@nextclaw/kernel 0.13.0 → 0.14.0

package/dist/index.d.ts

@@ -1,11 +1,12 @@
 import { AUTOMATIC_UPDATE_CHECK_INTERVAL_MS, getAutomaticUpdateCheckDelay, resolveAutomaticUpdateCheckIntervalMs } from "./utils/automatic-update-check.utils.js";
 import { a as getUnsignedUpdateManifest, c as UpdateBlockReason, d as UpdateStatus, i as UpdateManifestReader, l as UpdateProgress, n as UpdateHostKind, o as serializeUnsignedUpdateManifest, r as UpdateManifest, s as InstallationKind, t as UnsignedUpdateManifest, u as UpdateSnapshot } from "./update-manifest.types-CQpbURTE.js";
+import * as _$_nextclaw_core0 from "@nextclaw/core";
 import { BaseChannel, Config, ContextCompactionCheckpoint, ContextCompactionPhase, ContextCompactionPlan, ContextWindowSnapshot, CreateAgentProfileInput, CreateSessionContextInheritanceInput, CreateSessionInput, CreatedSession, CronService, DiagnosticRuntime, EffectiveAgentProfile, ExtensionChannelBinding, ExtensionDiagnostic, ExtensionRegistry, ExtensionUiMetadata, GatewayController, InboundAttachment, InboundMessage, LLMProvider, LLMResponse, LLMResponse as LLMResponse$1, LLMStreamEvent, LLMStreamEvent as LLMStreamEvent$1, LocalExecutionClaimService, McpServerDefinition, McpServerDefinition as McpServerDefinition$1, MessageBus, ModelThinkingCapability, OutboundMessage, ProviderCatalogPlugin, ProviderCatalogPlugin as ProviderCatalogPlugin$1, ProviderModelDiscoveryResult, ProviderSpec, ProviderSpec as ProviderSpec$1, RequestSessionParams, RequestedSkillsMetadataReader, SearchConfig, SessionMessage, SessionRequestDispatcher, SessionRequestRecord, SessionRequestSourceNotifier, SessionRequestToolResult, SessionSearchService, SkillInfo, SkillInfo as SkillInfo$1, SkillScope, SpawnSessionAndRequestParams, ThinkingLevel, UpdateAgentProfileInput, buildCompressingCompactionCheckpoint, resolveThinkingLevel } from "@nextclaw/core";
 import { ListMessagesOptions, ListSessionsOptions, NcpAgentConversationStateManager, NcpAgentRuntime, NcpContextTail, NcpEndpointEvent, NcpEndpointEvent as NcpEndpointEvent$1, NcpEventType, NcpInputDelivery, NcpJsonValue, NcpLLMApi, NcpLLMApiInput, NcpLLMApiOptions, NcpMessage, NcpMessage as NcpMessage$1, NcpMessagePart, NcpResolvedInputDelivery, NcpRunHandle, NcpRunTriggerInput, NcpSessionApi, NcpSessionMessagePageInfo, NcpSessionPatch, NcpSessionSummary, NcpTool, NcpTool as NcpTool$1, OpenAIChatChunk, OpenAIChatMessage } from "@nextclaw/ncp";
 import { LocalAssetStore } from "@nextclaw/ncp-agent-runtime";
 import { AgentRunSendIngressPayload, AppEventEmitOptions, AppEventEnvelope, AppEventHandler, AppEventKey, Contribution as Contribution$1, Disposer, Disposer as Disposer$1, EventBus, EventBus as EventBus$1, EventBusOptions, InboxDelivery, InboxDeliveryContentType, InboxDeliveryListView, InboxDeliverySource, InboxDeliveryStateAction, Ingress, Ingress as Ingress$1, IngressContext, IngressEnvelope, IngressHandler, Key, RuntimeModelSelectionMode, SystemObjectReferenceGroupDescriptor, SystemObjectReferenceItem, SystemObjectReferenceListView, SystemObjectResolvedReference, TypedKey, Unsubscribe, Unsubscribe as Unsubscribe$1, createTypedKey, eventKeys, ingressKeys } from "@nextclaw/shared";
 import { AgentSessionRecord, ChatTarget, NcpReplyInput, RuntimeFactoryParams } from "@nextclaw/ncp-toolkit";
-import { AppInstallProgressHandler, AppNativeArtifactTarget, AppPermissions, AppPlatformTargetService, AppRollbackResult, AppRuntimeIsolation, AppRuntimeProfile, AppStorageContext, AppStorageUsage, AppUninstallResult, AppUpdateResult } from "@nextclaw/app-runtime";
+import { AppInstallProgressHandler, AppNativeArtifactTarget, AppPermissions, AppPlatformTargetService, AppRollbackResult, AppRuntimeIsolation, AppRuntimeProfile, AppSecretBinding, AppSecretSlot, AppStorageContext, AppStorageUsage, AppUninstallResult, AppUpdateResult } from "@nextclaw/app-runtime";
 import * as _$_nextclaw_mcp0 from "@nextclaw/mcp";
 import { McpCatalogFilter, McpCatalogFilter as McpCatalogFilter$1, McpRegistryService, McpServerRecord, McpServerRecord as McpServerRecord$1, McpToolCatalogEntry, McpToolCatalogEntry as McpToolCatalogEntry$1 } from "@nextclaw/mcp";
 
@@ -1110,6 +1111,297 @@ declare class AutomationManager extends CronService {
   constructor(options: AutomationManagerOptions);
 }
 //#endregion
+//#region src/types/service-app.types.d.ts
+type ServiceAppProtocol = "mcp" | "wasi-component";
+type ServiceActionRisk = "read" | "write" | "external" | "dangerous";
+type ServiceAppRuntimeStatus = "idle" | "starting" | "running" | "failed" | "stopped";
+type ServiceAppManifestAction = {
+  risk?: ServiceActionRisk;
+  title?: string;
+  description?: string;
+  inputSchema?: Record<string, unknown>;
+  timeoutMs?: number;
+};
+type ServiceAppLifecycle = {
+  mode: "action";
+} | {
+  mode: "resident";
+  eventIntervalMs: number;
+} | {
+  mode: "provider";
+};
+/**
+ * A dependency intentionally kept outside a portable `.napp` artifact.
+ * It never carries credentials, connection strings, or installation commands.
+ */
+type ServiceAppExternalRemediation = {
+  kind: "agent-setup";
+  summary: string;
+  requiresUserAction?: boolean;
+};
+/**
+ * The versioned WIT surface used by a capability Provider and its Consumers.
+ * A Provider carries an exact semver release; a Consumer carries the range it
+ * accepts. This declaration is static manifest metadata, never a registry.
+ */
+type ServiceAppWitContract = {
+  package: string;
+  interface: string;
+  version: string;
+};
+type ServiceAppCapabilityRequirement = {
+  id: string;
+  version?: string; /** A Provider Component packaged beside this Consumer. */
+  provider?: string;
+  wit?: ServiceAppWitContract;
+  title?: string;
+  description?: string;
+  remediation?: ServiceAppExternalRemediation;
+};
+type ServiceAppResourceRequirement = {
+  binding: string;
+  type: string;
+  required?: boolean;
+  title?: string;
+  description?: string;
+  remediation?: ServiceAppExternalRemediation;
+};
+/**
+ * A portable Guest can name a slot but never a provider, model, or Agent.
+ * The Kernel binds the slot through a capability grant after installation.
+ */
+type ServiceAppModelCapabilitySlot = {
+  id: string;
+  title: string;
+  description: string;
+  required: boolean;
+  maxTokens?: number;
+  timeoutMs?: number;
+};
+type ServiceAppAgentCapabilitySlot = {
+  id: string;
+  title: string;
+  description: string;
+  required: boolean;
+};
+type ServiceAppRequirements = {
+  capabilities?: ServiceAppCapabilityRequirement[];
+  resources?: ServiceAppResourceRequirement[];
+  modelSlots?: ServiceAppModelCapabilitySlot[];
+  agentSlots?: ServiceAppAgentCapabilitySlot[];
+};
+/**
+ * A stable capability exposed by a Service Provider App. Provider identity is
+ * still the Service id; this declaration only describes what it can satisfy.
+ */
+type ServiceAppCapabilityProvision = {
+  id: string;
+  version: string;
+  wit?: ServiceAppWitContract;
+  resourceTypes?: string[];
+};
+type ServiceAppProvides = {
+  capabilities?: ServiceAppCapabilityProvision[];
+};
+type ServiceAppManifest = {
+  id: string;
+  title: string;
+  description?: string;
+  enabled: boolean;
+  protocol: ServiceAppProtocol;
+  command?: string;
+  args?: string[];
+  componentEntry?: string;
+  providerIds?: string[];
+  lifecycle?: ServiceAppLifecycle;
+  requires?: ServiceAppRequirements;
+  provides?: ServiceAppProvides;
+  actions: Record<string, ServiceAppManifestAction>;
+};
+type ServiceAppRecord = {
+  id: string;
+  title: string;
+  description?: string;
+  dirPath: string;
+  manifestPath: string;
+  command?: string;
+  args?: string[];
+  cwd: string;
+  enabled: boolean;
+  protocol: ServiceAppProtocol;
+  status: ServiceAppRuntimeStatus;
+  lastError?: string;
+  lastStartedAt?: string;
+  lastReadyAt?: string;
+  lastFailedAt?: string;
+  sourceKind?: "workspace" | "package";
+  packageId?: string;
+  packageVersion?: string;
+  packageDirectory?: string;
+  dataDirectory?: string;
+  instanceId?: string;
+  storage?: AppStorageContext;
+  isolation?: AppRuntimeIsolation;
+  runtimeProfile?: AppRuntimeProfile;
+  permissions?: AppPermissions;
+  componentPath?: string;
+  providerIds?: string[];
+  lifecycle?: ServiceAppLifecycle;
+};
+type ServiceActionGrantState = "granted" | "not-granted" | "not-declared";
+type ServiceActionRuntimeState = "matched" | "missing" | "undeclared";
+type ServiceAction = {
+  id: string;
+  appId: string;
+  name: string;
+  title?: string;
+  description?: string;
+  inputSchema?: Record<string, unknown>;
+  risk: ServiceActionRisk;
+  runtimeState?: ServiceActionRuntimeState;
+  grantState?: ServiceActionGrantState;
+};
+type PanelServiceActionCaller = {
+  surface: "panel-app";
+  appId: string;
+};
+type AgentServiceActionCaller = {
+  surface: "agent";
+  agentId: string;
+};
+type ServiceActionCaller = PanelServiceActionCaller | AgentServiceActionCaller;
+type ServiceActionGrant = {
+  caller: ServiceActionCaller;
+  actionId: string;
+  risk: ServiceActionRisk;
+  grantedAt: string;
+};
+type ServiceActionInvokeRequest = {
+  caller: ServiceActionCaller;
+  declaredActions?: string[];
+  input?: Record<string, unknown>;
+};
+type ServiceActionInvokeResult = {
+  actionId: string;
+  result: unknown;
+  invocation?: ServiceActionInvocationFacts;
+};
+/**
+ * Durable status for an explicitly asynchronous Service App invocation.
+ * Terminal statuses are intentionally irreversible: a retry is a new job
+ * linked through `retryOf`, never a rewrite of the original execution.
+ */
+type ServiceAppJobStatus = "queued" | "starting" | "running" | "succeeded" | "cancel-requested" | "cancelled" | "timed-out" | "failed" | "interrupted";
+type ServiceAppTerminalJobStatus = Extract<ServiceAppJobStatus, "succeeded" | "cancelled" | "timed-out" | "failed" | "interrupted">;
+type ServiceAppJobCaller = {
+  surface: "panel" | "agent" | "installed-app-cli";
+  id?: string;
+};
+type ServiceAppJobView = {
+  id: string;
+  appId: string;
+  instanceId: string;
+  componentId: string;
+  actionName: string;
+  status: ServiceAppJobStatus;
+  createdAt: string;
+  updatedAt: string;
+  startedAt?: string;
+  completedAt?: string;
+  cancelRequestedAt?: string;
+  retryOf?: string;
+  callId: string;
+  traceId: string;
+  caller?: ServiceAppJobCaller;
+  error?: {
+    code?: string;
+    message: string;
+  };
+};
+type ServiceAppJobProgressEvent = {
+  type: "progress";
+  current?: number;
+  total?: number;
+  message?: string;
+};
+type ServiceAppJobChunkEvent = {
+  type: "stream-chunk";
+  content: string;
+};
+type ServiceAppJobTerminalEvent = {
+  type: "terminal";
+  status: ServiceAppTerminalJobStatus;
+  error?: {
+    code?: string;
+    message: string;
+  };
+};
+type ServiceAppJobEvent = {
+  sequence: number;
+  timestamp: string;
+} & (ServiceAppJobProgressEvent | ServiceAppJobChunkEvent | ServiceAppJobTerminalEvent);
+type ServiceAppJobList = {
+  entries: ServiceAppJobView[];
+};
+type ServiceAppJobWatch = {
+  job: ServiceAppJobView;
+  events: ServiceAppJobEvent[]; /** Pass this value back as `afterSequence` to resume without a gap. */
+  cursor: number;
+};
+/**
+ * Durable host-owned delivery state for a Resident event.  A Resident is a
+ * serial lane, therefore an acknowledged event is the only state permitted
+ * to advance that stream's cursor.  Event payload is retained only in the
+ * App instance journal, never in VerificationRecord evidence.
