@nextclaw/kernel 0.10.3 → 0.12.0

package/dist/index.d.ts

@@ -5,7 +5,7 @@ import { ListMessagesOptions, ListSessionsOptions, NcpAgentConversationStateMana
 import { LocalAssetStore } from "@nextclaw/ncp-agent-runtime";
 import { AgentRunSendIngressPayload, AppEventEmitOptions, AppEventEnvelope, AppEventHandler, AppEventKey, Contribution as Contribution$1, Disposer, Disposer as Disposer$1, EventBus, EventBus as EventBus$1, EventBusOptions, InboxDelivery, InboxDeliveryContentType, InboxDeliveryListView, InboxDeliverySource, InboxDeliveryStateAction, Ingress, Ingress as Ingress$1, IngressContext, IngressEnvelope, IngressHandler, Key, RuntimeModelSelectionMode, SystemObjectReferenceGroupDescriptor, SystemObjectReferenceItem, SystemObjectReferenceListView, SystemObjectResolvedReference, TypedKey, Unsubscribe, Unsubscribe as Unsubscribe$1, createTypedKey, eventKeys, ingressKeys } from "@nextclaw/shared";
 import { AgentSessionRecord, ChatTarget, NcpReplyInput, RuntimeFactoryParams } from "@nextclaw/ncp-toolkit";
-import { AppInstallProgressHandler, AppNativeArtifactTarget, AppPlatformTargetService, AppRollbackResult, AppRuntimeIsolation, AppRuntimeProfile, AppStorageContext, AppStorageUsage, AppUninstallResult, AppUpdateResult } from "@nextclaw/app-runtime";
+import { AppInstallProgressHandler, AppNativeArtifactTarget, AppPermissions, AppPlatformTargetService, AppRollbackResult, AppRuntimeIsolation, AppRuntimeProfile, AppStorageContext, AppStorageUsage, AppUninstallResult, AppUpdateResult } from "@nextclaw/app-runtime";
 import * as _$_nextclaw_mcp0 from "@nextclaw/mcp";
 import { McpCatalogFilter, McpCatalogFilter as McpCatalogFilter$1, McpRegistryService, McpServerRecord, McpServerRecord as McpServerRecord$1, McpToolCatalogEntry, McpToolCatalogEntry as McpToolCatalogEntry$1 } from "@nextclaw/mcp";
 
@@ -1116,6 +1116,7 @@ type AppPackageComponentSource = {
   storage: AppStorageContext;
   runtimeProfile: AppRuntimeProfile;
   isolation: AppRuntimeIsolation;
+  permissions: AppPermissions;
 };
 type AppPackageUnavailableDiagnostic = {
   appId: string;
@@ -1212,10 +1213,12 @@ type AppPackageConflict = {
   componentKind: AppPackageComponentKind;
   conflictingSource: string;
 };
+type AppPackageUninstallRollback = () => Promise<void>;
 type AppPackageRuntimeHooks = {
   assertCanActivate: (sources: AppPackageComponentSource[]) => Promise<void>;
+  afterActivate: (sources: AppPackageComponentSource[]) => Promise<void>;
   beforeDeactivate: (sources: AppPackageComponentSource[]) => Promise<void>;
-  beforeUninstall: (sources: AppPackageComponentSource[]) => Promise<void>;
+  beforeUninstall: (sources: AppPackageComponentSource[]) => Promise<AppPackageUninstallRollback | void>;
 };
 type AppPackageErrorCode = "APP_PACKAGE_CONFLICT" | "APP_PACKAGE_INCOMPATIBLE" | "APP_PACKAGE_NOT_FOUND" | "APP_PACKAGE_OPERATION_FAILED";
 declare class AppPackageError extends Error {
@@ -1233,6 +1236,7 @@ declare class AppPackageManager {
   private readonly operationManager;
   private readonly platformTargetService;
   private readonly presentationService;
+  private readonly runtimeActivationService;
   private readonly registryService;
   private runtimeHooks;
   private builtInBootstrapPromise;
@@ -1362,131 +1366,703 @@ declare class AppDataManager {
   private isMissingFileError;
 }
 //#endregion
-//#region src/features/observation/types/observation.types.d.ts
-type JsonValue = NcpJsonValue;
-type ObservationCapabilityDescriptor = {
-  extensionId: string;
-  kind: "context" | "events";
-  title: string;
-  description?: string;
-  configSchema?: Record<string, unknown>;
-  replay?: "supported" | "unsupported";
+//#region src/features/capability-grants/types/capability-grant.types.d.ts
+type CapabilityGrantSubject = {
+  type: string;
+  id: string;
 };
-type ObservationTarget = {
-  sessionId: string;
-  agentId: string;
+type CapabilityGrantResource = {
+  type: string;
+  target: unknown;
 };
-type ObservationEvent = {
-  eventId: string;
-  eventType: string;
-  occurredAt: string;
-  observedAt: string;
-  cursor?: string;
-  dedupeKey?: string;
-  causationId?: string;
-  correlationId?: string;
-  payload: JsonValue;
-  sourceRefs?: string[];
+type CapabilityGrantRequest = {
+  subject: CapabilityGrantSubject;
+  resource: CapabilityGrantResource;
+  access: string[];
+  declarationFingerprint: string;
 };
-type ObservationRelationshipStatus = "active" | "paused" | "degraded" | "expired" | "broken";
-type ContextBinding = {
-  bindingId: string;
-  extensionId: string;
-  config: JsonValue;
-  target: ObservationTarget;
-  projection: {
-    maxChars?: number;
-    maxItems?: number;
-  };
-  status: ObservationRelationshipStatus;
-  statusReason?: string;
-  createdAt: string;
-  expiresAt?: string;
-  lastReadAt?: string;
+type CapabilityGrant = CapabilityGrantRequest & {
+  grantedAt: string;
+  lastUsedAt?: string;
 };
-type JsonPointer = string;
-type TypedPredicate = {
-  op: "exists";
-  path: JsonPointer;
-} | {
-  op: "eq" | "ne" | "gt" | "gte" | "lt" | "lte" | "in" | "contains";
-  path: JsonPointer;
-  value: JsonValue;
+type CapabilityGrantFilter = {
+  subject?: Partial<CapabilityGrantSubject>;
+  resourceType?: string;
+  target?: unknown;
+  access?: string[];
+};
+type CapabilityGrantDecision = {
+  granted: true;
+  grant: CapabilityGrant;
 } | {
-  op: "and";
-  args: TypedPredicate[];
+  granted: false;
+  reason: "authorization_required";
+};
+//#endregion
+//#region src/features/capability-grants/managers/capability-grant.manager.d.ts
+type CapabilityGrantListener = (grants: CapabilityGrant[]) => void | Promise<void>;
+type CapabilityGrantRevocationListener = CapabilityGrantListener;
+declare class CapabilityGrantManager {
+  private readonly store;
+  private readonly grantListeners;
+  private readonly revocationListeners;
+  constructor(storePath: string);
+  check: (request: CapabilityGrantRequest) => Promise<CapabilityGrantDecision>;
+  require: (request: CapabilityGrantRequest) => Promise<CapabilityGrant>;
+  grant: (request: CapabilityGrantRequest, grantedAt?: string) => Promise<CapabilityGrant>;
+  list: (filter?: CapabilityGrantFilter) => Promise<CapabilityGrant[]>;
+  revoke: (filter: CapabilityGrantFilter) => Promise<CapabilityGrant[]>;
+  revokeMatching: (matches: (grant: CapabilityGrant) => boolean) => Promise<CapabilityGrant[]>;
+  import: (grants: CapabilityGrant[]) => Promise<void>;
+  replace: (grants: CapabilityGrant[]) => Promise<void>;
+  onGranted: (listener: CapabilityGrantListener) => (() => void);
+  onRevoked: (listener: CapabilityGrantRevocationListener) => (() => void);
+}
+//#endregion
+//#region src/features/capability-grants/services/capability-grant-legacy-migration.service.d.ts
+declare class CapabilityGrantLegacyMigrationService {
+  private readonly params;
+  private readonly sources;
+  constructor(params: {
+    capabilityGrantManager: CapabilityGrantManager;
+    markerPath: string;
+    validateGrant: (grant: CapabilityGrant) => Promise<boolean>;
+    workspacePath: string;
+  });
+  migrate: () => Promise<void>;
+  private readSources;
+  private assertImported;
+  private restore;
+}
+//#endregion
+//#region src/features/capability-grants/stores/capability-grant.store.d.ts
+declare class CapabilityGrantStore {
+  private readonly storePath;
+  private writeQueue;
+  constructor(storePath: string);
+  read: () => Promise<CapabilityGrant[]>;
+  replace: (grants: CapabilityGrant[]) => Promise<void>;
+  mutateGrants: (update: (grants: CapabilityGrant[]) => CapabilityGrant[]) => Promise<CapabilityGrant[]>;
+  private mutate;
+  private load;
+  private save;
+}
+//#endregion
+//#region src/features/capability-grants/utils/capability-grant.utils.d.ts
+declare function normalizeCapabilityGrantRequest(request: CapabilityGrantRequest): CapabilityGrantRequest;
+declare function createCapabilityDeclarationFingerprint(value: unknown): string;
+declare function getCapabilityGrantKey(request: CapabilityGrantRequest): string;
+declare function capabilityGrantCovers(grant: CapabilityGrant, request: CapabilityGrantRequest): boolean;
+declare function matchesCapabilityGrantFilter(grant: CapabilityGrant, filter: CapabilityGrantFilter): boolean;
+//#endregion
+//#region src/types/service-app.types.d.ts
+type ServiceAppProtocol = "mcp" | "wasi-component";
+type ServiceActionRisk = "read" | "write" | "external" | "dangerous";
+type ServiceAppRuntimeStatus = "idle" | "starting" | "running" | "failed" | "stopped";
+type ServiceAppManifestAction = {
+  risk?: ServiceActionRisk;
+  title?: string;
+  description?: string;
+  inputSchema?: Record<string, unknown>;
+  timeoutMs?: number;
+};
+type ServiceAppLifecycle = {
+  mode: "action";
 } | {
-  op: "or";
-  args: TypedPredicate[];
+  mode: "resident";
+  eventIntervalMs: number;
 } | {
-  op: "not";
-  arg: TypedPredicate;
+  mode: "provider";
 };
-type EventAdmissionPolicy = {
-  predicate?: TypedPredicate;
-  dedupe?: {
-    key: JsonPointer;
-    window?: string;
-  };
+type ServiceAppManifest = {
+  id: string;
+  title: string;
+  description?: string;
+  enabled: boolean;
+  protocol: ServiceAppProtocol;
+  command?: string;
+  args?: string[];
+  componentEntry?: string;
+  providerIds?: string[];
+  lifecycle?: ServiceAppLifecycle;
+  actions: Record<string, ServiceAppManifestAction>;
 };
-type EventSubscriptionBudget = {
-  maxPending: number;
-  maxDeliveriesPerWindow?: number;
-  window?: string;
+type ServiceAppRecord = {
+  id: string;
+  title: string;
+  description?: string;
+  dirPath: string;
+  manifestPath: string;
+  command?: string;
+  args?: string[];
+  cwd: string;
+  enabled: boolean;
+  protocol: ServiceAppProtocol;
+  status: ServiceAppRuntimeStatus;
+  lastError?: string;
+  lastStartedAt?: string;
+  lastReadyAt?: string;
+  lastFailedAt?: string;
+  sourceKind?: "workspace" | "package";
+  packageId?: string;
+  packageVersion?: string;
+  packageDirectory?: string;
+  dataDirectory?: string;
+  instanceId?: string;
+  storage?: AppStorageContext;
+  isolation?: AppRuntimeIsolation;
+  runtimeProfile?: AppRuntimeProfile;
+  permissions?: AppPermissions;
+  componentPath?: string;
+  providerIds?: string[];
