@nextclaw/kernel 0.6.23 → 0.6.25

package/dist/index.js

@@ -3,20 +3,22 @@ import { n as getUnsignedUpdateManifest, r as serializeUnsignedUpdateManifest, t
 import { createRequire } from "node:module";
 import { APP_NAME, AgentRouteResolver, BUILTIN_MAIN_AGENT_ID, CLEAR_THINKING_TOKENS, CONTEXT_COMPACTION_METADATA_KEY, ConfigSchema, ContextCompactionService, ContextWindowBudgetService, CronService, CronTool, DEFAULT_PANELS_DIR, DEFAULT_SERVICE_APPS_DIR, DEFAULT_SESSION_SEARCH_LIMIT, DEFAULT_WORKSPACE_REPOSITORY_IDENTITY_RESOLVER, EditFileTool, ExecTool, ExtensionChannelAdapter, GatewayTool, InputBudgetPruner, LLMProvider, ListDirTool, LiteLLMProvider, MAX_SESSION_SEARCH_LIMIT, MemoryGetTool, MemorySearchTool, MemoryStore, MessageBus, MessageTool, ProviderModelDiscoveryService, ProviderRegistry, ReadFileTool, RequestedSkillsMetadataReader, SILENT_REPLY_TOKEN, SessionProjectContextResolver, SessionSearchService, SkillsLoader, THINKING_LEVELS, ViewImageTool, WebFetchTool, WebSearchTool, WriteFileTool, buildCompressingCompactionCheckpoint, buildConfigSchema, buildContextWindowSnapshot, buildReloadPlan, buildSessionRequestToolResult, buildToolCatalogEntries, createAgentProfile, createAssistantStreamDeltaControlMessage, createAssistantStreamResetControlMessage, createCompletedSessionRequest, createFailedSessionRequest, createRunningSessionRequest, createRuntimeChildEnv, createTypingStopControlMessage, diffConfigPaths, ensureDir, estimateInputTokens, evaluateSilentReply, expandHome, findEffectiveAgentProfile, getConfigPath, getDataDir, getDataPath, getSessionsPath, getWorkspacePath, getWorkspacePathFromConfig, isNextclawControlMessage, loadConfig, mergeExtensionConfigView, modelSupportsVision, normalizeAgentProfileId, normalizeInlineSecretRefs, normalizeModelThinkingCapability, normalizeProviderModelConfig, normalizeToolParams, parseAgentScopedSessionKey, parseThinkingLevel, readCompressedContextCompactionCheckpoint, readOptionalString, readParentSessionId, readSessionProjectRoot, redactConfigObject, removeAgentProfile, resolveConfigSecrets, resolveDefaultAgentProfileId, resolveEffectiveAgentProfiles, resolveNextclawSelfManageGuidePaths, resolveProviderRuntime, resolveSessionProjectContext, resolveSessionWorkspacePath, resolveThinkingLevel, safeFilename, sanitizeOutboundAssistantContent, saveConfig, summarizeSessionRequestTask, toExtensionConfigView, updateAgentProfile } from "@nextclaw/core";
 import { NCP_AI_EXECUTION_METADATA_KEY, NCP_INTERNAL_VISIBILITY_METADATA_KEY, NcpEventType, createUnavailableNcpAiExecutionMetadata, isHiddenNcpMessage, normalizeAssistantText, readNcpAiExecutionMetadata, sanitizeAssistantReplyTags } from "@nextclaw/ncp";
-import { CHAT_CONTINUATION_TARGET_MESSAGE_METADATA_KEY, CHAT_CONVERSATION_EXCERPT_TOKEN_KIND, CHAT_INLINE_TOKENS_METADATA_KEY, CHAT_INLINE_TOKENS_SCHEMA_VERSION, CHAT_PROJECT_TOKEN_KIND, CHAT_SESSION_MATERIALIZATION_METADATA_KEY, CHAT_WORKSPACE_DIRECTORY_TOKEN_KIND, CHAT_WORKSPACE_EXCERPT_TOKEN_KIND, CHAT_WORKSPACE_FILE_TOKEN_KIND, EventBus, INBOX_DELIVERY_SESSION_METADATA_KEY, Ingress, PANEL_APP_INLINE_HOST_CONTRACT, PANEL_APP_SCROLL_RESTORATION_CONTRACT, UI_CONTENT_PARAMS_HOST_CONTRACT, eventKeys, ingressKeys, isRuntimeDefaultModelValue, isSilentReplyNcpMessage, normalizeRuntimeModelSelectionMode, readInlineContentHeight, readUiContentParams } from "@nextclaw/shared";
-import { LocalAssetStore, buildAssetContentPath, buildNcpUserContent, buildOpenAiFunctionTool, ncpMessageToOpenAiMessages, validateToolArgs } from "@nextclaw/ncp-agent-runtime";
+import { CHAT_CONTINUATION_TARGET_MESSAGE_METADATA_KEY, CHAT_CONVERSATION_EXCERPT_TOKEN_KIND, CHAT_INLINE_TOKENS_METADATA_KEY, CHAT_INLINE_TOKENS_SCHEMA_VERSION, CHAT_PROJECT_TOKEN_KIND, CHAT_SESSION_MATERIALIZATION_METADATA_KEY, CHAT_SYSTEM_OBJECT_TOKEN_KIND, CHAT_WORKSPACE_DIRECTORY_TOKEN_KIND, CHAT_WORKSPACE_EXCERPT_TOKEN_KIND, CHAT_WORKSPACE_FILE_TOKEN_KIND, EventBus, Ingress, PANEL_APP_INLINE_HOST_CONTRACT, PANEL_APP_SCROLL_RESTORATION_CONTRACT, SYSTEM_OBJECT_REFERENCE_DEFAULT_LIMIT, SYSTEM_OBJECT_REFERENCE_MAX_LIMIT, SYSTEM_OBJECT_TYPE_CRON_JOB, SYSTEM_OBJECT_TYPE_INBOX_DELIVERY, UI_CONTENT_PARAMS_HOST_CONTRACT, createSystemObjectReferenceUri, eventKeys, ingressKeys, isRuntimeDefaultModelValue, isSilentReplyNcpMessage, normalizeRuntimeModelSelectionMode, parseSystemObjectReferenceUri, readInlineContentHeight, readSystemObjectResolvedReference, readUiContentParams } from "@nextclaw/shared";
+import { LocalAssetStore, buildAssetContentPath, buildNcpUserContent, buildOpenAiFunctionTool, isTextLikeAsset, ncpMessageToOpenAiMessages, validateToolArgs } from "@nextclaw/ncp-agent-runtime";
 import { createHash, createHmac, randomBytes, randomUUID, scryptSync, timingSafeEqual } from "node:crypto";
 import { catchError, filter, from, lastValueFrom, tap } from "rxjs";
-import { appendFileSync, chmodSync, constants, existsSync, mkdirSync, readFileSync, readdirSync, readlinkSync, realpathSync, renameSync, rmSync, writeFileSync } from "node:fs";
-import { basename, delimiter, dirname, extname, isAbsolute, join, normalize, relative, resolve, sep } from "node:path";
-import { execFileSync, spawn } from "node:child_process";
+import { appendFileSync, chmodSync, constants, createReadStream, existsSync, mkdirSync, readFileSync, readdirSync, readlinkSync, realpathSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import path, { basename, delimiter, dirname, extname, isAbsolute, join, normalize, relative, resolve, sep } from "node:path";
 import { access, appendFile, mkdir, mkdtemp, open, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
+import { AppHomeService, AppInstallationService, AppManifestService, AppRegistryService, isAppComponentManifestBundle } from "@nextclaw/app-runtime";
+import { execFileSync, spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import { BUILTIN_PROVIDER_PLUGINS } from "@nextclaw/runtime";
 import { McpRegistryService, McpServerLifecycleManager } from "@nextclaw/mcp";
 import { McpNcpToolRegistryAdapter } from "@nextclaw/ncp-mcp";
 import { DefaultNcpAgentConversationStateManager, insertMessageByTimeline } from "@nextclaw/ncp-toolkit";
 import { parse } from "yaml";
+import { createInterface } from "node:readline";
 import { HttpRuntimeConfigResolver, HttpRuntimeNcpAgentRuntime } from "@nextclaw/nextclaw-ncp-runtime-http-client";
 import { StdioRuntimeConfigResolver, StdioRuntimeNcpAgentRuntime, probeStdioRuntime } from "@nextclaw/nextclaw-ncp-runtime-stdio-client";
 import { DefaultNcpAgentRuntime } from "@nextclaw/ncp-agent-runtime-next";
@@ -1231,7 +1233,7 @@ const SESSION_ACTIVITY_PREVIEW_STATUS_KINDS = new Set([
 	"run-failed",
 	"run-interrupted"
 ]);
-function isRecord$15(value) {
+function isRecord$16(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function readOptionalString$12(value) {
@@ -1240,7 +1242,7 @@ function readOptionalString$12(value) {
 	return trimmed.length > 0 ? trimmed : void 0;
 }
 function readSessionActivityPreviewMetadata(value) {
-	if (!isRecord$15(value)) return null;
+	if (!isRecord$16(value)) return null;
 	const state = value.state;
 	const timestamp = readOptionalString$12(value.timestamp);
 	if (!SESSION_ACTIVITY_PREVIEW_STATES.has(state) || !timestamp) return null;
@@ -1334,7 +1336,7 @@ var SessionActivityPreviewEventService = class {
 //#endregion
 //#region src/managers/agent-run-session-command.manager.ts
 const CONTINUATION_PROMPT = "Continue from where you stopped. Preserve completed work and avoid repeating it.";
-function isRecord$14(value) {
+function isRecord$15(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function hasSendableMessageContent(message) {
@@ -1342,7 +1344,7 @@ function hasSendableMessageContent(message) {
 }
 function readSessionActivityState(metadata) {
 	const preview = metadata?.[SESSION_ACTIVITY_PREVIEW_METADATA_KEY];
-	return isRecord$14(preview) && typeof preview.state === "string" ? preview.state : null;
+	return isRecord$15(preview) && typeof preview.state === "string" ? preview.state : null;
 }
 var AgentRunSessionCommandManager = class {
 	pendingCommands = /* @__PURE__ */ new Map();
@@ -2503,6 +2505,318 @@ var AutomationManager = class extends CronService {
 	}
 };
 //#endregion
+//#region src/types/app-package.types.ts
+var AppPackageError = class extends Error {
+	constructor(code, message) {
+		super(message);
+		this.code = code;
+		this.name = "AppPackageError";
+	}
+};
+function isAppPackageError(error) {
+	return error instanceof AppPackageError;
+}
+//#endregion
+//#region src/utils/app-engine-version.utils.ts
+function satisfiesAppEngineVersion(version, range) {
+	const parsedVersion = parseVersion(version);
+	const normalizedRange = range.trim();
+	if (!parsedVersion || !normalizedRange) return false;
+	return normalizedRange.split(/\s*\|\|\s*/).some((alternative) => satisfiesAlternative(parsedVersion, alternative.trim()));
+}
+function satisfiesAlternative(version, range) {
+	const hyphenRange = /^(\S+)\s+-\s+(\S+)$/.exec(range);
+	if (hyphenRange) {
+		const lower = parseVersion(hyphenRange[1] ?? "");
+		const upper = parseVersion(hyphenRange[2] ?? "");
+		return Boolean(lower && upper && compareVersions(version, lower) >= 0 && compareVersions(version, upper) <= 0);
+	}
+	const comparators = range.split(/\s+/).filter(Boolean);
+	return comparators.length > 0 && comparators.every((comparator) => satisfiesComparator(version, comparator));
+}
+function satisfiesComparator(version, comparator) {
+	if (comparator === "*" || comparator.toLowerCase() === "x") return true;
+	if (comparator.startsWith("^")) {
+		const lower = parseVersion(comparator.slice(1));
+		if (!lower) return false;
+		const upper = lower.major > 0 ? {
+			major: lower.major + 1,
+			minor: 0,
+			patch: 0,
+			prerelease: []
+		} : lower.minor > 0 ? {
+			major: 0,
+			minor: lower.minor + 1,
+			patch: 0,
+			prerelease: []
+		} : {
+			major: 0,
+			minor: 0,
+			patch: lower.patch + 1,
+			prerelease: []
+		};
+		return compareVersions(version, lower) >= 0 && compareVersions(version, upper) < 0;
+	}
+	if (comparator.startsWith("~")) {
+		const lower = parseVersion(comparator.slice(1));
+		if (!lower) return false;
+		const upper = {
+			major: lower.major,
+			minor: lower.minor + 1,
+			patch: 0,
+			prerelease: []
+		};
+		return compareVersions(version, lower) >= 0 && compareVersions(version, upper) < 0;
+	}
+	if (/[xX*]/.test(comparator)) {
+		const parts = comparator.replace(/^v/, "").split(".");
+		const expected = [
+			version.major,
+			version.minor,
+			version.patch
+		];
+		return parts.every((part, index) => /^(x|\*)$/i.test(part) || Number(part) === expected[index]);
+	}
+	const match = /^(>=|<=|>|<|=)?\s*(.+)$/.exec(comparator);
+	const target = parseVersion(match?.[2] ?? "");
+	if (!target) return false;
+	const compared = compareVersions(version, target);
+	switch (match?.[1] ?? "=") {
+		case ">=": return compared >= 0;
+		case "<=": return compared <= 0;
+		case ">": return compared > 0;
+		case "<": return compared < 0;
+		default: return compared === 0;
+	}
+}
+function parseVersion(raw) {
+	const match = /^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/.exec(raw.trim());
+	if (!match) return null;
+	return {
+		major: Number(match[1]),
+		minor: Number(match[2]),
+		patch: Number(match[3]),
+		prerelease: match[4] ? match[4].split(".").map((part) => /^\d+$/.test(part) ? Number(part) : part) : []
+	};
+}
+function compareVersions(left, right) {
+	for (const field of [
+		"major",
+		"minor",
+		"patch"
+	]) if (left[field] !== right[field]) return left[field] > right[field] ? 1 : -1;
+	if (left.prerelease.length === 0 || right.prerelease.length === 0) return Number(left.prerelease.length === 0) - Number(right.prerelease.length === 0);
+	const length = Math.max(left.prerelease.length, right.prerelease.length);
+	for (let index = 0; index < length; index += 1) {
+		const leftPart = left.prerelease[index];
+		const rightPart = right.prerelease[index];
+		if (leftPart === void 0 || rightPart === void 0) return leftPart === void 0 ? -1 : 1;
+		if (leftPart === rightPart) continue;
+		if (typeof leftPart === "number" && typeof rightPart === "number") return leftPart > rightPart ? 1 : -1;
+		if (typeof leftPart === "number") return -1;
+		if (typeof rightPart === "number") return 1;
+		return leftPart.localeCompare(rightPart);
+	}
+	return 0;
+}
+//#endregion
+//#region src/managers/app-package.manager.ts
+const EMPTY_RUNTIME_HOOKS = {
+	assertCanActivate: async () => void 0,
+	beforeDeactivate: async () => void 0,
+	beforeUninstall: async () => void 0
+};
+var AppPackageManager = class {
+	installationService;
+	manifestService = new AppManifestService();
+	registryService;
+	runtimeHooks = EMPTY_RUNTIME_HOOKS;
+	builtInBootstrapPromise;
+	constructor(params) {
+		this.params = params;
+		const appHomeService = new AppHomeService(params.appHomeDirectory);
+		this.installationService = new AppInstallationService(appHomeService);
+		this.registryService = new AppRegistryService(appHomeService);
+	}
+	installRuntimeHooks = (hooks) => {
+		this.runtimeHooks = hooks;
+	};
+	listPackages = async () => {
+		await this.ensureBuiltInPackages();
+		const records = await this.registryService.listApps();
+		return { entries: await Promise.all(records.map(async (record) => await this.toPackageView(await this.installationService.info(record.appId)))) };
+	};
+	getPackage = async (appId) => {
+		await this.ensureBuiltInPackages();
+		try {
+			return await this.toPackageView(await this.installationService.info(appId));
+		} catch (error) {
+			if (error instanceof Error && error.message.includes("未找到已安装应用")) throw new AppPackageError("APP_PACKAGE_NOT_FOUND", error.message);
+			throw error;
+		}
+	};
+	listActiveComponentSources = async () => {
+		await this.ensureBuiltInPackages();
+		return (await this.registryService.listApps()).filter((record) => record.enabled).flatMap((record) => {
+			const version = record.installedVersions[record.activeVersion];
+			if (!version || version.manifestSchemaVersion !== 2) return [];
+			return (version.components ?? []).map((component) => ({
+				kind: component.kind,
+				id: component.id,
+				packageId: record.appId,
+				packageVersion: record.activeVersion,
+				sourcePath: component.componentDirectory,
+				manifestPath: component.manifestPath,
+				dataDirectory: record.dataDirectory
+			}));
+		});
+	};
+	install = async (source, registryUrl) => {
+		const result = await this.installationService.install(source, { registryUrl });
+		return await this.getPackage(result.appId);
+	};
+	enable = async (appId) => {
+		const app = await this.getPackage(appId);
+		if (app.enabled) return app;
+		await this.assertEngineCompatibility(appId);
+		const sources = this.toComponentSources(app);
+		await this.runtimeHooks.assertCanActivate(sources);
+		await this.installationService.setEnabled(appId, true);
+		return await this.getPackage(appId);
+	};
+	disable = async (appId) => {
+		const app = await this.getPackage(appId);
+		if (!app.enabled) return app;
+		await this.runtimeHooks.beforeDeactivate(this.toComponentSources(app));
+		await this.installationService.setEnabled(appId, false);
+		return await this.getPackage(appId);
+	};
+	update = async (appId, options = {}) => {
+		const current = await this.getPackage(appId);
+		if (current.enabled) await this.runtimeHooks.beforeDeactivate(this.toComponentSources(current));
+		const result = await this.installationService.update(appId, options);
+		try {
+			await this.assertEngineCompatibility(appId);
+			const updated = await this.getPackage(appId);
+			if (updated.enabled) await this.runtimeHooks.assertCanActivate(this.toComponentSources(updated));
+			return {
+				package: updated,
+				result
+			};
+		} catch (error) {
+			if (result.updated) await this.installationService.rollback(appId, result.previousVersion);
+			throw error;
+		}
+	};
+	rollback = async (appId, version) => {
+		const current = await this.getPackage(appId);
+		if (current.enabled) await this.runtimeHooks.beforeDeactivate(this.toComponentSources(current));
+		const result = await this.installationService.rollback(appId, version);
+		try {
+			await this.assertEngineCompatibility(appId);
+			const rolledBack = await this.getPackage(appId);
+			if (rolledBack.enabled) await this.runtimeHooks.assertCanActivate(this.toComponentSources(rolledBack));
+			return {
+				package: rolledBack,
+				result
+			};
+		} catch (error) {
+			if (result.rolledBack) await this.installationService.rollback(appId, result.previousVersion);
+			throw error;
+		}
+	};
+	uninstall = async (appId, purgeData) => {
+		const current = await this.getPackage(appId);
+		if (current.enabled) await this.runtimeHooks.beforeDeactivate(this.toComponentSources(current));
+		await this.runtimeHooks.beforeUninstall(this.toComponentSources(current));
+		return await this.installationService.uninstall(appId, purgeData);
+	};
+	ensureBuiltInPackages = async () => {
+		if (!this.params.builtInAppsDirectory) return;
+		this.builtInBootstrapPromise ??= this.installBuiltInPackages();
+		await this.builtInBootstrapPromise;
+	};
+	installBuiltInPackages = async () => {