+ */
+type ServiceAppResidentEventStatus = "received" | "pending" | "leased" | "acked" | "retry-wait" | "dead-letter";
+type ServiceAppResidentEventDisposition = {
+  kind: "ack";
+} | {
+  kind: "retry";
+  delayMs?: number;
+  error?: {
+    code?: string;
+    message?: string;
+  };
+};
+type ServiceAppResidentEventView = {
+  id: string;
+  appId: string;
+  instanceId: string;
+  componentId: string;
+  eventId: string;
+  streamKey: string;
+  sequence: number;
+  status: ServiceAppResidentEventStatus;
+  receivedAt: string;
+  updatedAt: string;
+  attempt: number;
+  leaseExpiresAt?: string;
+  nextAttemptAt?: string;
+  ackedAt?: string;
+  deadLetteredAt?: string;
+  lastError?: {
+    code?: string;
+    message: string;
+  };
+};
+type ServiceAppResidentEventList = {
+  entries: ServiceAppResidentEventView[];
+  cursors: Record<string, number>;
+  frozen: boolean;
+};
+type ServiceActionInvocationFacts = {
+  callId: string;
+  traceId: string;
+  dataVersion: string;
+  verificationRunId: string;
+};
+type ServiceActionGrantRequest = {
+  caller: ServiceActionCaller;
+  declaredActions?: string[];
+};
+//#endregion
 //#region src/types/app-package.types.d.ts
 type AppPackageComponentKind = "panel" | "service";
 type AppPackageComponentSource = {
@@ -1135,6 +1427,7 @@ type CapabilityProviderView = {
     id: string;
     version?: string;
     resourceTypes?: string[];
+    wit?: ServiceAppWitContract;
   }>;
 };
 type AppPackageUnavailableDiagnostic = {
@@ -1169,6 +1462,16 @@ type AppPackageReadiness = {
   status: AppPackageReadinessStatus;
   requirements: AppPackageReadinessRequirement[];
 };
+type AppPackageSecretStatus = "bound" | "ready" | "unbound" | "unresolved";
+type AppPackageSecretSlotView = Pick<AppSecretSlot, "id" | "title" | "description" | "required"> & {
+  status: AppPackageSecretStatus;
+  binding?: AppSecretBinding;
+  errorCode?: "SECRET_BINDING_MISSING" | "SECRET_RESOLUTION_FAILED";
+};
+type AppPackageSecretReadiness = {
+  readiness: AppPackageReadiness;
+  slots: AppPackageSecretSlotView[];
+};
 type AppPackageDependencyBinding = {
   componentId: string;
   requirementKind: "capability" | "resource";
@@ -1179,11 +1482,25 @@ type AppPackageDependencyCandidate = {
   requirement: AppPackageReadinessRequirement;
   providers: CapabilityProviderView[];
 };
+type AppPackageDependencyDiagnosticCode = "CAPABILITY_LEGACY_CONTRACT" | "CAPABILITY_PROVIDER_MISSING" | "CAPABILITY_VERSION_INCOMPATIBLE" | "CAPABILITY_WIT_INCOMPATIBLE" | "CAPABILITY_BINDING_MISSING" | "CAPABILITY_PROVIDER_UNAVAILABLE" | "PROVIDER_DEPENDENCY_CYCLE" | "RESOURCE_PROVIDER_MISSING" | "RESOURCE_BINDING_MISSING" | "RESOURCE_PROVIDER_UNAVAILABLE";
+type AppPackageDependencyDiagnostic = {
+  code: AppPackageDependencyDiagnosticCode;
+  componentId: string;
+  requirementKind: "capability" | "resource";
+  requirementId: string;
+  providerId?: string;
+  message: string;
+};
+type AppPackageDependencyCycle = {
+  componentId: string;
+  providerIds: string[];
+};
 type AppPackageDependencyView = {
   readiness: AppPackageReadiness;
   bindings: AppPackageDependencyBinding[];
   candidates: AppPackageDependencyCandidate[];
   resolvedProviderIds: Record<string, string[]>;
+  diagnostics: AppPackageDependencyDiagnostic[];
 };
 type AppPackageDependencyBindingInput = {
   componentId: string;
@@ -1211,6 +1528,7 @@ type AppPackageView = {
   runtimeProfile: AppRuntimeProfile;
   isolation: AppRuntimeIsolation;
   readiness: AppPackageReadiness;
+  secrets: AppPackageSecretReadiness;
   dependencies: AppPackageDependencyView;
 };
 type AppPackageHostTarget = {
@@ -1281,7 +1599,7 @@ type AppPackageRuntimeHooks = {
   beforeDeactivate: (sources: AppPackageComponentSource[]) => Promise<void>;
   beforeUninstall: (sources: AppPackageComponentSource[]) => Promise<AppPackageUninstallRollback | void>;
 };
-type AppPackageErrorCode = "APP_PACKAGE_CONFLICT" | "APP_PACKAGE_INCOMPATIBLE" | "APP_PACKAGE_NOT_READY" | "APP_PACKAGE_NOT_FOUND" | "APP_PACKAGE_OPERATION_FAILED";
+type AppPackageErrorCode = "APP_PACKAGE_CONFLICT" | "APP_PACKAGE_INCOMPATIBLE" | "APP_PACKAGE_NOT_READY" | "APP_PACKAGE_NOT_FOUND" | "APP_PACKAGE_DEPENDENCY_MISSING" | "APP_PACKAGE_DEPENDENCY_INCOMPATIBLE" | "APP_PACKAGE_DEPENDENCY_CYCLE" | "APP_PACKAGE_OPERATION_FAILED" | "SECRET_SLOT_NOT_DECLARED" | "SECRET_BINDING_MISSING" | "SECRET_RESOLUTION_FAILED";
 declare class AppPackageError extends Error {
   readonly code: AppPackageErrorCode;
   constructor(code: AppPackageErrorCode, message: string);
@@ -1300,6 +1618,7 @@ declare class AppPackageManager {
   private readonly dependencyCoordinator;
   private readonly runtimeActivationService;
   private readonly registryService;
+  private readonly readinessManager;
   private runtimeHooks;
   private builtInBootstrapPromise;
   private builtInDefinitionsPromise;
@@ -1307,6 +1626,8 @@ declare class AppPackageManager {
     appHomeDirectory: string;
     builtInAppsDirectory?: string;
     productVersion?: string;
+    getSecretConfig?: () => Config;
+    secretConfigPath?: string;
   });
   installRuntimeHooks: (hooks: Partial<AppPackageRuntimeHooks>) => void;
   start: () => Promise<void>;
@@ -1323,6 +1644,13 @@ declare class AppPackageManager {
   setupDependencies: (appId: string) => Promise<AppPackageDependencyView>;
   bindDependency: (appId: string, input: AppPackageDependencyBindingInput) => Promise<AppPackageDependencyView>;
   unbindDependency: (appId: string, input: Omit<AppPackageDependencyBindingInput, "providerId">) => Promise<AppPackageDependencyView>;
+  inspectSecrets: (appId: string) => Promise<AppPackageSecretReadiness>;
+  verifySecrets: (appId: string) => Promise<AppPackageSecretReadiness>;
+  bindSecret: (appId: string, input: {
+    slotId: string;
+    binding: AppSecretBinding;
+  }) => Promise<AppPackageSecretReadiness>;
+  unbindSecret: (appId: string, slotId: string) => Promise<AppPackageSecretReadiness>;
   listActiveComponentSources: () => Promise<AppPackageComponentSource[]>;
   listActiveComponentSourcesWithDiagnostics: () => Promise<AppPackageComponentSourceList>;
   listOperations: () => Promise<AppPackageOperationList>;
@@ -1345,14 +1673,14 @@ declare class AppPackageManager {
   uninstall: (appId: string, purgeData: boolean) => Promise<AppUninstallResult>;
   private ensureBuiltInPackages;
   private installBuiltInPackages;
-  private toPackageView;
+  private readListedPackageView;
   private resolveSecurity;
   private toComponentSources;
-  private assertEngineCompatibility;
   private listBuiltInDefinitions;
   private isBuiltInAppId;
   private executeOperation;
   private isMissingFileError;
+  private isTransientUninstallRead;
 }
 //#endregion
 //#region src/types/app-data.types.d.ts
@@ -1521,152 +1849,6 @@ declare function getCapabilityGrantKey(request: CapabilityGrantRequest): string;
 declare function capabilityGrantCovers(grant: CapabilityGrant, request: CapabilityGrantRequest): boolean;
 declare function matchesCapabilityGrantFilter(grant: CapabilityGrant, filter: CapabilityGrantFilter): boolean;
 //#endregion
-//#region src/types/service-app.types.d.ts
-type ServiceAppProtocol = "mcp" | "wasi-component";
-type ServiceActionRisk = "read" | "write" | "external" | "dangerous";
-type ServiceAppRuntimeStatus = "idle" | "starting" | "running" | "failed" | "stopped";
-type ServiceAppManifestAction = {
-  risk?: ServiceActionRisk;
-  title?: string;
-  description?: string;
-  inputSchema?: Record<string, unknown>;
-  timeoutMs?: number;
-};
-type ServiceAppLifecycle = {
-  mode: "action";
-} | {
-  mode: "resident";
-  eventIntervalMs: number;
-} | {
-  mode: "provider";
-};
-/**
- * A dependency intentionally kept outside a portable `.napp` artifact.
- * It never carries credentials, connection strings, or installation commands.
- */
-type ServiceAppExternalRemediation = {
-  kind: "agent-setup";
-  summary: string;
-  requiresUserAction?: boolean;
-};
-type ServiceAppCapabilityRequirement = {
-  id: string;
-  version?: string;
-  title?: string;
-  description?: string;
-  remediation?: ServiceAppExternalRemediation;
-};
-type ServiceAppResourceRequirement = {
-  binding: string;
-  type: string;
-  required?: boolean;
-  title?: string;
-  description?: string;
-  remediation?: ServiceAppExternalRemediation;
-};
-type ServiceAppRequirements = {
-  capabilities?: ServiceAppCapabilityRequirement[];
-  resources?: ServiceAppResourceRequirement[];
-};
-/**
- * A stable capability exposed by a Service Provider App. Provider identity is
- * still the Service id; this declaration only describes what it can satisfy.
- */
-type ServiceAppCapabilityProvision = {
-  id: string;
-  version: string;
-  resourceTypes?: string[];
-};
-type ServiceAppProvides = {
-  capabilities?: ServiceAppCapabilityProvision[];
-};
-type ServiceAppManifest = {
-  id: string;
-  title: string;
-  description?: string;
-  enabled: boolean;
-  protocol: ServiceAppProtocol;
-  command?: string;
-  args?: string[];
-  componentEntry?: string;
-  providerIds?: string[];
-  lifecycle?: ServiceAppLifecycle;
-  requires?: ServiceAppRequirements;
-  provides?: ServiceAppProvides;
-  actions: Record<string, ServiceAppManifestAction>;
-};
-type ServiceAppRecord = {
-  id: string;
-  title: string;
-  description?: string;
-  dirPath: string;
-  manifestPath: string;
-  command?: string;
-  args?: string[];
-  cwd: string;
-  enabled: boolean;
-  protocol: ServiceAppProtocol;
-  status: ServiceAppRuntimeStatus;
-  lastError?: string;
-  lastStartedAt?: string;
-  lastReadyAt?: string;
-  lastFailedAt?: string;
-  sourceKind?: "workspace" | "package";
-  packageId?: string;
-  packageVersion?: string;
-  packageDirectory?: string;
-  dataDirectory?: string;
-  instanceId?: string;
-  storage?: AppStorageContext;
-  isolation?: AppRuntimeIsolation;
-  runtimeProfile?: AppRuntimeProfile;
-  permissions?: AppPermissions;
-  componentPath?: string;
-  providerIds?: string[];
-  lifecycle?: ServiceAppLifecycle;
-};
-type ServiceActionGrantState = "granted" | "not-granted" | "not-declared";
-type ServiceActionRuntimeState = "matched" | "missing" | "undeclared";
-type ServiceAction = {
-  id: string;
-  appId: string;
-  name: string;
-  title?: string;
-  description?: string;
-  inputSchema?: Record<string, unknown>;
-  risk: ServiceActionRisk;
-  runtimeState?: ServiceActionRuntimeState;
-  grantState?: ServiceActionGrantState;
-};
-type PanelServiceActionCaller = {
-  surface: "panel-app";
-  appId: string;
-};
-type AgentServiceActionCaller = {
-  surface: "agent";
-  agentId: string;
-};
-type ServiceActionCaller = PanelServiceActionCaller | AgentServiceActionCaller;
-type ServiceActionGrant = {
-  caller: ServiceActionCaller;
-  actionId: string;
-  risk: ServiceActionRisk;
-  grantedAt: string;
-};
-type ServiceActionInvokeRequest = {
-  caller: ServiceActionCaller;
-  declaredActions?: string[];
-  input?: Record<string, unknown>;
-};
-type ServiceActionInvokeResult = {
-  actionId: string;
-  result: unknown;
-};
-type ServiceActionGrantRequest = {
-  caller: ServiceActionCaller;
-  declaredActions?: string[];
-};
-//#endregion
 //#region src/types/panel-app.types.d.ts
 type PanelAppEntry = {
   id: string;
@@ -1792,6 +1974,14 @@ declare function createPanelAppClientGrantRequest(appId: string): CapabilityGran
 declare function createPanelAppAgentGrantRequest(caller: PanelServiceActionCaller, capability: PanelAppAgentCapability): CapabilityGrantRequest;
 declare function createServiceActionGrantRequest(caller: ServiceActionCaller, action: ServiceAction): CapabilityGrantRequest;
 declare function readServiceActionTargetId(target: unknown): string | null;
+declare function createServiceAppModelSlotGrantRequest(app: ServiceAppRecord, slot: ServiceAppModelCapabilitySlot, modelId: string): CapabilityGrantRequest;
+declare function createServiceAppAgentSlotGrantRequest(app: ServiceAppRecord, slot: ServiceAppAgentCapabilitySlot, agentId: string): CapabilityGrantRequest;
+declare function readServiceAppSlotTarget(target: unknown): {
+  componentId: string;
+  slotId: string;
+  modelId?: string;
+  agentId?: string;
+} | null;
 //#endregion
 //#region src/features/desktop-host/types/desktop-host.types.d.ts
 declare const DESKTOP_HOST_PROTOCOL_VERSION: 1;
@@ -2555,6 +2745,398 @@ declare class LlmUsageManager {
   private readonly toSortedCounts;
 }
 //#endregion
+//#region src/types/portable-runtime-acceptance.types.d.ts
+declare const PORTABLE_RUNTIME_ACCEPTANCE_PLATFORMS: readonly ["darwin-arm64", "windows-x64", "linux-x64"];
+type PortableRuntimeAcceptancePlatform = (typeof PORTABLE_RUNTIME_ACCEPTANCE_PLATFORMS)[number];
+type PortableRuntimeAcceptanceEvidenceSource = "local" | "ci" | "release";
+type PortableRuntimeAcceptanceDefinition = {
+  id: string;
+  titleKey: string;
+  descriptionKey: string;
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  scenarioVersion: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+};
+/**
+ * The sole machine-readable registry of portable runtime acceptance criteria.