+  lifecycle?: ServiceAppLifecycle;
 };
-type EventSubscription = {
-  subscriptionId: string;
-  extensionId: string;
-  config: JsonValue;
-  target: ObservationTarget;
-  admission: EventAdmissionPolicy;
-  delivery: "queue" | "prefer-steer";
-  budget: EventSubscriptionBudget;
-  cursor?: string;
-  status: ObservationRelationshipStatus;
-  statusReason?: string;
-  createdAt: string;
-  expiresAt?: string;
-  suppressedCount?: number;
-  lastSuppressedAt?: string;
-  lastSuppressionReason?: "predicate" | "dedupe" | "max_pending" | "rate_limit";
-  lastGapAt?: string;
-  gapReason?: "replay_unsupported";
+type ServiceActionGrantState = "granted" | "not-granted" | "not-declared";
+type ServiceActionRuntimeState = "matched" | "missing" | "undeclared";
+type ServiceAction = {
+  id: string;
+  appId: string;
+  name: string;
+  title?: string;
+  description?: string;
+  inputSchema?: Record<string, unknown>;
+  risk: ServiceActionRisk;
+  runtimeState?: ServiceActionRuntimeState;
+  grantState?: ServiceActionGrantState;
 };
-type EventDelivery = {
-  deliveryId: string;
-  subscriptionId: string;
-  eventId: string;
-  event: ObservationEvent;
-  dedupeValue?: string;
-  targetSessionId: string;
-  requestedDelivery: "queue" | "prefer-steer";
-  resolvedDelivery?: NcpResolvedInputDelivery;
-  status: "pending" | "submitted" | "materialized" | "failed";
-  ingressIdempotencyKey: string;
-  messageId: string;
+type PanelServiceActionCaller = {
+  surface: "panel-app";
+  appId: string;
+};
+type AgentServiceActionCaller = {
+  surface: "agent";
+  agentId: string;
+};
+type ServiceActionCaller = PanelServiceActionCaller | AgentServiceActionCaller;
+type ServiceActionGrant = {
+  caller: ServiceActionCaller;
+  actionId: string;
+  risk: ServiceActionRisk;
+  grantedAt: string;
+};
+type ServiceActionInvokeRequest = {
+  caller: ServiceActionCaller;
+  declaredActions?: string[];
+  input?: Record<string, unknown>;
+};
+type ServiceActionInvokeResult = {
+  actionId: string;
+  result: unknown;
+};
+type ServiceActionGrantRequest = {
+  caller: ServiceActionCaller;
+  declaredActions?: string[];
+};
+//#endregion
+//#region src/types/panel-app.types.d.ts
+type PanelAppEntry = {
+  id: string;
+  appId: string;
+  fileName: string;
+  kind: "single-file" | "folder";
+  title: string;
+  description?: string;
+  icon?: string;
+  contentPath: string;
   createdAt: string;
   updatedAt: string;
-  failure?: {
-    code: string;
+  sizeBytes: number;
+  favorite: boolean;
+  mainSidebar: boolean;
+  mainSidebarOrder?: number;
+  clientDeclared: boolean;
+  clientGranted: boolean;
+  lastOpenedAt?: string;
+  openCount: number;
+  sourceKind: "workspace" | "package";
+  packageId?: string;
+  packageVersion?: string;
+};
+type PanelAppList = {
+  workspacePath: string;
+  panelsPath: string;
+  entries: PanelAppEntry[];
+  unavailablePackages: Array<{
+    appId: string;
     message: string;
-  };
+  }>;
 };
-type ObservationState = {
-  bindings: ContextBinding[];
-  subscriptions: EventSubscription[];
-  deliveries: EventDelivery[];
+type PanelAppContent = {
+  id: string;
+  appId: string;
+  fileName: string;
+  html: string;
+  contentType: "text/html; charset=utf-8";
+  capabilities: string[];
+  clientDeclared: boolean;
+  clientGranted: boolean;
+  serviceActions: string[];
 };
-type ObservationRef = {
-  kind: "context_binding";
+type PanelAppDeleteResult = {
+  deleted: true;
+  fileName: string;
   id: string;
-} | {
-  kind: "event_subscription";
+};
+type PanelAppBridgeSession = {
   id: string;
+  token: string;
+  appId: string;
+  caller: PanelServiceActionCaller;
+  declaredCapabilities: string[];
+  declaredActions: string[];
+  clientDeclared: boolean;
+  createdAt: string;
+  expiresAt: string;
 };
-type BindContextInput = {
-  extensionId: string;
-  config: JsonValue;
+type PanelAppErrorCode = "AGENT_OBJECT_REQUEST_FAILED" | "AGENT_OBJECT_RESULT_NOT_SUBMITTED" | "AGENT_OBJECT_RESULT_SCHEMA_INVALID" | "AGENT_OBJECT_RESULT_TIMEOUT" | "AUTHORIZATION_REQUIRED" | "PANEL_APP_AGENT_REQUEST_INVALID" | "PANEL_APP_ASSET_TOKEN_EXPIRED" | "PANEL_APP_ASSET_TOKEN_INVALID" | "PANEL_APP_BRIDGE_SESSION_NOT_FOUND" | "PANEL_APP_CAPABILITY_NOT_DECLARED" | "PANEL_APP_CLIENT_NOT_DECLARED" | "PANEL_APP_INVALID_ASSET_PATH" | "PANEL_APP_INVALID_ID" | "PANEL_APP_INVALID_SOURCE_PATH" | "PANEL_APP_MANIFEST_INVALID" | "PANEL_APP_MANAGED_SOURCE" | "PANEL_APP_NOT_FOUND" | "PANEL_APP_READ_FAILED";
+declare class PanelAppError extends Error {
+  readonly code: PanelAppErrorCode;
+  constructor(code: PanelAppErrorCode, message: string);
+}
+declare function isPanelAppError(error: unknown): error is PanelAppError;
+declare const PANEL_APP_AGENT_CAPABILITIES: readonly ["agent:send", "agent:generateObject"];
+type PanelAppAgentCapability = typeof PANEL_APP_AGENT_CAPABILITIES[number];
+declare function isPanelAppAgentCapability(value: unknown): value is PanelAppAgentCapability;
+type PanelAppClientGrant = {
+  appId: string;
+  grantedAt: string;
+};
+type PanelAppCapabilityGrantCaller = {
+  surface: "panel-app";
+  appId: string;
+};
+type PanelAppCapabilityGrant = {
+  caller: PanelAppCapabilityGrantCaller;
+  capability: PanelAppAgentCapability;
+  grantedAt: string;
+};
+type PanelAppAgentSendPayload = {
+  sessionId?: string;
+  peerId?: string;
+  content: NcpMessagePart[];
+  message?: never;
+  metadata?: Record<string, unknown>;
+} | {
+  sessionId?: string;
+  peerId?: string;
+  message: NcpMessage$1 | (Omit<NcpMessage$1, "sessionId"> & {
+    sessionId?: string;
+  });
+  content?: never;
+  metadata?: Record<string, unknown>;
+};
+type PanelAppAgentSendRequest = {
+  payload: PanelAppAgentSendPayload;
+};
+type PanelAppAgentSendResult = NcpRunHandle;
+type PanelAppAgentRunClient = {
+  send: (input: AgentRunSendIngressPayload) => Promise<NcpRunHandle>;
+  sendAndStreamEvents: (input: AgentRunSendIngressPayload) => AsyncGenerator<NcpEndpointEvent$1>;
+};
+type PanelAppAgentGenerateObjectInput = {
+  peerId: string;
+  prompt: string;
+  context?: unknown;
+  schema: Record<string, unknown>;
+  title?: string;
+  timeoutMs?: number;
+};
+type PanelAppAgentGenerateObjectRequest = {
+  input: PanelAppAgentGenerateObjectInput;
+};
+type PanelAppAgentGenerateObjectResult = {
+  result: unknown;
+};
+//#endregion
+//#region src/features/capability-grants/utils/capability-grant-resource.utils.d.ts
+declare function createPanelAppClientGrantRequest(appId: string): CapabilityGrantRequest;
+declare function createPanelAppAgentGrantRequest(caller: PanelServiceActionCaller, capability: PanelAppAgentCapability): CapabilityGrantRequest;
+declare function createServiceActionGrantRequest(caller: ServiceActionCaller, action: ServiceAction): CapabilityGrantRequest;
+declare function readServiceActionTargetId(target: unknown): string | null;
+//#endregion
+//#region src/features/desktop-host/types/desktop-host.types.d.ts
+declare const DESKTOP_HOST_PROTOCOL_VERSION: 1;
+declare const DESKTOP_HOST_ACCESS: readonly ["ui.read", "ui.observe", "ui.write", "screen.capture-window", "input.keyboard", "input.pointer"];
+type DesktopHostAccess = typeof DESKTOP_HOST_ACCESS[number];
+type DesktopApplicationTarget = {
+  applicationId: string;
+};
+type ResolvedDesktopApplicationTarget = {
+  platform: "darwin";
+  applicationId: string;
+  bundleId: string;
+} | {
+  platform: "win32";
+  applicationId: string;
+  appUserModelId?: string;
+  executableIdentity?: string;
+} | {
+  platform: "linux";
+  applicationId: string;
+  desktopFileId?: string;
+  executableIdentity?: string;
+};
+type DesktopHostCaller = {
+  extensionId?: string;
+  agentId?: string;
+  sessionId?: string;
+  agentRunId?: string;
+  subscriptionId?: string;
+};
+type DesktopHostMethod = "host.hello" | "host.status" | "host.application.resolve" | "host.permissions.get" | "host.permissions.request" | "host.permissions.openSettings" | "host.ui.snapshot" | "host.ui.action" | "host.ui.observe" | "host.ui.unobserve" | "host.screen.captureWindow" | "host.input.click" | "host.input.typeText" | "host.input.pressKey";
+type DesktopHostRequest = {
+  protocolVersion: typeof DESKTOP_HOST_PROTOCOL_VERSION;
+  requestId: string;
+  token: string;
+  method: DesktopHostMethod;
+  caller: DesktopHostCaller;
+  payload: unknown;
+};
+type DesktopHostResponse = {
+  protocolVersion: typeof DESKTOP_HOST_PROTOCOL_VERSION;
+  requestId: string;
+  ok: boolean;
+  result?: unknown;
+  error?: DesktopCapabilityError;
+};
+type DesktopHostEvent = {
+  protocolVersion: typeof DESKTOP_HOST_PROTOCOL_VERSION;
+  type: "host.event";
+  watchId: string;
+  event: unknown;
+};
+type DesktopHostStatus = {
+  online: boolean;
+  platform?: NodeJS.Platform;
+  protocolVersion?: number;
+  supportedAccess: DesktopHostAccess[];
+  supportedOperations: DesktopHostMethod[];
+  permissions: {
+    accessibility: "granted" | "not_granted" | "not_supported" | "unknown";
+    screenCapture: "granted" | "not_granted" | "not_supported" | "unknown";
+  };
+};
+type DesktopCapabilityErrorCode = "desktop_host_unavailable" | "desktop_host_protocol_mismatch" | "unsupported_platform" | "permission_not_granted" | "capability_not_declared" | "authorization_required" | "authorization_denied" | "target_not_running" | "window_not_found" | "element_not_found" | "stale_target" | "operation_not_supported" | "payload_limit_exceeded" | "host_operation_failed";
+type DesktopCapabilityError = {
+  code: DesktopCapabilityErrorCode;
+  message: string;
+  recovery?: {
+    action: "open_settings" | "start_desktop" | "show_authorization" | "refresh_target" | "update_desktop";
+  };
+  request?: unknown;
+};
+type DesktopHostCapabilityDeclaration = {
+  access: DesktopHostAccess[];
+};
+type DesktopHostManifest = {
+  id: string;
+  contributes?: {
+    hostCapabilities?: {
+      desktopAutomation?: DesktopHostCapabilityDeclaration;
+    };
+  };
+};
+//#endregion
+//#region src/features/desktop-host/services/desktop-host.service.d.ts
+type DesktopHostEventListener = (event: DesktopHostEvent) => void;
+/**
+ * The Kernel-facing boundary for the local desktop host.  A runtime host owns
+ * its platform implementation; the Kernel owns grants and caller identity.