+		const builtInDirectory = path.resolve(this.params.builtInAppsDirectory);
+		let entries;
+		try {
+			entries = await readdir(builtInDirectory, { withFileTypes: true });
+		} catch (error) {
+			if (this.isMissingFileError(error)) return;
+			throw error;
+		}
+		for (const entry of entries.filter((item) => item.isDirectory() && !item.name.startsWith("."))) {
+			const appDirectory = path.join(builtInDirectory, entry.name);
+			const manifest = await this.manifestService.load(appDirectory);
+			if (!isAppComponentManifestBundle(manifest)) continue;
+			if ((await this.registryService.getApp(manifest.manifest.id))?.installedVersions[manifest.manifest.version]) continue;
+			await this.installationService.install(appDirectory);
+		}
+	};
+	toPackageView = async (info) => {
+		const activeVersion = info.installedVersions.find((version) => version.version === info.activeVersion);
+		if (!activeVersion) throw new AppPackageError("APP_PACKAGE_OPERATION_FAILED", `应用 ${info.appId} 缺少激活版本 ${info.activeVersion}。`);
+		const packagePresentation = await this.readManifestPresentation(path.join(activeVersion.installDirectory, "manifest.json"));
+		return {
+			id: info.appId,
+			name: info.name,
+			description: info.description,
+			nameI18n: packagePresentation.nameI18n,
+			descriptionI18n: packagePresentation.descriptionI18n,
+			activeVersion: info.activeVersion,
+			installedVersions: info.installedVersions.map((version) => version.version),
+			enabled: info.enabled,
+			builtIn: this.isBuiltInSource(activeVersion.sourceRef),
+			primaryPanelId: activeVersion.primaryPanelId,
+			components: await Promise.all((activeVersion.components ?? []).map(async (component) => ({
+				kind: component.kind,
+				id: component.id,
+				packageId: info.appId,
+				packageVersion: info.activeVersion,
+				sourcePath: component.componentDirectory,
+				manifestPath: component.manifestPath,
+				dataDirectory: info.dataDirectory,
+				...await this.readManifestPresentation(component.manifestPath)
+			}))),
+			dataDirectory: info.dataDirectory
+		};
+	};
+	readManifestPresentation = async (manifestPath) => {
+		const candidate = JSON.parse(await readFile(manifestPath, "utf8"));
+		return {
+			...typeof candidate.title === "string" ? { title: candidate.title } : {},
+			...typeof candidate.description === "string" ? { description: candidate.description } : {},
+			...typeof candidate.icon === "string" ? { icon: candidate.icon } : {},
+			...this.readLocalizedField(candidate, "nameI18n"),
+			...this.readLocalizedField(candidate, "titleI18n"),
+			...this.readLocalizedField(candidate, "descriptionI18n")
+		};
+	};
+	readLocalizedField = (candidate, field) => {
+		const value = candidate[field];
+		if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+		const entries = Object.entries(value).filter((entry) => typeof entry[1] === "string");
+		return entries.length > 0 ? { [field]: Object.fromEntries(entries) } : {};
+	};
+	toComponentSources = (app) => app.components.map((component) => ({ ...component }));
+	assertEngineCompatibility = async (appId) => {
+		const productVersion = this.params.productVersion?.trim();
+		if (!productVersion) return;
+		const info = await this.installationService.info(appId);
+		const activeVersion = info.installedVersions.find((version) => version.version === info.activeVersion);
+		if (!activeVersion) throw new AppPackageError("APP_PACKAGE_OPERATION_FAILED", `应用 ${appId} 缺少激活版本 ${info.activeVersion}。`);
+		const manifestBundle = await this.manifestService.load(activeVersion.installDirectory);
+		const engineRange = manifestBundle.manifest.schemaVersion === 2 ? manifestBundle.manifest.engines?.nextclaw?.trim() : void 0;
+		if (engineRange && !satisfiesAppEngineVersion(productVersion, engineRange)) throw new AppPackageError("APP_PACKAGE_INCOMPATIBLE", `应用 ${appId}@${info.activeVersion} 要求 NextClaw ${engineRange}，当前版本为 ${productVersion}。`);
+	};
+	isBuiltInSource = (sourceRef) => {
+		if (!this.params.builtInAppsDirectory) return false;
+		const relative = path.relative(path.resolve(this.params.builtInAppsDirectory), path.resolve(sourceRef));
+		return relative === "" || !relative.startsWith("..") && !path.isAbsolute(relative);
+	};
+	isMissingFileError = (error) => typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
+};
+//#endregion
 //#region src/managers/channel.manager.ts
 var ChannelManager = class {
 	channels = {};
@@ -2901,9 +3215,9 @@ var ConfigManager = class {
 			required: true,
 			automatic: false,
 			changedPaths: [...plan.restartRequired],
-			message: `Config saved. Restart manually to apply: ${plan.restartRequired.join(", ")}.`
+			message: `Config saved. Run nextclaw restart in an external terminal to apply: ${plan.restartRequired.join(", ")}.`
 		} : null;
-		const message = changedPaths.length === 0 ? "Config already matched the requested state." : pendingRestart ? changedPaths.length > plan.restartRequired.length ? "Config saved. Supported changes were applied immediately; restart manually to apply the rest." : "Config saved. Restart manually to apply changes." : "Config saved and applied.";
+		const message = changedPaths.length === 0 ? "Config already matched the requested state." : pendingRestart ? changedPaths.length > plan.restartRequired.length ? "Config saved. Supported changes were applied immediately; run nextclaw restart in an external terminal to apply the rest." : "Config saved. Run nextclaw restart in an external terminal to apply changes." : "Config saved and applied.";
 		return {
 			ok: true,
 			note: note ?? null,
@@ -4550,11 +4864,11 @@ var ExtensionManager = class {
 //#endregion
 //#region src/utils/model-message-vision.utils.ts
 const IMAGE_OMITTED_TEXT = "[Image omitted: the selected model is not configured for vision input.]";
-function isRecord$13(value) {
+function isRecord$14(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function isImageContentPart(value) {
-	if (!isRecord$13(value)) return false;
+	if (!isRecord$14(value)) return false;
 	const type = value.type;
 	return type === "image_url" || type === "input_image";
 }
@@ -4570,7 +4884,7 @@ function normalizeContentWithoutVision(content) {
 		};
 	});
 	if (!sawImage) return content;
-	const textParts = parts.filter((part) => isRecord$13(part) && part.type === "text" && typeof part.text === "string").map((part) => part.text.trim()).filter(Boolean);
+	const textParts = parts.filter((part) => isRecord$14(part) && part.type === "text" && typeof part.text === "string").map((part) => part.text.trim()).filter(Boolean);
 	if (textParts.length === parts.length) return textParts.join("\n\n");
 	return parts;
 }
@@ -5205,7 +5519,8 @@ var LlmUsageManager = class {
 };
 //#endregion
 //#region src/stores/inbox-delivery.store.ts
-const INBOX_DELIVERY_STORE_VERSION = 1;
+const INBOX_DELIVERY_STORE_VERSION = 2;
+const LEGACY_INBOX_DELIVERY_STORE_VERSION = 1;
 var InboxDeliveryStoreError = class extends Error {
 	constructor(message) {
 		super(message);
@@ -5242,15 +5557,19 @@ var InboxDeliveryStore = class {
 	};
 	parseStoreFile = (source) => {
 		const value = JSON.parse(source);
-		if (!this.isRecord(value) || value.version !== INBOX_DELIVERY_STORE_VERSION || !Array.isArray(value.deliveries) || !value.deliveries.every(this.isDelivery)) throw new InboxDeliveryStoreError("inbox delivery store has an unsupported structure");
+		if (!this.isRecord(value) || value.version !== INBOX_DELIVERY_STORE_VERSION && value.version !== LEGACY_INBOX_DELIVERY_STORE_VERSION || !Array.isArray(value.deliveries) || !value.deliveries.every((delivery) => this.isDelivery(delivery, value.version === LEGACY_INBOX_DELIVERY_STORE_VERSION))) throw new InboxDeliveryStoreError("inbox delivery store has an unsupported structure");
 		return {
 			version: INBOX_DELIVERY_STORE_VERSION,
-			deliveries: value.deliveries.map((delivery) => structuredClone(delivery))
+			deliveries: value.deliveries.map((delivery) => this.toCurrentDelivery(delivery))
 		};
 	};
-	isDelivery = (value) => {
+	isDelivery = (value, legacy) => {
 		if (!this.isRecord(value) || !this.isSource(value.source)) return false;
-		return typeof value.id === "string" && typeof value.title === "string" && (value.summary === null || typeof value.summary === "string") && typeof value.content === "string" && (value.contentType === "markdown" || value.contentType === "html") && typeof value.createdAt === "string" && typeof value.updatedAt === "string" && this.isOptionalTimestamp(value.presentedAt) && this.isOptionalTimestamp(value.readAt) && this.isOptionalTimestamp(value.archivedAt) && (value.conversationSessionId === null || typeof value.conversationSessionId === "string");
+		return typeof value.id === "string" && typeof value.title === "string" && (value.summary === null || typeof value.summary === "string") && typeof value.content === "string" && (value.contentType === "markdown" || value.contentType === "html") && typeof value.createdAt === "string" && typeof value.updatedAt === "string" && this.isOptionalTimestamp(value.presentedAt) && this.isOptionalTimestamp(value.readAt) && this.isOptionalTimestamp(value.archivedAt) && (!legacy || value.conversationSessionId === null || typeof value.conversationSessionId === "string");
+	};
+	toCurrentDelivery = (delivery) => {
+		const { conversationSessionId: _legacySessionId, ...current } = delivery;
+		return structuredClone(current);
 	};
 	isSource = (value) => this.isRecord(value) && value.kind === "agent" && this.isOptionalString(value.agentId) && this.isOptionalString(value.sessionId) && this.isOptionalString(value.toolCallId) && this.isOptionalString(value.filePath);
 	isOptionalString = (value) => value === null || typeof value === "string";
@@ -5308,8 +5627,7 @@ var InboxDeliveryManager = class {
 			updatedAt: now,
 			presentedAt: null,
 			readAt: null,
-			archivedAt: null,
-			conversationSessionId: null
+			archivedAt: null
 		};
 		const deliveries = await this.store.list();
 		await this.store.save([delivery, ...deliveries]);
@@ -5336,41 +5654,6 @@ var InboxDeliveryManager = class {
 		this.publishChange(deliveryId, "delete");
 		return true;
 	});
-	continueInChat = async (deliveryId) => await this.mutate(async () => {
-		const deliveries = await this.store.list();
-		const index = deliveries.findIndex(({ id }) => id === deliveryId);
-		if (index < 0) throw this.notFound(deliveryId);
-		const current = deliveries[index];
-		const existingSession = current.conversationSessionId ? await this.options.sessionManager.getSessionRecord(current.conversationSessionId) : null;
-		let sessionId = current.conversationSessionId;
-		let created = false;
-		if (!sessionId || !existingSession) {
-			sessionId = (await this.options.sessionManager.createSession({
-				sourceSessionMetadata: {},
-				metadataOverrides: { [INBOX_DELIVERY_SESSION_METADATA_KEY]: current.id },
-				task: `Continue discussing inbox delivery: ${current.title}`,
-				title: current.title,
-				agentId: current.source.agentId ?? void 0
-			})).sessionId;
-			created = true;
-		}
-		const now = (/* @__PURE__ */ new Date()).toISOString();
-		const delivery = {
-			...current,
-			updatedAt: now,
-			presentedAt: current.presentedAt ?? now,
-			readAt: current.readAt ?? now,
-			conversationSessionId: sessionId
-		};
-		deliveries[index] = delivery;
-		await this.store.save(deliveries);
-		this.publishChange(deliveryId, "upsert");
-		return {
-			delivery: structuredClone(delivery),
-			sessionId,
-			created
-		};
-	});
 	applyStateAction = (delivery, action, now) => {
 		switch (action) {
 			case "present": return {
@@ -5426,6 +5709,300 @@ var InboxDeliveryManager = class {
 	};
 };
 //#endregion
+//#region src/managers/system-object-reference.manager.ts
+const MAX_SYSTEM_OBJECT_SNAPSHOT_BYTES = 1024 * 1024;
+var SystemObjectReferenceError = class extends Error {
+	constructor(code, message) {
+		super(message);
+		this.code = code;
+		this.name = "SystemObjectReferenceError";
+	}
+};
+function isSystemObjectReferenceError(error) {
+	return error instanceof SystemObjectReferenceError;
+}
+function normalizedSearchText(value) {
+	return value.trim().toLocaleLowerCase();
+}
+function scoreSearchItem(item, query) {
+	if (!query) return 1;
+	const fields = [
+		item.label,
+		item.objectId,
+		item.description ?? ""
+	].map(normalizedSearchText).filter(Boolean);
+	if (fields.some((field) => field === query)) return 400;
+	if (fields.some((field) => field.startsWith(query))) return 300;
+	if (fields.some((field) => field.split(/\s+/).some((word) => word.startsWith(query)))) return 200;
+	return fields.some((field) => field.includes(query)) ? 100 : 0;
+}
+function normalizeLimit(limit) {
+	if (limit === void 0) return SYSTEM_OBJECT_REFERENCE_DEFAULT_LIMIT;
+	if (!Number.isSafeInteger(limit) || limit < 1 || limit > SYSTEM_OBJECT_REFERENCE_MAX_LIMIT) throw new SystemObjectReferenceError("SYSTEM_OBJECT_INVALID_REFERENCE", `limit must be an integer between 1 and ${SYSTEM_OBJECT_REFERENCE_MAX_LIMIT}`);
+	return limit;
+}
+const SYSTEM_OBJECT_GROUP_ICONS = new Set([
+	"calendar-clock",
+	"file",
+	"inbox"
+]);
+function normalizeDisplayText(value, field) {
+	const defaultText = value.default.trim();
+	if (!defaultText) throw new Error(`System object provider group ${field} must be non-empty.`);
+	const translations = Object.fromEntries(Object.entries(value.translations ?? {}).map(([language, text]) => [language.trim(), text.trim()]).filter(([language, text]) => language && text));
+	return {
+		default: defaultText,
+		...Object.keys(translations).length > 0 ? { translations } : {}
+	};
+}
+function normalizeProviderGroup(group) {
+	const objectType = group.objectType.trim();
+	if (!objectType || !SYSTEM_OBJECT_GROUP_ICONS.has(group.icon) || !Number.isSafeInteger(group.order)) throw new Error(`System object provider group is invalid: ${objectType}`);
+	return {
+		objectType,
+		label: normalizeDisplayText(group.label, "label"),
+		description: normalizeDisplayText(group.description, "description"),
+		icon: group.icon,
+		order: group.order
+	};
+}
+function safeSnapshotFileName(label, suffix) {
+	return `${label.trim().replace(/[^\p{L}\p{N}._-]+/gu, "-").replace(/^-+|-+$/g, "") || "system-object"}.${suffix}`;
+}
+function truncate(value, maxLength = 180) {
+	const normalized = value?.replace(/\s+/g, " ").trim() ?? "";
+	if (!normalized) return null;
+	return normalized.length <= maxLength ? normalized : `${normalized.slice(0, maxLength - 1)}…`;
+}
+function toIsoTime(value) {
+	if (typeof value !== "number" || !Number.isFinite(value)) return null;
+	const date = new Date(value);
+	return Number.isNaN(date.getTime()) ? null : date.toISOString();
+}
+var SystemObjectReferenceManager = class {
+	providers = /* @__PURE__ */ new Map();
+	resolvedCache = /* @__PURE__ */ new Map();
+	constructor(assetStore, providers = []) {
+		this.assetStore = assetStore;
+		providers.forEach((provider) => this.registerProvider(provider));
+	}
+	registerProvider = (provider) => {
+		const group = normalizeProviderGroup(provider.group);
+		const objectType = group.objectType;
+		if (this.providers.has(objectType)) throw new Error(`System object provider is invalid or already registered: ${objectType}`);
+		const registeredProvider = {
+			...provider,
+			group
+		};
+		this.providers.set(objectType, registeredProvider);
+		return () => {
+			if (this.providers.get(objectType) === registeredProvider) this.providers.delete(objectType);
+		};
+	};
+	listReferences = async (params = {}) => {
+		const query = normalizedSearchText(params.query ?? "");
+		const limit = normalizeLimit(params.limit);
+		const requestedObjectType = params.objectType?.trim();
+		if (params.objectType !== void 0 && !requestedObjectType) throw new SystemObjectReferenceError("SYSTEM_OBJECT_INVALID_REFERENCE", "objectType must be a non-empty registered system object type");
+		const requestedProvider = requestedObjectType ? this.providers.get(requestedObjectType) : void 0;
+		if (requestedObjectType && !requestedProvider) throw new SystemObjectReferenceError("SYSTEM_OBJECT_INVALID_REFERENCE", `system object provider is not registered: ${requestedObjectType}`);
+		const providers = requestedProvider ? [requestedProvider] : [...this.providers.values()];
+		const collator = new Intl.Collator(void 0, {
+			numeric: true,
+			sensitivity: "base"
+		});
+		const shouldIncludeItems = Boolean(requestedObjectType || query);
+		const visibleGroups = (await Promise.all(providers.map(async (provider) => {
+			const matches = (await provider.list()).map((item) => {
+				this.assertListItemContract(item, provider.group.objectType);
+				return {
+					item,
+					score: scoreSearchItem(item, query)
+				};
+			}).filter(({ score }) => score > 0).sort((left, right) => right.score - left.score || right.item.updatedAt.localeCompare(left.item.updatedAt) || collator.compare(left.item.label, right.item.label));
+			return {
+				...structuredClone(provider.group),
+				items: shouldIncludeItems ? matches.slice(0, limit).map(({ item }) => structuredClone(item)) : [],
+				total: matches.length
+			};
+		}))).filter((group) => !query || group.total > 0).sort((left, right) => left.order - right.order || collator.compare(left.label.default, right.label.default));
