@nextclaw/kernel 0.6.24 → 0.6.25

package/dist/index.js

@@ -3,14 +3,15 @@ import { n as getUnsignedUpdateManifest, r as serializeUnsignedUpdateManifest, t
 import { createRequire } from "node:module";
 import { APP_NAME, AgentRouteResolver, BUILTIN_MAIN_AGENT_ID, CLEAR_THINKING_TOKENS, CONTEXT_COMPACTION_METADATA_KEY, ConfigSchema, ContextCompactionService, ContextWindowBudgetService, CronService, CronTool, DEFAULT_PANELS_DIR, DEFAULT_SERVICE_APPS_DIR, DEFAULT_SESSION_SEARCH_LIMIT, DEFAULT_WORKSPACE_REPOSITORY_IDENTITY_RESOLVER, EditFileTool, ExecTool, ExtensionChannelAdapter, GatewayTool, InputBudgetPruner, LLMProvider, ListDirTool, LiteLLMProvider, MAX_SESSION_SEARCH_LIMIT, MemoryGetTool, MemorySearchTool, MemoryStore, MessageBus, MessageTool, ProviderModelDiscoveryService, ProviderRegistry, ReadFileTool, RequestedSkillsMetadataReader, SILENT_REPLY_TOKEN, SessionProjectContextResolver, SessionSearchService, SkillsLoader, THINKING_LEVELS, ViewImageTool, WebFetchTool, WebSearchTool, WriteFileTool, buildCompressingCompactionCheckpoint, buildConfigSchema, buildContextWindowSnapshot, buildReloadPlan, buildSessionRequestToolResult, buildToolCatalogEntries, createAgentProfile, createAssistantStreamDeltaControlMessage, createAssistantStreamResetControlMessage, createCompletedSessionRequest, createFailedSessionRequest, createRunningSessionRequest, createRuntimeChildEnv, createTypingStopControlMessage, diffConfigPaths, ensureDir, estimateInputTokens, evaluateSilentReply, expandHome, findEffectiveAgentProfile, getConfigPath, getDataDir, getDataPath, getSessionsPath, getWorkspacePath, getWorkspacePathFromConfig, isNextclawControlMessage, loadConfig, mergeExtensionConfigView, modelSupportsVision, normalizeAgentProfileId, normalizeInlineSecretRefs, normalizeModelThinkingCapability, normalizeProviderModelConfig, normalizeToolParams, parseAgentScopedSessionKey, parseThinkingLevel, readCompressedContextCompactionCheckpoint, readOptionalString, readParentSessionId, readSessionProjectRoot, redactConfigObject, removeAgentProfile, resolveConfigSecrets, resolveDefaultAgentProfileId, resolveEffectiveAgentProfiles, resolveNextclawSelfManageGuidePaths, resolveProviderRuntime, resolveSessionProjectContext, resolveSessionWorkspacePath, resolveThinkingLevel, safeFilename, sanitizeOutboundAssistantContent, saveConfig, summarizeSessionRequestTask, toExtensionConfigView, updateAgentProfile } from "@nextclaw/core";
 import { NCP_AI_EXECUTION_METADATA_KEY, NCP_INTERNAL_VISIBILITY_METADATA_KEY, NcpEventType, createUnavailableNcpAiExecutionMetadata, isHiddenNcpMessage, normalizeAssistantText, readNcpAiExecutionMetadata, sanitizeAssistantReplyTags } from "@nextclaw/ncp";
-import { CHAT_CONTINUATION_TARGET_MESSAGE_METADATA_KEY, CHAT_CONVERSATION_EXCERPT_TOKEN_KIND, CHAT_INLINE_TOKENS_METADATA_KEY, CHAT_INLINE_TOKENS_SCHEMA_VERSION, CHAT_PROJECT_TOKEN_KIND, CHAT_SESSION_MATERIALIZATION_METADATA_KEY, CHAT_WORKSPACE_DIRECTORY_TOKEN_KIND, CHAT_WORKSPACE_EXCERPT_TOKEN_KIND, CHAT_WORKSPACE_FILE_TOKEN_KIND, EventBus, INBOX_DELIVERY_SESSION_METADATA_KEY, Ingress, PANEL_APP_INLINE_HOST_CONTRACT, PANEL_APP_SCROLL_RESTORATION_CONTRACT, UI_CONTENT_PARAMS_HOST_CONTRACT, eventKeys, ingressKeys, isRuntimeDefaultModelValue, isSilentReplyNcpMessage, normalizeRuntimeModelSelectionMode, readInlineContentHeight, readUiContentParams } from "@nextclaw/shared";
-import { LocalAssetStore, buildAssetContentPath, buildNcpUserContent, buildOpenAiFunctionTool, ncpMessageToOpenAiMessages, validateToolArgs } from "@nextclaw/ncp-agent-runtime";
+import { CHAT_CONTINUATION_TARGET_MESSAGE_METADATA_KEY, CHAT_CONVERSATION_EXCERPT_TOKEN_KIND, CHAT_INLINE_TOKENS_METADATA_KEY, CHAT_INLINE_TOKENS_SCHEMA_VERSION, CHAT_PROJECT_TOKEN_KIND, CHAT_SESSION_MATERIALIZATION_METADATA_KEY, CHAT_SYSTEM_OBJECT_TOKEN_KIND, CHAT_WORKSPACE_DIRECTORY_TOKEN_KIND, CHAT_WORKSPACE_EXCERPT_TOKEN_KIND, CHAT_WORKSPACE_FILE_TOKEN_KIND, EventBus, Ingress, PANEL_APP_INLINE_HOST_CONTRACT, PANEL_APP_SCROLL_RESTORATION_CONTRACT, SYSTEM_OBJECT_REFERENCE_DEFAULT_LIMIT, SYSTEM_OBJECT_REFERENCE_MAX_LIMIT, SYSTEM_OBJECT_TYPE_CRON_JOB, SYSTEM_OBJECT_TYPE_INBOX_DELIVERY, UI_CONTENT_PARAMS_HOST_CONTRACT, createSystemObjectReferenceUri, eventKeys, ingressKeys, isRuntimeDefaultModelValue, isSilentReplyNcpMessage, normalizeRuntimeModelSelectionMode, parseSystemObjectReferenceUri, readInlineContentHeight, readSystemObjectResolvedReference, readUiContentParams } from "@nextclaw/shared";
+import { LocalAssetStore, buildAssetContentPath, buildNcpUserContent, buildOpenAiFunctionTool, isTextLikeAsset, ncpMessageToOpenAiMessages, validateToolArgs } from "@nextclaw/ncp-agent-runtime";
 import { createHash, createHmac, randomBytes, randomUUID, scryptSync, timingSafeEqual } from "node:crypto";
 import { catchError, filter, from, lastValueFrom, tap } from "rxjs";
 import { appendFileSync, chmodSync, constants, createReadStream, existsSync, mkdirSync, readFileSync, readdirSync, readlinkSync, realpathSync, renameSync, rmSync, writeFileSync } from "node:fs";
-import { basename, delimiter, dirname, extname, isAbsolute, join, normalize, relative, resolve, sep } from "node:path";
-import { execFileSync, spawn } from "node:child_process";
+import path, { basename, delimiter, dirname, extname, isAbsolute, join, normalize, relative, resolve, sep } from "node:path";
 import { access, appendFile, mkdir, mkdtemp, open, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
+import { AppHomeService, AppInstallationService, AppManifestService, AppRegistryService, isAppComponentManifestBundle } from "@nextclaw/app-runtime";
+import { execFileSync, spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import { BUILTIN_PROVIDER_PLUGINS } from "@nextclaw/runtime";
 import { McpRegistryService, McpServerLifecycleManager } from "@nextclaw/mcp";
@@ -1232,7 +1233,7 @@ const SESSION_ACTIVITY_PREVIEW_STATUS_KINDS = new Set([
 	"run-failed",
 	"run-interrupted"
 ]);
-function isRecord$15(value) {
+function isRecord$16(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function readOptionalString$12(value) {
@@ -1241,7 +1242,7 @@ function readOptionalString$12(value) {
 	return trimmed.length > 0 ? trimmed : void 0;
 }
 function readSessionActivityPreviewMetadata(value) {
-	if (!isRecord$15(value)) return null;
+	if (!isRecord$16(value)) return null;
 	const state = value.state;
 	const timestamp = readOptionalString$12(value.timestamp);
 	if (!SESSION_ACTIVITY_PREVIEW_STATES.has(state) || !timestamp) return null;
@@ -1335,7 +1336,7 @@ var SessionActivityPreviewEventService = class {
 //#endregion
 //#region src/managers/agent-run-session-command.manager.ts
 const CONTINUATION_PROMPT = "Continue from where you stopped. Preserve completed work and avoid repeating it.";
-function isRecord$14(value) {
+function isRecord$15(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function hasSendableMessageContent(message) {
@@ -1343,7 +1344,7 @@ function hasSendableMessageContent(message) {
 }
 function readSessionActivityState(metadata) {
 	const preview = metadata?.[SESSION_ACTIVITY_PREVIEW_METADATA_KEY];
-	return isRecord$14(preview) && typeof preview.state === "string" ? preview.state : null;
+	return isRecord$15(preview) && typeof preview.state === "string" ? preview.state : null;
 }
 var AgentRunSessionCommandManager = class {
 	pendingCommands = /* @__PURE__ */ new Map();
@@ -2504,6 +2505,318 @@ var AutomationManager = class extends CronService {
 	}
 };
 //#endregion
+//#region src/types/app-package.types.ts
+var AppPackageError = class extends Error {
+	constructor(code, message) {
+		super(message);
+		this.code = code;
+		this.name = "AppPackageError";
+	}
+};
+function isAppPackageError(error) {
+	return error instanceof AppPackageError;
+}
+//#endregion
+//#region src/utils/app-engine-version.utils.ts
+function satisfiesAppEngineVersion(version, range) {
+	const parsedVersion = parseVersion(version);
+	const normalizedRange = range.trim();
+	if (!parsedVersion || !normalizedRange) return false;
+	return normalizedRange.split(/\s*\|\|\s*/).some((alternative) => satisfiesAlternative(parsedVersion, alternative.trim()));
+}
+function satisfiesAlternative(version, range) {
+	const hyphenRange = /^(\S+)\s+-\s+(\S+)$/.exec(range);
+	if (hyphenRange) {
+		const lower = parseVersion(hyphenRange[1] ?? "");
+		const upper = parseVersion(hyphenRange[2] ?? "");
+		return Boolean(lower && upper && compareVersions(version, lower) >= 0 && compareVersions(version, upper) <= 0);
+	}
+	const comparators = range.split(/\s+/).filter(Boolean);
+	return comparators.length > 0 && comparators.every((comparator) => satisfiesComparator(version, comparator));
+}
+function satisfiesComparator(version, comparator) {
+	if (comparator === "*" || comparator.toLowerCase() === "x") return true;
+	if (comparator.startsWith("^")) {
+		const lower = parseVersion(comparator.slice(1));
+		if (!lower) return false;
+		const upper = lower.major > 0 ? {
+			major: lower.major + 1,
+			minor: 0,
+			patch: 0,
+			prerelease: []
+		} : lower.minor > 0 ? {
+			major: 0,
+			minor: lower.minor + 1,
+			patch: 0,
+			prerelease: []
+		} : {
+			major: 0,
+			minor: 0,
+			patch: lower.patch + 1,
+			prerelease: []
+		};
+		return compareVersions(version, lower) >= 0 && compareVersions(version, upper) < 0;
+	}
+	if (comparator.startsWith("~")) {
+		const lower = parseVersion(comparator.slice(1));
+		if (!lower) return false;
+		const upper = {
+			major: lower.major,
+			minor: lower.minor + 1,
+			patch: 0,
+			prerelease: []
+		};
+		return compareVersions(version, lower) >= 0 && compareVersions(version, upper) < 0;
+	}
+	if (/[xX*]/.test(comparator)) {
+		const parts = comparator.replace(/^v/, "").split(".");
+		const expected = [
+			version.major,
+			version.minor,
+			version.patch
+		];
+		return parts.every((part, index) => /^(x|\*)$/i.test(part) || Number(part) === expected[index]);
+	}
+	const match = /^(>=|<=|>|<|=)?\s*(.+)$/.exec(comparator);
+	const target = parseVersion(match?.[2] ?? "");
+	if (!target) return false;
+	const compared = compareVersions(version, target);
+	switch (match?.[1] ?? "=") {
+		case ">=": return compared >= 0;
+		case "<=": return compared <= 0;
+		case ">": return compared > 0;
+		case "<": return compared < 0;
+		default: return compared === 0;
+	}
+}
+function parseVersion(raw) {
+	const match = /^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/.exec(raw.trim());
+	if (!match) return null;
+	return {
+		major: Number(match[1]),
+		minor: Number(match[2]),
+		patch: Number(match[3]),
+		prerelease: match[4] ? match[4].split(".").map((part) => /^\d+$/.test(part) ? Number(part) : part) : []
+	};
+}
+function compareVersions(left, right) {
+	for (const field of [
+		"major",
+		"minor",
+		"patch"
+	]) if (left[field] !== right[field]) return left[field] > right[field] ? 1 : -1;
+	if (left.prerelease.length === 0 || right.prerelease.length === 0) return Number(left.prerelease.length === 0) - Number(right.prerelease.length === 0);
+	const length = Math.max(left.prerelease.length, right.prerelease.length);
+	for (let index = 0; index < length; index += 1) {
+		const leftPart = left.prerelease[index];
+		const rightPart = right.prerelease[index];
+		if (leftPart === void 0 || rightPart === void 0) return leftPart === void 0 ? -1 : 1;
+		if (leftPart === rightPart) continue;
+		if (typeof leftPart === "number" && typeof rightPart === "number") return leftPart > rightPart ? 1 : -1;
+		if (typeof leftPart === "number") return -1;
+		if (typeof rightPart === "number") return 1;
+		return leftPart.localeCompare(rightPart);
+	}
+	return 0;
+}
+//#endregion
+//#region src/managers/app-package.manager.ts
+const EMPTY_RUNTIME_HOOKS = {
+	assertCanActivate: async () => void 0,
+	beforeDeactivate: async () => void 0,
+	beforeUninstall: async () => void 0
+};
+var AppPackageManager = class {
+	installationService;
+	manifestService = new AppManifestService();
+	registryService;
+	runtimeHooks = EMPTY_RUNTIME_HOOKS;
+	builtInBootstrapPromise;
+	constructor(params) {
+		this.params = params;
+		const appHomeService = new AppHomeService(params.appHomeDirectory);
+		this.installationService = new AppInstallationService(appHomeService);
+		this.registryService = new AppRegistryService(appHomeService);
+	}
+	installRuntimeHooks = (hooks) => {
+		this.runtimeHooks = hooks;
+	};
+	listPackages = async () => {
+		await this.ensureBuiltInPackages();
+		const records = await this.registryService.listApps();
+		return { entries: await Promise.all(records.map(async (record) => await this.toPackageView(await this.installationService.info(record.appId)))) };
+	};
+	getPackage = async (appId) => {
+		await this.ensureBuiltInPackages();
+		try {
+			return await this.toPackageView(await this.installationService.info(appId));
+		} catch (error) {
+			if (error instanceof Error && error.message.includes("未找到已安装应用")) throw new AppPackageError("APP_PACKAGE_NOT_FOUND", error.message);
+			throw error;
+		}
+	};
+	listActiveComponentSources = async () => {
+		await this.ensureBuiltInPackages();
+		return (await this.registryService.listApps()).filter((record) => record.enabled).flatMap((record) => {
+			const version = record.installedVersions[record.activeVersion];
+			if (!version || version.manifestSchemaVersion !== 2) return [];
+			return (version.components ?? []).map((component) => ({
+				kind: component.kind,
+				id: component.id,
+				packageId: record.appId,
+				packageVersion: record.activeVersion,
+				sourcePath: component.componentDirectory,
+				manifestPath: component.manifestPath,
+				dataDirectory: record.dataDirectory
+			}));
+		});
+	};
+	install = async (source, registryUrl) => {
+		const result = await this.installationService.install(source, { registryUrl });
+		return await this.getPackage(result.appId);
+	};
+	enable = async (appId) => {
+		const app = await this.getPackage(appId);
+		if (app.enabled) return app;
+		await this.assertEngineCompatibility(appId);
+		const sources = this.toComponentSources(app);
+		await this.runtimeHooks.assertCanActivate(sources);
+		await this.installationService.setEnabled(appId, true);
+		return await this.getPackage(appId);
+	};
+	disable = async (appId) => {
+		const app = await this.getPackage(appId);
+		if (!app.enabled) return app;
+		await this.runtimeHooks.beforeDeactivate(this.toComponentSources(app));
+		await this.installationService.setEnabled(appId, false);
+		return await this.getPackage(appId);
+	};
+	update = async (appId, options = {}) => {
+		const current = await this.getPackage(appId);
+		if (current.enabled) await this.runtimeHooks.beforeDeactivate(this.toComponentSources(current));
+		const result = await this.installationService.update(appId, options);
+		try {
+			await this.assertEngineCompatibility(appId);
+			const updated = await this.getPackage(appId);
+			if (updated.enabled) await this.runtimeHooks.assertCanActivate(this.toComponentSources(updated));
+			return {
+				package: updated,
+				result
+			};
+		} catch (error) {
+			if (result.updated) await this.installationService.rollback(appId, result.previousVersion);
+			throw error;
+		}
+	};
+	rollback = async (appId, version) => {
+		const current = await this.getPackage(appId);
+		if (current.enabled) await this.runtimeHooks.beforeDeactivate(this.toComponentSources(current));
+		const result = await this.installationService.rollback(appId, version);
+		try {
+			await this.assertEngineCompatibility(appId);
+			const rolledBack = await this.getPackage(appId);
+			if (rolledBack.enabled) await this.runtimeHooks.assertCanActivate(this.toComponentSources(rolledBack));
+			return {
+				package: rolledBack,
+				result
+			};
+		} catch (error) {
+			if (result.rolledBack) await this.installationService.rollback(appId, result.previousVersion);
+			throw error;
+		}
+	};
+	uninstall = async (appId, purgeData) => {
+		const current = await this.getPackage(appId);
+		if (current.enabled) await this.runtimeHooks.beforeDeactivate(this.toComponentSources(current));
+		await this.runtimeHooks.beforeUninstall(this.toComponentSources(current));
+		return await this.installationService.uninstall(appId, purgeData);
+	};
+	ensureBuiltInPackages = async () => {
+		if (!this.params.builtInAppsDirectory) return;
+		this.builtInBootstrapPromise ??= this.installBuiltInPackages();
+		await this.builtInBootstrapPromise;
+	};
+	installBuiltInPackages = async () => {
+		const builtInDirectory = path.resolve(this.params.builtInAppsDirectory);
+		let entries;
+		try {
+			entries = await readdir(builtInDirectory, { withFileTypes: true });
+		} catch (error) {
+			if (this.isMissingFileError(error)) return;
+			throw error;
+		}
+		for (const entry of entries.filter((item) => item.isDirectory() && !item.name.startsWith("."))) {
+			const appDirectory = path.join(builtInDirectory, entry.name);
+			const manifest = await this.manifestService.load(appDirectory);
+			if (!isAppComponentManifestBundle(manifest)) continue;
+			if ((await this.registryService.getApp(manifest.manifest.id))?.installedVersions[manifest.manifest.version]) continue;
+			await this.installationService.install(appDirectory);
+		}
+	};
+	toPackageView = async (info) => {
+		const activeVersion = info.installedVersions.find((version) => version.version === info.activeVersion);
+		if (!activeVersion) throw new AppPackageError("APP_PACKAGE_OPERATION_FAILED", `应用 ${info.appId} 缺少激活版本 ${info.activeVersion}。`);
+		const packagePresentation = await this.readManifestPresentation(path.join(activeVersion.installDirectory, "manifest.json"));
+		return {
+			id: info.appId,
+			name: info.name,
+			description: info.description,
+			nameI18n: packagePresentation.nameI18n,
+			descriptionI18n: packagePresentation.descriptionI18n,
+			activeVersion: info.activeVersion,
+			installedVersions: info.installedVersions.map((version) => version.version),
+			enabled: info.enabled,
+			builtIn: this.isBuiltInSource(activeVersion.sourceRef),
+			primaryPanelId: activeVersion.primaryPanelId,
+			components: await Promise.all((activeVersion.components ?? []).map(async (component) => ({
+				kind: component.kind,
+				id: component.id,
+				packageId: info.appId,
+				packageVersion: info.activeVersion,
+				sourcePath: component.componentDirectory,
+				manifestPath: component.manifestPath,
+				dataDirectory: info.dataDirectory,
+				...await this.readManifestPresentation(component.manifestPath)
+			}))),
+			dataDirectory: info.dataDirectory
+		};
+	};
+	readManifestPresentation = async (manifestPath) => {
+		const candidate = JSON.parse(await readFile(manifestPath, "utf8"));
+		return {
+			...typeof candidate.title === "string" ? { title: candidate.title } : {},
+			...typeof candidate.description === "string" ? { description: candidate.description } : {},
+			...typeof candidate.icon === "string" ? { icon: candidate.icon } : {},
+			...this.readLocalizedField(candidate, "nameI18n"),
+			...this.readLocalizedField(candidate, "titleI18n"),
+			...this.readLocalizedField(candidate, "descriptionI18n")
+		};
+	};
+	readLocalizedField = (candidate, field) => {
+		const value = candidate[field];
+		if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+		const entries = Object.entries(value).filter((entry) => typeof entry[1] === "string");
+		return entries.length > 0 ? { [field]: Object.fromEntries(entries) } : {};
+	};
+	toComponentSources = (app) => app.components.map((component) => ({ ...component }));
+	assertEngineCompatibility = async (appId) => {
+		const productVersion = this.params.productVersion?.trim();
+		if (!productVersion) return;
+		const info = await this.installationService.info(appId);
+		const activeVersion = info.installedVersions.find((version) => version.version === info.activeVersion);
+		if (!activeVersion) throw new AppPackageError("APP_PACKAGE_OPERATION_FAILED", `应用 ${appId} 缺少激活版本 ${info.activeVersion}。`);
+		const manifestBundle = await this.manifestService.load(activeVersion.installDirectory);
+		const engineRange = manifestBundle.manifest.schemaVersion === 2 ? manifestBundle.manifest.engines?.nextclaw?.trim() : void 0;
+		if (engineRange && !satisfiesAppEngineVersion(productVersion, engineRange)) throw new AppPackageError("APP_PACKAGE_INCOMPATIBLE", `应用 ${appId}@${info.activeVersion} 要求 NextClaw ${engineRange}，当前版本为 ${productVersion}。`);
+	};
+	isBuiltInSource = (sourceRef) => {
+		if (!this.params.builtInAppsDirectory) return false;
+		const relative = path.relative(path.resolve(this.params.builtInAppsDirectory), path.resolve(sourceRef));
+		return relative === "" || !relative.startsWith("..") && !path.isAbsolute(relative);
+	};
+	isMissingFileError = (error) => typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
+};
+//#endregion
 //#region src/managers/channel.manager.ts
 var ChannelManager = class {
 	channels = {};
@@ -4551,11 +4864,11 @@ var ExtensionManager = class {
 //#endregion
 //#region src/utils/model-message-vision.utils.ts
 const IMAGE_OMITTED_TEXT = "[Image omitted: the selected model is not configured for vision input.]";
-function isRecord$13(value) {
+function isRecord$14(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function isImageContentPart(value) {
-	if (!isRecord$13(value)) return false;
+	if (!isRecord$14(value)) return false;
 	const type = value.type;
 	return type === "image_url" || type === "input_image";
 }
@@ -4571,7 +4884,7 @@ function normalizeContentWithoutVision(content) {
 		};
 	});
 	if (!sawImage) return content;
-	const textParts = parts.filter((part) => isRecord$13(part) && part.type === "text" && typeof part.text === "string").map((part) => part.text.trim()).filter(Boolean);
+	const textParts = parts.filter((part) => isRecord$14(part) && part.type === "text" && typeof part.text === "string").map((part) => part.text.trim()).filter(Boolean);
 	if (textParts.length === parts.length) return textParts.join("\n\n");
 	return parts;
 }
@@ -5206,7 +5519,8 @@ var LlmUsageManager = class {
 };
 //#endregion
 //#region src/stores/inbox-delivery.store.ts
-const INBOX_DELIVERY_STORE_VERSION = 1;
+const INBOX_DELIVERY_STORE_VERSION = 2;
+const LEGACY_INBOX_DELIVERY_STORE_VERSION = 1;
 var InboxDeliveryStoreError = class extends Error {
 	constructor(message) {
 		super(message);
@@ -5243,15 +5557,19 @@ var InboxDeliveryStore = class {
 	};
 	parseStoreFile = (source) => {
 		const value = JSON.parse(source);
-		if (!this.isRecord(value) || value.version !== INBOX_DELIVERY_STORE_VERSION || !Array.isArray(value.deliveries) || !value.deliveries.every(this.isDelivery)) throw new InboxDeliveryStoreError("inbox delivery store has an unsupported structure");
+		if (!this.isRecord(value) || value.version !== INBOX_DELIVERY_STORE_VERSION && value.version !== LEGACY_INBOX_DELIVERY_STORE_VERSION || !Array.isArray(value.deliveries) || !value.deliveries.every((delivery) => this.isDelivery(delivery, value.version === LEGACY_INBOX_DELIVERY_STORE_VERSION))) throw new InboxDeliveryStoreError("inbox delivery store has an unsupported structure");
 		return {
 			version: INBOX_DELIVERY_STORE_VERSION,
-			deliveries: value.deliveries.map((delivery) => structuredClone(delivery))
+			deliveries: value.deliveries.map((delivery) => this.toCurrentDelivery(delivery))
 		};
 	};
-	isDelivery = (value) => {
+	isDelivery = (value, legacy) => {
 		if (!this.isRecord(value) || !this.isSource(value.source)) return false;
-		return typeof value.id === "string" && typeof value.title === "string" && (value.summary === null || typeof value.summary === "string") && typeof value.content === "string" && (value.contentType === "markdown" || value.contentType === "html") && typeof value.createdAt === "string" && typeof value.updatedAt === "string" && this.isOptionalTimestamp(value.presentedAt) && this.isOptionalTimestamp(value.readAt) && this.isOptionalTimestamp(value.archivedAt) && (value.conversationSessionId === null || typeof value.conversationSessionId === "string");
+		return typeof value.id === "string" && typeof value.title === "string" && (value.summary === null || typeof value.summary === "string") && typeof value.content === "string" && (value.contentType === "markdown" || value.contentType === "html") && typeof value.createdAt === "string" && typeof value.updatedAt === "string" && this.isOptionalTimestamp(value.presentedAt) && this.isOptionalTimestamp(value.readAt) && this.isOptionalTimestamp(value.archivedAt) && (!legacy || value.conversationSessionId === null || typeof value.conversationSessionId === "string");
+	};
+	toCurrentDelivery = (delivery) => {
+		const { conversationSessionId: _legacySessionId, ...current } = delivery;
+		return structuredClone(current);
 	};
 	isSource = (value) => this.isRecord(value) && value.kind === "agent" && this.isOptionalString(value.agentId) && this.isOptionalString(value.sessionId) && this.isOptionalString(value.toolCallId) && this.isOptionalString(value.filePath);
 	isOptionalString = (value) => value === null || typeof value === "string";
@@ -5309,8 +5627,7 @@ var InboxDeliveryManager = class {
 			updatedAt: now,
 			presentedAt: null,
 			readAt: null,
-			archivedAt: null,
-			conversationSessionId: null
+			archivedAt: null
 		};
 		const deliveries = await this.store.list();
 		await this.store.save([delivery, ...deliveries]);
@@ -5337,41 +5654,6 @@ var InboxDeliveryManager = class {
 		this.publishChange(deliveryId, "delete");
 		return true;
 	});
-	continueInChat = async (deliveryId) => await this.mutate(async () => {
-		const deliveries = await this.store.list();
-		const index = deliveries.findIndex(({ id }) => id === deliveryId);
-		if (index < 0) throw this.notFound(deliveryId);
-		const current = deliveries[index];
-		const existingSession = current.conversationSessionId ? await this.options.sessionManager.getSessionRecord(current.conversationSessionId) : null;
-		let sessionId = current.conversationSessionId;
-		let created = false;
-		if (!sessionId || !existingSession) {
-			sessionId = (await this.options.sessionManager.createSession({
-				sourceSessionMetadata: {},
-				metadataOverrides: { [INBOX_DELIVERY_SESSION_METADATA_KEY]: current.id },
-				task: `Continue discussing inbox delivery: ${current.title}`,