+ */
+type DesktopHost = {
+  status: () => Promise<DesktopHostStatus>;
+  invoke: <T>(method: DesktopHostMethod, payload: Record<string, unknown>, caller: DesktopHostCaller) => Promise<T>;
+  onEvent: (listener: DesktopHostEventListener) => () => void;
+  dispose: () => Promise<void>;
+};
+declare function createDesktopHostError(error: DesktopCapabilityError): Error;
+/** Used by short-lived Kernel entry points which do not own a local host. */
+declare class UnavailableDesktopHost implements DesktopHost {
+  status: () => Promise<DesktopHostStatus>;
+  invoke: <T>() => Promise<T>;
+  onEvent: () => (() => void);
+  dispose: () => Promise<void>;
+}
+//#endregion
+//#region src/features/desktop-host/managers/desktop-host-capability.manager.d.ts
+declare class DesktopHostCapabilityManager {
+  private readonly options;
+  private readonly watches;
+  private readonly removeEventListener;
+  private readonly removeGrantListener;
+  private readonly removeRevocationListener;
+  constructor(options: {
+    capabilityGrantManager: CapabilityGrantManager;
+    host: DesktopHost;
+    findManifest: (extensionId: string) => DesktopHostManifest;
+    hasAgent?: (agentId: string) => boolean;
+    onAuthorizationRequired?: (input: {
+      applicationId: string;
+      caller: DesktopHostCaller;
+      request: CapabilityGrantRequest;
+    }) => void;
+    onEvent?: (input: {
+      extensionId: string;
+      generation: string;
+      watchId: string;
+      event: unknown;
+    }) => void;
+    onObservationAuthorizationRevoked?: (input: {
+      extensionId: string;
+      subscriptionId: string;
+    }) => Promise<void>;
+    onObservationAuthorizationGranted?: (input: {
+      extensionId: string;
+    }) => Promise<void>;
+  });
+  status: () => Promise<DesktopHostStatus>;
+  getPermissions: () => Promise<DesktopHostStatus["permissions"]>;
+  requestPermissions: () => Promise<DesktopHostStatus["permissions"]>;
+  openPermissionSettings: () => Promise<{
+    opened: boolean;
+  }>;
+  grantAccess: (request: CapabilityGrantRequest) => Promise<CapabilityGrant>;
+  invoke: <T>(input: {
+    extensionId: string;
+    generation: string;
+    method: DesktopHostMethod;
+    payload: Record<string, unknown>;
+    caller?: Omit<DesktopHostCaller, "extensionId">;
+  }) => Promise<T>;
+  private invokeUnscopedExtensionMethod;
+  invokeAgent: <T>(input: {
+    agentId: string;
+    sessionId: string;
+    agentRunId?: string;
+    source?: "legacy-tool" | "desktop";
+    method: "host.status" | "host.ui.snapshot" | "host.screen.captureWindow" | "host.ui.action" | "host.input.click" | "host.input.typeText" | "host.input.pressKey";
+    payload: Record<string, unknown>;
+  }) => Promise<T>;
+  releaseExtensionWatches: (extensionId: string, generation?: string) => Promise<void>;
+  private validateGrantRequest;
+  private removeWatch;
+  private requireGrant;
+  private requireAgentGrant;
+  private requireKnownAgent;
+  stop: () => Promise<void>;
+  dispose: () => Promise<void>;
+  private releaseAllWatches;
+}
+//#endregion
+//#region src/features/desktop-host/services/desktop-node-repl.service.d.ts
+/**
+ * Codex-style code entry point: a session-scoped REPL worker receives a small
+ * desktop SDK and no host Node.js capabilities. The SDK still delegates every
+ * operation to the normal state, grant, and audit owners.
+ */
+declare class DesktopNodeReplService {
+  private readonly sessionState;
+  private readonly workers;
+  constructor(sessionState: DesktopSessionStateService);
+  execute: (input: DesktopSessionCaller & {
+    code: unknown;
+    signal?: AbortSignal;
+  }) => Promise<unknown>;
+  dispose: () => void;
+  private getOrCreateWorker;
+  private handleWorkerMessage;
+  private invokeDesktop;
+  private resolve;
+  private reject;
+  private scheduleIdleStop;
+  private stopWorker;
+}
+//#endregion
+//#region src/features/desktop-host/services/desktop-session-state.service.d.ts
+type DesktopSessionCaller = {
+  agentId: string;
+  sessionId: string;
+  agentRunId?: string;
+};
+type DesktopSnapshotOptions = {
+  target: {
+    applicationId: string;
+  };
+  source?: "accessibility" | "screen" | "both";
+  detail?: "low" | "high";
+  maxDepth?: number;
+  maxNodes?: number;
+};
+/** Owns short-lived AX element references for one Agent session. */
+declare class DesktopSessionStateService {
+  private readonly manager;
+  private readonly statesBySession;
+  constructor(manager: DesktopHostCapabilityManager);
+  snapshot: (caller: DesktopSessionCaller, options: DesktopSnapshotOptions) => Promise<unknown>;
+  setValue: (caller: DesktopSessionCaller, input: {
+    target: {
+      applicationId: string;
+    };
+    stateId: string;
+    elementIndex: number;
+    value: string;
+  }) => Promise<unknown>;
+  click: (caller: DesktopSessionCaller, input: {
+    target: {
+      applicationId: string;
+    };
+    stateId: string;
+    elementIndex?: number;
+    coordinate?: {
+      x: number;
+      y: number;
+    };
+  }) => Promise<unknown>;
+  typeText: (caller: DesktopSessionCaller, input: {
+    target: {
+      applicationId: string;
+    };
+    stateId: string;
+    text: string;
+  }) => Promise<unknown>;
+  pressKey: (caller: DesktopSessionCaller, input: {
+    target: {
+      applicationId: string;
+    };
+    stateId: string;
+    key: string;
+    modifiers?: string[];
+  }) => Promise<unknown>;
+  private perform;
+  private remember;
+  private sessionStates;
+}
+//#endregion
+//#region src/features/observation/types/observation.types.d.ts
+type JsonValue = NcpJsonValue;
+type ObservationCapabilityDescriptor = {
+  extensionId: string;
+  kind: "context" | "events";
+  title: string;
+  description?: string;
+  configSchema?: Record<string, unknown>;
+  replay?: "supported" | "unsupported";
+};
+type ObservationTarget = {
+  sessionId: string;
+  agentId: string;
+};
+type ObservationEvent = {
+  eventId: string;
+  eventType: string;
+  occurredAt: string;
+  observedAt: string;
+  cursor?: string;
+  dedupeKey?: string;
+  causationId?: string;
+  correlationId?: string;
+  payload: JsonValue;
+  sourceRefs?: string[];
+};
+type ObservationRelationshipStatus = "active" | "paused" | "degraded" | "expired" | "broken";
+type ContextBinding = {
+  bindingId: string;
+  extensionId: string;
+  config: JsonValue;
+  target: ObservationTarget;
+  projection: {
+    maxChars?: number;
+    maxItems?: number;
+  };
+  status: ObservationRelationshipStatus;
+  statusReason?: string;
+  createdAt: string;
+  expiresAt?: string;
+  lastReadAt?: string;
+};
+type JsonPointer = string;
+type TypedPredicate = {
+  op: "exists";
+  path: JsonPointer;
+} | {
+  op: "eq" | "ne" | "gt" | "gte" | "lt" | "lte" | "in" | "contains";
+  path: JsonPointer;
+  value: JsonValue;
+} | {
+  op: "and";
+  args: TypedPredicate[];
+} | {
+  op: "or";
+  args: TypedPredicate[];
+} | {
+  op: "not";
+  arg: TypedPredicate;
+};
+type EventAdmissionPolicy = {
+  predicate?: TypedPredicate;
+  dedupe?: {
+    key: JsonPointer;
+    window?: string;
+  };
+};
+type EventSubscriptionBudget = {
+  maxPending: number;
+  maxDeliveriesPerWindow?: number;
+  window?: string;
+};
+type EventSubscription = {
+  subscriptionId: string;
+  extensionId: string;
+  config: JsonValue;
+  target: ObservationTarget;
+  admission: EventAdmissionPolicy;
+  delivery: "queue" | "prefer-steer";
+  budget: EventSubscriptionBudget;
+  cursor?: string;
+  status: ObservationRelationshipStatus;
+  statusReason?: string;
+  createdAt: string;
+  expiresAt?: string;
+  suppressedCount?: number;
+  lastSuppressedAt?: string;
+  lastSuppressionReason?: "predicate" | "dedupe" | "max_pending" | "rate_limit";
+  lastGapAt?: string;
+  gapReason?: "replay_unsupported";
+};
+type EventDelivery = {
+  deliveryId: string;
+  subscriptionId: string;
+  eventId: string;
+  event: ObservationEvent;
+  dedupeValue?: string;
+  targetSessionId: string;
+  requestedDelivery: "queue" | "prefer-steer";
+  resolvedDelivery?: NcpResolvedInputDelivery;
+  status: "pending" | "submitted" | "materialized" | "failed";
+  ingressIdempotencyKey: string;
+  messageId: string;
+  createdAt: string;
+  updatedAt: string;
+  failure?: {
+    code: string;
+    message: string;
+  };
+};
+type ObservationState = {
+  bindings: ContextBinding[];
+  subscriptions: EventSubscription[];
+  deliveries: EventDelivery[];
+};
+type ObservationRef = {
+  kind: "context_binding";
+  id: string;
+} | {
+  kind: "event_subscription";
+  id: string;
+};
+type BindContextInput = {
+  extensionId: string;
+  config: JsonValue;
   targetSessionId: string;
   projection?: {
     maxChars?: number;
@@ -1564,6 +2140,13 @@ declare class ObservationManager {
   }>;
   onExtensionObservationRuntimeExited: (extensionId: string) => void;
   onExtensionObservationRuntimeReady: (extensionId: string) => Promise<void>;
+  onDesktopObservationAuthorizationRevoked: (input: {
+    extensionId: string;
+    subscriptionId: string;
+  }) => Promise<void>;
+  onDesktopObservationAuthorizationGranted: (input: {
+    extensionId: string;
+  }) => Promise<void>;
   buildContextTail: (input: BuildContextTailInput) => Promise<ObservationContextTail | undefined>;
   discoverObservations: (input?: {
     query?: string;
@@ -1640,6 +2223,11 @@ type ExtensionManifest = {
         replay?: "supported" | "unsupported";
       };
     };
+    hostCapabilities?: {
+      desktopAutomation?: {
+        access: Array<"ui.read" | "ui.observe" | "ui.write" | "screen.capture-window" | "input.keyboard" | "input.pointer">;
+      };
+    };
     channels?: Array<{
       id: string;
       name?: string;
@@ -1719,6 +2307,9 @@ type ExtensionManagerOptions = {
   messageBus: Pick<MessageBus, "publishInbound">;
   sessionManager: SessionManager;
   observations: ObservationManager;
+  capabilityGrantManager: CapabilityGrantManager;
+  desktopHost: DesktopHost;
+  hasAgent: (agentId: string) => boolean;
 };
 type ExtensionLoadParams = {
   config?: Config;
@@ -1742,9 +2333,11 @@ declare class ExtensionManager {
     endpoint: string | null;
   }) => Promise<void>;
   stop: () => Promise<void>;
+  dispose: () => Promise<void>;