+		return {
+			groups: visibleGroups,
+			total: visibleGroups.reduce((total, group) => total + group.total, 0)
+		};
+	};
+	resolveReference = async (uri) => {
+		const parsed = parseSystemObjectReferenceUri(uri);
+		if (!parsed) throw new SystemObjectReferenceError("SYSTEM_OBJECT_INVALID_REFERENCE", `invalid system object reference: ${uri}`);
+		const provider = this.providers.get(parsed.objectType);
+		if (!provider) throw new SystemObjectReferenceError("SYSTEM_OBJECT_INVALID_REFERENCE", `system object provider is not registered: ${parsed.objectType}`);
+		const source = await provider.resolve(parsed.objectId);
+		if (!source) throw new SystemObjectReferenceError("SYSTEM_OBJECT_NOT_FOUND", `system object not found: ${uri}`);
+		this.assertSnapshotContract(source, parsed);
+		const bytes = new TextEncoder().encode(source.content);
+		if (bytes.byteLength > MAX_SYSTEM_OBJECT_SNAPSHOT_BYTES) throw new SystemObjectReferenceError("SYSTEM_OBJECT_PROVIDER_CONTRACT", `system object snapshot exceeds ${MAX_SYSTEM_OBJECT_SNAPSHOT_BYTES} bytes: ${uri}`);
+		const version = createHash("sha256").update(bytes).digest("hex");
+		const cacheKey = `${uri}@${version}`;
+		const cached = this.resolvedCache.get(cacheKey);
+		if (cached && await this.assetStore.statRecord(cached.assetUri)) return structuredClone(cached);
+		const asset = await this.assetStore.putBytes({
+			bytes,
+			fileName: source.fileName,
+			mimeType: source.mimeType
+		});
+		const resolved = {
+			...structuredClone(source.item),
+			version,
+			assetUri: asset.uri,
+			fileName: asset.fileName,
+			mimeType: asset.mimeType,
+			sizeBytes: asset.sizeBytes
+		};
+		this.resolvedCache.set(cacheKey, resolved);
+		return structuredClone(resolved);
+	};
+	assertSnapshotContract = (source, parsed) => {
+		const expectedUri = createSystemObjectReferenceUri(parsed.objectType, parsed.objectId);
+		if (source.item.uri !== expectedUri || source.item.objectType !== parsed.objectType || source.item.objectId !== parsed.objectId || !source.item.label.trim() || !source.fileName.trim() || !source.content.trim() || !isTextLikeAsset({
+			mimeType: source.mimeType,
+			fileName: source.fileName
+		})) throw new SystemObjectReferenceError("SYSTEM_OBJECT_PROVIDER_CONTRACT", `system object provider returned an invalid snapshot: ${expectedUri}`);
+	};
+	assertListItemContract = (item, objectType) => {
+		const expectedUri = createSystemObjectReferenceUri(objectType, item.objectId);
+		if (item.objectType !== objectType || item.uri !== expectedUri || !item.label.trim() || !item.updatedAt.trim()) throw new SystemObjectReferenceError("SYSTEM_OBJECT_PROVIDER_CONTRACT", `system object provider returned an invalid list item: ${item.uri}`);
+	};
+};
+function createInboxDeliverySystemObjectProvider(manager) {
+	const toItem = (delivery) => ({
+		uri: createSystemObjectReferenceUri(SYSTEM_OBJECT_TYPE_INBOX_DELIVERY, delivery.id),
+		objectType: SYSTEM_OBJECT_TYPE_INBOX_DELIVERY,
+		objectId: delivery.id,
+		label: delivery.title,
+		description: truncate(delivery.summary),
+		updatedAt: delivery.updatedAt
+	});
+	return {
+		group: {
+			objectType: SYSTEM_OBJECT_TYPE_INBOX_DELIVERY,
+			label: {
+				default: "Inbox Reports",
+				translations: {
+					en: "Inbox Reports",
+					zh: "收件箱报告"
+				}
+			},
+			description: {
+				default: "Reference reports and delivered content saved by NextClaw.",
+				translations: {
+					en: "Reference reports and delivered content saved by NextClaw.",
+					zh: "引用由 NextClaw 保存的报告和送达内容。"
+				}
+			},
+			icon: "inbox",
+			order: 100
+		},
+		list: async () => (await manager.listDeliveries()).deliveries.map((delivery) => toItem(delivery)),
+		resolve: async (objectId) => {
+			const delivery = await manager.getDelivery(objectId);
+			if (!delivery) return null;
+			const sourceLines = [
+				`# ${delivery.title}`,
+				"",
+				`- Object: ${createSystemObjectReferenceUri(SYSTEM_OBJECT_TYPE_INBOX_DELIVERY, delivery.id)}`,
+				`- Created: ${delivery.createdAt}`,
+				`- Source agent: ${delivery.source.agentId ?? "unknown"}`
+			];
+			if (delivery.summary) sourceLines.push("", "## Summary", "", delivery.summary);
+			sourceLines.push("", "## Content", "", delivery.content);
+			return {
+				item: toItem(delivery),
+				content: sourceLines.join("\n"),
+				fileName: safeSnapshotFileName(delivery.title, "md"),
+				mimeType: "text/markdown"
+			};
+		}
+	};
+}
+function createCronJobSystemObjectProvider(automation) {
+	const toItem = (job) => ({
+		uri: createSystemObjectReferenceUri(SYSTEM_OBJECT_TYPE_CRON_JOB, job.id),
+		objectType: SYSTEM_OBJECT_TYPE_CRON_JOB,
+		objectId: job.id,
+		label: job.name,
+		description: truncate(job.payload.message),
+		updatedAt: new Date(job.updatedAtMs).toISOString()
+	});
+	return {
+		group: {
+			objectType: SYSTEM_OBJECT_TYPE_CRON_JOB,
+			label: {
+				default: "Scheduled Tasks",
+				translations: {
+					en: "Scheduled Tasks",
+					zh: "定时任务"
+				}
+			},
+			description: {
+				default: "Reference task schedules, instructions, and recent run state.",
+				translations: {
+					en: "Reference task schedules, instructions, and recent run state.",
+					zh: "引用任务计划、指令和最近运行状态。"
+				}
+			},
+			icon: "calendar-clock",
+			order: 200
+		},
+		list: () => automation.listJobs(true).map(toItem),
+		resolve: (objectId) => {
+			const job = automation.listJobs(true).find(({ id }) => id === objectId);
+			if (!job) return null;
+			const content = [
+				`# ${job.name}`,
+				"",
+				`- Object: ${createSystemObjectReferenceUri(SYSTEM_OBJECT_TYPE_CRON_JOB, job.id)}`,
+				`- Enabled: ${job.enabled ? "yes" : "no"}`,
+				`- Delete after run: ${job.deleteAfterRun ? "yes" : "no"}`,
+				`- Created: ${new Date(job.createdAtMs).toISOString()}`,
+				`- Updated: ${new Date(job.updatedAtMs).toISOString()}`,
+				`- Next run: ${toIsoTime(job.state.nextRunAtMs) ?? "none"}`,
+				`- Last run: ${toIsoTime(job.state.lastRunAtMs) ?? "none"}`,
+				`- Last status: ${job.state.lastStatus ?? "none"}`,
+				"",
+				"## Schedule",
+				"",
+				"```json",
+				JSON.stringify(job.schedule, null, 2),
+				"```",
+				"",
+				"## Payload",
+				"",
+				job.payload.message,
+				"",
+				"```json",
+				JSON.stringify({
+					kind: job.payload.kind ?? "agent_turn",
+					agentId: job.payload.agentId ?? null,
+					sessionId: job.payload.sessionId ?? null
+				}, null, 2),
+				"```",
+				...job.state.lastError ? [
+					"",
+					"## Last error",
+					"",
+					job.state.lastError
+				] : []
+			].join("\n");
+			return {
+				item: toItem(job),
+				content,
+				fileName: safeSnapshotFileName(job.name, "md"),
+				mimeType: "text/markdown"
+			};
+		}
+	};
+}
+//#endregion
 //#region src/managers/mcp.manager.ts
 var McpManager = class {
 	currentMcpConfig;
@@ -5520,7 +6097,7 @@ function safeNcpSessionFilename(value) {
 function normalizeNcpAgentId(agentId) {
 	return agentId?.trim().toLowerCase() || void 0;
 }
-function isRecord$12(value) {
+function isRecord$13(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function toIsoString(value, fallback) {
@@ -5650,7 +6227,7 @@ function mergeReplayCompletedToolResults(message, toolResultsByCallId) {
 	} : message;
 }
 function readLegacyContextCompactionMessageId(message) {
-	const checkpoint = isRecord$12(message?.metadata?.checkpoint) ? message.metadata.checkpoint : null;
+	const checkpoint = isRecord$13(message?.metadata?.checkpoint) ? message.metadata.checkpoint : null;
 	const checkpointId = typeof checkpoint?.id === "string" ? checkpoint.id : "";
 	const coveredCount = checkpoint?.coveredSessionMessageCount;
 	const legacyId = `${message?.sessionId}:service:context-compaction:${checkpointId}`;
@@ -5682,11 +6259,11 @@ function readReplayMessageId(event) {
 	return readMessageFromSummaryEvent(event)?.id ?? null;
 }
 function readEventSessionId$2(event) {
-	const sessionId = ("payload" in event && isRecord$12(event.payload) ? event.payload : null)?.sessionId;
+	const sessionId = ("payload" in event && isRecord$13(event.payload) ? event.payload : null)?.sessionId;
 	return typeof sessionId === "string" ? sessionId : "";
 }
 function readReplayPayloadTimestamp(event) {
-	const payload = "payload" in event && isRecord$12(event.payload) ? event.payload : null;
+	const payload = "payload" in event && isRecord$13(event.payload) ? event.payload : null;
 	const timestamp = typeof payload?.timestamp === "string" ? payload.timestamp : "";
 	return Number.isFinite(Date.parse(timestamp)) ? new Date(timestamp).toISOString() : null;
 }
@@ -6497,76 +7074,496 @@ function isPanelAppAgentCapability(value) {
 	return PANEL_APP_AGENT_CAPABILITIES.includes(value);
 }
 //#endregion
-//#region src/services/panel-app-asset-token.service.ts
-const PANEL_APP_ASSET_TOKEN_TTL_MS = 7200 * 1e3;
-var PanelAppAssetTokenService = class {
-	now;
-	secret;
-	ttlMs;
-	constructor(params = {}) {
-		this.now = params.now ?? Date.now;
-		this.secret = params.secret ?? randomBytes(32);
-		this.ttlMs = params.ttlMs ?? PANEL_APP_ASSET_TOKEN_TTL_MS;
-	}
-	issue = (params) => {
-		const claims = {
-			panelAppId: params.panelAppId,
-			sourceName: params.sourceName,
-			sourcePath: params.sourcePath,
-			expiresAt: this.now() + this.ttlMs,
-			nonce: randomBytes(12).toString("base64url")
-		};
-		const payload = Buffer.from(JSON.stringify(claims), "utf8").toString("base64url");
-		return `${payload}.${this.sign(payload)}`;
+//#region src/utils/panel-app-manifest.utils.ts
+const PANEL_APP_ID_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+function parsePanelAppManifest(html) {
+	return {
+		...readHtmlTitle(html),
+		...readStandardIcon(html),
+		...readPanelAppMeta(html),
+		capabilities: readPanelAppCapabilities(html),
+		client: false,
+		serviceActions: readPanelAppServiceActions(html)
 	};
-	verify = (token) => {
-		const [payload, signature, ...rest] = token.trim().split(".");
-		if (!payload || !signature || rest.length > 0 || !this.matchesSignature(payload, signature)) throw new PanelAppError("PANEL_APP_ASSET_TOKEN_INVALID", "invalid panel app asset token");
-		const claims = this.parseClaims(payload);
-		if (claims.expiresAt <= this.now()) throw new PanelAppError("PANEL_APP_ASSET_TOKEN_EXPIRED", "panel app asset token expired");
-		return claims;
+}
+function parsePanelAppFolderManifest(raw) {
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch (error) {
+		throw new Error(`panel-app.json is not valid JSON: ${error instanceof Error ? error.message : String(error)}`);
+	}
+	if (!isRecord$12(parsed)) throw new Error("panel-app.json must contain an object.");
+	const id = readOptionalString$8(parsed, "id");
+	if (id && !PANEL_APP_ID_PATTERN.test(id)) throw new Error("panel app id must be kebab-case.");
+	return {
+		id,
+		title: readRequiredString$7(parsed, "title"),
+		description: readOptionalString$8(parsed, "description"),
+		icon: readOptionalString$8(parsed, "icon"),
+		entry: readRequiredString$7(parsed, "entry"),
+		capabilities: readStringArray$1(parsed.capabilities, "capabilities"),
+		client: readOptionalBoolean$2(parsed, "client"),
+		serviceActions: readStringArray$1(parsed.actions, "actions")
 	};
-	sign = (payload) => createHmac("sha256", this.secret).update(payload).digest("base64url");
-	matchesSignature = (payload, signature) => {
-		const expected = Buffer.from(this.sign(payload), "utf8");
-		const actual = Buffer.from(signature, "utf8");
-		return expected.length === actual.length && timingSafeEqual(expected, actual);
+}
+function readPanelAppMeta(html) {
+	return {
+		...readPanelAppMetaField(html, "title"),
+		...readPanelAppMetaField(html, "description"),
+		...readPanelAppMetaField(html, "icon")
 	};
-	parseClaims = (payload) => {
-		try {
-			const claims = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
-			if (!isPanelAppAssetTokenClaims(claims)) throw new Error("invalid panel app asset token claims");
-			return claims;
-		} catch {
-			throw new PanelAppError("PANEL_APP_ASSET_TOKEN_INVALID", "invalid panel app asset token");
+}
+function readPanelAppMetaField(html, field) {
+	const content = readMetaContent(html, `nextclaw-panel-${field}`, field === "icon" ? "attribute" : "text");
+	const manifest = {};
+	if (content) manifest[field] = content;
+	return manifest;
+}
+function readHtmlTitle(html) {
+	const title = normalizeTextValue(html.match(/<title[^>]*>([\s\S]*?)<\/title>/i)?.[1]);
+	return title ? { title } : {};
+}
+function readStandardIcon(html) {
+	const icon = readLinkHref(html, (relTokens) => relTokens.includes("icon"));
+	const appleTouchIcon = readLinkHref(html, (relTokens) => relTokens.some((token) => token === "apple-touch-icon" || token === "apple-touch-icon-precomposed"));
+	const href = normalizeIconHref(icon ?? appleTouchIcon);
+	return href ? { icon: href } : {};
+}
+function readMetaContent(html, name, valueKind) {
+	const metaTags = html.matchAll(/<meta\s+([^>]*?)>/gi);
+	for (const tag of metaTags) {
+		const attributes = tag[1] ?? "";
+		if (readHtmlAttribute(attributes, "name") === name) {
+			const content = readHtmlAttribute(attributes, "content");
+			return valueKind === "attribute" ? normalizeAttributeValue(content) : normalizeTextValue(content);
 		}
-	};
-};
-function isPanelAppAssetTokenClaims(value) {
-	return typeof value === "object" && value !== null && "panelAppId" in value && "sourceName" in value && "sourcePath" in value && "expiresAt" in value && "nonce" in value && typeof value.panelAppId === "string" && typeof value.sourceName === "string" && typeof value.sourcePath === "string" && typeof value.expiresAt === "number" && typeof value.nonce === "string";
+	}
 }
-//#endregion
-//#region src/stores/panel-app-state.store.ts
-const PANEL_APP_STATE_FILE = ".panel-apps.state.json";
-const PANEL_APP_STATE_VERSION = 1;
-var PanelAppStateStore = class {
-	constructor(panelsPath) {
-		this.panelsPath = panelsPath;
+function readLinkHref(html, matchesRel) {
+	const linkTags = html.matchAll(/<link\s+([^>]*?)>/gi);
+	for (const tag of linkTags) {
+		const attributes = tag[1] ?? "";
+		if (matchesRel((readHtmlAttribute(attributes, "rel") ?? "").toLowerCase().split(/\s+/).filter(Boolean))) return normalizeAttributeValue(readHtmlAttribute(attributes, "href"));
 	}
-	load = async () => {
-		try {
-			const parsed = JSON.parse(await readFile(this.getStatePath(), "utf8"));
-			return this.normalizeStateFile(parsed).apps;
-		} catch (error) {
-			if (this.isMissingFileError(error) || error instanceof SyntaxError) return {};
-			throw error;
-		}
-	};
-	updatePreferences = async (id, preferences) => {
-		const apps = await this.load();
-		const next = { ...apps[id] ?? {} };
-		if (typeof preferences.favorite === "boolean") next.favorite = preferences.favorite;
-		apps[id] = next;
+}
+function readHtmlAttribute(attributes, attribute) {
+	const match = attributes.match(new RegExp(`(?:^|\\s)${attribute}\\s*=\\s*(["'])(.*?)\\1`, "i"));
+	return match?.[2] ? decodeHtmlAttribute(match[2]) : void 0;
+}
+function readPanelAppServiceActions(html) {
+	return parseTokenList(readMetaContent(html, "nextclaw-panel-actions", "attribute"));
+}
+function readPanelAppCapabilities(html) {
+	return parseTokenList(readMetaContent(html, "nextclaw-panel-capabilities", "attribute"));
+}
+function parseTokenList(content) {
+	if (!content) return [];
+	return [...new Set(content.split(/[,\s]+/).map((entry) => entry.trim()).filter(Boolean))];
+}
+function readRequiredString$7(record, key) {
+	const value = readOptionalString$8(record, key);
+	if (!value) throw new Error(`panel app ${key} is required.`);
+	return value;
+}
+function readOptionalString$8(record, key) {
+	return typeof record[key] === "string" && record[key].trim() ? record[key].trim() : void 0;
+}
+function readOptionalBoolean$2(record, key) {
+	const value = record[key];
+	if (value === void 0) return false;
+	if (typeof value !== "boolean") throw new Error(`panel app ${key} must be a boolean.`);
+	return value;
+}
+function readStringArray$1(value, key) {
+	if (value === void 0) return [];
+	if (!Array.isArray(value) || value.some((entry) => typeof entry !== "string")) throw new Error(`panel app ${key} must be a string array.`);
+	return [...new Set(value.map((entry) => entry.trim()).filter(Boolean))];
+}
+function isRecord$12(value) {
+	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function normalizeTextValue(value) {
+	return decodeHtmlAttribute(value ?? "").replace(/\s+/g, " ").trim() || void 0;
+}
+function normalizeAttributeValue(value) {
+	return decodeHtmlAttribute(value ?? "").trim() || void 0;
+}
+function normalizeIconHref(value) {
+	if (!value) return;
+	if (value.startsWith("data:image/") || value.startsWith("http://") || value.startsWith("https://") || value.startsWith("/")) return value;
+}
+function decodeHtmlAttribute(value) {
+	return value.replace(/&quot;/g, "\"").replace(/&#34;/g, "\"").replace(/&apos;/g, "'").replace(/&#39;/g, "'").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
+}
+const PANEL_APP_FOLDER_MANIFEST_FILE_NAME = "panel-app.json";
+function isPanelAppSourceEntry(entry) {
+	return entry.isFile() && isPanelAppFileName(entry.name) || entry.isDirectory() && isPanelAppDirName(entry.name);
+}
+function isPanelAppFileName(fileName) {
