@nextclaw/kernel 0.14.0 → 0.15.0-beta.1

package/dist/index.d.ts

@@ -1,12 +1,13 @@
 import { AUTOMATIC_UPDATE_CHECK_INTERVAL_MS, getAutomaticUpdateCheckDelay, resolveAutomaticUpdateCheckIntervalMs } from "./utils/automatic-update-check.utils.js";
 import { a as getUnsignedUpdateManifest, c as UpdateBlockReason, d as UpdateStatus, i as UpdateManifestReader, l as UpdateProgress, n as UpdateHostKind, o as serializeUnsignedUpdateManifest, r as UpdateManifest, s as InstallationKind, t as UnsignedUpdateManifest, u as UpdateSnapshot } from "./update-manifest.types-CQpbURTE.js";
 import * as _$_nextclaw_core0 from "@nextclaw/core";
-import { BaseChannel, Config, ContextCompactionCheckpoint, ContextCompactionPhase, ContextCompactionPlan, ContextWindowSnapshot, CreateAgentProfileInput, CreateSessionContextInheritanceInput, CreateSessionInput, CreatedSession, CronService, DiagnosticRuntime, EffectiveAgentProfile, ExtensionChannelBinding, ExtensionDiagnostic, ExtensionRegistry, ExtensionUiMetadata, GatewayController, InboundAttachment, InboundMessage, LLMProvider, LLMResponse, LLMResponse as LLMResponse$1, LLMStreamEvent, LLMStreamEvent as LLMStreamEvent$1, LocalExecutionClaimService, McpServerDefinition, McpServerDefinition as McpServerDefinition$1, MessageBus, ModelThinkingCapability, OutboundMessage, ProviderCatalogPlugin, ProviderCatalogPlugin as ProviderCatalogPlugin$1, ProviderModelDiscoveryResult, ProviderSpec, ProviderSpec as ProviderSpec$1, RequestSessionParams, RequestedSkillsMetadataReader, SearchConfig, SessionMessage, SessionRequestDispatcher, SessionRequestRecord, SessionRequestSourceNotifier, SessionRequestToolResult, SessionSearchService, SkillInfo, SkillInfo as SkillInfo$1, SkillScope, SpawnSessionAndRequestParams, ThinkingLevel, UpdateAgentProfileInput, buildCompressingCompactionCheckpoint, resolveThinkingLevel } from "@nextclaw/core";
+import { BaseChannel, Config, ContextCompactionCheckpoint, ContextCompactionPhase, ContextCompactionPlan, ContextWindowSnapshot, CreateAgentProfileInput, CreateSessionContextInheritanceInput, CreateSessionInput, CreatedSession, CronService, DiagnosticRuntime, EffectiveAgentProfile, ExtensionChannelBinding, ExtensionDiagnostic, ExtensionRegistry, ExtensionUiMetadata, GatewayController, InboundAttachment, InboundMessage, LLMProvider, LLMResponse, LLMResponse as LLMResponse$1, LLMStreamEvent, LLMStreamEvent as LLMStreamEvent$1, LocalExecutionClaimService, McpServerDefinition, McpServerDefinition as McpServerDefinition$1, MessageBus, ModelThinkingCapability, OutboundMessage, ProviderCatalogPlugin, ProviderCatalogPlugin as ProviderCatalogPlugin$1, ProviderModelDiscoveryResult, ProviderSpec, ProviderSpec as ProviderSpec$1, RequestSessionParams, SearchConfig, SessionMessage, SessionRequestDispatcher, SessionRequestRecord, SessionRequestSourceNotifier, SessionRequestToolResult, SessionSearchService, SkillInfo, SkillInfo as SkillInfo$1, SkillScope, SpawnSessionAndRequestParams, ThinkingLevel, UpdateAgentProfileInput, buildCompressingCompactionCheckpoint, resolveThinkingLevel } from "@nextclaw/core";
 import { ListMessagesOptions, ListSessionsOptions, NcpAgentConversationStateManager, NcpAgentRuntime, NcpContextTail, NcpEndpointEvent, NcpEndpointEvent as NcpEndpointEvent$1, NcpEventType, NcpInputDelivery, NcpJsonValue, NcpLLMApi, NcpLLMApiInput, NcpLLMApiOptions, NcpMessage, NcpMessage as NcpMessage$1, NcpMessagePart, NcpResolvedInputDelivery, NcpRunHandle, NcpRunTriggerInput, NcpSessionApi, NcpSessionMessagePageInfo, NcpSessionPatch, NcpSessionSummary, NcpTool, NcpTool as NcpTool$1, OpenAIChatChunk, OpenAIChatMessage } from "@nextclaw/ncp";
 import { LocalAssetStore } from "@nextclaw/ncp-agent-runtime";
 import { AgentRunSendIngressPayload, AppEventEmitOptions, AppEventEnvelope, AppEventHandler, AppEventKey, Contribution as Contribution$1, Disposer, Disposer as Disposer$1, EventBus, EventBus as EventBus$1, EventBusOptions, InboxDelivery, InboxDeliveryContentType, InboxDeliveryListView, InboxDeliverySource, InboxDeliveryStateAction, Ingress, Ingress as Ingress$1, IngressContext, IngressEnvelope, IngressHandler, Key, RuntimeModelSelectionMode, SystemObjectReferenceGroupDescriptor, SystemObjectReferenceItem, SystemObjectReferenceListView, SystemObjectResolvedReference, TypedKey, Unsubscribe, Unsubscribe as Unsubscribe$1, createTypedKey, eventKeys, ingressKeys } from "@nextclaw/shared";
 import { AgentSessionRecord, ChatTarget, NcpReplyInput, RuntimeFactoryParams } from "@nextclaw/ncp-toolkit";
-import { AppInstallProgressHandler, AppNativeArtifactTarget, AppPermissions, AppPlatformTargetService, AppRollbackResult, AppRuntimeIsolation, AppRuntimeProfile, AppSecretBinding, AppSecretSlot, AppStorageContext, AppStorageUsage, AppUninstallResult, AppUpdateResult } from "@nextclaw/app-runtime";
+import * as _$_nextclaw_app_runtime0 from "@nextclaw/app-runtime";
+import { AppDocumentGrantMutationResult, AppDocumentGrantState, AppInstallProgressHandler, AppInstalledPermissionState, AppNativeArtifactTarget, AppPermissions, AppPlatformTargetService, AppRollbackResult, AppRuntimeIsolation, AppRuntimeProfile, AppSecretBinding, AppSecretSlot, AppStorageContext, AppStorageUsage, AppUninstallResult, AppUpdateResult } from "@nextclaw/app-runtime";
 import * as _$_nextclaw_mcp0 from "@nextclaw/mcp";
 import { McpCatalogFilter, McpCatalogFilter as McpCatalogFilter$1, McpRegistryService, McpServerRecord, McpServerRecord as McpServerRecord$1, McpToolCatalogEntry, McpToolCatalogEntry as McpToolCatalogEntry$1 } from "@nextclaw/mcp";
 
@@ -586,6 +587,7 @@ type AgentRunSession = {
   metadata: Record<string, unknown>;
   model?: string;
   projectRoot?: string;
+  projectId?: string;
   workingDir: string;
   thinkingEffort?: ThinkingEffort | null;
 };
@@ -679,7 +681,7 @@ declare class NcpAgentSessionJournalStore {
   private sessionPath;
 }
 //#endregion
-//#region src/types/project.types.d.ts
+//#region src/features/projects/types/project.types.d.ts
 declare const PROJECT_TEMPLATE_IDS: readonly ["empty", "knowledge-base"];
 type ProjectTemplateId = (typeof PROJECT_TEMPLATE_IDS)[number];
 type ProjectTemplate = {
@@ -688,6 +690,7 @@ type ProjectTemplate = {
   description: string;
 };
 type ProjectRecord = {
+  id: string;
   name: string;
   rootPath: string;
   template?: ProjectTemplateId;
@@ -699,11 +702,16 @@ type CreateProjectInput = {
   rootPath?: string;
   template?: ProjectTemplateId;
 };
+type ProjectSessionBinding = {
+  projectId: string;
+  rootPath: string;
+};
 //#endregion