+ * Product projections and release tooling consume this value; they must not
+ * reconstruct IDs from documents, panels, or test file names.
+ */
+declare const PORTABLE_RUNTIME_ACCEPTANCE_CONTRACT: readonly [{
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-EXEC-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}, {
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-DATA-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}, {
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-FILE-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}, {
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-NET-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}, {
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-SECRET-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}, {
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-RES-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}, {
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-EVENT-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}, {
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-TASK-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}, {
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-STREAM-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}, {
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-AGENT-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}, {
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-AI-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}, {
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-COMP-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}, {
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-ENTRY-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}, {
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-LIFE-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}, {
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-BOUND-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}, {
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-PERF-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}, {
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-DX-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}, {
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-DIST-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}, {
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-EVID-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}, {
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-REF-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}, {
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-DOCS-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}, {
+  titleKey: string;
+  descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
+  id: "PRT-REL-001";
+  checkerKey: string;
+  category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+  required: boolean;
+  platforms: readonly PortableRuntimeAcceptancePlatform[];
+}];
+type PortableRuntimeAcceptanceId = (typeof PORTABLE_RUNTIME_ACCEPTANCE_CONTRACT)[number]["id"];
+declare const PORTABLE_RUNTIME_ACCEPTANCE_CONTRACT_FINGERPRINT: string;
+//#endregion
+//#region src/types/verification-record.types.d.ts
+type VerificationRecordStatus = "passed" | "failed" | "blocked" | "not-supported" | "not-run";
+type VerificationRecordRole = "panel" | "agent" | "cli" | "system";
+type VerificationRecordEntrySurface = "panel" | "agent" | "installed-app-cli" | "system";
+type VerificationRecordObservation = {
+  durationMs?: number;
+  runnerPid?: number | null;
+  memory?: {
+    rssBytes: number | null;
+    pssBytes: number | null;
+  } | null;
+};
+type VerificationRecordError = {
+  code?: string;
+  message: string;
+};
+/**
+ * Immutable, redacted evidence emitted by a real Kernel invocation.
+ * Inputs and outputs are represented by digests only; callers must never use
+ * this record as a storage channel for user content or secrets.
+ */
+type VerificationRecord = {
+  evidenceSchemaVersion: 2; /** The producer that generated this versioned evidence. */
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  verificationRunId: string;
+  acceptanceId: string;
+  scenarioVersion: string;
+  productVersion: string;
+  runtimeVersion: string;
+  implementationFingerprint: string;
+  status: VerificationRecordStatus;
+  startedAt: string;
+  finishedAt: string;
+  environment: string;
+  appId: string;
+  componentId: string;
+  role: VerificationRecordRole;
+  entrySurface: VerificationRecordEntrySurface;
+  instanceId?: string;
+  actionOrEvent: string;
+  callId: string;
+  traceId: string;
+  capabilityDecisions: string[];
+  inputDigest: string;
+  outputDigest?: string;
+  dataVersion: string;
+  observation?: VerificationRecordObservation;
+  error?: VerificationRecordError;
+  recovery?: string;
+  evidenceRefs: string[];
+};
+/**
+ * Historical records are retained for audit but can never satisfy the current
+ * acceptance contract because they predate version/fingerprint evidence.
+ */
+type LegacyVerificationRecord = Omit<VerificationRecord, "evidenceSchemaVersion" | "productVersion" | "runtimeVersion" | "implementationFingerprint" | "evidenceSource"> & {
+  evidenceSchemaVersion: 1;
+};
+type VerificationEvidenceRecord = VerificationRecord | LegacyVerificationRecord;
+type VerificationRecordInput = (Omit<VerificationRecord, "evidenceSchemaVersion" | "verificationRunId"> & {
+  verificationRunId?: string;
+}) | (Omit<LegacyVerificationRecord, "evidenceSchemaVersion" | "verificationRunId"> & {
+  verificationRunId?: string;
+});
+type VerificationRecordList = {
+  entries: VerificationEvidenceRecord[];
+};
+//#endregion
+//#region src/utils/portable-runtime-acceptance-evaluator.utils.d.ts
+type PortableRuntimeAcceptanceEvaluationContext = {
+  appId: string;
+  environment: PortableRuntimeAcceptancePlatform;
+  productVersion: string;
+  runtimeVersion: string;
+  implementationFingerprint: string;
+  contractFingerprint: string;
+};
+type PortableRuntimeAcceptanceEvidence = {
+  source: PortableRuntimeAcceptanceEvidenceSource;
+  records: VerificationEvidenceRecord[];
+};
+type PortableRuntimeAcceptanceEvidenceArtifact = {
+  schemaVersion: 1;
+  contractFingerprint: string;
+  targets: Array<PortableRuntimeAcceptanceEvaluationContext & {
+    evidence: PortableRuntimeAcceptanceEvidence[];
+  }>;
+};
+type PortableRuntimeAcceptanceResultStatus = "current-passed" | "missing" | "stale" | "failed" | "not-applicable";
+type PortableRuntimeAcceptanceResult = {
+  acceptanceId: string;
+  required: boolean;
+  environment: PortableRuntimeAcceptancePlatform;
+  status: PortableRuntimeAcceptanceResultStatus;
+  latestRecord?: VerificationEvidenceRecord;
+};
+declare function evaluatePortableRuntimeAcceptance(input: {
+  context: PortableRuntimeAcceptanceEvaluationContext;
+  evidence: readonly PortableRuntimeAcceptanceEvidence[];
+  definitions?: readonly PortableRuntimeAcceptanceDefinition[];
+}): PortableRuntimeAcceptanceResult[];
+declare function evaluatePortableRuntimeAcceptanceArtifact(artifact: PortableRuntimeAcceptanceEvidenceArtifact): PortableRuntimeAcceptanceResult[];
+declare function parsePortableRuntimeAcceptanceEvidenceArtifact(value: unknown): PortableRuntimeAcceptanceEvidenceArtifact;
+//#endregion
+//#region src/services/verification-record.service.d.ts
+/** Owns durable, redacted evidence. Product surfaces can only read/export it. */
+declare class VerificationRecordService {
+  private readonly params;
+  private loadPromise;
+  private readonly entries;
+  private mutationQueue;
+  constructor(params: {
+    storePath: string;
+    /**
+     * The Kernel-owned current runtime identity. Generic invocation evidence
+     * obtains its versioned local provenance here; callers never manufacture
+     * a fingerprint from their own observations.
+     */
+    resolveCurrentIdentity?: (appId: string) => Promise<PortableRuntimeAcceptanceEvaluationContext | undefined>;
+  });
+  record: (input: VerificationRecordInput) => Promise<VerificationEvidenceRecord>;
+  list: (filters?: {
+    acceptanceId?: string;
+    appId?: string;
+    limit?: number;
+  }) => Promise<VerificationRecordList>;
+  export: (filters?: Parameters<VerificationRecordService["list"]>[0]) => Promise<string>;
+  private ensureLoaded;
+  private load;
+  private mutate;
+  private save;
+  private trim;
+  private clone;
+  private parseStore;
+  private normalizeInput;
+  private withCurrentIdentity;
+  private normalizeStoredRecord;
+  private normalizeCurrentRecord;
+  private normalizeLegacyRecord;
+  private normalizeBaseRecord;
+  private isNonEmptyString;
+  private isEvidenceSource;
+  private isObservation;
+  private isMemory;
+  private isError;
+  private isMissing;
+}
+//#endregion
 //#region src/managers/inbox-delivery.manager.d.ts
 declare const MAX_INBOX_DELIVERY_CONTENT_LENGTH: number;
 type CreateInboxDeliveryInput = {
@@ -2777,8 +3359,86 @@ declare class PreferenceManager {
   private isPlainRecord;
 }
 //#endregion
-//#region src/services/portable-service-runner-client.service.d.ts
-type RunnerOperation = "deliver-event" | "invoke" | "list-actions" | "start-provider" | "start-resident" | "stats" | "stop";
+//#region src/services/agent-run-client.service.d.ts
+type AgentRunReplyOptions = {
+  abortSignal?: AbortSignal;
+  onAssistantDelta?: (delta: string) => void;
+  onEvent?: (event: NcpEndpointEvent$1) => void;
+  missingCompletedMessageError?: string;
+  runErrorMessage?: string;
+};
+type AgentRunStreamOptions = {
+  abortSignal?: AbortSignal;
+  onEvent?: (event: NcpEndpointEvent$1) => void;
+};
+type AgentRunReply = {
+  handle: NcpRunHandle;
+  text: string;
+  completedMessage: NcpMessage$1;
+};
+type AgentRunExecution = {
+  handle: NcpRunHandle;
+  events: AsyncIterable<NcpEndpointEvent$1>;
+  result: Promise<AgentRunReply>;
+  cancel: () => Promise<void>;
+  dispose: () => void;
+};
+declare class AgentRunClient {
+  private readonly options;
+  constructor(options: {
+    eventBus: Pick<EventBus$1, "on">;
+    ingress: Pick<Ingress$1, "handle">;
+  });
+  send: (input: AgentRunSendIngressPayload) => Promise<NcpRunHandle>;
+  sendAndWaitForReply: (input: AgentRunSendIngressPayload, options?: AgentRunReplyOptions) => Promise<AgentRunReply>;
+  startRun: (input: AgentRunSendIngressPayload, options?: AgentRunReplyOptions) => Promise<AgentRunExecution>;
+  sendAndStreamEvents: (this: AgentRunClient, input: AgentRunSendIngressPayload, options?: AgentRunStreamOptions) => AsyncGenerator<NcpEndpointEvent$1>;
+  private prepareObserver;
+  private sendWithCorrelation;
+}
+//#endregion
+//#region src/types/portable-service-runner-protocol.types.d.ts
+type RunnerOperation = "cancel-job" | "deliver-event" | "invoke" | "job-status" | "list-actions" | "start-provider" | "start-resident" | "start-job" | "resolve-host-call" | "stats" | "stop";
+type PortableRunnerJobEvent = {
+  kind: "job-progress";
+  protocolVersion?: string;
+  jobId: string;
+  sequence: number;
+  current?: number;
+  total?: number;
+  message?: string;
+} | {
+  kind: "stream-chunk";
+  protocolVersion?: string;
+  jobId: string;
+  sequence: number;
+  content: string;
+} | {
+  kind: "host-call-request";
+  protocolVersion?: string;
+  hostCallId: string;
+  jobId: string;
+  sequence: number;
+  callId: string;
+  traceId: string;
+  appId: string;
+  capability: string;
+  input: unknown;
+} | {
+  kind: "job-terminal";
+  protocolVersion?: string;
+  jobId: string;
+  sequence: number;
+  status: "succeeded" | "cancelled" | "timed-out" | "failed" | "interrupted";
+  result?: unknown;
+  error?: {
+    code?: string;
+    message?: string;
+  };
+};
+type PortableRunnerHostCallRequest = Extract<PortableRunnerJobEvent, {
+  kind: "host-call-request";
+}>;
 type PortableRunnerObservation = {
   operation: RunnerOperation;
   appId?: string;
@@ -2791,6 +3451,239 @@ type PortableRunnerObservation = {
   logs: string[];
 };
 //#endregion
+//#region src/services/service-app-job-journal.service.d.ts
+type ServiceAppJobScope = {
+  appId: string;
+  instanceId: string;
+  stateDirectory: string;
+};
+type ServiceAppJobEventSink = {
+  reportProgress: (input: {
+    current?: number;
+    total?: number;
+    message?: string;
+  }) => Promise<ServiceAppJobEvent | undefined>;
+  emitChunk: (content: string) => Promise<ServiceAppJobEvent>;
+  recordTerminal: (input: {
+    status: ServiceAppTerminalJobStatus;
+    error?: {
+      code?: string;
+      message: string;
+    };
+  }) => Promise<ServiceAppJobView>;
+};
+/**
+ * The only durable owner for Service App Job state and stream facts.
