type AgentRunStreamOptions, type AgentRuntimeEntry, type AgentRuntimeProviderRegistration, AgentRuntimeSessionRequestDispatcherOptions, type AgentRuntimeSessionTypeCatalog, type AgentRuntimeSessionTypeDescribeParams, AgentRuntimeSessionTypeIcon, type AgentRuntimeSessionTypeOption, AgentRuntimeSessionTypeProvider, AppDataDeleteResult, AppDataDiagnostic, AppDataEntry, AppDataError, AppDataErrorCode, AppDataLifecycle, AppDataList, AppDataManager, AppDataSource, type AppEventEmitOptions, type AppEventEnvelope, type AppEventHandler, type AppEventKey, AppPackageComponentKind, AppPackageComponentSource, AppPackageComponentSourceList, AppPackageComponentView, AppPackageConflict, AppPackageError, AppPackageErrorCode, AppPackageHostTarget, AppPackageList, AppPackageManager, AppPackageOperationAction, AppPackageOperationInput, AppPackageOperationList, AppPackageOperationResult, AppPackageOperationStatus, AppPackageOperationView, AppPackageRuntimeHooks, AppPackageUnavailableDiagnostic, AppPackageUninstallRollback, AppPackageView, type AssetApi, AutomationManager, AutomationManagerOptions, BindContextInput, type BuildAgentRunSendPayloadParams, BuildContextTailInput, BuiltinNarpRuntimeProviderService, CONTEXT_COMPACTION_CONTINUATION_TEXT, CONTEXT_COMPACTION_PROJECTION_KIND, CONTEXT_COMPACTION_PROJECTION_METADATA_KEY, CONTEXT_COMPACTION_SYSTEM_PREAMBLE, CONTEXT_COMPACTION_TIMELINE_KIND, CapabilityGrant, CapabilityGrantDecision, CapabilityGrantFilter, CapabilityGrantLegacyMigrationService, CapabilityGrantListener, CapabilityGrantManager, CapabilityGrantRequest, CapabilityGrantResource, CapabilityGrantRevocationListener, CapabilityGrantStore, CapabilityGrantSubject, ChannelManager, ChannelReplyRouterDispatchParams, CommandRegistry, ConfigManager, ConfigManagerOptions, ConfigManagerRuntimeHooks, ConfigMutationResult, ContextBinding, type ContextBlock, ContextCompactionJournalRecoveryService, ContextCompactionModelProjection, ContextCompactionPreflightBeginResult, ContextCompactionPreflightResult, ContextCompactionPreflightService, ContextCompactionTimelineCheckpoint, ContextCompactionTrigger, type ContextProvider, type ContextProviderRequest, Contribution, CreateAgentRunSessionParams, CreateInboxDeliveryInput, CreateProjectInput, DEFAULT_AGENT_RUNTIME_ENTRY_ID, DEFAULT_SERVICE_ACTION_RISK, DESKTOP_HOST_ACCESS, DESKTOP_HOST_PROTOCOL_VERSION, DesktopApplicationTarget, DesktopCapabilityError, DesktopCapabilityErrorCode, DesktopHost, DesktopHostAccess, DesktopHostCaller, DesktopHostCapabilityDeclaration, DesktopHostCapabilityManager, DesktopHostEvent, DesktopHostEventListener, DesktopHostManifest, DesktopHostMethod, DesktopHostRequest, DesktopHostResponse, DesktopHostStatus, DesktopNodeReplService, DesktopSessionCaller, DesktopSessionStateService, DesktopSnapshotOptions, DirectPromptDispatchExecution, DirectPromptDispatchParams, DirectPromptDispatchResult, type Disposer, EventAdmissionPolicy, EventBus, type EventBusOptions, EventDelivery, EventSubscription, EventSubscriptionBudget, ExtensionLoadProgress, ExtensionLoadResult, ExtensionManager, type ExtensionRuntimeStatus, FeatureControlsService, GatewayInboundLoopRuntime, GatewayInboundProcessor, type IContextRegistry, type IKernel, type IMcpRegistry, type IModelRegistry, type INextclawAgent, type INextclawAgentRegistry, type INextclawAgentSessions, type INextclawContributionRegistry, type INextclawHarness, type INextclawRun, type INextclawSession, type INextclawSessionRegistry, type IRuntimeRegistry, type