-//#region src/managers/project.manager.d.ts
+//#region src/features/projects/managers/project.manager.d.ts
 type ProjectManagerOptions = {
   storePath: string;
   getDefaultWorkspacePath: () => string;
+  onProjectRegistered?: (project: ProjectRecord) => Promise<void>;
 };
 type ProjectErrorCode = "PROJECT_NAME_INVALID" | "PROJECT_PATH_INVALID_TYPE" | "PROJECT_PATH_NOT_FOUND" | "PROJECT_PATH_NOT_DIRECTORY" | "PROJECT_PATH_IS_DEFAULT_WORKSPACE" | "PROJECT_PATH_NOT_EMPTY" | "PROJECT_TEMPLATE_INVALID";
 declare class ProjectError extends Error {
@@ -716,10 +724,14 @@ declare class ProjectManager {
   private readonly store;
   constructor(options: ProjectManagerOptions);
   listProjects: () => Promise<ProjectRecord[]>;
+  migrateLegacyProjects: () => Promise<boolean>;
+  getProjectById: (projectId: string) => Promise<ProjectRecord | null>;
+  getRegisteredProject: (rootPath: unknown) => Promise<ProjectRecord | null>;
   listTemplates: () => ProjectTemplate[];
   createProject: (input: CreateProjectInput) => Promise<ProjectRecord>;
   registerExistingProject: (rootPath: unknown, name?: string) => Promise<ProjectRecord | null>;
   normalizeSessionProjectRoot: (value: unknown) => Promise<string | null>;
+  normalizeSessionProjectContext: (value: unknown) => Promise<ProjectSessionBinding | null>;
   resolveExistingProjectRoot: (value: unknown) => Promise<string | null>;
   importSessionProjects: (projectRoots: unknown[]) => Promise<void>;
   private upsertProject;
@@ -734,6 +746,340 @@ declare class ProjectManager {
   private isMissingFileError;
 }
 //#endregion
+//#region src/features/projects/types/project-work.types.d.ts
+declare const PROJECT_WORK_STATE_CATEGORIES: readonly ["backlog", "unstarted", "started", "completed", "canceled"];
+type ProjectWorkStateCategory = (typeof PROJECT_WORK_STATE_CATEGORIES)[number];
+declare const PROJECT_WORK_ATTENTION_VALUES: readonly ["none", "blocked", "awaiting-user"];
+type ProjectWorkAttention = (typeof PROJECT_WORK_ATTENTION_VALUES)[number];
+type ProjectWorkActor = {
+  kind: "agent" | "cli" | "system" | "user";
+  id?: string;
+  sessionId?: string;
+};
+type ProjectWorkState = {
+  id: string;
+  projectId: string;
+  name: string;
+  category: ProjectWorkStateCategory;
+  position: number;
+  isDefault: boolean;
+  createdAt: string;
+  updatedAt: string;
+};
+type ProjectWorkItem = {
+  id: string;
+  projectId: string;
+  title: string;
+  description: string;
+  stateId: string;
+  attention: ProjectWorkAttention;
+  version: number;
+  createdAt: string;
+  updatedAt: string;
+  deletedAt: string | null;
+};
+type ProjectWorkActivityType = "artifact-linked" | "artifact-unlinked" | "created" | "deleted" | "restored" | "state-changed" | "updated";
+type ProjectWorkActivity = {
+  id: string;
+  projectId: string;
+  workItemId: string;
+  type: ProjectWorkActivityType;
+  actor: ProjectWorkActor;
+  details: Record<string, unknown>;
+  createdAt: string;
+};
+type ProjectWorkArtifactLink = {
+  id: string;
+  projectId: string;
+  workItemId: string;
+  path: string;
+  label: string | null;
+  createdAt: string;
+};
+type ProjectWorkItemDetail = ProjectWorkItem & {
+  state: ProjectWorkState;
+  artifacts: ProjectWorkArtifactLink[];
+};
+type ProjectWorkList = {
+  items: ProjectWorkItemDetail[];
+  states: ProjectWorkState[];
+  total: number;
+};
+type ProjectWorkSummary = {
+  active: number;
+  attention: number;
+  completed: number;
+  total: number;
+  updatedAt: string | null;
+};
+type ProjectWorkActivityPage = {
+  activities: ProjectWorkActivity[];
+  nextCursor: string | null;
+};
+type CreateProjectWorkItemInput = {
+  title: string;
+  description?: string;
+  stateId?: string;
+  attention?: ProjectWorkAttention;
+};
+type UpdateProjectWorkItemInput = {
+  title?: string;
+  description?: string;
+  stateId?: string;
+  attention?: ProjectWorkAttention;
+  expectedVersion?: number;
+};
+type CreateProjectWorkStateInput = {
+  name: string;
+  category: ProjectWorkStateCategory;
+  position?: number;
+  isDefault?: boolean;
+};
+type UpdateProjectWorkStateInput = {
+  name?: string;
+  category?: ProjectWorkStateCategory;
+  position?: number;
+  isDefault?: boolean;
+};
+//#endregion
+//#region src/features/projects/managers/project-work.manager.d.ts
+declare class ProjectWorkManager {
+  private readonly options;
+  private readonly store;
+  constructor(options: {
+    databasePath: string;
+    eventBus: EventBus$1;
+    projectManager: ProjectManager;
+  });
+  initialize: () => Promise<void>;
+  dispose: () => void;
+  ensureProject: (projectId: string) => Promise<void>;
+  list: (projectId: string, includeDeleted?: boolean) => Promise<ProjectWorkList>;
+  summary: (projectId: string) => Promise<ProjectWorkSummary>;
+  get: (projectId: string, workItemId: string) => Promise<ProjectWorkItemDetail>;
+  create: (projectId: string, input: CreateProjectWorkItemInput, actor: ProjectWorkActor) => Promise<ProjectWorkItemDetail>;
+  update: (projectId: string, workItemId: string, input: UpdateProjectWorkItemInput, actor: ProjectWorkActor) => Promise<ProjectWorkItemDetail>;
+  delete: (projectId: string, workItemId: string, actor: ProjectWorkActor) => Promise<ProjectWorkItemDetail>;
+  restore: (projectId: string, workItemId: string, actor: ProjectWorkActor) => Promise<ProjectWorkItemDetail>;
+  listActivities: (projectId: string, workItemId: string, options?: {
+    cursor?: string;
+    limit?: number;
+  }) => Promise<ProjectWorkActivityPage>;
+  listStates: (projectId: string) => Promise<ProjectWorkState[]>;
+  createState: (projectId: string, input: CreateProjectWorkStateInput) => Promise<ProjectWorkState>;
+  updateState: (projectId: string, stateId: string, input: UpdateProjectWorkStateInput) => Promise<ProjectWorkState>;
+  deleteState: (projectId: string, stateId: string, migrateToStateId: string | null, actor: ProjectWorkActor) => Promise<void>;
+  linkArtifact: (params: {
+    projectId: string;
+    workItemId: string;
+    path: string;
+    label?: string;
+    actor: ProjectWorkActor;
+  }) => Promise<ProjectWorkArtifactLink>;
+  unlinkArtifact: (params: {
+    projectId: string;
+    workItemId: string;
+    artifactLinkId: string;
+    actor: ProjectWorkActor;
+  }) => Promise<void>;
+  private setDeleted;
+  private requireProject;
+  private requireMappedState;
+  private requireName;
+  private assertAttention;
+  private assertCategory;
+  private normalizeActor;
+  private normalizeArtifactPath;
+  private emit;