-				title: current.title,
-				agentId: current.source.agentId ?? void 0
-			})).sessionId;
-			created = true;
-		}
-		const now = (/* @__PURE__ */ new Date()).toISOString();
-		const delivery = {
-			...current,
-			updatedAt: now,
-			presentedAt: current.presentedAt ?? now,
-			readAt: current.readAt ?? now,
-			conversationSessionId: sessionId
-		};
-		deliveries[index] = delivery;
-		await this.store.save(deliveries);
-		this.publishChange(deliveryId, "upsert");
-		return {
-			delivery: structuredClone(delivery),
-			sessionId,
-			created
-		};
-	});
 	applyStateAction = (delivery, action, now) => {
 		switch (action) {
 			case "present": return {
@@ -5427,6 +5709,300 @@ var InboxDeliveryManager = class {
 	};
 };
 //#endregion
+//#region src/managers/system-object-reference.manager.ts
+const MAX_SYSTEM_OBJECT_SNAPSHOT_BYTES = 1024 * 1024;
+var SystemObjectReferenceError = class extends Error {
+	constructor(code, message) {
+		super(message);
+		this.code = code;
+		this.name = "SystemObjectReferenceError";
+	}
+};
+function isSystemObjectReferenceError(error) {
+	return error instanceof SystemObjectReferenceError;
+}
+function normalizedSearchText(value) {
+	return value.trim().toLocaleLowerCase();
+}
+function scoreSearchItem(item, query) {
+	if (!query) return 1;
+	const fields = [
+		item.label,
+		item.objectId,
+		item.description ?? ""
+	].map(normalizedSearchText).filter(Boolean);
+	if (fields.some((field) => field === query)) return 400;
+	if (fields.some((field) => field.startsWith(query))) return 300;
+	if (fields.some((field) => field.split(/\s+/).some((word) => word.startsWith(query)))) return 200;
+	return fields.some((field) => field.includes(query)) ? 100 : 0;
+}
+function normalizeLimit(limit) {
+	if (limit === void 0) return SYSTEM_OBJECT_REFERENCE_DEFAULT_LIMIT;
+	if (!Number.isSafeInteger(limit) || limit < 1 || limit > SYSTEM_OBJECT_REFERENCE_MAX_LIMIT) throw new SystemObjectReferenceError("SYSTEM_OBJECT_INVALID_REFERENCE", `limit must be an integer between 1 and ${SYSTEM_OBJECT_REFERENCE_MAX_LIMIT}`);
+	return limit;
+}
+const SYSTEM_OBJECT_GROUP_ICONS = new Set([
+	"calendar-clock",
+	"file",
+	"inbox"
+]);
+function normalizeDisplayText(value, field) {
+	const defaultText = value.default.trim();
+	if (!defaultText) throw new Error(`System object provider group ${field} must be non-empty.`);
+	const translations = Object.fromEntries(Object.entries(value.translations ?? {}).map(([language, text]) => [language.trim(), text.trim()]).filter(([language, text]) => language && text));
+	return {
+		default: defaultText,
+		...Object.keys(translations).length > 0 ? { translations } : {}
+	};
+}
+function normalizeProviderGroup(group) {
+	const objectType = group.objectType.trim();
+	if (!objectType || !SYSTEM_OBJECT_GROUP_ICONS.has(group.icon) || !Number.isSafeInteger(group.order)) throw new Error(`System object provider group is invalid: ${objectType}`);
+	return {
+		objectType,
+		label: normalizeDisplayText(group.label, "label"),
+		description: normalizeDisplayText(group.description, "description"),
+		icon: group.icon,
+		order: group.order
+	};
+}
+function safeSnapshotFileName(label, suffix) {
+	return `${label.trim().replace(/[^\p{L}\p{N}._-]+/gu, "-").replace(/^-+|-+$/g, "") || "system-object"}.${suffix}`;
+}
+function truncate(value, maxLength = 180) {
+	const normalized = value?.replace(/\s+/g, " ").trim() ?? "";
+	if (!normalized) return null;
+	return normalized.length <= maxLength ? normalized : `${normalized.slice(0, maxLength - 1)}…`;
+}
+function toIsoTime(value) {
+	if (typeof value !== "number" || !Number.isFinite(value)) return null;
+	const date = new Date(value);
+	return Number.isNaN(date.getTime()) ? null : date.toISOString();
+}
+var SystemObjectReferenceManager = class {
+	providers = /* @__PURE__ */ new Map();
+	resolvedCache = /* @__PURE__ */ new Map();
+	constructor(assetStore, providers = []) {
+		this.assetStore = assetStore;
+		providers.forEach((provider) => this.registerProvider(provider));
+	}
+	registerProvider = (provider) => {
+		const group = normalizeProviderGroup(provider.group);
+		const objectType = group.objectType;
+		if (this.providers.has(objectType)) throw new Error(`System object provider is invalid or already registered: ${objectType}`);
+		const registeredProvider = {
+			...provider,
+			group
+		};
+		this.providers.set(objectType, registeredProvider);
+		return () => {
+			if (this.providers.get(objectType) === registeredProvider) this.providers.delete(objectType);
+		};
+	};
+	listReferences = async (params = {}) => {
+		const query = normalizedSearchText(params.query ?? "");
+		const limit = normalizeLimit(params.limit);
+		const requestedObjectType = params.objectType?.trim();
+		if (params.objectType !== void 0 && !requestedObjectType) throw new SystemObjectReferenceError("SYSTEM_OBJECT_INVALID_REFERENCE", "objectType must be a non-empty registered system object type");
+		const requestedProvider = requestedObjectType ? this.providers.get(requestedObjectType) : void 0;
+		if (requestedObjectType && !requestedProvider) throw new SystemObjectReferenceError("SYSTEM_OBJECT_INVALID_REFERENCE", `system object provider is not registered: ${requestedObjectType}`);
+		const providers = requestedProvider ? [requestedProvider] : [...this.providers.values()];
+		const collator = new Intl.Collator(void 0, {
+			numeric: true,
+			sensitivity: "base"
+		});
+		const shouldIncludeItems = Boolean(requestedObjectType || query);
+		const visibleGroups = (await Promise.all(providers.map(async (provider) => {
+			const matches = (await provider.list()).map((item) => {
+				this.assertListItemContract(item, provider.group.objectType);
+				return {
+					item,
+					score: scoreSearchItem(item, query)
+				};
+			}).filter(({ score }) => score > 0).sort((left, right) => right.score - left.score || right.item.updatedAt.localeCompare(left.item.updatedAt) || collator.compare(left.item.label, right.item.label));
+			return {
+				...structuredClone(provider.group),
+				items: shouldIncludeItems ? matches.slice(0, limit).map(({ item }) => structuredClone(item)) : [],
+				total: matches.length
+			};
+		}))).filter((group) => !query || group.total > 0).sort((left, right) => left.order - right.order || collator.compare(left.label.default, right.label.default));
+		return {
+			groups: visibleGroups,
+			total: visibleGroups.reduce((total, group) => total + group.total, 0)
+		};
+	};
+	resolveReference = async (uri) => {
+		const parsed = parseSystemObjectReferenceUri(uri);
+		if (!parsed) throw new SystemObjectReferenceError("SYSTEM_OBJECT_INVALID_REFERENCE", `invalid system object reference: ${uri}`);
+		const provider = this.providers.get(parsed.objectType);
+		if (!provider) throw new SystemObjectReferenceError("SYSTEM_OBJECT_INVALID_REFERENCE", `system object provider is not registered: ${parsed.objectType}`);
+		const source = await provider.resolve(parsed.objectId);
+		if (!source) throw new SystemObjectReferenceError("SYSTEM_OBJECT_NOT_FOUND", `system object not found: ${uri}`);
+		this.assertSnapshotContract(source, parsed);
+		const bytes = new TextEncoder().encode(source.content);
+		if (bytes.byteLength > MAX_SYSTEM_OBJECT_SNAPSHOT_BYTES) throw new SystemObjectReferenceError("SYSTEM_OBJECT_PROVIDER_CONTRACT", `system object snapshot exceeds ${MAX_SYSTEM_OBJECT_SNAPSHOT_BYTES} bytes: ${uri}`);
+		const version = createHash("sha256").update(bytes).digest("hex");
+		const cacheKey = `${uri}@${version}`;
+		const cached = this.resolvedCache.get(cacheKey);
+		if (cached && await this.assetStore.statRecord(cached.assetUri)) return structuredClone(cached);
+		const asset = await this.assetStore.putBytes({
+			bytes,
+			fileName: source.fileName,
+			mimeType: source.mimeType
+		});
+		const resolved = {
+			...structuredClone(source.item),
+			version,
+			assetUri: asset.uri,
+			fileName: asset.fileName,
+			mimeType: asset.mimeType,
+			sizeBytes: asset.sizeBytes
+		};
+		this.resolvedCache.set(cacheKey, resolved);
+		return structuredClone(resolved);
+	};
+	assertSnapshotContract = (source, parsed) => {
+		const expectedUri = createSystemObjectReferenceUri(parsed.objectType, parsed.objectId);
+		if (source.item.uri !== expectedUri || source.item.objectType !== parsed.objectType || source.item.objectId !== parsed.objectId || !source.item.label.trim() || !source.fileName.trim() || !source.content.trim() || !isTextLikeAsset({
+			mimeType: source.mimeType,
+			fileName: source.fileName
+		})) throw new SystemObjectReferenceError("SYSTEM_OBJECT_PROVIDER_CONTRACT", `system object provider returned an invalid snapshot: ${expectedUri}`);
+	};
+	assertListItemContract = (item, objectType) => {
+		const expectedUri = createSystemObjectReferenceUri(objectType, item.objectId);
+		if (item.objectType !== objectType || item.uri !== expectedUri || !item.label.trim() || !item.updatedAt.trim()) throw new SystemObjectReferenceError("SYSTEM_OBJECT_PROVIDER_CONTRACT", `system object provider returned an invalid list item: ${item.uri}`);
+	};
+};
+function createInboxDeliverySystemObjectProvider(manager) {
+	const toItem = (delivery) => ({
+		uri: createSystemObjectReferenceUri(SYSTEM_OBJECT_TYPE_INBOX_DELIVERY, delivery.id),
+		objectType: SYSTEM_OBJECT_TYPE_INBOX_DELIVERY,
+		objectId: delivery.id,
+		label: delivery.title,
+		description: truncate(delivery.summary),
+		updatedAt: delivery.updatedAt
+	});
+	return {
+		group: {
+			objectType: SYSTEM_OBJECT_TYPE_INBOX_DELIVERY,
+			label: {
+				default: "Inbox Reports",
+				translations: {
+					en: "Inbox Reports",
+					zh: "收件箱报告"
+				}
+			},
+			description: {
+				default: "Reference reports and delivered content saved by NextClaw.",
+				translations: {
+					en: "Reference reports and delivered content saved by NextClaw.",
+					zh: "引用由 NextClaw 保存的报告和送达内容。"
+				}
+			},
+			icon: "inbox",
+			order: 100
+		},
+		list: async () => (await manager.listDeliveries()).deliveries.map((delivery) => toItem(delivery)),
+		resolve: async (objectId) => {
+			const delivery = await manager.getDelivery(objectId);
+			if (!delivery) return null;
+			const sourceLines = [
+				`# ${delivery.title}`,
+				"",
+				`- Object: ${createSystemObjectReferenceUri(SYSTEM_OBJECT_TYPE_INBOX_DELIVERY, delivery.id)}`,
+				`- Created: ${delivery.createdAt}`,
+				`- Source agent: ${delivery.source.agentId ?? "unknown"}`
+			];
+			if (delivery.summary) sourceLines.push("", "## Summary", "", delivery.summary);
+			sourceLines.push("", "## Content", "", delivery.content);
+			return {
+				item: toItem(delivery),
+				content: sourceLines.join("\n"),
+				fileName: safeSnapshotFileName(delivery.title, "md"),
+				mimeType: "text/markdown"
+			};
+		}
+	};
+}
+function createCronJobSystemObjectProvider(automation) {
+	const toItem = (job) => ({
+		uri: createSystemObjectReferenceUri(SYSTEM_OBJECT_TYPE_CRON_JOB, job.id),
+		objectType: SYSTEM_OBJECT_TYPE_CRON_JOB,
+		objectId: job.id,
+		label: job.name,
+		description: truncate(job.payload.message),
+		updatedAt: new Date(job.updatedAtMs).toISOString()
+	});
+	return {
+		group: {
+			objectType: SYSTEM_OBJECT_TYPE_CRON_JOB,
+			label: {
+				default: "Scheduled Tasks",
+				translations: {
+					en: "Scheduled Tasks",
+					zh: "定时任务"
+				}
+			},
+			description: {
+				default: "Reference task schedules, instructions, and recent run state.",
+				translations: {
+					en: "Reference task schedules, instructions, and recent run state.",
+					zh: "引用任务计划、指令和最近运行状态。"
+				}
+			},
+			icon: "calendar-clock",
+			order: 200
+		},
+		list: () => automation.listJobs(true).map(toItem),
+		resolve: (objectId) => {
+			const job = automation.listJobs(true).find(({ id }) => id === objectId);
+			if (!job) return null;
+			const content = [
+				`# ${job.name}`,
+				"",
+				`- Object: ${createSystemObjectReferenceUri(SYSTEM_OBJECT_TYPE_CRON_JOB, job.id)}`,
+				`- Enabled: ${job.enabled ? "yes" : "no"}`,
+				`- Delete after run: ${job.deleteAfterRun ? "yes" : "no"}`,
+				`- Created: ${new Date(job.createdAtMs).toISOString()}`,
+				`- Updated: ${new Date(job.updatedAtMs).toISOString()}`,
+				`- Next run: ${toIsoTime(job.state.nextRunAtMs) ?? "none"}`,
+				`- Last run: ${toIsoTime(job.state.lastRunAtMs) ?? "none"}`,
+				`- Last status: ${job.state.lastStatus ?? "none"}`,
+				"",
+				"## Schedule",
+				"",
+				"```json",
+				JSON.stringify(job.schedule, null, 2),
+				"```",
+				"",
+				"## Payload",
+				"",
+				job.payload.message,
+				"",
+				"```json",
+				JSON.stringify({
+					kind: job.payload.kind ?? "agent_turn",
+					agentId: job.payload.agentId ?? null,
+					sessionId: job.payload.sessionId ?? null
+				}, null, 2),
+				"```",
+				...job.state.lastError ? [
+					"",
+					"## Last error",
+					"",
+					job.state.lastError
+				] : []
+			].join("\n");
+			return {
+				item: toItem(job),
+				content,
+				fileName: safeSnapshotFileName(job.name, "md"),
+				mimeType: "text/markdown"
+			};
+		}
+	};
+}
+//#endregion
 //#region src/managers/mcp.manager.ts
 var McpManager = class {
 	currentMcpConfig;
@@ -5521,7 +6097,7 @@ function safeNcpSessionFilename(value) {
 function normalizeNcpAgentId(agentId) {
 	return agentId?.trim().toLowerCase() || void 0;
 }
-function isRecord$12(value) {
+function isRecord$13(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function toIsoString(value, fallback) {
@@ -5651,7 +6227,7 @@ function mergeReplayCompletedToolResults(message, toolResultsByCallId) {
 	} : message;
 }
 function readLegacyContextCompactionMessageId(message) {
-	const checkpoint = isRecord$12(message?.metadata?.checkpoint) ? message.metadata.checkpoint : null;
+	const checkpoint = isRecord$13(message?.metadata?.checkpoint) ? message.metadata.checkpoint : null;
 	const checkpointId = typeof checkpoint?.id === "string" ? checkpoint.id : "";
 	const coveredCount = checkpoint?.coveredSessionMessageCount;
 	const legacyId = `${message?.sessionId}:service:context-compaction:${checkpointId}`;
@@ -5683,11 +6259,11 @@ function readReplayMessageId(event) {
 	return readMessageFromSummaryEvent(event)?.id ?? null;
 }
 function readEventSessionId$2(event) {
-	const sessionId = ("payload" in event && isRecord$12(event.payload) ? event.payload : null)?.sessionId;
+	const sessionId = ("payload" in event && isRecord$13(event.payload) ? event.payload : null)?.sessionId;
 	return typeof sessionId === "string" ? sessionId : "";
 }
 function readReplayPayloadTimestamp(event) {
-	const payload = "payload" in event && isRecord$12(event.payload) ? event.payload : null;
+	const payload = "payload" in event && isRecord$13(event.payload) ? event.payload : null;
 	const timestamp = typeof payload?.timestamp === "string" ? payload.timestamp : "";
 	return Number.isFinite(Date.parse(timestamp)) ? new Date(timestamp).toISOString() : null;
 }
@@ -6498,1424 +7074,1621 @@ function isPanelAppAgentCapability(value) {
 	return PANEL_APP_AGENT_CAPABILITIES.includes(value);
 }
 //#endregion
-//#region src/services/panel-app-asset-token.service.ts
-const PANEL_APP_ASSET_TOKEN_TTL_MS = 7200 * 1e3;
-var PanelAppAssetTokenService = class {
-	now;
-	secret;
-	ttlMs;
-	constructor(params = {}) {
-		this.now = params.now ?? Date.now;
-		this.secret = params.secret ?? randomBytes(32);
-		this.ttlMs = params.ttlMs ?? PANEL_APP_ASSET_TOKEN_TTL_MS;
-	}
-	issue = (params) => {
-		const claims = {
-			panelAppId: params.panelAppId,
-			sourceName: params.sourceName,
-			sourcePath: params.sourcePath,
-			expiresAt: this.now() + this.ttlMs,
-			nonce: randomBytes(12).toString("base64url")
-		};
-		const payload = Buffer.from(JSON.stringify(claims), "utf8").toString("base64url");
-		return `${payload}.${this.sign(payload)}`;
+//#region src/utils/panel-app-manifest.utils.ts
+const PANEL_APP_ID_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+function parsePanelAppManifest(html) {
+	return {
+		...readHtmlTitle(html),
+		...readStandardIcon(html),
+		...readPanelAppMeta(html),
+		capabilities: readPanelAppCapabilities(html),
+		client: false,
+		serviceActions: readPanelAppServiceActions(html)
 	};
-	verify = (token) => {
-		const [payload, signature, ...rest] = token.trim().split(".");
-		if (!payload || !signature || rest.length > 0 || !this.matchesSignature(payload, signature)) throw new PanelAppError("PANEL_APP_ASSET_TOKEN_INVALID", "invalid panel app asset token");
-		const claims = this.parseClaims(payload);
-		if (claims.expiresAt <= this.now()) throw new PanelAppError("PANEL_APP_ASSET_TOKEN_EXPIRED", "panel app asset token expired");
-		return claims;
+}
+function parsePanelAppFolderManifest(raw) {
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch (error) {
+		throw new Error(`panel-app.json is not valid JSON: ${error instanceof Error ? error.message : String(error)}`);
+	}
+	if (!isRecord$12(parsed)) throw new Error("panel-app.json must contain an object.");
+	const id = readOptionalString$8(parsed, "id");
+	if (id && !PANEL_APP_ID_PATTERN.test(id)) throw new Error("panel app id must be kebab-case.");
+	return {
+		id,
+		title: readRequiredString$7(parsed, "title"),
+		description: readOptionalString$8(parsed, "description"),
+		icon: readOptionalString$8(parsed, "icon"),
+		entry: readRequiredString$7(parsed, "entry"),
+		capabilities: readStringArray$1(parsed.capabilities, "capabilities"),
+		client: readOptionalBoolean$2(parsed, "client"),
+		serviceActions: readStringArray$1(parsed.actions, "actions")
 	};
-	sign = (payload) => createHmac("sha256", this.secret).update(payload).digest("base64url");
-	matchesSignature = (payload, signature) => {
-		const expected = Buffer.from(this.sign(payload), "utf8");
-		const actual = Buffer.from(signature, "utf8");
-		return expected.length === actual.length && timingSafeEqual(expected, actual);
+}
+function readPanelAppMeta(html) {
+	return {
+		...readPanelAppMetaField(html, "title"),
+		...readPanelAppMetaField(html, "description"),
+		...readPanelAppMetaField(html, "icon")
 	};
-	parseClaims = (payload) => {
-		try {
-			const claims = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
-			if (!isPanelAppAssetTokenClaims(claims)) throw new Error("invalid panel app asset token claims");
-			return claims;
-		} catch {
-			throw new PanelAppError("PANEL_APP_ASSET_TOKEN_INVALID", "invalid panel app asset token");
+}
+function readPanelAppMetaField(html, field) {
+	const content = readMetaContent(html, `nextclaw-panel-${field}`, field === "icon" ? "attribute" : "text");
+	const manifest = {};
+	if (content) manifest[field] = content;
+	return manifest;
+}
+function readHtmlTitle(html) {
+	const title = normalizeTextValue(html.match(/<title[^>]*>([\s\S]*?)<\/title>/i)?.[1]);
+	return title ? { title } : {};
+}
+function readStandardIcon(html) {
+	const icon = readLinkHref(html, (relTokens) => relTokens.includes("icon"));
+	const appleTouchIcon = readLinkHref(html, (relTokens) => relTokens.some((token) => token === "apple-touch-icon" || token === "apple-touch-icon-precomposed"));
+	const href = normalizeIconHref(icon ?? appleTouchIcon);
+	return href ? { icon: href } : {};
+}
+function readMetaContent(html, name, valueKind) {
+	const metaTags = html.matchAll(/<meta\s+([^>]*?)>/gi);
+	for (const tag of metaTags) {
+		const attributes = tag[1] ?? "";
+		if (readHtmlAttribute(attributes, "name") === name) {
+			const content = readHtmlAttribute(attributes, "content");
+			return valueKind === "attribute" ? normalizeAttributeValue(content) : normalizeTextValue(content);
 		}
-	};
-};
-function isPanelAppAssetTokenClaims(value) {
-	return typeof value === "object" && value !== null && "panelAppId" in value && "sourceName" in value && "sourcePath" in value && "expiresAt" in value && "nonce" in value && typeof value.panelAppId === "string" && typeof value.sourceName === "string" && typeof value.sourcePath === "string" && typeof value.expiresAt === "number" && typeof value.nonce === "string";
+	}
 }
-//#endregion
-//#region src/stores/panel-app-state.store.ts
-const PANEL_APP_STATE_FILE = ".panel-apps.state.json";
-const PANEL_APP_STATE_VERSION = 1;
-var PanelAppStateStore = class {
-	constructor(panelsPath) {
-		this.panelsPath = panelsPath;
+function readLinkHref(html, matchesRel) {
+	const linkTags = html.matchAll(/<link\s+([^>]*?)>/gi);
+	for (const tag of linkTags) {
+		const attributes = tag[1] ?? "";
+		if (matchesRel((readHtmlAttribute(attributes, "rel") ?? "").toLowerCase().split(/\s+/).filter(Boolean))) return normalizeAttributeValue(readHtmlAttribute(attributes, "href"));
 	}
-	load = async () => {
-		try {
-			const parsed = JSON.parse(await readFile(this.getStatePath(), "utf8"));
-			return this.normalizeStateFile(parsed).apps;
-		} catch (error) {
-			if (this.isMissingFileError(error) || error instanceof SyntaxError) return {};
-			throw error;
-		}
-	};
-	updatePreferences = async (id, preferences) => {
-		const apps = await this.load();
-		const next = { ...apps[id] ?? {} };
-		if (typeof preferences.favorite === "boolean") next.favorite = preferences.favorite;
-		apps[id] = next;
-		await this.persist(apps);
-		return next;
-	};
-	recordOpened = async (id, openedAt = /* @__PURE__ */ new Date()) => {
-		const apps = await this.load();
-		const current = apps[id] ?? {};
-		const next = {
-			...current,
-			lastOpenedAt: openedAt.toISOString(),
-			openCount: Math.max(0, current.openCount ?? 0) + 1
-		};
-		apps[id] = next;
-		await this.persist(apps);
-		return next;
-	};
-	deleteEntry = async (id) => {
-		const apps = await this.load();
-		if (!(id in apps)) return;
-		delete apps[id];
-		await this.persist(apps);
-	};
-	persist = async (apps) => {
-		const statePath = this.getStatePath();
-		const tempPath = `${statePath}.${randomUUID()}.tmp`;
-		const stateFile = {
-			version: PANEL_APP_STATE_VERSION,
-			apps
-		};
-		await mkdir(dirname(statePath), { recursive: true });
-		try {
-			await writeFile(tempPath, `${JSON.stringify(stateFile, null, 2)}\n`, "utf8");
-			await rename(tempPath, statePath);
-		} catch (error) {
-			await rm(tempPath, { force: true }).catch(() => void 0);
-			throw error;
-		}
-	};
-	getStatePath = () => join(this.panelsPath, PANEL_APP_STATE_FILE);
-	normalizeStateFile = (value) => {
-		if (!this.isRecord(value) || !this.isRecord(value.apps)) return {
-			version: PANEL_APP_STATE_VERSION,
-			apps: {}
-		};
-		return {
-			version: PANEL_APP_STATE_VERSION,
-			apps: Object.fromEntries(Object.entries(value.apps).flatMap(([id, entry]) => {
-				if (!this.isRecord(entry)) return [];
-				return [[id, this.normalizeStateEntry(entry)]];
-			}))
-		};
-	};
-	normalizeStateEntry = (entry) => {
-		const normalized = {};
-		if (typeof entry.favorite === "boolean") normalized.favorite = entry.favorite;
-		if (typeof entry.lastOpenedAt === "string") normalized.lastOpenedAt = entry.lastOpenedAt;
-		if (typeof entry.openCount === "number") normalized.openCount = entry.openCount;
-		return normalized;
-	};
-	isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-	isMissingFileError = (error) => typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
-};
-//#endregion
-//#region src/stores/panel-app-capability-grant.store.ts
-const EMPTY_GRANTS$2 = {
-	version: 1,
-	grants: {}
-};
-var PanelAppCapabilityGrantStore = class {
-	constructor(filePath) {
-		this.filePath = filePath;
-	}
-	isGranted = async (caller, capability) => {
-		const data = await this.load();
-		return Boolean(data.grants[getCallerKey(caller)]?.capabilities[capability]);
-	};
-	grant = async (params) => {
-		const { caller, capability, grantedAt } = params;
-		const data = await this.load();
-		const callerKey = getCallerKey(caller);
-		const callerGrants = data.grants[callerKey] ?? { capabilities: {} };
-		callerGrants.capabilities[capability] = { grantedAt };
-		data.grants[callerKey] = callerGrants;
-		await this.save(data);
-		return {
-			caller,
-			capability,
-			grantedAt
-		};
-	};
-	deleteCaller = async (caller) => {
-		const data = await this.load();
-		const callerKey = getCallerKey(caller);
-		if (!(callerKey in data.grants)) return;
-		delete data.grants[callerKey];
-		await this.save(data);
-	};
-	load = async () => {
-		try {
-			return normalizeStoreData$2(JSON.parse(await readFile(this.filePath, "utf8")));
-		} catch (error) {
-			if (isMissingFileError$3(error)) return structuredClone(EMPTY_GRANTS$2);
-			throw error;
-		}
-	};
-	save = async (data) => {
-		await mkdir(dirname(this.filePath), { recursive: true });
-		await writeFile(this.filePath, `${JSON.stringify(data, null, 2)}\n`, "utf8");
-	};
-};
-function normalizeStoreData$2(value) {
-	if (!isRecord$11(value) || value.version !== 1 || !isRecord$11(value.grants)) return structuredClone(EMPTY_GRANTS$2);
-	const grants = {};
-	for (const [callerKey, callerValue] of Object.entries(value.grants)) {
-		if (!isRecord$11(callerValue) || !isRecord$11(callerValue.capabilities)) continue;
-		const capabilities = {};
-		for (const [capability, grantValue] of Object.entries(callerValue.capabilities)) if (isRecord$11(grantValue) && typeof grantValue.grantedAt === "string") capabilities[capability] = { grantedAt: grantValue.grantedAt };
-		grants[callerKey] = { capabilities };
-	}
-	return {
-		version: 1,
-		grants
-	};
 }
-function getCallerKey(caller) {
-	return `${caller.surface}:${caller.appId}`;
+function readHtmlAttribute(attributes, attribute) {
+	const match = attributes.match(new RegExp(`(?:^|\\s)${attribute}\\s*=\\s*(["'])(.*?)\\1`, "i"));
+	return match?.[2] ? decodeHtmlAttribute(match[2]) : void 0;
 }
-function isRecord$11(value) {
-	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+function readPanelAppServiceActions(html) {
+	return parseTokenList(readMetaContent(html, "nextclaw-panel-actions", "attribute"));
 }
-function isMissingFileError$3(error) {
-	return Boolean(error) && typeof error === "object" && error.code === "ENOENT";
+function readPanelAppCapabilities(html) {
+	return parseTokenList(readMetaContent(html, "nextclaw-panel-capabilities", "attribute"));
 }
-//#endregion
-//#region src/stores/panel-app-client-grant.store.ts
-const EMPTY_GRANTS$1 = {
-	grants: {},
-	version: 1
-};