+	return hasSafeBaseName(fileName) && fileName.endsWith(".panel.html");
+}
+function isPanelAppDirName(dirName) {
+	return hasSafeBaseName(dirName) && dirName.endsWith(".panel");
+}
+function toPanelAppTitle(sourceName) {
+	return sourceName.replace(new RegExp(`${escapeRegExp(".panel.html")}$`), "").replace(new RegExp(`${escapeRegExp(".panel")}$`), "").replace(/[-_]+/g, " ").trim() || sourceName;
+}
+function encodePanelAppId(sourceName) {
+	return Buffer.from(sourceName, "utf8").toString("base64url");
+}
+function decodePanelAppId(id) {
+	const normalizedId = id.trim();
+	if (!normalizedId) throw new PanelAppError("PANEL_APP_INVALID_ID", "panel app id is required");
+	let sourceName = "";
+	try {
+		sourceName = Buffer.from(normalizedId, "base64url").toString("utf8");
+	} catch {
+		throw new PanelAppError("PANEL_APP_INVALID_ID", "invalid panel app id");
+	}
+	if (encodePanelAppId(sourceName) !== normalizedId || !isPanelAppFileName(sourceName) && !isPanelAppDirName(sourceName)) throw new PanelAppError("PANEL_APP_INVALID_ID", "invalid panel app id");
+	return sourceName;
+}
+async function readPanelAppFolderManifest(dirPath, dirName) {
+	const manifest = parsePanelAppFolderManifest(await readFile(join(dirPath, PANEL_APP_FOLDER_MANIFEST_FILE_NAME), "utf8"));
+	const expectedId = dirName.slice(0, -6);
+	if (manifest.id && manifest.id !== expectedId) throw new PanelAppError("PANEL_APP_MANIFEST_INVALID", "panel app manifest id must match the directory name");
+	return {
+		...manifest,
+		id: expectedId
+	};
+}
+function resolvePanelAppRelativePath(rootPath, relativePath) {
+	if (!relativePath.trim() || relativePath.includes("\0") || isAbsolute(relativePath)) throw new PanelAppError("PANEL_APP_INVALID_ASSET_PATH", "invalid panel app asset path");
+	const normalizedPath = normalize(relativePath);
+	if (normalizedPath === "." || normalizedPath.startsWith("..")) throw new PanelAppError("PANEL_APP_INVALID_ASSET_PATH", "invalid panel app asset path");
+	const resolvedPath = resolve(rootPath, normalizedPath);
+	const pathFromRoot = relative(resolve(rootPath), resolvedPath);
+	if (pathFromRoot.startsWith("..") || isAbsolute(pathFromRoot)) throw new PanelAppError("PANEL_APP_INVALID_ASSET_PATH", "invalid panel app asset path");
+	return resolvedPath;
+}
+function resolvePanelAppAssetContentType(path) {
+	switch (extname(path).toLowerCase()) {
+		case ".css": return "text/css; charset=utf-8";
+		case ".js":
+		case ".mjs": return "application/javascript; charset=utf-8";
+		case ".json": return "application/json; charset=utf-8";
+		case ".png": return "image/png";
+		case ".svg": return "image/svg+xml; charset=utf-8";
+		case ".webp": return "image/webp";
+		case ".txt": return "text/plain; charset=utf-8";
+		default: return "application/octet-stream";
+	}
+}
+function resolvePanelAppIconUrl(id, icon) {
+	if (!icon) return;
+	if (icon.startsWith("data:image/") || icon.startsWith("http://") || icon.startsWith("https://") || icon.startsWith("/") || isLikelyTextIcon(icon)) return icon;
+	return `/api/panel-apps/${encodeURIComponent(id)}/assets/${encodePanelAppAssetPath(icon)}`;
+}
+function injectPanelAppAssetBase(html, baseHref) {
+	const base = `<base href="${baseHref}">`;
+	return injectLocalScriptCrossOrigin((() => {
+		if (/<base\b/i.test(html)) return html;
+		if (/<head[^>]*>/i.test(html)) return html.replace(/<head[^>]*>/i, (head) => `${head}${base}`);
+		return `${base}${html}`;
+	})());
+}
+function injectLocalScriptCrossOrigin(html) {
+	return html.replace(/<script\b(?=[^>]*\bsrc\s*=)(?![^>]*\bcrossorigin\b)[^>]*>/gi, (tag) => {
+		const src = extractScriptSrc(tag);
+		if (!src || !isLocalScriptSrc(src)) return tag;
+		return `${tag.slice(0, -1)} crossorigin="anonymous">`;
+	});
+}
+function extractScriptSrc(tag) {
+	const match = /\bsrc\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s>]+))/i.exec(tag);
+	return match?.[1] ?? match?.[2] ?? match?.[3];
+}
+function isLocalScriptSrc(src) {
+	const value = src.trim();
+	if (!value || value.startsWith("//")) return false;
+	return !/^(?:https?|data|blob|javascript):/i.test(value);
+}
+function encodePanelAppAssetPath(path) {
+	return path.split("/").filter(Boolean).map((segment) => encodeURIComponent(segment)).join("/");
+}
+function hasSafeBaseName(name) {
+	return !name.includes("/") && !name.includes("\\") && !name.includes("\0");
+}
+function isLikelyTextIcon(icon) {
+	return !icon.includes("/") && !icon.includes(".") && icon.length <= 4;
+}
+function escapeRegExp(value) {
+	return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//#endregion
+//#region src/utils/panel-app-content-source.utils.ts
+async function readPanelAppContentSource(params) {
+	const { createAssetBaseHref, id, panelsPath, sourceService } = params;
+	return await readResolvedPanelAppContentSource(await sourceService.resolveSource(panelsPath, id), createAssetBaseHref);
+}
+async function readPanelAppContentSourceByPath(params) {
+	const { createAssetBaseHref, path, sourceService } = params;
+	return await readResolvedPanelAppContentSource(await sourceService.resolveSourcePath(path), createAssetBaseHref);
+}
+async function readPanelAppContentSourceByIdOrPath(params) {
+	const { sourcePath, ...standardSourceParams } = params;
+	return sourcePath ? await readPanelAppContentSourceByPath({
+		createAssetBaseHref: params.createAssetBaseHref,
+		path: sourcePath,
+		sourceService: params.sourceService
+	}) : await readPanelAppContentSource(standardSourceParams);
+}
+async function readResolvedPanelAppContentSource(source, createAssetBaseHref) {
+	const html = await readFile(source.entryPath, "utf8");
+	const manifest = source.manifest ?? parsePanelAppManifest(html);
+	const sourceId = encodePanelAppId(source.sourceName);
+	return {
+		appId: resolvePanelAppAppId(source, manifest),
+		sourceId,
+		source,
+		manifest,
+		html,
+		htmlWithBase: source.kind === "folder" ? injectPanelAppAssetBase(html, createAssetBaseHref(source)) : html
+	};
+}
+async function readPanelAppContentSourceByIdOrAppId(params) {
+	const { appIdOrSourceId, createAssetBaseHref, panelsPath, sourceService } = params;
+	try {
+		return await readPanelAppContentSource({
+			createAssetBaseHref,
+			id: appIdOrSourceId,
+			panelsPath,
+			sourceService
+		});
+	} catch (error) {
+		if (!isPanelAppError(error)) throw error;
+		if (error.code !== "PANEL_APP_INVALID_ID" && error.code !== "PANEL_APP_NOT_FOUND") throw error;
+	}
+	const sources = await sourceService.listSources(panelsPath);
+	for (const source of sources) {
+		const html = await readFile(source.entryPath, "utf8");
+		if (resolvePanelAppAppId(source, source.manifest ?? parsePanelAppManifest(html)) === appIdOrSourceId) return await readPanelAppContentSource({
+			createAssetBaseHref,
+			id: encodePanelAppId(source.sourceName),
+			panelsPath,
+			sourceService
+		});
+	}
+	throw new PanelAppError("PANEL_APP_NOT_FOUND", "panel app not found");
+}
+function resolvePanelAppAppId(source, manifest) {
+	return manifest.id ?? encodePanelAppId(source.sourceName);
+}
+//#endregion
+//#region src/managers/panel-app-package-state.manager.ts
+var PanelAppPackageStateManager = class {
+	constructor(params) {
+		this.params = params;
+	}
+	listSources = async () => {
+		const panelsPath = this.params.getPanelsPath();
+		const workspaceSources = await this.params.sourceService.listSources(panelsPath);
+		const packageSources = (await this.listPackageComponentSources()).filter((component) => component.kind === "panel");
+		const resolvedPackageSources = await Promise.all(packageSources.map(async (packageSource) => ({
+			source: await this.params.sourceService.resolveSourcePath(packageSource.sourcePath),
+			packageSource
+		})));
+		return [...workspaceSources.map((source) => ({ source })), ...resolvedPackageSources];
+	};
+	resolveSource = async (id) => {
+		try {
+			return await this.params.sourceService.resolveSource(this.params.getPanelsPath(), id);
+		} catch (error) {
+			if (!isPanelAppError(error) || error.code !== "PANEL_APP_NOT_FOUND") throw error;
+		}
+		const match = (await this.listSources()).find(({ source, packageSource }) => packageSource && (encodePanelAppId(source.sourceName) === id || packageSource.id === id));
+		if (!match) throw new PanelAppError("PANEL_APP_NOT_FOUND", "panel app not found");
+		return match.source;
+	};
+	findPackageSourceBySourceName = async (sourceName) => {
+		return (await this.listPackageComponentSources()).find((component) => component.kind === "panel" && component.sourcePath.endsWith(`/${sourceName}`));
+	};
+	readContentSourceByIdOrAppId = async (id) => {
+		const panelsPath = this.params.getPanelsPath();
+		try {
+			return await readPanelAppContentSourceByIdOrAppId({
+				appIdOrSourceId: id,
+				createAssetBaseHref: this.params.createAssetBaseHref,
+				panelsPath,
+				sourceService: this.params.sourceService
+			});
+		} catch (error) {
+			if (!isPanelAppError(error) || error.code !== "PANEL_APP_NOT_FOUND") throw error;
+		}
+		const packageSource = (await this.listPackageComponentSources()).find((component) => component.kind === "panel" && component.id === id);
+		if (!packageSource) throw new PanelAppError("PANEL_APP_NOT_FOUND", "panel app not found");
+		return await readPanelAppContentSourceByIdOrPath({
+			createAssetBaseHref: this.params.createAssetBaseHref,
+			id,
+			panelsPath,
+			sourcePath: packageSource.sourcePath,
+			sourceService: this.params.sourceService
+		});
+	};
+	assertDeclaresClient = async (appId) => {
+		const sources = await this.listSources();
+		for (const { source } of sources) {
+			const manifest = source.manifest ?? parsePanelAppManifest(await readFile(source.entryPath, "utf8"));
+			if (resolvePanelAppAppId(source, manifest) === appId) {
+				if (!manifest.client) throw new PanelAppError("PANEL_APP_CLIENT_NOT_DECLARED", "panel app did not declare client access");
+				return;
+			}
+		}
+		throw new PanelAppError("PANEL_APP_NOT_FOUND", "panel app not found");
+	};
+	assertCanActivate = async (components) => {
+		const panelComponents = components.filter((component) => component.kind === "panel");
+		if (panelComponents.length === 0) return;
+		const workspaceSources = await this.params.sourceService.listSources(this.params.getPanelsPath());
+		const workspaceIds = /* @__PURE__ */ new Set();
+		for (const source of workspaceSources) {
+			const manifest = source.manifest ?? parsePanelAppManifest(await readFile(source.entryPath, "utf8"));
+			workspaceIds.add(resolvePanelAppAppId(source, manifest));
+		}
+		const activePackageSources = await this.listPackageComponentSources();
+		for (const component of panelComponents) {
+			const conflictsWithPackage = activePackageSources.some((active) => active.kind === "panel" && active.id === component.id && active.packageId !== component.packageId);
+			if (workspaceIds.has(component.id) || conflictsWithPackage) throw new AppPackageError("APP_PACKAGE_CONFLICT", `Panel component id 冲突：${component.id}`);
+		}
+	};
+	deactivate = (components) => {
+		for (const component of components) if (component.kind === "panel") this.params.deleteBridgeSessions(component.id);
+	};
+	removeState = async (components) => {
+		const panelsPath = this.params.getPanelsPath();
+		for (const component of components) {
+			if (component.kind !== "panel") continue;
+			this.params.deleteBridgeSessions(component.id);
+			await this.params.createStateStore(panelsPath).deleteEntry(encodePanelAppId(basename(component.sourcePath)));
+			await this.params.createCapabilityGrantStore().deleteCaller({
+				surface: "panel-app",
+				appId: component.id
+			});
+			await this.params.createClientGrantStore().revoke(component.id);
+		}
+	};
+	listPackageComponentSources = async () => await this.params.listPackageComponentSources?.() ?? [];
+};
+//#endregion
+//#region src/utils/panel-app-time.utils.ts
+function resolvePanelAppCreatedAt(fileStat) {
+	return fileStat.birthtimeMs > 0 ? fileStat.birthtime.toISOString() : fileStat.mtime.toISOString();
+}
+function resolvePanelAppActivityMs(entry) {
+	return Math.max(new Date(entry.lastOpenedAt ?? 0).getTime(), new Date(entry.createdAt).getTime(), new Date(entry.updatedAt).getTime());
+}
+//#endregion
+//#region src/presenters/panel-app-entry.presenter.ts
+var PanelAppEntryPresenter = class {
+	constructor(params) {
+		this.params = params;
+	}
+	build = async (source, state, packageSource) => {
+		const manifest = source.manifest ?? parsePanelAppManifest(await readFile(source.entryPath, "utf8"));
+		const id = encodePanelAppId(source.sourceName);
+		const appId = resolvePanelAppAppId(source, manifest);
+		const entry = {
+			id,
+			appId,
+			fileName: source.sourceName,
+			kind: source.kind,
+			title: manifest.title ?? toPanelAppTitle(source.sourceName),
+			contentPath: packageSource ? `${this.params.contentBasePath}/${encodeURIComponent(id)}/content?${new URLSearchParams({ path: source.sourcePath })}` : `${this.params.contentBasePath}/${encodeURIComponent(id)}/content`,
+			createdAt: resolvePanelAppCreatedAt(source.sourceStat),
+			updatedAt: source.sourceStat.mtime.toISOString(),
+			sizeBytes: source.sourceStat.size,
+			favorite: state.favorite ?? false,
+			clientDeclared: manifest.client,
+			clientGranted: await this.params.isClientGranted(appId, manifest.client),
+			openCount: state.openCount ?? 0,
+			sourceKind: packageSource ? "package" : "workspace",
+			packageId: packageSource?.packageId,
+			packageVersion: packageSource?.packageVersion
+		};
+		if (manifest.description) entry.description = manifest.description;
+		if (manifest.icon) entry.icon = source.kind === "folder" ? packageSource ? `${this.params.createAssetBaseHref(source)}${manifest.icon.replace(/^\/+/, "")}` : resolvePanelAppIconUrl(id, manifest.icon) : manifest.icon;
+		if (state.lastOpenedAt) entry.lastOpenedAt = state.lastOpenedAt;
+		return entry;
+	};
+	compare = (left, right) => resolvePanelAppActivityMs(right) - resolvePanelAppActivityMs(left) || Number(right.favorite) - Number(left.favorite) || left.title.localeCompare(right.title);
+};
+//#endregion
+//#region src/services/panel-app-asset-token.service.ts
+const PANEL_APP_ASSET_TOKEN_TTL_MS = 7200 * 1e3;
+var PanelAppAssetTokenService = class {
+	now;
+	secret;
+	ttlMs;
+	constructor(params = {}) {
+		this.now = params.now ?? Date.now;
+		this.secret = params.secret ?? randomBytes(32);
+		this.ttlMs = params.ttlMs ?? PANEL_APP_ASSET_TOKEN_TTL_MS;
+	}
+	issue = (params) => {
+		const claims = {
+			panelAppId: params.panelAppId,
+			sourceName: params.sourceName,
+			sourcePath: params.sourcePath,
+			expiresAt: this.now() + this.ttlMs,
+			nonce: randomBytes(12).toString("base64url")
+		};
+		const payload = Buffer.from(JSON.stringify(claims), "utf8").toString("base64url");
+		return `${payload}.${this.sign(payload)}`;
+	};
+	verify = (token) => {
+		const [payload, signature, ...rest] = token.trim().split(".");
+		if (!payload || !signature || rest.length > 0 || !this.matchesSignature(payload, signature)) throw new PanelAppError("PANEL_APP_ASSET_TOKEN_INVALID", "invalid panel app asset token");
+		const claims = this.parseClaims(payload);
+		if (claims.expiresAt <= this.now()) throw new PanelAppError("PANEL_APP_ASSET_TOKEN_EXPIRED", "panel app asset token expired");
+		return claims;
+	};
+	sign = (payload) => createHmac("sha256", this.secret).update(payload).digest("base64url");
+	matchesSignature = (payload, signature) => {
+		const expected = Buffer.from(this.sign(payload), "utf8");
+		const actual = Buffer.from(signature, "utf8");
+		return expected.length === actual.length && timingSafeEqual(expected, actual);
+	};
+	parseClaims = (payload) => {
+		try {
+			const claims = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
+			if (!isPanelAppAssetTokenClaims(claims)) throw new Error("invalid panel app asset token claims");
+			return claims;
+		} catch {
+			throw new PanelAppError("PANEL_APP_ASSET_TOKEN_INVALID", "invalid panel app asset token");
+		}
+	};
+};
+function isPanelAppAssetTokenClaims(value) {
+	return typeof value === "object" && value !== null && "panelAppId" in value && "sourceName" in value && "sourcePath" in value && "expiresAt" in value && "nonce" in value && typeof value.panelAppId === "string" && typeof value.sourceName === "string" && typeof value.sourcePath === "string" && typeof value.expiresAt === "number" && typeof value.nonce === "string";
+}
+//#endregion
+//#region src/stores/panel-app-state.store.ts
+const PANEL_APP_STATE_FILE = ".panel-apps.state.json";
+const PANEL_APP_STATE_VERSION = 1;
+var PanelAppStateStore = class {
+	constructor(panelsPath) {
+		this.panelsPath = panelsPath;
+	}
+	load = async () => {
+		try {
+			const parsed = JSON.parse(await readFile(this.getStatePath(), "utf8"));
+			return this.normalizeStateFile(parsed).apps;
+		} catch (error) {
+			if (this.isMissingFileError(error) || error instanceof SyntaxError) return {};
+			throw error;
+		}
+	};
+	updatePreferences = async (id, preferences) => {
+		const apps = await this.load();
+		const next = { ...apps[id] ?? {} };
+		if (typeof preferences.favorite === "boolean") next.favorite = preferences.favorite;
+		apps[id] = next;
 		await this.persist(apps);