+}
+//#endregion
+//#region src/features/projects/types/project-observation.types.d.ts
+declare const PROJECT_OBSERVATION_PROTOCOL: "nextclaw.project/v1";
+type ProjectObservationDataQuality = "complete" | "partial" | "unavailable";
+type ProjectObservationEvidenceKind = "project-config" | "file-observation" | "ai-report" | "system-record";
+type ProjectObservationReference = {
+  kind: ProjectObservationEvidenceKind;
+  label: string;
+  observedAt: string;
+  projectRelativePath?: string;
+  sessionId?: string;
+  messageId?: string;
+};
+type ProjectObservationDiagnostic = {
+  id: string;
+  source: "config" | "files" | "sessions" | "skills";
+  level: "info" | "warning" | "error";
+  code: string;
+  message: string;
+  projectRelativePath?: string;
+  sessionId?: string;
+  messageId?: string;
+};
+type ProjectObservationSourceStatus = {
+  id: "config" | "files" | "sessions" | "skills";
+  label: string;
+  status: "available" | "empty" | "error";
+  itemCount: number;
+  observedAt: string;
+  diagnosticIds: string[];
+};
+type ObservedProjectContextReference = {
+  id: string;
+  role: string;
+  source: string;
+  accessible: boolean;
+  reference: ProjectObservationReference;
+};
+type ObservedProjectContext = {
+  name: string;
+  rootPath: string;
+  summary?: string;
+  context: ObservedProjectContextReference[];
+};
+type ObservedWorkflowStage = {
+  id: string;
+  label: string;
+};
+type ObservedWorkflow = {
+  id: string;
+  label: string;
+  stages: ObservedWorkflowStage[];
+  reference: ProjectObservationReference;
+};
+type ObservedWorkItemSchedule = {
+  start?: string;
+  end?: string;
+  milestone: boolean;
+  dependsOn: string[];
+};
+type ObservedWorkItem = {
+  id: string;
+  name: string;
+  status: "active" | "blocked" | "completed" | "cancelled";
+  workflowId?: string;
+  stageId?: string;
+  schedule?: ObservedWorkItemSchedule;
+  updatedAt: string;
+  reference: ProjectObservationReference;
+};
+type ObservedProjectRun = {
+  sessionId: string;
+  state: "running" | "completed" | "failed" | "cancelled" | "idle";
+  updatedAt: string;
+  agentId?: string;
+  model?: string;
+  label?: string;
+  statusText?: string;
+  workItemId?: string;
+  reference: ProjectObservationReference;
+};
+type ObservedArtifact = {
+  id: string;
+  path: string;
+  categoryId: string;
+  categoryLabel: string;
+  exists: boolean;
+  itemId?: string;
+  size?: number;
+  fileCreatedAt?: string;
+  fileUpdatedAt?: string;
+  references: ProjectObservationReference[];
+};
+type ObservedArtifactCategory = {
+  id: string;
+  label: string;
+};
+type ObservedSignal = {
+  id: string;
+  itemId?: string;
+  status: "open" | "resolved";
+  level: "info" | "attention" | "warning";
+  message: string;
+  updatedAt: string;
+  reference: ProjectObservationReference;
+};
+type ObservedRequest = {
+  id: string;
+  itemId?: string;
+  status: "open" | "resolved" | "expired";
+  response: "confirm-reject" | "open-session";
+  prompt: string;
+  updatedAt: string;
+  reply?: {
+    decision: "confirmed" | "rejected";
+    sentAt: string;
+    messageId: string;
+  };
+  reference: ProjectObservationReference;
+};
+type ObservedActivity = {
+  id: string;
+  kind: "work-item" | "artifact" | "schedule" | "signal" | "request";
+  message: string;
+  at: string;
+  itemId?: string;
+  reference: ProjectObservationReference;
+};
+type ObservedSkill = {
+  ref: string;
+  name: string;
+  description?: string;
+  source: "project";
+  path: string;
+  readable: boolean;
+  reference: ProjectObservationReference;
+};
+type ProjectObservationSnapshot = {
+  asOf: string;
+  project: ObservedProjectContext;
+  sources: ProjectObservationSourceStatus[];
+  workflows: ObservedWorkflow[];
+  runs: ObservedProjectRun[];
+  workItems: ObservedWorkItem[];
+  artifactCategories: ObservedArtifactCategory[];
+  artifacts: ObservedArtifact[];
+  signals: ObservedSignal[];
+  requests: ObservedRequest[];
+  activity: ObservedActivity[];
+  skills: ObservedSkill[];
+  diagnostics: ProjectObservationDiagnostic[];
+  dataQuality: ProjectObservationDataQuality;
+};
+declare class ProjectObservationError extends Error {
+  readonly code: "PROJECT_NOT_REGISTERED" | "PROJECT_OBSERVATION_INVALID_ROOT";
+  constructor(code: "PROJECT_NOT_REGISTERED" | "PROJECT_OBSERVATION_INVALID_ROOT", message: string);
+}
+declare function isProjectObservationError(error: unknown): error is ProjectObservationError;
+//#endregion
+//#region src/features/projects/services/project-observation.service.d.ts
+type ProjectObservationServiceOptions = {
+  projectManager: Pick<ProjectManager, "getRegisteredProject">;
+  sessionManager: Pick<SessionManager, "listSessions" | "listSessionMessages">;
+  workspacePath: string;
+  now?: () => Date;
+};
+declare class ProjectObservationService {
+  private readonly options;
+  private readonly now;
+  constructor(options: ProjectObservationServiceOptions);
+  observe: (rootPath: string) => Promise<ProjectObservationSnapshot>;
+  private readConfig;
+  private observeContext;
+  private observeArtifacts;
+  private observeSessions;
+  private addMarkerConflictDiagnostics;
+  private observeSkills;
+  private createSourceStatus;
+}
+//#endregion
+//#region src/features/projects/types/project-work-error.types.d.ts
+type ProjectWorkErrorCode = "PROJECT_NOT_FOUND" | "PROJECT_WORK_ARTIFACT_INVALID" | "PROJECT_WORK_ARTIFACT_NOT_FOUND" | "PROJECT_WORK_ITEM_NOT_FOUND" | "PROJECT_WORK_STATE_IN_USE" | "PROJECT_WORK_STATE_INVALID" | "PROJECT_WORK_STATE_NOT_FOUND" | "PROJECT_WORK_VALIDATION_FAILED" | "PROJECT_WORK_VERSION_CONFLICT";
+declare class ProjectWorkError extends Error {
+  readonly code: ProjectWorkErrorCode;
+  constructor(code: ProjectWorkErrorCode, message: string);
+}
+declare function isProjectWorkError(error: unknown): error is ProjectWorkError;
+//#endregion
 //#region src/services/session-event-coordinator.service.d.ts
 type PublishSessionEventParams = {
   sessionId: string;
@@ -1530,6 +1876,7 @@ type AppPackageView = {
   readiness: AppPackageReadiness;
   secrets: AppPackageSecretReadiness;
   dependencies: AppPackageDependencyView;
+  documentAccess: AppDocumentGrantState[];
 };
 type AppPackageHostTarget = {
   key: string;
@@ -1597,9 +1944,11 @@ type AppPackageRuntimeHooks = {
   assertCanActivate: (sources: AppPackageComponentSource[]) => Promise<void>;
   afterActivate: (sources: AppPackageComponentSource[]) => Promise<void>;
   beforeDeactivate: (sources: AppPackageComponentSource[]) => Promise<void>;