   getExtensionRegistry: () => ExtensionRegistry;
   getChannelBindings: () => ExtensionChannelBinding[];
   getUiMetadata: () => ExtensionUiMetadata[];
+  getDesktopHost: () => DesktopHostCapabilityManager;
   getRuntimeStatus: () => ExtensionRuntimeStatus[];
   getManifests: () => ExtensionManifest[];
   authenticateEventStreamCredential: (input: {
@@ -1826,359 +2419,155 @@ type LlmUsageStats = {
     value: string;
     count: number;
   }>;
-  models: Array<{
-    value: string;
-    count: number;
-  }>;
-};
-type LlmUsageManagerOptions = {
-  store?: LlmUsageStore;
-};
-declare class LlmUsageManager {
-  private readonly store;
-  constructor(options?: LlmUsageManagerOptions);
-  get snapshotPath(): string;
-  get historyPath(): string;
-  observeProviderManager: (providerManager: LlmProviderRuntime, source: string) => LlmProviderRuntime;
-  record: (params: {
-    observedAt?: string;
-    source: string;
-    model?: string | null;
-    usage: Record<string, number>;
-  }) => LlmUsageRecord | null;
-  getSnapshot: () => LlmUsageRecord | null;
-  getHistory: (limit?: string | number) => LlmUsageRecord[];
-  resolveHistoryLimit: (value?: string | number) => number;
-  getStats: () => LlmUsageStats;
-  private readonly bumpCounter;
-  private readonly toSortedCounts;
-}
-//#endregion
-//#region src/managers/inbox-delivery.manager.d.ts
-declare const MAX_INBOX_DELIVERY_CONTENT_LENGTH: number;
-type CreateInboxDeliveryInput = {
-  title: string;
-  summary?: string | null;
-  content: string;
-  contentType: InboxDeliveryContentType;
-  source: InboxDeliverySource;
-};
-type InboxDeliveryManagerOptions = {
-  eventBus: Pick<EventBus$1, "emit">;
-  storePath: string;
-};
-type InboxDeliveryErrorCode = "INBOX_DELIVERY_INVALID_CONTENT" | "INBOX_DELIVERY_INVALID_SUMMARY" | "INBOX_DELIVERY_INVALID_TITLE" | "INBOX_DELIVERY_NOT_FOUND";
-declare class InboxDeliveryError extends Error {
-  readonly code: InboxDeliveryErrorCode;
-  constructor(code: InboxDeliveryErrorCode, message: string);
-}
-declare function isInboxDeliveryError(error: unknown): error is InboxDeliveryError;
-declare class InboxDeliveryManager {
-  private readonly options;
-  private readonly store;
-  private writeQueue;
-  constructor(options: InboxDeliveryManagerOptions);
-  listDeliveries: () => Promise<InboxDeliveryListView>;
-  getDelivery: (deliveryId: string) => Promise<InboxDelivery | null>;
-  createDelivery: (input: CreateInboxDeliveryInput) => Promise<InboxDelivery>;
-  updateDeliveryState: (deliveryId: string, action: InboxDeliveryStateAction) => Promise<InboxDelivery>;
-  deleteDelivery: (deliveryId: string) => Promise<boolean>;
-  private applyStateAction;
-  private normalizeRequiredText;
-  private normalizeOptionalText;
-  private notFound;
-  private publishChange;
-  private mutate;
-}
-//#endregion
-//#region src/managers/system-object-reference.manager.d.ts
-type SystemObjectReferenceSnapshotSource = {
-  item: SystemObjectReferenceItem;
-  content: string;
-  fileName: string;
-  mimeType: string;
-};
-type SystemObjectReferenceProvider = {
-  group: SystemObjectReferenceGroupDescriptor;
-  list: () => Promise<readonly SystemObjectReferenceItem[]> | readonly SystemObjectReferenceItem[];
-  resolve: (objectId: string) => Promise<SystemObjectReferenceSnapshotSource | null> | SystemObjectReferenceSnapshotSource | null;
-};
-type SystemObjectReferenceErrorCode = "SYSTEM_OBJECT_INVALID_REFERENCE" | "SYSTEM_OBJECT_NOT_FOUND" | "SYSTEM_OBJECT_PROVIDER_CONTRACT";
-declare class SystemObjectReferenceError extends Error {
-  readonly code: SystemObjectReferenceErrorCode;
-  constructor(code: SystemObjectReferenceErrorCode, message: string);
-}
-declare function isSystemObjectReferenceError(error: unknown): error is SystemObjectReferenceError;
-declare class SystemObjectReferenceManager {
-  private readonly assetStore;
-  private readonly providers;
-  private readonly resolvedCache;
-  constructor(assetStore: Pick<LocalAssetStore, "putBytes" | "statRecord">, providers?: readonly SystemObjectReferenceProvider[]);
-  registerProvider: (provider: SystemObjectReferenceProvider) => (() => void);
-  listReferences: (params?: {
-    query?: string;
-    limit?: number;
-    objectType?: string;
-  }) => Promise<SystemObjectReferenceListView>;
-  resolveReference: (uri: string) => Promise<SystemObjectResolvedReference>;
-  private assertSnapshotContract;
-  private assertListItemContract;
-}
-declare function createInboxDeliverySystemObjectProvider(manager: Pick<InboxDeliveryManager, "getDelivery" | "listDeliveries">): SystemObjectReferenceProvider;
-declare function createCronJobSystemObjectProvider(automation: Pick<AutomationManager, "listJobs">): SystemObjectReferenceProvider;
-//#endregion
-//#region src/managers/mcp.manager.d.ts
-declare class McpManager {
-  private baseConfig;
-  private currentMcpConfig;
-  private readonly contributedServers;
-  private readonly mcpLifecycleManager;
-  private readonly mcpRegistryService;
-  private readonly toolRegistryAdapter;
-  private warmupPromise;
-  constructor(getConfig: () => Config);
-  listToolsForRun: (params: {
-    agentId: string;
-  }) => ReadonlyArray<NcpTool$1>;
-  registerServer: (name: string, definition: McpServerDefinition$1) => Promise<() => Promise<void>>;
-  listServers: () => _$_nextclaw_mcp0.McpServerRecord[];
-  listTools: (filter?: McpCatalogFilter$1) => _$_nextclaw_mcp0.McpToolCatalogEntry[];
-  callTool: (params: Parameters<McpRegistryService["callTool"]>[0]) => Promise<unknown>;
-  start: () => void;
-  applyConfig: (config: Config) => Promise<void>;
-  dispose: () => Promise<void>;
-  private buildEffectiveConfig;
-  private prewarmEnabledServersSafely;
-}
-//#endregion
-//#region src/managers/session-context-compaction.manager.d.ts
-type SessionContextCompactionErrorCode = "CONTEXT_COMPACTION_UNSUPPORTED" | "NOTHING_TO_COMPACT" | "SESSION_BUSY" | "SESSION_NOT_FOUND";
-declare class SessionContextCompactionError extends Error {
-  readonly code: SessionContextCompactionErrorCode;
-  constructor(code: SessionContextCompactionErrorCode, message: string);
-}
-declare function isSessionContextCompactionError(error: unknown): error is SessionContextCompactionError;
-type SessionContextCompactionResult = {
-  compacted: true;
-  sessionId: string;
-};
-declare class SessionContextCompactionManager {
-  private readonly agentRuntimeManager;
-  private readonly eventBus;
-  private readonly sessionManager;
-  private readonly sessionRunManager;
-  constructor(agentRuntimeManager: AgentRuntimeManager, eventBus: EventBus$1, sessionManager: SessionManager, sessionRunManager: SessionRunManager);
-  compact: (requestedSessionId: string) => Promise<SessionContextCompactionResult>;
-}
-//#endregion
-//#region src/stores/panel-app-state.store.d.ts
-type PanelAppPreferencesUpdate = {
-  favorite?: boolean;
-  mainSidebar?: boolean;
-};
-//#endregion
-//#region src/stores/panel-app-client-grant.store.d.ts
-type PanelAppClientGrant = {
-  appId: string;
-  grantedAt: string;
-};
-//#endregion
-//#region src/types/service-app.types.d.ts
-type ServiceAppProtocol = "mcp";
-type ServiceActionRisk = "read" | "write" | "external" | "dangerous";
-type ServiceAppRuntimeStatus = "idle" | "starting" | "running" | "failed" | "stopped";
-type ServiceAppManifestAction = {
-  risk?: ServiceActionRisk;
-  title?: string;
-  description?: string;
-  inputSchema?: Record<string, unknown>;
-};
-type ServiceAppManifest = {
-  id: string;
-  title: string;
-  description?: string;
-  enabled: boolean;
-  protocol: ServiceAppProtocol;
-  command: string;
-  args: string[];
-  actions: Record<string, ServiceAppManifestAction>;
-};
-type ServiceAppRecord = {
-  id: string;
-  title: string;
-  description?: string;
-  dirPath: string;
-  manifestPath: string;
-  command?: string;
-  args?: string[];
-  cwd: string;
-  enabled: boolean;
-  protocol: ServiceAppProtocol;
-  status: ServiceAppRuntimeStatus;
-  lastError?: string;
-  lastStartedAt?: string;
-  lastReadyAt?: string;
-  lastFailedAt?: string;
-  sourceKind?: "workspace" | "package";
-  packageId?: string;
-  packageVersion?: string;
-  packageDirectory?: string;
-  dataDirectory?: string;
-  instanceId?: string;
-  storage?: AppStorageContext;
-  isolation?: AppRuntimeIsolation;
-};
-type ServiceActionGrantState = "granted" | "not-granted" | "not-declared";
-type ServiceActionRuntimeState = "matched" | "missing" | "undeclared";
-type ServiceAction = {
-  id: string;
-  appId: string;
-  name: string;
-  title?: string;
-  description?: string;
-  inputSchema?: Record<string, unknown>;
-  risk: ServiceActionRisk;
-  runtimeState?: ServiceActionRuntimeState;
-  grantState?: ServiceActionGrantState;
-};
-type ServiceActionCaller = {
-  surface: "panel-app";
-  appId: string;
-};
-type ServiceActionGrant = {
-  caller: ServiceActionCaller;
-  actionId: string;
-  risk: ServiceActionRisk;
-  grantedAt: string;
-};
-type ServiceActionInvokeRequest = {
-  caller: ServiceActionCaller;
-  declaredActions: string[];
-  input?: Record<string, unknown>;
-};
-type ServiceActionInvokeResult = {
-  actionId: string;
-  result: unknown;
-};
-type ServiceActionGrantRequest = {
-  caller: ServiceActionCaller;
-  declaredActions: string[];
-};
-//#endregion
-//#region src/types/panel-app.types.d.ts
-type PanelAppEntry = {
-  id: string;
-  appId: string;
-  fileName: string;
-  kind: "single-file" | "folder";
-  title: string;
-  description?: string;
-  icon?: string;
-  contentPath: string;
-  createdAt: string;
-  updatedAt: string;
-  sizeBytes: number;
-  favorite: boolean;
-  mainSidebar: boolean;
-  mainSidebarOrder?: number;
-  clientDeclared: boolean;
-  clientGranted: boolean;
-  lastOpenedAt?: string;
-  openCount: number;
-  sourceKind: "workspace" | "package";
-  packageId?: string;
-  packageVersion?: string;
-};
-type PanelAppList = {
-  workspacePath: string;
-  panelsPath: string;
-  entries: PanelAppEntry[];
-  unavailablePackages: Array<{
-    appId: string;
-    message: string;
-  }>;
-};
-type PanelAppContent = {
-  id: string;
-  appId: string;
-  fileName: string;
-  html: string;