-var PanelAppClientGrantStore = class {
-	constructor(filePath) {
-		this.filePath = filePath;
-	}
-	isGranted = async (appId) => {
-		const data = await this.load();
-		return Boolean(data.grants[appId]);
-	};
-	grant = async (params) => {
-		const data = await this.load();
-		data.grants[params.appId] = { grantedAt: params.grantedAt };
-		await this.save(data);
-		return params;
-	};
-	revoke = async (appId) => {
-		const data = await this.load();
-		if (!data.grants[appId]) return;
-		delete data.grants[appId];
-		await this.save(data);
-	};
-	load = async () => {
-		try {
-			return normalizeStoreData$1(JSON.parse(await readFile(this.filePath, "utf8")));
-		} catch (error) {
-			if (isMissingFileError$2(error)) return structuredClone(EMPTY_GRANTS$1);
-			throw error;
-		}
-	};
-	save = async (data) => {
-		await mkdir(dirname(this.filePath), { recursive: true });
-		await writeFile(this.filePath, `${JSON.stringify(data, null, 2)}\n`, "utf8");
-	};
-};
-function normalizeStoreData$1(value) {
-	if (!isRecord$10(value) || value.version !== 1 || !isRecord$10(value.grants)) return structuredClone(EMPTY_GRANTS$1);
-	const grants = {};
-	for (const [appId, grant] of Object.entries(value.grants)) if (isRecord$10(grant) && typeof grant.grantedAt === "string") grants[appId] = { grantedAt: grant.grantedAt };
-	return {
-		grants,
-		version: 1
-	};
+function parseTokenList(content) {
+	if (!content) return [];
+	return [...new Set(content.split(/[,\s]+/).map((entry) => entry.trim()).filter(Boolean))];
 }
-function isRecord$10(value) {
+function readRequiredString$7(record, key) {
+	const value = readOptionalString$8(record, key);
+	if (!value) throw new Error(`panel app ${key} is required.`);
+	return value;
+}
+function readOptionalString$8(record, key) {
+	return typeof record[key] === "string" && record[key].trim() ? record[key].trim() : void 0;
+}
+function readOptionalBoolean$2(record, key) {
+	const value = record[key];
+	if (value === void 0) return false;
+	if (typeof value !== "boolean") throw new Error(`panel app ${key} must be a boolean.`);
+	return value;
+}
+function readStringArray$1(value, key) {
+	if (value === void 0) return [];
+	if (!Array.isArray(value) || value.some((entry) => typeof entry !== "string")) throw new Error(`panel app ${key} must be a string array.`);
+	return [...new Set(value.map((entry) => entry.trim()).filter(Boolean))];
+}
+function isRecord$12(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
-function isMissingFileError$2(error) {
-	return isRecord$10(error) && error.code === "ENOENT";
+function normalizeTextValue(value) {
+	return decodeHtmlAttribute(value ?? "").replace(/\s+/g, " ").trim() || void 0;
 }
-//#endregion
-//#region src/services/agent-run-client.service.ts
-function readEventCorrelationId(event) {
-	if (!("payload" in event)) return;
-	const correlationId = "correlationId" in event.payload ? event.payload.correlationId : void 0;
-	return typeof correlationId === "string" && correlationId.length > 0 ? correlationId : void 0;
+function normalizeAttributeValue(value) {
+	return decodeHtmlAttribute(value ?? "").trim() || void 0;
 }
-function readEventSessionId(event) {
-	if (!("payload" in event)) return;
-	const sessionId = "sessionId" in event.payload ? event.payload.sessionId : void 0;
-	return typeof sessionId === "string" && sessionId.length > 0 ? sessionId : void 0;
+function normalizeIconHref(value) {
+	if (!value) return;
+	if (value.startsWith("data:image/") || value.startsWith("http://") || value.startsWith("https://") || value.startsWith("/")) return value;
 }
-function readEventRunId(event) {
-	if (!("payload" in event)) return;
-	const runId = "runId" in event.payload ? event.payload.runId : void 0;
-	return typeof runId === "string" && runId.length > 0 ? runId : void 0;
+function decodeHtmlAttribute(value) {
+	return value.replace(/&quot;/g, "\"").replace(/&#34;/g, "\"").replace(/&apos;/g, "'").replace(/&#39;/g, "'").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
 }
-function isTerminalEvent(event) {
-	return event.type === NcpEventType.MessageFailed || event.type === NcpEventType.RunError || event.type === NcpEventType.RunFinished;
+const PANEL_APP_FOLDER_MANIFEST_FILE_NAME = "panel-app.json";
+function isPanelAppSourceEntry(entry) {
+	return entry.isFile() && isPanelAppFileName(entry.name) || entry.isDirectory() && isPanelAppDirName(entry.name);
 }
-function isRunEventMatch(params) {
-	const { correlationId, event, runId, sessionId } = params;
-	const eventCorrelationId = readEventCorrelationId(event);
-	if (eventCorrelationId) return eventCorrelationId === correlationId;
-	if (!sessionId || !runId) return false;
-	return readEventSessionId(event) === sessionId && readEventRunId(event) === runId;
+function isPanelAppFileName(fileName) {
+	return hasSafeBaseName(fileName) && fileName.endsWith(".panel.html");
 }
-var AgentRunEventQueue = class {
-	values = [];
-	waiters = [];
-	closed = false;
-	push = (value) => {
-		if (this.closed) return;
-		const waiter = this.waiters.shift();
-		if (waiter) {
-			waiter({
-				done: false,
-				value
-			});
-			return;
-		}
-		this.values.push(value);
+function isPanelAppDirName(dirName) {
+	return hasSafeBaseName(dirName) && dirName.endsWith(".panel");
+}
+function toPanelAppTitle(sourceName) {
+	return sourceName.replace(new RegExp(`${escapeRegExp(".panel.html")}$`), "").replace(new RegExp(`${escapeRegExp(".panel")}$`), "").replace(/[-_]+/g, " ").trim() || sourceName;
+}
+function encodePanelAppId(sourceName) {
+	return Buffer.from(sourceName, "utf8").toString("base64url");
+}
+function decodePanelAppId(id) {
+	const normalizedId = id.trim();
+	if (!normalizedId) throw new PanelAppError("PANEL_APP_INVALID_ID", "panel app id is required");
+	let sourceName = "";
+	try {
+		sourceName = Buffer.from(normalizedId, "base64url").toString("utf8");
+	} catch {
+		throw new PanelAppError("PANEL_APP_INVALID_ID", "invalid panel app id");
+	}
+	if (encodePanelAppId(sourceName) !== normalizedId || !isPanelAppFileName(sourceName) && !isPanelAppDirName(sourceName)) throw new PanelAppError("PANEL_APP_INVALID_ID", "invalid panel app id");
+	return sourceName;
+}
+async function readPanelAppFolderManifest(dirPath, dirName) {
+	const manifest = parsePanelAppFolderManifest(await readFile(join(dirPath, PANEL_APP_FOLDER_MANIFEST_FILE_NAME), "utf8"));
+	const expectedId = dirName.slice(0, -6);
+	if (manifest.id && manifest.id !== expectedId) throw new PanelAppError("PANEL_APP_MANIFEST_INVALID", "panel app manifest id must match the directory name");
+	return {
+		...manifest,
+		id: expectedId
 	};
-	close = () => {
-		if (this.closed) return;
-		this.closed = true;
-		while (this.waiters.length > 0) this.waiters.shift()?.({
-			done: true,
-			value: void 0
-		});
+}
+function resolvePanelAppRelativePath(rootPath, relativePath) {
+	if (!relativePath.trim() || relativePath.includes("\0") || isAbsolute(relativePath)) throw new PanelAppError("PANEL_APP_INVALID_ASSET_PATH", "invalid panel app asset path");
+	const normalizedPath = normalize(relativePath);
+	if (normalizedPath === "." || normalizedPath.startsWith("..")) throw new PanelAppError("PANEL_APP_INVALID_ASSET_PATH", "invalid panel app asset path");
+	const resolvedPath = resolve(rootPath, normalizedPath);
+	const pathFromRoot = relative(resolve(rootPath), resolvedPath);
+	if (pathFromRoot.startsWith("..") || isAbsolute(pathFromRoot)) throw new PanelAppError("PANEL_APP_INVALID_ASSET_PATH", "invalid panel app asset path");
+	return resolvedPath;
+}
+function resolvePanelAppAssetContentType(path) {
+	switch (extname(path).toLowerCase()) {
+		case ".css": return "text/css; charset=utf-8";
+		case ".js":
+		case ".mjs": return "application/javascript; charset=utf-8";
+		case ".json": return "application/json; charset=utf-8";
+		case ".png": return "image/png";
+		case ".svg": return "image/svg+xml; charset=utf-8";
+		case ".webp": return "image/webp";
+		case ".txt": return "text/plain; charset=utf-8";
+		default: return "application/octet-stream";
+	}
+}
+function resolvePanelAppIconUrl(id, icon) {
+	if (!icon) return;
+	if (icon.startsWith("data:image/") || icon.startsWith("http://") || icon.startsWith("https://") || icon.startsWith("/") || isLikelyTextIcon(icon)) return icon;
+	return `/api/panel-apps/${encodeURIComponent(id)}/assets/${encodePanelAppAssetPath(icon)}`;
+}
+function injectPanelAppAssetBase(html, baseHref) {
+	const base = `<base href="${baseHref}">`;
+	return injectLocalScriptCrossOrigin((() => {
+		if (/<base\b/i.test(html)) return html;
+		if (/<head[^>]*>/i.test(html)) return html.replace(/<head[^>]*>/i, (head) => `${head}${base}`);
+		return `${base}${html}`;
+	})());
+}
+function injectLocalScriptCrossOrigin(html) {
+	return html.replace(/<script\b(?=[^>]*\bsrc\s*=)(?![^>]*\bcrossorigin\b)[^>]*>/gi, (tag) => {
+		const src = extractScriptSrc(tag);
+		if (!src || !isLocalScriptSrc(src)) return tag;
+		return `${tag.slice(0, -1)} crossorigin="anonymous">`;
+	});
+}
+function extractScriptSrc(tag) {
+	const match = /\bsrc\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s>]+))/i.exec(tag);
+	return match?.[1] ?? match?.[2] ?? match?.[3];
+}
+function isLocalScriptSrc(src) {
+	const value = src.trim();
+	if (!value || value.startsWith("//")) return false;
+	return !/^(?:https?|data|blob|javascript):/i.test(value);
+}
+function encodePanelAppAssetPath(path) {
+	return path.split("/").filter(Boolean).map((segment) => encodeURIComponent(segment)).join("/");
+}
+function hasSafeBaseName(name) {
+	return !name.includes("/") && !name.includes("\\") && !name.includes("\0");
+}
+function isLikelyTextIcon(icon) {
+	return !icon.includes("/") && !icon.includes(".") && icon.length <= 4;
+}
+function escapeRegExp(value) {
+	return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//#endregion
+//#region src/utils/panel-app-content-source.utils.ts
+async function readPanelAppContentSource(params) {
+	const { createAssetBaseHref, id, panelsPath, sourceService } = params;
+	return await readResolvedPanelAppContentSource(await sourceService.resolveSource(panelsPath, id), createAssetBaseHref);
+}
+async function readPanelAppContentSourceByPath(params) {
+	const { createAssetBaseHref, path, sourceService } = params;
+	return await readResolvedPanelAppContentSource(await sourceService.resolveSourcePath(path), createAssetBaseHref);
+}
+async function readPanelAppContentSourceByIdOrPath(params) {
+	const { sourcePath, ...standardSourceParams } = params;
+	return sourcePath ? await readPanelAppContentSourceByPath({
+		createAssetBaseHref: params.createAssetBaseHref,
+		path: sourcePath,
+		sourceService: params.sourceService
+	}) : await readPanelAppContentSource(standardSourceParams);
+}
+async function readResolvedPanelAppContentSource(source, createAssetBaseHref) {
+	const html = await readFile(source.entryPath, "utf8");
+	const manifest = source.manifest ?? parsePanelAppManifest(html);
+	const sourceId = encodePanelAppId(source.sourceName);
+	return {
+		appId: resolvePanelAppAppId(source, manifest),
+		sourceId,
+		source,
+		manifest,
+		html,
+		htmlWithBase: source.kind === "folder" ? injectPanelAppAssetBase(html, createAssetBaseHref(source)) : html
 	};
-	next = async () => {
-		if (this.values.length > 0) return {
-			done: false,
-			value: this.values.shift()
-		};
-		if (this.closed) return {
-			done: true,
-			value: void 0
-		};
-		return await new Promise((resolve) => {
-			this.waiters.push(resolve);
+}
+async function readPanelAppContentSourceByIdOrAppId(params) {
+	const { appIdOrSourceId, createAssetBaseHref, panelsPath, sourceService } = params;
+	try {
+		return await readPanelAppContentSource({
+			createAssetBaseHref,
+			id: appIdOrSourceId,
+			panelsPath,
+			sourceService
 		});
-	};
-	[Symbol.asyncIterator] = () => ({ next: this.next });
-};
-var AgentRunObserver = class {
-	queue = new AgentRunEventQueue();
-	unsubscribe;
-	abortCleanup;
-	completedMessage;
-	disposed = false;
-	runId;
-	sessionId;
-	constructor(options) {
-		this.options = options;
-		this.unsubscribe = options.eventBus.on(eventKeys.ncpEvent, this.handleEvent);
+	} catch (error) {
+		if (!isPanelAppError(error)) throw error;
+		if (error.code !== "PANEL_APP_INVALID_ID" && error.code !== "PANEL_APP_NOT_FOUND") throw error;
 	}
-	attachHandle = (handle) => {
-		this.sessionId = handle.sessionId;
-		this.runId = handle.runId ?? void 0;
-		const { abortSignal } = this.options;
-		if (!abortSignal) return;
-		const abort = () => {
-			this.options.ingress.handle({
-				type: ingressKeys.agentRun.abort,
-				payload: {
-					sessionId: handle.sessionId,
-					correlationId: this.options.correlationId
-				}
-			}, { source: "agent-run-client" });
-		};
-		if (abortSignal.aborted) {
-			abort();
-			return;
+	const sources = await sourceService.listSources(panelsPath);
+	for (const source of sources) {
+		const html = await readFile(source.entryPath, "utf8");
+		if (resolvePanelAppAppId(source, source.manifest ?? parsePanelAppManifest(html)) === appIdOrSourceId) return await readPanelAppContentSource({
+			createAssetBaseHref,
+			id: encodePanelAppId(source.sourceName),
+			panelsPath,
+			sourceService
+		});
+	}
+	throw new PanelAppError("PANEL_APP_NOT_FOUND", "panel app not found");
+}
+function resolvePanelAppAppId(source, manifest) {
+	return manifest.id ?? encodePanelAppId(source.sourceName);
+}
+//#endregion
+//#region src/managers/panel-app-package-state.manager.ts
+var PanelAppPackageStateManager = class {
+	constructor(params) {
+		this.params = params;
+	}
+	listSources = async () => {
+		const panelsPath = this.params.getPanelsPath();
+		const workspaceSources = await this.params.sourceService.listSources(panelsPath);
+		const packageSources = (await this.listPackageComponentSources()).filter((component) => component.kind === "panel");
+		const resolvedPackageSources = await Promise.all(packageSources.map(async (packageSource) => ({
+			source: await this.params.sourceService.resolveSourcePath(packageSource.sourcePath),
+			packageSource
+		})));
+		return [...workspaceSources.map((source) => ({ source })), ...resolvedPackageSources];
+	};
+	resolveSource = async (id) => {
+		try {
+			return await this.params.sourceService.resolveSource(this.params.getPanelsPath(), id);
+		} catch (error) {
+			if (!isPanelAppError(error) || error.code !== "PANEL_APP_NOT_FOUND") throw error;
 		}
-		abortSignal.addEventListener("abort", abort, { once: true });
-		this.abortCleanup = () => abortSignal.removeEventListener("abort", abort);
+		const match = (await this.listSources()).find(({ source, packageSource }) => packageSource && (encodePanelAppId(source.sourceName) === id || packageSource.id === id));
+		if (!match) throw new PanelAppError("PANEL_APP_NOT_FOUND", "panel app not found");
+		return match.source;
 	};
-	stream = async function* () {
-		for await (const event of this.queue) yield event;
+	findPackageSourceBySourceName = async (sourceName) => {
+		return (await this.listPackageComponentSources()).find((component) => component.kind === "panel" && component.sourcePath.endsWith(`/${sourceName}`));
 	};
-	waitForReply = async (options = {}) => {
-		for await (const event of this.queue) {
-			if (event.type === NcpEventType.MessageTextDelta) {
-				options.onAssistantDelta?.(event.payload.delta);
-				continue;
-			}
-			if (event.type === NcpEventType.MessageCompleted) {
-				this.completedMessage = event.payload.message;
-				continue;
-			}
-			if (event.type === NcpEventType.MessageFailed) throw new Error(event.payload.error.message);
-			if (event.type === NcpEventType.RunError) throw new Error(event.payload.error ?? options.runErrorMessage ?? "NCP run failed.");
-			if (event.type === NcpEventType.RunFinished) {
-				if (!this.completedMessage) throw new Error(options.missingCompletedMessageError ?? "NCP run completed without a final assistant message.");
-				return this.completedMessage;
-			}
+	readContentSourceByIdOrAppId = async (id) => {
+		const panelsPath = this.params.getPanelsPath();
+		try {
+			return await readPanelAppContentSourceByIdOrAppId({
+				appIdOrSourceId: id,
+				createAssetBaseHref: this.params.createAssetBaseHref,
+				panelsPath,
+				sourceService: this.params.sourceService
+			});
+		} catch (error) {
+			if (!isPanelAppError(error) || error.code !== "PANEL_APP_NOT_FOUND") throw error;
 		}
-		throw new Error(options.missingCompletedMessageError ?? "NCP run completed without a final assistant message.");
+		const packageSource = (await this.listPackageComponentSources()).find((component) => component.kind === "panel" && component.id === id);
+		if (!packageSource) throw new PanelAppError("PANEL_APP_NOT_FOUND", "panel app not found");
+		return await readPanelAppContentSourceByIdOrPath({
+			createAssetBaseHref: this.params.createAssetBaseHref,
+			id,
+			panelsPath,
+			sourcePath: packageSource.sourcePath,
+			sourceService: this.params.sourceService
+		});
 	};
-	dispose = () => {
-		if (this.disposed) return;
-		this.disposed = true;
-		this.abortCleanup?.();
-		this.unsubscribe();
-		this.queue.close();
+	assertDeclaresClient = async (appId) => {
+		const sources = await this.listSources();
+		for (const { source } of sources) {
+			const manifest = source.manifest ?? parsePanelAppManifest(await readFile(source.entryPath, "utf8"));
+			if (resolvePanelAppAppId(source, manifest) === appId) {
+				if (!manifest.client) throw new PanelAppError("PANEL_APP_CLIENT_NOT_DECLARED", "panel app did not declare client access");
+				return;
+			}
+		}
+		throw new PanelAppError("PANEL_APP_NOT_FOUND", "panel app not found");
 	};
-	handleEvent = (event) => {
-		if (this.disposed || !isRunEventMatch({
-			correlationId: this.options.correlationId,
-			event,
-			runId: this.runId,
-			sessionId: this.sessionId
-		})) return;
-		this.options.onEvent?.(event);
-		this.queue.push(event);
-		if (isTerminalEvent(event)) this.queue.close();
+	assertCanActivate = async (components) => {
+		const panelComponents = components.filter((component) => component.kind === "panel");
+		if (panelComponents.length === 0) return;
+		const workspaceSources = await this.params.sourceService.listSources(this.params.getPanelsPath());
+		const workspaceIds = /* @__PURE__ */ new Set();
+		for (const source of workspaceSources) {
+			const manifest = source.manifest ?? parsePanelAppManifest(await readFile(source.entryPath, "utf8"));
+			workspaceIds.add(resolvePanelAppAppId(source, manifest));
+		}
+		const activePackageSources = await this.listPackageComponentSources();
+		for (const component of panelComponents) {
+			const conflictsWithPackage = activePackageSources.some((active) => active.kind === "panel" && active.id === component.id && active.packageId !== component.packageId);
+			if (workspaceIds.has(component.id) || conflictsWithPackage) throw new AppPackageError("APP_PACKAGE_CONFLICT", `Panel component id 冲突：${component.id}`);
+		}
+	};
+	deactivate = (components) => {
+		for (const component of components) if (component.kind === "panel") this.params.deleteBridgeSessions(component.id);
+	};
+	removeState = async (components) => {
+		const panelsPath = this.params.getPanelsPath();
+		for (const component of components) {
+			if (component.kind !== "panel") continue;
+			this.params.deleteBridgeSessions(component.id);
+			await this.params.createStateStore(panelsPath).deleteEntry(encodePanelAppId(basename(component.sourcePath)));
+			await this.params.createCapabilityGrantStore().deleteCaller({
+				surface: "panel-app",
+				appId: component.id
+			});
+			await this.params.createClientGrantStore().revoke(component.id);
+		}
 	};
+	listPackageComponentSources = async () => await this.params.listPackageComponentSources?.() ?? [];
 };
-var AgentRunClient = class {
-	constructor(options) {
-		this.options = options;
+//#endregion
+//#region src/utils/panel-app-time.utils.ts
+function resolvePanelAppCreatedAt(fileStat) {
+	return fileStat.birthtimeMs > 0 ? fileStat.birthtime.toISOString() : fileStat.mtime.toISOString();
+}
+function resolvePanelAppActivityMs(entry) {
+	return Math.max(new Date(entry.lastOpenedAt ?? 0).getTime(), new Date(entry.createdAt).getTime(), new Date(entry.updatedAt).getTime());
+}
+//#endregion
+//#region src/presenters/panel-app-entry.presenter.ts
+var PanelAppEntryPresenter = class {
+	constructor(params) {
+		this.params = params;
 	}
-	send = async (input) => {
-		return await this.sendWithCorrelation(input, randomUUID());
+	build = async (source, state, packageSource) => {
+		const manifest = source.manifest ?? parsePanelAppManifest(await readFile(source.entryPath, "utf8"));
+		const id = encodePanelAppId(source.sourceName);
+		const appId = resolvePanelAppAppId(source, manifest);
+		const entry = {
+			id,
+			appId,
+			fileName: source.sourceName,
+			kind: source.kind,
+			title: manifest.title ?? toPanelAppTitle(source.sourceName),
+			contentPath: packageSource ? `${this.params.contentBasePath}/${encodeURIComponent(id)}/content?${new URLSearchParams({ path: source.sourcePath })}` : `${this.params.contentBasePath}/${encodeURIComponent(id)}/content`,
+			createdAt: resolvePanelAppCreatedAt(source.sourceStat),
+			updatedAt: source.sourceStat.mtime.toISOString(),
+			sizeBytes: source.sourceStat.size,
+			favorite: state.favorite ?? false,
+			clientDeclared: manifest.client,
+			clientGranted: await this.params.isClientGranted(appId, manifest.client),
+			openCount: state.openCount ?? 0,
+			sourceKind: packageSource ? "package" : "workspace",
+			packageId: packageSource?.packageId,
+			packageVersion: packageSource?.packageVersion
+		};
+		if (manifest.description) entry.description = manifest.description;
+		if (manifest.icon) entry.icon = source.kind === "folder" ? packageSource ? `${this.params.createAssetBaseHref(source)}${manifest.icon.replace(/^\/+/, "")}` : resolvePanelAppIconUrl(id, manifest.icon) : manifest.icon;
+		if (state.lastOpenedAt) entry.lastOpenedAt = state.lastOpenedAt;
+		return entry;
 	};
-	sendAndWaitForReply = async (input, options = {}) => {
-		const correlationId = randomUUID();
-		const observer = this.prepareObserver(correlationId, options);
+	compare = (left, right) => resolvePanelAppActivityMs(right) - resolvePanelAppActivityMs(left) || Number(right.favorite) - Number(left.favorite) || left.title.localeCompare(right.title);
+};
+//#endregion
+//#region src/services/panel-app-asset-token.service.ts
+const PANEL_APP_ASSET_TOKEN_TTL_MS = 7200 * 1e3;
+var PanelAppAssetTokenService = class {
+	now;
+	secret;
+	ttlMs;
+	constructor(params = {}) {
+		this.now = params.now ?? Date.now;
+		this.secret = params.secret ?? randomBytes(32);
+		this.ttlMs = params.ttlMs ?? PANEL_APP_ASSET_TOKEN_TTL_MS;
+	}
+	issue = (params) => {
+		const claims = {
+			panelAppId: params.panelAppId,
+			sourceName: params.sourceName,
+			sourcePath: params.sourcePath,
+			expiresAt: this.now() + this.ttlMs,
+			nonce: randomBytes(12).toString("base64url")
+		};
+		const payload = Buffer.from(JSON.stringify(claims), "utf8").toString("base64url");
+		return `${payload}.${this.sign(payload)}`;
+	};
+	verify = (token) => {
+		const [payload, signature, ...rest] = token.trim().split(".");
+		if (!payload || !signature || rest.length > 0 || !this.matchesSignature(payload, signature)) throw new PanelAppError("PANEL_APP_ASSET_TOKEN_INVALID", "invalid panel app asset token");
+		const claims = this.parseClaims(payload);
+		if (claims.expiresAt <= this.now()) throw new PanelAppError("PANEL_APP_ASSET_TOKEN_EXPIRED", "panel app asset token expired");
+		return claims;
+	};
+	sign = (payload) => createHmac("sha256", this.secret).update(payload).digest("base64url");
+	matchesSignature = (payload, signature) => {
+		const expected = Buffer.from(this.sign(payload), "utf8");
+		const actual = Buffer.from(signature, "utf8");
+		return expected.length === actual.length && timingSafeEqual(expected, actual);
+	};
+	parseClaims = (payload) => {
 		try {
-			const handle = await this.sendWithCorrelation(input, correlationId);
-			observer.attachHandle(handle);
-			const completedMessage = await observer.waitForReply(options);
-			return {
-				handle,
-				completedMessage,
-				text: extractTextFromNcpMessage(completedMessage)
-			};
-		} finally {
-			observer.dispose();
+			const claims = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
+			if (!isPanelAppAssetTokenClaims(claims)) throw new Error("invalid panel app asset token claims");
+			return claims;
+		} catch {
+			throw new PanelAppError("PANEL_APP_ASSET_TOKEN_INVALID", "invalid panel app asset token");
 		}
 	};
-	sendAndStreamEvents = async function* (input, options = {}) {
-		const correlationId = randomUUID();
-		const observer = this.prepareObserver(correlationId, options);
+};
+function isPanelAppAssetTokenClaims(value) {
+	return typeof value === "object" && value !== null && "panelAppId" in value && "sourceName" in value && "sourcePath" in value && "expiresAt" in value && "nonce" in value && typeof value.panelAppId === "string" && typeof value.sourceName === "string" && typeof value.sourcePath === "string" && typeof value.expiresAt === "number" && typeof value.nonce === "string";
+}
+//#endregion
+//#region src/stores/panel-app-state.store.ts
+const PANEL_APP_STATE_FILE = ".panel-apps.state.json";
+const PANEL_APP_STATE_VERSION = 1;
+var PanelAppStateStore = class {
+	constructor(panelsPath) {
+		this.panelsPath = panelsPath;
+	}
+	load = async () => {
 		try {
-			const handle = await this.sendWithCorrelation(input, correlationId);
-			observer.attachHandle(handle);
-			for await (const event of observer.stream()) yield event;
-		} finally {
-			observer.dispose();
+			const parsed = JSON.parse(await readFile(this.getStatePath(), "utf8"));
+			return this.normalizeStateFile(parsed).apps;
+		} catch (error) {
+			if (this.isMissingFileError(error) || error instanceof SyntaxError) return {};
+			throw error;
 		}
 	};
-	prepareObserver = (correlationId, options) => {
-		return new AgentRunObserver({
-			abortSignal: options.abortSignal,
-			correlationId,
-			eventBus: this.options.eventBus,
-			ingress: this.options.ingress,
-			onEvent: options.onEvent