+  prepareCapabilityChange: (sources: AppPackageComponentSource[]) => Promise<AppPackageUninstallRollback>;
+  afterCapabilityChange: (sources: AppPackageComponentSource[]) => Promise<void>;
   beforeUninstall: (sources: AppPackageComponentSource[]) => Promise<AppPackageUninstallRollback | void>;
 };
-type AppPackageErrorCode = "APP_PACKAGE_CONFLICT" | "APP_PACKAGE_INCOMPATIBLE" | "APP_PACKAGE_NOT_READY" | "APP_PACKAGE_NOT_FOUND" | "APP_PACKAGE_DEPENDENCY_MISSING" | "APP_PACKAGE_DEPENDENCY_INCOMPATIBLE" | "APP_PACKAGE_DEPENDENCY_CYCLE" | "APP_PACKAGE_OPERATION_FAILED" | "SECRET_SLOT_NOT_DECLARED" | "SECRET_BINDING_MISSING" | "SECRET_RESOLUTION_FAILED";
+type AppPackageErrorCode = "APP_PACKAGE_CONFLICT" | "APP_PACKAGE_INCOMPATIBLE" | "APP_PACKAGE_NOT_READY" | "APP_PACKAGE_NOT_FOUND" | "APP_PACKAGE_DEPENDENCY_MISSING" | "APP_PACKAGE_DEPENDENCY_INCOMPATIBLE" | "APP_PACKAGE_DEPENDENCY_CYCLE" | "APP_PACKAGE_OPERATION_FAILED" | "SECRET_SLOT_NOT_DECLARED" | "SECRET_BINDING_MISSING" | "SECRET_RESOLUTION_FAILED" | "DOCUMENT_SCOPE_NOT_DECLARED" | "DOCUMENT_SCOPE_NOT_GRANTED" | "DOCUMENT_SCOPE_MODE_INSUFFICIENT" | "DOCUMENT_SCOPE_UNAVAILABLE" | "DOCUMENT_SCOPE_MUTATION_FAILED";
 declare class AppPackageError extends Error {
   readonly code: AppPackageErrorCode;
   constructor(code: AppPackageErrorCode, message: string);
@@ -1618,6 +1967,8 @@ declare class AppPackageManager {
   private readonly dependencyCoordinator;
   private readonly runtimeActivationService;
   private readonly registryService;
+  private readonly grantService;
+  private readonly documentAccessService;
   private readonly readinessManager;
   private runtimeHooks;
   private builtInBootstrapPromise;
@@ -1651,6 +2002,14 @@ declare class AppPackageManager {
     binding: AppSecretBinding;
   }) => Promise<AppPackageSecretReadiness>;
   unbindSecret: (appId: string, slotId: string) => Promise<AppPackageSecretReadiness>;
+  inspectDocumentAccess: (appId: string) => Promise<_$_nextclaw_app_runtime0.AppInstalledPermissionState>;
+  assertDocumentAccess: (appId: string, scopeId: string, requestedMode: "read" | "read-write") => Promise<void>;
+  grantDocumentAccess: (appId: string, input: {
+    scopeId: string;
+    directoryPath: string;
+    mode: "read" | "read-write";
+  }) => Promise<_$_nextclaw_app_runtime0.AppDocumentGrantMutationResult>;
+  revokeDocumentAccess: (appId: string, scopeId: string) => Promise<_$_nextclaw_app_runtime0.AppDocumentGrantMutationResult>;
   listActiveComponentSources: () => Promise<AppPackageComponentSource[]>;
   listActiveComponentSourcesWithDiagnostics: () => Promise<AppPackageComponentSourceList>;
   listOperations: () => Promise<AppPackageOperationList>;
@@ -3537,6 +3896,13 @@ declare class ServiceAppJobJournalService {
 }
 //#endregion
 //#region src/types/portable-service-app-runtime.types.d.ts
+type PortableRuntimeState = {
+  status: ServiceAppRuntimeStatus;
+  lastError?: string;
+  lastStartedAt?: string;
+  lastReadyAt?: string;
+  lastFailedAt?: string;
+};
 type PortableServiceAppHostCall = {
   app: ServiceAppRecord;
   manifest: ServiceAppManifest;
@@ -3700,13 +4066,7 @@ declare class ServiceAppRuntimeService {
     portableServiceRunnerPath?: string;
     residentInbox?: ServiceAppResidentEventInboxService;
   });
-  getStatus: (appId: string) => {
-    status: ServiceAppRuntimeStatus;
-    lastError?: string;
-    lastStartedAt?: string;
-    lastReadyAt?: string;
-    lastFailedAt?: string;
-  };
+  getStatus: (appId: string) => PortableRuntimeState;
   getLastObservation: () => PortableRunnerObservation | undefined;
   /** One kernel-owned callback path for Guest host calls; MCP never receives it. */
   setPortableHostCallHandler: (handler: PortableServiceAppHostCallHandler | undefined) => void;
@@ -3905,7 +4265,7 @@ type ServiceAppRemovalDiagnostic = {
 };
 //#endregion
 //#region src/utils/service-app-error.utils.d.ts
-type ServiceAppErrorCode = "AUTHORIZATION_REQUIRED" | "SERVICE_APP_ACTION_NOT_DECLARED" | "SERVICE_APP_ACTION_NOT_FOUND" | "SERVICE_APP_INVALID_ACTION" | "SERVICE_APP_INVALID_CALLER" | "SERVICE_APP_INVALID_MANIFEST" | "SERVICE_APP_MANAGED_SOURCE" | "SERVICE_APP_JOB_CONFLICT" | "SERVICE_APP_JOB_CURSOR_INVALID" | "SERVICE_APP_JOB_EVENT_LIMIT" | "SERVICE_APP_JOB_NOT_FOUND" | "SERVICE_APP_JOB_TERMINAL" | "SERVICE_APP_RESIDENT_EVENT_NOT_FOUND" | "SERVICE_APP_RESIDENT_EVENT_CONFLICT" | "SERVICE_APP_RESIDENT_EVENT_LEASE_INVALID" | "SERVICE_APP_RESIDENT_INBOX_FROZEN" | "SERVICE_APP_NOT_FOUND" | "SERVICE_APP_READ_FAILED" | "SERVICE_APP_RUNTIME_FAILED" | "STREAM_BACKPRESSURE_TIMEOUT" | "STREAM_CURSOR_EXPIRED" | "WASI_ABI_VERSION_MISMATCH" | "WASI_CAPABILITY_DENIED" | "WASI_COMPONENT_FAILED" | "WASI_COMPONENT_TRAP" | "WASI_GUEST_EXPORT_MISSING" | "WASI_INPUT_SCHEMA_MISMATCH";
+type ServiceAppErrorCode = "AUTHORIZATION_REQUIRED" | "DOCUMENT_SCOPE_NOT_GRANTED" | "DOCUMENT_SCOPE_MODE_INSUFFICIENT" | "DOCUMENT_SCOPE_UNAVAILABLE" | "SERVICE_APP_ACTION_NOT_DECLARED" | "SERVICE_APP_ACTION_NOT_FOUND" | "SERVICE_APP_INVALID_ACTION" | "SERVICE_APP_INVALID_CALLER" | "SERVICE_APP_INVALID_MANIFEST" | "SERVICE_APP_MANAGED_SOURCE" | "SERVICE_APP_JOB_CONFLICT" | "SERVICE_APP_JOB_CURSOR_INVALID" | "SERVICE_APP_JOB_EVENT_LIMIT" | "SERVICE_APP_JOB_NOT_FOUND" | "SERVICE_APP_JOB_TERMINAL" | "SERVICE_APP_RESIDENT_EVENT_NOT_FOUND" | "SERVICE_APP_RESIDENT_EVENT_CONFLICT" | "SERVICE_APP_RESIDENT_EVENT_LEASE_INVALID" | "SERVICE_APP_RESIDENT_INBOX_FROZEN" | "SERVICE_APP_NOT_FOUND" | "SERVICE_APP_READ_FAILED" | "SERVICE_APP_RUNTIME_FAILED" | "STREAM_BACKPRESSURE_TIMEOUT" | "STREAM_CURSOR_EXPIRED" | "WASI_ABI_VERSION_MISMATCH" | "WASI_CAPABILITY_DENIED" | "WASI_COMPONENT_FAILED" | "WASI_COMPONENT_TRAP" | "WASI_GUEST_EXPORT_MISSING" | "WASI_INPUT_SCHEMA_MISMATCH";
 declare class ServiceAppError extends Error {
   readonly code: ServiceAppErrorCode;
   readonly details?: Record<string, unknown> | undefined;
@@ -3946,6 +4306,7 @@ declare class ServiceAppManager {
     configManager: ConfigManager;
     runtimeService?: ServiceAppRuntime;
     listPackageComponentSources?: () => Promise<AppPackageComponentSource[]>;
+    assertDocumentAccess?: (appId: string, scopeId: string, mode: "read" | "read-write") => Promise<void>;
     capabilityGrantManager: CapabilityGrantManager;
     hasAgent?: (agentId: string) => boolean;
     providerManager?: LlmProviderRuntime;
@@ -3979,6 +4340,7 @@ declare class ServiceAppManager {
    * This is deliberately separate from source-tree `nextclaw app call`.
