@nextclaw/kernel 0.15.0-beta.0 → 0.15.0

package/dist/index.d.ts

@@ -6,7 +6,8 @@ import { ListMessagesOptions, ListSessionsOptions, NcpAgentConversationStateMana
 import { LocalAssetStore } from "@nextclaw/ncp-agent-runtime";
 import { AgentRunSendIngressPayload, AppEventEmitOptions, AppEventEnvelope, AppEventHandler, AppEventKey, Contribution as Contribution$1, Disposer, Disposer as Disposer$1, EventBus, EventBus as EventBus$1, EventBusOptions, InboxDelivery, InboxDeliveryContentType, InboxDeliveryListView, InboxDeliverySource, InboxDeliveryStateAction, Ingress, Ingress as Ingress$1, IngressContext, IngressEnvelope, IngressHandler, Key, RuntimeModelSelectionMode, SystemObjectReferenceGroupDescriptor, SystemObjectReferenceItem, SystemObjectReferenceListView, SystemObjectResolvedReference, TypedKey, Unsubscribe, Unsubscribe as Unsubscribe$1, createTypedKey, eventKeys, ingressKeys } from "@nextclaw/shared";
 import { AgentSessionRecord, ChatTarget, NcpReplyInput, RuntimeFactoryParams } from "@nextclaw/ncp-toolkit";
-import { AppInstallProgressHandler, AppNativeArtifactTarget, AppPermissions, AppPlatformTargetService, AppRollbackResult, AppRuntimeIsolation, AppRuntimeProfile, AppSecretBinding, AppSecretSlot, AppStorageContext, AppStorageUsage, AppUninstallResult, AppUpdateResult } from "@nextclaw/app-runtime";
+import * as _$_nextclaw_app_runtime0 from "@nextclaw/app-runtime";
+import { AppDocumentGrantMutationResult, AppDocumentGrantState, AppInstallProgressHandler, AppInstalledPermissionState, AppNativeArtifactTarget, AppPermissions, AppPlatformTargetService, AppRollbackResult, AppRuntimeIsolation, AppRuntimeProfile, AppSecretBinding, AppSecretSlot, AppStorageContext, AppStorageUsage, AppUninstallResult, AppUpdateResult } from "@nextclaw/app-runtime";
 import * as _$_nextclaw_mcp0 from "@nextclaw/mcp";
 import { McpCatalogFilter, McpCatalogFilter as McpCatalogFilter$1, McpRegistryService, McpServerRecord, McpServerRecord as McpServerRecord$1, McpToolCatalogEntry, McpToolCatalogEntry as McpToolCatalogEntry$1 } from "@nextclaw/mcp";
 
@@ -586,6 +587,7 @@ type AgentRunSession = {
   metadata: Record<string, unknown>;
   model?: string;
   projectRoot?: string;
+  projectId?: string;
   workingDir: string;
   thinkingEffort?: ThinkingEffort | null;
 };
@@ -700,11 +702,16 @@ type CreateProjectInput = {
   rootPath?: string;
   template?: ProjectTemplateId;
 };
+type ProjectSessionBinding = {
+  projectId: string;
+  rootPath: string;
+};
 //#endregion
 //#region src/features/projects/managers/project.manager.d.ts
 type ProjectManagerOptions = {
   storePath: string;
   getDefaultWorkspacePath: () => string;
+  onProjectRegistered?: (project: ProjectRecord) => Promise<void>;
 };
 type ProjectErrorCode = "PROJECT_NAME_INVALID" | "PROJECT_PATH_INVALID_TYPE" | "PROJECT_PATH_NOT_FOUND" | "PROJECT_PATH_NOT_DIRECTORY" | "PROJECT_PATH_IS_DEFAULT_WORKSPACE" | "PROJECT_PATH_NOT_EMPTY" | "PROJECT_TEMPLATE_INVALID";
 declare class ProjectError extends Error {
@@ -724,6 +731,7 @@ declare class ProjectManager {
   createProject: (input: CreateProjectInput) => Promise<ProjectRecord>;
   registerExistingProject: (rootPath: unknown, name?: string) => Promise<ProjectRecord | null>;
   normalizeSessionProjectRoot: (value: unknown) => Promise<string | null>;
+  normalizeSessionProjectContext: (value: unknown) => Promise<ProjectSessionBinding | null>;
   resolveExistingProjectRoot: (value: unknown) => Promise<string | null>;
   importSessionProjects: (projectRoots: unknown[]) => Promise<void>;
   private upsertProject;
@@ -738,6 +746,153 @@ declare class ProjectManager {
   private isMissingFileError;
 }
 //#endregion
+//#region src/features/projects/types/project-work.types.d.ts
+declare const PROJECT_WORK_STATE_CATEGORIES: readonly ["backlog", "unstarted", "started", "completed", "canceled"];
+type ProjectWorkStateCategory = (typeof PROJECT_WORK_STATE_CATEGORIES)[number];
+declare const PROJECT_WORK_ATTENTION_VALUES: readonly ["none", "blocked", "awaiting-user"];
+type ProjectWorkAttention = (typeof PROJECT_WORK_ATTENTION_VALUES)[number];
+type ProjectWorkActor = {
+  kind: "agent" | "cli" | "system" | "user";
+  id?: string;
+  sessionId?: string;
+};
+type ProjectWorkState = {
+  id: string;
+  projectId: string;
+  name: string;
+  category: ProjectWorkStateCategory;
+  position: number;
+  isDefault: boolean;
+  createdAt: string;
+  updatedAt: string;
+};
+type ProjectWorkItem = {
+  id: string;
+  projectId: string;
+  title: string;
+  description: string;
+  stateId: string;
+  attention: ProjectWorkAttention;
+  version: number;
+  createdAt: string;
+  updatedAt: string;
+  deletedAt: string | null;
+};
+type ProjectWorkActivityType = "artifact-linked" | "artifact-unlinked" | "created" | "deleted" | "restored" | "state-changed" | "updated";
+type ProjectWorkActivity = {
+  id: string;
+  projectId: string;
+  workItemId: string;
+  type: ProjectWorkActivityType;
+  actor: ProjectWorkActor;
+  details: Record<string, unknown>;
+  createdAt: string;
+};
+type ProjectWorkArtifactLink = {
+  id: string;
+  projectId: string;
+  workItemId: string;
+  path: string;
+  label: string | null;
+  createdAt: string;
+};
+type ProjectWorkItemDetail = ProjectWorkItem & {
+  state: ProjectWorkState;
+  artifacts: ProjectWorkArtifactLink[];
+};
+type ProjectWorkList = {
+  items: ProjectWorkItemDetail[];
+  states: ProjectWorkState[];
+  total: number;
+};
+type ProjectWorkSummary = {
+  active: number;
+  attention: number;
+  completed: number;
+  total: number;
+  updatedAt: string | null;
+};
+type ProjectWorkActivityPage = {
+  activities: ProjectWorkActivity[];
+  nextCursor: string | null;
+};
+type CreateProjectWorkItemInput = {
+  title: string;
+  description?: string;
+  stateId?: string;
+  attention?: ProjectWorkAttention;
+};
+type UpdateProjectWorkItemInput = {
+  title?: string;
+  description?: string;
+  stateId?: string;
+  attention?: ProjectWorkAttention;
+  expectedVersion?: number;
+};
+type CreateProjectWorkStateInput = {
+  name: string;
+  category: ProjectWorkStateCategory;
+  position?: number;
+  isDefault?: boolean;
+};
+type UpdateProjectWorkStateInput = {
+  name?: string;
+  category?: ProjectWorkStateCategory;
+  position?: number;