+ *
+ * A journal belongs to one installed App instance, so user-visible work never
+ * crosses an App's `stateDirectory`. Verification records deliberately stay
+ * elsewhere and only retain redacted acceptance evidence.
+ */
+declare class ServiceAppJobJournalService {
+  private readonly stores;
+  private readonly loadPromises;
+  private readonly mutationQueues;
+  private readonly lastProgressAt;
+  queue: (scope: ServiceAppJobScope, input: {
+    actionName: string;
+    componentId?: string;
+    callId: string;
+    traceId: string;
+    caller?: ServiceAppJobCaller;
+    retryOf?: string;
+    jobId?: string;
+  }) => Promise<ServiceAppJobView>;
+  get: (scope: ServiceAppJobScope, jobId: string) => Promise<ServiceAppJobView>;
+  list: (scope: ServiceAppJobScope) => Promise<ServiceAppJobList>;
+  watch: (scope: ServiceAppJobScope, jobId: string, afterSequence?: number) => Promise<ServiceAppJobWatch>;
+  transition: (scope: ServiceAppJobScope, jobId: string, status: Exclude<ServiceAppJobStatus, ServiceAppTerminalJobStatus>) => Promise<ServiceAppJobView>;
+  requestCancel: (scope: ServiceAppJobScope, jobId: string) => Promise<ServiceAppJobView>;
+  recordTerminal: (scope: ServiceAppJobScope, jobId: string, input: {
+    status: ServiceAppTerminalJobStatus;
+    error?: {
+      code?: string;
+      message: string;
+    };
+  }) => Promise<ServiceAppJobView>;
+  reportProgress: (scope: ServiceAppJobScope, jobId: string, input: {
+    current?: number;
+    total?: number;
+    message?: string;
+  }) => Promise<ServiceAppJobEvent | undefined>;
+  emitChunk: (scope: ServiceAppJobScope, jobId: string, content: string) => Promise<ServiceAppJobEvent>;
+  createEventSink: (scope: ServiceAppJobScope, jobId: string) => ServiceAppJobEventSink;
+  /** Marks durable in-flight work as interrupted after a host restart. */
+  recoverUnfinished: (scopes: readonly ServiceAppJobScope[]) => Promise<void>;
+  private requireJob;
+  private requireJobFromStore;
+  private assertCanTransition;
+  private assertActive;
+  private appendEvent;
+  private ensureLoaded;
+  private load;
+  private mutate;
+  private save;
+  private requireStore;
+  private toView;
+  private cloneEvent;
+  private isTerminal;
+  private eventBytes;
+  private storePath;
+  private jobKey;
+  private isStore;
+  private isJob;
+  private isEvent;
+  private isMissing;
+}
+//#endregion
+//#region src/types/portable-service-app-runtime.types.d.ts
+type PortableServiceAppHostCall = {
+  app: ServiceAppRecord;
+  manifest: ServiceAppManifest;
+  request: PortableRunnerHostCallRequest;
+  signal: AbortSignal;
+  jobSignal?: AbortSignal;
+  deferTerminal?: (completion: Promise<void>) => void;
+  job?: {
+    jobId: string;
+    eventSink: ServiceAppJobEventSink;
+    callId?: string;
+    traceId?: string;
+  };
+};
+type PortableServiceAppHostCallHandler = (call: PortableServiceAppHostCall) => Promise<unknown>;
+//#endregion
+//#region src/services/service-app-ai-capability.service.d.ts
+type ServiceAppAiCapabilityReadiness = {
+  ready: boolean;
+  requiredMissing: Array<{
+    kind: "model" | "agent";
+    slotId: string;
+  }>;
+  bindings: Array<{
+    kind: "model" | "agent";
+    slotId: string;
+    targetId: string;
+    grantedAt: string;
+  }>;
+};
+/**
+ * Product authorization owner for portable Service App AI slots. It is
+ * deliberately runner-agnostic: protocol 0.2 can inject these callbacks
+ * without creating a second binding registry or exposing credentials.
+ */
+declare class ServiceAppAiCapabilityService {
+  private readonly params;
+  constructor(params: {
+    capabilityGrantManager: CapabilityGrantManager;
+    hasAgent: (agentId: string) => boolean;
+    hasModel: (modelId: string) => boolean;
+    providerManager?: LlmProviderRuntime;
+    llmUsage?: Pick<LlmUsageManager, "observeProviderManager">;
+    agentRunClient?: Pick<AgentRunClient, "startRun">;
+  });
+  inspect: (app: ServiceAppRecord, manifest: ServiceAppManifest) => Promise<ServiceAppAiCapabilityReadiness>;
+  assertReady: (app: ServiceAppRecord, manifest: ServiceAppManifest) => Promise<void>;
+  bindModel: (app: ServiceAppRecord, manifest: ServiceAppManifest, slotId: string, modelId: string) => Promise<ServiceAppAiCapabilityReadiness>;
+  bindAgent: (app: ServiceAppRecord, manifest: ServiceAppManifest, slotId: string, agentId: string) => Promise<ServiceAppAiCapabilityReadiness>;
+  unbind: (app: ServiceAppRecord, manifest: ServiceAppManifest, kind: "model" | "agent", slotId: string) => Promise<ServiceAppAiCapabilityReadiness>;
+  modelComplete: (params: {
+    app: ServiceAppRecord;
+    manifest: ServiceAppManifest;
+    slotId: string;
+    messages: Array<Record<string, unknown>>;
+    maxTokens?: number;
+    signal?: AbortSignal;
+  }) => Promise<_$_nextclaw_core0.LLMResponse>;
+  agentStart: (params: {
+    app: ServiceAppRecord;
+    manifest: ServiceAppManifest;
+    slotId: string;
+    input: AgentRunSendIngressPayload;
+    callId: string;
+    jobId?: string;
+    traceId?: string;
+    signal?: AbortSignal;
+  }) => Promise<AgentRunExecution>;
+  handlePortableHostCall: (call: PortableServiceAppHostCall) => Promise<unknown>;
+  private forwardPortableAgentResult;
+  private listBindings;
+  private requireBoundModel;
+  private requireBoundAgent;
+  private replaceBinding;
+  private requireModelSlot;
+  private requireAgentSlot;
+  private matchesModelGrant;
+  private matchesAgentGrant;
+  private requireProviderRuntime;
+  private clampMaxTokens;
+  private withSlotTimeout;
+}
+//#endregion
+//#region src/services/service-app-resident-event-inbox.service.d.ts
+type ServiceAppResidentEventScope = {
+  appId: string;
+  instanceId: string;
+  stateDirectory: string;
+};
+type ResidentEventInput = {
+  eventId: string;
+  streamKey?: string;
+  payload: Record<string, unknown>;
+  componentId?: string;
+};
+type LeasedResidentEvent = ServiceAppResidentEventView & {
+  payload: Record<string, unknown>;
+};
+/**
+ * Per installed-App-instance Resident delivery journal.  The host owns the
+ * inbox and cursor; the Guest only receives a leased event and returns a
+ * disposition.  This deliberately gives at-least-once delivery without
+ * claiming that arbitrary Guest side effects are exactly-once.
+ */
+declare class ServiceAppResidentEventInboxService {
+  private readonly stores;
+  private readonly loadPromises;
+  private readonly mutationQueues;
+  enqueue: (scope: ServiceAppResidentEventScope, input: ResidentEventInput) => Promise<ServiceAppResidentEventView>;
+  list: (scope: ServiceAppResidentEventScope, params?: {
+    status?: ServiceAppResidentEventStatus;
+    deadLettersOnly?: boolean;
+  }) => Promise<ServiceAppResidentEventList>;
+  /** Reclaim expired leases then lease one item: one Resident means one lane. */
+  leaseNext: (scope: ServiceAppResidentEventScope, params?: {
+    leaseMs?: number;
+    now?: Date;
+  }) => Promise<LeasedResidentEvent | undefined>;
+  acknowledge: (scope: ServiceAppResidentEventScope, eventId: string) => Promise<ServiceAppResidentEventView>;
+  retry: (scope: ServiceAppResidentEventScope, eventId: string, disposition: Extract<ServiceAppResidentEventDisposition, {
+    kind: "retry";
+  }>) => Promise<ServiceAppResidentEventView>;
+  applyDisposition: (scope: ServiceAppResidentEventScope, eventId: string, disposition: ServiceAppResidentEventDisposition) => Promise<ServiceAppResidentEventView>;
+  replayDeadLetter: (scope: ServiceAppResidentEventScope, eventId: string) => Promise<ServiceAppResidentEventView>;
+  freeze: (scope: ServiceAppResidentEventScope) => Promise<void>;
+  resume: (scope: ServiceAppResidentEventScope) => Promise<void>;
+  private assertEventInput;
+  private retryDelay;
+  private clampLease;
+  private transition;
+  private assertLeased;
+  private requireEvent;
+  private requireEventByEventId;
+  private toView;
+  private toLeased;
+  private ensureLoaded;
+  private load;
+  private mutate;
+  private save;
+  private requireStore;
+  private storePath;
+  private readTime;
+  private isMissing;
+  private isStore;
+  private isEvent;
+}
+//#endregion
 //#region src/services/service-app-runtime.service.d.ts
 type RuntimeCall = {
   app: ServiceAppRecord;
@@ -2802,7 +3695,10 @@ declare class ServiceAppRuntimeService {
   private readonly protocols;
   constructor(params: {
     getConfig: () => Config;
+    configPath?: string;
+    appHomeDirectory?: string;
     portableServiceRunnerPath?: string;
+    residentInbox?: ServiceAppResidentEventInboxService;
   });
   getStatus: (appId: string) => {
     status: ServiceAppRuntimeStatus;
@@ -2812,22 +3708,194 @@ declare class ServiceAppRuntimeService {
     lastFailedAt?: string;
   };
   getLastObservation: () => PortableRunnerObservation | undefined;
+  /** One kernel-owned callback path for Guest host calls; MCP never receives it. */
+  setPortableHostCallHandler: (handler: PortableServiceAppHostCallHandler | undefined) => void;
   start: (call: RuntimeCall) => Promise<void>;
   listActions: (call: RuntimeCall) => Promise<ServiceAction[]>;
   invokeAction: (call: RuntimeCall & {
     actionName: string;
     input: Record<string, unknown>;
+    job?: {
+      jobId: string;
+      eventSink: ServiceAppJobEventSink;
+      callId?: string;
+      traceId?: string;
+    };
   }) => Promise<unknown>;
   stop: (appId: string) => Promise<void>;
   restart: (appId: string) => Promise<void>;
+  cancelJob: (params: {
+    appId: string;
+    instanceId: string;
+    jobId: string;
+  }) => Promise<void>;
+  enqueueResidentEvent: (call: RuntimeCall & {
+    eventId: string;
+    streamKey?: string;
+    payload: Record<string, unknown>;
+  }) => Promise<ServiceAppResidentEventView>;
   dispose: () => Promise<void>;
 }
 //#endregion
+//#region src/managers/service-app-job.manager.d.ts
+type ServiceAppLookup = (appId: string, materializeStorage?: boolean) => Promise<{
+  manifest: ServiceAppManifest;
+  record: ServiceAppRecord;
+}>;
+type JobRuntime = {
+  invokeAction: (params: {
+    app: ServiceAppRecord;
+    manifest: ServiceAppManifest;
+    actionName: string;
+    input: Record<string, unknown>;
+    job: {
+      jobId: string;
+      eventSink: ServiceAppJobEventSink;
+      callId: string;
+      traceId: string;
+    };
+  }) => Promise<unknown>;
+  cancelJob?: (params: {
+    appId: string;
+    instanceId: string;
+    jobId: string;
+  }) => Promise<void>;
+  enqueueResidentEvent?: (params: {
+    app: ServiceAppRecord;
+    manifest: ServiceAppManifest;
+    eventId: string;
+    streamKey?: string;
+    payload: Record<string, unknown>;
+  }) => Promise<ServiceAppResidentEventView>;
+  getLastObservation?: () => PortableRunnerObservation | undefined;
+};
+declare class ServiceAppJobManager {
+  private readonly params;
+  constructor(params: {
+    journal: ServiceAppJobJournalService;
+    residentInbox: ServiceAppResidentEventInboxService;
+    runtime: JobRuntime;
+    verificationRecords?: VerificationRecordService;
+    requireServiceApp: ServiceAppLookup;
+    listPackageComponentSources: () => Promise<AppPackageComponentSource[]>;
+  });
+  listVerificationRecords: (filters?: {
+    acceptanceId?: string;
+    appId?: string;
+    limit?: number;
+  }) => Promise<VerificationRecordList>;
+  exportVerificationRecords: (filters?: {
+    acceptanceId?: string;
+    appId?: string;
+    limit?: number;
+  }) => Promise<string>;
+  list: (appId: string, caller?: ServiceAppJobCaller) => Promise<ServiceAppJobList>;
+  get: (appId: string, jobId: string, caller?: ServiceAppJobCaller) => Promise<ServiceAppJobView>;
+  watch: (appId: string, jobId: string, afterSequence?: number, caller?: ServiceAppJobCaller) => Promise<ServiceAppJobWatch>;
+  cancel: (appId: string, jobId: string, caller?: ServiceAppJobCaller) => Promise<ServiceAppJobView>;
+  listResidentInbox: (appId: string, deadLettersOnly?: boolean) => Promise<ServiceAppResidentEventList>;
+  replayResidentDeadLetter: (appId: string, eventId: string) => Promise<ServiceAppResidentEventView>;