 		return next;
 	};
@@ -7659,262 +8656,39 @@ function injectPanelAppClientScript(html, params) {
 	return `${script}${html}`;
 }
 function getPanelAppClientInitScript(params) {
-	return `
-(() => {
-  const marker = "${PANEL_APP_CLIENT_MARKER}";
-  if (typeof window.NextClawClient !== "function") {
-    console.error("[NextClaw] Panel App client SDK failed to load.");
-    return;
-  }
-  if (typeof window.createNextClawAppClient !== "function") {
-    console.error("[NextClaw] Panel App client projection failed to load.");
-    return;
-  }
-  const existing = window.nextclaw && typeof window.nextclaw === "object" ? window.nextclaw : {};
-  const hostClient = new window.NextClawClient({
-    baseUrl: window.location.origin,
-    headers: {
-      "x-nextclaw-panel-bridge-session": ${JSON.stringify(params.runtimeToken)}
-    }
-  });
-  const client = window.createNextClawAppClient(hostClient);
-  Object.defineProperty(window, "nextclaw", {
-    configurable: true,
-    value: {
-      ...existing,
-      client
-    }
-  });
-  Object.defineProperty(window.nextclaw, "__clientInitMarker", {
-    configurable: true,
-    enumerable: false,
-    value: marker
-  });
-})();
-`.trim();
-}
-//#endregion
-//#region src/utils/panel-app-manifest.utils.ts
-const PANEL_APP_ID_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
-function parsePanelAppManifest(html) {
-	return {
-		...readHtmlTitle(html),
-		...readStandardIcon(html),
-		...readPanelAppMeta(html),
-		capabilities: readPanelAppCapabilities(html),
-		client: false,
-		serviceActions: readPanelAppServiceActions(html)
-	};
-}
-function parsePanelAppFolderManifest(raw) {
-	let parsed;
-	try {
-		parsed = JSON.parse(raw);
-	} catch (error) {
-		throw new Error(`panel-app.json is not valid JSON: ${error instanceof Error ? error.message : String(error)}`);
-	}
-	if (!isRecord$8(parsed)) throw new Error("panel-app.json must contain an object.");
-	const id = readOptionalString$8(parsed, "id");
-	if (id && !PANEL_APP_ID_PATTERN.test(id)) throw new Error("panel app id must be kebab-case.");
-	return {
-		id,
-		title: readRequiredString$7(parsed, "title"),
-		description: readOptionalString$8(parsed, "description"),
-		icon: readOptionalString$8(parsed, "icon"),
-		entry: readRequiredString$7(parsed, "entry"),
-		capabilities: readStringArray$1(parsed.capabilities, "capabilities"),
-		client: readOptionalBoolean$2(parsed, "client"),
-		serviceActions: readStringArray$1(parsed.actions, "actions")
-	};
-}
-function readPanelAppMeta(html) {
-	return {
-		...readPanelAppMetaField(html, "title"),
-		...readPanelAppMetaField(html, "description"),
-		...readPanelAppMetaField(html, "icon")
-	};
-}
-function readPanelAppMetaField(html, field) {
-	const content = readMetaContent(html, `nextclaw-panel-${field}`, field === "icon" ? "attribute" : "text");
-	const manifest = {};
-	if (content) manifest[field] = content;
-	return manifest;
-}
-function readHtmlTitle(html) {
-	const title = normalizeTextValue(html.match(/<title[^>]*>([\s\S]*?)<\/title>/i)?.[1]);
-	return title ? { title } : {};
-}
-function readStandardIcon(html) {
-	const icon = readLinkHref(html, (relTokens) => relTokens.includes("icon"));
-	const appleTouchIcon = readLinkHref(html, (relTokens) => relTokens.some((token) => token === "apple-touch-icon" || token === "apple-touch-icon-precomposed"));
-	const href = normalizeIconHref(icon ?? appleTouchIcon);
-	return href ? { icon: href } : {};
-}
-function readMetaContent(html, name, valueKind) {
-	const metaTags = html.matchAll(/<meta\s+([^>]*?)>/gi);
-	for (const tag of metaTags) {
-		const attributes = tag[1] ?? "";
-		if (readHtmlAttribute(attributes, "name") === name) {
-			const content = readHtmlAttribute(attributes, "content");
-			return valueKind === "attribute" ? normalizeAttributeValue(content) : normalizeTextValue(content);
-		}
-	}
-}
-function readLinkHref(html, matchesRel) {
-	const linkTags = html.matchAll(/<link\s+([^>]*?)>/gi);
-	for (const tag of linkTags) {
-		const attributes = tag[1] ?? "";
-		if (matchesRel((readHtmlAttribute(attributes, "rel") ?? "").toLowerCase().split(/\s+/).filter(Boolean))) return normalizeAttributeValue(readHtmlAttribute(attributes, "href"));
-	}
-}
-function readHtmlAttribute(attributes, attribute) {
-	const match = attributes.match(new RegExp(`(?:^|\\s)${attribute}\\s*=\\s*(["'])(.*?)\\1`, "i"));
-	return match?.[2] ? decodeHtmlAttribute(match[2]) : void 0;
-}
-function readPanelAppServiceActions(html) {
-	return parseTokenList(readMetaContent(html, "nextclaw-panel-actions", "attribute"));
-}
-function readPanelAppCapabilities(html) {
-	return parseTokenList(readMetaContent(html, "nextclaw-panel-capabilities", "attribute"));
-}
-function parseTokenList(content) {
-	if (!content) return [];
-	return [...new Set(content.split(/[,\s]+/).map((entry) => entry.trim()).filter(Boolean))];
-}
-function readRequiredString$7(record, key) {
-	const value = readOptionalString$8(record, key);
-	if (!value) throw new Error(`panel app ${key} is required.`);
-	return value;
-}
-function readOptionalString$8(record, key) {
-	return typeof record[key] === "string" && record[key].trim() ? record[key].trim() : void 0;
-}
-function readOptionalBoolean$2(record, key) {
-	const value = record[key];
-	if (value === void 0) return false;
-	if (typeof value !== "boolean") throw new Error(`panel app ${key} must be a boolean.`);
-	return value;
-}
-function readStringArray$1(value, key) {
-	if (value === void 0) return [];
-	if (!Array.isArray(value) || value.some((entry) => typeof entry !== "string")) throw new Error(`panel app ${key} must be a string array.`);
-	return [...new Set(value.map((entry) => entry.trim()).filter(Boolean))];
-}
-function isRecord$8(value) {
-	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
-}
-function normalizeTextValue(value) {
-	return decodeHtmlAttribute(value ?? "").replace(/\s+/g, " ").trim() || void 0;
-}
-function normalizeAttributeValue(value) {
-	return decodeHtmlAttribute(value ?? "").trim() || void 0;
-}
-function normalizeIconHref(value) {
-	if (!value) return;
-	if (value.startsWith("data:image/") || value.startsWith("http://") || value.startsWith("https://") || value.startsWith("/")) return value;
-}
-function decodeHtmlAttribute(value) {
-	return value.replace(/&quot;/g, "\"").replace(/&#34;/g, "\"").replace(/&apos;/g, "'").replace(/&#39;/g, "'").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
-}
-const PANEL_APP_FOLDER_MANIFEST_FILE_NAME = "panel-app.json";
-function isPanelAppSourceEntry(entry) {
-	return entry.isFile() && isPanelAppFileName(entry.name) || entry.isDirectory() && isPanelAppDirName(entry.name);
-}
-function isPanelAppFileName(fileName) {
-	return hasSafeBaseName(fileName) && fileName.endsWith(".panel.html");
-}
-function isPanelAppDirName(dirName) {
-	return hasSafeBaseName(dirName) && dirName.endsWith(".panel");
-}
-function toPanelAppTitle(sourceName) {
-	return sourceName.replace(new RegExp(`${escapeRegExp(".panel.html")}$`), "").replace(new RegExp(`${escapeRegExp(".panel")}$`), "").replace(/[-_]+/g, " ").trim() || sourceName;
-}
-function encodePanelAppId(sourceName) {
-	return Buffer.from(sourceName, "utf8").toString("base64url");
-}
-function decodePanelAppId(id) {
-	const normalizedId = id.trim();
-	if (!normalizedId) throw new PanelAppError("PANEL_APP_INVALID_ID", "panel app id is required");
-	let sourceName = "";
-	try {
-		sourceName = Buffer.from(normalizedId, "base64url").toString("utf8");
-	} catch {
-		throw new PanelAppError("PANEL_APP_INVALID_ID", "invalid panel app id");
-	}
-	if (encodePanelAppId(sourceName) !== normalizedId || !isPanelAppFileName(sourceName) && !isPanelAppDirName(sourceName)) throw new PanelAppError("PANEL_APP_INVALID_ID", "invalid panel app id");
-	return sourceName;
-}
-async function readPanelAppFolderManifest(dirPath, dirName) {
-	const manifest = parsePanelAppFolderManifest(await readFile(join(dirPath, PANEL_APP_FOLDER_MANIFEST_FILE_NAME), "utf8"));
-	const expectedId = dirName.slice(0, -6);
-	if (manifest.id && manifest.id !== expectedId) throw new PanelAppError("PANEL_APP_MANIFEST_INVALID", "panel app manifest id must match the directory name");
-	return {
-		...manifest,
-		id: expectedId
-	};
-}
-function resolvePanelAppRelativePath(rootPath, relativePath) {
-	if (!relativePath.trim() || relativePath.includes("\0") || isAbsolute(relativePath)) throw new PanelAppError("PANEL_APP_INVALID_ASSET_PATH", "invalid panel app asset path");
-	const normalizedPath = normalize(relativePath);
-	if (normalizedPath === "." || normalizedPath.startsWith("..")) throw new PanelAppError("PANEL_APP_INVALID_ASSET_PATH", "invalid panel app asset path");
-	const resolvedPath = resolve(rootPath, normalizedPath);
-	const pathFromRoot = relative(resolve(rootPath), resolvedPath);
-	if (pathFromRoot.startsWith("..") || isAbsolute(pathFromRoot)) throw new PanelAppError("PANEL_APP_INVALID_ASSET_PATH", "invalid panel app asset path");
-	return resolvedPath;
-}
-function resolvePanelAppAssetContentType(path) {
-	switch (extname(path).toLowerCase()) {
-		case ".css": return "text/css; charset=utf-8";
-		case ".js":
-		case ".mjs": return "application/javascript; charset=utf-8";
-		case ".json": return "application/json; charset=utf-8";
-		case ".png": return "image/png";
-		case ".svg": return "image/svg+xml; charset=utf-8";
-		case ".webp": return "image/webp";
-		case ".txt": return "text/plain; charset=utf-8";
-		default: return "application/octet-stream";
-	}
-}
-function resolvePanelAppIconUrl(id, icon) {
-	if (!icon) return;
-	if (icon.startsWith("data:image/") || icon.startsWith("http://") || icon.startsWith("https://") || icon.startsWith("/") || isLikelyTextIcon(icon)) return icon;
-	return `/api/panel-apps/${encodeURIComponent(id)}/assets/${encodePanelAppAssetPath(icon)}`;
-}
-function injectPanelAppAssetBase(html, baseHref) {
-	const base = `<base href="${baseHref}">`;
-	return injectLocalScriptCrossOrigin((() => {
-		if (/<base\b/i.test(html)) return html;
-		if (/<head[^>]*>/i.test(html)) return html.replace(/<head[^>]*>/i, (head) => `${head}${base}`);
-		return `${base}${html}`;
-	})());
-}
-function injectLocalScriptCrossOrigin(html) {
-	return html.replace(/<script\b(?=[^>]*\bsrc\s*=)(?![^>]*\bcrossorigin\b)[^>]*>/gi, (tag) => {
-		const src = extractScriptSrc(tag);
-		if (!src || !isLocalScriptSrc(src)) return tag;
-		return `${tag.slice(0, -1)} crossorigin="anonymous">`;
-	});
-}
-function extractScriptSrc(tag) {
-	const match = /\bsrc\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s>]+))/i.exec(tag);
-	return match?.[1] ?? match?.[2] ?? match?.[3];
-}
-function isLocalScriptSrc(src) {
-	const value = src.trim();
-	if (!value || value.startsWith("//")) return false;
-	return !/^(?:https?|data|blob|javascript):/i.test(value);
-}
-function encodePanelAppAssetPath(path) {
-	return path.split("/").filter(Boolean).map((segment) => encodeURIComponent(segment)).join("/");
-}
-function hasSafeBaseName(name) {
-	return !name.includes("/") && !name.includes("\\") && !name.includes("\0");
-}
-function isLikelyTextIcon(icon) {
-	return !icon.includes("/") && !icon.includes(".") && icon.length <= 4;
-}
-function escapeRegExp(value) {
-	return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+	return `
+(() => {
+  const marker = "${PANEL_APP_CLIENT_MARKER}";
+  if (typeof window.NextClawClient !== "function") {
+    console.error("[NextClaw] Panel App client SDK failed to load.");
+    return;
+  }
+  if (typeof window.createNextClawAppClient !== "function") {
+    console.error("[NextClaw] Panel App client projection failed to load.");
+    return;
+  }
+  const existing = window.nextclaw && typeof window.nextclaw === "object" ? window.nextclaw : {};
+  const hostClient = new window.NextClawClient({
+    baseUrl: window.location.origin,
+    headers: {
+      "x-nextclaw-panel-bridge-session": ${JSON.stringify(params.runtimeToken)}
+    }
+  });
+  const client = window.createNextClawAppClient(hostClient);
+  Object.defineProperty(window, "nextclaw", {
+    configurable: true,
+    value: {
+      ...existing,
+      client
+    }
+  });
+  Object.defineProperty(window.nextclaw, "__clientInitMarker", {
+    configurable: true,
+    enumerable: false,
+    value: marker
+  });
+})();
+`.trim();
 }
 //#endregion
 //#region src/services/panel-app-source.service.ts
@@ -8015,84 +8789,6 @@ function isMissingFileError$1(error) {
 	return typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
 }
 //#endregion
-//#region src/utils/panel-app-time.utils.ts
-function resolvePanelAppCreatedAt(fileStat) {
-	return fileStat.birthtimeMs > 0 ? fileStat.birthtime.toISOString() : fileStat.mtime.toISOString();
-}
-function resolvePanelAppActivityMs(entry) {
-	return Math.max(new Date(entry.lastOpenedAt ?? 0).getTime(), new Date(entry.createdAt).getTime(), new Date(entry.updatedAt).getTime());
-}
-//#endregion
-//#region src/utils/panel-app-content-source.utils.ts
-async function readPanelAppContentSource(params) {
-	const { createAssetBaseHref, id, panelsPath, sourceService } = params;
-	return await readResolvedPanelAppContentSource(await sourceService.resolveSource(panelsPath, id), createAssetBaseHref);
-}
-async function readPanelAppContentSourceByPath(params) {
-	const { createAssetBaseHref, path, sourceService } = params;
-	return await readResolvedPanelAppContentSource(await sourceService.resolveSourcePath(path), createAssetBaseHref);
-}
-async function readPanelAppContentSourceByIdOrPath(params) {
-	const { sourcePath, ...standardSourceParams } = params;
-	return sourcePath ? await readPanelAppContentSourceByPath({
-		createAssetBaseHref: params.createAssetBaseHref,
-		path: sourcePath,
-		sourceService: params.sourceService
-	}) : await readPanelAppContentSource(standardSourceParams);
-}
-async function readResolvedPanelAppContentSource(source, createAssetBaseHref) {
-	const html = await readFile(source.entryPath, "utf8");
-	const manifest = source.manifest ?? parsePanelAppManifest(html);
-	const sourceId = encodePanelAppId(source.sourceName);
-	return {
-		appId: resolvePanelAppAppId(source, manifest),
-		sourceId,
-		source,
-		manifest,
-		html,
-		htmlWithBase: source.kind === "folder" ? injectPanelAppAssetBase(html, createAssetBaseHref(source)) : html
-	};
-}
-async function readPanelAppContentSourceByIdOrAppId(params) {
-	const { appIdOrSourceId, createAssetBaseHref, panelsPath, sourceService } = params;
-	try {
-		return await readPanelAppContentSource({
-			createAssetBaseHref,
-			id: appIdOrSourceId,
-			panelsPath,
-			sourceService
-		});
-	} catch (error) {
-		if (!isPanelAppError(error)) throw error;
-		if (error.code !== "PANEL_APP_INVALID_ID" && error.code !== "PANEL_APP_NOT_FOUND") throw error;
-	}
-	const sources = await sourceService.listSources(panelsPath);
-	for (const source of sources) {
-		const html = await readFile(source.entryPath, "utf8");
-		if (resolvePanelAppAppId(source, source.manifest ?? parsePanelAppManifest(html)) === appIdOrSourceId) return await readPanelAppContentSource({
-			createAssetBaseHref,
-			id: encodePanelAppId(source.sourceName),
-			panelsPath,
-			sourceService
-		});
-	}
-	throw new PanelAppError("PANEL_APP_NOT_FOUND", "panel app not found");
-}
-function resolvePanelAppAppId(source, manifest) {
-	return manifest.id ?? encodePanelAppId(source.sourceName);
-}
-async function assertPanelAppDeclaresClient(params) {
-	const { appId, panelsPath, sourceService } = params;
-	const sources = await sourceService.listSources(panelsPath);
-	for (const source of sources) {
-		const manifest = source.manifest ?? parsePanelAppManifest(await readFile(source.entryPath, "utf8"));
-		if (resolvePanelAppAppId(source, manifest) !== appId) continue;
-		if (!manifest.client) throw new PanelAppError("PANEL_APP_CLIENT_NOT_DECLARED", "panel app did not declare client access");
-		return;
-	}
-	throw new PanelAppError("PANEL_APP_NOT_FOUND", "panel app not found");
-}
-//#endregion
 //#region src/managers/panel-app.manager.ts
 const PANEL_APP_CONTENT_BASE_PATH = "/api/panel-apps";
 const PANEL_APP_TOKENIZED_ASSET_BASE_PATH = "/api/panel-app-assets";
@@ -8106,6 +8802,8 @@ var PanelAppManager = class {
 	agentBridgeService;
 	assetTokenService = new PanelAppAssetTokenService();
 	sourceService = new PanelAppSourceService();
+	packageStateManager;
+	entryPresenter;
 	constructor(params) {
 		this.params = params;
 		this.agentRunClient = params.agentRunClient ?? (params.eventBus && params.ingress ? new AgentRunClient({
@@ -8116,16 +8814,31 @@ var PanelAppManager = class {
 			agentRunClient: this.agentRunClient,
 			createCapabilityGrantStore: this.createCapabilityGrantStore
 		});
+		this.packageStateManager = new PanelAppPackageStateManager({
+			sourceService: this.sourceService,
+			getPanelsPath: () => this.getPanelsPath(this.getWorkspacePath()),
+			listPackageComponentSources: params.listPackageComponentSources,
+			createAssetBaseHref: this.createAssetBaseHref,
+			deleteBridgeSessions: this.deleteBridgeSessionsByPanelAppId,
+			createStateStore: this.createStateStore,
+			createCapabilityGrantStore: this.createCapabilityGrantStore,
+			createClientGrantStore: this.createClientGrantStore
+		});