+  isDefault?: boolean;
+};
+//#endregion
+//#region src/features/projects/managers/project-work.manager.d.ts
+declare class ProjectWorkManager {
+  private readonly options;
+  private readonly store;
+  constructor(options: {
+    databasePath: string;
+    eventBus: EventBus$1;
+    projectManager: ProjectManager;
+  });
+  initialize: () => Promise<void>;
+  dispose: () => void;
+  ensureProject: (projectId: string) => Promise<void>;
+  list: (projectId: string, includeDeleted?: boolean) => Promise<ProjectWorkList>;
+  summary: (projectId: string) => Promise<ProjectWorkSummary>;
+  get: (projectId: string, workItemId: string) => Promise<ProjectWorkItemDetail>;
+  create: (projectId: string, input: CreateProjectWorkItemInput, actor: ProjectWorkActor) => Promise<ProjectWorkItemDetail>;
+  update: (projectId: string, workItemId: string, input: UpdateProjectWorkItemInput, actor: ProjectWorkActor) => Promise<ProjectWorkItemDetail>;
+  delete: (projectId: string, workItemId: string, actor: ProjectWorkActor) => Promise<ProjectWorkItemDetail>;
+  restore: (projectId: string, workItemId: string, actor: ProjectWorkActor) => Promise<ProjectWorkItemDetail>;
+  listActivities: (projectId: string, workItemId: string, options?: {
+    cursor?: string;
+    limit?: number;
+  }) => Promise<ProjectWorkActivityPage>;
+  listStates: (projectId: string) => Promise<ProjectWorkState[]>;
+  createState: (projectId: string, input: CreateProjectWorkStateInput) => Promise<ProjectWorkState>;
+  updateState: (projectId: string, stateId: string, input: UpdateProjectWorkStateInput) => Promise<ProjectWorkState>;
+  deleteState: (projectId: string, stateId: string, migrateToStateId: string | null, actor: ProjectWorkActor) => Promise<void>;
+  linkArtifact: (params: {
+    projectId: string;
+    workItemId: string;
+    path: string;
+    label?: string;
+    actor: ProjectWorkActor;
+  }) => Promise<ProjectWorkArtifactLink>;
+  unlinkArtifact: (params: {
+    projectId: string;
+    workItemId: string;
+    artifactLinkId: string;
+    actor: ProjectWorkActor;
+  }) => Promise<void>;
+  private setDeleted;
+  private requireProject;
+  private requireMappedState;
+  private requireName;
+  private assertAttention;
+  private assertCategory;
+  private normalizeActor;
+  private normalizeArtifactPath;
+  private emit;
+}
+//#endregion
 //#region src/features/projects/types/project-observation.types.d.ts
 declare const PROJECT_OBSERVATION_PROTOCOL: "nextclaw.project/v1";
 type ProjectObservationDataQuality = "complete" | "partial" | "unavailable";
@@ -917,6 +1072,14 @@ declare class ProjectObservationService {
   private createSourceStatus;
 }
 //#endregion
+//#region src/features/projects/types/project-work-error.types.d.ts
+type ProjectWorkErrorCode = "PROJECT_NOT_FOUND" | "PROJECT_WORK_ARTIFACT_INVALID" | "PROJECT_WORK_ARTIFACT_NOT_FOUND" | "PROJECT_WORK_ITEM_NOT_FOUND" | "PROJECT_WORK_STATE_IN_USE" | "PROJECT_WORK_STATE_INVALID" | "PROJECT_WORK_STATE_NOT_FOUND" | "PROJECT_WORK_VALIDATION_FAILED" | "PROJECT_WORK_VERSION_CONFLICT";
+declare class ProjectWorkError extends Error {
+  readonly code: ProjectWorkErrorCode;
+  constructor(code: ProjectWorkErrorCode, message: string);
+}
+declare function isProjectWorkError(error: unknown): error is ProjectWorkError;
+//#endregion
 //#region src/services/session-event-coordinator.service.d.ts
 type PublishSessionEventParams = {
   sessionId: string;
@@ -1713,6 +1876,7 @@ type AppPackageView = {
   readiness: AppPackageReadiness;
   secrets: AppPackageSecretReadiness;
   dependencies: AppPackageDependencyView;
+  documentAccess: AppDocumentGrantState[];
 };
 type AppPackageHostTarget = {
   key: string;
@@ -1780,9 +1944,11 @@ type AppPackageRuntimeHooks = {
   assertCanActivate: (sources: AppPackageComponentSource[]) => Promise<void>;
   afterActivate: (sources: AppPackageComponentSource[]) => Promise<void>;
   beforeDeactivate: (sources: AppPackageComponentSource[]) => Promise<void>;
+  prepareCapabilityChange: (sources: AppPackageComponentSource[]) => Promise<AppPackageUninstallRollback>;
+  afterCapabilityChange: (sources: AppPackageComponentSource[]) => Promise<void>;
   beforeUninstall: (sources: AppPackageComponentSource[]) => Promise<AppPackageUninstallRollback | void>;
 };
-type AppPackageErrorCode = "APP_PACKAGE_CONFLICT" | "APP_PACKAGE_INCOMPATIBLE" | "APP_PACKAGE_NOT_READY" | "APP_PACKAGE_NOT_FOUND" | "APP_PACKAGE_DEPENDENCY_MISSING" | "APP_PACKAGE_DEPENDENCY_INCOMPATIBLE" | "APP_PACKAGE_DEPENDENCY_CYCLE" | "APP_PACKAGE_OPERATION_FAILED" | "SECRET_SLOT_NOT_DECLARED" | "SECRET_BINDING_MISSING" | "SECRET_RESOLUTION_FAILED";
+type AppPackageErrorCode = "APP_PACKAGE_CONFLICT" | "APP_PACKAGE_INCOMPATIBLE" | "APP_PACKAGE_NOT_READY" | "APP_PACKAGE_NOT_FOUND" | "APP_PACKAGE_DEPENDENCY_MISSING" | "APP_PACKAGE_DEPENDENCY_INCOMPATIBLE" | "APP_PACKAGE_DEPENDENCY_CYCLE" | "APP_PACKAGE_OPERATION_FAILED" | "SECRET_SLOT_NOT_DECLARED" | "SECRET_BINDING_MISSING" | "SECRET_RESOLUTION_FAILED" | "DOCUMENT_SCOPE_NOT_DECLARED" | "DOCUMENT_SCOPE_NOT_GRANTED" | "DOCUMENT_SCOPE_MODE_INSUFFICIENT" | "DOCUMENT_SCOPE_UNAVAILABLE" | "DOCUMENT_SCOPE_MUTATION_FAILED";
 declare class AppPackageError extends Error {
   readonly code: AppPackageErrorCode;
   constructor(code: AppPackageErrorCode, message: string);
@@ -1801,6 +1967,8 @@ declare class AppPackageManager {
   private readonly dependencyCoordinator;
   private readonly runtimeActivationService;
   private readonly registryService;
+  private readonly grantService;
+  private readonly documentAccessService;
   private readonly readinessManager;
   private runtimeHooks;
   private builtInBootstrapPromise;
@@ -1834,6 +2002,14 @@ declare class AppPackageManager {
     binding: AppSecretBinding;
   }) => Promise<AppPackageSecretReadiness>;
   unbindSecret: (appId: string, slotId: string) => Promise<AppPackageSecretReadiness>;
+  inspectDocumentAccess: (appId: string) => Promise<_$_nextclaw_app_runtime0.AppInstalledPermissionState>;
+  assertDocumentAccess: (appId: string, scopeId: string, requestedMode: "read" | "read-write") => Promise<void>;
+  grantDocumentAccess: (appId: string, input: {
+    scopeId: string;
+    directoryPath: string;
+    mode: "read" | "read-write";