+  enqueueResidentEvent: (appId: string, input: ResidentEventInput) => Promise<ServiceAppResidentEventView>;
+  create: (params: {
+    record: ServiceAppRecord;
+    actionName: string;
+    callId: string;
+    traceId: string;
+    caller?: ServiceAppJobCaller;
+    retryOf?: string;
+    jobId?: string;
+  }) => Promise<ServiceAppJobView>;
+  createEventSink: (record: ServiceAppRecord, jobId: string) => ServiceAppJobEventSink;
+  invoke: (params: {
+    actionId: string;
+    actionName: string;
+    record: ServiceAppRecord;
+    manifest: ServiceAppManifest;
+    input: Record<string, unknown>;
+    role: "panel" | "agent" | "cli";
+    entrySurface: "panel" | "agent" | "installed-app-cli";
+  }) => Promise<ServiceActionInvokeResult>;
+  private recordInvocation;
+  private requireJobScope;
+  private requireResidentInboxScope;
+  private requireRecordScope;
+  private isVisible;
+  private assertVisible;
+}
+//#endregion
 //#region src/services/service-app-record.service.d.ts
+type ServiceAppStatusReader = {
+  getStatus: (appId: string) => {
+    status: ServiceAppRecord["status"];
+    lastError?: string;
+    lastStartedAt?: string;
+    lastReadyAt?: string;
+    lastFailedAt?: string;
+  };
+};
 type WorkspaceServiceDataOwner = {
   id: string;
   title: string;
 };
+declare class ServiceAppRecordService {
+  private readonly params;
+  private readonly instanceStorageService;
+  constructor(params: {
+    getWorkspacePath: () => string;
+    runtimeService: ServiceAppStatusReader;
+    listPackageComponentSources?: () => Promise<AppPackageComponentSource[]>;
+    listWorkspaceDirectoryNames?: (serviceAppsPath: string) => Promise<string[]>;
+  });
+  buildWorkspaceRecord: (serviceAppsPath: string, dirName: string) => Promise<ServiceAppRecord | null>;
+  buildPackageRecord: (source: AppPackageComponentSource) => Promise<ServiceAppRecord | null>;
+  require: (appId: string, materializeStorage?: boolean) => Promise<{
+    manifest: ServiceAppManifest;
+    record: ServiceAppRecord;
+  }>;
+  listValid: () => Promise<Array<{
+    manifest: ServiceAppManifest;
+    record: ServiceAppRecord;
+  }>>;
+  listWorkspaceDataOwners: (serviceAppsPath: string, dirNames: string[]) => Promise<WorkspaceServiceDataOwner[]>;
+  materializeWorkspaceStorage: (serviceId: string) => Promise<AppStorageContext>;
+  inspectWorkspaceStorage: (serviceId: string) => Promise<AppStorageContext | undefined>;
+  fromManifest: (dirPath: string, manifest: ServiceAppManifest, packageSource?: AppPackageComponentSource, storage?: AppStorageContext) => ServiceAppRecord;
+  private failedWorkspaceRecord;
+  private failedPackageRecord;
+  private toTitle;
+  private getWorkspaceInstanceDirectory;
+  private pathExists;
+  private isMissingFileError;
+}
+//#endregion
+//#region src/managers/service-app-ai.manager.d.ts
+declare class ServiceAppAiManager {
+  private readonly params;
+  constructor(params: {
+    capabilities: ServiceAppAiCapabilityService;
+    records: ServiceAppRecordService;
+  });
+  inspect: (appId: string) => Promise<ServiceAppAiCapabilityReadiness>;
+  bindModel: (appId: string, slotId: string, modelId: string) => Promise<ServiceAppAiCapabilityReadiness>;
+  bindAgent: (appId: string, slotId: string, agentId: string) => Promise<ServiceAppAiCapabilityReadiness>;
+  unbind: (appId: string, kind: "model" | "agent", slotId: string) => Promise<ServiceAppAiCapabilityReadiness>;
+  completeModel: (params: {
+    appId: string;
+    slotId: string;
+    messages: Array<Record<string, unknown>>;
+    maxTokens?: number;
+    signal?: AbortSignal;
+  }) => Promise<_$_nextclaw_core0.LLMResponse>;
+  startAgent: (params: {
+    appId: string;
+    slotId: string;
+    input: AgentRunSendIngressPayload;
+    callId: string;
+    jobId?: string;
+    traceId?: string;
+    signal?: AbortSignal;
+  }) => Promise<AgentRunExecution>;
+}
 //#endregion
 //#region src/services/service-app-removal.service.d.ts
 type ServiceAppRemovalDiagnostic = {
@@ -2837,7 +3905,7 @@ type ServiceAppRemovalDiagnostic = {
 };
 //#endregion
 //#region src/utils/service-app-error.utils.d.ts
-type ServiceAppErrorCode = "AUTHORIZATION_REQUIRED" | "SERVICE_APP_ACTION_NOT_DECLARED" | "SERVICE_APP_ACTION_NOT_FOUND" | "SERVICE_APP_INVALID_ACTION" | "SERVICE_APP_INVALID_CALLER" | "SERVICE_APP_INVALID_MANIFEST" | "SERVICE_APP_MANAGED_SOURCE" | "SERVICE_APP_NOT_FOUND" | "SERVICE_APP_READ_FAILED" | "SERVICE_APP_RUNTIME_FAILED" | "WASI_ABI_VERSION_MISMATCH" | "WASI_CAPABILITY_DENIED" | "WASI_COMPONENT_FAILED" | "WASI_COMPONENT_TRAP" | "WASI_GUEST_EXPORT_MISSING" | "WASI_INPUT_SCHEMA_MISMATCH";
+type ServiceAppErrorCode = "AUTHORIZATION_REQUIRED" | "SERVICE_APP_ACTION_NOT_DECLARED" | "SERVICE_APP_ACTION_NOT_FOUND" | "SERVICE_APP_INVALID_ACTION" | "SERVICE_APP_INVALID_CALLER" | "SERVICE_APP_INVALID_MANIFEST" | "SERVICE_APP_MANAGED_SOURCE" | "SERVICE_APP_JOB_CONFLICT" | "SERVICE_APP_JOB_CURSOR_INVALID" | "SERVICE_APP_JOB_EVENT_LIMIT" | "SERVICE_APP_JOB_NOT_FOUND" | "SERVICE_APP_JOB_TERMINAL" | "SERVICE_APP_RESIDENT_EVENT_NOT_FOUND" | "SERVICE_APP_RESIDENT_EVENT_CONFLICT" | "SERVICE_APP_RESIDENT_EVENT_LEASE_INVALID" | "SERVICE_APP_RESIDENT_INBOX_FROZEN" | "SERVICE_APP_NOT_FOUND" | "SERVICE_APP_READ_FAILED" | "SERVICE_APP_RUNTIME_FAILED" | "STREAM_BACKPRESSURE_TIMEOUT" | "STREAM_CURSOR_EXPIRED" | "WASI_ABI_VERSION_MISMATCH" | "WASI_CAPABILITY_DENIED" | "WASI_COMPONENT_FAILED" | "WASI_COMPONENT_TRAP" | "WASI_GUEST_EXPORT_MISSING" | "WASI_INPUT_SCHEMA_MISMATCH";
 declare class ServiceAppError extends Error {
   readonly code: ServiceAppErrorCode;
   readonly details?: Record<string, unknown> | undefined;
@@ -2865,19 +3933,40 @@ declare class ServiceAppManager {
   private readonly actionGrants;
   private readonly packageRuntime;
   private readonly lifecycleService;
+  readonly aiCapabilities: ServiceAppAiCapabilityService;
+  private readonly aiManager;
+  private readonly verificationRecords?;
+  private readonly jobJournal;
+  private readonly jobManager;
+  private readonly activationManager;
+  private readonly residentInbox;
   private reconciliationDiagnostics;
   constructor(params: {
+    appHomeDirectory?: string;
     configManager: ConfigManager;
     runtimeService?: ServiceAppRuntime;
     listPackageComponentSources?: () => Promise<AppPackageComponentSource[]>;
     capabilityGrantManager: CapabilityGrantManager;
     hasAgent?: (agentId: string) => boolean;
+    providerManager?: LlmProviderRuntime;
+    llmUsage?: Pick<LlmUsageManager, "observeProviderManager">;
+    agentRunClient?: Pick<AgentRunClient, "startRun">;
     portableServiceRunnerPath?: string;
+    verificationRecords?: VerificationRecordService;
+    jobJournal?: ServiceAppJobJournalService;
+    residentInbox?: ServiceAppResidentEventInboxService;
   });
   start: () => Promise<void>;
   listServiceApps: () => Promise<ServiceAppList>;
   listCapabilityProviders: () => Promise<CapabilityProviderView[]>;
   getServiceApp: (appId: string) => Promise<ServiceAppRecord>;
+  inspectServiceAppAiCapabilities: (appId: string) => Promise<ServiceAppAiCapabilityReadiness>;
+  verifyServiceAppAiCapabilities: (appId: string) => Promise<ServiceAppAiCapabilityReadiness>;
+  bindServiceAppModelSlot: (appId: string, slotId: string, modelId: string) => Promise<ServiceAppAiCapabilityReadiness>;
+  bindServiceAppAgentSlot: (appId: string, slotId: string, agentId: string) => Promise<ServiceAppAiCapabilityReadiness>;
+  unbindServiceAppAiSlot: (appId: string, kind: "model" | "agent", slotId: string) => Promise<ServiceAppAiCapabilityReadiness>;
+  completeServiceAppModelSlot: (params: Parameters<ServiceAppAiManager["completeModel"]>[0]) => Promise<_$_nextclaw_core0.LLMResponse>;
+  startServiceAppAgentSlot: (params: Parameters<ServiceAppAiManager["startAgent"]>[0]) => Promise<AgentRunExecution>;
   listServiceActions: (params?: {
     caller?: ServiceActionCaller;
     appId?: string;
@@ -2885,6 +3974,40 @@ declare class ServiceAppManager {
   }) => Promise<ServiceAction[]>;
   discoverServiceAppActions: (appId: string) => Promise<ServiceAction[]>;
   invokeServiceAction: (actionId: string, request: ServiceActionInvokeRequest) => Promise<ServiceActionInvokeResult>;
+  /**
+   * Calls a Service component belonging to an enabled installed package.
+   * This is deliberately separate from source-tree `nextclaw app call`.
+   */
+  invokeInstalledServiceAction: (appId: string, actionName: string, input?: Record<string, unknown>) => Promise<ServiceActionInvokeResult>;
+  listVerificationRecords: (filters?: {
+    acceptanceId?: string;
+    appId?: string;
+    limit?: number;
+  }) => Promise<VerificationRecordList>;
+  exportVerificationRecords: (filters?: {
+    acceptanceId?: string;
+    appId?: string;
+    limit?: number;
+  }) => Promise<string>;
+  listServiceAppJobs: (appId: string, params?: {
+    caller?: ServiceAppJobCaller;
+  }) => Promise<ServiceAppJobList>;
+  getServiceAppJob: (appId: string, jobId: string, params?: {
+    caller?: ServiceAppJobCaller;
+  }) => Promise<ServiceAppJobView>;
+  watchServiceAppJob: (appId: string, jobId: string, afterSequence?: number, params?: {
+    caller?: ServiceAppJobCaller;
+  }) => Promise<ServiceAppJobWatch>;
+  cancelServiceAppJob: (appId: string, jobId: string, params?: {
+    caller?: ServiceAppJobCaller;
+  }) => Promise<ServiceAppJobView>;
+  listResidentInbox: (appId: string, params?: {
+    deadLettersOnly?: boolean;
+  }) => Promise<ServiceAppResidentEventList>;
+  replayResidentDeadLetter: (appId: string, eventId: string) => Promise<ServiceAppResidentEventView>;
+  enqueueResidentEvent: (appId: string, input: ResidentEventInput) => Promise<ServiceAppResidentEventView>;
+  createServiceAppJob: (params: Parameters<ServiceAppJobManager["create"]>[0]) => Promise<ServiceAppJobView>;
+  createServiceAppJobEventSink: (record: ServiceAppRecord, jobId: string) => ServiceAppJobEventSink;
   grantServiceAction: (actionId: string, request: ServiceActionGrantRequest) => Promise<ServiceActionGrant>;
   grantServiceActions: (actionIds: readonly string[], request: ServiceActionGrantRequest) => Promise<ServiceActionGrant[]>;
   listServiceActionGrants: () => Promise<ServiceActionGrant[]>;
@@ -2902,9 +4025,9 @@ declare class ServiceAppManager {
   private withGrantState;
   private requireServiceAction;
   private requireServiceAppForAction;
-  private requireServiceApp;
-  private listValidServiceApps;
+  private requireInstalledServiceApp;
   private normalizeActionIds;
+  private toJobScope;
   private getWorkspacePath;
   private getServiceAppsPath;
   private getServiceAppLockPath;
@@ -2912,7 +4035,15 @@ declare class ServiceAppManager {
   private listServiceAppDirNames;
   private isMissingFileError;
 }
-type ServiceAppRuntime = Pick<ServiceAppRuntimeService, "dispose" | "getStatus" | "invokeAction" | "listActions" | "restart" | "stop"> & Pick<Partial<ServiceAppRuntimeService>, "start">; //# sourceMappingURL=service-app.manager.d.ts.map
+type ServiceAppRuntime = Pick<ServiceAppRuntimeService, "dispose" | "getLastObservation" | "getStatus" | "invokeAction" | "listActions" | "restart" | "stop"> & Pick<Partial<ServiceAppRuntimeService>, "start"> & {
+  cancelJob?: (params: {
+    appId: string;
+    instanceId: string;
+    jobId: string;
+  }) => Promise<void>;
+  enqueueResidentEvent?: ServiceAppRuntimeService["enqueueResidentEvent"];
+  setPortableHostCallHandler?: ServiceAppRuntimeService["setPortableHostCallHandler"];
+}; //# sourceMappingURL=service-app.manager.d.ts.map
 //#endregion
 //#region src/utils/skill-frontmatter.utils.d.ts
 type LocalizedTextMap = Record<string, string>;
@@ -3046,13 +4177,123 @@ declare class FeatureControlsService {
   get: () => Promise<ProductFeatureControls>;
 }
 //#endregion
+//#region src/utils/portable-runtime-acceptance-presentation.utils.d.ts
+/**
+ * The only product-language owner for the portable-runtime acceptance
+ * contract. Every surface receives this projection from the Kernel instead of
+ * carrying a parallel list of PRT ids or translations.