-		});
+	updatePreferences = async (id, preferences) => {
+		const apps = await this.load();
+		const next = { ...apps[id] ?? {} };
+		if (typeof preferences.favorite === "boolean") next.favorite = preferences.favorite;
+		apps[id] = next;
+		await this.persist(apps);
+		return next;
 	};
-	sendWithCorrelation = async (input, correlationId) => {
-		return await this.options.ingress.handle({
-			type: ingressKeys.agentRun.send,
-			payload: {
-				...input,
-				correlationId
-			}
-		}, { source: "agent-run-client" });
+	recordOpened = async (id, openedAt = /* @__PURE__ */ new Date()) => {
+		const apps = await this.load();
+		const current = apps[id] ?? {};
+		const next = {
+			...current,
+			lastOpenedAt: openedAt.toISOString(),
+			openCount: Math.max(0, current.openCount ?? 0) + 1
+		};
+		apps[id] = next;
+		await this.persist(apps);
+		return next;
+	};
+	deleteEntry = async (id) => {
+		const apps = await this.load();
+		if (!(id in apps)) return;
+		delete apps[id];
+		await this.persist(apps);
+	};
+	persist = async (apps) => {
+		const statePath = this.getStatePath();
+		const tempPath = `${statePath}.${randomUUID()}.tmp`;
+		const stateFile = {
+			version: PANEL_APP_STATE_VERSION,
+			apps
+		};
+		await mkdir(dirname(statePath), { recursive: true });
+		try {
+			await writeFile(tempPath, `${JSON.stringify(stateFile, null, 2)}\n`, "utf8");
+			await rename(tempPath, statePath);
+		} catch (error) {
+			await rm(tempPath, { force: true }).catch(() => void 0);
+			throw error;
+		}
+	};
+	getStatePath = () => join(this.panelsPath, PANEL_APP_STATE_FILE);
+	normalizeStateFile = (value) => {
+		if (!this.isRecord(value) || !this.isRecord(value.apps)) return {
+			version: PANEL_APP_STATE_VERSION,
+			apps: {}
+		};
+		return {
+			version: PANEL_APP_STATE_VERSION,
+			apps: Object.fromEntries(Object.entries(value.apps).flatMap(([id, entry]) => {
+				if (!this.isRecord(entry)) return [];
+				return [[id, this.normalizeStateEntry(entry)]];
+			}))
+		};
 	};
+	normalizeStateEntry = (entry) => {
+		const normalized = {};
+		if (typeof entry.favorite === "boolean") normalized.favorite = entry.favorite;
+		if (typeof entry.lastOpenedAt === "string") normalized.lastOpenedAt = entry.lastOpenedAt;
+		if (typeof entry.openCount === "number") normalized.openCount = entry.openCount;
+		return normalized;
+	};
+	isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+	isMissingFileError = (error) => typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
 };
 //#endregion
-//#region src/tools/structured-result.tools.ts
-const STRUCTURED_RESULT_TOOL_NAME = "nextclaw_submit_result";
-var StructuredResultSubmitTool = class {
-	name = STRUCTURED_RESULT_TOOL_NAME;
-	description = "Submit the structured object result for this request.";
-	constructor(contract) {
-		this.contract = contract;
-	}
-	get parameters() {
-		return this.contract.schema;
-	}
-	validateArgs = (args) => validateToolArgs(args, this.contract.schema);
-	execute = async (args) => args;
+//#region src/stores/panel-app-capability-grant.store.ts
+const EMPTY_GRANTS$2 = {
+	version: 1,
+	grants: {}
 };
-//#endregion
-//#region src/utils/panel-app-agent.utils.ts
-const PANEL_APP_AGENT_DEFAULT_TIMEOUT_MS = 6e4;
-const PANEL_APP_AGENT_MAX_TIMEOUT_MS = 12e4;
-const PANEL_APP_AGENT_MAX_PROMPT_CHARS = 2e4;
-const PANEL_APP_AGENT_MAX_CONTEXT_CHARS = 8e4;
-function normalizePanelAppGenerateObjectInput(input) {
-	const peerId = input.peerId.trim();
-	const prompt = input.prompt.trim();
-	if (!peerId || !prompt || !isRecord$9(input.schema)) throw new PanelAppError("PANEL_APP_AGENT_REQUEST_INVALID", "invalid generateObject request");
-	if (prompt.length > PANEL_APP_AGENT_MAX_PROMPT_CHARS) throw new PanelAppError("PANEL_APP_AGENT_REQUEST_INVALID", "generateObject prompt is too large");
-	if (stringifyJsonValue(input.context ?? null).length > PANEL_APP_AGENT_MAX_CONTEXT_CHARS) throw new PanelAppError("PANEL_APP_AGENT_REQUEST_INVALID", "generateObject context is too large");
-	return {
-		context: input.context,
-		peerId,
-		prompt,
-		schema: input.schema,
-		timeoutMs: normalizeTimeoutMs(input.timeoutMs),
-		title: input.title?.trim() || void 0
+var PanelAppCapabilityGrantStore = class {
+	constructor(filePath) {
+		this.filePath = filePath;
+	}
+	isGranted = async (caller, capability) => {
+		const data = await this.load();
+		return Boolean(data.grants[getCallerKey(caller)]?.capabilities[capability]);
 	};
-}
-function createPanelAppGenerateObjectMessage(params) {
-	const { bridgeSession, request, requestId } = params;
-	return {
-		id: `panel-app-agent-message-${randomUUID()}`,
-		metadata: {
-			...createPanelAppAgentMetadata(bridgeSession),
-			panel_app_peer_id: request.peerId,
-			structured_result: {
-				request_id: requestId,
-				schema: structuredClone(request.schema),
-				tool_name: STRUCTURED_RESULT_TOOL_NAME
-			}
-		},
-		parts: [{
-			type: "text",
-			text: buildGenerateObjectPrompt(bridgeSession, request)
-		}],
-		role: "user",
-		status: "final",
-		timestamp: (/* @__PURE__ */ new Date()).toISOString()
+	grant = async (params) => {
+		const { caller, capability, grantedAt } = params;
+		const data = await this.load();
+		const callerKey = getCallerKey(caller);
+		const callerGrants = data.grants[callerKey] ?? { capabilities: {} };
+		callerGrants.capabilities[capability] = { grantedAt };
+		data.grants[callerKey] = callerGrants;
+		await this.save(data);
+		return {
+			caller,
+			capability,
+			grantedAt
+		};
 	};
-}
-async function waitForPanelAppStructuredResult(agentRunClient, params) {
-	const iterator = agentRunClient.sendAndStreamEvents(params.payload)[Symbol.asyncIterator]();
-	let timeoutId;
-	const timeout = new Promise((_, reject) => {
-		timeoutId = setTimeout(() => reject(new PanelAppError("AGENT_OBJECT_RESULT_TIMEOUT", "agent object result timed out")), params.timeoutMs);
-	});
-	let resultToolCallId = null;
-	try {
-		while (true) {
-			const next = await Promise.race([iterator.next(), timeout]);
-			if (next.done) break;
-			const result = readStructuredResultEvent(next.value, resultToolCallId);
-			if (result.matchedToolCallId) resultToolCallId = result.matchedToolCallId;
-			if (result.submitted) return result.content;
-			throwIfTerminalError(next.value);
-		}
-	} finally {
-		if (timeoutId) clearTimeout(timeoutId);
-		await iterator.return?.(void 0);
-	}
-	throw new PanelAppError("AGENT_OBJECT_RESULT_NOT_SUBMITTED", "agent did not submit a structured object result");
-}
-function withPanelAppAgentMetadata(payload, bridgeSession) {
-	const panelAppMetadata = createPanelAppAgentMetadata(bridgeSession);
-	const peerId = readOptionalPeerId(payload.peerId);
-	const sessionId = readOptionalSessionId(payload.sessionId);
-	if (peerId && sessionId) throw new PanelAppError("PANEL_APP_AGENT_REQUEST_INVALID", "agent send request cannot include both sessionId and peerId");
-	const metadata = {
-		...payload.metadata ?? {},
-		...panelAppMetadata
+	deleteCaller = async (caller) => {
+		const data = await this.load();
+		const callerKey = getCallerKey(caller);
+		if (!(callerKey in data.grants)) return;
+		delete data.grants[callerKey];
+		await this.save(data);
 	};
-	if (peerId) metadata.panel_app_peer_id = peerId;
-	if (Array.isArray(payload.content)) return {
-		content: structuredClone(payload.content),
-		metadata,
-		peerId,
-		sessionId
+	load = async () => {
+		try {
+			return normalizeStoreData$2(JSON.parse(await readFile(this.filePath, "utf8")));
+		} catch (error) {
+			if (isMissingFileError$3(error)) return structuredClone(EMPTY_GRANTS$2);
+			throw error;
+		}
 	};
-	if (!payload.message) throw new PanelAppError("PANEL_APP_AGENT_REQUEST_INVALID", "agent send request is required");
-	return {
-		message: {
-			...structuredClone(payload.message),
-			metadata: {
-				...payload.message.metadata ?? {},
-				...panelAppMetadata
-			}
-		},
-		metadata,
-		peerId,
-		sessionId
+	save = async (data) => {
+		await mkdir(dirname(this.filePath), { recursive: true });
+		await writeFile(this.filePath, `${JSON.stringify(data, null, 2)}\n`, "utf8");
 	};
-}
-function createPanelAppAgentMetadata(bridgeSession) {
+};
+function normalizeStoreData$2(value) {
+	if (!isRecord$11(value) || value.version !== 1 || !isRecord$11(value.grants)) return structuredClone(EMPTY_GRANTS$2);
+	const grants = {};
+	for (const [callerKey, callerValue] of Object.entries(value.grants)) {
+		if (!isRecord$11(callerValue) || !isRecord$11(callerValue.capabilities)) continue;
+		const capabilities = {};
+		for (const [capability, grantValue] of Object.entries(callerValue.capabilities)) if (isRecord$11(grantValue) && typeof grantValue.grantedAt === "string") capabilities[capability] = { grantedAt: grantValue.grantedAt };
+		grants[callerKey] = { capabilities };
+	}
 	return {
-		agent_peer_scope: `panel-app:${bridgeSession.appId}`,
-		panel_app_bridge_request_id: randomUUID(),
-		panel_app_id: bridgeSession.appId,
-		source_kind: "panel_app"
+		version: 1,
+		grants
 	};
 }
-function normalizeTimeoutMs(timeoutMs) {
-	if (!Number.isFinite(timeoutMs) || typeof timeoutMs !== "number") return PANEL_APP_AGENT_DEFAULT_TIMEOUT_MS;
-	return Math.min(PANEL_APP_AGENT_MAX_TIMEOUT_MS, Math.max(1e3, Math.trunc(timeoutMs)));
-}
-function readOptionalPeerId(value) {
-	if (typeof value !== "string") return;
-	const peerId = value.trim();
-	if (!peerId) throw new PanelAppError("PANEL_APP_AGENT_REQUEST_INVALID", "agent peerId cannot be empty");
-	return peerId;
+function getCallerKey(caller) {
+	return `${caller.surface}:${caller.appId}`;
 }
-function readOptionalSessionId(value) {
-	if (typeof value !== "string") return;
-	const sessionId = value.trim();
-	if (!sessionId) throw new PanelAppError("PANEL_APP_AGENT_REQUEST_INVALID", "agent sessionId cannot be empty");
-	return sessionId;
+function isRecord$11(value) {
+	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
-function buildGenerateObjectPrompt(bridgeSession, request) {
-	return [
-		"Panel App generateObject request",
-		"",
-		`Panel App ID: ${bridgeSession.appId}`,
-		`Peer ID: ${request.peerId}`,
-		"",
-		"Context JSON:",
-		stringifyJsonValue(request.context ?? null),
-		"",
-		"Task:",
-		request.prompt,
-		"",
-		"Result contract:",
-		`Call the ${STRUCTURED_RESULT_TOOL_NAME} tool exactly once with an object matching the provided schema.`,
-		"Do not use natural language as the result."
-	].join("\n");
+function isMissingFileError$3(error) {
+	return Boolean(error) && typeof error === "object" && error.code === "ENOENT";
 }
-function readStructuredResultEvent(event, resultToolCallId) {
-	if (event.type === NcpEventType.MessageToolCallStart && event.payload.toolName === "nextclaw_submit_result") return {
-		matchedToolCallId: event.payload.toolCallId,
-		submitted: false
+//#endregion
+//#region src/stores/panel-app-client-grant.store.ts
+const EMPTY_GRANTS$1 = {
+	grants: {},
+	version: 1
+};
+var PanelAppClientGrantStore = class {
+	constructor(filePath) {
+		this.filePath = filePath;
+	}
+	isGranted = async (appId) => {
+		const data = await this.load();
+		return Boolean(data.grants[appId]);
 	};
-	if (event.type !== NcpEventType.MessageToolCallResult || event.payload.toolCallId !== resultToolCallId) return { submitted: false };
-	assertToolResultContent(event.payload.content);
+	grant = async (params) => {
+		const data = await this.load();
+		data.grants[params.appId] = { grantedAt: params.grantedAt };
+		await this.save(data);
+		return params;
+	};
+	revoke = async (appId) => {
+		const data = await this.load();
+		if (!data.grants[appId]) return;
+		delete data.grants[appId];
+		await this.save(data);
+	};
+	load = async () => {
+		try {
+			return normalizeStoreData$1(JSON.parse(await readFile(this.filePath, "utf8")));
+		} catch (error) {
+			if (isMissingFileError$2(error)) return structuredClone(EMPTY_GRANTS$1);
+			throw error;
+		}
+	};
+	save = async (data) => {
+		await mkdir(dirname(this.filePath), { recursive: true });
+		await writeFile(this.filePath, `${JSON.stringify(data, null, 2)}\n`, "utf8");
+	};
+};
+function normalizeStoreData$1(value) {
+	if (!isRecord$10(value) || value.version !== 1 || !isRecord$10(value.grants)) return structuredClone(EMPTY_GRANTS$1);
+	const grants = {};
+	for (const [appId, grant] of Object.entries(value.grants)) if (isRecord$10(grant) && typeof grant.grantedAt === "string") grants[appId] = { grantedAt: grant.grantedAt };
 	return {
-		content: event.payload.content,
-		submitted: true
+		grants,
+		version: 1
 	};
 }
-function assertToolResultContent(content) {
-	if (!isRecord$9(content) || content.ok !== false || !isRecord$9(content.error)) return;
-	if (content.error.code === "invalid_tool_arguments") throw new PanelAppError("AGENT_OBJECT_RESULT_SCHEMA_INVALID", "agent object result did not match the schema");
-	throw new PanelAppError("AGENT_OBJECT_REQUEST_FAILED", typeof content.error.message === "string" ? content.error.message : "agent object request failed");
+function isRecord$10(value) {
+	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
-function throwIfTerminalError(event) {
-	if (event.type === NcpEventType.MessageFailed) throw new PanelAppError("AGENT_OBJECT_REQUEST_FAILED", event.payload.error.message);
-	if (event.type === NcpEventType.RunError) throw new PanelAppError("AGENT_OBJECT_REQUEST_FAILED", event.payload.error ?? "agent object request failed");
-	if (event.type === NcpEventType.RunFinished) throw new PanelAppError("AGENT_OBJECT_RESULT_NOT_SUBMITTED", "agent did not submit a structured object result");
+function isMissingFileError$2(error) {
+	return isRecord$10(error) && error.code === "ENOENT";
 }
-function stringifyJsonValue(value) {
-	try {
-		return JSON.stringify(value, null, 2);
-	} catch {
-		throw new PanelAppError("PANEL_APP_AGENT_REQUEST_INVALID", "value is not JSON serializable");
-	}
+//#endregion
+//#region src/services/agent-run-client.service.ts
+function readEventCorrelationId(event) {
+	if (!("payload" in event)) return;
+	const correlationId = "correlationId" in event.payload ? event.payload.correlationId : void 0;
+	return typeof correlationId === "string" && correlationId.length > 0 ? correlationId : void 0;
 }
-function isRecord$9(value) {
-	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+function readEventSessionId(event) {
+	if (!("payload" in event)) return;
+	const sessionId = "sessionId" in event.payload ? event.payload.sessionId : void 0;
+	return typeof sessionId === "string" && sessionId.length > 0 ? sessionId : void 0;
 }
-//#endregion
-//#region src/services/panel-app-agent-bridge.service.ts
-var PanelAppAgentBridgeService = class {
-	constructor(params) {
-		this.params = params;
-	}
-	sendAgentMessage = async (bridgeSession, payload) => {
-		await this.assertAgentCapabilityGranted(bridgeSession, "agent:send");
-		return await this.requireAgentRunClient().send(withPanelAppAgentMetadata(payload, bridgeSession));
+function readEventRunId(event) {
+	if (!("payload" in event)) return;
+	const runId = "runId" in event.payload ? event.payload.runId : void 0;
+	return typeof runId === "string" && runId.length > 0 ? runId : void 0;
+}
+function isTerminalEvent(event) {
+	return event.type === NcpEventType.MessageFailed || event.type === NcpEventType.RunError || event.type === NcpEventType.RunFinished;
+}
+function isRunEventMatch(params) {
+	const { correlationId, event, runId, sessionId } = params;
+	const eventCorrelationId = readEventCorrelationId(event);
+	if (eventCorrelationId) return eventCorrelationId === correlationId;
+	if (!sessionId || !runId) return false;
+	return readEventSessionId(event) === sessionId && readEventRunId(event) === runId;
+}
+var AgentRunEventQueue = class {
+	values = [];
+	waiters = [];
+	closed = false;
+	push = (value) => {
+		if (this.closed) return;
+		const waiter = this.waiters.shift();
+		if (waiter) {
+			waiter({
+				done: false,
+				value
+			});
+			return;
+		}
+		this.values.push(value);
 	};
-	generateAgentObject = async (bridgeSession, input) => {
-		await this.assertAgentCapabilityGranted(bridgeSession, "agent:generateObject");
-		const request = normalizePanelAppGenerateObjectInput(input);
-		const message = createPanelAppGenerateObjectMessage({
-			bridgeSession,
-			request,
-			requestId: randomUUID()
+	close = () => {
+		if (this.closed) return;
+		this.closed = true;
+		while (this.waiters.length > 0) this.waiters.shift()?.({
+			done: true,
+			value: void 0
 		});
-		return { result: await waitForPanelAppStructuredResult(this.requireAgentRunClient(), {
-			payload: {
-				message,
-				metadata: {
-					...createPanelAppAgentMetadata(bridgeSession),
-					panel_app_peer_id: request.peerId
-				},
-				peerId: request.peerId
-			},
-			timeoutMs: request.timeoutMs
-		}) };
 	};
-	grantAgentCapability = async (bridgeSession, capability) => {
-		if (!isPanelAppAgentCapability(capability)) throw new PanelAppError("PANEL_APP_AGENT_REQUEST_INVALID", "unknown panel app agent capability");
-		this.assertDeclaredCapability(bridgeSession, capability);
-		return await this.params.createCapabilityGrantStore().grant({
-			caller: bridgeSession.caller,
-			capability,
-			grantedAt: (/* @__PURE__ */ new Date()).toISOString()
+	next = async () => {
+		if (this.values.length > 0) return {
+			done: false,
+			value: this.values.shift()
+		};
+		if (this.closed) return {
+			done: true,
+			value: void 0
+		};
+		return await new Promise((resolve) => {
+			this.waiters.push(resolve);
 		});
 	};
-	assertAgentCapabilityGranted = async (bridgeSession, capability) => {
-		this.assertDeclaredCapability(bridgeSession, capability);
-		if (!await this.params.createCapabilityGrantStore().isGranted(bridgeSession.caller, capability)) throw new PanelAppError("AUTHORIZATION_REQUIRED", `This panel app needs permission to use ${capability}.`);
+	[Symbol.asyncIterator] = () => ({ next: this.next });
+};
+var AgentRunObserver = class {
+	queue = new AgentRunEventQueue();
+	unsubscribe;
+	abortCleanup;
+	completedMessage;
+	disposed = false;
+	runId;
+	sessionId;
+	constructor(options) {
+		this.options = options;
+		this.unsubscribe = options.eventBus.on(eventKeys.ncpEvent, this.handleEvent);
+	}
+	attachHandle = (handle) => {
+		this.sessionId = handle.sessionId;
+		this.runId = handle.runId ?? void 0;
+		const { abortSignal } = this.options;
+		if (!abortSignal) return;
+		const abort = () => {
+			this.options.ingress.handle({
+				type: ingressKeys.agentRun.abort,
+				payload: {
+					sessionId: handle.sessionId,
+					correlationId: this.options.correlationId
+				}
+			}, { source: "agent-run-client" });
+		};
+		if (abortSignal.aborted) {
+			abort();
+			return;
+		}
+		abortSignal.addEventListener("abort", abort, { once: true });
+		this.abortCleanup = () => abortSignal.removeEventListener("abort", abort);
 	};
-	assertDeclaredCapability = (bridgeSession, capability) => {
-		if (!bridgeSession.declaredCapabilities.includes(capability)) throw new PanelAppError("PANEL_APP_CAPABILITY_NOT_DECLARED", this.describeMissingAgentCapability(bridgeSession.declaredCapabilities, capability));
+	stream = async function* () {
+		for await (const event of this.queue) yield event;
 	};
-	describeMissingAgentCapability = (declaredCapabilities, capability) => {
-		const declared = declaredCapabilities.length > 0 ? declaredCapabilities.join(", ") : "none";
-		const valid = PANEL_APP_AGENT_CAPABILITIES.join(", ");
-		const hint = declaredCapabilities.includes(capability.replace(":", ".")) ? ` Use ${capability}, not ${capability.replace(":", ".")}.` : "";
-		return [
-			`panel app did not declare ${capability}.`,
-			`Declared: ${declared}.`,
-			`Valid capabilities: ${valid}.`,
-			`Declare it with nextclaw-panel-capabilities or panel-app.json capabilities.`,
-			hint.trim()
-		].filter(Boolean).join(" ");
+	waitForReply = async (options = {}) => {
+		for await (const event of this.queue) {
+			if (event.type === NcpEventType.MessageTextDelta) {
+				options.onAssistantDelta?.(event.payload.delta);
+				continue;
+			}
+			if (event.type === NcpEventType.MessageCompleted) {
+				this.completedMessage = event.payload.message;
+				continue;
+			}
+			if (event.type === NcpEventType.MessageFailed) throw new Error(event.payload.error.message);
+			if (event.type === NcpEventType.RunError) throw new Error(event.payload.error ?? options.runErrorMessage ?? "NCP run failed.");
+			if (event.type === NcpEventType.RunFinished) {
+				if (!this.completedMessage) throw new Error(options.missingCompletedMessageError ?? "NCP run completed without a final assistant message.");
+				return this.completedMessage;
+			}
+		}
+		throw new Error(options.missingCompletedMessageError ?? "NCP run completed without a final assistant message.");
 	};
-	requireAgentRunClient = () => {
-		if (!this.params.agentRunClient) throw new PanelAppError("PANEL_APP_AGENT_REQUEST_INVALID", "panel app agent client is not configured");
-		return this.params.agentRunClient;
+	dispose = () => {
+		if (this.disposed) return;
+		this.disposed = true;
+		this.abortCleanup?.();
+		this.unsubscribe();
+		this.queue.close();
+	};
+	handleEvent = (event) => {
+		if (this.disposed || !isRunEventMatch({
+			correlationId: this.options.correlationId,
+			event,
+			runId: this.runId,
+			sessionId: this.sessionId
+		})) return;
+		this.options.onEvent?.(event);
+		this.queue.push(event);
+		if (isTerminalEvent(event)) this.queue.close();
+	};
+};
+var AgentRunClient = class {
+	constructor(options) {
+		this.options = options;
+	}
+	send = async (input) => {
+		return await this.sendWithCorrelation(input, randomUUID());
+	};
+	sendAndWaitForReply = async (input, options = {}) => {
+		const correlationId = randomUUID();
+		const observer = this.prepareObserver(correlationId, options);
+		try {
+			const handle = await this.sendWithCorrelation(input, correlationId);
+			observer.attachHandle(handle);
+			const completedMessage = await observer.waitForReply(options);
+			return {
+				handle,
+				completedMessage,
+				text: extractTextFromNcpMessage(completedMessage)
+			};
+		} finally {
+			observer.dispose();
+		}
+	};
+	sendAndStreamEvents = async function* (input, options = {}) {
+		const correlationId = randomUUID();
+		const observer = this.prepareObserver(correlationId, options);
+		try {
+			const handle = await this.sendWithCorrelation(input, correlationId);
+			observer.attachHandle(handle);
+			for await (const event of observer.stream()) yield event;
+		} finally {
+			observer.dispose();
+		}
+	};
+	prepareObserver = (correlationId, options) => {
+		return new AgentRunObserver({
+			abortSignal: options.abortSignal,
+			correlationId,
+			eventBus: this.options.eventBus,
+			ingress: this.options.ingress,
+			onEvent: options.onEvent
+		});
+	};
+	sendWithCorrelation = async (input, correlationId) => {
+		return await this.options.ingress.handle({
+			type: ingressKeys.agentRun.send,
+			payload: {
+				...input,
+				correlationId
+			}
+		}, { source: "agent-run-client" });
 	};
 };
 //#endregion
-//#region src/utils/ui-content-params-injection.utils.ts
-const UI_CONTENT_PARAMS_BOOTSTRAP_MARKER = "nextclaw:content-params:bootstrap";
-function getUiContentParamsBootstrapScript() {
-	return `
-/* ${UI_CONTENT_PARAMS_BOOTSTRAP_MARKER} */
-(() => {
-  const contract = ${JSON.stringify(UI_CONTENT_PARAMS_HOST_CONTRACT)};
-  const rawWindowName = typeof window.name === "string" ? window.name : "";
-  if (!rawWindowName.startsWith(contract.windowNamePrefix)) {
-    return;
-  }
-  window.name = "";
-  let params;
-  try {
-    params = JSON.parse(rawWindowName.slice(contract.windowNamePrefix.length));
-  } catch {
-    return;
-  }
-  if (!params || typeof params !== "object" || Array.isArray(params)) {
-    return;
-  }
-  const freezeJson = (value) => {
-    if (!value || typeof value !== "object" || Object.isFrozen(value)) {
-      return value;
-    }
-    Object.values(value).forEach(freezeJson);
-    return Object.freeze(value);
-  };
-  const existing = window.nextclaw && typeof window.nextclaw === "object"
-    ? window.nextclaw
-    : {};
-  Object.defineProperty(window, "nextclaw", {
-    configurable: true,
-    value: {
-      ...existing,
-      params: freezeJson(params)
-    }
-  });
-})();
-`.trim();
-}
-function injectUiContentParamsBootstrap(html) {
-	if (html.includes(UI_CONTENT_PARAMS_BOOTSTRAP_MARKER)) return html;
-	const script = `<script>${getUiContentParamsBootstrapScript()}<\/script>`;
-	const headMatch = /<head(?:\s[^>]*)?>/i.exec(html);
-	if (headMatch?.index !== void 0) {
-		const insertAt = headMatch.index + headMatch[0].length;
-		return `${html.slice(0, insertAt)}${script}${html.slice(insertAt)}`;
+//#region src/tools/structured-result.tools.ts
+const STRUCTURED_RESULT_TOOL_NAME = "nextclaw_submit_result";
+var StructuredResultSubmitTool = class {
+	name = STRUCTURED_RESULT_TOOL_NAME;
+	description = "Submit the structured object result for this request.";
+	constructor(contract) {
+		this.contract = contract;
 	}
-	return `${script}${html}`;
-}
+	get parameters() {
+		return this.contract.schema;
+	}
+	validateArgs = (args) => validateToolArgs(args, this.contract.schema);
+	execute = async (args) => args;
+};
 //#endregion
-//#region src/utils/panel-app-bridge.utils.ts
-const PANEL_APP_BRIDGE_MARKER = "nextclaw:panel-app-service-actions:request";
-function getPanelAppInlineContentHeightReporterScript() {
-	return `
-  function installInlineContentHeightReporter() {
-    const inlineHostContract = ${JSON.stringify(PANEL_APP_INLINE_HOST_CONTRACT)};
-    const readInlineContentHeight = ${readInlineContentHeight.toString()};
-    if (!window.location || !window.document) {
-      return;
-    }
-    const searchParams = new URLSearchParams(window.location.search);
-    if (
-      searchParams.get(inlineHostContract.displayModeSearchParam) !== inlineHostContract.displayMode ||
-      searchParams.get(inlineHostContract.placementSearchParam) !== inlineHostContract.placement
-    ) {
-      return;
-    }
-    const start = () => {
-      const { body, documentElement } = window.document;
-      if (!documentElement) {
-        return;
-      }