-  contentType: "text/html; charset=utf-8";
-  capabilities: string[];
-  clientDeclared: boolean;
-  clientGranted: boolean;
-  serviceActions: string[];
-};
-type PanelAppDeleteResult = {
-  deleted: true;
-  fileName: string;
-  id: string;
-};
-type PanelAppBridgeSession = {
-  id: string;
-  token: string;
-  appId: string;
-  caller: ServiceActionCaller;
-  declaredCapabilities: string[];
-  declaredActions: string[];
-  clientDeclared: boolean;
-  createdAt: string;
-  expiresAt: string;
-};
-type PanelAppErrorCode = "AGENT_OBJECT_REQUEST_FAILED" | "AGENT_OBJECT_RESULT_NOT_SUBMITTED" | "AGENT_OBJECT_RESULT_SCHEMA_INVALID" | "AGENT_OBJECT_RESULT_TIMEOUT" | "AUTHORIZATION_REQUIRED" | "PANEL_APP_AGENT_REQUEST_INVALID" | "PANEL_APP_ASSET_TOKEN_EXPIRED" | "PANEL_APP_ASSET_TOKEN_INVALID" | "PANEL_APP_BRIDGE_SESSION_NOT_FOUND" | "PANEL_APP_CAPABILITY_NOT_DECLARED" | "PANEL_APP_CLIENT_NOT_DECLARED" | "PANEL_APP_INVALID_ASSET_PATH" | "PANEL_APP_INVALID_ID" | "PANEL_APP_INVALID_SOURCE_PATH" | "PANEL_APP_MANIFEST_INVALID" | "PANEL_APP_MANAGED_SOURCE" | "PANEL_APP_NOT_FOUND" | "PANEL_APP_READ_FAILED";
-declare class PanelAppError extends Error {
-  readonly code: PanelAppErrorCode;
-  constructor(code: PanelAppErrorCode, message: string);
-}
-declare function isPanelAppError(error: unknown): error is PanelAppError;
-declare const PANEL_APP_AGENT_CAPABILITIES: readonly ["agent:send", "agent:generateObject"];
-type PanelAppAgentCapability = typeof PANEL_APP_AGENT_CAPABILITIES[number];
-declare function isPanelAppAgentCapability(value: unknown): value is PanelAppAgentCapability;
-type PanelAppCapabilityGrantCaller = {
-  surface: "panel-app";
-  appId: string;
+  models: Array<{
+    value: string;
+    count: number;
+  }>;
 };
-type PanelAppCapabilityGrant = {
-  caller: PanelAppCapabilityGrantCaller;
-  capability: PanelAppAgentCapability;
-  grantedAt: string;
+type LlmUsageManagerOptions = {
+  store?: LlmUsageStore;
 };
-type PanelAppAgentSendPayload = {
-  sessionId?: string;
-  peerId?: string;
-  content: NcpMessagePart[];
-  message?: never;
-  metadata?: Record<string, unknown>;
-} | {
-  sessionId?: string;
-  peerId?: string;
-  message: NcpMessage$1 | (Omit<NcpMessage$1, "sessionId"> & {
-    sessionId?: string;
-  });
-  content?: never;
-  metadata?: Record<string, unknown>;
+declare class LlmUsageManager {
+  private readonly store;
+  constructor(options?: LlmUsageManagerOptions);
+  get snapshotPath(): string;
+  get historyPath(): string;
+  observeProviderManager: (providerManager: LlmProviderRuntime, source: string) => LlmProviderRuntime;
+  record: (params: {
+    observedAt?: string;
+    source: string;
+    model?: string | null;
+    usage: Record<string, number>;
+  }) => LlmUsageRecord | null;
+  getSnapshot: () => LlmUsageRecord | null;
+  getHistory: (limit?: string | number) => LlmUsageRecord[];
+  resolveHistoryLimit: (value?: string | number) => number;
+  getStats: () => LlmUsageStats;
+  private readonly bumpCounter;
+  private readonly toSortedCounts;
+}
+//#endregion
+//#region src/managers/inbox-delivery.manager.d.ts
+declare const MAX_INBOX_DELIVERY_CONTENT_LENGTH: number;
+type CreateInboxDeliveryInput = {
+  title: string;
+  summary?: string | null;
+  content: string;
+  contentType: InboxDeliveryContentType;
+  source: InboxDeliverySource;
 };
-type PanelAppAgentSendRequest = {
-  payload: PanelAppAgentSendPayload;
+type InboxDeliveryManagerOptions = {
+  eventBus: Pick<EventBus$1, "emit">;
+  storePath: string;
 };
-type PanelAppAgentSendResult = NcpRunHandle;
-type PanelAppAgentRunClient = {
-  send: (input: AgentRunSendIngressPayload) => Promise<NcpRunHandle>;
-  sendAndStreamEvents: (input: AgentRunSendIngressPayload) => AsyncGenerator<NcpEndpointEvent$1>;
+type InboxDeliveryErrorCode = "INBOX_DELIVERY_INVALID_CONTENT" | "INBOX_DELIVERY_INVALID_SUMMARY" | "INBOX_DELIVERY_INVALID_TITLE" | "INBOX_DELIVERY_NOT_FOUND";
+declare class InboxDeliveryError extends Error {
+  readonly code: InboxDeliveryErrorCode;
+  constructor(code: InboxDeliveryErrorCode, message: string);
+}
+declare function isInboxDeliveryError(error: unknown): error is InboxDeliveryError;
+declare class InboxDeliveryManager {
+  private readonly options;
+  private readonly store;
+  private writeQueue;
+  constructor(options: InboxDeliveryManagerOptions);
+  listDeliveries: () => Promise<InboxDeliveryListView>;
+  getDelivery: (deliveryId: string) => Promise<InboxDelivery | null>;
+  createDelivery: (input: CreateInboxDeliveryInput) => Promise<InboxDelivery>;
+  updateDeliveryState: (deliveryId: string, action: InboxDeliveryStateAction) => Promise<InboxDelivery>;
+  deleteDelivery: (deliveryId: string) => Promise<boolean>;
+  private applyStateAction;
+  private normalizeRequiredText;
+  private normalizeOptionalText;
+  private notFound;
+  private publishChange;
+  private mutate;
+}
+//#endregion
+//#region src/managers/system-object-reference.manager.d.ts
+type SystemObjectReferenceSnapshotSource = {
+  item: SystemObjectReferenceItem;
+  content: string;
+  fileName: string;
+  mimeType: string;
 };
-type PanelAppAgentGenerateObjectInput = {
-  peerId: string;
-  prompt: string;
-  context?: unknown;
-  schema: Record<string, unknown>;
-  title?: string;
-  timeoutMs?: number;
+type SystemObjectReferenceProvider = {
+  group: SystemObjectReferenceGroupDescriptor;
+  list: () => Promise<readonly SystemObjectReferenceItem[]> | readonly SystemObjectReferenceItem[];
+  resolve: (objectId: string) => Promise<SystemObjectReferenceSnapshotSource | null> | SystemObjectReferenceSnapshotSource | null;
 };
-type PanelAppAgentGenerateObjectRequest = {
-  input: PanelAppAgentGenerateObjectInput;
+type SystemObjectReferenceErrorCode = "SYSTEM_OBJECT_INVALID_REFERENCE" | "SYSTEM_OBJECT_NOT_FOUND" | "SYSTEM_OBJECT_PROVIDER_CONTRACT";
+declare class SystemObjectReferenceError extends Error {
+  readonly code: SystemObjectReferenceErrorCode;
+  constructor(code: SystemObjectReferenceErrorCode, message: string);
+}
+declare function isSystemObjectReferenceError(error: unknown): error is SystemObjectReferenceError;
+declare class SystemObjectReferenceManager {
+  private readonly assetStore;
+  private readonly providers;
+  private readonly resolvedCache;
+  constructor(assetStore: Pick<LocalAssetStore, "putBytes" | "statRecord">, providers?: readonly SystemObjectReferenceProvider[]);
+  registerProvider: (provider: SystemObjectReferenceProvider) => (() => void);
+  listReferences: (params?: {
+    query?: string;
+    limit?: number;
+    objectType?: string;
+  }) => Promise<SystemObjectReferenceListView>;
+  resolveReference: (uri: string) => Promise<SystemObjectResolvedReference>;
+  private assertSnapshotContract;
+  private assertListItemContract;
+}
+declare function createInboxDeliverySystemObjectProvider(manager: Pick<InboxDeliveryManager, "getDelivery" | "listDeliveries">): SystemObjectReferenceProvider;
+declare function createCronJobSystemObjectProvider(automation: Pick<AutomationManager, "listJobs">): SystemObjectReferenceProvider;
+//#endregion
+//#region src/managers/mcp.manager.d.ts
+declare class McpManager {
+  private baseConfig;
+  private currentMcpConfig;
+  private readonly contributedServers;
+  private readonly mcpLifecycleManager;
+  private readonly mcpRegistryService;
+  private readonly toolRegistryAdapter;
+  private warmupPromise;
+  constructor(getConfig: () => Config);
+  listToolsForRun: (params: {
+    agentId: string;
+  }) => ReadonlyArray<NcpTool$1>;
+  registerServer: (name: string, definition: McpServerDefinition$1) => Promise<() => Promise<void>>;
+  listServers: () => _$_nextclaw_mcp0.McpServerRecord[];
+  listTools: (filter?: McpCatalogFilter$1) => _$_nextclaw_mcp0.McpToolCatalogEntry[];
+  callTool: (params: Parameters<McpRegistryService["callTool"]>[0]) => Promise<unknown>;
+  start: () => void;
+  applyConfig: (config: Config) => Promise<void>;
+  dispose: () => Promise<void>;
+  private buildEffectiveConfig;
+  private prewarmEnabledServersSafely;
+}
+//#endregion
+//#region src/managers/session-context-compaction.manager.d.ts
+type SessionContextCompactionErrorCode = "CONTEXT_COMPACTION_UNSUPPORTED" | "NOTHING_TO_COMPACT" | "SESSION_BUSY" | "SESSION_NOT_FOUND";
+declare class SessionContextCompactionError extends Error {
+  readonly code: SessionContextCompactionErrorCode;
+  constructor(code: SessionContextCompactionErrorCode, message: string);
+}
+declare function isSessionContextCompactionError(error: unknown): error is SessionContextCompactionError;
+type SessionContextCompactionResult = {
+  compacted: true;
+  sessionId: string;
 };
-type PanelAppAgentGenerateObjectResult = {
-  result: unknown;
+declare class SessionContextCompactionManager {
+  private readonly agentRuntimeManager;
+  private readonly eventBus;
+  private readonly sessionManager;
+  private readonly sessionRunManager;
+  constructor(agentRuntimeManager: AgentRuntimeManager, eventBus: EventBus$1, sessionManager: SessionManager, sessionRunManager: SessionRunManager);
+  compact: (requestedSessionId: string) => Promise<SessionContextCompactionResult>;
+}
+//#endregion
+//#region src/stores/panel-app-state.store.d.ts
+type PanelAppPreferencesUpdate = {
+  favorite?: boolean;
+  mainSidebar?: boolean;
 };
 //#endregion
 //#region src/utils/panel-app-source.utils.d.ts
@@ -2198,6 +2587,7 @@ declare class PanelAppManager {
   private readonly sourceService;
   private readonly packageStateManager;
   private readonly entryPresenter;
+  private readonly removalService;
   constructor(params: {
     agentRunClient?: PanelAppAgentRunClient;
     configManager: ConfigManager;
@@ -2205,6 +2595,7 @@ declare class PanelAppManager {
     ingress?: Ingress$1;
     listPackageComponentSources?: () => Promise<AppPackageComponentSource[]>;
     listPackageComponentDiagnostics?: () => Promise<AppPackageUnavailableDiagnostic[]>;
+    capabilityGrantManager: CapabilityGrantManager;
   });
   listPanelApps: () => Promise<PanelAppList>;
   getPanelAppContent: (id: string, sourcePath?: string) => Promise<PanelAppContent>;
@@ -2222,6 +2613,7 @@ declare class PanelAppManager {
   }) => Promise<PanelAppBridgeSession>;