+ */
+declare const PORTABLE_RUNTIME_ACCEPTANCE_LOCALES: readonly ["zh-CN", "en"];
+type PortableRuntimeAcceptanceLocale = (typeof PORTABLE_RUNTIME_ACCEPTANCE_LOCALES)[number];
+type PortableRuntimeAcceptancePresentation = {
+  title: string;
+  description: string;
+};
+type PortableRuntimeAcceptancePresentationCatalog = Record<PortableRuntimeAcceptanceLocale, Record<string, string>>;
+declare const PORTABLE_RUNTIME_ACCEPTANCE_PRESENTATION: PortableRuntimeAcceptancePresentationCatalog;
+declare function resolvePortableRuntimeAcceptanceLocale(value: unknown): PortableRuntimeAcceptanceLocale;
+declare function presentPortableRuntimeAcceptanceDefinition(definition: PortableRuntimeAcceptanceDefinition, locale: PortableRuntimeAcceptanceLocale): PortableRuntimeAcceptancePresentation;
+//#endregion
+//#region src/services/portable-runtime-acceptance-identity.service.d.ts
+type PortableRuntimeAcceptanceIdentity = {
+  available: true;
+  context: PortableRuntimeAcceptanceEvaluationContext;
+  runtimeVersionSource: "configured" | "product-version-fallback";
+  runnerFingerprint: string;
+};
+type PortableRuntimeAcceptanceUnavailableIdentity = {
+  available: false;
+  reason: string;
+  environment: PortableRuntimeAcceptancePlatform | null;
+  productVersion: string | null;
+  runtimeVersion: string | null;
+  runtimeVersionSource: "configured" | "product-version-fallback" | null;
+};
+type PortableRuntimeAcceptanceIdentityResult = PortableRuntimeAcceptanceIdentity | PortableRuntimeAcceptanceUnavailableIdentity;
+/**
+ * Resolves the identity against which evidence is judged. It deliberately
+ * reads the currently distributed runner rather than deriving identity from a
+ * previous VerificationRecord, so an updated runtime cannot self-certify with
+ * its own old evidence.
+ */
+declare class PortableRuntimeAcceptanceIdentityService {
+  private readonly params;
+  private cachedRunner;
+  constructor(params: {
+    productVersion?: string;
+    runtimeVersion?: string;
+    portableServiceRunnerPath?: string;
+    platform?: NodeJS.Platform;
+    arch?: string;
+  });
+  resolve: (appId: string) => Promise<PortableRuntimeAcceptanceIdentityResult>;
+  private fingerprintRunner;
+}
+declare function normalizePortableRuntimeEnvironment(platform: NodeJS.Platform, arch: string): PortableRuntimeAcceptancePlatform | null;
+//#endregion
+//#region src/services/portable-runtime-acceptance-manager.service.d.ts
+/** The fixed installed App used for the canonical portable-runtime acceptance matrix. */
+declare const PORTABLE_RUNTIME_ACCEPTANCE_REFERENCE_APP_ID = "nextclaw.github-issue-watcher";
+type PortableRuntimeAcceptanceContractView = {
+  contractFingerprint: string;
+  locale: PortableRuntimeAcceptanceLocale;
+  definitions: PortableRuntimeAcceptanceDefinitionView[];
+};
+type PortableRuntimeAcceptanceDefinitionView = PortableRuntimeAcceptanceDefinition & {
+  presentation: PortableRuntimeAcceptancePresentation;
+};
+/**
+ * The evaluator always has a concrete platform. Product status additionally
+ * represents an unavailable identity, where the host may itself be unknown.
+ */
+type PortableRuntimeAcceptanceSurfaceResult = Omit<PortableRuntimeAcceptanceResult, "environment"> & {
+  environment: PortableRuntimeAcceptancePlatform | null;
+};
+type PortableRuntimeAcceptanceStatusEntry = PortableRuntimeAcceptanceDefinitionView & {
+  result: PortableRuntimeAcceptanceSurfaceResult;
+};
+type PortableRuntimeAcceptanceStatusView = {
+  schemaVersion: 1;
+  contract: PortableRuntimeAcceptanceContractView;
+  appId: string;
+  identity: PortableRuntimeAcceptanceIdentityResult;
+  entries: PortableRuntimeAcceptanceStatusEntry[];
+  summary: Record<PortableRuntimeAcceptanceResultStatus, number>;
+};
+/**
+ * Read-only product projection over the single contract registry and durable
+ * records. No Panel, API route, or CLI command computes an acceptance state.
+ */
+declare class PortableRuntimeAcceptanceManager {
+  private readonly params;
+  constructor(params: {
+    verificationRecords: VerificationRecordService;
+    identity: PortableRuntimeAcceptanceIdentityService; /** Test-only injection keeps the production source the canonical registry. */
+    definitions?: readonly PortableRuntimeAcceptanceDefinition[];
+  });
+  private get definitions();
+  contract: (locale?: unknown) => PortableRuntimeAcceptanceContractView;
+  status: (params?: {
+    appId?: string;
+    locale?: unknown;
+  }) => Promise<PortableRuntimeAcceptanceStatusView>;
+  export: (params?: {
+    appId?: string;
+    locale?: unknown;
+  }) => Promise<PortableRuntimeAcceptanceStatusView>;
+  private present;
+  private groupEvidence;
+  private unavailableResults;
+}
+//#endregion
 //#region src/app/nextclaw-kernel.d.ts
 type NextclawKernelOptions = {
   homeDir?: string;
   configPath?: string;
   builtInAppsDirectory?: string;
   portableServiceRunnerPath?: string;
-  productVersion?: string;
+  productVersion?: string; /** Version of the active runtime bundle; local development falls back to productVersion. */
+  runtimeVersion?: string;
   productActivitySink?: ProductActivitySink;
   desktopHost?: DesktopHost;
 };
@@ -3109,6 +4350,8 @@ declare class NextclawKernel {
   readonly observations: ObservationManager;
   readonly capabilityGrants: CapabilityGrantManager;
   readonly featureControls: FeatureControlsService;
+  readonly verificationRecords: VerificationRecordService;
+  readonly portableRuntimeAcceptance: PortableRuntimeAcceptanceManager;
   private readonly capabilityGrantLegacyMigration;
   private readonly ncpAgentSessionJournalStore;
   private readonly contributions;
@@ -3169,44 +4412,6 @@ type BuildAgentRunSendPayloadParams = {
 };
 declare function buildAgentRunSendPayload(params: BuildAgentRunSendPayloadParams): Promise<AgentRunSendIngressPayload>;
 //#endregion
-//#region src/services/agent-run-client.service.d.ts
-type AgentRunReplyOptions = {
-  abortSignal?: AbortSignal;
-  onAssistantDelta?: (delta: string) => void;
-  onEvent?: (event: NcpEndpointEvent$1) => void;
-  missingCompletedMessageError?: string;
-  runErrorMessage?: string;
-};
-type AgentRunStreamOptions = {
-  abortSignal?: AbortSignal;
-  onEvent?: (event: NcpEndpointEvent$1) => void;
-};
-type AgentRunReply = {
-  handle: NcpRunHandle;
-  text: string;
-  completedMessage: NcpMessage$1;
-};
-type AgentRunExecution = {
-  handle: NcpRunHandle;
-  events: AsyncIterable<NcpEndpointEvent$1>;
-  result: Promise<AgentRunReply>;
-  cancel: () => Promise<void>;
-  dispose: () => void;
-};
-declare class AgentRunClient {
-  private readonly options;
-  constructor(options: {
-    eventBus: Pick<EventBus$1, "on">;
-    ingress: Pick<Ingress$1, "handle">;
-  });
-  send: (input: AgentRunSendIngressPayload) => Promise<NcpRunHandle>;
-  sendAndWaitForReply: (input: AgentRunSendIngressPayload, options?: AgentRunReplyOptions) => Promise<AgentRunReply>;
-  startRun: (input: AgentRunSendIngressPayload, options?: AgentRunReplyOptions) => Promise<AgentRunExecution>;
-  sendAndStreamEvents: (this: AgentRunClient, input: AgentRunSendIngressPayload, options?: AgentRunStreamOptions) => AsyncGenerator<NcpEndpointEvent$1>;
-  private prepareObserver;
-  private sendWithCorrelation;
-}
-//#endregion
 //#region src/features/ncp-dispatch/services/gateway-inbound-processor.service.d.ts
 type GatewayInboundLoopRuntime = {
   kernel: {
@@ -3860,5 +5065,5 @@ declare function resolveLegacyEventType(message: SessionMessage): string;
 declare function getUiContentParamsBootstrapScript(): string;
 declare function injectUiContentParamsBootstrap(html: string): string;
 //#endregion
-export { AUTOMATIC_UPDATE_CHECK_INTERVAL_MS, AccessLoginResult, AccessManager, AccessManagerOptions, AccessPasswordStatus, AccessPrincipal, AccessRole, AccessSessionRecord, AccessSessionState, AgentManager, AgentManagerOptions, AgentRunClient, type AgentRunReply, type AgentRunReplyOptions, AgentRunSession, type AgentRunStreamOptions, type AgentRuntimeEntry, type AgentRuntimeProviderRegistration, AgentRuntimeSessionRequestDispatcherOptions, type AgentRuntimeSessionTypeCatalog, type AgentRuntimeSessionTypeDescribeParams, AgentRuntimeSessionTypeIcon, type AgentRuntimeSessionTypeOption, AgentRuntimeSessionTypeProvider, AgentServiceActionCaller, AppDataDeleteResult, AppDataDiagnostic, AppDataEntry, AppDataError, AppDataErrorCode, AppDataLifecycle, AppDataList, AppDataManager, AppDataSource, type AppEventEmitOptions, type AppEventEnvelope, type AppEventHandler, type AppEventKey, AppPackageComponentKind, AppPackageComponentSource, AppPackageComponentSourceList, AppPackageComponentView, AppPackageConflict, AppPackageDependencyBinding, AppPackageDependencyBindingInput, AppPackageDependencyCandidate, AppPackageDependencyView, AppPackageError, AppPackageErrorCode, AppPackageHostTarget, AppPackageList, AppPackageManager, AppPackageOperationAction, AppPackageOperationInput, AppPackageOperationList, AppPackageOperationResult, AppPackageOperationStatus, AppPackageOperationView, AppPackageReadiness, AppPackageReadinessRequirement, AppPackageReadinessStatus, AppPackageRuntimeHooks, AppPackageUnavailableDiagnostic, AppPackageUninstallRollback, AppPackageView, type AssetApi, AutomationManager, AutomationManagerOptions, BindContextInput, type BuildAgentRunSendPayloadParams, BuildContextTailInput, BuiltinNarpRuntimeProviderService, CONTEXT_COMPACTION_CONTINUATION_TEXT, CONTEXT_COMPACTION_PROJECTION_KIND, CONTEXT_COMPACTION_PROJECTION_METADATA_KEY, CONTEXT_COMPACTION_SYSTEM_PREAMBLE, CONTEXT_COMPACTION_TIMELINE_KIND, CapabilityGrant, CapabilityGrantDecision, CapabilityGrantFilter, CapabilityGrantLegacyMigrationService, CapabilityGrantListener, CapabilityGrantManager, CapabilityGrantRequest, CapabilityGrantResource, CapabilityGrantRevocationListener, CapabilityGrantStore, CapabilityGrantSubject, CapabilityProviderView, ChannelManager, ChannelReplyRouterDispatchParams, CommandRegistry, ConfigManager, ConfigManagerOptions, ConfigManagerRuntimeHooks, ConfigMutationResult, ContextBinding, type ContextBlock, ContextCompactionJournalRecoveryService, ContextCompactionModelProjection, ContextCompactionPreflightBeginResult, ContextCompactionPreflightResult, ContextCompactionPreflightService, ContextCompactionTimelineCheckpoint, ContextCompactionTrigger, type ContextProvider, type ContextProviderRequest, Contribution, CreateAgentRunSessionParams, CreateInboxDeliveryInput, CreateProjectInput, DEFAULT_AGENT_RUNTIME_ENTRY_ID, DEFAULT_SERVICE_ACTION_RISK, DESKTOP_HOST_ACCESS, DESKTOP_HOST_PROTOCOL_VERSION, DesktopApplicationTarget, DesktopCapabilityError, DesktopCapabilityErrorCode, DesktopHost, DesktopHostAccess, DesktopHostCaller, DesktopHostCapabilityDeclaration, DesktopHostCapabilityManager, DesktopHostEvent, DesktopHostEventListener, DesktopHostManifest, DesktopHostMethod, DesktopHostRequest, DesktopHostResponse, DesktopHostStatus, DesktopNodeReplService, DesktopSessionCaller, DesktopSessionStateService, DesktopSnapshotOptions, DirectPromptDispatchExecution, DirectPromptDispatchParams, DirectPromptDispatchResult, type