+  }) => Promise<_$_nextclaw_app_runtime0.AppDocumentGrantMutationResult>;
+  revokeDocumentAccess: (appId: string, scopeId: string) => Promise<_$_nextclaw_app_runtime0.AppDocumentGrantMutationResult>;
   listActiveComponentSources: () => Promise<AppPackageComponentSource[]>;
   listActiveComponentSourcesWithDiagnostics: () => Promise<AppPackageComponentSourceList>;
   listOperations: () => Promise<AppPackageOperationList>;
@@ -2951,222 +3127,222 @@ type PortableRuntimeAcceptanceDefinition = {
 declare const PORTABLE_RUNTIME_ACCEPTANCE_CONTRACT: readonly [{
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-EXEC-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }, {
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-DATA-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }, {
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-FILE-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }, {
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-NET-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }, {
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-SECRET-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }, {
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-RES-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }, {
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-EVENT-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }, {
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-TASK-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }, {
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-STREAM-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }, {
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-AGENT-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }, {
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-AI-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }, {
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-COMP-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }, {
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-ENTRY-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }, {
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-LIFE-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }, {
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-BOUND-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }, {
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-PERF-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }, {
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-DX-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }, {
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-DIST-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }, {
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-EVID-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }, {
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-REF-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }, {
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-DOCS-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }, {
   titleKey: string;
   descriptionKey: string;
+  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
+  scenarioVersion: string;
   id: "PRT-REL-001";
   checkerKey: string;
   category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
   required: boolean;
-  scenarioVersion: string;
-  evidenceSource: PortableRuntimeAcceptanceEvidenceSource;
   platforms: readonly PortableRuntimeAcceptancePlatform[];
 }];
 type PortableRuntimeAcceptanceId = (typeof PORTABLE_RUNTIME_ACCEPTANCE_CONTRACT)[number]["id"];
@@ -4088,7 +4264,7 @@ type ServiceAppRemovalDiagnostic = {
 };
 //#endregion
 //#region src/utils/service-app-error.utils.d.ts
-type ServiceAppErrorCode = "AUTHORIZATION_REQUIRED" | "SERVICE_APP_ACTION_NOT_DECLARED" | "SERVICE_APP_ACTION_NOT_FOUND" | "SERVICE_APP_INVALID_ACTION" | "SERVICE_APP_INVALID_CALLER" | "SERVICE_APP_INVALID_MANIFEST" | "SERVICE_APP_MANAGED_SOURCE" | "SERVICE_APP_JOB_CONFLICT" | "SERVICE_APP_JOB_CURSOR_INVALID" | "SERVICE_APP_JOB_EVENT_LIMIT" | "SERVICE_APP_JOB_NOT_FOUND" | "SERVICE_APP_JOB_TERMINAL" | "SERVICE_APP_RESIDENT_EVENT_NOT_FOUND" | "SERVICE_APP_RESIDENT_EVENT_CONFLICT" | "SERVICE_APP_RESIDENT_EVENT_LEASE_INVALID" | "SERVICE_APP_RESIDENT_INBOX_FROZEN" | "SERVICE_APP_NOT_FOUND" | "SERVICE_APP_READ_FAILED" | "SERVICE_APP_RUNTIME_FAILED" | "STREAM_BACKPRESSURE_TIMEOUT" | "STREAM_CURSOR_EXPIRED" | "WASI_ABI_VERSION_MISMATCH" | "WASI_CAPABILITY_DENIED" | "WASI_COMPONENT_FAILED" | "WASI_COMPONENT_TRAP" | "WASI_GUEST_EXPORT_MISSING" | "WASI_INPUT_SCHEMA_MISMATCH";
+type ServiceAppErrorCode = "AUTHORIZATION_REQUIRED" | "DOCUMENT_SCOPE_NOT_GRANTED" | "DOCUMENT_SCOPE_MODE_INSUFFICIENT" | "DOCUMENT_SCOPE_UNAVAILABLE" | "SERVICE_APP_ACTION_NOT_DECLARED" | "SERVICE_APP_ACTION_NOT_FOUND" | "SERVICE_APP_INVALID_ACTION" | "SERVICE_APP_INVALID_CALLER" | "SERVICE_APP_INVALID_MANIFEST" | "SERVICE_APP_MANAGED_SOURCE" | "SERVICE_APP_JOB_CONFLICT" | "SERVICE_APP_JOB_CURSOR_INVALID" | "SERVICE_APP_JOB_EVENT_LIMIT" | "SERVICE_APP_JOB_NOT_FOUND" | "SERVICE_APP_JOB_TERMINAL" | "SERVICE_APP_RESIDENT_EVENT_NOT_FOUND" | "SERVICE_APP_RESIDENT_EVENT_CONFLICT" | "SERVICE_APP_RESIDENT_EVENT_LEASE_INVALID" | "SERVICE_APP_RESIDENT_INBOX_FROZEN" | "SERVICE_APP_NOT_FOUND" | "SERVICE_APP_READ_FAILED" | "SERVICE_APP_RUNTIME_FAILED" | "STREAM_BACKPRESSURE_TIMEOUT" | "STREAM_CURSOR_EXPIRED" | "WASI_ABI_VERSION_MISMATCH" | "WASI_CAPABILITY_DENIED" | "WASI_COMPONENT_FAILED" | "WASI_COMPONENT_TRAP" | "WASI_GUEST_EXPORT_MISSING" | "WASI_INPUT_SCHEMA_MISMATCH";
 declare class ServiceAppError extends Error {
   readonly code: ServiceAppErrorCode;
   readonly details?: Record<string, unknown> | undefined;
@@ -4129,6 +4305,7 @@ declare class ServiceAppManager {
     configManager: ConfigManager;
     runtimeService?: ServiceAppRuntime;
     listPackageComponentSources?: () => Promise<AppPackageComponentSource[]>;
+    assertDocumentAccess?: (appId: string, scopeId: string, mode: "read" | "read-write") => Promise<void>;
     capabilityGrantManager: CapabilityGrantManager;
     hasAgent?: (agentId: string) => boolean;
     providerManager?: LlmProviderRuntime;
@@ -4162,6 +4339,7 @@ declare class ServiceAppManager {
    * This is deliberately separate from source-tree `nextclaw app call`.