+		this.entryPresenter = new PanelAppEntryPresenter({
+			contentBasePath: PANEL_APP_CONTENT_BASE_PATH,
+			createAssetBaseHref: this.createAssetBaseHref,
+			isClientGranted: this.isPanelAppClientGranted
+		});
 	}
 	listPanelApps = async () => {
 		const workspacePath = this.getWorkspacePath();
 		const panelsPath = this.getPanelsPath(workspacePath);
-		const sources = await this.sourceService.listSources(panelsPath);
+		const sources = await this.packageStateManager.listSources();
 		const appState = await this.createStateStore(panelsPath).load();
 		return {
 			workspacePath,
 			panelsPath,
-			entries: (await Promise.all(sources.map((source) => this.buildPanelAppEntry(source, appState[encodePanelAppId(source.sourceName)] ?? {})))).sort(this.comparePanelApps)
+			entries: (await Promise.all(sources.map(({ source, packageSource }) => this.entryPresenter.build(source, appState[encodePanelAppId(source.sourceName)] ?? {}, packageSource)))).sort(this.entryPresenter.compare)
 		};
 	};
 	getPanelAppContent = async (id, sourcePath) => {
@@ -8200,12 +8913,7 @@ var PanelAppManager = class {
 		return session;
 	};
 	createPanelAppBridgeSession = async (params) => {
-		const resolved = await readPanelAppContentSourceByIdOrAppId({
-			appIdOrSourceId: params.id,
-			createAssetBaseHref: this.createAssetBaseHref,
-			panelsPath: this.getPanelsPath(this.getWorkspacePath()),
-			sourceService: this.sourceService
-		});
+		const resolved = await this.packageStateManager.readContentSourceByIdOrAppId(params.id);
 		return this.createPanelAppRuntimeTokenSession({
 			appId: resolved.appId,
 			clientDeclared: resolved.manifest.client,
@@ -8214,11 +8922,7 @@ var PanelAppManager = class {
 		});
 	};
 	grantPanelAppClient = async (appId) => {
-		await assertPanelAppDeclaresClient({
-			appId,
-			panelsPath: this.getPanelsPath(this.getWorkspacePath()),
-			sourceService: this.sourceService
-		});
+		await this.packageStateManager.assertDeclaresClient(appId);
 		return await this.createClientGrantStore().grant({
 			appId,
 			grantedAt: (/* @__PURE__ */ new Date()).toISOString()
@@ -8252,17 +8956,19 @@ var PanelAppManager = class {
 		const fileName = await this.resolvePanelAppFileName(id);
 		const panelsPath = this.getPanelsPath(this.getWorkspacePath());
 		const state = await this.createStateStore(panelsPath).updatePreferences(encodePanelAppId(fileName), preferences);
-		return await this.buildPanelAppEntry(await this.sourceService.resolveSource(panelsPath, encodePanelAppId(fileName)), state);
+		return await this.entryPresenter.build(await this.packageStateManager.resolveSource(encodePanelAppId(fileName)), state, await this.packageStateManager.findPackageSourceBySourceName(fileName));
 	};
 	recordPanelAppOpened = async (id) => {
 		const fileName = await this.resolvePanelAppFileName(id);
 		const panelsPath = this.getPanelsPath(this.getWorkspacePath());
 		const state = await this.createStateStore(panelsPath).recordOpened(encodePanelAppId(fileName));
-		return await this.buildPanelAppEntry(await this.sourceService.resolveSource(panelsPath, encodePanelAppId(fileName)), state);
+		return await this.entryPresenter.build(await this.packageStateManager.resolveSource(encodePanelAppId(fileName)), state, await this.packageStateManager.findPackageSourceBySourceName(fileName));
 	};
 	deletePanelApp = async (id) => {
 		const panelsPath = this.getPanelsPath(this.getWorkspacePath());
-		const source = await this.sourceService.resolveSource(panelsPath, id);
+		const source = await this.packageStateManager.resolveSource(id);
+		const packageSource = await this.packageStateManager.findPackageSourceBySourceName(source.sourceName);
+		if (packageSource) throw new PanelAppError("PANEL_APP_MANAGED_SOURCE", `package panel must be managed through Apps: ${packageSource.packageId}`);
 		const panelAppId = encodePanelAppId(source.sourceName);
 		const appId = resolvePanelAppAppId(source, source.manifest ?? parsePanelAppManifest(await readFile(source.entryPath, "utf8")));
 		await rm(source.sourcePath, { recursive: source.kind === "folder" });
@@ -8292,36 +8998,12 @@ var PanelAppManager = class {
 	createStateStore = (panelsPath) => new PanelAppStateStore(panelsPath);
 	createCapabilityGrantStore = () => new PanelAppCapabilityGrantStore(join(this.getPanelsPath(this.getWorkspacePath()), PANEL_APP_CAPABILITY_GRANTS_FILE_NAME));
 	createClientGrantStore = () => new PanelAppClientGrantStore(join(this.getPanelsPath(this.getWorkspacePath()), PANEL_APP_CLIENT_GRANTS_FILE_NAME));
-	buildPanelAppEntry = async (source, state) => {
-		const manifest = source.manifest ?? parsePanelAppManifest(await readFile(source.entryPath, "utf8"));
-		const id = encodePanelAppId(source.sourceName);
-		const appId = resolvePanelAppAppId(source, manifest);
-		const createdAt = resolvePanelAppCreatedAt(source.sourceStat);
-		const updatedAt = source.sourceStat.mtime.toISOString();
-		const entry = {
-			id,
-			appId,
-			fileName: source.sourceName,
-			kind: source.kind,
-			title: manifest.title ?? toPanelAppTitle(source.sourceName),
-			contentPath: `${PANEL_APP_CONTENT_BASE_PATH}/${encodeURIComponent(id)}/content`,
-			createdAt,
-			updatedAt,
-			sizeBytes: source.sourceStat.size,
-			favorite: state.favorite ?? false,
-			clientDeclared: manifest.client,
-			clientGranted: await this.isPanelAppClientGranted(appId, manifest.client),
-			openCount: state.openCount ?? 0
-		};
-		if (manifest.description) entry.description = manifest.description;
-		if (manifest.icon) entry.icon = source.kind === "folder" ? resolvePanelAppIconUrl(id, manifest.icon) : manifest.icon;
-		if (state.lastOpenedAt) entry.lastOpenedAt = state.lastOpenedAt;
-		return entry;
-	};
 	resolvePanelAppFileName = async (id) => {
-		return (await this.sourceService.resolveSource(this.getPanelsPath(this.getWorkspacePath()), id)).sourceName;
+		return (await this.packageStateManager.resolveSource(id)).sourceName;
 	};
-	comparePanelApps = (left, right) => resolvePanelAppActivityMs(right) - resolvePanelAppActivityMs(left) || Number(right.favorite) - Number(left.favorite) || left.title.localeCompare(right.title);
+	assertCanActivatePackageComponents = async (components) => await this.packageStateManager.assertCanActivate(components);
+	deactivatePackageComponents = (components) => this.packageStateManager.deactivate(components);
+	removePackageComponentState = async (components) => await this.packageStateManager.removeState(components);
 	deleteExpiredBridgeSessions = () => {
 		const now = Date.now();
 		for (const [token, session] of this.bridgeSessions) if (new Date(session.expiresAt).getTime() <= now) this.bridgeSessions.delete(token);
@@ -8777,7 +9459,7 @@ var McpServiceAppRuntimeService = class {
 				command: manifest.command,
 				args: manifest.args,
 				cwd: app.dirPath,
-				env: createRuntimeChildEnv(process.env),
+				env: createRuntimeChildEnv(process.env, this.createAppRuntimeEnv(app)),
 				stderr: "pipe"
 			},
 			scope: {
@@ -8790,6 +9472,15 @@ var McpServiceAppRuntimeService = class {
 			}
 		}
 	});
+	createAppRuntimeEnv = (app) => {
+		if (app.sourceKind !== "package" || !app.packageId || !app.packageVersion || !app.packageDirectory || !app.dataDirectory) return {};
+		return {
+			NEXTCLAW_APP_ID: app.packageId,
+			NEXTCLAW_APP_VERSION: app.packageVersion,
+			NEXTCLAW_APP_DATA_DIR: app.dataDirectory,
+			NEXTCLAW_APP_PACKAGE_DIR: app.packageDirectory
+		};
+	};
 	toServiceAction = (manifest, tool) => {
 		const actionId = buildServiceActionId(manifest.id, tool.toolName);
 		const manifestAction = manifest.actions[tool.toolName];
@@ -8884,12 +9575,12 @@ var ServiceActionGrantStore = class {
 	};
 };
 function normalizeStoreData(value) {
-	if (!isRecord$7(value) || value.version !== 1 || !isRecord$7(value.grants)) return structuredClone(EMPTY_GRANTS);
+	if (!isRecord$8(value) || value.version !== 1 || !isRecord$8(value.grants)) return structuredClone(EMPTY_GRANTS);
 	const grants = {};
 	for (const [callerKey, callerValue] of Object.entries(value.grants)) {
-		if (!isRecord$7(callerValue) || !isRecord$7(callerValue.actions)) continue;
+		if (!isRecord$8(callerValue) || !isRecord$8(callerValue.actions)) continue;
 		const actions = {};
-		for (const [actionId, actionValue] of Object.entries(callerValue.actions)) if (isRecord$7(actionValue) && typeof actionValue.grantedAt === "string" && isServiceActionRisk(actionValue.risk)) actions[actionId] = {
+		for (const [actionId, actionValue] of Object.entries(callerValue.actions)) if (isRecord$8(actionValue) && typeof actionValue.grantedAt === "string" && isServiceActionRisk(actionValue.risk)) actions[actionId] = {
 			grantedAt: actionValue.grantedAt,
 			risk: actionValue.risk
 		};
@@ -8903,11 +9594,11 @@ function normalizeStoreData(value) {
 function isServiceActionRisk(value) {
 	return value === "read" || value === "write" || value === "external" || value === "dangerous";
 }
-function isRecord$7(value) {
+function isRecord$8(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function isMissingFileError(error) {
-	return isRecord$7(error) && error.code === "ENOENT";
+	return isRecord$8(error) && error.code === "ENOENT";
 }
 //#endregion
 //#region src/utils/service-app-manifest.utils.ts
@@ -8932,7 +9623,7 @@ function parseServiceAppManifest(raw) {
 	} catch (error) {
 		throw new Error(`service-app.json is not valid JSON: ${error instanceof Error ? error.message : String(error)}`);
 	}
-	if (!isRecord$6(parsed)) throw new Error("service-app.json must contain an object.");
+	if (!isRecord$7(parsed)) throw new Error("service-app.json must contain an object.");
 	const id = readRequiredString$6(parsed, "id");
 	if (!SERVICE_APP_ID_PATTERN.test(id)) throw new Error("service app id must be kebab-case.");
 	const protocol = readOptionalString$7(parsed, "protocol") ?? "mcp";
@@ -8950,16 +9641,16 @@ function parseServiceAppManifest(raw) {
 }
 function readManifestActions(value) {
 	if (value === void 0) throw new Error("service app actions are required.");
-	if (!isRecord$6(value)) throw new Error("service app actions must be an object.");
+	if (!isRecord$7(value)) throw new Error("service app actions must be an object.");
 	if (Object.keys(value).length === 0) throw new Error("service app actions cannot be empty.");
 	const actions = {};
 	for (const [name, action] of Object.entries(value)) {
 		if (!name.trim()) throw new Error("service app action name cannot be empty.");
-		if (!isRecord$6(action)) throw new Error(`service app action ${name} must be an object.`);
+		if (!isRecord$7(action)) throw new Error(`service app action ${name} must be an object.`);
 		const risk = readOptionalString$7(action, "risk");
 		if (risk !== void 0 && !SERVICE_ACTION_RISKS.has(risk)) throw new Error(`service app action ${name} has invalid risk.`);
 		const inputSchema = action.inputSchema;
-		if (inputSchema !== void 0 && !isRecord$6(inputSchema)) throw new Error(`service app action ${name} inputSchema must be an object.`);
+		if (inputSchema !== void 0 && !isRecord$7(inputSchema)) throw new Error(`service app action ${name} inputSchema must be an object.`);
 		actions[name] = {
 			risk,
 			title: readOptionalString$7(action, "title"),
@@ -8987,7 +9678,7 @@ function readStringArray(value, key) {
 	if (!Array.isArray(value) || value.some((entry) => typeof entry !== "string")) throw new Error(`service app ${key} must be a string array.`);
 	return value;
 }
-function isRecord$6(value) {
+function isRecord$7(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 //#endregion
@@ -9045,10 +9736,13 @@ var ServiceAppManager = class {
 		const workspacePath = this.getWorkspacePath();
 		const serviceAppsPath = this.getServiceAppsPath(workspacePath);
 		const dirNames = await this.listServiceAppDirNames(serviceAppsPath);
+		const workspaceEntries = await Promise.all(dirNames.map((dirName) => this.buildServiceAppRecord(serviceAppsPath, dirName)));
+		const packageSources = (await this.listPackageComponentSources()).filter((component) => component.kind === "service");
+		const packageEntries = await Promise.all(packageSources.map((source) => this.buildServiceAppRecordFromPackage(source)));
 		return {
 			workspacePath,
 			serviceAppsPath,
-			entries: (await Promise.all(dirNames.map((dirName) => this.buildServiceAppRecord(serviceAppsPath, dirName)))).filter((entry) => Boolean(entry)).sort((left, right) => left.title.localeCompare(right.title))
+			entries: [...workspaceEntries, ...packageEntries].filter((entry) => Boolean(entry)).sort((left, right) => left.title.localeCompare(right.title))
 		};
 	};
 	getServiceApp = async (appId) => {
@@ -9126,6 +9820,7 @@ var ServiceAppManager = class {
 	};
 	deleteServiceApp = async (appId) => {
 		const { record } = await this.requireServiceApp(appId);
+		if (record.sourceKind === "package") throw new ServiceAppError("SERVICE_APP_MANAGED_SOURCE", `package service must be managed through Apps: ${record.packageId}`);
 		await this.runtimeService.restart(record.id);
 		await rm(record.dirPath, { recursive: true });
 		await this.createGrantStore().revokeActionsByPrefix(`${record.id}.`);
@@ -9137,6 +9832,31 @@ var ServiceAppManager = class {
 	dispose = async () => {
 		await this.runtimeService.dispose();
 	};
+	assertCanActivatePackageComponents = async (components) => {
+		const serviceComponents = components.filter((component) => component.kind === "service");
+		if (serviceComponents.length === 0) return;
+		const workspacePath = this.getServiceAppsPath(this.getWorkspacePath());
+		const workspaceIds = /* @__PURE__ */ new Set();
+		for (const dirName of await this.listServiceAppDirNames(workspacePath)) try {
+			workspaceIds.add((await readServiceAppManifest(join(workspacePath, dirName))).id);
+		} catch {
+			continue;
+		}
+		const activePackageSources = await this.listPackageComponentSources();
+		for (const component of serviceComponents) {
+			const conflictsWithPackage = activePackageSources.some((active) => active.kind === "service" && active.id === component.id && active.packageId !== component.packageId);
+			if (workspaceIds.has(component.id) || conflictsWithPackage) throw new AppPackageError("APP_PACKAGE_CONFLICT", `Service component id 冲突：${component.id}`);
+		}
+	};
+	deactivatePackageComponents = async (components) => {
+		const serviceIds = components.filter((component) => component.kind === "service").map((component) => component.id);
+		await Promise.all(serviceIds.map(async (serviceId) => await this.runtimeService.restart(serviceId)));
+	};
+	removePackageComponentGrants = async (components) => {
+		const serviceIds = components.filter((component) => component.kind === "service").map((component) => component.id);
+		const grantStore = this.createGrantStore();
+		for (const serviceId of serviceIds) await grantStore.revokeActionsByPrefix(`${serviceId}.`);
+	};
 	withGrantState = async (action, params) => {
 		if (!params.caller) return action;
 		const granted = await this.createGrantStore().isGranted(params.caller, action.id);
@@ -9161,14 +9881,23 @@ var ServiceAppManager = class {
 		return await this.requireServiceApp(appId);
 	};
 	requireServiceApp = async (appId) => {
-		const dirPath = join(this.getServiceAppsPath(this.getWorkspacePath()), appId);
+		let dirPath = join(this.getServiceAppsPath(this.getWorkspacePath()), appId);
+		let packageSource;
+		try {
+			if (!(await stat(dirPath)).isDirectory()) throw new ServiceAppError("SERVICE_APP_NOT_FOUND", "service app not found");
+		} catch (error) {
+			if (!this.isMissingFileError(error)) throw error;
+			packageSource = (await this.listPackageComponentSources()).find((component) => component.kind === "service" && component.id === appId);
+			if (!packageSource) throw new ServiceAppError("SERVICE_APP_NOT_FOUND", "service app not found");
+			dirPath = packageSource.sourcePath;
+		}
 		try {
 			if (!(await stat(dirPath)).isDirectory()) throw new ServiceAppError("SERVICE_APP_NOT_FOUND", "service app not found");
 			const manifest = await readServiceAppManifest(dirPath);
 			if (manifest.id !== appId) throw new ServiceAppError("SERVICE_APP_INVALID_MANIFEST", "service app manifest id must match directory name");
 			return {
 				manifest,
-				record: this.toServiceAppRecord(dirPath, manifest)
+				record: this.toServiceAppRecord(dirPath, manifest, packageSource)
 			};
 		} catch (error) {
 			if (isServiceAppError(error)) throw error;
@@ -9180,7 +9909,7 @@ var ServiceAppManager = class {
 		const workspacePath = this.getWorkspacePath();
 		const serviceAppsPath = this.getServiceAppsPath(workspacePath);
 		const dirNames = await this.listServiceAppDirNames(serviceAppsPath);
-		return (await Promise.all(dirNames.map(async (dirName) => {
+		const workspaceEntries = await Promise.all(dirNames.map(async (dirName) => {
 			const dirPath = join(serviceAppsPath, dirName);
 			try {
 				const manifest = await readServiceAppManifest(dirPath);
@@ -9191,7 +9920,19 @@ var ServiceAppManager = class {
 			} catch {
 				return null;
 			}
-		}))).filter((entry) => Boolean(entry));
+		}));
+		const packageEntries = await Promise.all((await this.listPackageComponentSources()).filter((component) => component.kind === "service").map(async (component) => {