IToolRegistry, InboxDeliveryError, InboxDeliveryErrorCode, InboxDeliveryManager, InboxDeliveryManagerOptions, Ingress, type IngressContext, type IngressEnvelope, type IngressHandler, InstallationKind, InstalledSkillDetail, InstalledSkillSummary, InstalledSkillsList, JsonPointer, JsonValue, type Key, type LLMResponse, type LLMStreamEvent, type LearningLoopRuntimeConfig, LlmProviderManager, LlmProviderRuntime, LlmUsageManager, LlmUsageManagerOptions, LlmUsageRecord, LlmUsageSnapshot, LlmUsageStats, LlmUsageStore, LlmUsageStoreOptions, LlmUsageSummary, LocalizedTextMap, MAX_INBOX_DELIVERY_CONTENT_LENGTH, type McpCatalogFilter, McpManager, type McpServerDefinition, type McpServerRecord, McpServiceAppRuntimeService, type McpToolCallInput, type McpToolCatalogEntry, type ModelChatInput, NARP_HTTP_RUNTIME_KIND, NARP_STDIO_RUNTIME_KIND, NEXTCLAW_TIMELINE_KIND_METADATA_KEY, NcpAgentSessionJournalStore, type NcpEndpointEvent, type NcpMessage, type NcpTool, type NextclawAgentDefinition, type NextclawContributionDescriptor, NextclawHarness, NextclawHarnessError, type NextclawHarnessErrorCode, type NextclawHarnessOptions, NextclawKernel, NextclawKernelOptions, NextclawNcpResolvedAgentProfile, NextclawNcpResolvedRunContext, NextclawNcpRunContextResolveParams, type NextclawRunStatus, type NextclawSessionCreateInput, type NextclawSessionRunInput, type NextclawTaskInput, type NextclawTaskResult, ObservationCapabilityDescriptor, ObservationContextTail, ObservationEvent, ObservationEventAdmissionDecision, ObservationExtensionRuntime, ObservationManager, ObservationManagerOptions, ObservationRef, ObservationRelationshipStatus, ObservationState, ObservationTarget, PANEL_APP_AGENT_CAPABILITIES, PROJECT_TEMPLATE_IDS, PROVIDER_MODEL_CATALOG_REFRESH_INTERVAL_MS, PanelAppAgentCapability, PanelAppAgentGenerateObjectInput, PanelAppAgentGenerateObjectRequest, PanelAppAgentGenerateObjectResult, PanelAppAgentRunClient, PanelAppAgentSendPayload, PanelAppAgentSendRequest, PanelAppAgentSendResult, PanelAppAssetTokenService, PanelAppBridgeSession, PanelAppCapabilityGrant, PanelAppCapabilityGrantCaller, PanelAppClientGrant, PanelAppContent, PanelAppDeleteResult, PanelAppEntry, PanelAppError, PanelAppErrorCode, PanelAppList, PanelAppManager, type PanelAppPreferencesUpdate, PreferenceEntry, PreferenceError, PreferenceErrorCode, PreferenceJsonValue, PreferenceManager, PreferenceManagerOptions, ProductActivityKind, ProductActivitySignal, ProductActivitySink, ProductActivitySource, type ProductFeatureControls, ProjectError, ProjectErrorCode, ProjectManager, ProjectManagerOptions, ProjectRecord, ProjectTemplate, ProjectTemplateId, type ProviderCatalogPlugin, ProviderManagerNcpLLMApi, ProviderModelCatalogEntry, ProviderModelCatalogManager, ProviderModelCatalogSnapshot, ProviderModelsDiscoverInput, type ProviderSpec, ResolvedAgentProfile, ResolvedDesktopApplicationTarget, SERVICE_APP_MANIFEST_FILE_NAME, ServiceAction, ServiceActionCaller, ServiceActionGrant, ServiceActionGrantRequest, ServiceActionGrantState, ServiceActionInvokeRequest, ServiceActionInvokeResult, ServiceActionRisk, ServiceActionRuntimeState, ServiceAppDeleteResult, ServiceAppError, type ServiceAppErrorCode, ServiceAppList, ServiceAppManager, ServiceAppManifest, ServiceAppManifestAction, ServiceAppProtocol, ServiceAppRecord, ServiceAppRuntimeStatus, SessionContextCompactionError, SessionContextCompactionErrorCode, SessionContextCompactionManager, SessionContextCompactionResult, SessionManager, SessionManagerOptions, SessionMessageCursorError, SessionMessagePage, SessionModelTokenUsage, type