-      let lastHeight = 0;
-      const reportHeight = () => {
-        const height = readInlineContentHeight(body, documentElement);
-        if (height > 0 && height !== lastHeight) {
-          lastHeight = height;
-          window.parent.postMessage({ type: inlineHostContract.contentHeightMessageType, height }, "*");
-        }
-      };
-      if (typeof window.ResizeObserver === "function") {
-        const observer = new window.ResizeObserver(reportHeight);
-        observer.observe(documentElement);
-        if (body) {
-          observer.observe(body);
-        }
-      }
-      window.addEventListener("load", reportHeight);
-      reportHeight();
-    };
-    if (window.document.readyState === "loading") {
-      window.document.addEventListener("DOMContentLoaded", start, { once: true });
-      return;
-    }
-    start();
-  }`.trim();
-}
-function getPanelAppScrollSurfaceHelpersScript() {
-	return `
-    function readScrollPosition(element) {
-      const x = element ? element.scrollLeft : window.scrollX;
-      const y = element ? element.scrollTop : window.scrollY;
-      if (!Number.isFinite(x) || !Number.isFinite(y) || x < 0 || y < 0) {
-        return null;
-      }
-      return { x, y };
-    }
-
-    function getScrollSurface(target) {
-      const root = window.document.scrollingElement;
-      if (
-        !target ||
-        target === window.document ||
-        target === root ||
-        target === window.document.documentElement ||
-        target === window.document.body
-      ) {
-        return { kind: "document" };
-      }
-      if (!target.parentElement || !target.children || typeof target.scrollTop !== "number") {
-        return null;
-      }
-      const path = [];
-      let element = target;
-      while (element && element !== window.document.body) {
-        const parent = element.parentElement;
-        if (!parent || !parent.children) {
-          return null;
-        }
-        const index = Array.prototype.indexOf.call(parent.children, element);
-        const tagName = typeof element.tagName === "string" ? element.tagName.toLowerCase() : "";
-        if (index < 0 || !tagName) {
-          return null;
-        }
-        path.unshift({ index, tagName });
-        element = parent;
-      }
-      return element === window.document.body && path.length > 0 ? { kind: "element", path } : null;
-    }
-
-    function resolveScrollSurface(target) {
-      if (target.kind === "document") {
-        return null;
-      }
-      let element = window.document.body;
-      for (const segment of target.path) {
-        const child = element?.children?.[segment.index];
-        if (!child || child.tagName?.toLowerCase() !== segment.tagName) {
-          return undefined;
-        }
-        element = child;
-      }
-      return element;
-    }
-
-    function isScrollTarget(value) {
-      if (!value || typeof value !== "object") {
-        return false;
-      }
-      if (value.kind === "document") {
-        return true;
-      }
-      return value.kind === "element" &&
-        Array.isArray(value.path) &&
-        value.path.length > 0 &&
-        value.path.length <= 30 &&
-        value.path.every((segment) =>
-          segment &&
-          Number.isInteger(segment.index) &&
-          segment.index >= 0 &&
-          segment.index <= 1000 &&
-          typeof segment.tagName === "string" &&
-          segment.tagName.length > 0 &&
-          segment.tagName.length <= 32
-        );
-    }`.trim();
-}
-function getPanelAppScrollRestorationScript() {
-	return `
-  function installScrollRestoration() {
-    const scrollContract = ${JSON.stringify(PANEL_APP_SCROLL_RESTORATION_CONTRACT)};
-    const inlineHostContract = ${JSON.stringify(PANEL_APP_INLINE_HOST_CONTRACT)};
-    const searchParams = new URLSearchParams(window.location.search);
-    if (
-      searchParams.get(inlineHostContract.displayModeSearchParam) === inlineHostContract.displayMode &&
-      searchParams.get(inlineHostContract.placementSearchParam) === inlineHostContract.placement
-    ) {
-      return;
-    }
-    let isScrollReportScheduled = false;
-    let latestScrollSurface = null;
-
-    ${getPanelAppScrollSurfaceHelpersScript()}
-
-    function reportScroll() {
-      isScrollReportScheduled = false;
-      const surface = latestScrollSurface;
-      latestScrollSurface = null;
-      if (!surface) {
-        return;
-      }
-      const position = readScrollPosition(resolveScrollSurface(surface));
-      if (!position) {
-        return;
-      }
-      window.parent.postMessage({
-        type: scrollContract.scrollMessageType,
-        version: scrollContract.version,
-        target: surface,
-        ...position,
-      }, "*");
-    }
-
-    function scheduleScrollReport(event) {
-      const surface = getScrollSurface(event?.target);
-      if (!surface) {
-        return;
-      }
-      latestScrollSurface = surface;
-      if (isScrollReportScheduled) {
-        return;
-      }
-      isScrollReportScheduled = true;
-      if (typeof window.requestAnimationFrame === "function") {
-        window.requestAnimationFrame(reportScroll);
-        return;
-      }
-      reportScroll();
-    }
-
-    function applyScrollPosition(target, x, y) {
-      const element = resolveScrollSurface(target);
-      if (element === undefined) {
-        return false;
-      }
-      if (element && typeof element.scrollTo === "function") {
-        element.scrollTo(x, y);
-      } else if (element) {
-        element.scrollLeft = x;
-        element.scrollTop = y;
-      } else {
-        window.scrollTo(x, y);
-      }
-      const position = readScrollPosition(element);
-      return position && Math.abs(position.x - x) <= 1 && Math.abs(position.y - y) <= 1;
-    }
-
-    function restoreScroll(target, x, y) {
-      if (applyScrollPosition(target, x, y)) {
-        return;
-      }
-      let resizeObserver;
-      let mutationObserver;
-      let timeoutId;
-      const stop = () => {
-        resizeObserver?.disconnect();
-        mutationObserver?.disconnect();
-        if (timeoutId !== undefined && typeof window.clearTimeout === "function") {
-          window.clearTimeout(timeoutId);
-        }
-      };
-      const retry = () => {
-        if (applyScrollPosition(target, x, y)) {
-          stop();
-        }
-      };
-      if (typeof window.ResizeObserver === "function") {
-        resizeObserver = new window.ResizeObserver(retry);
-        resizeObserver.observe(window.document.documentElement);
-        if (window.document.body) {
-          resizeObserver.observe(window.document.body);
-        }
-      }
-      if (typeof window.MutationObserver === "function" && window.document.body) {
-        mutationObserver = new window.MutationObserver(retry);
-        mutationObserver.observe(window.document.body, { childList: true, subtree: true });
-      }
-      if (typeof window.setTimeout === "function") {
-        timeoutId = window.setTimeout(stop, 10000);
-      }
-    }
-
-    if (typeof window.document.addEventListener === "function") {
-      window.document.addEventListener("scroll", scheduleScrollReport, true);
-    }
-    window.addEventListener("message", (event) => {
-      const data = event.data;
-      if (
-        event.source !== window.parent ||
-        !data ||
-        data.type !== scrollContract.restoreScrollMessageType ||
-        data.version !== scrollContract.version ||
-        !isScrollTarget(data.target) ||
-        !Number.isFinite(data.x) ||
-        !Number.isFinite(data.y) ||
-        data.x < 0 ||
-        data.y < 0
-      ) {
-        return;
-      }
-      restoreScroll(data.target, data.x, data.y);
-    });
-  }`.trim();
-}
-function injectPanelAppBridgeScript(html, params) {
-	if (html.includes(PANEL_APP_BRIDGE_MARKER)) return html;
-	const script = `<script>${getPanelAppBridgeScript(params)}<\/script>`;
-	const headMatch = /<head(?:\s[^>]*)?>/i.exec(html);
-	if (headMatch?.index !== void 0) {
-		const insertAt = headMatch.index + headMatch[0].length;
-		return `${html.slice(0, insertAt)}${script}${html.slice(insertAt)}`;
-	}
-	return `${script}${html}`;
-}
-function getPanelAppBridgeScript(params = {
-	appId: "",
-	runtimeToken: ""
-}) {
-	const appId = JSON.stringify(params.appId);
-	const runtimeToken = JSON.stringify(params.runtimeToken);
-	return `
-${getUiContentParamsBootstrapScript()}
-(() => {
-  const requestType = "nextclaw:panel-app-service-actions:request";
-  const responseType = "nextclaw:panel-app-service-actions:response";
-  const appId = ${appId};
-  const runtimeToken = ${runtimeToken};
-  const pending = new Map();
-  let counter = 0;
-
-  function createRequestId() {
-    counter += 1;
-    return "panel-bridge-" + Date.now().toString(36) + "-" + counter.toString(36);
-  }
-
-  function request(method, payload) {
-    const requestId = createRequestId();
-    return new Promise((resolve, reject) => {
-      pending.set(requestId, { method, resolve, reject });
-      window.parent.postMessage({ type: requestType, requestId, appId, runtimeToken, method, payload }, "*");
-    });
-  }
-
-  ${getPanelAppInlineContentHeightReporterScript()}
-  ${getPanelAppScrollRestorationScript()}
-
-  function resolveApiFetchUrl(input) {
-    const raw = typeof input === "string" || input instanceof URL ? input.toString() : input?.url;
-    if (typeof raw !== "string") {
-      return null;
-    }
-    try {
-      const url = new URL(raw, window.location.href);
-      return url.origin === window.location.origin && url.pathname.startsWith("/api/") ? url : null;
-    } catch {
-      return null;
-    }
-  }
-
-  function createFetchInitWithRuntimeToken(input, init) {
-    if (!resolveApiFetchUrl(input)) {
-      return init;
-    }
-    const headers = new Headers(init?.headers || (typeof input === "object" && input ? input.headers : undefined));
-    if (!headers.has("x-nextclaw-panel-bridge-session")) {
-      headers.set("x-nextclaw-panel-bridge-session", runtimeToken);
-    }
-    return { ...init, headers };
-  }
-
-  const nativeFetch = window.fetch?.bind(window);
-  if (nativeFetch) {
-    window.fetch = (input, init) => nativeFetch(input, createFetchInitWithRuntimeToken(input, init));
-  }
-
-  function unwrapServiceActionResult(result) {
-    if (!result || typeof result !== "object") {
-      return result;
-    }
-    if (Object.prototype.hasOwnProperty.call(result, "structuredContent") && result.structuredContent !== undefined) {
-      return result.structuredContent;
-    }
-    const content = Array.isArray(result.content) ? result.content : undefined;
-    if (content && content.length === 1 && content[0]?.type === "text" && typeof content[0].text === "string") {
-      try {
-        return JSON.parse(content[0].text);
-      } catch {
-        return content[0].text;
-      }
-    }
-    return result;
-  }
-
-  function resolveBridgeData(entry, data) {
-    if (entry.method === "list") {
-      return Array.isArray(data.data?.actions) ? data.data.actions : [];
-    }
-    if (entry.method === "invoke") {
-      return unwrapServiceActionResult(data.data?.result);
-    }
-    if (entry.method === "agent.generateObject") {
-      return data.data?.result;
-    }
-    return data.data;
-  }
-
-  window.addEventListener("message", (event) => {
-    const data = event.data;
-    if (!data || data.type !== responseType || typeof data.requestId !== "string") {
-      return;
-    }
-    const entry = pending.get(data.requestId);
-    if (!entry) {
-      return;
-    }
-    pending.delete(data.requestId);
-    if (data.ok) {
-      entry.resolve(resolveBridgeData(entry, data));
-      return;
-    }
-    const error = new Error(data.error?.message || "NextClaw panel bridge request failed.");
-    error.code = data.error?.code;
-    error.details = data.error?.details;
-    entry.reject(error);
-  });
-
-  const existing = window.nextclaw && typeof window.nextclaw === "object" ? window.nextclaw : {};
-  Object.defineProperty(window, "nextclaw", {
-    configurable: true,
-    value: {
-      ...existing,
-      serviceActions: {
-        list: () => request("list", {}),
-        invoke: (actionId, input) => request("invoke", { actionId, input }),
-        requestGrant: (actionId) => request("requestGrant", { actionId }),
-        revokeGrant: (actionId) => request("revokeGrant", { actionId })
-      },
-      agent: {
-        send: (input) => request("agent.send", { request: input }),
-        generateObject: (input) => request("agent.generateObject", { input })
-      }
-    }
-  });
-  installInlineContentHeightReporter();
-  installScrollRestoration();
-})();
-`.trim();
-}
-//#endregion
-//#region src/utils/panel-app-client-injection.utils.ts
-const PANEL_APP_CLIENT_MARKER = "nextclaw:panel-app-client:init";
-const PANEL_APP_CLIENT_SDK_PATH = "/api/panel-app-client-sdk.js";
-function injectPanelAppClientScript(html, params) {
-	if (html.includes(PANEL_APP_CLIENT_MARKER)) return html;
-	const script = [`<script src="${PANEL_APP_CLIENT_SDK_PATH}" crossorigin="anonymous"><\/script>`, `<script>${getPanelAppClientInitScript(params)}<\/script>`].join("");
-	const headMatch = /<head(?:\s[^>]*)?>/i.exec(html);
-	if (headMatch?.index !== void 0) {
-		const insertAt = headMatch.index + headMatch[0].length;
-		return `${html.slice(0, insertAt)}${script}${html.slice(insertAt)}`;
-	}
-	return `${script}${html}`;
-}
-function getPanelAppClientInitScript(params) {
-	return `
-(() => {
-  const marker = "${PANEL_APP_CLIENT_MARKER}";
-  if (typeof window.NextClawClient !== "function") {
-    console.error("[NextClaw] Panel App client SDK failed to load.");
-    return;
-  }
-  if (typeof window.createNextClawAppClient !== "function") {
-    console.error("[NextClaw] Panel App client projection failed to load.");
-    return;
-  }
-  const existing = window.nextclaw && typeof window.nextclaw === "object" ? window.nextclaw : {};
-  const hostClient = new window.NextClawClient({
-    baseUrl: window.location.origin,
-    headers: {
-      "x-nextclaw-panel-bridge-session": ${JSON.stringify(params.runtimeToken)}
-    }
-  });
-  const client = window.createNextClawAppClient(hostClient);
-  Object.defineProperty(window, "nextclaw", {
-    configurable: true,
-    value: {
-      ...existing,
-      client
-    }
-  });
-  Object.defineProperty(window.nextclaw, "__clientInitMarker", {
-    configurable: true,
-    enumerable: false,
-    value: marker
-  });
-})();
-`.trim();
-}
-//#endregion
-//#region src/utils/panel-app-manifest.utils.ts
-const PANEL_APP_ID_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
-function parsePanelAppManifest(html) {
-	return {
-		...readHtmlTitle(html),
-		...readStandardIcon(html),
-		...readPanelAppMeta(html),
-		capabilities: readPanelAppCapabilities(html),
-		client: false,
-		serviceActions: readPanelAppServiceActions(html)
-	};
-}
-function parsePanelAppFolderManifest(raw) {
-	let parsed;
-	try {
-		parsed = JSON.parse(raw);
-	} catch (error) {
-		throw new Error(`panel-app.json is not valid JSON: ${error instanceof Error ? error.message : String(error)}`);
-	}
-	if (!isRecord$8(parsed)) throw new Error("panel-app.json must contain an object.");
-	const id = readOptionalString$8(parsed, "id");
-	if (id && !PANEL_APP_ID_PATTERN.test(id)) throw new Error("panel app id must be kebab-case.");
+//#region src/utils/panel-app-agent.utils.ts
+const PANEL_APP_AGENT_DEFAULT_TIMEOUT_MS = 6e4;
+const PANEL_APP_AGENT_MAX_TIMEOUT_MS = 12e4;
+const PANEL_APP_AGENT_MAX_PROMPT_CHARS = 2e4;
+const PANEL_APP_AGENT_MAX_CONTEXT_CHARS = 8e4;
+function normalizePanelAppGenerateObjectInput(input) {
+	const peerId = input.peerId.trim();
+	const prompt = input.prompt.trim();
+	if (!peerId || !prompt || !isRecord$9(input.schema)) throw new PanelAppError("PANEL_APP_AGENT_REQUEST_INVALID", "invalid generateObject request");
+	if (prompt.length > PANEL_APP_AGENT_MAX_PROMPT_CHARS) throw new PanelAppError("PANEL_APP_AGENT_REQUEST_INVALID", "generateObject prompt is too large");
+	if (stringifyJsonValue(input.context ?? null).length > PANEL_APP_AGENT_MAX_CONTEXT_CHARS) throw new PanelAppError("PANEL_APP_AGENT_REQUEST_INVALID", "generateObject context is too large");
 	return {
-		id,
-		title: readRequiredString$7(parsed, "title"),
-		description: readOptionalString$8(parsed, "description"),
-		icon: readOptionalString$8(parsed, "icon"),
-		entry: readRequiredString$7(parsed, "entry"),
-		capabilities: readStringArray$1(parsed.capabilities, "capabilities"),
-		client: readOptionalBoolean$2(parsed, "client"),
-		serviceActions: readStringArray$1(parsed.actions, "actions")
+		context: input.context,
+		peerId,
+		prompt,
+		schema: input.schema,
+		timeoutMs: normalizeTimeoutMs(input.timeoutMs),
+		title: input.title?.trim() || void 0
 	};
 }
-function readPanelAppMeta(html) {
+function createPanelAppGenerateObjectMessage(params) {
+	const { bridgeSession, request, requestId } = params;
 	return {
-		...readPanelAppMetaField(html, "title"),
-		...readPanelAppMetaField(html, "description"),
-		...readPanelAppMetaField(html, "icon")
+		id: `panel-app-agent-message-${randomUUID()}`,
+		metadata: {
+			...createPanelAppAgentMetadata(bridgeSession),
+			panel_app_peer_id: request.peerId,
+			structured_result: {
+				request_id: requestId,
+				schema: structuredClone(request.schema),
+				tool_name: STRUCTURED_RESULT_TOOL_NAME
+			}
+		},
+		parts: [{
+			type: "text",
+			text: buildGenerateObjectPrompt(bridgeSession, request)
+		}],
+		role: "user",
+		status: "final",
+		timestamp: (/* @__PURE__ */ new Date()).toISOString()
 	};
 }
-function readPanelAppMetaField(html, field) {
-	const content = readMetaContent(html, `nextclaw-panel-${field}`, field === "icon" ? "attribute" : "text");
-	const manifest = {};
-	if (content) manifest[field] = content;
-	return manifest;
-}
-function readHtmlTitle(html) {
-	const title = normalizeTextValue(html.match(/<title[^>]*>([\s\S]*?)<\/title>/i)?.[1]);
-	return title ? { title } : {};
-}
-function readStandardIcon(html) {
-	const icon = readLinkHref(html, (relTokens) => relTokens.includes("icon"));
-	const appleTouchIcon = readLinkHref(html, (relTokens) => relTokens.some((token) => token === "apple-touch-icon" || token === "apple-touch-icon-precomposed"));
-	const href = normalizeIconHref(icon ?? appleTouchIcon);
-	return href ? { icon: href } : {};
-}
-function readMetaContent(html, name, valueKind) {
-	const metaTags = html.matchAll(/<meta\s+([^>]*?)>/gi);
-	for (const tag of metaTags) {
-		const attributes = tag[1] ?? "";
-		if (readHtmlAttribute(attributes, "name") === name) {
-			const content = readHtmlAttribute(attributes, "content");
-			return valueKind === "attribute" ? normalizeAttributeValue(content) : normalizeTextValue(content);
+async function waitForPanelAppStructuredResult(agentRunClient, params) {
+	const iterator = agentRunClient.sendAndStreamEvents(params.payload)[Symbol.asyncIterator]();
+	let timeoutId;
+	const timeout = new Promise((_, reject) => {
+		timeoutId = setTimeout(() => reject(new PanelAppError("AGENT_OBJECT_RESULT_TIMEOUT", "agent object result timed out")), params.timeoutMs);
+	});
+	let resultToolCallId = null;
+	try {
+		while (true) {
+			const next = await Promise.race([iterator.next(), timeout]);
+			if (next.done) break;
+			const result = readStructuredResultEvent(next.value, resultToolCallId);
+			if (result.matchedToolCallId) resultToolCallId = result.matchedToolCallId;
+			if (result.submitted) return result.content;
+			throwIfTerminalError(next.value);
 		}
+	} finally {
+		if (timeoutId) clearTimeout(timeoutId);
+		await iterator.return?.(void 0);
 	}
+	throw new PanelAppError("AGENT_OBJECT_RESULT_NOT_SUBMITTED", "agent did not submit a structured object result");
 }
-function readLinkHref(html, matchesRel) {
-	const linkTags = html.matchAll(/<link\s+([^>]*?)>/gi);
-	for (const tag of linkTags) {
-		const attributes = tag[1] ?? "";
-		if (matchesRel((readHtmlAttribute(attributes, "rel") ?? "").toLowerCase().split(/\s+/).filter(Boolean))) return normalizeAttributeValue(readHtmlAttribute(attributes, "href"));
-	}
-}
-function readHtmlAttribute(attributes, attribute) {
-	const match = attributes.match(new RegExp(`(?:^|\\s)${attribute}\\s*=\\s*(["'])(.*?)\\1`, "i"));
-	return match?.[2] ? decodeHtmlAttribute(match[2]) : void 0;
-}
-function readPanelAppServiceActions(html) {
-	return parseTokenList(readMetaContent(html, "nextclaw-panel-actions", "attribute"));
-}
-function readPanelAppCapabilities(html) {
-	return parseTokenList(readMetaContent(html, "nextclaw-panel-capabilities", "attribute"));
-}
-function parseTokenList(content) {
-	if (!content) return [];
-	return [...new Set(content.split(/[,\s]+/).map((entry) => entry.trim()).filter(Boolean))];
-}
-function readRequiredString$7(record, key) {
-	const value = readOptionalString$8(record, key);
-	if (!value) throw new Error(`panel app ${key} is required.`);
-	return value;
-}
-function readOptionalString$8(record, key) {
-	return typeof record[key] === "string" && record[key].trim() ? record[key].trim() : void 0;
-}
-function readOptionalBoolean$2(record, key) {
-	const value = record[key];
-	if (value === void 0) return false;
-	if (typeof value !== "boolean") throw new Error(`panel app ${key} must be a boolean.`);
-	return value;
-}
-function readStringArray$1(value, key) {
-	if (value === void 0) return [];
-	if (!Array.isArray(value) || value.some((entry) => typeof entry !== "string")) throw new Error(`panel app ${key} must be a string array.`);
-	return [...new Set(value.map((entry) => entry.trim()).filter(Boolean))];
-}
-function isRecord$8(value) {
-	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
-}
-function normalizeTextValue(value) {
-	return decodeHtmlAttribute(value ?? "").replace(/\s+/g, " ").trim() || void 0;
-}
-function normalizeAttributeValue(value) {
-	return decodeHtmlAttribute(value ?? "").trim() || void 0;
-}
-function normalizeIconHref(value) {
-	if (!value) return;
-	if (value.startsWith("data:image/") || value.startsWith("http://") || value.startsWith("https://") || value.startsWith("/")) return value;
-}
-function decodeHtmlAttribute(value) {
-	return value.replace(/&quot;/g, "\"").replace(/&#34;/g, "\"").replace(/&apos;/g, "'").replace(/&#39;/g, "'").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
-}
-const PANEL_APP_FOLDER_MANIFEST_FILE_NAME = "panel-app.json";
-function isPanelAppSourceEntry(entry) {
-	return entry.isFile() && isPanelAppFileName(entry.name) || entry.isDirectory() && isPanelAppDirName(entry.name);
+function withPanelAppAgentMetadata(payload, bridgeSession) {
+	const panelAppMetadata = createPanelAppAgentMetadata(bridgeSession);
+	const peerId = readOptionalPeerId(payload.peerId);
+	const sessionId = readOptionalSessionId(payload.sessionId);
+	if (peerId && sessionId) throw new PanelAppError("PANEL_APP_AGENT_REQUEST_INVALID", "agent send request cannot include both sessionId and peerId");
+	const metadata = {
+		...payload.metadata ?? {},
+		...panelAppMetadata
+	};
+	if (peerId) metadata.panel_app_peer_id = peerId;
+	if (Array.isArray(payload.content)) return {
+		content: structuredClone(payload.content),
+		metadata,
+		peerId,
+		sessionId
+	};
+	if (!payload.message) throw new PanelAppError("PANEL_APP_AGENT_REQUEST_INVALID", "agent send request is required");
+	return {
+		message: {
+			...structuredClone(payload.message),
+			metadata: {
+				...payload.message.metadata ?? {},
+				...panelAppMetadata
+			}
+		},
+		metadata,
+		peerId,
+		sessionId
+	};
 }
-function isPanelAppFileName(fileName) {
-	return hasSafeBaseName(fileName) && fileName.endsWith(".panel.html");
+function createPanelAppAgentMetadata(bridgeSession) {
+	return {
+		agent_peer_scope: `panel-app:${bridgeSession.appId}`,
+		panel_app_bridge_request_id: randomUUID(),
+		panel_app_id: bridgeSession.appId,
+		source_kind: "panel_app"
+	};
 }
-function isPanelAppDirName(dirName) {
-	return hasSafeBaseName(dirName) && dirName.endsWith(".panel");
+function normalizeTimeoutMs(timeoutMs) {
+	if (!Number.isFinite(timeoutMs) || typeof timeoutMs !== "number") return PANEL_APP_AGENT_DEFAULT_TIMEOUT_MS;
+	return Math.min(PANEL_APP_AGENT_MAX_TIMEOUT_MS, Math.max(1e3, Math.trunc(timeoutMs)));
 }
-function toPanelAppTitle(sourceName) {
-	return sourceName.replace(new RegExp(`${escapeRegExp(".panel.html")}$`), "").replace(new RegExp(`${escapeRegExp(".panel")}$`), "").replace(/[-_]+/g, " ").trim() || sourceName;
+function readOptionalPeerId(value) {
+	if (typeof value !== "string") return;
+	const peerId = value.trim();
+	if (!peerId) throw new PanelAppError("PANEL_APP_AGENT_REQUEST_INVALID", "agent peerId cannot be empty");
+	return peerId;
 }
-function encodePanelAppId(sourceName) {
-	return Buffer.from(sourceName, "utf8").toString("base64url");
+function readOptionalSessionId(value) {
+	if (typeof value !== "string") return;
+	const sessionId = value.trim();
+	if (!sessionId) throw new PanelAppError("PANEL_APP_AGENT_REQUEST_INVALID", "agent sessionId cannot be empty");
+	return sessionId;
 }
-function decodePanelAppId(id) {
-	const normalizedId = id.trim();
-	if (!normalizedId) throw new PanelAppError("PANEL_APP_INVALID_ID", "panel app id is required");
-	let sourceName = "";
-	try {
-		sourceName = Buffer.from(normalizedId, "base64url").toString("utf8");
-	} catch {
-		throw new PanelAppError("PANEL_APP_INVALID_ID", "invalid panel app id");
-	}
-	if (encodePanelAppId(sourceName) !== normalizedId || !isPanelAppFileName(sourceName) && !isPanelAppDirName(sourceName)) throw new PanelAppError("PANEL_APP_INVALID_ID", "invalid panel app id");
-	return sourceName;
+function buildGenerateObjectPrompt(bridgeSession, request) {
+	return [
+		"Panel App generateObject request",
+		"",
+		`Panel App ID: ${bridgeSession.appId}`,
+		`Peer ID: ${request.peerId}`,
+		"",
+		"Context JSON:",
+		stringifyJsonValue(request.context ?? null),
+		"",
+		"Task:",
+		request.prompt,
+		"",
+		"Result contract:",
+		`Call the ${STRUCTURED_RESULT_TOOL_NAME} tool exactly once with an object matching the provided schema.`,
+		"Do not use natural language as the result."