+			try {
+				const manifest = await readServiceAppManifest(component.sourcePath);
+				return {
+					manifest,
+					record: this.toServiceAppRecord(component.sourcePath, manifest, component)
+				};
+			} catch {
+				return null;
+			}
+		}));
+		return [...workspaceEntries, ...packageEntries].filter((entry) => Boolean(entry));
 	};
 	buildServiceAppRecord = async (serviceAppsPath, dirName) => {
 		const dirPath = join(serviceAppsPath, dirName);
@@ -9213,7 +9954,7 @@ var ServiceAppManager = class {
 			};
 		}
 	};
-	toServiceAppRecord = (dirPath, manifest) => {
+	toServiceAppRecord = (dirPath, manifest, packageSource) => {
 		const runtimeStatus = this.runtimeService.getStatus(manifest.id);
 		return {
 			id: manifest.id,
@@ -9230,7 +9971,12 @@ var ServiceAppManager = class {
 			lastError: runtimeStatus.lastError,
 			lastStartedAt: runtimeStatus.lastStartedAt,
 			lastReadyAt: runtimeStatus.lastReadyAt,
-			lastFailedAt: runtimeStatus.lastFailedAt
+			lastFailedAt: runtimeStatus.lastFailedAt,
+			sourceKind: packageSource ? "package" : "workspace",
+			packageId: packageSource?.packageId,
+			packageVersion: packageSource?.packageVersion,
+			packageDirectory: packageSource ? join(packageSource.sourcePath, "..", "..") : void 0,
+			dataDirectory: packageSource?.dataDirectory
 		};
 	};
 	assertCaller = (caller) => {
@@ -9243,6 +9989,31 @@ var ServiceAppManager = class {
 	getWorkspacePath = () => getWorkspacePathFromConfig(this.params.configManager.config);
 	getServiceAppsPath = (workspacePath) => join(workspacePath, DEFAULT_SERVICE_APPS_DIR);
 	createGrantStore = () => new ServiceActionGrantStore(join(this.getServiceAppsPath(this.getWorkspacePath()), SERVICE_ACTION_GRANTS_FILE_NAME));
+	listPackageComponentSources = async () => await this.params.listPackageComponentSources?.() ?? [];
+	buildServiceAppRecordFromPackage = async (source) => {
+		try {
+			const manifest = await readServiceAppManifest(source.sourcePath);
+			if (manifest.id !== source.id) throw new Error(`service component id mismatch: ${source.id}`);
+			return this.toServiceAppRecord(source.sourcePath, manifest, source);
+		} catch (error) {
+			return {
+				id: source.id,
+				title: toTitle(source.id),
+				dirPath: source.sourcePath,
+				manifestPath: source.manifestPath,
+				cwd: source.sourcePath,
+				enabled: false,
+				protocol: "mcp",
+				status: "failed",
+				lastError: error instanceof Error ? error.message : String(error),
+				sourceKind: "package",
+				packageId: source.packageId,
+				packageVersion: source.packageVersion,
+				packageDirectory: join(source.sourcePath, "..", ".."),
+				dataDirectory: source.dataDirectory
+			};
+		}
+	};
 	listServiceAppDirNames = async (serviceAppsPath) => {
 		try {
 			return (await readdir(serviceAppsPath, { withFileTypes: true })).filter((entry) => entry.isDirectory() && !entry.name.startsWith(".")).map((entry) => entry.name);
@@ -9456,7 +10227,7 @@ function parseFrontmatterBlock(raw) {
 function parseYamlFrontmatter(raw) {
 	try {
 		const parsed = parse(raw);
-		return isRecord$5(parsed) ? parsed : {};
+		return isRecord$6(parsed) ? parsed : {};
 	} catch (error) {
 		const message = error instanceof Error ? error.message : String(error);
 		throw new Error(`Invalid SKILL.md frontmatter: ${message}`);
@@ -9468,7 +10239,7 @@ function readString$5(record, ...names) {
 }
 function readLocalizedTextMap(record, ...names) {
 	const value = readValue(record, names);
-	if (!isRecord$5(value)) return;
+	if (!isRecord$6(value)) return;
 	const localized = Object.fromEntries(Object.entries(value).filter((entry) => typeof entry[1] === "string" && entry[1].trim().length > 0).map(([locale, text]) => [normalizeLocaleTag(locale), text.trim()]));
 	return Object.keys(localized).length > 0 ? localized : void 0;
 }
@@ -9492,7 +10263,7 @@ function normalizeFrontmatterKey(raw) {
 function normalizeLocaleTag(raw) {
 	return raw.trim().toLowerCase();
 }
-function isRecord$5(value) {
+function isRecord$6(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 //#endregion
@@ -9639,23 +10410,61 @@ function resolveAgentHandoffDepth(metadata) {
 }
 //#endregion
 //#region src/utils/ncp-agent-unfinished-run.utils.ts
-function readUnfinishedNcpAgentRun(sessionId, events) {
-	let activeRun = null;
-	for (const event of events) {
-		if (event.type === NcpEventType.RunStarted) {
-			activeRun = {
-				sessionId,
-				...event.payload.messageId ? { messageId: event.payload.messageId } : {},
-				...event.payload.runId ? { runId: event.payload.runId } : {},
-				...event.payload.startedAt ? { startedAt: event.payload.startedAt } : {}
-			};
-			continue;
-		}
-		if (activeRun && (event.type === NcpEventType.RunFinished || event.type === NcpEventType.RunError || event.type === NcpEventType.MessageAbort) && (!event.payload.runId || !activeRun.runId || event.payload.runId === activeRun.runId)) activeRun = null;
-	}
+function applyNcpAgentRunLifecycleEvent(sessionId, activeRun, event) {
+	if (event.type === NcpEventType.RunStarted) return {
+		sessionId,
+		...event.payload.messageId ? { messageId: event.payload.messageId } : {},
+		...event.payload.runId ? { runId: event.payload.runId } : {},
+		...event.payload.startedAt ? { startedAt: event.payload.startedAt } : {}
+	};
+	if (activeRun && (event.type === NcpEventType.RunFinished || event.type === NcpEventType.RunError || event.type === NcpEventType.MessageAbort) && (!event.payload.runId || !activeRun.runId || event.payload.runId === activeRun.runId)) return null;
 	return activeRun;
 }
 //#endregion
+//#region src/stores/ncp-agent-unfinished-run.store.ts
+var NcpAgentUnfinishedRunStore = class {
+	constructor(journalDir, listSessionIds) {
+		this.journalDir = journalDir;
+		this.listSessionIds = listSessionIds;
+	}
+	list = async () => {
+		const runs = [];
+		for (const sessionId of await this.listSessionIds()) {
+			const run = await this.read(sessionId);
+			if (run) runs.push(run);
+		}
+		return runs;
+	};
+	read = async (sessionId) => {
+		const input = createReadStream(this.sessionPath(sessionId), { encoding: "utf-8" });
+		const lines = createInterface({
+			input,
+			crlfDelay: Infinity
+		});
+		let activeRun = null;
+		try {
+			for await (const line of lines) {
+				if (!line.trim()) continue;
+				let parsed;
+				try {
+					parsed = JSON.parse(line);
+				} catch {
+					continue;
+				}
+				if (!isRecord$13(parsed) || parsed._type !== "event" || !isRecord$13(parsed.event)) continue;
+				activeRun = applyNcpAgentRunLifecycleEvent(sessionId, activeRun, parsed.event);
+			}
+			return activeRun;
+		} catch {
+			return null;
+		} finally {
+			lines.close();
+			input.destroy();
+		}
+	};
+	sessionPath = (sessionId) => join(this.journalDir, `${safeNcpSessionFilename(sessionId.replace(/:/g, "_"))}.jsonl`);
+};
+//#endregion
 //#region src/utils/ncp-agent-session-journal-entry.utils.ts
 function isNcpAgentSessionMessageProjectionBoundaryEvent(event) {
 	return event.type === NcpEventType.MessageSent || event.type === NcpEventType.MessageCompleted || event.type === NcpEventType.MessageAbort || event.type === NcpEventType.RunFinished || event.type === NcpEventType.RunError || event.type === "session.snapshot.message";
@@ -9663,11 +10472,11 @@ function isNcpAgentSessionMessageProjectionBoundaryEvent(event) {
 function serializeNcpAgentSessionJournalEntry(entry) {
 	const serialized = JSON.stringify(entry);
 	if (!serialized) throw new Error("ncp agent session journal entry serialization produced empty output");
-	if (!isRecord$12(JSON.parse(serialized))) throw new Error("ncp agent session journal entry serialization produced a non-object entry");
+	if (!isRecord$13(JSON.parse(serialized))) throw new Error("ncp agent session journal entry serialization produced a non-object entry");
 	return serialized;
 }
 function attachNcpAgentSessionJournalTimestamp(event, timestamp) {
-	if (!("payload" in event) || !isRecord$12(event.payload)) return event;
+	if (!("payload" in event) || !isRecord$13(event.payload)) return event;
 	return {
 		...event,
 		payload: {
@@ -9692,7 +10501,7 @@ var NcpAgentSessionJournalParser = class {
 			this.applyMetadata(parsed);
 			return;
 		}
-		if (parsed._type === "event" && isRecord$12(parsed.event)) this.applyEvent(parsed, lineEndOffset);
+		if (parsed._type === "event" && isRecord$13(parsed.event)) this.applyEvent(parsed, lineEndOffset);
 	};
 	finish = () => ({
 		metadata: this.metadata,
@@ -9706,14 +10515,14 @@ var NcpAgentSessionJournalParser = class {
 	parseLine = (line, index) => {
 		try {
 			const parsed = JSON.parse(line);
-			return isRecord$12(parsed) ? parsed : null;
+			return isRecord$13(parsed) ? parsed : null;
 		} catch (error) {
 			console.warn(`[ncp-agent-session-journal] skipped corrupted journal line ${index + 1}: ${error instanceof Error ? error.message : String(error)}`);
 			return null;
 		}
 	};
 	applyMetadata = (entry) => {
-		this.metadata = isRecord$12(entry.metadata) ? structuredClone(entry.metadata) : {};
+		this.metadata = isRecord$13(entry.metadata) ? structuredClone(entry.metadata) : {};
 		this.agentId = normalizeNcpAgentId(typeof entry.agent_id === "string" ? entry.agent_id : void 0);
 		this.createdAt = toIsoString(entry.created_at, this.createdAt);
 		this.updatedAt = toIsoString(entry.updated_at, this.updatedAt);
@@ -9740,25 +10549,6 @@ function parseNcpAgentSessionJournal(raw) {
 	return parser.finish();
 }
 //#endregion
-//#region src/stores/ncp-agent-unfinished-run.store.ts
-var NcpAgentUnfinishedRunStore = class {
-	constructor(journalDir, listSessionIds) {
-		this.journalDir = journalDir;
-		this.listSessionIds = listSessionIds;
-	}
-	list = async () => {
-		return (await Promise.all((await this.listSessionIds()).map(this.read))).filter((run) => run !== null);
-	};
-	read = async (sessionId) => {
-		try {
-			return readUnfinishedNcpAgentRun(sessionId, parseNcpAgentSessionJournal(await readFile(this.sessionPath(sessionId), "utf-8")).events);
-		} catch {
-			return null;
-		}
-	};
-	sessionPath = (sessionId) => join(this.journalDir, `${safeNcpSessionFilename(sessionId.replace(/:/g, "_"))}.jsonl`);
-};
-//#endregion
 //#region src/stores/ncp-agent-session-metadata.store.ts
 var NcpAgentSessionMetadataStore = class {
 	constructor(journalDir) {
@@ -9779,7 +10569,7 @@ var NcpAgentSessionMetadataStore = class {
 	read = async (sessionId, activitySnapshot) => {
 		try {
 			const parsed = JSON.parse(await readFile(this.metadataPath(sessionId), "utf-8"));
-			if (!isRecord$12(parsed) || parsed._type !== "metadata" || !isRecord$12(parsed.metadata)) throw new Error(`invalid ncp agent session metadata sidecar: ${sessionId}`);
+			if (!isRecord$13(parsed) || parsed._type !== "metadata" || !isRecord$13(parsed.metadata)) throw new Error(`invalid ncp agent session metadata sidecar: ${sessionId}`);
 			const createdAt = toIsoString(parsed.created_at, activitySnapshot.createdAt);
 			const agentId = normalizeNcpAgentId(typeof parsed.agent_id === "string" ? parsed.agent_id : void 0);
 			return {
@@ -9849,7 +10639,7 @@ function deduplicateNcpAgentSessionTailMessages(messages) {
 function isNcpAgentSessionMessageProjectionMeta(value, sessionId) {
 	if (!value || typeof value !== "object" || Array.isArray(value)) return false;
 	const meta = value;
-	return meta.version === 6 && meta.sessionId === sessionId && Number.isSafeInteger(meta.total) && Number.isSafeInteger(meta.projectedJournalOffset) && Number.isSafeInteger(meta.dataBytes) && (meta.activeMessageId === null || typeof meta.activeMessageId === "string") && Array.isArray(meta.pendingCompactionMessageIds) && meta.pendingCompactionMessageIds.every((id) => typeof id === "string") && (meta.contextWindow === null || isRecord$4(meta.contextWindow));
+	return meta.version === 6 && meta.sessionId === sessionId && Number.isSafeInteger(meta.total) && Number.isSafeInteger(meta.projectedJournalOffset) && Number.isSafeInteger(meta.dataBytes) && (meta.activeMessageId === null || typeof meta.activeMessageId === "string") && Array.isArray(meta.pendingCompactionMessageIds) && meta.pendingCompactionMessageIds.every((id) => typeof id === "string") && (meta.contextWindow === null || isRecord$5(meta.contextWindow));
 }
 function readActiveAssistantMessageId(messages) {
 	for (let index = messages.length - 1; index >= 0; index -= 1) {
@@ -9872,12 +10662,12 @@ function mergePendingCompactionMessageIds(current, messages) {
 	}
 	return pending;
 }
-function isRecord$4(value) {
+function isRecord$5(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function readCompactionStatus(message) {
 	const checkpoint = message.metadata?.checkpoint;
-	if (message.metadata?.nextclaw_timeline_kind !== "context_compaction" || !isRecord$4(checkpoint)) return null;
+	if (message.metadata?.nextclaw_timeline_kind !== "context_compaction" || !isRecord$5(checkpoint)) return null;
 	return typeof checkpoint.status === "string" ? checkpoint.status : null;
 }
 //#endregion
@@ -11894,7 +12684,7 @@ var CurrentSessionContextProvider = class {
 const MAX_EXCERPT_COUNT = 16;
 const MAX_EXCERPT_CHARACTERS$1 = 8e3;
 const MAX_TOTAL_CONTEXT_CHARACTERS$1 = 96e3;
-function isRecord$3(value) {
+function isRecord$4(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function readString$3(value) {
@@ -11905,11 +12695,11 @@ function escapeAttribute$1(value) {
 }
 function readConversationExcerpts(metadata) {
 	const raw = metadata?.[CHAT_INLINE_TOKENS_METADATA_KEY];
-	const entries = isRecord$3(raw) && raw.schemaVersion === CHAT_INLINE_TOKENS_SCHEMA_VERSION && Array.isArray(raw.items) ? raw.items : [];
+	const entries = isRecord$4(raw) && raw.schemaVersion === CHAT_INLINE_TOKENS_SCHEMA_VERSION && Array.isArray(raw.items) ? raw.items : [];
 	const excerpts = [];
 	const seen = /* @__PURE__ */ new Set();
 	for (const entry of entries) {
-		if (!isRecord$3(entry) || entry.kind !== CHAT_CONVERSATION_EXCERPT_TOKEN_KIND) continue;
+		if (!isRecord$4(entry) || entry.kind !== CHAT_CONVERSATION_EXCERPT_TOKEN_KIND) continue;
 		const key = readString$3(entry.key);
 		const messageId = readString$3(entry.messageId);
 		const label = readString$3(entry.label);
@@ -11954,27 +12744,63 @@ var ConversationExcerptContextProvider = class {
 	};
 };
 //#endregion
-//#region src/contributions/context-provider/providers/inbox-delivery-context.provider.ts
-var InboxDeliveryContextProvider = class {
-	constructor(deliveryManager, sessionManager) {
-		this.deliveryManager = deliveryManager;
-		this.sessionManager = sessionManager;
+//#region src/contributions/context-provider/providers/system-object-reference-context.provider.ts
+function isRecord$3(value) {
+	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function readSystemObjectReferences(metadata) {
+	const raw = metadata?.[CHAT_INLINE_TOKENS_METADATA_KEY];
+	if (!isRecord$3(raw) || raw.schemaVersion !== CHAT_INLINE_TOKENS_SCHEMA_VERSION || !Array.isArray(raw.items)) return [];
+	const references = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const item of raw.items) {
+		if (!isRecord$3(item) || item.kind !== CHAT_SYSTEM_OBJECT_TOKEN_KIND) continue;
+		const reference = readSystemObjectResolvedReference(item.reference);
+		if (!reference || seen.has(`${reference.uri}@${reference.version}`)) continue;
+		seen.add(`${reference.uri}@${reference.version}`);
+		references.push(reference);
+	}
+	return references;
+}
+var SystemObjectReferenceContextProvider = class {
+	constructor(assetStore) {
+		this.assetStore = assetStore;
 	}
 	provide = async (request) => {
-		if (!request.sessionId) return [];
-		const rawDeliveryId = (await this.sessionManager.getSessionRecord(request.sessionId))?.metadata?.[INBOX_DELIVERY_SESSION_METADATA_KEY];
-		if (typeof rawDeliveryId !== "string" || !rawDeliveryId.trim()) return [];
-		const delivery = await this.deliveryManager.getDelivery(rawDeliveryId);
-		if (!delivery) return [];
-		const lines = [
-			"## Inbox Delivery Context",
-			"This chat was opened from a durable inbox delivery. Treat the following content as the shared subject for this conversation.",
-			`Delivery ID: ${delivery.id}`,
-			`Title: ${delivery.title}`
-		];
-		if (delivery.summary) lines.push(`Summary: ${delivery.summary}`);
-		lines.push("", "### Delivered content", delivery.content);
-		return [lines.join("\n")];
+		const references = readSystemObjectReferences(request.message.metadata ?? request.metadata);
+		if (references.length === 0) return [];
+		return [[
+			"## Explicit System Object References",
+			"The user visibly referenced these immutable NextClaw-managed object snapshots in the current message.",
+			"",
+			(await Promise.all(references.map(async (reference) => {
+				const asset = await this.assetStore.statRecord(reference.assetUri);
+				if (!asset || asset.sha256 !== reference.version || asset.sizeBytes !== reference.sizeBytes || asset.fileName !== reference.fileName || asset.mimeType !== reference.mimeType || !isTextLikeAsset({
+					mimeType: asset.mimeType,
+					fileName: asset.fileName
+				})) return [
+					`### ${reference.label}`,
+					`Object: ${reference.uri}`,
+					`Version: ${reference.version}`,
+					"Snapshot unavailable. Do not fall back to the live object."