    */
   invokeInstalledServiceAction: (appId: string, actionName: string, input?: Record<string, unknown>) => Promise<ServiceActionInvokeResult>;
+  private assertDocumentInputAccess;
   listVerificationRecords: (filters?: {
     acceptanceId?: string;
     appId?: string;
@@ -4521,6 +4699,7 @@ declare class NextclawKernel {
   readonly preferenceManager: PreferenceManager;
   readonly projectManager: ProjectManager;
   readonly projectObservation: ProjectObservationService;
+  readonly projectWorkManager: ProjectWorkManager;
   readonly serviceAppManager: ServiceAppManager;
   readonly extensions: ExtensionManager;
   readonly agentRuntimeManager: AgentRuntimeManager;
@@ -5248,5 +5427,5 @@ declare function resolveLegacyEventType(message: SessionMessage): string;
 declare function getUiContentParamsBootstrapScript(): string;
 declare function injectUiContentParamsBootstrap(html: string): string;
 //#endregion
-export { AUTOMATIC_UPDATE_CHECK_INTERVAL_MS, AccessLoginResult, AccessManager, AccessManagerOptions, AccessPasswordStatus, AccessPrincipal, AccessRole, AccessSessionRecord, AccessSessionState, AgentManager, AgentManagerOptions, AgentRunClient, type AgentRunReply, type AgentRunReplyOptions, AgentRunSession, type AgentRunStreamOptions, type AgentRuntimeEntry, type AgentRuntimeProviderRegistration, AgentRuntimeSessionRequestDispatcherOptions, type AgentRuntimeSessionTypeCatalog, type AgentRuntimeSessionTypeDescribeParams, AgentRuntimeSessionTypeIcon, type AgentRuntimeSessionTypeOption, AgentRuntimeSessionTypeProvider, AgentServiceActionCaller, AppDataDeleteResult, AppDataDiagnostic, AppDataEntry, AppDataError, AppDataErrorCode, AppDataLifecycle, AppDataList, AppDataManager, AppDataSource, type AppEventEmitOptions, type AppEventEnvelope, type AppEventHandler, type AppEventKey, AppPackageComponentKind, AppPackageComponentSource, AppPackageComponentSourceList, AppPackageComponentView, AppPackageConflict, AppPackageDependencyBinding, AppPackageDependencyBindingInput, AppPackageDependencyCandidate, AppPackageDependencyCycle, AppPackageDependencyDiagnostic, AppPackageDependencyDiagnosticCode, AppPackageDependencyView, AppPackageError, AppPackageErrorCode, AppPackageHostTarget, AppPackageList, AppPackageManager, AppPackageOperationAction, AppPackageOperationInput, AppPackageOperationList, AppPackageOperationResult, AppPackageOperationStatus, AppPackageOperationView, AppPackageReadiness, AppPackageReadinessRequirement, AppPackageReadinessStatus, AppPackageRuntimeHooks, AppPackageSecretReadiness, AppPackageSecretSlotView, AppPackageSecretStatus, AppPackageUnavailableDiagnostic, AppPackageUninstallRollback, AppPackageView, type AssetApi, AutomationManager, AutomationManagerOptions, BindContextInput, type BuildAgentRunSendPayloadParams, BuildContextTailInput, BuiltinNarpRuntimeProviderService, CONTEXT_COMPACTION_CONTINUATION_TEXT, CONTEXT_COMPACTION_PROJECTION_KIND, CONTEXT_COMPACTION_PROJECTION_METADATA_KEY, CONTEXT_COMPACTION_SYSTEM_PREAMBLE, CONTEXT_COMPACTION_TIMELINE_KIND, CapabilityGrant, CapabilityGrantDecision, CapabilityGrantFilter, CapabilityGrantLegacyMigrationService, CapabilityGrantListener, CapabilityGrantManager, CapabilityGrantRequest, CapabilityGrantResource, CapabilityGrantRevocationListener, CapabilityGrantStore, CapabilityGrantSubject, CapabilityProviderView, ChannelManager, ChannelReplyRouterDispatchParams, CommandRegistry, ConfigManager, ConfigManagerOptions, ConfigManagerRuntimeHooks, ConfigMutationResult, ContextBinding, type ContextBlock, ContextCompactionJournalRecoveryService, ContextCompactionModelProjection, ContextCompactionPreflightBeginResult, ContextCompactionPreflightResult, ContextCompactionPreflightService, ContextCompactionTimelineCheckpoint, ContextCompactionTrigger, type ContextProvider, type ContextProviderRequest, Contribution, CreateAgentRunSessionParams, CreateInboxDeliveryInput, CreateProjectInput, DEFAULT_AGENT_RUNTIME_ENTRY_ID, DEFAULT_SERVICE_ACTION_RISK, DESKTOP_HOST_ACCESS, DESKTOP_HOST_PROTOCOL_VERSION, DesktopApplicationTarget, DesktopCapabilityError, DesktopCapabilityErrorCode, DesktopHost, DesktopHostAccess, DesktopHostCaller, DesktopHostCapabilityDeclaration, DesktopHostCapabilityManager, DesktopHostEvent, DesktopHostEventListener, DesktopHostManifest, DesktopHostMethod, DesktopHostRequest, DesktopHostResponse, DesktopHostStatus, DesktopNodeReplService, DesktopSessionCaller, DesktopSessionStateService, DesktopSnapshotOptions, DirectPromptDispatchExecution, DirectPromptDispatchParams, DirectPromptDispatchResult, type Disposer, EventAdmissionPolicy, EventBus, type EventBusOptions, EventDelivery, EventSubscription, EventSubscriptionBudget, ExtensionLoadProgress, ExtensionLoadResult, ExtensionManager, type ExtensionRuntimeStatus, FeatureControlsService, GatewayInboundLoopRuntime, GatewayInboundProcessor, type IContextRegistry, type IKernel, type IMcpRegistry, type IModelRegistry, type INextclawAgent, type INextclawAgentRegistry, type INextclawAgentSessions, type INextclawContributionRegistry, type INextclawHarness, type INextclawRun, type INextclawSession, type INextclawSessionRegistry, type IRuntimeRegistry, type IToolRegistry, InboxDeliveryError, InboxDeliveryErrorCode, InboxDeliveryManager, InboxDeliveryManagerOptions, Ingress, type IngressContext, type IngressEnvelope, type IngressHandler, InstallationKind, InstalledSkillDetail, InstalledSkillSummary, InstalledSkillsList, JsonPointer, JsonValue, type Key, type LLMResponse, type LLMStreamEvent, type LearningLoopRuntimeConfig, type LeasedResidentEvent, LegacyVerificationRecord, LlmProviderManager, LlmProviderRuntime, LlmUsageManager, LlmUsageManagerOptions, LlmUsageRecord, LlmUsageSnapshot, LlmUsageStats, LlmUsageStore, LlmUsageStoreOptions, LlmUsageSummary, LocalizedTextMap, MAX_INBOX_DELIVERY_CONTENT_LENGTH, type McpCatalogFilter, McpManager, type McpServerDefinition, type McpServerRecord, McpServiceAppRuntimeService, type McpToolCallInput, type McpToolCatalogEntry, type ModelChatInput, NARP_HTTP_RUNTIME_KIND, NARP_STDIO_RUNTIME_KIND, NEXTCLAW_TIMELINE_KIND_METADATA_KEY, NcpAgentSessionJournalStore, type NcpEndpointEvent, type