   grantPanelAppClient: (appId: string) => Promise<PanelAppClientGrant>;
   revokePanelAppClient: (appId: string) => Promise<void>;
+  matchesCapabilityGrant: (grant: CapabilityGrant) => Promise<boolean>;
   resolvePanelAppBridgeSession: (token: string) => PanelAppBridgeSession;
   deletePanelAppBridgeSession: (token: string) => void;
   sendAgentMessage: (bridgeSessionToken: string, payload: PanelAppAgentSendPayload) => Promise<PanelAppAgentSendResult>;
@@ -2234,14 +2626,14 @@ declare class PanelAppManager {
   private getPanelsPath;
   private createAssetBaseHref;
   private createStateStore;
-  private createCapabilityGrantStore;
-  private createClientGrantStore;
   private resolvePanelAppFileName;
   assertCanActivatePackageComponents: (components: AppPackageComponentSource[]) => Promise<void>;
   deactivatePackageComponents: (components: AppPackageComponentSource[]) => void;
-  removePackageComponentState: (components: AppPackageComponentSource[]) => Promise<void>;
+  preparePackageComponentDeactivation: (components: AppPackageComponentSource[]) => (() => Promise<void>);
+  removePackageComponentState: (components: AppPackageComponentSource[]) => Promise<() => Promise<void>>;
   private deleteExpiredBridgeSessions;
   private deleteBridgeSessionsByPanelAppId;
+  private suspendBridgeSessionsByPanelAppId;
   private isPanelAppClientGranted;
   private isMissingFileError;
 }
@@ -2277,45 +2669,35 @@ declare class PreferenceManager {
   private isPlainRecord;
 }
 //#endregion
-//#region src/services/mcp-service-app-runtime.service.d.ts
-type RuntimeState = {
-  status: ServiceAppRuntimeStatus;
-  lastError?: string;
-  lastStartedAt?: string;
-  lastReadyAt?: string;
-  lastFailedAt?: string;
+//#region src/services/service-app-runtime.service.d.ts
+type RuntimeCall = {
+  app: ServiceAppRecord;
+  manifest: ServiceAppManifest;
 };
-declare class McpServiceAppRuntimeService {
-  private readonly params;
-  private readonly lifecycleManager;
-  private readonly states;
+declare class ServiceAppRuntimeService {
+  private readonly mcp;
+  private readonly portable;
+  private readonly protocols;
   constructor(params: {
     getConfig: () => Config;
+    portableServiceRunnerPath?: string;
   });
-  getStatus: (appId: string) => RuntimeState;
-  listActions: ({
-    app,
-    manifest
-  }: {
-    app: ServiceAppRecord;
-    manifest: ServiceAppManifest;
-  }) => Promise<ServiceAction[]>;
-  invokeAction: ({
-    app,
-    manifest,
-    actionName,
-    input
-  }: {
-    app: ServiceAppRecord;
-    manifest: ServiceAppManifest;
+  getStatus: (appId: string) => {
+    status: ServiceAppRuntimeStatus;
+    lastError?: string;
+    lastStartedAt?: string;
+    lastReadyAt?: string;
+    lastFailedAt?: string;
+  };
+  start: (call: RuntimeCall) => Promise<void>;
+  listActions: (call: RuntimeCall) => Promise<ServiceAction[]>;
+  invokeAction: (call: RuntimeCall & {
     actionName: string;
     input: Record<string, unknown>;
   }) => Promise<unknown>;
+  stop: (appId: string) => Promise<void>;
   restart: (appId: string) => Promise<void>;
   dispose: () => Promise<void>;
-  private toMcpServerRecord;
-  private createAppRuntimeEnv;
-  private toServiceAction;
 }
 //#endregion
 //#region src/services/service-app-record.service.d.ts
@@ -2356,11 +2738,17 @@ declare class ServiceAppManager {
   private readonly removalService;
   private readonly runtimeService;
   private readonly recordService;
+  private readonly actionGrants;
+  private readonly packageRuntime;
+  private readonly lifecycleService;
   private reconciliationDiagnostics;
   constructor(params: {
     configManager: ConfigManager;
     runtimeService?: ServiceAppRuntime;
     listPackageComponentSources?: () => Promise<AppPackageComponentSource[]>;
+    capabilityGrantManager: CapabilityGrantManager;
+    hasAgent?: (agentId: string) => boolean;
+    portableServiceRunnerPath?: string;
   });
   start: () => Promise<void>;
   listServiceApps: () => Promise<ServiceAppList>;
@@ -2376,30 +2764,30 @@ declare class ServiceAppManager {
   grantServiceActions: (actionIds: readonly string[], request: ServiceActionGrantRequest) => Promise<ServiceActionGrant[]>;
   listServiceActionGrants: () => Promise<ServiceActionGrant[]>;
   revokeServiceAction: (caller: ServiceActionCaller, actionId: string) => Promise<void>;
+  matchesCapabilityGrant: (grant: CapabilityGrant) => Promise<boolean>;
   restartServiceApp: (appId: string) => Promise<ServiceAppRecord>;
   listWorkspaceDataOwners: () => Promise<WorkspaceServiceDataOwner[]>;
   deleteServiceApp: (appId: string, purgeData?: boolean) => Promise<ServiceAppDeleteResult>;
   dispose: () => Promise<void>;
   assertCanActivatePackageComponents: (components: AppPackageComponentSource[]) => Promise<void>;
+  activatePackageComponents: (components: AppPackageComponentSource[]) => Promise<void>;
   deactivatePackageComponents: (components: AppPackageComponentSource[]) => Promise<void>;
-  removePackageComponentGrants: (components: AppPackageComponentSource[]) => Promise<void>;
+  preparePackageComponentDeactivation: (components: AppPackageComponentSource[]) => Promise<() => Promise<void>>;
+  removePackageComponentGrants: (components: AppPackageComponentSource[]) => Promise<() => Promise<void>>;
   private withGrantState;
   private requireServiceAction;
   private requireServiceAppForAction;
   private requireServiceApp;
   private listValidServiceApps;
-  private assertCaller;
-  private assertDeclaredAction;
   private normalizeActionIds;
   private getWorkspacePath;
   private getServiceAppsPath;
   private getServiceAppLockPath;
-  private createGrantStore;
   private listPackageComponentSources;
   private listServiceAppDirNames;
   private isMissingFileError;
 }
-type ServiceAppRuntime = Pick<McpServiceAppRuntimeService, "dispose" | "getStatus" | "invokeAction" | "listActions" | "restart">; //# sourceMappingURL=service-app.manager.d.ts.map
+type ServiceAppRuntime = Pick<ServiceAppRuntimeService, "dispose" | "getStatus" | "invokeAction" | "listActions" | "restart" | "stop"> & Pick<Partial<ServiceAppRuntimeService>, "start">; //# sourceMappingURL=service-app.manager.d.ts.map
 //#endregion
 //#region src/utils/skill-frontmatter.utils.d.ts
 type LocalizedTextMap = Record<string, string>;
@@ -2510,13 +2898,29 @@ declare function dispatchAgentRuntimeSessionRequest(input: {
 }): Promise<void>;
 declare function createAgentRuntimeSessionRequestDispatcher(options: AgentRuntimeSessionRequestDispatcherOptions): SessionRequestDispatcher;
 //#endregion
+//#region src/features/feature-controls/types/feature-controls.types.d.ts
+type ProductFeatureControls = {
+  desktopAutomation: {
+    available: boolean;
+  };
+};
+//#endregion
+//#region src/features/feature-controls/services/feature-controls.service.d.ts
+declare class FeatureControlsService {
+  private readonly desktopHost;
+  constructor(desktopHost: DesktopHost);
+  get: () => Promise<ProductFeatureControls>;
+}
+//#endregion
 //#region src/app/nextclaw-kernel.d.ts
 type NextclawKernelOptions = {
   homeDir?: string;
   configPath?: string;
   builtInAppsDirectory?: string;
+  portableServiceRunnerPath?: string;
   productVersion?: string;
   productActivitySink?: ProductActivitySink;
+  desktopHost?: DesktopHost;
 };
 type NextclawKernelRuntimeControl<TGatewayInput, TUiInput, TStartInput> = {
   gateway: (input: TGatewayInput) => Promise<void>;
@@ -2569,12 +2973,14 @@ declare class NextclawKernel {
   readonly toolProviderManager: ToolProviderManager;
   readonly agentRunRequestManager: AgentRunRequestManager;
   readonly observations: ObservationManager;
+  readonly capabilityGrants: CapabilityGrantManager;
+  readonly featureControls: FeatureControlsService;
+  private readonly capabilityGrantLegacyMigration;
   private readonly ncpAgentSessionJournalStore;
   private readonly contributions;
   private gatewayController;
   constructor(options?: NextclawKernelOptions);
-  private createContributions;
-  private installAppPackageRuntimeHooks;
+  private createCapabilityGrantLegacyMigration;
   listSessionTypes: (params?: AgentRuntimeSessionTypeDescribeParams) => Promise<{
     defaultType: string;
     options: AgentRuntimeSessionTypeOption[];
@@ -2801,6 +3207,7 @@ type NextclawHarnessOptions = {
   homeDir?: string;
   configPath?: string;
   builtInAppsDirectory?: string;
+  portableServiceRunnerPath?: string;
   productVersion?: string;
   productActivitySink?: {
     record: (signal: {
@@ -3004,6 +3411,48 @@ declare class PanelAppAssetTokenService {
   private parseClaims;
 }
 //#endregion
+//#region src/services/mcp-service-app-runtime.service.d.ts
+type RuntimeState = {
+  status: ServiceAppRuntimeStatus;
+  lastError?: string;
+  lastStartedAt?: string;
+  lastReadyAt?: string;
+  lastFailedAt?: string;
+};
+declare class McpServiceAppRuntimeService {
+  private readonly params;
+  private readonly lifecycleManager;
+  private readonly states;
+  constructor(params: {
+    getConfig: () => Config;
+  });
+  getStatus: (appId: string) => RuntimeState;
+  listActions: ({
+    app,
+    manifest
+  }: {
+    app: ServiceAppRecord;
+    manifest: ServiceAppManifest;
+  }) => Promise<ServiceAction[]>;
+  invokeAction: ({
+    app,
+    manifest,
+    actionName,
+    input
+  }: {
+    app: ServiceAppRecord;
+    manifest: ServiceAppManifest;
+    actionName: string;
+    input: Record<string, unknown>;
+  }) => Promise<unknown>;
+  stop: (appId: string) => Promise<void>;
+  restart: (appId: string) => Promise<void>;
+  dispose: () => Promise<void>;
+  private toMcpServerRecord;
+  private createAppRuntimeEnv;
+  private toServiceAction;
+}
+//#endregion
 //#region src/services/command-registry.service.d.ts
 type CommandOptionType = "string" | "boolean" | "number";
 type CommandOption = {
@@ -3277,5 +3726,5 @@ declare function resolveLegacyEventType(message: SessionMessage): string;
 declare function getUiContentParamsBootstrapScript(): string;
 declare function injectUiContentParamsBootstrap(html: string): string;
 //#endregion