Disposer, EventAdmissionPolicy, EventBus, type EventBusOptions, EventDelivery, EventSubscription, EventSubscriptionBudget, ExtensionLoadProgress, ExtensionLoadResult, ExtensionManager, type ExtensionRuntimeStatus, FeatureControlsService, GatewayInboundLoopRuntime, GatewayInboundProcessor, type IContextRegistry, type IKernel, type IMcpRegistry, type IModelRegistry, type INextclawAgent, type INextclawAgentRegistry, type INextclawAgentSessions, type INextclawContributionRegistry, type INextclawHarness, type INextclawRun, type INextclawSession, type INextclawSessionRegistry, type IRuntimeRegistry, type IToolRegistry, InboxDeliveryError, InboxDeliveryErrorCode, InboxDeliveryManager, InboxDeliveryManagerOptions, Ingress, type IngressContext, type IngressEnvelope, type IngressHandler, InstallationKind, InstalledSkillDetail, InstalledSkillSummary, InstalledSkillsList, JsonPointer, JsonValue, type Key, type LLMResponse, type LLMStreamEvent, type LearningLoopRuntimeConfig, LlmProviderManager, LlmProviderRuntime, LlmUsageManager, LlmUsageManagerOptions, LlmUsageRecord, LlmUsageSnapshot, LlmUsageStats, LlmUsageStore, LlmUsageStoreOptions, LlmUsageSummary, LocalizedTextMap, MAX_INBOX_DELIVERY_CONTENT_LENGTH, type McpCatalogFilter, McpManager, type McpServerDefinition, type McpServerRecord, McpServiceAppRuntimeService, type McpToolCallInput, type McpToolCatalogEntry, type ModelChatInput, NARP_HTTP_RUNTIME_KIND, NARP_STDIO_RUNTIME_KIND, NEXTCLAW_TIMELINE_KIND_METADATA_KEY, NcpAgentSessionJournalStore, type NcpEndpointEvent, type NcpMessage, type NcpTool, type NextclawAgentDefinition, type NextclawContributionDescriptor, NextclawHarness, NextclawHarnessError, type NextclawHarnessErrorCode, type NextclawHarnessOptions, NextclawKernel, NextclawKernelOptions, NextclawNcpResolvedAgentProfile, NextclawNcpResolvedRunContext, NextclawNcpRunContextResolveParams, type NextclawRunStatus, type NextclawSessionCreateInput, type NextclawSessionRunInput, type NextclawTaskInput, type NextclawTaskResult, ObservationCapabilityDescriptor, ObservationContextTail, ObservationEvent, ObservationEventAdmissionDecision, ObservationExtensionRuntime, ObservationManager, ObservationManagerOptions, ObservationRef, ObservationRelationshipStatus, ObservationState, ObservationTarget, PANEL_APP_AGENT_CAPABILITIES, PROJECT_TEMPLATE_IDS, PROVIDER_MODEL_CATALOG_REFRESH_INTERVAL_MS, PanelAppAgentCapability, PanelAppAgentGenerateObjectInput, PanelAppAgentGenerateObjectRequest, PanelAppAgentGenerateObjectResult, PanelAppAgentRunClient, PanelAppAgentSendPayload, PanelAppAgentSendRequest, PanelAppAgentSendResult, PanelAppAssetTokenService, PanelAppBridgeSession, PanelAppCapabilityGrant, PanelAppCapabilityGrantCaller, PanelAppClientGrant, PanelAppContent, PanelAppDeleteResult, PanelAppEntry, PanelAppError, PanelAppErrorCode, PanelAppList, PanelAppManager, type PanelAppPreferencesUpdate, PanelServiceActionCaller, type PortableRunnerObservation, PreferenceEntry, PreferenceError, PreferenceErrorCode, PreferenceJsonValue, PreferenceManager, PreferenceManagerOptions, ProductActivityKind, ProductActivitySignal, ProductActivitySink, ProductActivitySource, type ProductFeatureControls, ProjectError, ProjectErrorCode, ProjectManager, ProjectManagerOptions, ProjectRecord, ProjectTemplate, ProjectTemplateId, type ProviderCatalogPlugin, ProviderManagerNcpLLMApi, ProviderModelCatalogEntry, ProviderModelCatalogManager, ProviderModelCatalogSnapshot, ProviderModelsDiscoverInput, type ProviderSpec, ResolvedAgentProfile, ResolvedDesktopApplicationTarget, SERVICE_APP_MANIFEST_FILE_NAME, ServiceAction, ServiceActionCaller, ServiceActionGrant, ServiceActionGrantRequest, ServiceActionGrantState, ServiceActionInvokeRequest, ServiceActionInvokeResult, ServiceActionRisk, ServiceActionRuntimeState, ServiceAppCapabilityProvision, ServiceAppCapabilityRequirement, ServiceAppDeleteResult, ServiceAppError, type ServiceAppErrorCode, ServiceAppExternalRemediation, ServiceAppLifecycle, ServiceAppList, ServiceAppManager, ServiceAppManifest, ServiceAppManifestAction, ServiceAppProtocol, ServiceAppProvides, ServiceAppRecord, ServiceAppRequirements, ServiceAppResourceRequirement, ServiceAppRuntimeService, ServiceAppRuntimeStatus, SessionContextCompactionError, SessionContextCompactionErrorCode, SessionContextCompactionManager, SessionContextCompactionResult, SessionManager, SessionManagerOptions, SessionMessageCursorError, SessionMessagePage, SessionModelTokenUsage, type SessionPendingInput, type SessionQueuedInput, SessionRequestManager, SessionRequestManagerOptions, SessionSettingsError, SessionSettingsPatch, type SessionSteerQueuedInputResult, SessionTokenUsageStatus, SessionTokenUsageSummary, SessionTokenUsageTotals, SkillFrontmatter, type SkillInfo, SkillManager, type SkillScope, SubscribeEventsInput, SystemObjectReferenceError, SystemObjectReferenceErrorCode, SystemObjectReferenceManager, SystemObjectReferenceProvider, SystemObjectReferenceSnapshotSource, type TypedKey, TypedPredicate, UnavailableDesktopHost, UnsignedUpdateManifest, type Unsubscribe, UpdateBlockReason, UpdateHostKind, UpdateManifest, UpdateManifestReader, UpdateProgress, UpdateSnapshot, UpdateStatus, type WorkspaceServiceDataOwner, assertObservationJsonValue, assertObservationPredicate, buildAgentRunSendPayload, buildContextCompactionModelProjection, buildContextCompactionTimelineNcpMessage, buildLlmUsageSummary, buildLocalizedTextMap, buildNextclawNcpRunContext, buildObservationEventModelMessage, buildServiceActionId, buildSessionRequestCompletionMessage, capabilityGrantCovers, createAgentRuntimeSessionRequestDispatcher, createAgentRuntimeSessionRequestSourceNotifier, createAssetTools, createCapabilityDeclarationFingerprint, createContextCompactionMessageId, createContextWindowSignature, createCronJobSystemObjectProvider, createDesktopHostError, createInboxDeliverySystemObjectProvider, createLlmUsageRecord, createPanelAppAgentGrantRequest, createPanelAppClientGrantRequest, createServiceActionGrantRequest, createTypedKey, describeAgentRuntimeSessionTypes, dispatchAgentRuntimeSessionRequest, dispatchChannelReplyRoute, dispatchPromptOverNcp, dispatchPromptOverNcpResult, evaluateObservationEventAdmission, eventKeys, getAutomaticUpdateCheckDelay, getCapabilityGrantKey, getServiceActionName, getServiceAppManifestPath, getUiContentParamsBootstrapScript, getUnsignedUpdateManifest, hasLlmUsageTelemetry, ingressKeys, injectUiContentParamsBootstrap, isAppDataError, isAppPackageError, isContextCompactionProjectionMessage, isContextCompactionTimelineMessage, isContextWindowSnapshot, isInboxDeliveryError, isPanelAppAgentCapability, isPanelAppError, isPreferenceError, isProjectError, isReplyCapableChannel, isServiceAppError, isSessionContextCompactionError, isSessionMessageCursorError, isSessionSettingsError, isSystemObjectReferenceError, listExtensionChannelIds, listServiceAppManifestActions, matchesCapabilityGrantFilter, matchesObservationPredicate, mergeServiceAppRuntimeActions, normalizeAgentRuntimeSessionTypeIcon, normalizeCapabilityGrantRequest, normalizeLlmUsageModel, normalizeOptionalString, parseObservationDuration, parseServiceAppManifest, parseSkillFrontmatter, readContextCompactionCheckpoint, readContextWindowEventSessionId, readJsonPointer, readLatestContextCompactionCheckpoint, readLearningLoopRuntimeConfig, readMetadataModel, readMetadataThinking, readServiceActionTargetId, readServiceAppManifest, resolveAgentRuntimeEntries, resolveAutomaticUpdateCheckIntervalMs, resolveChannelReplyRoute, resolveEffectiveModel, resolveLegacyEventType, resolveSessionChannelContext, runGatewayInboundLoop, runNextclawTask, sanitizeLlmUsage, serializeContextTail, serializeUnsignedUpdateManifest, shouldRefreshContextWindowDuringStream, shouldRefreshContextWindowImmediately, startPromptOverNcpExecution, stripSkillFrontmatter, syncSessionThinkingPreference, toBoundedJson, toNcpMessages, waitForAgentRuntimeSessionReply };
+export { AUTOMATIC_UPDATE_CHECK_INTERVAL_MS, AccessLoginResult, AccessManager, AccessManagerOptions, AccessPasswordStatus, AccessPrincipal, AccessRole, AccessSessionRecord, AccessSessionState, AgentManager, AgentManagerOptions, AgentRunClient, type AgentRunReply, type AgentRunReplyOptions, AgentRunSession, type AgentRunStreamOptions, type AgentRuntimeEntry, type AgentRuntimeProviderRegistration, AgentRuntimeSessionRequestDispatcherOptions, type AgentRuntimeSessionTypeCatalog, type AgentRuntimeSessionTypeDescribeParams, AgentRuntimeSessionTypeIcon, type AgentRuntimeSessionTypeOption, AgentRuntimeSessionTypeProvider, AgentServiceActionCaller, AppDataDeleteResult, AppDataDiagnostic, AppDataEntry, AppDataError, AppDataErrorCode, AppDataLifecycle, AppDataList, AppDataManager, AppDataSource, type AppEventEmitOptions, type AppEventEnvelope, type AppEventHandler, type AppEventKey, AppPackageComponentKind, AppPackageComponentSource, AppPackageComponentSourceList, AppPackageComponentView, AppPackageConflict, AppPackageDependencyBinding, AppPackageDependencyBindingInput, AppPackageDependencyCandidate, AppPackageDependencyCycle, AppPackageDependencyDiagnostic, AppPackageDependencyDiagnosticCode, AppPackageDependencyView, AppPackageError, AppPackageErrorCode, AppPackageHostTarget, AppPackageList, AppPackageManager, AppPackageOperationAction, AppPackageOperationInput, AppPackageOperationList, AppPackageOperationResult, AppPackageOperationStatus, AppPackageOperationView, AppPackageReadiness, AppPackageReadinessRequirement, AppPackageReadinessStatus, AppPackageRuntimeHooks, AppPackageSecretReadiness, AppPackageSecretSlotView, AppPackageSecretStatus, AppPackageUnavailableDiagnostic, AppPackageUninstallRollback, AppPackageView, type AssetApi, AutomationManager, AutomationManagerOptions, BindContextInput, type BuildAgentRunSendPayloadParams, BuildContextTailInput, BuiltinNarpRuntimeProviderService, CONTEXT_COMPACTION_CONTINUATION_TEXT, CONTEXT_COMPACTION_PROJECTION_KIND, CONTEXT_COMPACTION_PROJECTION_METADATA_KEY, CONTEXT_COMPACTION_SYSTEM_PREAMBLE, CONTEXT_COMPACTION_TIMELINE_KIND, CapabilityGrant, CapabilityGrantDecision, CapabilityGrantFilter, CapabilityGrantLegacyMigrationService, CapabilityGrantListener, CapabilityGrantManager, CapabilityGrantRequest, CapabilityGrantResource, CapabilityGrantRevocationListener, CapabilityGrantStore, CapabilityGrantSubject, CapabilityProviderView, ChannelManager, ChannelReplyRouterDispatchParams, CommandRegistry, ConfigManager, ConfigManagerOptions, ConfigManagerRuntimeHooks, ConfigMutationResult, ContextBinding, type ContextBlock, ContextCompactionJournalRecoveryService, ContextCompactionModelProjection, ContextCompactionPreflightBeginResult, ContextCompactionPreflightResult, ContextCompactionPreflightService, ContextCompactionTimelineCheckpoint, ContextCompactionTrigger, type ContextProvider, type