NcpMessage, type NcpTool, type NextclawAgentDefinition, type NextclawContributionDescriptor, NextclawHarness, NextclawHarnessError, type NextclawHarnessErrorCode, type NextclawHarnessOptions, NextclawKernel, NextclawKernelOptions, NextclawNcpResolvedAgentProfile, NextclawNcpResolvedRunContext, NextclawNcpRunContextResolveParams, type NextclawRunStatus, type NextclawSessionCreateInput, type NextclawSessionRunInput, type NextclawTaskInput, type NextclawTaskResult, ObservationCapabilityDescriptor, ObservationContextTail, ObservationEvent, ObservationEventAdmissionDecision, ObservationExtensionRuntime, ObservationManager, ObservationManagerOptions, ObservationRef, ObservationRelationshipStatus, ObservationState, ObservationTarget, ObservedActivity, ObservedArtifact, ObservedArtifactCategory, ObservedProjectContext, ObservedProjectContextReference, ObservedProjectRun, ObservedRequest, ObservedSignal, ObservedSkill, ObservedWorkItem, ObservedWorkItemSchedule, ObservedWorkflow, ObservedWorkflowStage, PANEL_APP_AGENT_CAPABILITIES, PORTABLE_RUNTIME_ACCEPTANCE_CONTRACT, PORTABLE_RUNTIME_ACCEPTANCE_CONTRACT_FINGERPRINT, PORTABLE_RUNTIME_ACCEPTANCE_LOCALES, PORTABLE_RUNTIME_ACCEPTANCE_PLATFORMS, PORTABLE_RUNTIME_ACCEPTANCE_PRESENTATION, PORTABLE_RUNTIME_ACCEPTANCE_REFERENCE_APP_ID, PROJECT_OBSERVATION_PROTOCOL, PROJECT_TEMPLATE_IDS, PROVIDER_MODEL_CATALOG_REFRESH_INTERVAL_MS, PanelAppAgentCapability, PanelAppAgentGenerateObjectInput, PanelAppAgentGenerateObjectRequest, PanelAppAgentGenerateObjectResult, PanelAppAgentRunClient, PanelAppAgentSendPayload, PanelAppAgentSendRequest, PanelAppAgentSendResult, PanelAppAssetTokenService, PanelAppBridgeSession, PanelAppCapabilityGrant, PanelAppCapabilityGrantCaller, PanelAppClientGrant, PanelAppContent, PanelAppDeleteResult, PanelAppEntry, PanelAppError, PanelAppErrorCode, PanelAppList, PanelAppManager, type PanelAppPreferencesUpdate, PanelServiceActionCaller, type PortableRunnerObservation, type PortableRuntimeAcceptanceContractView, PortableRuntimeAcceptanceDefinition, type PortableRuntimeAcceptanceDefinitionView, type PortableRuntimeAcceptanceEvaluationContext, type PortableRuntimeAcceptanceEvidence, type PortableRuntimeAcceptanceEvidenceArtifact, PortableRuntimeAcceptanceEvidenceSource, PortableRuntimeAcceptanceId, type PortableRuntimeAcceptanceIdentity, type PortableRuntimeAcceptanceIdentityResult, PortableRuntimeAcceptanceIdentityService, type PortableRuntimeAcceptanceLocale, PortableRuntimeAcceptanceManager, PortableRuntimeAcceptancePlatform, type PortableRuntimeAcceptancePresentation, type PortableRuntimeAcceptanceResult, type PortableRuntimeAcceptanceResultStatus, type PortableRuntimeAcceptanceStatusEntry, type PortableRuntimeAcceptanceStatusView, type PortableRuntimeAcceptanceSurfaceResult, type PortableRuntimeAcceptanceUnavailableIdentity, PreferenceEntry, PreferenceError, PreferenceErrorCode, PreferenceJsonValue, PreferenceManager, PreferenceManagerOptions, ProductActivityKind, ProductActivitySignal, ProductActivitySink, ProductActivitySource, type ProductFeatureControls, ProjectError, ProjectErrorCode, ProjectManager, ProjectManagerOptions, ProjectObservationDataQuality, ProjectObservationDiagnostic, ProjectObservationError, ProjectObservationEvidenceKind, ProjectObservationReference, ProjectObservationService, ProjectObservationSnapshot, ProjectObservationSourceStatus, ProjectRecord, ProjectTemplate, ProjectTemplateId, type ProviderCatalogPlugin, ProviderManagerNcpLLMApi, ProviderModelCatalogEntry, ProviderModelCatalogManager, ProviderModelCatalogSnapshot, ProviderModelsDiscoverInput, type ProviderSpec, type ResidentEventInput, ResolvedAgentProfile, ResolvedDesktopApplicationTarget, SERVICE_APP_MANIFEST_FILE_NAME, ServiceAction, ServiceActionCaller, ServiceActionGrant, ServiceActionGrantRequest, ServiceActionGrantState, ServiceActionInvocationFacts, ServiceActionInvokeRequest, ServiceActionInvokeResult, ServiceActionRisk, ServiceActionRuntimeState, ServiceAppAgentCapabilitySlot, ServiceAppAiCapabilityService, ServiceAppCapabilityProvision, ServiceAppCapabilityRequirement, ServiceAppDeleteResult, ServiceAppError, type ServiceAppErrorCode, ServiceAppExternalRemediation, ServiceAppJobCaller, ServiceAppJobChunkEvent, ServiceAppJobEvent, type ServiceAppJobEventSink, ServiceAppJobJournalService, ServiceAppJobList, ServiceAppJobProgressEvent, type ServiceAppJobScope, ServiceAppJobStatus, ServiceAppJobTerminalEvent, ServiceAppJobView, ServiceAppJobWatch, ServiceAppLifecycle, ServiceAppList, ServiceAppManager, ServiceAppManifest, ServiceAppManifestAction, ServiceAppModelCapabilitySlot, ServiceAppProtocol, ServiceAppProvides, ServiceAppRecord, ServiceAppRequirements, ServiceAppResidentEventDisposition, ServiceAppResidentEventInboxService, ServiceAppResidentEventList, type ServiceAppResidentEventScope, ServiceAppResidentEventStatus, ServiceAppResidentEventView, ServiceAppResourceRequirement, ServiceAppRuntimeService, ServiceAppRuntimeStatus, ServiceAppTerminalJobStatus, ServiceAppWitContract, SessionContextCompactionError, SessionContextCompactionErrorCode, SessionContextCompactionManager, SessionContextCompactionResult, SessionManager, SessionManagerOptions, SessionMessageCursorError, SessionMessagePage, SessionModelTokenUsage, type SessionPendingInput, type SessionQueuedInput, SessionRequestManager, SessionRequestManagerOptions, SessionSettingsError, SessionSettingsPatch, type SessionSteerQueuedInputResult, SessionTokenUsageStatus, SessionTokenUsageSummary, SessionTokenUsageTotals, SkillFrontmatter, type SkillInfo, SkillManager, type SkillScope, SubscribeEventsInput, SystemObjectReferenceError, SystemObjectReferenceErrorCode, SystemObjectReferenceManager, SystemObjectReferenceProvider, SystemObjectReferenceSnapshotSource, type TypedKey, TypedPredicate, UnavailableDesktopHost, UnsignedUpdateManifest, type Unsubscribe, UpdateBlockReason, UpdateHostKind, UpdateManifest, UpdateManifestReader, UpdateProgress, UpdateSnapshot, UpdateStatus, VerificationEvidenceRecord, VerificationRecord, VerificationRecordEntrySurface, VerificationRecordError, VerificationRecordInput, VerificationRecordList, VerificationRecordObservation, VerificationRecordRole, VerificationRecordService, VerificationRecordStatus, type