-export { AUTOMATIC_UPDATE_CHECK_INTERVAL_MS, AccessLoginResult, AccessManager, AccessManagerOptions, AccessPasswordStatus, AccessPrincipal, AccessRole, AccessSessionRecord, AccessSessionState, AgentManager, AgentManagerOptions, AgentRunClient, type AgentRunReply, type AgentRunReplyOptions, AgentRunSession, type AgentRunStreamOptions, type AgentRuntimeEntry, type AgentRuntimeProviderRegistration, AgentRuntimeSessionRequestDispatcherOptions, type AgentRuntimeSessionTypeCatalog, type AgentRuntimeSessionTypeDescribeParams, AgentRuntimeSessionTypeIcon, type AgentRuntimeSessionTypeOption, AgentRuntimeSessionTypeProvider, AppDataDeleteResult, AppDataDiagnostic, AppDataEntry, AppDataError, AppDataErrorCode, AppDataLifecycle, AppDataList, AppDataManager, AppDataSource, type AppEventEmitOptions, type AppEventEnvelope, type AppEventHandler, type AppEventKey, AppPackageComponentKind, AppPackageComponentSource, AppPackageComponentSourceList, AppPackageComponentView, AppPackageConflict, AppPackageError, AppPackageErrorCode, AppPackageHostTarget, AppPackageList, AppPackageManager, AppPackageOperationAction, AppPackageOperationInput, AppPackageOperationList, AppPackageOperationResult, AppPackageOperationStatus, AppPackageOperationView, AppPackageRuntimeHooks, AppPackageUnavailableDiagnostic, AppPackageView, type AssetApi, AutomationManager, AutomationManagerOptions, BindContextInput, type BuildAgentRunSendPayloadParams, BuildContextTailInput, BuiltinNarpRuntimeProviderService, CONTEXT_COMPACTION_CONTINUATION_TEXT, CONTEXT_COMPACTION_PROJECTION_KIND, CONTEXT_COMPACTION_PROJECTION_METADATA_KEY, CONTEXT_COMPACTION_SYSTEM_PREAMBLE, CONTEXT_COMPACTION_TIMELINE_KIND, ChannelManager, ChannelReplyRouterDispatchParams, CommandRegistry, ConfigManager, ConfigManagerOptions, ConfigManagerRuntimeHooks, ConfigMutationResult, ContextBinding, type ContextBlock, ContextCompactionJournalRecoveryService, ContextCompactionModelProjection, ContextCompactionPreflightBeginResult, ContextCompactionPreflightResult, ContextCompactionPreflightService, ContextCompactionTimelineCheckpoint, ContextCompactionTrigger, type ContextProvider, type ContextProviderRequest, Contribution, CreateAgentRunSessionParams, CreateInboxDeliveryInput, CreateProjectInput, DEFAULT_AGENT_RUNTIME_ENTRY_ID, DEFAULT_SERVICE_ACTION_RISK, DirectPromptDispatchExecution, DirectPromptDispatchParams, DirectPromptDispatchResult, type Disposer, EventAdmissionPolicy, EventBus, type EventBusOptions, EventDelivery, EventSubscription, EventSubscriptionBudget, ExtensionLoadProgress, ExtensionLoadResult, ExtensionManager, type ExtensionRuntimeStatus, GatewayInboundLoopRuntime, GatewayInboundProcessor, type IContextRegistry, type IKernel, type IMcpRegistry, type IModelRegistry, type INextclawAgent, type INextclawAgentRegistry, type INextclawAgentSessions, type INextclawContributionRegistry, type INextclawHarness, type INextclawRun, type INextclawSession, type INextclawSessionRegistry, type IRuntimeRegistry, type IToolRegistry, InboxDeliveryError, InboxDeliveryErrorCode, InboxDeliveryManager, InboxDeliveryManagerOptions, Ingress, type IngressContext, type IngressEnvelope, type IngressHandler, InstallationKind, InstalledSkillDetail, InstalledSkillSummary, InstalledSkillsList, JsonPointer, JsonValue, type Key, type LLMResponse, type LLMStreamEvent, type LearningLoopRuntimeConfig, LlmProviderManager, LlmProviderRuntime, LlmUsageManager, LlmUsageManagerOptions, LlmUsageRecord, LlmUsageSnapshot, LlmUsageStats, LlmUsageStore, LlmUsageStoreOptions, LlmUsageSummary, LocalizedTextMap, MAX_INBOX_DELIVERY_CONTENT_LENGTH, type McpCatalogFilter, McpManager, type McpServerDefinition, type McpServerRecord, McpServiceAppRuntimeService, type McpToolCallInput, type McpToolCatalogEntry, type ModelChatInput, NARP_HTTP_RUNTIME_KIND, NARP_STDIO_RUNTIME_KIND, NEXTCLAW_TIMELINE_KIND_METADATA_KEY, NcpAgentSessionJournalStore, type NcpEndpointEvent, type NcpMessage, type NcpTool, type NextclawAgentDefinition, type NextclawContributionDescriptor, NextclawHarness, NextclawHarnessError, type NextclawHarnessErrorCode, type NextclawHarnessOptions, NextclawKernel, NextclawKernelOptions, NextclawNcpResolvedAgentProfile, NextclawNcpResolvedRunContext, NextclawNcpRunContextResolveParams, type NextclawRunStatus, type NextclawSessionCreateInput, type NextclawSessionRunInput, type NextclawTaskInput, type NextclawTaskResult, ObservationCapabilityDescriptor, ObservationContextTail, ObservationEvent, ObservationEventAdmissionDecision, ObservationExtensionRuntime, ObservationManager, ObservationManagerOptions, ObservationRef, ObservationRelationshipStatus, ObservationState, ObservationTarget, PANEL_APP_AGENT_CAPABILITIES, PROJECT_TEMPLATE_IDS, PROVIDER_MODEL_CATALOG_REFRESH_INTERVAL_MS, PanelAppAgentCapability, PanelAppAgentGenerateObjectInput, PanelAppAgentGenerateObjectRequest, PanelAppAgentGenerateObjectResult, PanelAppAgentRunClient, PanelAppAgentSendPayload, PanelAppAgentSendRequest, PanelAppAgentSendResult, PanelAppAssetTokenService, PanelAppBridgeSession, PanelAppCapabilityGrant, PanelAppCapabilityGrantCaller, type PanelAppClientGrant, PanelAppContent, PanelAppDeleteResult, PanelAppEntry, PanelAppError, PanelAppErrorCode, PanelAppList, PanelAppManager, type PanelAppPreferencesUpdate, PreferenceEntry, PreferenceError, PreferenceErrorCode, PreferenceJsonValue, PreferenceManager, PreferenceManagerOptions, ProductActivityKind, ProductActivitySignal, ProductActivitySink, ProductActivitySource, ProjectError, ProjectErrorCode, ProjectManager, ProjectManagerOptions, ProjectRecord, ProjectTemplate, ProjectTemplateId, type ProviderCatalogPlugin, ProviderManagerNcpLLMApi, ProviderModelCatalogEntry, ProviderModelCatalogManager, ProviderModelCatalogSnapshot, ProviderModelsDiscoverInput, type ProviderSpec, ResolvedAgentProfile, SERVICE_APP_MANIFEST_FILE_NAME, ServiceAction, ServiceActionCaller, ServiceActionGrant, ServiceActionGrantRequest, ServiceActionGrantState, ServiceActionInvokeRequest, ServiceActionInvokeResult, ServiceActionRisk, ServiceActionRuntimeState, ServiceAppDeleteResult, ServiceAppError, type ServiceAppErrorCode, ServiceAppList, ServiceAppManager, ServiceAppManifest, ServiceAppManifestAction, ServiceAppProtocol, ServiceAppRecord, ServiceAppRuntimeStatus, SessionContextCompactionError, SessionContextCompactionErrorCode, SessionContextCompactionManager, SessionContextCompactionResult, SessionManager, SessionManagerOptions, SessionMessageCursorError, SessionMessagePage, SessionModelTokenUsage, type SessionPendingInput, type SessionQueuedInput, SessionRequestManager, SessionRequestManagerOptions, SessionSettingsError, SessionSettingsPatch, type SessionSteerQueuedInputResult, SessionTokenUsageStatus, SessionTokenUsageSummary, SessionTokenUsageTotals, SkillFrontmatter, type SkillInfo, SkillManager, type SkillScope, SubscribeEventsInput, SystemObjectReferenceError, SystemObjectReferenceErrorCode, SystemObjectReferenceManager, SystemObjectReferenceProvider, SystemObjectReferenceSnapshotSource, type TypedKey, TypedPredicate, UnsignedUpdateManifest, type Unsubscribe, UpdateBlockReason, UpdateHostKind, UpdateManifest, UpdateManifestReader, UpdateProgress, UpdateSnapshot, UpdateStatus, type WorkspaceServiceDataOwner, assertObservationJsonValue, assertObservationPredicate, buildAgentRunSendPayload, buildContextCompactionModelProjection, buildContextCompactionTimelineNcpMessage, buildLlmUsageSummary, buildLocalizedTextMap, buildNextclawNcpRunContext, buildObservationEventModelMessage, buildServiceActionId, createAgentRuntimeSessionRequestDispatcher, createAssetTools, createContextCompactionMessageId, createContextWindowSignature, createCronJobSystemObjectProvider, createInboxDeliverySystemObjectProvider, createLlmUsageRecord, createTypedKey, describeAgentRuntimeSessionTypes, dispatchAgentRuntimeSessionRequest, dispatchChannelReplyRoute, dispatchPromptOverNcp, dispatchPromptOverNcpResult, evaluateObservationEventAdmission, eventKeys, getAutomaticUpdateCheckDelay, getServiceActionName, getServiceAppManifestPath, getUiContentParamsBootstrapScript, getUnsignedUpdateManifest, hasLlmUsageTelemetry, ingressKeys, injectUiContentParamsBootstrap, isAppDataError, isAppPackageError, isContextCompactionProjectionMessage, isContextCompactionTimelineMessage, isContextWindowSnapshot, isInboxDeliveryError, isPanelAppAgentCapability, isPanelAppError, isPreferenceError, isProjectError, isReplyCapableChannel, isServiceAppError, isSessionContextCompactionError, isSessionMessageCursorError, isSessionSettingsError, isSystemObjectReferenceError, listExtensionChannelIds, listServiceAppManifestActions, matchesObservationPredicate, mergeServiceAppRuntimeActions, normalizeAgentRuntimeSessionTypeIcon, normalizeLlmUsageModel, normalizeOptionalString, parseObservationDuration, parseServiceAppManifest, parseSkillFrontmatter, readContextCompactionCheckpoint, readContextWindowEventSessionId, readJsonPointer, readLatestContextCompactionCheckpoint, readLearningLoopRuntimeConfig, readMetadataModel, readMetadataThinking, readServiceAppManifest, resolveAgentRuntimeEntries, resolveAutomaticUpdateCheckIntervalMs, resolveChannelReplyRoute, resolveEffectiveModel, resolveLegacyEventType, resolveSessionChannelContext, runGatewayInboundLoop, runNextclawTask, sanitizeLlmUsage, serializeContextTail, serializeUnsignedUpdateManifest, shouldRefreshContextWindowDuringStream, shouldRefreshContextWindowImmediately, startPromptOverNcpExecution, stripSkillFrontmatter, syncSessionThinkingPreference, toBoundedJson, toNcpMessages, waitForAgentRuntimeSessionReply };