    */
   invokeInstalledServiceAction: (appId: string, actionName: string, input?: Record<string, unknown>) => Promise<ServiceActionInvokeResult>;
+  private assertDocumentInputAccess;
   listVerificationRecords: (filters?: {
     acceptanceId?: string;
     appId?: string;
@@ -4337,6 +4699,8 @@ declare class NextclawKernel {
   readonly panelAppManager: PanelAppManager;
   readonly preferenceManager: PreferenceManager;
   readonly projectManager: ProjectManager;
+  readonly projectObservation: ProjectObservationService;
+  readonly projectWorkManager: ProjectWorkManager;
   readonly serviceAppManager: ServiceAppManager;
   readonly extensions: ExtensionManager;
   readonly agentRuntimeManager: AgentRuntimeManager;
@@ -5023,7 +5387,6 @@ type NextclawNcpResolvedRunContext = {
   effectiveWorkspace: string;
   profile: NextclawNcpResolvedAgentProfile;
   requestMetadata: Record<string, unknown>;
-  requestedSkills: ReturnType<RequestedSkillsMetadataReader["readSelection"]>;
   requestedToolNames: string[];
   runtimeThinking: ReturnType<typeof resolveThinkingLevel>;
   sessionKey: string;
@@ -5065,5 +5428,5 @@ declare function resolveLegacyEventType(message: SessionMessage): string;
 declare function getUiContentParamsBootstrapScript(): string;
 declare function injectUiContentParamsBootstrap(html: string): string;
 //#endregion
-export { AUTOMATIC_UPDATE_CHECK_INTERVAL_MS, AccessLoginResult, AccessManager, AccessManagerOptions, AccessPasswordStatus, AccessPrincipal, AccessRole, AccessSessionRecord, AccessSessionState, AgentManager, AgentManagerOptions, AgentRunClient, type AgentRunReply, type AgentRunReplyOptions, AgentRunSession, type AgentRunStreamOptions, type AgentRuntimeEntry, type AgentRuntimeProviderRegistration, AgentRuntimeSessionRequestDispatcherOptions, type AgentRuntimeSessionTypeCatalog, type AgentRuntimeSessionTypeDescribeParams, AgentRuntimeSessionTypeIcon, type AgentRuntimeSessionTypeOption, AgentRuntimeSessionTypeProvider, AgentServiceActionCaller, AppDataDeleteResult, AppDataDiagnostic, AppDataEntry, AppDataError, AppDataErrorCode, AppDataLifecycle, AppDataList, AppDataManager, AppDataSource, type AppEventEmitOptions, type AppEventEnvelope, type AppEventHandler, type AppEventKey, AppPackageComponentKind, AppPackageComponentSource, AppPackageComponentSourceList, AppPackageComponentView, AppPackageConflict, AppPackageDependencyBinding, AppPackageDependencyBindingInput, AppPackageDependencyCandidate, AppPackageDependencyCycle, AppPackageDependencyDiagnostic, AppPackageDependencyDiagnosticCode, AppPackageDependencyView, AppPackageError, AppPackageErrorCode, AppPackageHostTarget, AppPackageList, AppPackageManager, AppPackageOperationAction, AppPackageOperationInput, AppPackageOperationList, AppPackageOperationResult, AppPackageOperationStatus, AppPackageOperationView, AppPackageReadiness, AppPackageReadinessRequirement, AppPackageReadinessStatus, AppPackageRuntimeHooks, AppPackageSecretReadiness, AppPackageSecretSlotView, AppPackageSecretStatus, AppPackageUnavailableDiagnostic, AppPackageUninstallRollback, AppPackageView, type AssetApi, AutomationManager, AutomationManagerOptions, BindContextInput, type BuildAgentRunSendPayloadParams, BuildContextTailInput, BuiltinNarpRuntimeProviderService, CONTEXT_COMPACTION_CONTINUATION_TEXT, CONTEXT_COMPACTION_PROJECTION_KIND, CONTEXT_COMPACTION_PROJECTION_METADATA_KEY, CONTEXT_COMPACTION_SYSTEM_PREAMBLE, CONTEXT_COMPACTION_TIMELINE_KIND, CapabilityGrant, CapabilityGrantDecision, CapabilityGrantFilter, CapabilityGrantLegacyMigrationService, CapabilityGrantListener, CapabilityGrantManager, CapabilityGrantRequest, CapabilityGrantResource, CapabilityGrantRevocationListener, CapabilityGrantStore, CapabilityGrantSubject, CapabilityProviderView, ChannelManager, ChannelReplyRouterDispatchParams, CommandRegistry, ConfigManager, ConfigManagerOptions, ConfigManagerRuntimeHooks, ConfigMutationResult, ContextBinding, type ContextBlock, ContextCompactionJournalRecoveryService, ContextCompactionModelProjection, ContextCompactionPreflightBeginResult, ContextCompactionPreflightResult, ContextCompactionPreflightService, ContextCompactionTimelineCheckpoint, ContextCompactionTrigger, type ContextProvider, type ContextProviderRequest, Contribution, CreateAgentRunSessionParams, CreateInboxDeliveryInput, CreateProjectInput, DEFAULT_AGENT_RUNTIME_ENTRY_ID, DEFAULT_SERVICE_ACTION_RISK, DESKTOP_HOST_ACCESS, DESKTOP_HOST_PROTOCOL_VERSION, DesktopApplicationTarget, DesktopCapabilityError, DesktopCapabilityErrorCode, DesktopHost, DesktopHostAccess, DesktopHostCaller, DesktopHostCapabilityDeclaration, DesktopHostCapabilityManager, DesktopHostEvent, DesktopHostEventListener, DesktopHostManifest, DesktopHostMethod, DesktopHostRequest, DesktopHostResponse, DesktopHostStatus, DesktopNodeReplService, DesktopSessionCaller, DesktopSessionStateService, DesktopSnapshotOptions, DirectPromptDispatchExecution, DirectPromptDispatchParams, DirectPromptDispatchResult, type Disposer, EventAdmissionPolicy, EventBus, type EventBusOptions, EventDelivery, EventSubscription, EventSubscriptionBudget, ExtensionLoadProgress, ExtensionLoadResult, ExtensionManager, type ExtensionRuntimeStatus, FeatureControlsService, GatewayInboundLoopRuntime, GatewayInboundProcessor, type IContextRegistry, type IKernel, type IMcpRegistry, type IModelRegistry, type INextclawAgent, type INextclawAgentRegistry, type INextclawAgentSessions, type INextclawContributionRegistry, type INextclawHarness, type INextclawRun, type INextclawSession, type INextclawSessionRegistry, type IRuntimeRegistry, type IToolRegistry, InboxDeliveryError, InboxDeliveryErrorCode, InboxDeliveryManager, InboxDeliveryManagerOptions, Ingress, type IngressContext, type IngressEnvelope, type IngressHandler, InstallationKind, InstalledSkillDetail, InstalledSkillSummary, InstalledSkillsList, JsonPointer, JsonValue, type Key, type LLMResponse, type LLMStreamEvent, type LearningLoopRuntimeConfig, type LeasedResidentEvent, LegacyVerificationRecord, LlmProviderManager, LlmProviderRuntime, LlmUsageManager, LlmUsageManagerOptions, LlmUsageRecord, LlmUsageSnapshot, LlmUsageStats, LlmUsageStore, LlmUsageStoreOptions, LlmUsageSummary, LocalizedTextMap, MAX_INBOX_DELIVERY_CONTENT_LENGTH, type McpCatalogFilter, McpManager, type McpServerDefinition, type McpServerRecord, McpServiceAppRuntimeService, type McpToolCallInput, type McpToolCatalogEntry, type ModelChatInput, NARP_HTTP_RUNTIME_KIND, NARP_STDIO_RUNTIME_KIND, NEXTCLAW_TIMELINE_KIND_METADATA_KEY, NcpAgentSessionJournalStore, type NcpEndpointEvent, type NcpMessage, type NcpTool, type NextclawAgentDefinition, type NextclawContributionDescriptor, NextclawHarness, NextclawHarnessError, type NextclawHarnessErrorCode, type NextclawHarnessOptions, NextclawKernel, NextclawKernelOptions, NextclawNcpResolvedAgentProfile, NextclawNcpResolvedRunContext, NextclawNcpRunContextResolveParams, type NextclawRunStatus, type NextclawSessionCreateInput, type NextclawSessionRunInput, type NextclawTaskInput, type NextclawTaskResult, ObservationCapabilityDescriptor, ObservationContextTail, ObservationEvent, ObservationEventAdmissionDecision, ObservationExtensionRuntime, ObservationManager, ObservationManagerOptions, ObservationRef, ObservationRelationshipStatus, ObservationState, ObservationTarget, PANEL_APP_AGENT_CAPABILITIES, PORTABLE_RUNTIME_ACCEPTANCE_CONTRACT, PORTABLE_RUNTIME_ACCEPTANCE_CONTRACT_FINGERPRINT, PORTABLE_RUNTIME_ACCEPTANCE_LOCALES, PORTABLE_RUNTIME_ACCEPTANCE_PLATFORMS, PORTABLE_RUNTIME_ACCEPTANCE_PRESENTATION, PORTABLE_RUNTIME_ACCEPTANCE_REFERENCE_APP_ID, PROJECT_TEMPLATE_IDS, PROVIDER_MODEL_CATALOG_REFRESH_INTERVAL_MS, PanelAppAgentCapability, PanelAppAgentGenerateObjectInput, PanelAppAgentGenerateObjectRequest, PanelAppAgentGenerateObjectResult, PanelAppAgentRunClient, PanelAppAgentSendPayload, PanelAppAgentSendRequest, PanelAppAgentSendResult, PanelAppAssetTokenService, PanelAppBridgeSession, PanelAppCapabilityGrant, PanelAppCapabilityGrantCaller, PanelAppClientGrant, PanelAppContent, PanelAppDeleteResult, PanelAppEntry, PanelAppError, PanelAppErrorCode, PanelAppList, PanelAppManager, type