WorkspaceServiceDataOwner, assertObservationJsonValue, assertObservationPredicate, buildAgentRunSendPayload, buildContextCompactionModelProjection, buildContextCompactionTimelineNcpMessage, buildLlmUsageSummary, buildLocalizedTextMap, buildNextclawNcpRunContext, buildObservationEventModelMessage, buildServiceActionId, buildSessionRequestCompletionMessage, capabilityGrantCovers, createAgentRuntimeSessionRequestDispatcher, createAgentRuntimeSessionRequestSourceNotifier, createAssetTools, createCapabilityDeclarationFingerprint, createContextCompactionMessageId, createContextWindowSignature, createCronJobSystemObjectProvider, createDesktopHostError, createInboxDeliverySystemObjectProvider, createLlmUsageRecord, createPanelAppAgentGrantRequest, createPanelAppClientGrantRequest, createServiceActionGrantRequest, createServiceAppAgentSlotGrantRequest, createServiceAppModelSlotGrantRequest, createTypedKey, describeAgentRuntimeSessionTypes, dispatchAgentRuntimeSessionRequest, dispatchChannelReplyRoute, dispatchPromptOverNcp, dispatchPromptOverNcpResult, evaluateObservationEventAdmission, evaluatePortableRuntimeAcceptance, evaluatePortableRuntimeAcceptanceArtifact, eventKeys, getAutomaticUpdateCheckDelay, getCapabilityGrantKey, getServiceActionName, getServiceAppManifestPath, getUiContentParamsBootstrapScript, getUnsignedUpdateManifest, hasLlmUsageTelemetry, ingressKeys, injectUiContentParamsBootstrap, isAppDataError, isAppPackageError, isContextCompactionProjectionMessage, isContextCompactionTimelineMessage, isContextWindowSnapshot, isInboxDeliveryError, isPanelAppAgentCapability, isPanelAppError, isPreferenceError, isProjectError, isProjectObservationError, isReplyCapableChannel, isServiceAppError, isSessionContextCompactionError, isSessionMessageCursorError, isSessionSettingsError, isSystemObjectReferenceError, listExtensionChannelIds, listServiceAppManifestActions, matchesCapabilityGrantFilter, matchesObservationPredicate, mergeServiceAppRuntimeActions, normalizeAgentRuntimeSessionTypeIcon, normalizeCapabilityGrantRequest, normalizeLlmUsageModel, normalizeOptionalString, normalizePortableRuntimeEnvironment, parseObservationDuration, parsePortableRuntimeAcceptanceEvidenceArtifact, parseServiceAppManifest, parseSkillFrontmatter, presentPortableRuntimeAcceptanceDefinition, readContextCompactionCheckpoint, readContextWindowEventSessionId, readJsonPointer, readLatestContextCompactionCheckpoint, readLearningLoopRuntimeConfig, readMetadataModel, readMetadataThinking, readServiceActionTargetId, readServiceAppManifest, readServiceAppSlotTarget, resolveAgentRuntimeEntries, resolveAutomaticUpdateCheckIntervalMs, resolveChannelReplyRoute, resolveEffectiveModel, resolveLegacyEventType, resolvePortableRuntimeAcceptanceLocale, resolveSessionChannelContext, runGatewayInboundLoop, runNextclawTask, sanitizeLlmUsage, serializeContextTail, serializeUnsignedUpdateManifest, shouldRefreshContextWindowDuringStream, shouldRefreshContextWindowImmediately, startPromptOverNcpExecution, stripSkillFrontmatter, syncSessionThinkingPreference, toBoundedJson, toNcpMessages, waitForAgentRuntimeSessionReply };
+export { AUTOMATIC_UPDATE_CHECK_INTERVAL_MS, AccessLoginResult, AccessManager, AccessManagerOptions, AccessPasswordStatus, AccessPrincipal, AccessRole, AccessSessionRecord, AccessSessionState, AgentManager, AgentManagerOptions, AgentRunClient, type AgentRunReply, type AgentRunReplyOptions, AgentRunSession, type AgentRunStreamOptions, type AgentRuntimeEntry, type AgentRuntimeProviderRegistration, AgentRuntimeSessionRequestDispatcherOptions, type AgentRuntimeSessionTypeCatalog, type AgentRuntimeSessionTypeDescribeParams, AgentRuntimeSessionTypeIcon, type AgentRuntimeSessionTypeOption, AgentRuntimeSessionTypeProvider, AgentServiceActionCaller, AppDataDeleteResult, AppDataDiagnostic, AppDataEntry, AppDataError, AppDataErrorCode, AppDataLifecycle, AppDataList, AppDataManager, AppDataSource, type AppDocumentGrantMutationResult, type AppEventEmitOptions, type AppEventEnvelope, type AppEventHandler, type AppEventKey, type AppInstalledPermissionState, AppPackageComponentKind, AppPackageComponentSource, AppPackageComponentSourceList, AppPackageComponentView, AppPackageConflict, AppPackageDependencyBinding, AppPackageDependencyBindingInput, AppPackageDependencyCandidate, AppPackageDependencyCycle, AppPackageDependencyDiagnostic, AppPackageDependencyDiagnosticCode, AppPackageDependencyView, AppPackageError, AppPackageErrorCode, AppPackageHostTarget, AppPackageList, AppPackageManager, AppPackageOperationAction, AppPackageOperationInput, AppPackageOperationList, AppPackageOperationResult, AppPackageOperationStatus, AppPackageOperationView, AppPackageReadiness, AppPackageReadinessRequirement, AppPackageReadinessStatus, AppPackageRuntimeHooks, AppPackageSecretReadiness, AppPackageSecretSlotView, AppPackageSecretStatus, AppPackageUnavailableDiagnostic, AppPackageUninstallRollback, AppPackageView, type AssetApi, AutomationManager, AutomationManagerOptions, BindContextInput, type BuildAgentRunSendPayloadParams, BuildContextTailInput, BuiltinNarpRuntimeProviderService, CONTEXT_COMPACTION_CONTINUATION_TEXT, CONTEXT_COMPACTION_PROJECTION_KIND, CONTEXT_COMPACTION_PROJECTION_METADATA_KEY, CONTEXT_COMPACTION_SYSTEM_PREAMBLE, CONTEXT_COMPACTION_TIMELINE_KIND, CapabilityGrant, CapabilityGrantDecision, CapabilityGrantFilter, CapabilityGrantLegacyMigrationService, CapabilityGrantListener, CapabilityGrantManager, CapabilityGrantRequest, CapabilityGrantResource, CapabilityGrantRevocationListener, CapabilityGrantStore, CapabilityGrantSubject, CapabilityProviderView, ChannelManager, ChannelReplyRouterDispatchParams, CommandRegistry, ConfigManager, ConfigManagerOptions, ConfigManagerRuntimeHooks, ConfigMutationResult, ContextBinding, type ContextBlock, ContextCompactionJournalRecoveryService, ContextCompactionModelProjection, ContextCompactionPreflightBeginResult, ContextCompactionPreflightResult, ContextCompactionPreflightService, ContextCompactionTimelineCheckpoint, ContextCompactionTrigger, type ContextProvider, type