+export { AUTOMATIC_UPDATE_CHECK_INTERVAL_MS, AccessLoginResult, AccessManager, AccessManagerOptions, AccessPasswordStatus, AccessPrincipal, AccessRole, AccessSessionRecord, AccessSessionState, AgentManager, AgentManagerOptions, AgentRunClient, type AgentRunReply, type AgentRunReplyOptions, AgentRunSession, type AgentRunStreamOptions, type AgentRuntimeEntry, type AgentRuntimeProviderRegistration, AgentRuntimeSessionRequestDispatcherOptions, type AgentRuntimeSessionTypeCatalog, type AgentRuntimeSessionTypeDescribeParams, AgentRuntimeSessionTypeIcon, type AgentRuntimeSessionTypeOption, AgentRuntimeSessionTypeProvider, AgentServiceActionCaller, AppDataDeleteResult, AppDataDiagnostic, AppDataEntry, AppDataError, AppDataErrorCode, AppDataLifecycle, AppDataList, AppDataManager, AppDataSource, type AppEventEmitOptions, type AppEventEnvelope, type AppEventHandler, type AppEventKey, AppPackageComponentKind, AppPackageComponentSource, AppPackageComponentSourceList, AppPackageComponentView, AppPackageConflict, AppPackageError, AppPackageErrorCode, AppPackageHostTarget, AppPackageList, AppPackageManager, AppPackageOperationAction, AppPackageOperationInput, AppPackageOperationList, AppPackageOperationResult, AppPackageOperationStatus, AppPackageOperationView, AppPackageRuntimeHooks, AppPackageUnavailableDiagnostic, AppPackageUninstallRollback, AppPackageView, type AssetApi, AutomationManager, AutomationManagerOptions, BindContextInput, type BuildAgentRunSendPayloadParams, BuildContextTailInput, BuiltinNarpRuntimeProviderService, CONTEXT_COMPACTION_CONTINUATION_TEXT, CONTEXT_COMPACTION_PROJECTION_KIND, CONTEXT_COMPACTION_PROJECTION_METADATA_KEY, CONTEXT_COMPACTION_SYSTEM_PREAMBLE, CONTEXT_COMPACTION_TIMELINE_KIND, CapabilityGrant, CapabilityGrantDecision, CapabilityGrantFilter, CapabilityGrantLegacyMigrationService, CapabilityGrantListener, CapabilityGrantManager, CapabilityGrantRequest, CapabilityGrantResource, CapabilityGrantRevocationListener, CapabilityGrantStore, CapabilityGrantSubject, ChannelManager, ChannelReplyRouterDispatchParams, CommandRegistry, ConfigManager, ConfigManagerOptions, ConfigManagerRuntimeHooks, ConfigMutationResult, ContextBinding, type ContextBlock, ContextCompactionJournalRecoveryService, ContextCompactionModelProjection, ContextCompactionPreflightBeginResult, ContextCompactionPreflightResult, ContextCompactionPreflightService, ContextCompactionTimelineCheckpoint, ContextCompactionTrigger, type ContextProvider, type ContextProviderRequest, Contribution, CreateAgentRunSessionParams, CreateInboxDeliveryInput, CreateProjectInput, DEFAULT_AGENT_RUNTIME_ENTRY_ID, DEFAULT_SERVICE_ACTION_RISK, DESKTOP_HOST_ACCESS, DESKTOP_HOST_PROTOCOL_VERSION, DesktopApplicationTarget, DesktopCapabilityError, DesktopCapabilityErrorCode, DesktopHost, DesktopHostAccess, DesktopHostCaller, DesktopHostCapabilityDeclaration, DesktopHostCapabilityManager, DesktopHostEvent, DesktopHostEventListener, DesktopHostManifest, DesktopHostMethod, DesktopHostRequest, DesktopHostResponse, DesktopHostStatus, DesktopNodeReplService, DesktopSessionCaller, DesktopSessionStateService, DesktopSnapshotOptions, DirectPromptDispatchExecution, DirectPromptDispatchParams, DirectPromptDispatchResult, type Disposer, EventAdmissionPolicy, EventBus, type EventBusOptions, EventDelivery, EventSubscription, EventSubscriptionBudget, ExtensionLoadProgress, ExtensionLoadResult, ExtensionManager, type ExtensionRuntimeStatus, FeatureControlsService, GatewayInboundLoopRuntime, GatewayInboundProcessor, type IContextRegistry, type IKernel, type IMcpRegistry, type IModelRegistry, type INextclawAgent, type INextclawAgentRegistry, type INextclawAgentSessions, type INextclawContributionRegistry, type INextclawHarness, type INextclawRun, type INextclawSession, type INextclawSessionRegistry, type IRuntimeRegistry, type IToolRegistry, InboxDeliveryError, InboxDeliveryErrorCode, InboxDeliveryManager, InboxDeliveryManagerOptions, Ingress, type IngressContext, type IngressEnvelope, type IngressHandler, InstallationKind, InstalledSkillDetail, InstalledSkillSummary, InstalledSkillsList, JsonPointer, JsonValue, type Key, type LLMResponse, type LLMStreamEvent, type LearningLoopRuntimeConfig, LlmProviderManager, LlmProviderRuntime, LlmUsageManager, LlmUsageManagerOptions, LlmUsageRecord, LlmUsageSnapshot, LlmUsageStats, LlmUsageStore, LlmUsageStoreOptions, LlmUsageSummary, LocalizedTextMap, MAX_INBOX_DELIVERY_CONTENT_LENGTH, type McpCatalogFilter, McpManager, type McpServerDefinition, type McpServerRecord, McpServiceAppRuntimeService, type McpToolCallInput, type McpToolCatalogEntry, type ModelChatInput, NARP_HTTP_RUNTIME_KIND, NARP_STDIO_RUNTIME_KIND, NEXTCLAW_TIMELINE_KIND_METADATA_KEY, NcpAgentSessionJournalStore, type NcpEndpointEvent, type NcpMessage, type NcpTool, type NextclawAgentDefinition, type NextclawContributionDescriptor, NextclawHarness, NextclawHarnessError, type NextclawHarnessErrorCode, type NextclawHarnessOptions, NextclawKernel, NextclawKernelOptions, NextclawNcpResolvedAgentProfile, NextclawNcpResolvedRunContext, NextclawNcpRunContextResolveParams, type NextclawRunStatus, type NextclawSessionCreateInput, type NextclawSessionRunInput, type NextclawTaskInput, type NextclawTaskResult, ObservationCapabilityDescriptor, ObservationContextTail, ObservationEvent, ObservationEventAdmissionDecision, ObservationExtensionRuntime, ObservationManager, ObservationManagerOptions, ObservationRef, ObservationRelationshipStatus, ObservationState, ObservationTarget, PANEL_APP_AGENT_CAPABILITIES, PROJECT_TEMPLATE_IDS, PROVIDER_MODEL_CATALOG_REFRESH_INTERVAL_MS, PanelAppAgentCapability, PanelAppAgentGenerateObjectInput, PanelAppAgentGenerateObjectRequest, PanelAppAgentGenerateObjectResult, PanelAppAgentRunClient, PanelAppAgentSendPayload, PanelAppAgentSendRequest, PanelAppAgentSendResult, PanelAppAssetTokenService, PanelAppBridgeSession, PanelAppCapabilityGrant, PanelAppCapabilityGrantCaller, PanelAppClientGrant, PanelAppContent, PanelAppDeleteResult, PanelAppEntry, PanelAppError, PanelAppErrorCode, PanelAppList, PanelAppManager, type PanelAppPreferencesUpdate, PanelServiceActionCaller, PreferenceEntry, PreferenceError, PreferenceErrorCode, PreferenceJsonValue, PreferenceManager, PreferenceManagerOptions, ProductActivityKind, ProductActivitySignal, ProductActivitySink, ProductActivitySource, type ProductFeatureControls, ProjectError, ProjectErrorCode, ProjectManager, ProjectManagerOptions, ProjectRecord, ProjectTemplate, ProjectTemplateId, type ProviderCatalogPlugin, ProviderManagerNcpLLMApi, ProviderModelCatalogEntry, ProviderModelCatalogManager, ProviderModelCatalogSnapshot, ProviderModelsDiscoverInput, type ProviderSpec, ResolvedAgentProfile, ResolvedDesktopApplicationTarget, SERVICE_APP_MANIFEST_FILE_NAME, ServiceAction, ServiceActionCaller, ServiceActionGrant, ServiceActionGrantRequest, ServiceActionGrantState, ServiceActionInvokeRequest, ServiceActionInvokeResult, ServiceActionRisk, ServiceActionRuntimeState, ServiceAppDeleteResult, ServiceAppError, type ServiceAppErrorCode, ServiceAppLifecycle, ServiceAppList, ServiceAppManager, ServiceAppManifest, ServiceAppManifestAction, ServiceAppProtocol, ServiceAppRecord, ServiceAppRuntimeService, ServiceAppRuntimeStatus, SessionContextCompactionError, SessionContextCompactionErrorCode, SessionContextCompactionManager, SessionContextCompactionResult, SessionManager, SessionManagerOptions, SessionMessageCursorError, SessionMessagePage, SessionModelTokenUsage, type SessionPendingInput, type SessionQueuedInput, SessionRequestManager, SessionRequestManagerOptions, SessionSettingsError, SessionSettingsPatch, type SessionSteerQueuedInputResult, SessionTokenUsageStatus, SessionTokenUsageSummary, SessionTokenUsageTotals, SkillFrontmatter, type SkillInfo, SkillManager, type SkillScope, SubscribeEventsInput, SystemObjectReferenceError, SystemObjectReferenceErrorCode, SystemObjectReferenceManager, SystemObjectReferenceProvider, SystemObjectReferenceSnapshotSource, type TypedKey, TypedPredicate, UnavailableDesktopHost, UnsignedUpdateManifest, type Unsubscribe, UpdateBlockReason, UpdateHostKind, UpdateManifest, UpdateManifestReader, UpdateProgress, UpdateSnapshot, UpdateStatus, type WorkspaceServiceDataOwner, assertObservationJsonValue, assertObservationPredicate, buildAgentRunSendPayload, buildContextCompactionModelProjection, buildContextCompactionTimelineNcpMessage, buildLlmUsageSummary, buildLocalizedTextMap, buildNextclawNcpRunContext, buildObservationEventModelMessage, buildServiceActionId, capabilityGrantCovers, createAgentRuntimeSessionRequestDispatcher, createAssetTools, createCapabilityDeclarationFingerprint, createContextCompactionMessageId, createContextWindowSignature, createCronJobSystemObjectProvider, createDesktopHostError, createInboxDeliverySystemObjectProvider, createLlmUsageRecord, createPanelAppAgentGrantRequest, createPanelAppClientGrantRequest, createServiceActionGrantRequest, createTypedKey, describeAgentRuntimeSessionTypes, dispatchAgentRuntimeSessionRequest, dispatchChannelReplyRoute, dispatchPromptOverNcp, dispatchPromptOverNcpResult, evaluateObservationEventAdmission, eventKeys, getAutomaticUpdateCheckDelay, getCapabilityGrantKey, getServiceActionName, getServiceAppManifestPath, getUiContentParamsBootstrapScript, getUnsignedUpdateManifest, hasLlmUsageTelemetry, ingressKeys, injectUiContentParamsBootstrap, isAppDataError, isAppPackageError, isContextCompactionProjectionMessage, isContextCompactionTimelineMessage, isContextWindowSnapshot, isInboxDeliveryError, isPanelAppAgentCapability, isPanelAppError, isPreferenceError, isProjectError, isReplyCapableChannel, isServiceAppError, isSessionContextCompactionError, isSessionMessageCursorError, isSessionSettingsError, isSystemObjectReferenceError, listExtensionChannelIds, listServiceAppManifestActions, matchesCapabilityGrantFilter, matchesObservationPredicate, mergeServiceAppRuntimeActions, normalizeAgentRuntimeSessionTypeIcon, normalizeCapabilityGrantRequest, normalizeLlmUsageModel, normalizeOptionalString, parseObservationDuration, parseServiceAppManifest, parseSkillFrontmatter, readContextCompactionCheckpoint, readContextWindowEventSessionId, readJsonPointer, readLatestContextCompactionCheckpoint, readLearningLoopRuntimeConfig, readMetadataModel, readMetadataThinking, readServiceActionTargetId, readServiceAppManifest, resolveAgentRuntimeEntries, resolveAutomaticUpdateCheckIntervalMs, resolveChannelReplyRoute, resolveEffectiveModel, resolveLegacyEventType, resolveSessionChannelContext, runGatewayInboundLoop, runNextclawTask, sanitizeLlmUsage, serializeContextTail, serializeUnsignedUpdateManifest, shouldRefreshContextWindowDuringStream, shouldRefreshContextWindowImmediately, startPromptOverNcpExecution, stripSkillFrontmatter, syncSessionThinkingPreference, toBoundedJson, toNcpMessages, waitForAgentRuntimeSessionReply };
 //# sourceMappingURL=index.d.ts.map