+	].join("\n");
 }
-async function readPanelAppFolderManifest(dirPath, dirName) {
-	const manifest = parsePanelAppFolderManifest(await readFile(join(dirPath, PANEL_APP_FOLDER_MANIFEST_FILE_NAME), "utf8"));
-	const expectedId = dirName.slice(0, -6);
-	if (manifest.id && manifest.id !== expectedId) throw new PanelAppError("PANEL_APP_MANIFEST_INVALID", "panel app manifest id must match the directory name");
+function readStructuredResultEvent(event, resultToolCallId) {
+	if (event.type === NcpEventType.MessageToolCallStart && event.payload.toolName === "nextclaw_submit_result") return {
+		matchedToolCallId: event.payload.toolCallId,
+		submitted: false
+	};
+	if (event.type !== NcpEventType.MessageToolCallResult || event.payload.toolCallId !== resultToolCallId) return { submitted: false };
+	assertToolResultContent(event.payload.content);
 	return {
-		...manifest,
-		id: expectedId
+		content: event.payload.content,
+		submitted: true
 	};
 }
-function resolvePanelAppRelativePath(rootPath, relativePath) {
-	if (!relativePath.trim() || relativePath.includes("\0") || isAbsolute(relativePath)) throw new PanelAppError("PANEL_APP_INVALID_ASSET_PATH", "invalid panel app asset path");
-	const normalizedPath = normalize(relativePath);
-	if (normalizedPath === "." || normalizedPath.startsWith("..")) throw new PanelAppError("PANEL_APP_INVALID_ASSET_PATH", "invalid panel app asset path");
-	const resolvedPath = resolve(rootPath, normalizedPath);
-	const pathFromRoot = relative(resolve(rootPath), resolvedPath);
-	if (pathFromRoot.startsWith("..") || isAbsolute(pathFromRoot)) throw new PanelAppError("PANEL_APP_INVALID_ASSET_PATH", "invalid panel app asset path");
-	return resolvedPath;
+function assertToolResultContent(content) {
+	if (!isRecord$9(content) || content.ok !== false || !isRecord$9(content.error)) return;
+	if (content.error.code === "invalid_tool_arguments") throw new PanelAppError("AGENT_OBJECT_RESULT_SCHEMA_INVALID", "agent object result did not match the schema");
+	throw new PanelAppError("AGENT_OBJECT_REQUEST_FAILED", typeof content.error.message === "string" ? content.error.message : "agent object request failed");
 }
-function resolvePanelAppAssetContentType(path) {
-	switch (extname(path).toLowerCase()) {
-		case ".css": return "text/css; charset=utf-8";
-		case ".js":
-		case ".mjs": return "application/javascript; charset=utf-8";
-		case ".json": return "application/json; charset=utf-8";
-		case ".png": return "image/png";
-		case ".svg": return "image/svg+xml; charset=utf-8";
-		case ".webp": return "image/webp";
-		case ".txt": return "text/plain; charset=utf-8";
-		default: return "application/octet-stream";
+function throwIfTerminalError(event) {
+	if (event.type === NcpEventType.MessageFailed) throw new PanelAppError("AGENT_OBJECT_REQUEST_FAILED", event.payload.error.message);
+	if (event.type === NcpEventType.RunError) throw new PanelAppError("AGENT_OBJECT_REQUEST_FAILED", event.payload.error ?? "agent object request failed");
+	if (event.type === NcpEventType.RunFinished) throw new PanelAppError("AGENT_OBJECT_RESULT_NOT_SUBMITTED", "agent did not submit a structured object result");
+}
+function stringifyJsonValue(value) {
+	try {
+		return JSON.stringify(value, null, 2);
+	} catch {
+		throw new PanelAppError("PANEL_APP_AGENT_REQUEST_INVALID", "value is not JSON serializable");
 	}
 }
-function resolvePanelAppIconUrl(id, icon) {
-	if (!icon) return;
-	if (icon.startsWith("data:image/") || icon.startsWith("http://") || icon.startsWith("https://") || icon.startsWith("/") || isLikelyTextIcon(icon)) return icon;
-	return `/api/panel-apps/${encodeURIComponent(id)}/assets/${encodePanelAppAssetPath(icon)}`;
+function isRecord$9(value) {
+	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
-function injectPanelAppAssetBase(html, baseHref) {
-	const base = `<base href="${baseHref}">`;
-	return injectLocalScriptCrossOrigin((() => {
-		if (/<base\b/i.test(html)) return html;
-		if (/<head[^>]*>/i.test(html)) return html.replace(/<head[^>]*>/i, (head) => `${head}${base}`);
-		return `${base}${html}`;
-	})());
+//#endregion
+//#region src/services/panel-app-agent-bridge.service.ts
+var PanelAppAgentBridgeService = class {
+	constructor(params) {
+		this.params = params;
+	}
+	sendAgentMessage = async (bridgeSession, payload) => {
+		await this.assertAgentCapabilityGranted(bridgeSession, "agent:send");
+		return await this.requireAgentRunClient().send(withPanelAppAgentMetadata(payload, bridgeSession));
+	};
+	generateAgentObject = async (bridgeSession, input) => {
+		await this.assertAgentCapabilityGranted(bridgeSession, "agent:generateObject");
+		const request = normalizePanelAppGenerateObjectInput(input);
+		const message = createPanelAppGenerateObjectMessage({
+			bridgeSession,
+			request,
+			requestId: randomUUID()
+		});
+		return { result: await waitForPanelAppStructuredResult(this.requireAgentRunClient(), {
+			payload: {
+				message,
+				metadata: {
+					...createPanelAppAgentMetadata(bridgeSession),
+					panel_app_peer_id: request.peerId
+				},
+				peerId: request.peerId
+			},
+			timeoutMs: request.timeoutMs
+		}) };
+	};
+	grantAgentCapability = async (bridgeSession, capability) => {
+		if (!isPanelAppAgentCapability(capability)) throw new PanelAppError("PANEL_APP_AGENT_REQUEST_INVALID", "unknown panel app agent capability");
+		this.assertDeclaredCapability(bridgeSession, capability);
+		return await this.params.createCapabilityGrantStore().grant({
+			caller: bridgeSession.caller,
+			capability,
+			grantedAt: (/* @__PURE__ */ new Date()).toISOString()
+		});
+	};
+	assertAgentCapabilityGranted = async (bridgeSession, capability) => {
+		this.assertDeclaredCapability(bridgeSession, capability);
+		if (!await this.params.createCapabilityGrantStore().isGranted(bridgeSession.caller, capability)) throw new PanelAppError("AUTHORIZATION_REQUIRED", `This panel app needs permission to use ${capability}.`);
+	};
+	assertDeclaredCapability = (bridgeSession, capability) => {
+		if (!bridgeSession.declaredCapabilities.includes(capability)) throw new PanelAppError("PANEL_APP_CAPABILITY_NOT_DECLARED", this.describeMissingAgentCapability(bridgeSession.declaredCapabilities, capability));
+	};
+	describeMissingAgentCapability = (declaredCapabilities, capability) => {
+		const declared = declaredCapabilities.length > 0 ? declaredCapabilities.join(", ") : "none";
+		const valid = PANEL_APP_AGENT_CAPABILITIES.join(", ");
+		const hint = declaredCapabilities.includes(capability.replace(":", ".")) ? ` Use ${capability}, not ${capability.replace(":", ".")}.` : "";
+		return [
+			`panel app did not declare ${capability}.`,
+			`Declared: ${declared}.`,
+			`Valid capabilities: ${valid}.`,
+			`Declare it with nextclaw-panel-capabilities or panel-app.json capabilities.`,
+			hint.trim()
+		].filter(Boolean).join(" ");
+	};
+	requireAgentRunClient = () => {
+		if (!this.params.agentRunClient) throw new PanelAppError("PANEL_APP_AGENT_REQUEST_INVALID", "panel app agent client is not configured");
+		return this.params.agentRunClient;
+	};
+};
+//#endregion
+//#region src/utils/ui-content-params-injection.utils.ts
+const UI_CONTENT_PARAMS_BOOTSTRAP_MARKER = "nextclaw:content-params:bootstrap";
+function getUiContentParamsBootstrapScript() {
+	return `
+/* ${UI_CONTENT_PARAMS_BOOTSTRAP_MARKER} */
+(() => {
+  const contract = ${JSON.stringify(UI_CONTENT_PARAMS_HOST_CONTRACT)};
+  const rawWindowName = typeof window.name === "string" ? window.name : "";
+  if (!rawWindowName.startsWith(contract.windowNamePrefix)) {
+    return;
+  }
+  window.name = "";
+  let params;
+  try {
+    params = JSON.parse(rawWindowName.slice(contract.windowNamePrefix.length));
+  } catch {
+    return;
+  }
+  if (!params || typeof params !== "object" || Array.isArray(params)) {
+    return;
+  }
+  const freezeJson = (value) => {
+    if (!value || typeof value !== "object" || Object.isFrozen(value)) {
+      return value;
+    }
+    Object.values(value).forEach(freezeJson);
+    return Object.freeze(value);
+  };
+  const existing = window.nextclaw && typeof window.nextclaw === "object"
+    ? window.nextclaw
+    : {};
+  Object.defineProperty(window, "nextclaw", {
+    configurable: true,
+    value: {
+      ...existing,
+      params: freezeJson(params)
+    }
+  });
+})();
+`.trim();
 }
-function injectLocalScriptCrossOrigin(html) {
-	return html.replace(/<script\b(?=[^>]*\bsrc\s*=)(?![^>]*\bcrossorigin\b)[^>]*>/gi, (tag) => {
-		const src = extractScriptSrc(tag);
-		if (!src || !isLocalScriptSrc(src)) return tag;
-		return `${tag.slice(0, -1)} crossorigin="anonymous">`;
-	});
+function injectUiContentParamsBootstrap(html) {
+	if (html.includes(UI_CONTENT_PARAMS_BOOTSTRAP_MARKER)) return html;
+	const script = `<script>${getUiContentParamsBootstrapScript()}<\/script>`;
+	const headMatch = /<head(?:\s[^>]*)?>/i.exec(html);
+	if (headMatch?.index !== void 0) {
+		const insertAt = headMatch.index + headMatch[0].length;
+		return `${html.slice(0, insertAt)}${script}${html.slice(insertAt)}`;
+	}
+	return `${script}${html}`;
 }
-function extractScriptSrc(tag) {
-	const match = /\bsrc\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s>]+))/i.exec(tag);
-	return match?.[1] ?? match?.[2] ?? match?.[3];
+//#endregion
+//#region src/utils/panel-app-bridge.utils.ts
+const PANEL_APP_BRIDGE_MARKER = "nextclaw:panel-app-service-actions:request";
+function getPanelAppInlineContentHeightReporterScript() {
+	return `
+  function installInlineContentHeightReporter() {
+    const inlineHostContract = ${JSON.stringify(PANEL_APP_INLINE_HOST_CONTRACT)};
+    const readInlineContentHeight = ${readInlineContentHeight.toString()};
+    if (!window.location || !window.document) {
+      return;
+    }
+    const searchParams = new URLSearchParams(window.location.search);
+    if (
+      searchParams.get(inlineHostContract.displayModeSearchParam) !== inlineHostContract.displayMode ||
+      searchParams.get(inlineHostContract.placementSearchParam) !== inlineHostContract.placement
+    ) {
+      return;
+    }
+    const start = () => {
+      const { body, documentElement } = window.document;
+      if (!documentElement) {
+        return;
+      }
+      let lastHeight = 0;
+      const reportHeight = () => {
+        const height = readInlineContentHeight(body, documentElement);
+        if (height > 0 && height !== lastHeight) {
+          lastHeight = height;
+          window.parent.postMessage({ type: inlineHostContract.contentHeightMessageType, height }, "*");
+        }
+      };
+      if (typeof window.ResizeObserver === "function") {
+        const observer = new window.ResizeObserver(reportHeight);
+        observer.observe(documentElement);
+        if (body) {
+          observer.observe(body);
+        }
+      }
+      window.addEventListener("load", reportHeight);
+      reportHeight();
+    };
+    if (window.document.readyState === "loading") {
+      window.document.addEventListener("DOMContentLoaded", start, { once: true });
+      return;
+    }
+    start();
+  }`.trim();
+}
+function getPanelAppScrollSurfaceHelpersScript() {
+	return `
+    function readScrollPosition(element) {
+      const x = element ? element.scrollLeft : window.scrollX;
+      const y = element ? element.scrollTop : window.scrollY;
+      if (!Number.isFinite(x) || !Number.isFinite(y) || x < 0 || y < 0) {
+        return null;
+      }
+      return { x, y };
+    }
+
+    function getScrollSurface(target) {
+      const root = window.document.scrollingElement;
+      if (
+        !target ||
+        target === window.document ||
+        target === root ||
+        target === window.document.documentElement ||
+        target === window.document.body
+      ) {
+        return { kind: "document" };
+      }
+      if (!target.parentElement || !target.children || typeof target.scrollTop !== "number") {
+        return null;
+      }
+      const path = [];
+      let element = target;
+      while (element && element !== window.document.body) {
+        const parent = element.parentElement;
+        if (!parent || !parent.children) {
+          return null;
+        }
+        const index = Array.prototype.indexOf.call(parent.children, element);
+        const tagName = typeof element.tagName === "string" ? element.tagName.toLowerCase() : "";
+        if (index < 0 || !tagName) {
+          return null;
+        }
+        path.unshift({ index, tagName });
+        element = parent;
+      }
+      return element === window.document.body && path.length > 0 ? { kind: "element", path } : null;
+    }
+
+    function resolveScrollSurface(target) {
+      if (target.kind === "document") {
+        return null;
+      }
+      let element = window.document.body;
+      for (const segment of target.path) {
+        const child = element?.children?.[segment.index];
+        if (!child || child.tagName?.toLowerCase() !== segment.tagName) {
+          return undefined;
+        }
+        element = child;
+      }
+      return element;
+    }
+
+    function isScrollTarget(value) {
+      if (!value || typeof value !== "object") {
+        return false;
+      }
+      if (value.kind === "document") {
+        return true;
+      }
+      return value.kind === "element" &&
+        Array.isArray(value.path) &&
+        value.path.length > 0 &&
+        value.path.length <= 30 &&
+        value.path.every((segment) =>
+          segment &&
+          Number.isInteger(segment.index) &&
+          segment.index >= 0 &&
+          segment.index <= 1000 &&
+          typeof segment.tagName === "string" &&
+          segment.tagName.length > 0 &&
+          segment.tagName.length <= 32
+        );
+    }`.trim();
 }
-function isLocalScriptSrc(src) {
-	const value = src.trim();
-	if (!value || value.startsWith("//")) return false;
-	return !/^(?:https?|data|blob|javascript):/i.test(value);
+function getPanelAppScrollRestorationScript() {
+	return `
+  function installScrollRestoration() {
+    const scrollContract = ${JSON.stringify(PANEL_APP_SCROLL_RESTORATION_CONTRACT)};
+    const inlineHostContract = ${JSON.stringify(PANEL_APP_INLINE_HOST_CONTRACT)};
+    const searchParams = new URLSearchParams(window.location.search);
+    if (
+      searchParams.get(inlineHostContract.displayModeSearchParam) === inlineHostContract.displayMode &&
+      searchParams.get(inlineHostContract.placementSearchParam) === inlineHostContract.placement
+    ) {
+      return;
+    }
+    let isScrollReportScheduled = false;
+    let latestScrollSurface = null;
+
+    ${getPanelAppScrollSurfaceHelpersScript()}
+
+    function reportScroll() {
+      isScrollReportScheduled = false;
+      const surface = latestScrollSurface;
+      latestScrollSurface = null;
+      if (!surface) {
+        return;
+      }
+      const position = readScrollPosition(resolveScrollSurface(surface));
+      if (!position) {
+        return;
+      }
+      window.parent.postMessage({
+        type: scrollContract.scrollMessageType,
+        version: scrollContract.version,
+        target: surface,
+        ...position,
+      }, "*");
+    }
+
+    function scheduleScrollReport(event) {
+      const surface = getScrollSurface(event?.target);
+      if (!surface) {
+        return;
+      }
+      latestScrollSurface = surface;
+      if (isScrollReportScheduled) {
+        return;
+      }
+      isScrollReportScheduled = true;
+      if (typeof window.requestAnimationFrame === "function") {
+        window.requestAnimationFrame(reportScroll);
+        return;
+      }
+      reportScroll();
+    }
+
+    function applyScrollPosition(target, x, y) {
+      const element = resolveScrollSurface(target);
+      if (element === undefined) {
+        return false;
+      }
+      if (element && typeof element.scrollTo === "function") {
+        element.scrollTo(x, y);
+      } else if (element) {
+        element.scrollLeft = x;
+        element.scrollTop = y;
+      } else {
+        window.scrollTo(x, y);
+      }
+      const position = readScrollPosition(element);
+      return position && Math.abs(position.x - x) <= 1 && Math.abs(position.y - y) <= 1;
+    }
+
+    function restoreScroll(target, x, y) {
+      if (applyScrollPosition(target, x, y)) {
+        return;
+      }
+      let resizeObserver;
+      let mutationObserver;
+      let timeoutId;
+      const stop = () => {
+        resizeObserver?.disconnect();
+        mutationObserver?.disconnect();
+        if (timeoutId !== undefined && typeof window.clearTimeout === "function") {
+          window.clearTimeout(timeoutId);
+        }
+      };
+      const retry = () => {
+        if (applyScrollPosition(target, x, y)) {
+          stop();
+        }
+      };
+      if (typeof window.ResizeObserver === "function") {
+        resizeObserver = new window.ResizeObserver(retry);
+        resizeObserver.observe(window.document.documentElement);
+        if (window.document.body) {
+          resizeObserver.observe(window.document.body);
+        }
+      }
+      if (typeof window.MutationObserver === "function" && window.document.body) {
+        mutationObserver = new window.MutationObserver(retry);
+        mutationObserver.observe(window.document.body, { childList: true, subtree: true });
+      }
+      if (typeof window.setTimeout === "function") {
+        timeoutId = window.setTimeout(stop, 10000);
+      }
+    }
+
+    if (typeof window.document.addEventListener === "function") {
+      window.document.addEventListener("scroll", scheduleScrollReport, true);
+    }
+    window.addEventListener("message", (event) => {
+      const data = event.data;
+      if (
+        event.source !== window.parent ||
+        !data ||
+        data.type !== scrollContract.restoreScrollMessageType ||
+        data.version !== scrollContract.version ||
+        !isScrollTarget(data.target) ||
+        !Number.isFinite(data.x) ||
+        !Number.isFinite(data.y) ||
+        data.x < 0 ||
+        data.y < 0
+      ) {
+        return;
+      }
+      restoreScroll(data.target, data.x, data.y);
+    });
+  }`.trim();
 }
-function encodePanelAppAssetPath(path) {
-	return path.split("/").filter(Boolean).map((segment) => encodeURIComponent(segment)).join("/");
+function injectPanelAppBridgeScript(html, params) {
+	if (html.includes(PANEL_APP_BRIDGE_MARKER)) return html;
+	const script = `<script>${getPanelAppBridgeScript(params)}<\/script>`;
+	const headMatch = /<head(?:\s[^>]*)?>/i.exec(html);
+	if (headMatch?.index !== void 0) {
+		const insertAt = headMatch.index + headMatch[0].length;
+		return `${html.slice(0, insertAt)}${script}${html.slice(insertAt)}`;
+	}
+	return `${script}${html}`;
 }
-function hasSafeBaseName(name) {
-	return !name.includes("/") && !name.includes("\\") && !name.includes("\0");
+function getPanelAppBridgeScript(params = {
+	appId: "",
+	runtimeToken: ""
+}) {
+	const appId = JSON.stringify(params.appId);
+	const runtimeToken = JSON.stringify(params.runtimeToken);
+	return `
+${getUiContentParamsBootstrapScript()}
+(() => {
+  const requestType = "nextclaw:panel-app-service-actions:request";
+  const responseType = "nextclaw:panel-app-service-actions:response";
+  const appId = ${appId};
+  const runtimeToken = ${runtimeToken};
+  const pending = new Map();
+  let counter = 0;
+
+  function createRequestId() {
+    counter += 1;
+    return "panel-bridge-" + Date.now().toString(36) + "-" + counter.toString(36);
+  }
+
+  function request(method, payload) {
+    const requestId = createRequestId();
+    return new Promise((resolve, reject) => {
+      pending.set(requestId, { method, resolve, reject });
+      window.parent.postMessage({ type: requestType, requestId, appId, runtimeToken, method, payload }, "*");
+    });
+  }
+
+  ${getPanelAppInlineContentHeightReporterScript()}
+  ${getPanelAppScrollRestorationScript()}
+
+  function resolveApiFetchUrl(input) {
+    const raw = typeof input === "string" || input instanceof URL ? input.toString() : input?.url;
+    if (typeof raw !== "string") {
+      return null;
+    }
+    try {
+      const url = new URL(raw, window.location.href);
+      return url.origin === window.location.origin && url.pathname.startsWith("/api/") ? url : null;
+    } catch {
+      return null;
+    }
+  }
+
+  function createFetchInitWithRuntimeToken(input, init) {
+    if (!resolveApiFetchUrl(input)) {
+      return init;
+    }
+    const headers = new Headers(init?.headers || (typeof input === "object" && input ? input.headers : undefined));
+    if (!headers.has("x-nextclaw-panel-bridge-session")) {
+      headers.set("x-nextclaw-panel-bridge-session", runtimeToken);
+    }
+    return { ...init, headers };
+  }
+
+  const nativeFetch = window.fetch?.bind(window);
+  if (nativeFetch) {
+    window.fetch = (input, init) => nativeFetch(input, createFetchInitWithRuntimeToken(input, init));
+  }
+
+  function unwrapServiceActionResult(result) {
+    if (!result || typeof result !== "object") {
+      return result;
+    }
+    if (Object.prototype.hasOwnProperty.call(result, "structuredContent") && result.structuredContent !== undefined) {
+      return result.structuredContent;
+    }
+    const content = Array.isArray(result.content) ? result.content : undefined;
+    if (content && content.length === 1 && content[0]?.type === "text" && typeof content[0].text === "string") {
+      try {
+        return JSON.parse(content[0].text);
+      } catch {
+        return content[0].text;
+      }
+    }
+    return result;
+  }
+
+  function resolveBridgeData(entry, data) {
+    if (entry.method === "list") {
+      return Array.isArray(data.data?.actions) ? data.data.actions : [];
+    }
+    if (entry.method === "invoke") {
+      return unwrapServiceActionResult(data.data?.result);
+    }
+    if (entry.method === "agent.generateObject") {
+      return data.data?.result;
+    }
+    return data.data;
+  }
+
+  window.addEventListener("message", (event) => {
+    const data = event.data;
+    if (!data || data.type !== responseType || typeof data.requestId !== "string") {
+      return;
+    }
+    const entry = pending.get(data.requestId);
+    if (!entry) {
+      return;
+    }
+    pending.delete(data.requestId);
+    if (data.ok) {
+      entry.resolve(resolveBridgeData(entry, data));
+      return;
+    }
+    const error = new Error(data.error?.message || "NextClaw panel bridge request failed.");
+    error.code = data.error?.code;
+    error.details = data.error?.details;
+    entry.reject(error);
+  });
+
+  const existing = window.nextclaw && typeof window.nextclaw === "object" ? window.nextclaw : {};
+  Object.defineProperty(window, "nextclaw", {
+    configurable: true,
+    value: {
+      ...existing,
+      serviceActions: {
+        list: () => request("list", {}),
+        invoke: (actionId, input) => request("invoke", { actionId, input }),
+        requestGrant: (actionId) => request("requestGrant", { actionId }),
+        revokeGrant: (actionId) => request("revokeGrant", { actionId })
+      },
+      agent: {
+        send: (input) => request("agent.send", { request: input }),
+        generateObject: (input) => request("agent.generateObject", { input })
+      }
+    }
+  });
+  installInlineContentHeightReporter();
+  installScrollRestoration();
+})();
+`.trim();
 }
-function isLikelyTextIcon(icon) {
-	return !icon.includes("/") && !icon.includes(".") && icon.length <= 4;
+//#endregion
+//#region src/utils/panel-app-client-injection.utils.ts
+const PANEL_APP_CLIENT_MARKER = "nextclaw:panel-app-client:init";
+const PANEL_APP_CLIENT_SDK_PATH = "/api/panel-app-client-sdk.js";
+function injectPanelAppClientScript(html, params) {
+	if (html.includes(PANEL_APP_CLIENT_MARKER)) return html;
+	const script = [`<script src="${PANEL_APP_CLIENT_SDK_PATH}" crossorigin="anonymous"><\/script>`, `<script>${getPanelAppClientInitScript(params)}<\/script>`].join("");
+	const headMatch = /<head(?:\s[^>]*)?>/i.exec(html);
+	if (headMatch?.index !== void 0) {
+		const insertAt = headMatch.index + headMatch[0].length;