PanelAppPreferencesUpdate, PanelServiceActionCaller, type PortableRunnerObservation, type PortableRuntimeAcceptanceContractView, PortableRuntimeAcceptanceDefinition, type PortableRuntimeAcceptanceDefinitionView, type PortableRuntimeAcceptanceEvaluationContext, type PortableRuntimeAcceptanceEvidence, type PortableRuntimeAcceptanceEvidenceArtifact, PortableRuntimeAcceptanceEvidenceSource, PortableRuntimeAcceptanceId, type PortableRuntimeAcceptanceIdentity, type PortableRuntimeAcceptanceIdentityResult, PortableRuntimeAcceptanceIdentityService, type PortableRuntimeAcceptanceLocale, PortableRuntimeAcceptanceManager, PortableRuntimeAcceptancePlatform, type PortableRuntimeAcceptancePresentation, type PortableRuntimeAcceptanceResult, type PortableRuntimeAcceptanceResultStatus, type PortableRuntimeAcceptanceStatusEntry, type PortableRuntimeAcceptanceStatusView, type PortableRuntimeAcceptanceSurfaceResult, type PortableRuntimeAcceptanceUnavailableIdentity, PreferenceEntry, PreferenceError, PreferenceErrorCode, PreferenceJsonValue, PreferenceManager, PreferenceManagerOptions, ProductActivityKind, ProductActivitySignal, ProductActivitySink, ProductActivitySource, type ProductFeatureControls, ProjectError, ProjectErrorCode, ProjectManager, ProjectManagerOptions, ProjectRecord, ProjectTemplate, ProjectTemplateId, type ProviderCatalogPlugin, ProviderManagerNcpLLMApi, ProviderModelCatalogEntry, ProviderModelCatalogManager, ProviderModelCatalogSnapshot, ProviderModelsDiscoverInput, type ProviderSpec, type ResidentEventInput, ResolvedAgentProfile, ResolvedDesktopApplicationTarget, SERVICE_APP_MANIFEST_FILE_NAME, ServiceAction, ServiceActionCaller, ServiceActionGrant, ServiceActionGrantRequest, ServiceActionGrantState, ServiceActionInvocationFacts, ServiceActionInvokeRequest, ServiceActionInvokeResult, ServiceActionRisk, ServiceActionRuntimeState, ServiceAppAgentCapabilitySlot, ServiceAppAiCapabilityService, ServiceAppCapabilityProvision, ServiceAppCapabilityRequirement, ServiceAppDeleteResult, ServiceAppError, type ServiceAppErrorCode, ServiceAppExternalRemediation, ServiceAppJobCaller, ServiceAppJobChunkEvent, ServiceAppJobEvent, type ServiceAppJobEventSink, ServiceAppJobJournalService, ServiceAppJobList, ServiceAppJobProgressEvent, type ServiceAppJobScope, ServiceAppJobStatus, ServiceAppJobTerminalEvent, ServiceAppJobView, ServiceAppJobWatch, ServiceAppLifecycle, ServiceAppList, ServiceAppManager, ServiceAppManifest, ServiceAppManifestAction, ServiceAppModelCapabilitySlot, ServiceAppProtocol, ServiceAppProvides, ServiceAppRecord, ServiceAppRequirements, ServiceAppResidentEventDisposition, ServiceAppResidentEventInboxService, ServiceAppResidentEventList, type ServiceAppResidentEventScope, ServiceAppResidentEventStatus, ServiceAppResidentEventView, ServiceAppResourceRequirement, ServiceAppRuntimeService, ServiceAppRuntimeStatus, ServiceAppTerminalJobStatus, ServiceAppWitContract, SessionContextCompactionError, SessionContextCompactionErrorCode, SessionContextCompactionManager, SessionContextCompactionResult, SessionManager, SessionManagerOptions, SessionMessageCursorError, SessionMessagePage, SessionModelTokenUsage, type SessionPendingInput, type SessionQueuedInput, SessionRequestManager, SessionRequestManagerOptions, SessionSettingsError, SessionSettingsPatch, type SessionSteerQueuedInputResult, SessionTokenUsageStatus, SessionTokenUsageSummary, SessionTokenUsageTotals, SkillFrontmatter, type SkillInfo, SkillManager, type SkillScope, SubscribeEventsInput, SystemObjectReferenceError, SystemObjectReferenceErrorCode, SystemObjectReferenceManager, SystemObjectReferenceProvider, SystemObjectReferenceSnapshotSource, type TypedKey, TypedPredicate, UnavailableDesktopHost, UnsignedUpdateManifest, type Unsubscribe, UpdateBlockReason, UpdateHostKind, UpdateManifest, UpdateManifestReader, UpdateProgress, UpdateSnapshot, UpdateStatus, VerificationEvidenceRecord, VerificationRecord, VerificationRecordEntrySurface, VerificationRecordError, VerificationRecordInput, VerificationRecordList, VerificationRecordObservation, VerificationRecordRole, VerificationRecordService, VerificationRecordStatus, type WorkspaceServiceDataOwner, assertObservationJsonValue, assertObservationPredicate, buildAgentRunSendPayload, buildContextCompactionModelProjection, buildContextCompactionTimelineNcpMessage, buildLlmUsageSummary, buildLocalizedTextMap, buildNextclawNcpRunContext, buildObservationEventModelMessage, buildServiceActionId, buildSessionRequestCompletionMessage, capabilityGrantCovers, createAgentRuntimeSessionRequestDispatcher, createAgentRuntimeSessionRequestSourceNotifier, createAssetTools, createCapabilityDeclarationFingerprint, createContextCompactionMessageId, createContextWindowSignature, createCronJobSystemObjectProvider, createDesktopHostError, createInboxDeliverySystemObjectProvider, createLlmUsageRecord, createPanelAppAgentGrantRequest, createPanelAppClientGrantRequest, createServiceActionGrantRequest, createServiceAppAgentSlotGrantRequest, createServiceAppModelSlotGrantRequest, createTypedKey, describeAgentRuntimeSessionTypes, dispatchAgentRuntimeSessionRequest, dispatchChannelReplyRoute, dispatchPromptOverNcp, dispatchPromptOverNcpResult, evaluateObservationEventAdmission, evaluatePortableRuntimeAcceptance, evaluatePortableRuntimeAcceptanceArtifact, eventKeys, getAutomaticUpdateCheckDelay, getCapabilityGrantKey, getServiceActionName, getServiceAppManifestPath, getUiContentParamsBootstrapScript, getUnsignedUpdateManifest, hasLlmUsageTelemetry, ingressKeys, injectUiContentParamsBootstrap, isAppDataError, isAppPackageError, isContextCompactionProjectionMessage, isContextCompactionTimelineMessage, isContextWindowSnapshot, isInboxDeliveryError, isPanelAppAgentCapability, isPanelAppError, isPreferenceError, isProjectError, isReplyCapableChannel, isServiceAppError, isSessionContextCompactionError, isSessionMessageCursorError, isSessionSettingsError, isSystemObjectReferenceError, listExtensionChannelIds, listServiceAppManifestActions, matchesCapabilityGrantFilter, matchesObservationPredicate, mergeServiceAppRuntimeActions, normalizeAgentRuntimeSessionTypeIcon, normalizeCapabilityGrantRequest, normalizeLlmUsageModel, normalizeOptionalString, normalizePortableRuntimeEnvironment, parseObservationDuration, parsePortableRuntimeAcceptanceEvidenceArtifact, parseServiceAppManifest, parseSkillFrontmatter, presentPortableRuntimeAcceptanceDefinition, readContextCompactionCheckpoint, readContextWindowEventSessionId, readJsonPointer, readLatestContextCompactionCheckpoint, readLearningLoopRuntimeConfig, readMetadataModel, readMetadataThinking, readServiceActionTargetId, readServiceAppManifest, readServiceAppSlotTarget, resolveAgentRuntimeEntries, resolveAutomaticUpdateCheckIntervalMs, resolveChannelReplyRoute, resolveEffectiveModel, resolveLegacyEventType, resolvePortableRuntimeAcceptanceLocale, resolveSessionChannelContext, runGatewayInboundLoop, runNextclawTask, sanitizeLlmUsage, serializeContextTail, serializeUnsignedUpdateManifest, shouldRefreshContextWindowDuringStream, shouldRefreshContextWindowImmediately, startPromptOverNcpExecution, stripSkillFrontmatter, syncSessionThinkingPreference, toBoundedJson, toNcpMessages, waitForAgentRuntimeSessionReply };