ContextProviderRequest, Contribution, CreateAgentRunSessionParams, CreateInboxDeliveryInput, CreateProjectInput, CreateProjectWorkItemInput, CreateProjectWorkStateInput, DEFAULT_AGENT_RUNTIME_ENTRY_ID, DEFAULT_SERVICE_ACTION_RISK, DESKTOP_HOST_ACCESS, DESKTOP_HOST_PROTOCOL_VERSION, DesktopApplicationTarget, DesktopCapabilityError, DesktopCapabilityErrorCode, DesktopHost, DesktopHostAccess, DesktopHostCaller, DesktopHostCapabilityDeclaration, DesktopHostCapabilityManager, DesktopHostEvent, DesktopHostEventListener, DesktopHostManifest, DesktopHostMethod, DesktopHostRequest, DesktopHostResponse, DesktopHostStatus, DesktopNodeReplService, DesktopSessionCaller, DesktopSessionStateService, DesktopSnapshotOptions, DirectPromptDispatchExecution, DirectPromptDispatchParams, DirectPromptDispatchResult, type Disposer, EventAdmissionPolicy, EventBus, type EventBusOptions, EventDelivery, EventSubscription, EventSubscriptionBudget, ExtensionLoadProgress, ExtensionLoadResult, ExtensionManager, type ExtensionRuntimeStatus, FeatureControlsService, GatewayInboundLoopRuntime, GatewayInboundProcessor, type IContextRegistry, type IKernel, type IMcpRegistry, type IModelRegistry, type INextclawAgent, type INextclawAgentRegistry, type INextclawAgentSessions, type INextclawContributionRegistry, type INextclawHarness, type INextclawRun, type INextclawSession, type INextclawSessionRegistry, type IRuntimeRegistry, type IToolRegistry, InboxDeliveryError, InboxDeliveryErrorCode, InboxDeliveryManager, InboxDeliveryManagerOptions, Ingress, type IngressContext, type IngressEnvelope, type IngressHandler, InstallationKind, InstalledSkillDetail, InstalledSkillSummary, InstalledSkillsList, JsonPointer, JsonValue, type Key, type LLMResponse, type LLMStreamEvent, type LearningLoopRuntimeConfig, type LeasedResidentEvent, LegacyVerificationRecord, LlmProviderManager, LlmProviderRuntime, LlmUsageManager, LlmUsageManagerOptions, LlmUsageRecord, LlmUsageSnapshot, LlmUsageStats, LlmUsageStore, LlmUsageStoreOptions, LlmUsageSummary, LocalizedTextMap, MAX_INBOX_DELIVERY_CONTENT_LENGTH, type McpCatalogFilter, McpManager, type McpServerDefinition, type McpServerRecord, McpServiceAppRuntimeService, type McpToolCallInput, type McpToolCatalogEntry, type ModelChatInput, NARP_HTTP_RUNTIME_KIND, NARP_STDIO_RUNTIME_KIND, NEXTCLAW_TIMELINE_KIND_METADATA_KEY, NcpAgentSessionJournalStore, type NcpEndpointEvent, type NcpMessage, type NcpTool, type NextclawAgentDefinition, type NextclawContributionDescriptor, NextclawHarness, NextclawHarnessError, type NextclawHarnessErrorCode, type NextclawHarnessOptions, NextclawKernel, NextclawKernelOptions, NextclawNcpResolvedAgentProfile, NextclawNcpResolvedRunContext, NextclawNcpRunContextResolveParams, type NextclawRunStatus, type NextclawSessionCreateInput, type NextclawSessionRunInput, type NextclawTaskInput, type NextclawTaskResult, ObservationCapabilityDescriptor, ObservationContextTail, ObservationEvent, ObservationEventAdmissionDecision, ObservationExtensionRuntime, ObservationManager, ObservationManagerOptions, ObservationRef, ObservationRelationshipStatus, ObservationState, ObservationTarget, ObservedActivity, ObservedArtifact, ObservedArtifactCategory, ObservedProjectContext, ObservedProjectContextReference, ObservedProjectRun, ObservedRequest, ObservedSignal, ObservedSkill, ObservedWorkItem, ObservedWorkItemSchedule, ObservedWorkflow, ObservedWorkflowStage, PANEL_APP_AGENT_CAPABILITIES, PORTABLE_RUNTIME_ACCEPTANCE_CONTRACT, PORTABLE_RUNTIME_ACCEPTANCE_CONTRACT_FINGERPRINT, PORTABLE_RUNTIME_ACCEPTANCE_LOCALES, PORTABLE_RUNTIME_ACCEPTANCE_PLATFORMS, PORTABLE_RUNTIME_ACCEPTANCE_PRESENTATION, PORTABLE_RUNTIME_ACCEPTANCE_REFERENCE_APP_ID, PROJECT_OBSERVATION_PROTOCOL, PROJECT_TEMPLATE_IDS, PROJECT_WORK_ATTENTION_VALUES, PROJECT_WORK_STATE_CATEGORIES, PROVIDER_MODEL_CATALOG_REFRESH_INTERVAL_MS, PanelAppAgentCapability, PanelAppAgentGenerateObjectInput, PanelAppAgentGenerateObjectRequest, PanelAppAgentGenerateObjectResult, PanelAppAgentRunClient, PanelAppAgentSendPayload, PanelAppAgentSendRequest, PanelAppAgentSendResult, PanelAppAssetTokenService, PanelAppBridgeSession, PanelAppCapabilityGrant, PanelAppCapabilityGrantCaller, PanelAppClientGrant, PanelAppContent, PanelAppDeleteResult, PanelAppEntry, PanelAppError, PanelAppErrorCode, PanelAppList, PanelAppManager, type PanelAppPreferencesUpdate, PanelServiceActionCaller, type PortableRunnerObservation, type PortableRuntimeAcceptanceContractView, PortableRuntimeAcceptanceDefinition, type PortableRuntimeAcceptanceDefinitionView, type PortableRuntimeAcceptanceEvaluationContext, type PortableRuntimeAcceptanceEvidence, type PortableRuntimeAcceptanceEvidenceArtifact, PortableRuntimeAcceptanceEvidenceSource, PortableRuntimeAcceptanceId, type PortableRuntimeAcceptanceIdentity, type PortableRuntimeAcceptanceIdentityResult, PortableRuntimeAcceptanceIdentityService, type PortableRuntimeAcceptanceLocale, PortableRuntimeAcceptanceManager, PortableRuntimeAcceptancePlatform, type PortableRuntimeAcceptancePresentation, type PortableRuntimeAcceptanceResult, type PortableRuntimeAcceptanceResultStatus, type PortableRuntimeAcceptanceStatusEntry, type PortableRuntimeAcceptanceStatusView, type PortableRuntimeAcceptanceSurfaceResult, type PortableRuntimeAcceptanceUnavailableIdentity, PreferenceEntry, PreferenceError, PreferenceErrorCode, PreferenceJsonValue, PreferenceManager, PreferenceManagerOptions, ProductActivityKind, ProductActivitySignal, ProductActivitySink, ProductActivitySource, type ProductFeatureControls, ProjectError, ProjectErrorCode, ProjectManager, ProjectManagerOptions, ProjectObservationDataQuality, ProjectObservationDiagnostic, ProjectObservationError, ProjectObservationEvidenceKind, ProjectObservationReference, ProjectObservationService, ProjectObservationSnapshot, ProjectObservationSourceStatus, ProjectRecord, ProjectSessionBinding, ProjectTemplate, ProjectTemplateId, ProjectWorkActivity, ProjectWorkActivityPage, ProjectWorkActivityType, ProjectWorkActor, ProjectWorkArtifactLink, ProjectWorkAttention, ProjectWorkError, ProjectWorkErrorCode, ProjectWorkItem, ProjectWorkItemDetail, ProjectWorkList, ProjectWorkManager, ProjectWorkState, ProjectWorkStateCategory, ProjectWorkSummary, type