ContextProviderRequest, Contribution, CreateAgentRunSessionParams, CreateInboxDeliveryInput, CreateProjectInput, DEFAULT_AGENT_RUNTIME_ENTRY_ID, DEFAULT_SERVICE_ACTION_RISK, DESKTOP_HOST_ACCESS, DESKTOP_HOST_PROTOCOL_VERSION, DesktopApplicationTarget, DesktopCapabilityError, DesktopCapabilityErrorCode, DesktopHost, DesktopHostAccess, DesktopHostCaller, DesktopHostCapabilityDeclaration, DesktopHostCapabilityManager, DesktopHostEvent, DesktopHostEventListener, DesktopHostManifest, DesktopHostMethod, DesktopHostRequest, DesktopHostResponse, DesktopHostStatus, DesktopNodeReplService, DesktopSessionCaller, DesktopSessionStateService, DesktopSnapshotOptions, DirectPromptDispatchExecution, DirectPromptDispatchParams, DirectPromptDispatchResult, type Disposer, EventAdmissionPolicy, EventBus, type EventBusOptions, EventDelivery, EventSubscription, EventSubscriptionBudget, ExtensionLoadProgress, ExtensionLoadResult, ExtensionManager, type ExtensionRuntimeStatus, FeatureControlsService, GatewayInboundLoopRuntime, GatewayInboundProcessor, type IContextRegistry, type IKernel, type IMcpRegistry, type IModelRegistry, type INextclawAgent, type INextclawAgentRegistry, type INextclawAgentSessions, type INextclawContributionRegistry, type INextclawHarness, type INextclawRun, type INextclawSession, type INextclawSessionRegistry, type IRuntimeRegistry, type IToolRegistry, InboxDeliveryError, InboxDeliveryErrorCode, InboxDeliveryManager, InboxDeliveryManagerOptions, Ingress, type IngressContext, type IngressEnvelope, type IngressHandler, InstallationKind, InstalledSkillDetail, InstalledSkillSummary, InstalledSkillsList, JsonPointer, JsonValue, type Key, type LLMResponse, type LLMStreamEvent, type LearningLoopRuntimeConfig, type LeasedResidentEvent, LegacyVerificationRecord, LlmProviderManager, LlmProviderRuntime, LlmUsageManager, LlmUsageManagerOptions, LlmUsageRecord, LlmUsageSnapshot, LlmUsageStats, LlmUsageStore, LlmUsageStoreOptions, LlmUsageSummary, LocalizedTextMap, MAX_INBOX_DELIVERY_CONTENT_LENGTH, type McpCatalogFilter, McpManager, type McpServerDefinition, type McpServerRecord, McpServiceAppRuntimeService, type McpToolCallInput, type McpToolCatalogEntry, type ModelChatInput, NARP_HTTP_RUNTIME_KIND, NARP_STDIO_RUNTIME_KIND, NEXTCLAW_TIMELINE_KIND_METADATA_KEY, NcpAgentSessionJournalStore, type NcpEndpointEvent, type NcpMessage, type NcpTool, type NextclawAgentDefinition, type NextclawContributionDescriptor, NextclawHarness, NextclawHarnessError, type NextclawHarnessErrorCode, type NextclawHarnessOptions, NextclawKernel, NextclawKernelOptions, NextclawNcpResolvedAgentProfile, NextclawNcpResolvedRunContext, NextclawNcpRunContextResolveParams, type NextclawRunStatus, type NextclawSessionCreateInput, type NextclawSessionRunInput, type NextclawTaskInput, type NextclawTaskResult, ObservationCapabilityDescriptor, ObservationContextTail, ObservationEvent, ObservationEventAdmissionDecision, ObservationExtensionRuntime, ObservationManager, ObservationManagerOptions, ObservationRef, ObservationRelationshipStatus, ObservationState, ObservationTarget, PANEL_APP_AGENT_CAPABILITIES, PORTABLE_RUNTIME_ACCEPTANCE_CONTRACT, PORTABLE_RUNTIME_ACCEPTANCE_CONTRACT_FINGERPRINT, PORTABLE_RUNTIME_ACCEPTANCE_LOCALES, PORTABLE_RUNTIME_ACCEPTANCE_PLATFORMS, PORTABLE_RUNTIME_ACCEPTANCE_PRESENTATION, PORTABLE_RUNTIME_ACCEPTANCE_REFERENCE_APP_ID, PROJECT_TEMPLATE_IDS, PROVIDER_MODEL_CATALOG_REFRESH_INTERVAL_MS, PanelAppAgentCapability, PanelAppAgentGenerateObjectInput, PanelAppAgentGenerateObjectRequest, PanelAppAgentGenerateObjectResult, PanelAppAgentRunClient, PanelAppAgentSendPayload, PanelAppAgentSendRequest, PanelAppAgentSendResult, PanelAppAssetTokenService, PanelAppBridgeSession, PanelAppCapabilityGrant, PanelAppCapabilityGrantCaller, PanelAppClientGrant, PanelAppContent, PanelAppDeleteResult, PanelAppEntry, PanelAppError, PanelAppErrorCode, PanelAppList, PanelAppManager, type PanelAppPreferencesUpdate, PanelServiceActionCaller, type PortableRunnerObservation, type PortableRuntimeAcceptanceContractView, PortableRuntimeAcceptanceDefinition, type PortableRuntimeAcceptanceDefinitionView, type PortableRuntimeAcceptanceEvaluationContext, type PortableRuntimeAcceptanceEvidence, type PortableRuntimeAcceptanceEvidenceArtifact, PortableRuntimeAcceptanceEvidenceSource, PortableRuntimeAcceptanceId, type PortableRuntimeAcceptanceIdentity, type PortableRuntimeAcceptanceIdentityResult, PortableRuntimeAcceptanceIdentityService, type PortableRuntimeAcceptanceLocale, PortableRuntimeAcceptanceManager, PortableRuntimeAcceptancePlatform, type PortableRuntimeAcceptancePresentation, type PortableRuntimeAcceptanceResult, type PortableRuntimeAcceptanceResultStatus, type PortableRuntimeAcceptanceStatusEntry, type PortableRuntimeAcceptanceStatusView, type PortableRuntimeAcceptanceSurfaceResult, type PortableRuntimeAcceptanceUnavailableIdentity, PreferenceEntry, PreferenceError, PreferenceErrorCode, PreferenceJsonValue, PreferenceManager, PreferenceManagerOptions, ProductActivityKind, ProductActivitySignal, ProductActivitySink, ProductActivitySource, type ProductFeatureControls, ProjectError, ProjectErrorCode, ProjectManager, ProjectManagerOptions, ProjectRecord, ProjectTemplate, ProjectTemplateId, type ProviderCatalogPlugin, ProviderManagerNcpLLMApi, ProviderModelCatalogEntry, ProviderModelCatalogManager, ProviderModelCatalogSnapshot, ProviderModelsDiscoverInput, type ProviderSpec, type ResidentEventInput, ResolvedAgentProfile, ResolvedDesktopApplicationTarget, SERVICE_APP_MANIFEST_FILE_NAME, ServiceAction, ServiceActionCaller, ServiceActionGrant, ServiceActionGrantRequest, ServiceActionGrantState, ServiceActionInvocationFacts, ServiceActionInvokeRequest, ServiceActionInvokeResult, ServiceActionRisk, ServiceActionRuntimeState, ServiceAppAgentCapabilitySlot, ServiceAppAiCapabilityService, ServiceAppCapabilityProvision, ServiceAppCapabilityRequirement, ServiceAppDeleteResult, ServiceAppError, type ServiceAppErrorCode, ServiceAppExternalRemediation, ServiceAppJobCaller, ServiceAppJobChunkEvent, ServiceAppJobEvent, type ServiceAppJobEventSink, ServiceAppJobJournalService, ServiceAppJobList, ServiceAppJobProgressEvent, type ServiceAppJobScope, ServiceAppJobStatus, ServiceAppJobTerminalEvent, ServiceAppJobView, ServiceAppJobWatch, ServiceAppLifecycle, ServiceAppList, ServiceAppManager, ServiceAppManifest, ServiceAppManifestAction, ServiceAppModelCapabilitySlot, ServiceAppProtocol, ServiceAppProvides, ServiceAppRecord, ServiceAppRequirements, ServiceAppResidentEventDisposition, ServiceAppResidentEventInboxService, ServiceAppResidentEventList, type ServiceAppResidentEventScope, ServiceAppResidentEventStatus, ServiceAppResidentEventView, ServiceAppResourceRequirement, ServiceAppRuntimeService, ServiceAppRuntimeStatus, ServiceAppTerminalJobStatus, ServiceAppWitContract, SessionContextCompactionError, SessionContextCompactionErrorCode, SessionContextCompactionManager, SessionContextCompactionResult, SessionManager, SessionManagerOptions, SessionMessageCursorError, SessionMessagePage, SessionModelTokenUsage, type SessionPendingInput, type SessionQueuedInput, SessionRequestManager, SessionRequestManagerOptions, SessionSettingsError, SessionSettingsPatch, type SessionSteerQueuedInputResult, SessionTokenUsageStatus, SessionTokenUsageSummary, SessionTokenUsageTotals, SkillFrontmatter, type SkillInfo, SkillManager, type SkillScope, SubscribeEventsInput, SystemObjectReferenceError, SystemObjectReferenceErrorCode, SystemObjectReferenceManager, SystemObjectReferenceProvider, SystemObjectReferenceSnapshotSource, type TypedKey, TypedPredicate, UnavailableDesktopHost, UnsignedUpdateManifest, type Unsubscribe, UpdateBlockReason, UpdateHostKind, UpdateManifest, UpdateManifestReader, UpdateProgress, UpdateSnapshot, UpdateStatus, VerificationEvidenceRecord, VerificationRecord, VerificationRecordEntrySurface, VerificationRecordError, VerificationRecordInput, VerificationRecordList, VerificationRecordObservation, VerificationRecordRole, VerificationRecordService, VerificationRecordStatus, type WorkspaceServiceDataOwner, assertObservationJsonValue, assertObservationPredicate, buildAgentRunSendPayload, buildContextCompactionModelProjection, buildContextCompactionTimelineNcpMessage, buildLlmUsageSummary, buildLocalizedTextMap, buildNextclawNcpRunContext, buildObservationEventModelMessage, buildServiceActionId, buildSessionRequestCompletionMessage, capabilityGrantCovers, createAgentRuntimeSessionRequestDispatcher, createAgentRuntimeSessionRequestSourceNotifier, createAssetTools, createCapabilityDeclarationFingerprint, createContextCompactionMessageId, createContextWindowSignature, createCronJobSystemObjectProvider, createDesktopHostError, createInboxDeliverySystemObjectProvider, createLlmUsageRecord, createPanelAppAgentGrantRequest, createPanelAppClientGrantRequest, createServiceActionGrantRequest, createServiceAppAgentSlotGrantRequest, createServiceAppModelSlotGrantRequest, createTypedKey, describeAgentRuntimeSessionTypes, dispatchAgentRuntimeSessionRequest, dispatchChannelReplyRoute, dispatchPromptOverNcp, dispatchPromptOverNcpResult, evaluateObservationEventAdmission, evaluatePortableRuntimeAcceptance, evaluatePortableRuntimeAcceptanceArtifact, eventKeys, getAutomaticUpdateCheckDelay, getCapabilityGrantKey, getServiceActionName, getServiceAppManifestPath, getUiContentParamsBootstrapScript, getUnsignedUpdateManifest, hasLlmUsageTelemetry, ingressKeys, injectUiContentParamsBootstrap, isAppDataError, isAppPackageError, isContextCompactionProjectionMessage, isContextCompactionTimelineMessage, isContextWindowSnapshot, isInboxDeliveryError, isPanelAppAgentCapability, isPanelAppError, isPreferenceError, isProjectError, isReplyCapableChannel, isServiceAppError, isSessionContextCompactionError, isSessionMessageCursorError, isSessionSettingsError, isSystemObjectReferenceError, listExtensionChannelIds, listServiceAppManifestActions, matchesCapabilityGrantFilter, matchesObservationPredicate, mergeServiceAppRuntimeActions, normalizeAgentRuntimeSessionTypeIcon, normalizeCapabilityGrantRequest, normalizeLlmUsageModel, normalizeOptionalString, normalizePortableRuntimeEnvironment, parseObservationDuration, parsePortableRuntimeAcceptanceEvidenceArtifact, parseServiceAppManifest, parseSkillFrontmatter, presentPortableRuntimeAcceptanceDefinition, readContextCompactionCheckpoint, readContextWindowEventSessionId, readJsonPointer, readLatestContextCompactionCheckpoint, readLearningLoopRuntimeConfig, readMetadataModel, readMetadataThinking, readServiceActionTargetId, readServiceAppManifest, readServiceAppSlotTarget, resolveAgentRuntimeEntries, resolveAutomaticUpdateCheckIntervalMs, resolveChannelReplyRoute, resolveEffectiveModel, resolveLegacyEventType, resolvePortableRuntimeAcceptanceLocale, resolveSessionChannelContext, runGatewayInboundLoop, runNextclawTask, sanitizeLlmUsage, serializeContextTail, serializeUnsignedUpdateManifest, shouldRefreshContextWindowDuringStream, shouldRefreshContextWindowImmediately, startPromptOverNcpExecution, stripSkillFrontmatter, syncSessionThinkingPreference, toBoundedJson, toNcpMessages, waitForAgentRuntimeSessionReply };
 //# sourceMappingURL=index.d.ts.map