+export { AUTOMATIC_UPDATE_CHECK_INTERVAL_MS, AccessLoginResult, AccessManager, AccessManagerOptions, AccessPasswordStatus, AccessPrincipal, AccessRole, AccessSessionRecord, AccessSessionState, AgentManager, AgentManagerOptions, AgentRunClient, type AgentRunReply, type AgentRunReplyOptions, AgentRunSession, type AgentRunStreamOptions, type AgentRuntimeEntry, type AgentRuntimeProviderRegistration, AgentRuntimeSessionRequestDispatcherOptions, type AgentRuntimeSessionTypeCatalog, type AgentRuntimeSessionTypeDescribeParams, AgentRuntimeSessionTypeIcon, type AgentRuntimeSessionTypeOption, AgentRuntimeSessionTypeProvider, AgentServiceActionCaller, AppDataDeleteResult, AppDataDiagnostic, AppDataEntry, AppDataError, AppDataErrorCode, AppDataLifecycle, AppDataList, AppDataManager, AppDataSource, type AppDocumentGrantMutationResult, type AppEventEmitOptions, type AppEventEnvelope, type AppEventHandler, type AppEventKey, type AppInstalledPermissionState, AppPackageComponentKind, AppPackageComponentSource, AppPackageComponentSourceList, AppPackageComponentView, AppPackageConflict, AppPackageDependencyBinding, AppPackageDependencyBindingInput, AppPackageDependencyCandidate, AppPackageDependencyCycle, AppPackageDependencyDiagnostic, AppPackageDependencyDiagnosticCode, AppPackageDependencyView, AppPackageError, AppPackageErrorCode, AppPackageHostTarget, AppPackageList, AppPackageManager, AppPackageOperationAction, AppPackageOperationInput, AppPackageOperationList, AppPackageOperationResult, AppPackageOperationStatus, AppPackageOperationView, AppPackageReadiness, AppPackageReadinessRequirement, AppPackageReadinessStatus, AppPackageRuntimeHooks, AppPackageSecretReadiness, AppPackageSecretSlotView, AppPackageSecretStatus, AppPackageUnavailableDiagnostic, AppPackageUninstallRollback, AppPackageView, type AssetApi, AutomationManager, AutomationManagerOptions, BindContextInput, type BuildAgentRunSendPayloadParams, BuildContextTailInput, BuiltinNarpRuntimeProviderService, CONTEXT_COMPACTION_CONTINUATION_TEXT, CONTEXT_COMPACTION_PROJECTION_KIND, CONTEXT_COMPACTION_PROJECTION_METADATA_KEY, CONTEXT_COMPACTION_SYSTEM_PREAMBLE, CONTEXT_COMPACTION_TIMELINE_KIND, CapabilityGrant, CapabilityGrantDecision, CapabilityGrantFilter, CapabilityGrantLegacyMigrationService, CapabilityGrantListener, CapabilityGrantManager, CapabilityGrantRequest, CapabilityGrantResource, CapabilityGrantRevocationListener, CapabilityGrantStore, CapabilityGrantSubject, CapabilityProviderView, ChannelManager, ChannelReplyRouterDispatchParams, CommandRegistry, ConfigManager, ConfigManagerOptions, ConfigManagerRuntimeHooks, ConfigMutationResult, ContextBinding, type ContextBlock, ContextCompactionJournalRecoveryService, ContextCompactionModelProjection, ContextCompactionPreflightBeginResult, ContextCompactionPreflightResult, ContextCompactionPreflightService, ContextCompactionTimelineCheckpoint, ContextCompactionTrigger, type ContextProvider, type ContextProviderRequest, Contribution, CreateAgentRunSessionParams, CreateInboxDeliveryInput, CreateProjectInput, CreateProjectWorkItemInput, CreateProjectWorkStateInput, DEFAULT_AGENT_RUNTIME_ENTRY_ID, DEFAULT_SERVICE_ACTION_RISK, DESKTOP_HOST_ACCESS, DESKTOP_HOST_PROTOCOL_VERSION, DesktopApplicationTarget, DesktopCapabilityError, DesktopCapabilityErrorCode, DesktopHost, DesktopHostAccess, DesktopHostCaller, DesktopHostCapabilityDeclaration, DesktopHostCapabilityManager, DesktopHostEvent, DesktopHostEventListener, DesktopHostManifest, DesktopHostMethod, DesktopHostRequest, DesktopHostResponse, DesktopHostStatus, DesktopNodeReplService, DesktopSessionCaller, DesktopSessionStateService, DesktopSnapshotOptions, DirectPromptDispatchExecution, DirectPromptDispatchParams, DirectPromptDispatchResult, type Disposer, EventAdmissionPolicy, EventBus, type EventBusOptions, EventDelivery, EventSubscription, EventSubscriptionBudget, ExtensionLoadProgress, ExtensionLoadResult, ExtensionManager, type ExtensionRuntimeStatus, FeatureControlsService, GatewayInboundLoopRuntime, GatewayInboundProcessor, type IContextRegistry, type IKernel, type IMcpRegistry, type IModelRegistry, type INextclawAgent, type INextclawAgentRegistry, type INextclawAgentSessions, type INextclawContributionRegistry, type INextclawHarness, type INextclawRun, type INextclawSession, type INextclawSessionRegistry, type IRuntimeRegistry, type IToolRegistry, InboxDeliveryError, InboxDeliveryErrorCode, InboxDeliveryManager, InboxDeliveryManagerOptions, Ingress, type IngressContext, type IngressEnvelope, type IngressHandler, InstallationKind, InstalledSkillDetail, InstalledSkillSummary, InstalledSkillsList, JsonPointer, JsonValue, type Key, type LLMResponse, type LLMStreamEvent, type LearningLoopRuntimeConfig, type LeasedResidentEvent, LegacyVerificationRecord, LlmProviderManager, LlmProviderRuntime, LlmUsageManager, LlmUsageManagerOptions, LlmUsageRecord, LlmUsageSnapshot, LlmUsageStats, LlmUsageStore, LlmUsageStoreOptions, LlmUsageSummary, LocalizedTextMap, MAX_INBOX_DELIVERY_CONTENT_LENGTH, type McpCatalogFilter, McpManager, type McpServerDefinition, type McpServerRecord, McpServiceAppRuntimeService, type McpToolCallInput, type McpToolCatalogEntry, type ModelChatInput, NARP_HTTP_RUNTIME_KIND, NARP_STDIO_RUNTIME_KIND, NEXTCLAW_TIMELINE_KIND_METADATA_KEY, NcpAgentSessionJournalStore, type NcpEndpointEvent, type NcpMessage, type NcpTool, type NextclawAgentDefinition, type NextclawContributionDescriptor, NextclawHarness, NextclawHarnessError, type NextclawHarnessErrorCode, type NextclawHarnessOptions, NextclawKernel, NextclawKernelOptions, NextclawNcpResolvedAgentProfile, NextclawNcpResolvedRunContext, NextclawNcpRunContextResolveParams, type NextclawRunStatus, type NextclawSessionCreateInput, type NextclawSessionRunInput, type NextclawTaskInput, type NextclawTaskResult, ObservationCapabilityDescriptor, ObservationContextTail, ObservationEvent, ObservationEventAdmissionDecision, ObservationExtensionRuntime, ObservationManager, ObservationManagerOptions, ObservationRef, ObservationRelationshipStatus, ObservationState, ObservationTarget, ObservedActivity, ObservedArtifact, ObservedArtifactCategory, ObservedProjectContext, ObservedProjectContextReference, ObservedProjectRun, ObservedRequest, ObservedSignal, ObservedSkill, ObservedWorkItem, ObservedWorkItemSchedule, ObservedWorkflow, ObservedWorkflowStage, PANEL_APP_AGENT_CAPABILITIES, PORTABLE_RUNTIME_ACCEPTANCE_CONTRACT, PORTABLE_RUNTIME_ACCEPTANCE_CONTRACT_FINGERPRINT, PORTABLE_RUNTIME_ACCEPTANCE_LOCALES, PORTABLE_RUNTIME_ACCEPTANCE_PLATFORMS, PORTABLE_RUNTIME_ACCEPTANCE_PRESENTATION, PORTABLE_RUNTIME_ACCEPTANCE_REFERENCE_APP_ID, PROJECT_OBSERVATION_PROTOCOL, PROJECT_TEMPLATE_IDS, PROJECT_WORK_ATTENTION_VALUES, PROJECT_WORK_STATE_CATEGORIES, PROVIDER_MODEL_CATALOG_REFRESH_INTERVAL_MS, PanelAppAgentCapability, PanelAppAgentGenerateObjectInput, PanelAppAgentGenerateObjectRequest, PanelAppAgentGenerateObjectResult, PanelAppAgentRunClient, PanelAppAgentSendPayload, PanelAppAgentSendRequest, PanelAppAgentSendResult, PanelAppAssetTokenService, PanelAppBridgeSession, PanelAppCapabilityGrant, PanelAppCapabilityGrantCaller, PanelAppClientGrant, PanelAppContent, PanelAppDeleteResult, PanelAppEntry, PanelAppError, PanelAppErrorCode, PanelAppList, PanelAppManager, type PanelAppPreferencesUpdate, PanelServiceActionCaller, type PortableRunnerObservation, type PortableRuntimeAcceptanceContractView, PortableRuntimeAcceptanceDefinition, type PortableRuntimeAcceptanceDefinitionView, type PortableRuntimeAcceptanceEvaluationContext, type PortableRuntimeAcceptanceEvidence, type