+				].join("\n");
+				const bytes = await this.assetStore.readAssetBytes(reference.assetUri);
+				if (!bytes) return [
+					`### ${reference.label}`,
+					`Object: ${reference.uri}`,
+					`Version: ${reference.version}`,
+					"Snapshot unavailable. Do not fall back to the live object."
+				].join("\n");
+				return [
+					`### ${reference.label}`,
+					`Object: ${reference.uri}`,
+					`Type: ${reference.objectType}`,
+					`Version: ${reference.version}`,
+					"",
+					bytes.toString("utf8")
+				].join("\n");
+			}))).join("\n\n")
+		].join("\n")];
 	};
 };
 //#endregion
@@ -12051,23 +12877,24 @@ const createCliQuickReferenceContextProvider = () => {
 	return staticBlock([
 		`## ${APP_NAME} CLI Quick Reference`,
 		`${APP_NAME} is controlled via subcommands. Do not invent commands.`,
-		"To manage the Gateway daemon service (start/stop/restart):",
-		`- ${appLower} gateway status`,
-		`- ${appLower} gateway start`,
-		`- ${appLower} gateway stop`,
-		`- ${appLower} gateway restart`,
-		`If unsure, ask the user to run \`${appLower} help\` (or \`${appLower} gateway --help\`) and paste the output.`
+		"To manage the background service:",
+		`- ${appLower} status`,
+		`- ${appLower} start`,
+		`- ${appLower} restart`,
+		`- ${appLower} stop`,
+		`The \`${appLower} gateway\` command starts a foreground gateway; it has no lifecycle subcommands.`,
+		`If unsure, ask the user to run \`${appLower} help\` and paste the output.`
 	]);
 };
 const createSelfUpdateContextProvider = () => staticBlock([
 	`## ${APP_NAME} Self-Update`,
 	"Get Updates (self-update) is ONLY allowed when the user explicitly asks for it.",
 	"Do not run config.apply or update.run unless the user explicitly requests an update or config change; if it's not explicit, ask first.",
-	"Actions: config.get, config.schema, config.apply (validate + write full config, then restart), config.patch (merge + restart), update.run (update deps or git, then restart).",
+	"Actions: config.get, config.schema, config.apply (validate + write full config), config.patch (merge config), update.run (update the runtime and relaunch the service).",
 	"When patching config, copy enum values exactly from config.schema; never invent new variants.",
 	"session.dmScope legal values are exactly: main | per-peer | per-channel-peer | per-account-channel-peer.",
 	"If an enum/path is uncertain, stop and call config.schema first; do not guess.",
-	`After restart, ${APP_NAME} pings the last active session automatically.`
+	`If a config change requires restart, tell the user to run \`${APP_NAME.toLowerCase()} restart\` in an external terminal. Do not run it from the active agent session.`
 ]);
 const createReplyTagsContextProvider = () => staticBlock([
 	"## Reply Tags",
@@ -12830,7 +13657,7 @@ var ContextProviderContribution = class {
 			new SkillsContextProvider(context),
 			createSessionOrchestrationContextProvider(),
 			new ExecutionPolicyContextProvider(context),
-			new InboxDeliveryContextProvider(this.kernel.inboxDeliveryManager, this.kernel.sessionManager),
+			new SystemObjectReferenceContextProvider(this.kernel.assetStore),
 			new CurrentSessionContextProvider(context),
 			new ReplyFormatContextProvider()
 		]) this.cleanups.push(this.kernel.contextProviderManager.register(provider));
@@ -14186,6 +15013,10 @@ var ToolProviderContribution = class {
 };
 //#endregion
 //#region src/app/nextclaw-kernel.ts
+function resolveKernelAppHomeDirectory(options) {
+	const homeDir = options.homeDir?.trim();
+	return resolve(homeDir ? expandHome(homeDir) : getDataDir(), "apps");
+}
 function resolveKernelSessionsDir(options) {
 	const homeDir = options.homeDir?.trim();
 	if (homeDir) return ensureDir(resolve(expandHome(homeDir), "sessions"));
@@ -14234,6 +15065,7 @@ var NextclawKernel = class {
 	control;
 	skills;
 	automation;
+	appPackageManager;
 	channels;
 	sessionRequests;
 	sessionSearch;
@@ -14241,6 +15073,7 @@ var NextclawKernel = class {
 	mcpManager;
 	sessionManager;
 	inboxDeliveryManager;
+	systemObjectReferenceManager;
 	panelAppManager;
 	preferenceManager;
 	projectManager;
@@ -14295,16 +15128,26 @@ var NextclawKernel = class {
 		});
 		this.inboxDeliveryManager = new InboxDeliveryManager({
 			eventBus: this.eventBus,
-			sessionManager: this.sessionManager,
 			storePath: resolveKernelInboxDeliveryStorePath(options)
 		});
+		this.systemObjectReferenceManager = new SystemObjectReferenceManager(this.assetStore, [createInboxDeliverySystemObjectProvider(this.inboxDeliveryManager), createCronJobSystemObjectProvider(this.automation)]);
+		this.appPackageManager = new AppPackageManager({
+			appHomeDirectory: resolveKernelAppHomeDirectory(options),
+			builtInAppsDirectory: options.builtInAppsDirectory,
+			productVersion: options.productVersion
+		});
 		this.panelAppManager = new PanelAppManager({
 			configManager: this.configManager,
 			eventBus: this.eventBus,
-			ingress: this.ingress
+			ingress: this.ingress,
+			listPackageComponentSources: this.appPackageManager.listActiveComponentSources
 		});
 		this.preferenceManager = new PreferenceManager({ storePath: resolveKernelPreferenceStorePath(options) });
-		this.serviceAppManager = new ServiceAppManager({ configManager: this.configManager });
+		this.serviceAppManager = new ServiceAppManager({
+			configManager: this.configManager,
+			listPackageComponentSources: this.appPackageManager.listActiveComponentSources
+		});
+		this.installAppPackageRuntimeHooks();
 		this.extensions = new ExtensionManager({
 			configManager: this.configManager,
 			eventBus: this.eventBus,
@@ -14344,6 +15187,22 @@ var NextclawKernel = class {
 			new ContextWindowContribution(this)
 		];
 	}
+	installAppPackageRuntimeHooks = () => {
+		this.appPackageManager.installRuntimeHooks({
+			assertCanActivate: async (sources) => {
+				await this.panelAppManager.assertCanActivatePackageComponents(sources);
+				await this.serviceAppManager.assertCanActivatePackageComponents(sources);
+			},
+			beforeDeactivate: async (sources) => {
+				this.panelAppManager.deactivatePackageComponents(sources);
+				await this.serviceAppManager.deactivatePackageComponents(sources);
+			},
+			beforeUninstall: async (sources) => {
+				await this.panelAppManager.removePackageComponentState(sources);
+				await this.serviceAppManager.removePackageComponentGrants(sources);
+			}
+		});
+	};
 	listSessionTypes = (params) => this.agentRuntimeManager.listSessionTypes(params);
 	isSessionRunning = (sessionId) => this.sessionRunManager.isSessionRunning(sessionId);
 	provideGatewayController = (gatewayController) => {
@@ -14944,6 +15803,6 @@ function resolveLegacyEventType(message) {
 	return `message.${role || "other"}`;
 }
 //#endregion
-export { AUTOMATIC_UPDATE_CHECK_INTERVAL_MS, AccessManager, AgentManager, AgentRunClient, AutomationManager, BuiltinNarpRuntimeProviderService, CONTEXT_COMPACTION_CONTINUATION_TEXT, CONTEXT_COMPACTION_PROJECTION_KIND, CONTEXT_COMPACTION_PROJECTION_METADATA_KEY, CONTEXT_COMPACTION_SYSTEM_PREAMBLE, CONTEXT_COMPACTION_TIMELINE_KIND, ChannelManager, CommandRegistry, ConfigManager, ContextCompactionJournalRecoveryService, ContextCompactionPreflightService, DEFAULT_AGENT_RUNTIME_ENTRY_ID, DEFAULT_SERVICE_ACTION_RISK, ExtensionManager, GatewayInboundProcessor, InboxDeliveryError, InboxDeliveryManager, LlmProviderManager, LlmUsageManager, LlmUsageStore, MAX_INBOX_DELIVERY_CONTENT_LENGTH, McpManager, McpServiceAppRuntimeService, NARP_HTTP_RUNTIME_KIND, NARP_STDIO_RUNTIME_KIND, NEXTCLAW_TIMELINE_KIND_METADATA_KEY, NcpAgentSessionJournalStore, NextclawKernel, PANEL_APP_AGENT_CAPABILITIES, PROJECT_TEMPLATE_IDS, PROVIDER_MODEL_CATALOG_REFRESH_INTERVAL_MS, PanelAppAssetTokenService, PanelAppError, PanelAppManager, PreferenceError, PreferenceManager, ProjectError, ProjectManager, ProviderManagerNcpLLMApi, ProviderModelCatalogManager, SERVICE_APP_MANIFEST_FILE_NAME, ServiceAppError, ServiceAppManager, SessionContextCompactionError, SessionContextCompactionManager, SessionManager, SessionMessageCursorError, SessionRequestManager, SessionSettingsError, SkillManager, UpdateManifestReader, buildAgentRunSendPayload, buildContextCompactionModelProjection, buildContextCompactionTimelineNcpMessage, buildLlmUsageSummary, buildLocalizedTextMap, buildNextclawNcpRunContext, buildServiceActionId, createAgentRuntimeSessionRequestDispatcher, createAssetTools, createContextCompactionMessageId, createContextWindowSignature, createLlmUsageRecord, describeAgentRuntimeSessionTypes, dispatchAgentRuntimeSessionRequest, dispatchChannelReplyRoute, dispatchPromptOverNcp, getAutomaticUpdateCheckDelay, getServiceActionName, getServiceAppManifestPath, getUiContentParamsBootstrapScript, getUnsignedUpdateManifest, hasLlmUsageTelemetry, injectUiContentParamsBootstrap, isContextCompactionProjectionMessage, isContextCompactionTimelineMessage, isContextWindowSnapshot, isInboxDeliveryError, isPanelAppAgentCapability, isPanelAppError, isPreferenceError, isProjectError, isReplyCapableChannel, isServiceAppError, isSessionContextCompactionError, isSessionMessageCursorError, isSessionSettingsError, listExtensionChannelIds, listServiceAppManifestActions, mergeServiceAppRuntimeActions, normalizeAgentRuntimeSessionTypeIcon, normalizeLlmUsageModel, normalizeOptionalString, parseServiceAppManifest, parseSkillFrontmatter, readContextCompactionCheckpoint, readContextWindowEventSessionId, readLatestContextCompactionCheckpoint, readLearningLoopRuntimeConfig, readMetadataModel, readMetadataThinking, readServiceAppManifest, resolveAgentRuntimeEntries, resolveAutomaticUpdateCheckIntervalMs, resolveChannelReplyRoute, resolveEffectiveModel, resolveLegacyEventType, resolveSessionChannelContext, runGatewayInboundLoop, sanitizeLlmUsage, serializeUnsignedUpdateManifest, shouldRefreshContextWindowDuringStream, shouldRefreshContextWindowImmediately, stripSkillFrontmatter, syncSessionThinkingPreference, toNcpMessages, waitForAgentRuntimeSessionReply };
+export { AUTOMATIC_UPDATE_CHECK_INTERVAL_MS, AccessManager, AgentManager, AgentRunClient, AppPackageError, AppPackageManager, AutomationManager, BuiltinNarpRuntimeProviderService, CONTEXT_COMPACTION_CONTINUATION_TEXT, CONTEXT_COMPACTION_PROJECTION_KIND, CONTEXT_COMPACTION_PROJECTION_METADATA_KEY, CONTEXT_COMPACTION_SYSTEM_PREAMBLE, CONTEXT_COMPACTION_TIMELINE_KIND, ChannelManager, CommandRegistry, ConfigManager, ContextCompactionJournalRecoveryService, ContextCompactionPreflightService, DEFAULT_AGENT_RUNTIME_ENTRY_ID, DEFAULT_SERVICE_ACTION_RISK, ExtensionManager, GatewayInboundProcessor, InboxDeliveryError, InboxDeliveryManager, LlmProviderManager, LlmUsageManager, LlmUsageStore, MAX_INBOX_DELIVERY_CONTENT_LENGTH, McpManager, McpServiceAppRuntimeService, NARP_HTTP_RUNTIME_KIND, NARP_STDIO_RUNTIME_KIND, NEXTCLAW_TIMELINE_KIND_METADATA_KEY, NcpAgentSessionJournalStore, NextclawKernel, PANEL_APP_AGENT_CAPABILITIES, PROJECT_TEMPLATE_IDS, PROVIDER_MODEL_CATALOG_REFRESH_INTERVAL_MS, PanelAppAssetTokenService, PanelAppError, PanelAppManager, PreferenceError, PreferenceManager, ProjectError, ProjectManager, ProviderManagerNcpLLMApi, ProviderModelCatalogManager, SERVICE_APP_MANIFEST_FILE_NAME, ServiceAppError, ServiceAppManager, SessionContextCompactionError, SessionContextCompactionManager, SessionManager, SessionMessageCursorError, SessionRequestManager, SessionSettingsError, SkillManager, SystemObjectReferenceError, SystemObjectReferenceManager, UpdateManifestReader, buildAgentRunSendPayload, buildContextCompactionModelProjection, buildContextCompactionTimelineNcpMessage, buildLlmUsageSummary, buildLocalizedTextMap, buildNextclawNcpRunContext, buildServiceActionId, createAgentRuntimeSessionRequestDispatcher, createAssetTools, createContextCompactionMessageId, createContextWindowSignature, createCronJobSystemObjectProvider, createInboxDeliverySystemObjectProvider, createLlmUsageRecord, describeAgentRuntimeSessionTypes, dispatchAgentRuntimeSessionRequest, dispatchChannelReplyRoute, dispatchPromptOverNcp, getAutomaticUpdateCheckDelay, getServiceActionName, getServiceAppManifestPath, getUiContentParamsBootstrapScript, getUnsignedUpdateManifest, hasLlmUsageTelemetry, injectUiContentParamsBootstrap, isAppPackageError, isContextCompactionProjectionMessage, isContextCompactionTimelineMessage, isContextWindowSnapshot, isInboxDeliveryError, isPanelAppAgentCapability, isPanelAppError, isPreferenceError, isProjectError, isReplyCapableChannel, isServiceAppError, isSessionContextCompactionError, isSessionMessageCursorError, isSessionSettingsError, isSystemObjectReferenceError, listExtensionChannelIds, listServiceAppManifestActions, mergeServiceAppRuntimeActions, normalizeAgentRuntimeSessionTypeIcon, normalizeLlmUsageModel, normalizeOptionalString, parseServiceAppManifest, parseSkillFrontmatter, readContextCompactionCheckpoint, readContextWindowEventSessionId, readLatestContextCompactionCheckpoint, readLearningLoopRuntimeConfig, readMetadataModel, readMetadataThinking, readServiceAppManifest, resolveAgentRuntimeEntries, resolveAutomaticUpdateCheckIntervalMs, resolveChannelReplyRoute, resolveEffectiveModel, resolveLegacyEventType, resolveSessionChannelContext, runGatewayInboundLoop, sanitizeLlmUsage, serializeUnsignedUpdateManifest, shouldRefreshContextWindowDuringStream, shouldRefreshContextWindowImmediately, stripSkillFrontmatter, syncSessionThinkingPreference, toNcpMessages, waitForAgentRuntimeSessionReply };
 
 //# sourceMappingURL=index.js.map