+		return `${html.slice(0, insertAt)}${script}${html.slice(insertAt)}`;
+	}
+	return `${script}${html}`;
 }
-function escapeRegExp(value) {
-	return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+function getPanelAppClientInitScript(params) {
+	return `
+(() => {
+  const marker = "${PANEL_APP_CLIENT_MARKER}";
+  if (typeof window.NextClawClient !== "function") {
+    console.error("[NextClaw] Panel App client SDK failed to load.");
+    return;
+  }
+  if (typeof window.createNextClawAppClient !== "function") {
+    console.error("[NextClaw] Panel App client projection failed to load.");
+    return;
+  }
+  const existing = window.nextclaw && typeof window.nextclaw === "object" ? window.nextclaw : {};
+  const hostClient = new window.NextClawClient({
+    baseUrl: window.location.origin,
+    headers: {
+      "x-nextclaw-panel-bridge-session": ${JSON.stringify(params.runtimeToken)}
+    }
+  });
+  const client = window.createNextClawAppClient(hostClient);
+  Object.defineProperty(window, "nextclaw", {
+    configurable: true,
+    value: {
+      ...existing,
+      client
+    }
+  });
+  Object.defineProperty(window.nextclaw, "__clientInitMarker", {
+    configurable: true,
+    enumerable: false,
+    value: marker
+  });
+})();
+`.trim();
 }
 //#endregion
 //#region src/services/panel-app-source.service.ts
@@ -8016,84 +8789,6 @@ function isMissingFileError$1(error) {
 	return typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
 }
 //#endregion
-//#region src/utils/panel-app-time.utils.ts
-function resolvePanelAppCreatedAt(fileStat) {
-	return fileStat.birthtimeMs > 0 ? fileStat.birthtime.toISOString() : fileStat.mtime.toISOString();
-}
-function resolvePanelAppActivityMs(entry) {
-	return Math.max(new Date(entry.lastOpenedAt ?? 0).getTime(), new Date(entry.createdAt).getTime(), new Date(entry.updatedAt).getTime());
-}
-//#endregion
-//#region src/utils/panel-app-content-source.utils.ts
-async function readPanelAppContentSource(params) {
-	const { createAssetBaseHref, id, panelsPath, sourceService } = params;
-	return await readResolvedPanelAppContentSource(await sourceService.resolveSource(panelsPath, id), createAssetBaseHref);
-}
-async function readPanelAppContentSourceByPath(params) {
-	const { createAssetBaseHref, path, sourceService } = params;
-	return await readResolvedPanelAppContentSource(await sourceService.resolveSourcePath(path), createAssetBaseHref);
-}
-async function readPanelAppContentSourceByIdOrPath(params) {
-	const { sourcePath, ...standardSourceParams } = params;
-	return sourcePath ? await readPanelAppContentSourceByPath({
-		createAssetBaseHref: params.createAssetBaseHref,
-		path: sourcePath,
-		sourceService: params.sourceService
-	}) : await readPanelAppContentSource(standardSourceParams);
-}
-async function readResolvedPanelAppContentSource(source, createAssetBaseHref) {
-	const html = await readFile(source.entryPath, "utf8");
-	const manifest = source.manifest ?? parsePanelAppManifest(html);
-	const sourceId = encodePanelAppId(source.sourceName);
-	return {
-		appId: resolvePanelAppAppId(source, manifest),
-		sourceId,
-		source,
-		manifest,
-		html,
-		htmlWithBase: source.kind === "folder" ? injectPanelAppAssetBase(html, createAssetBaseHref(source)) : html
-	};
-}
-async function readPanelAppContentSourceByIdOrAppId(params) {
-	const { appIdOrSourceId, createAssetBaseHref, panelsPath, sourceService } = params;
-	try {
-		return await readPanelAppContentSource({
-			createAssetBaseHref,
-			id: appIdOrSourceId,
-			panelsPath,
-			sourceService
-		});
-	} catch (error) {
-		if (!isPanelAppError(error)) throw error;
-		if (error.code !== "PANEL_APP_INVALID_ID" && error.code !== "PANEL_APP_NOT_FOUND") throw error;
-	}
-	const sources = await sourceService.listSources(panelsPath);
-	for (const source of sources) {
-		const html = await readFile(source.entryPath, "utf8");
-		if (resolvePanelAppAppId(source, source.manifest ?? parsePanelAppManifest(html)) === appIdOrSourceId) return await readPanelAppContentSource({
-			createAssetBaseHref,
-			id: encodePanelAppId(source.sourceName),
-			panelsPath,
-			sourceService
-		});
-	}
-	throw new PanelAppError("PANEL_APP_NOT_FOUND", "panel app not found");
-}
-function resolvePanelAppAppId(source, manifest) {
-	return manifest.id ?? encodePanelAppId(source.sourceName);
-}
-async function assertPanelAppDeclaresClient(params) {
-	const { appId, panelsPath, sourceService } = params;
-	const sources = await sourceService.listSources(panelsPath);
-	for (const source of sources) {
-		const manifest = source.manifest ?? parsePanelAppManifest(await readFile(source.entryPath, "utf8"));
-		if (resolvePanelAppAppId(source, manifest) !== appId) continue;
-		if (!manifest.client) throw new PanelAppError("PANEL_APP_CLIENT_NOT_DECLARED", "panel app did not declare client access");
-		return;
-	}
-	throw new PanelAppError("PANEL_APP_NOT_FOUND", "panel app not found");
-}
-//#endregion
 //#region src/managers/panel-app.manager.ts
 const PANEL_APP_CONTENT_BASE_PATH = "/api/panel-apps";
 const PANEL_APP_TOKENIZED_ASSET_BASE_PATH = "/api/panel-app-assets";
@@ -8107,6 +8802,8 @@ var PanelAppManager = class {
 	agentBridgeService;
 	assetTokenService = new PanelAppAssetTokenService();
 	sourceService = new PanelAppSourceService();
+	packageStateManager;
+	entryPresenter;
 	constructor(params) {
 		this.params = params;
 		this.agentRunClient = params.agentRunClient ?? (params.eventBus && params.ingress ? new AgentRunClient({
@@ -8117,16 +8814,31 @@ var PanelAppManager = class {
 			agentRunClient: this.agentRunClient,
 			createCapabilityGrantStore: this.createCapabilityGrantStore
 		});
+		this.packageStateManager = new PanelAppPackageStateManager({
+			sourceService: this.sourceService,
+			getPanelsPath: () => this.getPanelsPath(this.getWorkspacePath()),
+			listPackageComponentSources: params.listPackageComponentSources,
+			createAssetBaseHref: this.createAssetBaseHref,
+			deleteBridgeSessions: this.deleteBridgeSessionsByPanelAppId,
+			createStateStore: this.createStateStore,
+			createCapabilityGrantStore: this.createCapabilityGrantStore,
+			createClientGrantStore: this.createClientGrantStore
+		});
+		this.entryPresenter = new PanelAppEntryPresenter({
+			contentBasePath: PANEL_APP_CONTENT_BASE_PATH,
+			createAssetBaseHref: this.createAssetBaseHref,
+			isClientGranted: this.isPanelAppClientGranted
+		});
 	}
 	listPanelApps = async () => {
 		const workspacePath = this.getWorkspacePath();
 		const panelsPath = this.getPanelsPath(workspacePath);
-		const sources = await this.sourceService.listSources(panelsPath);
+		const sources = await this.packageStateManager.listSources();
 		const appState = await this.createStateStore(panelsPath).load();
 		return {
 			workspacePath,
 			panelsPath,
-			entries: (await Promise.all(sources.map((source) => this.buildPanelAppEntry(source, appState[encodePanelAppId(source.sourceName)] ?? {})))).sort(this.comparePanelApps)
+			entries: (await Promise.all(sources.map(({ source, packageSource }) => this.entryPresenter.build(source, appState[encodePanelAppId(source.sourceName)] ?? {}, packageSource)))).sort(this.entryPresenter.compare)
 		};
 	};
 	getPanelAppContent = async (id, sourcePath) => {
@@ -8201,12 +8913,7 @@ var PanelAppManager = class {
 		return session;
 	};
 	createPanelAppBridgeSession = async (params) => {
-		const resolved = await readPanelAppContentSourceByIdOrAppId({
-			appIdOrSourceId: params.id,
-			createAssetBaseHref: this.createAssetBaseHref,
-			panelsPath: this.getPanelsPath(this.getWorkspacePath()),
-			sourceService: this.sourceService
-		});
+		const resolved = await this.packageStateManager.readContentSourceByIdOrAppId(params.id);
 		return this.createPanelAppRuntimeTokenSession({
 			appId: resolved.appId,
 			clientDeclared: resolved.manifest.client,
@@ -8215,11 +8922,7 @@ var PanelAppManager = class {
 		});
 	};
 	grantPanelAppClient = async (appId) => {
-		await assertPanelAppDeclaresClient({
-			appId,
-			panelsPath: this.getPanelsPath(this.getWorkspacePath()),
-			sourceService: this.sourceService
-		});
+		await this.packageStateManager.assertDeclaresClient(appId);
 		return await this.createClientGrantStore().grant({
 			appId,
 			grantedAt: (/* @__PURE__ */ new Date()).toISOString()
@@ -8253,17 +8956,19 @@ var PanelAppManager = class {
 		const fileName = await this.resolvePanelAppFileName(id);
 		const panelsPath = this.getPanelsPath(this.getWorkspacePath());
 		const state = await this.createStateStore(panelsPath).updatePreferences(encodePanelAppId(fileName), preferences);
-		return await this.buildPanelAppEntry(await this.sourceService.resolveSource(panelsPath, encodePanelAppId(fileName)), state);
+		return await this.entryPresenter.build(await this.packageStateManager.resolveSource(encodePanelAppId(fileName)), state, await this.packageStateManager.findPackageSourceBySourceName(fileName));
 	};
 	recordPanelAppOpened = async (id) => {
 		const fileName = await this.resolvePanelAppFileName(id);
 		const panelsPath = this.getPanelsPath(this.getWorkspacePath());
 		const state = await this.createStateStore(panelsPath).recordOpened(encodePanelAppId(fileName));
-		return await this.buildPanelAppEntry(await this.sourceService.resolveSource(panelsPath, encodePanelAppId(fileName)), state);
+		return await this.entryPresenter.build(await this.packageStateManager.resolveSource(encodePanelAppId(fileName)), state, await this.packageStateManager.findPackageSourceBySourceName(fileName));
 	};
 	deletePanelApp = async (id) => {
 		const panelsPath = this.getPanelsPath(this.getWorkspacePath());
-		const source = await this.sourceService.resolveSource(panelsPath, id);
+		const source = await this.packageStateManager.resolveSource(id);
+		const packageSource = await this.packageStateManager.findPackageSourceBySourceName(source.sourceName);
+		if (packageSource) throw new PanelAppError("PANEL_APP_MANAGED_SOURCE", `package panel must be managed through Apps: ${packageSource.packageId}`);
 		const panelAppId = encodePanelAppId(source.sourceName);
 		const appId = resolvePanelAppAppId(source, source.manifest ?? parsePanelAppManifest(await readFile(source.entryPath, "utf8")));
 		await rm(source.sourcePath, { recursive: source.kind === "folder" });
@@ -8293,36 +8998,12 @@ var PanelAppManager = class {
 	createStateStore = (panelsPath) => new PanelAppStateStore(panelsPath);
 	createCapabilityGrantStore = () => new PanelAppCapabilityGrantStore(join(this.getPanelsPath(this.getWorkspacePath()), PANEL_APP_CAPABILITY_GRANTS_FILE_NAME));
 	createClientGrantStore = () => new PanelAppClientGrantStore(join(this.getPanelsPath(this.getWorkspacePath()), PANEL_APP_CLIENT_GRANTS_FILE_NAME));
-	buildPanelAppEntry = async (source, state) => {
-		const manifest = source.manifest ?? parsePanelAppManifest(await readFile(source.entryPath, "utf8"));
-		const id = encodePanelAppId(source.sourceName);
-		const appId = resolvePanelAppAppId(source, manifest);
-		const createdAt = resolvePanelAppCreatedAt(source.sourceStat);
-		const updatedAt = source.sourceStat.mtime.toISOString();
-		const entry = {
-			id,
-			appId,
-			fileName: source.sourceName,
-			kind: source.kind,
-			title: manifest.title ?? toPanelAppTitle(source.sourceName),
-			contentPath: `${PANEL_APP_CONTENT_BASE_PATH}/${encodeURIComponent(id)}/content`,
-			createdAt,
-			updatedAt,
-			sizeBytes: source.sourceStat.size,
-			favorite: state.favorite ?? false,
-			clientDeclared: manifest.client,
-			clientGranted: await this.isPanelAppClientGranted(appId, manifest.client),
-			openCount: state.openCount ?? 0
-		};
-		if (manifest.description) entry.description = manifest.description;
-		if (manifest.icon) entry.icon = source.kind === "folder" ? resolvePanelAppIconUrl(id, manifest.icon) : manifest.icon;
-		if (state.lastOpenedAt) entry.lastOpenedAt = state.lastOpenedAt;
-		return entry;
-	};
 	resolvePanelAppFileName = async (id) => {
-		return (await this.sourceService.resolveSource(this.getPanelsPath(this.getWorkspacePath()), id)).sourceName;
+		return (await this.packageStateManager.resolveSource(id)).sourceName;
 	};
-	comparePanelApps = (left, right) => resolvePanelAppActivityMs(right) - resolvePanelAppActivityMs(left) || Number(right.favorite) - Number(left.favorite) || left.title.localeCompare(right.title);
+	assertCanActivatePackageComponents = async (components) => await this.packageStateManager.assertCanActivate(components);
+	deactivatePackageComponents = (components) => this.packageStateManager.deactivate(components);
+	removePackageComponentState = async (components) => await this.packageStateManager.removeState(components);
 	deleteExpiredBridgeSessions = () => {
 		const now = Date.now();
 		for (const [token, session] of this.bridgeSessions) if (new Date(session.expiresAt).getTime() <= now) this.bridgeSessions.delete(token);
@@ -8778,7 +9459,7 @@ var McpServiceAppRuntimeService = class {
 				command: manifest.command,
 				args: manifest.args,
 				cwd: app.dirPath,
-				env: createRuntimeChildEnv(process.env),
+				env: createRuntimeChildEnv(process.env, this.createAppRuntimeEnv(app)),
 				stderr: "pipe"
 			},
 			scope: {
@@ -8791,6 +9472,15 @@ var McpServiceAppRuntimeService = class {
 			}
 		}
 	});
+	createAppRuntimeEnv = (app) => {
+		if (app.sourceKind !== "package" || !app.packageId || !app.packageVersion || !app.packageDirectory || !app.dataDirectory) return {};
+		return {
+			NEXTCLAW_APP_ID: app.packageId,
+			NEXTCLAW_APP_VERSION: app.packageVersion,
+			NEXTCLAW_APP_DATA_DIR: app.dataDirectory,
+			NEXTCLAW_APP_PACKAGE_DIR: app.packageDirectory
+		};
+	};
 	toServiceAction = (manifest, tool) => {
 		const actionId = buildServiceActionId(manifest.id, tool.toolName);
 		const manifestAction = manifest.actions[tool.toolName];
@@ -8885,12 +9575,12 @@ var ServiceActionGrantStore = class {
 	};
 };
 function normalizeStoreData(value) {
-	if (!isRecord$7(value) || value.version !== 1 || !isRecord$7(value.grants)) return structuredClone(EMPTY_GRANTS);
+	if (!isRecord$8(value) || value.version !== 1 || !isRecord$8(value.grants)) return structuredClone(EMPTY_GRANTS);
 	const grants = {};
 	for (const [callerKey, callerValue] of Object.entries(value.grants)) {
-		if (!isRecord$7(callerValue) || !isRecord$7(callerValue.actions)) continue;
+		if (!isRecord$8(callerValue) || !isRecord$8(callerValue.actions)) continue;
 		const actions = {};
-		for (const [actionId, actionValue] of Object.entries(callerValue.actions)) if (isRecord$7(actionValue) && typeof actionValue.grantedAt === "string" && isServiceActionRisk(actionValue.risk)) actions[actionId] = {
+		for (const [actionId, actionValue] of Object.entries(callerValue.actions)) if (isRecord$8(actionValue) && typeof actionValue.grantedAt === "string" && isServiceActionRisk(actionValue.risk)) actions[actionId] = {
 			grantedAt: actionValue.grantedAt,
 			risk: actionValue.risk
 		};
@@ -8904,11 +9594,11 @@ function normalizeStoreData(value) {
 function isServiceActionRisk(value) {
 	return value === "read" || value === "write" || value === "external" || value === "dangerous";
 }
-function isRecord$7(value) {
+function isRecord$8(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function isMissingFileError(error) {
-	return isRecord$7(error) && error.code === "ENOENT";
+	return isRecord$8(error) && error.code === "ENOENT";
 }
 //#endregion
 //#region src/utils/service-app-manifest.utils.ts
@@ -8933,7 +9623,7 @@ function parseServiceAppManifest(raw) {
 	} catch (error) {
 		throw new Error(`service-app.json is not valid JSON: ${error instanceof Error ? error.message : String(error)}`);
 	}
-	if (!isRecord$6(parsed)) throw new Error("service-app.json must contain an object.");
+	if (!isRecord$7(parsed)) throw new Error("service-app.json must contain an object.");
 	const id = readRequiredString$6(parsed, "id");
 	if (!SERVICE_APP_ID_PATTERN.test(id)) throw new Error("service app id must be kebab-case.");
 	const protocol = readOptionalString$7(parsed, "protocol") ?? "mcp";
@@ -8951,16 +9641,16 @@ function parseServiceAppManifest(raw) {
 }
 function readManifestActions(value) {
 	if (value === void 0) throw new Error("service app actions are required.");
-	if (!isRecord$6(value)) throw new Error("service app actions must be an object.");
+	if (!isRecord$7(value)) throw new Error("service app actions must be an object.");
 	if (Object.keys(value).length === 0) throw new Error("service app actions cannot be empty.");
 	const actions = {};
 	for (const [name, action] of Object.entries(value)) {
 		if (!name.trim()) throw new Error("service app action name cannot be empty.");
-		if (!isRecord$6(action)) throw new Error(`service app action ${name} must be an object.`);
+		if (!isRecord$7(action)) throw new Error(`service app action ${name} must be an object.`);
 		const risk = readOptionalString$7(action, "risk");
 		if (risk !== void 0 && !SERVICE_ACTION_RISKS.has(risk)) throw new Error(`service app action ${name} has invalid risk.`);
 		const inputSchema = action.inputSchema;
-		if (inputSchema !== void 0 && !isRecord$6(inputSchema)) throw new Error(`service app action ${name} inputSchema must be an object.`);
+		if (inputSchema !== void 0 && !isRecord$7(inputSchema)) throw new Error(`service app action ${name} inputSchema must be an object.`);
 		actions[name] = {
 			risk,
 			title: readOptionalString$7(action, "title"),
@@ -8988,7 +9678,7 @@ function readStringArray(value, key) {
 	if (!Array.isArray(value) || value.some((entry) => typeof entry !== "string")) throw new Error(`service app ${key} must be a string array.`);
 	return value;
 }
-function isRecord$6(value) {
+function isRecord$7(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 //#endregion
@@ -9046,10 +9736,13 @@ var ServiceAppManager = class {
 		const workspacePath = this.getWorkspacePath();
 		const serviceAppsPath = this.getServiceAppsPath(workspacePath);
 		const dirNames = await this.listServiceAppDirNames(serviceAppsPath);
+		const workspaceEntries = await Promise.all(dirNames.map((dirName) => this.buildServiceAppRecord(serviceAppsPath, dirName)));
+		const packageSources = (await this.listPackageComponentSources()).filter((component) => component.kind === "service");
+		const packageEntries = await Promise.all(packageSources.map((source) => this.buildServiceAppRecordFromPackage(source)));
 		return {
 			workspacePath,
 			serviceAppsPath,
-			entries: (await Promise.all(dirNames.map((dirName) => this.buildServiceAppRecord(serviceAppsPath, dirName)))).filter((entry) => Boolean(entry)).sort((left, right) => left.title.localeCompare(right.title))
+			entries: [...workspaceEntries, ...packageEntries].filter((entry) => Boolean(entry)).sort((left, right) => left.title.localeCompare(right.title))
 		};
 	};
 	getServiceApp = async (appId) => {
@@ -9127,6 +9820,7 @@ var ServiceAppManager = class {
 	};
 	deleteServiceApp = async (appId) => {
 		const { record } = await this.requireServiceApp(appId);
+		if (record.sourceKind === "package") throw new ServiceAppError("SERVICE_APP_MANAGED_SOURCE", `package service must be managed through Apps: ${record.packageId}`);
 		await this.runtimeService.restart(record.id);
 		await rm(record.dirPath, { recursive: true });
 		await this.createGrantStore().revokeActionsByPrefix(`${record.id}.`);
@@ -9138,6 +9832,31 @@ var ServiceAppManager = class {
 	dispose = async () => {
 		await this.runtimeService.dispose();
 	};
+	assertCanActivatePackageComponents = async (components) => {
+		const serviceComponents = components.filter((component) => component.kind === "service");
+		if (serviceComponents.length === 0) return;
+		const workspacePath = this.getServiceAppsPath(this.getWorkspacePath());
+		const workspaceIds = /* @__PURE__ */ new Set();
+		for (const dirName of await this.listServiceAppDirNames(workspacePath)) try {
+			workspaceIds.add((await readServiceAppManifest(join(workspacePath, dirName))).id);
+		} catch {
+			continue;
+		}
+		const activePackageSources = await this.listPackageComponentSources();
+		for (const component of serviceComponents) {
+			const conflictsWithPackage = activePackageSources.some((active) => active.kind === "service" && active.id === component.id && active.packageId !== component.packageId);
+			if (workspaceIds.has(component.id) || conflictsWithPackage) throw new AppPackageError("APP_PACKAGE_CONFLICT", `Service component id 冲突：${component.id}`);
+		}
+	};
+	deactivatePackageComponents = async (components) => {
+		const serviceIds = components.filter((component) => component.kind === "service").map((component) => component.id);
+		await Promise.all(serviceIds.map(async (serviceId) => await this.runtimeService.restart(serviceId)));
+	};
+	removePackageComponentGrants = async (components) => {
+		const serviceIds = components.filter((component) => component.kind === "service").map((component) => component.id);
+		const grantStore = this.createGrantStore();
+		for (const serviceId of serviceIds) await grantStore.revokeActionsByPrefix(`${serviceId}.`);
+	};
 	withGrantState = async (action, params) => {
 		if (!params.caller) return action;
 		const granted = await this.createGrantStore().isGranted(params.caller, action.id);
@@ -9162,14 +9881,23 @@ var ServiceAppManager = class {
 		return await this.requireServiceApp(appId);
 	};
 	requireServiceApp = async (appId) => {
-		const dirPath = join(this.getServiceAppsPath(this.getWorkspacePath()), appId);
+		let dirPath = join(this.getServiceAppsPath(this.getWorkspacePath()), appId);
+		let packageSource;
+		try {
+			if (!(await stat(dirPath)).isDirectory()) throw new ServiceAppError("SERVICE_APP_NOT_FOUND", "service app not found");
+		} catch (error) {
+			if (!this.isMissingFileError(error)) throw error;
+			packageSource = (await this.listPackageComponentSources()).find((component) => component.kind === "service" && component.id === appId);
+			if (!packageSource) throw new ServiceAppError("SERVICE_APP_NOT_FOUND", "service app not found");
+			dirPath = packageSource.sourcePath;
+		}
 		try {
 			if (!(await stat(dirPath)).isDirectory()) throw new ServiceAppError("SERVICE_APP_NOT_FOUND", "service app not found");
 			const manifest = await readServiceAppManifest(dirPath);
 			if (manifest.id !== appId) throw new ServiceAppError("SERVICE_APP_INVALID_MANIFEST", "service app manifest id must match directory name");
 			return {
 				manifest,
-				record: this.toServiceAppRecord(dirPath, manifest)
+				record: this.toServiceAppRecord(dirPath, manifest, packageSource)
 			};
 		} catch (error) {
 			if (isServiceAppError(error)) throw error;
@@ -9181,7 +9909,7 @@ var ServiceAppManager = class {
 		const workspacePath = this.getWorkspacePath();
 		const serviceAppsPath = this.getServiceAppsPath(workspacePath);
 		const dirNames = await this.listServiceAppDirNames(serviceAppsPath);
-		return (await Promise.all(dirNames.map(async (dirName) => {
+		const workspaceEntries = await Promise.all(dirNames.map(async (dirName) => {
 			const dirPath = join(serviceAppsPath, dirName);
 			try {
 				const manifest = await readServiceAppManifest(dirPath);
@@ -9192,7 +9920,19 @@ var ServiceAppManager = class {
 			} catch {
 				return null;
 			}
-		}))).filter((entry) => Boolean(entry));
+		}));
+		const packageEntries = await Promise.all((await this.listPackageComponentSources()).filter((component) => component.kind === "service").map(async (component) => {
+			try {
+				const manifest = await readServiceAppManifest(component.sourcePath);
+				return {
+					manifest,
+					record: this.toServiceAppRecord(component.sourcePath, manifest, component)
+				};
+			} catch {
+				return null;
+			}
+		}));
+		return [...workspaceEntries, ...packageEntries].filter((entry) => Boolean(entry));
 	};
 	buildServiceAppRecord = async (serviceAppsPath, dirName) => {
 		const dirPath = join(serviceAppsPath, dirName);
@@ -9214,7 +9954,7 @@ var ServiceAppManager = class {
 			};
 		}
 	};
-	toServiceAppRecord = (dirPath, manifest) => {
+	toServiceAppRecord = (dirPath, manifest, packageSource) => {
 		const runtimeStatus = this.runtimeService.getStatus(manifest.id);