PortableRuntimeAcceptanceEvidenceArtifact, PortableRuntimeAcceptanceEvidenceSource, PortableRuntimeAcceptanceId, type PortableRuntimeAcceptanceIdentity, type PortableRuntimeAcceptanceIdentityResult, PortableRuntimeAcceptanceIdentityService, type PortableRuntimeAcceptanceLocale, PortableRuntimeAcceptanceManager, PortableRuntimeAcceptancePlatform, type PortableRuntimeAcceptancePresentation, type PortableRuntimeAcceptanceResult, type PortableRuntimeAcceptanceResultStatus, type PortableRuntimeAcceptanceStatusEntry, type PortableRuntimeAcceptanceStatusView, type PortableRuntimeAcceptanceSurfaceResult, type PortableRuntimeAcceptanceUnavailableIdentity, PreferenceEntry, PreferenceError, PreferenceErrorCode, PreferenceJsonValue, PreferenceManager, PreferenceManagerOptions, ProductActivityKind, ProductActivitySignal, ProductActivitySink, ProductActivitySource, type ProductFeatureControls, ProjectError, ProjectErrorCode, ProjectManager, ProjectManagerOptions, ProjectObservationDataQuality, ProjectObservationDiagnostic, ProjectObservationError, ProjectObservationEvidenceKind, ProjectObservationReference, ProjectObservationService, ProjectObservationSnapshot, ProjectObservationSourceStatus, ProjectRecord, ProjectSessionBinding, ProjectTemplate, ProjectTemplateId, ProjectWorkActivity, ProjectWorkActivityPage, ProjectWorkActivityType, ProjectWorkActor, ProjectWorkArtifactLink, ProjectWorkAttention, ProjectWorkError, ProjectWorkErrorCode, ProjectWorkItem, ProjectWorkItemDetail, ProjectWorkList, ProjectWorkManager, ProjectWorkState, ProjectWorkStateCategory, ProjectWorkSummary, type ProviderCatalogPlugin, ProviderManagerNcpLLMApi, ProviderModelCatalogEntry, ProviderModelCatalogManager, ProviderModelCatalogSnapshot, ProviderModelsDiscoverInput, type ProviderSpec, type ResidentEventInput, ResolvedAgentProfile, ResolvedDesktopApplicationTarget, SERVICE_APP_MANIFEST_FILE_NAME, ServiceAction, ServiceActionCaller, ServiceActionGrant, ServiceActionGrantRequest, ServiceActionGrantState, ServiceActionInvocationFacts, ServiceActionInvokeRequest, ServiceActionInvokeResult, ServiceActionRisk, ServiceActionRuntimeState, ServiceAppAgentCapabilitySlot, ServiceAppAiCapabilityService, ServiceAppCapabilityProvision, ServiceAppCapabilityRequirement, ServiceAppDeleteResult, ServiceAppError, type ServiceAppErrorCode, ServiceAppExternalRemediation, ServiceAppJobCaller, ServiceAppJobChunkEvent, ServiceAppJobEvent, type ServiceAppJobEventSink, ServiceAppJobJournalService, ServiceAppJobList, ServiceAppJobProgressEvent, type ServiceAppJobScope, ServiceAppJobStatus, ServiceAppJobTerminalEvent, ServiceAppJobView, ServiceAppJobWatch, ServiceAppLifecycle, ServiceAppList, ServiceAppManager, ServiceAppManifest, ServiceAppManifestAction, ServiceAppModelCapabilitySlot, ServiceAppProtocol, ServiceAppProvides, ServiceAppRecord, ServiceAppRequirements, ServiceAppResidentEventDisposition, ServiceAppResidentEventInboxService, ServiceAppResidentEventList, type ServiceAppResidentEventScope, ServiceAppResidentEventStatus, ServiceAppResidentEventView, ServiceAppResourceRequirement, ServiceAppRuntimeService, ServiceAppRuntimeStatus, ServiceAppTerminalJobStatus, ServiceAppWitContract, SessionContextCompactionError, SessionContextCompactionErrorCode, SessionContextCompactionManager, SessionContextCompactionResult, SessionManager, SessionManagerOptions, SessionMessageCursorError, SessionMessagePage, SessionModelTokenUsage, type SessionPendingInput, type SessionQueuedInput, SessionRequestManager, SessionRequestManagerOptions, SessionSettingsError, SessionSettingsPatch, type SessionSteerQueuedInputResult, SessionTokenUsageStatus, SessionTokenUsageSummary, SessionTokenUsageTotals, SkillFrontmatter, type SkillInfo, SkillManager, type SkillScope, SubscribeEventsInput, SystemObjectReferenceError, SystemObjectReferenceErrorCode, SystemObjectReferenceManager, SystemObjectReferenceProvider, SystemObjectReferenceSnapshotSource, type TypedKey, TypedPredicate, UnavailableDesktopHost, UnsignedUpdateManifest, type Unsubscribe, UpdateBlockReason, UpdateHostKind, UpdateManifest, UpdateManifestReader, UpdateProgress, UpdateProjectWorkItemInput, UpdateProjectWorkStateInput, UpdateSnapshot, UpdateStatus, VerificationEvidenceRecord, VerificationRecord, VerificationRecordEntrySurface, VerificationRecordError, VerificationRecordInput, VerificationRecordList, VerificationRecordObservation, VerificationRecordRole, VerificationRecordService, VerificationRecordStatus, type WorkspaceServiceDataOwner, assertObservationJsonValue, assertObservationPredicate, buildAgentRunSendPayload, buildContextCompactionModelProjection, buildContextCompactionTimelineNcpMessage, buildLlmUsageSummary, buildLocalizedTextMap, buildNextclawNcpRunContext, buildObservationEventModelMessage, buildServiceActionId, buildSessionRequestCompletionMessage, capabilityGrantCovers, createAgentRuntimeSessionRequestDispatcher, createAgentRuntimeSessionRequestSourceNotifier, createAssetTools, createCapabilityDeclarationFingerprint, createContextCompactionMessageId, createContextWindowSignature, createCronJobSystemObjectProvider, createDesktopHostError, createInboxDeliverySystemObjectProvider, createLlmUsageRecord, createPanelAppAgentGrantRequest, createPanelAppClientGrantRequest, createServiceActionGrantRequest, createServiceAppAgentSlotGrantRequest, createServiceAppModelSlotGrantRequest, createTypedKey, describeAgentRuntimeSessionTypes, dispatchAgentRuntimeSessionRequest, dispatchChannelReplyRoute, dispatchPromptOverNcp, dispatchPromptOverNcpResult, evaluateObservationEventAdmission, evaluatePortableRuntimeAcceptance, evaluatePortableRuntimeAcceptanceArtifact, eventKeys, getAutomaticUpdateCheckDelay, getCapabilityGrantKey, getServiceActionName, getServiceAppManifestPath, getUiContentParamsBootstrapScript, getUnsignedUpdateManifest, hasLlmUsageTelemetry, ingressKeys, injectUiContentParamsBootstrap, isAppDataError, isAppPackageError, isContextCompactionProjectionMessage, isContextCompactionTimelineMessage, isContextWindowSnapshot, isInboxDeliveryError, isPanelAppAgentCapability, isPanelAppError, isPreferenceError, isProjectError, isProjectObservationError, isProjectWorkError, isReplyCapableChannel, isServiceAppError, isSessionContextCompactionError, isSessionMessageCursorError, isSessionSettingsError, isSystemObjectReferenceError, listExtensionChannelIds, listServiceAppManifestActions, matchesCapabilityGrantFilter, matchesObservationPredicate, mergeServiceAppRuntimeActions, normalizeAgentRuntimeSessionTypeIcon, normalizeCapabilityGrantRequest, normalizeLlmUsageModel, normalizeOptionalString, normalizePortableRuntimeEnvironment, parseObservationDuration, parsePortableRuntimeAcceptanceEvidenceArtifact, parseServiceAppManifest, parseSkillFrontmatter, presentPortableRuntimeAcceptanceDefinition, readContextCompactionCheckpoint, readContextWindowEventSessionId, readJsonPointer, readLatestContextCompactionCheckpoint, readLearningLoopRuntimeConfig, readMetadataModel, readMetadataThinking, readServiceActionTargetId, readServiceAppManifest, readServiceAppSlotTarget, resolveAgentRuntimeEntries, resolveAutomaticUpdateCheckIntervalMs, resolveChannelReplyRoute, resolveEffectiveModel, resolveLegacyEventType, resolvePortableRuntimeAcceptanceLocale, resolveSessionChannelContext, runGatewayInboundLoop, runNextclawTask, sanitizeLlmUsage, serializeContextTail, serializeUnsignedUpdateManifest, shouldRefreshContextWindowDuringStream, shouldRefreshContextWindowImmediately, startPromptOverNcpExecution, stripSkillFrontmatter, syncSessionThinkingPreference, toBoundedJson, toNcpMessages, waitForAgentRuntimeSessionReply };
 //# sourceMappingURL=index.d.ts.map