ProviderCatalogPlugin, ProviderManagerNcpLLMApi, ProviderModelCatalogEntry, ProviderModelCatalogManager, ProviderModelCatalogSnapshot, ProviderModelsDiscoverInput, type ProviderSpec, type ResidentEventInput, ResolvedAgentProfile, ResolvedDesktopApplicationTarget, SERVICE_APP_MANIFEST_FILE_NAME, ServiceAction, ServiceActionCaller, ServiceActionGrant, ServiceActionGrantRequest, ServiceActionGrantState, ServiceActionInvocationFacts, ServiceActionInvokeRequest, ServiceActionInvokeResult, ServiceActionRisk, ServiceActionRuntimeState, ServiceAppAgentCapabilitySlot, ServiceAppAiCapabilityService, ServiceAppCapabilityProvision, ServiceAppCapabilityRequirement, ServiceAppDeleteResult, ServiceAppError, type ServiceAppErrorCode, ServiceAppExternalRemediation, ServiceAppJobCaller, ServiceAppJobChunkEvent, ServiceAppJobEvent, type ServiceAppJobEventSink, ServiceAppJobJournalService, ServiceAppJobList, ServiceAppJobProgressEvent, type ServiceAppJobScope, ServiceAppJobStatus, ServiceAppJobTerminalEvent, ServiceAppJobView, ServiceAppJobWatch, ServiceAppLifecycle, ServiceAppList, ServiceAppManager, ServiceAppManifest, ServiceAppManifestAction, ServiceAppModelCapabilitySlot, ServiceAppProtocol, ServiceAppProvides, ServiceAppRecord, ServiceAppRequirements, ServiceAppResidentEventDisposition, ServiceAppResidentEventInboxService, ServiceAppResidentEventList, type ServiceAppResidentEventScope, ServiceAppResidentEventStatus, ServiceAppResidentEventView, ServiceAppResourceRequirement, ServiceAppRuntimeService, ServiceAppRuntimeStatus, ServiceAppTerminalJobStatus, ServiceAppWitContract, SessionContextCompactionError, SessionContextCompactionErrorCode, SessionContextCompactionManager, SessionContextCompactionResult, SessionManager, SessionManagerOptions, SessionMessageCursorError, SessionMessagePage, SessionModelTokenUsage, type SessionPendingInput, type SessionQueuedInput, SessionRequestManager, SessionRequestManagerOptions, SessionSettingsError, SessionSettingsPatch, type SessionSteerQueuedInputResult, SessionTokenUsageStatus, SessionTokenUsageSummary, SessionTokenUsageTotals, SkillFrontmatter, type SkillInfo, SkillManager, type SkillScope, SubscribeEventsInput, SystemObjectReferenceError, SystemObjectReferenceErrorCode, SystemObjectReferenceManager, SystemObjectReferenceProvider, SystemObjectReferenceSnapshotSource, type TypedKey, TypedPredicate, UnavailableDesktopHost, UnsignedUpdateManifest, type Unsubscribe, UpdateBlockReason, UpdateHostKind, UpdateManifest, UpdateManifestReader, UpdateProgress, UpdateProjectWorkItemInput, UpdateProjectWorkStateInput, UpdateSnapshot, UpdateStatus, VerificationEvidenceRecord, VerificationRecord, VerificationRecordEntrySurface, VerificationRecordError, VerificationRecordInput, VerificationRecordList, VerificationRecordObservation, VerificationRecordRole, VerificationRecordService, VerificationRecordStatus, type WorkspaceServiceDataOwner, assertObservationJsonValue, assertObservationPredicate, buildAgentRunSendPayload, buildContextCompactionModelProjection, buildContextCompactionTimelineNcpMessage, buildLlmUsageSummary, buildLocalizedTextMap, buildNextclawNcpRunContext, buildObservationEventModelMessage, buildServiceActionId, buildSessionRequestCompletionMessage, capabilityGrantCovers, createAgentRuntimeSessionRequestDispatcher, createAgentRuntimeSessionRequestSourceNotifier, createAssetTools, createCapabilityDeclarationFingerprint, createContextCompactionMessageId, createContextWindowSignature, createCronJobSystemObjectProvider, createDesktopHostError, createInboxDeliverySystemObjectProvider, createLlmUsageRecord, createPanelAppAgentGrantRequest, createPanelAppClientGrantRequest, createServiceActionGrantRequest, createServiceAppAgentSlotGrantRequest, createServiceAppModelSlotGrantRequest, createTypedKey, describeAgentRuntimeSessionTypes, dispatchAgentRuntimeSessionRequest, dispatchChannelReplyRoute, dispatchPromptOverNcp, dispatchPromptOverNcpResult, evaluateObservationEventAdmission, evaluatePortableRuntimeAcceptance, evaluatePortableRuntimeAcceptanceArtifact, eventKeys, getAutomaticUpdateCheckDelay, getCapabilityGrantKey, getServiceActionName, getServiceAppManifestPath, getUiContentParamsBootstrapScript, getUnsignedUpdateManifest, hasLlmUsageTelemetry, ingressKeys, injectUiContentParamsBootstrap, isAppDataError, isAppPackageError, isContextCompactionProjectionMessage, isContextCompactionTimelineMessage, isContextWindowSnapshot, isInboxDeliveryError, isPanelAppAgentCapability, isPanelAppError, isPreferenceError, isProjectError, isProjectObservationError, isProjectWorkError, isReplyCapableChannel, isServiceAppError, isSessionContextCompactionError, isSessionMessageCursorError, isSessionSettingsError, isSystemObjectReferenceError, listExtensionChannelIds, listServiceAppManifestActions, matchesCapabilityGrantFilter, matchesObservationPredicate, mergeServiceAppRuntimeActions, normalizeAgentRuntimeSessionTypeIcon, normalizeCapabilityGrantRequest, normalizeLlmUsageModel, normalizeOptionalString, normalizePortableRuntimeEnvironment, parseObservationDuration, parsePortableRuntimeAcceptanceEvidenceArtifact, parseServiceAppManifest, parseSkillFrontmatter, presentPortableRuntimeAcceptanceDefinition, readContextCompactionCheckpoint, readContextWindowEventSessionId, readJsonPointer, readLatestContextCompactionCheckpoint, readLearningLoopRuntimeConfig, readMetadataModel, readMetadataThinking, readServiceActionTargetId, readServiceAppManifest, readServiceAppSlotTarget, resolveAgentRuntimeEntries, resolveAutomaticUpdateCheckIntervalMs, resolveChannelReplyRoute, resolveEffectiveModel, resolveLegacyEventType, resolvePortableRuntimeAcceptanceLocale, resolveSessionChannelContext, runGatewayInboundLoop, runNextclawTask, sanitizeLlmUsage, serializeContextTail, serializeUnsignedUpdateManifest, shouldRefreshContextWindowDuringStream, shouldRefreshContextWindowImmediately, startPromptOverNcpExecution, stripSkillFrontmatter, syncSessionThinkingPreference, toBoundedJson, toNcpMessages, waitForAgentRuntimeSessionReply };
 //# sourceMappingURL=index.d.ts.map