 		return {
 			id: manifest.id,
@@ -9231,7 +9971,12 @@ var ServiceAppManager = class {
 			lastError: runtimeStatus.lastError,
 			lastStartedAt: runtimeStatus.lastStartedAt,
 			lastReadyAt: runtimeStatus.lastReadyAt,
-			lastFailedAt: runtimeStatus.lastFailedAt
+			lastFailedAt: runtimeStatus.lastFailedAt,
+			sourceKind: packageSource ? "package" : "workspace",
+			packageId: packageSource?.packageId,
+			packageVersion: packageSource?.packageVersion,
+			packageDirectory: packageSource ? join(packageSource.sourcePath, "..", "..") : void 0,
+			dataDirectory: packageSource?.dataDirectory
 		};
 	};
 	assertCaller = (caller) => {
@@ -9244,6 +9989,31 @@ var ServiceAppManager = class {
 	getWorkspacePath = () => getWorkspacePathFromConfig(this.params.configManager.config);
 	getServiceAppsPath = (workspacePath) => join(workspacePath, DEFAULT_SERVICE_APPS_DIR);
 	createGrantStore = () => new ServiceActionGrantStore(join(this.getServiceAppsPath(this.getWorkspacePath()), SERVICE_ACTION_GRANTS_FILE_NAME));
+	listPackageComponentSources = async () => await this.params.listPackageComponentSources?.() ?? [];
+	buildServiceAppRecordFromPackage = async (source) => {
+		try {
+			const manifest = await readServiceAppManifest(source.sourcePath);
+			if (manifest.id !== source.id) throw new Error(`service component id mismatch: ${source.id}`);
+			return this.toServiceAppRecord(source.sourcePath, manifest, source);
+		} catch (error) {
+			return {
+				id: source.id,
+				title: toTitle(source.id),
+				dirPath: source.sourcePath,
+				manifestPath: source.manifestPath,
+				cwd: source.sourcePath,
+				enabled: false,
+				protocol: "mcp",
+				status: "failed",
+				lastError: error instanceof Error ? error.message : String(error),
+				sourceKind: "package",
+				packageId: source.packageId,
+				packageVersion: source.packageVersion,
+				packageDirectory: join(source.sourcePath, "..", ".."),
+				dataDirectory: source.dataDirectory
+			};
+		}
+	};
 	listServiceAppDirNames = async (serviceAppsPath) => {
 		try {
 			return (await readdir(serviceAppsPath, { withFileTypes: true })).filter((entry) => entry.isDirectory() && !entry.name.startsWith(".")).map((entry) => entry.name);
@@ -9457,7 +10227,7 @@ function parseFrontmatterBlock(raw) {
 function parseYamlFrontmatter(raw) {
 	try {
 		const parsed = parse(raw);
-		return isRecord$5(parsed) ? parsed : {};
+		return isRecord$6(parsed) ? parsed : {};
 	} catch (error) {
 		const message = error instanceof Error ? error.message : String(error);
 		throw new Error(`Invalid SKILL.md frontmatter: ${message}`);
@@ -9469,7 +10239,7 @@ function readString$5(record, ...names) {
 }
 function readLocalizedTextMap(record, ...names) {
 	const value = readValue(record, names);
-	if (!isRecord$5(value)) return;
+	if (!isRecord$6(value)) return;
 	const localized = Object.fromEntries(Object.entries(value).filter((entry) => typeof entry[1] === "string" && entry[1].trim().length > 0).map(([locale, text]) => [normalizeLocaleTag(locale), text.trim()]));
 	return Object.keys(localized).length > 0 ? localized : void 0;
 }
@@ -9493,7 +10263,7 @@ function normalizeFrontmatterKey(raw) {
 function normalizeLocaleTag(raw) {
 	return raw.trim().toLowerCase();
 }
-function isRecord$5(value) {
+function isRecord$6(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 //#endregion
@@ -9681,7 +10451,7 @@ var NcpAgentUnfinishedRunStore = class {
 				} catch {
 					continue;
 				}
-				if (!isRecord$12(parsed) || parsed._type !== "event" || !isRecord$12(parsed.event)) continue;
+				if (!isRecord$13(parsed) || parsed._type !== "event" || !isRecord$13(parsed.event)) continue;
 				activeRun = applyNcpAgentRunLifecycleEvent(sessionId, activeRun, parsed.event);
 			}
 			return activeRun;
@@ -9702,11 +10472,11 @@ function isNcpAgentSessionMessageProjectionBoundaryEvent(event) {
 function serializeNcpAgentSessionJournalEntry(entry) {
 	const serialized = JSON.stringify(entry);
 	if (!serialized) throw new Error("ncp agent session journal entry serialization produced empty output");
-	if (!isRecord$12(JSON.parse(serialized))) throw new Error("ncp agent session journal entry serialization produced a non-object entry");
+	if (!isRecord$13(JSON.parse(serialized))) throw new Error("ncp agent session journal entry serialization produced a non-object entry");
 	return serialized;
 }
 function attachNcpAgentSessionJournalTimestamp(event, timestamp) {
-	if (!("payload" in event) || !isRecord$12(event.payload)) return event;
+	if (!("payload" in event) || !isRecord$13(event.payload)) return event;
 	return {
 		...event,
 		payload: {
@@ -9731,7 +10501,7 @@ var NcpAgentSessionJournalParser = class {
 			this.applyMetadata(parsed);
 			return;
 		}
-		if (parsed._type === "event" && isRecord$12(parsed.event)) this.applyEvent(parsed, lineEndOffset);
+		if (parsed._type === "event" && isRecord$13(parsed.event)) this.applyEvent(parsed, lineEndOffset);
 	};
 	finish = () => ({
 		metadata: this.metadata,
@@ -9745,14 +10515,14 @@ var NcpAgentSessionJournalParser = class {
 	parseLine = (line, index) => {
 		try {
 			const parsed = JSON.parse(line);
-			return isRecord$12(parsed) ? parsed : null;
+			return isRecord$13(parsed) ? parsed : null;
 		} catch (error) {
 			console.warn(`[ncp-agent-session-journal] skipped corrupted journal line ${index + 1}: ${error instanceof Error ? error.message : String(error)}`);
 			return null;
 		}
 	};
 	applyMetadata = (entry) => {
-		this.metadata = isRecord$12(entry.metadata) ? structuredClone(entry.metadata) : {};
+		this.metadata = isRecord$13(entry.metadata) ? structuredClone(entry.metadata) : {};
 		this.agentId = normalizeNcpAgentId(typeof entry.agent_id === "string" ? entry.agent_id : void 0);
 		this.createdAt = toIsoString(entry.created_at, this.createdAt);
 		this.updatedAt = toIsoString(entry.updated_at, this.updatedAt);
@@ -9799,7 +10569,7 @@ var NcpAgentSessionMetadataStore = class {
 	read = async (sessionId, activitySnapshot) => {
 		try {
 			const parsed = JSON.parse(await readFile(this.metadataPath(sessionId), "utf-8"));
-			if (!isRecord$12(parsed) || parsed._type !== "metadata" || !isRecord$12(parsed.metadata)) throw new Error(`invalid ncp agent session metadata sidecar: ${sessionId}`);
+			if (!isRecord$13(parsed) || parsed._type !== "metadata" || !isRecord$13(parsed.metadata)) throw new Error(`invalid ncp agent session metadata sidecar: ${sessionId}`);
 			const createdAt = toIsoString(parsed.created_at, activitySnapshot.createdAt);
 			const agentId = normalizeNcpAgentId(typeof parsed.agent_id === "string" ? parsed.agent_id : void 0);
 			return {
@@ -9869,7 +10639,7 @@ function deduplicateNcpAgentSessionTailMessages(messages) {
 function isNcpAgentSessionMessageProjectionMeta(value, sessionId) {
 	if (!value || typeof value !== "object" || Array.isArray(value)) return false;
 	const meta = value;
-	return meta.version === 6 && meta.sessionId === sessionId && Number.isSafeInteger(meta.total) && Number.isSafeInteger(meta.projectedJournalOffset) && Number.isSafeInteger(meta.dataBytes) && (meta.activeMessageId === null || typeof meta.activeMessageId === "string") && Array.isArray(meta.pendingCompactionMessageIds) && meta.pendingCompactionMessageIds.every((id) => typeof id === "string") && (meta.contextWindow === null || isRecord$4(meta.contextWindow));
+	return meta.version === 6 && meta.sessionId === sessionId && Number.isSafeInteger(meta.total) && Number.isSafeInteger(meta.projectedJournalOffset) && Number.isSafeInteger(meta.dataBytes) && (meta.activeMessageId === null || typeof meta.activeMessageId === "string") && Array.isArray(meta.pendingCompactionMessageIds) && meta.pendingCompactionMessageIds.every((id) => typeof id === "string") && (meta.contextWindow === null || isRecord$5(meta.contextWindow));
 }
 function readActiveAssistantMessageId(messages) {
 	for (let index = messages.length - 1; index >= 0; index -= 1) {
@@ -9892,12 +10662,12 @@ function mergePendingCompactionMessageIds(current, messages) {
 	}
 	return pending;
 }
-function isRecord$4(value) {
+function isRecord$5(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function readCompactionStatus(message) {
 	const checkpoint = message.metadata?.checkpoint;
-	if (message.metadata?.nextclaw_timeline_kind !== "context_compaction" || !isRecord$4(checkpoint)) return null;
+	if (message.metadata?.nextclaw_timeline_kind !== "context_compaction" || !isRecord$5(checkpoint)) return null;
 	return typeof checkpoint.status === "string" ? checkpoint.status : null;
 }
 //#endregion
@@ -11914,7 +12684,7 @@ var CurrentSessionContextProvider = class {
 const MAX_EXCERPT_COUNT = 16;
 const MAX_EXCERPT_CHARACTERS$1 = 8e3;
 const MAX_TOTAL_CONTEXT_CHARACTERS$1 = 96e3;
-function isRecord$3(value) {
+function isRecord$4(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function readString$3(value) {
@@ -11925,11 +12695,11 @@ function escapeAttribute$1(value) {
 }
 function readConversationExcerpts(metadata) {
 	const raw = metadata?.[CHAT_INLINE_TOKENS_METADATA_KEY];
-	const entries = isRecord$3(raw) && raw.schemaVersion === CHAT_INLINE_TOKENS_SCHEMA_VERSION && Array.isArray(raw.items) ? raw.items : [];
+	const entries = isRecord$4(raw) && raw.schemaVersion === CHAT_INLINE_TOKENS_SCHEMA_VERSION && Array.isArray(raw.items) ? raw.items : [];
 	const excerpts = [];
 	const seen = /* @__PURE__ */ new Set();
 	for (const entry of entries) {
-		if (!isRecord$3(entry) || entry.kind !== CHAT_CONVERSATION_EXCERPT_TOKEN_KIND) continue;
+		if (!isRecord$4(entry) || entry.kind !== CHAT_CONVERSATION_EXCERPT_TOKEN_KIND) continue;
 		const key = readString$3(entry.key);
 		const messageId = readString$3(entry.messageId);
 		const label = readString$3(entry.label);
@@ -11974,27 +12744,63 @@ var ConversationExcerptContextProvider = class {
 	};
 };
 //#endregion
-//#region src/contributions/context-provider/providers/inbox-delivery-context.provider.ts
-var InboxDeliveryContextProvider = class {
-	constructor(deliveryManager, sessionManager) {
-		this.deliveryManager = deliveryManager;
-		this.sessionManager = sessionManager;
+//#region src/contributions/context-provider/providers/system-object-reference-context.provider.ts
+function isRecord$3(value) {
+	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function readSystemObjectReferences(metadata) {
+	const raw = metadata?.[CHAT_INLINE_TOKENS_METADATA_KEY];
+	if (!isRecord$3(raw) || raw.schemaVersion !== CHAT_INLINE_TOKENS_SCHEMA_VERSION || !Array.isArray(raw.items)) return [];
+	const references = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const item of raw.items) {
+		if (!isRecord$3(item) || item.kind !== CHAT_SYSTEM_OBJECT_TOKEN_KIND) continue;
+		const reference = readSystemObjectResolvedReference(item.reference);
+		if (!reference || seen.has(`${reference.uri}@${reference.version}`)) continue;
+		seen.add(`${reference.uri}@${reference.version}`);
+		references.push(reference);
+	}
+	return references;
+}
+var SystemObjectReferenceContextProvider = class {
+	constructor(assetStore) {
+		this.assetStore = assetStore;
 	}
 	provide = async (request) => {
-		if (!request.sessionId) return [];
-		const rawDeliveryId = (await this.sessionManager.getSessionRecord(request.sessionId))?.metadata?.[INBOX_DELIVERY_SESSION_METADATA_KEY];
-		if (typeof rawDeliveryId !== "string" || !rawDeliveryId.trim()) return [];
-		const delivery = await this.deliveryManager.getDelivery(rawDeliveryId);
-		if (!delivery) return [];
-		const lines = [
-			"## Inbox Delivery Context",
-			"This chat was opened from a durable inbox delivery. Treat the following content as the shared subject for this conversation.",
-			`Delivery ID: ${delivery.id}`,
-			`Title: ${delivery.title}`
-		];
-		if (delivery.summary) lines.push(`Summary: ${delivery.summary}`);
-		lines.push("", "### Delivered content", delivery.content);
-		return [lines.join("\n")];
+		const references = readSystemObjectReferences(request.message.metadata ?? request.metadata);
+		if (references.length === 0) return [];
+		return [[
+			"## Explicit System Object References",
+			"The user visibly referenced these immutable NextClaw-managed object snapshots in the current message.",
+			"",
+			(await Promise.all(references.map(async (reference) => {
+				const asset = await this.assetStore.statRecord(reference.assetUri);
+				if (!asset || asset.sha256 !== reference.version || asset.sizeBytes !== reference.sizeBytes || asset.fileName !== reference.fileName || asset.mimeType !== reference.mimeType || !isTextLikeAsset({
+					mimeType: asset.mimeType,
+					fileName: asset.fileName
+				})) return [
+					`### ${reference.label}`,
+					`Object: ${reference.uri}`,
+					`Version: ${reference.version}`,
+					"Snapshot unavailable. Do not fall back to the live object."
+				].join("\n");
+				const bytes = await this.assetStore.readAssetBytes(reference.assetUri);
+				if (!bytes) return [
+					`### ${reference.label}`,
+					`Object: ${reference.uri}`,
+					`Version: ${reference.version}`,
+					"Snapshot unavailable. Do not fall back to the live object."
+				].join("\n");
+				return [
+					`### ${reference.label}`,
+					`Object: ${reference.uri}`,
+					`Type: ${reference.objectType}`,
+					`Version: ${reference.version}`,
+					"",
+					bytes.toString("utf8")
+				].join("\n");
+			}))).join("\n\n")
+		].join("\n")];
 	};
 };
 //#endregion
@@ -12851,7 +13657,7 @@ var ContextProviderContribution = class {
 			new SkillsContextProvider(context),
 			createSessionOrchestrationContextProvider(),
 			new ExecutionPolicyContextProvider(context),
-			new InboxDeliveryContextProvider(this.kernel.inboxDeliveryManager, this.kernel.sessionManager),
+			new SystemObjectReferenceContextProvider(this.kernel.assetStore),
 			new CurrentSessionContextProvider(context),
 			new ReplyFormatContextProvider()
 		]) this.cleanups.push(this.kernel.contextProviderManager.register(provider));
@@ -14207,6 +15013,10 @@ var ToolProviderContribution = class {
 };
 //#endregion
 //#region src/app/nextclaw-kernel.ts
+function resolveKernelAppHomeDirectory(options) {
+	const homeDir = options.homeDir?.trim();
+	return resolve(homeDir ? expandHome(homeDir) : getDataDir(), "apps");
+}
 function resolveKernelSessionsDir(options) {
 	const homeDir = options.homeDir?.trim();
 	if (homeDir) return ensureDir(resolve(expandHome(homeDir), "sessions"));
@@ -14255,6 +15065,7 @@ var NextclawKernel = class {
 	control;
 	skills;
 	automation;
+	appPackageManager;
 	channels;
 	sessionRequests;
 	sessionSearch;
@@ -14262,6 +15073,7 @@ var NextclawKernel = class {
 	mcpManager;
 	sessionManager;
 	inboxDeliveryManager;
+	systemObjectReferenceManager;
 	panelAppManager;
 	preferenceManager;
 	projectManager;
@@ -14316,16 +15128,26 @@ var NextclawKernel = class {
 		});
 		this.inboxDeliveryManager = new InboxDeliveryManager({
 			eventBus: this.eventBus,
-			sessionManager: this.sessionManager,
 			storePath: resolveKernelInboxDeliveryStorePath(options)
 		});
+		this.systemObjectReferenceManager = new SystemObjectReferenceManager(this.assetStore, [createInboxDeliverySystemObjectProvider(this.inboxDeliveryManager), createCronJobSystemObjectProvider(this.automation)]);
+		this.appPackageManager = new AppPackageManager({
+			appHomeDirectory: resolveKernelAppHomeDirectory(options),
+			builtInAppsDirectory: options.builtInAppsDirectory,
+			productVersion: options.productVersion
+		});
 		this.panelAppManager = new PanelAppManager({
 			configManager: this.configManager,
 			eventBus: this.eventBus,
-			ingress: this.ingress
+			ingress: this.ingress,
+			listPackageComponentSources: this.appPackageManager.listActiveComponentSources
 		});
 		this.preferenceManager = new PreferenceManager({ storePath: resolveKernelPreferenceStorePath(options) });
-		this.serviceAppManager = new ServiceAppManager({ configManager: this.configManager });
+		this.serviceAppManager = new ServiceAppManager({
+			configManager: this.configManager,
+			listPackageComponentSources: this.appPackageManager.listActiveComponentSources
+		});
+		this.installAppPackageRuntimeHooks();
 		this.extensions = new ExtensionManager({
 			configManager: this.configManager,
 			eventBus: this.eventBus,
@@ -14365,6 +15187,22 @@ var NextclawKernel = class {
 			new ContextWindowContribution(this)
 		];
 	}
+	installAppPackageRuntimeHooks = () => {
+		this.appPackageManager.installRuntimeHooks({
+			assertCanActivate: async (sources) => {
+				await this.panelAppManager.assertCanActivatePackageComponents(sources);
+				await this.serviceAppManager.assertCanActivatePackageComponents(sources);
+			},
+			beforeDeactivate: async (sources) => {
+				this.panelAppManager.deactivatePackageComponents(sources);
+				await this.serviceAppManager.deactivatePackageComponents(sources);
+			},
+			beforeUninstall: async (sources) => {
+				await this.panelAppManager.removePackageComponentState(sources);
+				await this.serviceAppManager.removePackageComponentGrants(sources);
+			}
+		});
+	};
 	listSessionTypes = (params) => this.agentRuntimeManager.listSessionTypes(params);
 	isSessionRunning = (sessionId) => this.sessionRunManager.isSessionRunning(sessionId);
 	provideGatewayController = (gatewayController) => {
@@ -14965,6 +15803,6 @@ function resolveLegacyEventType(message) {
 	return `message.${role || "other"}`;
 }
 //#endregion
-export { AUTOMATIC_UPDATE_CHECK_INTERVAL_MS, AccessManager, AgentManager, AgentRunClient, AutomationManager, BuiltinNarpRuntimeProviderService, CONTEXT_COMPACTION_CONTINUATION_TEXT, CONTEXT_COMPACTION_PROJECTION_KIND, CONTEXT_COMPACTION_PROJECTION_METADATA_KEY, CONTEXT_COMPACTION_SYSTEM_PREAMBLE, CONTEXT_COMPACTION_TIMELINE_KIND, ChannelManager, CommandRegistry, ConfigManager, ContextCompactionJournalRecoveryService, ContextCompactionPreflightService, DEFAULT_AGENT_RUNTIME_ENTRY_ID, DEFAULT_SERVICE_ACTION_RISK, ExtensionManager, GatewayInboundProcessor, InboxDeliveryError, InboxDeliveryManager, LlmProviderManager, LlmUsageManager, LlmUsageStore, MAX_INBOX_DELIVERY_CONTENT_LENGTH, McpManager, McpServiceAppRuntimeService, NARP_HTTP_RUNTIME_KIND, NARP_STDIO_RUNTIME_KIND, NEXTCLAW_TIMELINE_KIND_METADATA_KEY, NcpAgentSessionJournalStore, NextclawKernel, PANEL_APP_AGENT_CAPABILITIES, PROJECT_TEMPLATE_IDS, PROVIDER_MODEL_CATALOG_REFRESH_INTERVAL_MS, PanelAppAssetTokenService, PanelAppError, PanelAppManager, PreferenceError, PreferenceManager, ProjectError, ProjectManager, ProviderManagerNcpLLMApi, ProviderModelCatalogManager, SERVICE_APP_MANIFEST_FILE_NAME, ServiceAppError, ServiceAppManager, SessionContextCompactionError, SessionContextCompactionManager, SessionManager, SessionMessageCursorError, SessionRequestManager, SessionSettingsError, SkillManager, UpdateManifestReader, buildAgentRunSendPayload, buildContextCompactionModelProjection, buildContextCompactionTimelineNcpMessage, buildLlmUsageSummary, buildLocalizedTextMap, buildNextclawNcpRunContext, buildServiceActionId, createAgentRuntimeSessionRequestDispatcher, createAssetTools, createContextCompactionMessageId, createContextWindowSignature, createLlmUsageRecord, describeAgentRuntimeSessionTypes, dispatchAgentRuntimeSessionRequest, dispatchChannelReplyRoute, dispatchPromptOverNcp, getAutomaticUpdateCheckDelay, getServiceActionName, getServiceAppManifestPath, getUiContentParamsBootstrapScript, getUnsignedUpdateManifest, hasLlmUsageTelemetry, injectUiContentParamsBootstrap, isContextCompactionProjectionMessage, isContextCompactionTimelineMessage, isContextWindowSnapshot, isInboxDeliveryError, isPanelAppAgentCapability, isPanelAppError, isPreferenceError, isProjectError, isReplyCapableChannel, isServiceAppError, isSessionContextCompactionError, isSessionMessageCursorError, isSessionSettingsError, listExtensionChannelIds, listServiceAppManifestActions, mergeServiceAppRuntimeActions, normalizeAgentRuntimeSessionTypeIcon, normalizeLlmUsageModel, normalizeOptionalString, parseServiceAppManifest, parseSkillFrontmatter, readContextCompactionCheckpoint, readContextWindowEventSessionId, readLatestContextCompactionCheckpoint, readLearningLoopRuntimeConfig, readMetadataModel, readMetadataThinking, readServiceAppManifest, resolveAgentRuntimeEntries, resolveAutomaticUpdateCheckIntervalMs, resolveChannelReplyRoute, resolveEffectiveModel, resolveLegacyEventType, resolveSessionChannelContext, runGatewayInboundLoop, sanitizeLlmUsage, serializeUnsignedUpdateManifest, shouldRefreshContextWindowDuringStream, shouldRefreshContextWindowImmediately, stripSkillFrontmatter, syncSessionThinkingPreference, toNcpMessages, waitForAgentRuntimeSessionReply };
+export { AUTOMATIC_UPDATE_CHECK_INTERVAL_MS, AccessManager, AgentManager, AgentRunClient, AppPackageError, AppPackageManager, AutomationManager, BuiltinNarpRuntimeProviderService, CONTEXT_COMPACTION_CONTINUATION_TEXT, CONTEXT_COMPACTION_PROJECTION_KIND, CONTEXT_COMPACTION_PROJECTION_METADATA_KEY, CONTEXT_COMPACTION_SYSTEM_PREAMBLE, CONTEXT_COMPACTION_TIMELINE_KIND, ChannelManager, CommandRegistry, ConfigManager, ContextCompactionJournalRecoveryService, ContextCompactionPreflightService, DEFAULT_AGENT_RUNTIME_ENTRY_ID, DEFAULT_SERVICE_ACTION_RISK, ExtensionManager, GatewayInboundProcessor, InboxDeliveryError, InboxDeliveryManager, LlmProviderManager, LlmUsageManager, LlmUsageStore, MAX_INBOX_DELIVERY_CONTENT_LENGTH, McpManager, McpServiceAppRuntimeService, NARP_HTTP_RUNTIME_KIND, NARP_STDIO_RUNTIME_KIND, NEXTCLAW_TIMELINE_KIND_METADATA_KEY, NcpAgentSessionJournalStore, NextclawKernel, PANEL_APP_AGENT_CAPABILITIES, PROJECT_TEMPLATE_IDS, PROVIDER_MODEL_CATALOG_REFRESH_INTERVAL_MS, PanelAppAssetTokenService, PanelAppError, PanelAppManager, PreferenceError, PreferenceManager, ProjectError, ProjectManager, ProviderManagerNcpLLMApi, ProviderModelCatalogManager, SERVICE_APP_MANIFEST_FILE_NAME, ServiceAppError, ServiceAppManager, SessionContextCompactionError, SessionContextCompactionManager, SessionManager, SessionMessageCursorError, SessionRequestManager, SessionSettingsError, SkillManager, SystemObjectReferenceError, SystemObjectReferenceManager, UpdateManifestReader, buildAgentRunSendPayload, buildContextCompactionModelProjection, buildContextCompactionTimelineNcpMessage, buildLlmUsageSummary, buildLocalizedTextMap, buildNextclawNcpRunContext, buildServiceActionId, createAgentRuntimeSessionRequestDispatcher, createAssetTools, createContextCompactionMessageId, createContextWindowSignature, createCronJobSystemObjectProvider, createInboxDeliverySystemObjectProvider, createLlmUsageRecord, describeAgentRuntimeSessionTypes, dispatchAgentRuntimeSessionRequest, dispatchChannelReplyRoute, dispatchPromptOverNcp, getAutomaticUpdateCheckDelay, getServiceActionName, getServiceAppManifestPath, getUiContentParamsBootstrapScript, getUnsignedUpdateManifest, hasLlmUsageTelemetry, injectUiContentParamsBootstrap, isAppPackageError, isContextCompactionProjectionMessage, isContextCompactionTimelineMessage, isContextWindowSnapshot, isInboxDeliveryError, isPanelAppAgentCapability, isPanelAppError, isPreferenceError, isProjectError, isReplyCapableChannel, isServiceAppError, isSessionContextCompactionError, isSessionMessageCursorError, isSessionSettingsError, isSystemObjectReferenceError, listExtensionChannelIds, listServiceAppManifestActions, mergeServiceAppRuntimeActions, normalizeAgentRuntimeSessionTypeIcon, normalizeLlmUsageModel, normalizeOptionalString, parseServiceAppManifest, parseSkillFrontmatter, readContextCompactionCheckpoint, readContextWindowEventSessionId, readLatestContextCompactionCheckpoint, readLearningLoopRuntimeConfig, readMetadataModel, readMetadataThinking, readServiceAppManifest, resolveAgentRuntimeEntries, resolveAutomaticUpdateCheckIntervalMs, resolveChannelReplyRoute, resolveEffectiveModel, resolveLegacyEventType, resolveSessionChannelContext, runGatewayInboundLoop, sanitizeLlmUsage, serializeUnsignedUpdateManifest, shouldRefreshContextWindowDuringStream, shouldRefreshContextWindowImmediately, stripSkillFrontmatter, syncSessionThinkingPreference, toNcpMessages, waitForAgentRuntimeSessionReply };
 
 //# sourceMappingURL=index.js.map