SessionPendingInput, type SessionQueuedInput, SessionRequestManager, SessionRequestManagerOptions, SessionSettingsError, SessionSettingsPatch, type SessionSteerQueuedInputResult, SessionTokenUsageStatus, SessionTokenUsageSummary, SessionTokenUsageTotals, SkillFrontmatter, type SkillInfo, SkillManager, type SkillScope, SubscribeEventsInput, SystemObjectReferenceError, SystemObjectReferenceErrorCode, SystemObjectReferenceManager, SystemObjectReferenceProvider, SystemObjectReferenceSnapshotSource, type TypedKey, TypedPredicate, UnavailableDesktopHost, UnsignedUpdateManifest, type Unsubscribe, UpdateBlockReason, UpdateHostKind, UpdateManifest, UpdateManifestReader, UpdateProgress, UpdateSnapshot, UpdateStatus, type WorkspaceServiceDataOwner, assertObservationJsonValue, assertObservationPredicate, buildAgentRunSendPayload, buildContextCompactionModelProjection, buildContextCompactionTimelineNcpMessage, buildLlmUsageSummary, buildLocalizedTextMap, buildNextclawNcpRunContext, buildObservationEventModelMessage, buildServiceActionId, capabilityGrantCovers, createAgentRuntimeSessionRequestDispatcher, createAssetTools, createCapabilityDeclarationFingerprint, createContextCompactionMessageId, createContextWindowSignature, createCronJobSystemObjectProvider, createDesktopHostError, createInboxDeliverySystemObjectProvider, createLlmUsageRecord, createPanelAppAgentGrantRequest, createPanelAppClientGrantRequest, createServiceActionGrantRequest, createTypedKey, describeAgentRuntimeSessionTypes, dispatchAgentRuntimeSessionRequest, dispatchChannelReplyRoute, dispatchPromptOverNcp, dispatchPromptOverNcpResult, evaluateObservationEventAdmission, eventKeys, getAutomaticUpdateCheckDelay, getCapabilityGrantKey, getServiceActionName, getServiceAppManifestPath, getUiContentParamsBootstrapScript, getUnsignedUpdateManifest, hasLlmUsageTelemetry, ingressKeys, injectUiContentParamsBootstrap, isAppDataError, isAppPackageError, isContextCompactionProjectionMessage, isContextCompactionTimelineMessage, isContextWindowSnapshot, isInboxDeliveryError, isPanelAppAgentCapability, isPanelAppError, isPreferenceError, isProjectError, isReplyCapableChannel, isServiceAppError, isSessionContextCompactionError, isSessionMessageCursorError, isSessionSettingsError, isSystemObjectReferenceError, listExtensionChannelIds, listServiceAppManifestActions, matchesCapabilityGrantFilter, matchesObservationPredicate, mergeServiceAppRuntimeActions, normalizeAgentRuntimeSessionTypeIcon, normalizeCapabilityGrantRequest, normalizeLlmUsageModel, normalizeOptionalString, parseObservationDuration, parseServiceAppManifest, parseSkillFrontmatter, readContextCompactionCheckpoint, readContextWindowEventSessionId, readJsonPointer, readLatestContextCompactionCheckpoint, readLearningLoopRuntimeConfig, readMetadataModel, readMetadataThinking, readServiceActionTargetId, readServiceAppManifest, resolveAgentRuntimeEntries, resolveAutomaticUpdateCheckIntervalMs, resolveChannelReplyRoute, resolveEffectiveModel, resolveLegacyEventType, resolveSessionChannelContext, runGatewayInboundLoop, runNextclawTask, sanitizeLlmUsage, serializeContextTail, serializeUnsignedUpdateManifest, shouldRefreshContextWindowDuringStream, shouldRefreshContextWindowImmediately, startPromptOverNcpExecution, stripSkillFrontmatter, syncSessionThinkingPreference, toBoundedJson, toNcpMessages, waitForAgentRuntimeSessionReply };
 //# sourceMappingURL=index.d.ts.map