@nextclaw/server 0.20.5 → 0.21.0

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import * as _$hono from "hono";
 import { Context, Hono } from "hono";
 import * as _$_nextclaw_kernel0 from "@nextclaw/kernel";
-import { AccessManager, AppDataDeleteResult, AppDataEntry, AppDataList, AppDataManager, AppPackageHostTarget, AppPackageList, AppPackageManager, AppPackageOperationInput, AppPackageOperationList, AppPackageOperationStatus, AppPackageOperationView, AppPackageView, InboxDeliveryManager, NextclawKernel, ObservationRelationshipStatus, PanelAppAgentCapability, PanelAppAgentGenerateObjectRequest, PanelAppAgentGenerateObjectResult, PanelAppAgentSendRequest, PanelAppAgentSendResult, PanelAppBridgeSession, PanelAppCapabilityGrant, PanelAppClientGrant, PanelAppEntry, PanelAppList, PanelAppManager, PanelAppPreferencesUpdate, PreferenceJsonValue, PreferenceManager, ProjectRecord, ProjectTemplate, ProjectTemplateId, ServiceAction, ServiceActionGrant, ServiceActionInvokeResult, ServiceAppDeleteResult, ServiceAppList, ServiceAppManager, ServiceAppRecord, SessionTokenUsageSummary } from "@nextclaw/kernel";
+import { AccessManager, AppDataDeleteResult, AppDataEntry, AppDataList, AppDataManager, AppPackageHostTarget, AppPackageList, AppPackageManager, AppPackageOperationInput, AppPackageOperationList, AppPackageOperationStatus, AppPackageOperationView, AppPackageView, InboxDeliveryManager, NextclawKernel, ObservationRelationshipStatus, PanelAppAgentCapability, PanelAppAgentGenerateObjectRequest, PanelAppAgentGenerateObjectResult, PanelAppAgentSendRequest, PanelAppAgentSendResult, PanelAppBridgeSession, PanelAppCapabilityGrant, PanelAppClientGrant, PanelAppEntry, PanelAppList, PanelAppManager, PanelAppPreferencesUpdate, PortableRuntimeAcceptanceContractView, PortableRuntimeAcceptanceManager, PortableRuntimeAcceptanceStatusView, PreferenceJsonValue, PreferenceManager, ProjectRecord, ProjectTemplate, ProjectTemplateId, ServiceAction, ServiceActionGrant, ServiceActionInvokeResult, ServiceAppDeleteResult, ServiceAppJobList, ServiceAppJobView, ServiceAppJobWatch, ServiceAppList, ServiceAppManager, ServiceAppRecord, SessionTokenUsageSummary, VerificationRecordList } from "@nextclaw/kernel";
 import { FSWatcher } from "node:fs";
 import * as NextclawCore from "@nextclaw/core";
 import { Config, ConfigActionExecuteRequest as ConfigActionExecuteRequest$1, ConfigActionExecuteResult as ConfigActionExecuteResult$1, ExtensionChannelBinding, ExtensionUiMetadata, McpServerDefinition, ModelThinkingCapability, ThinkingLevel } from "@nextclaw/core";
@@ -817,7 +817,6 @@ type AppDistributionMode = "bundle" | "source";
 type AppStorageLayout = "legacy" | "instance-v1";
 //#endregion
 //#region ../nextclaw-app-runtime/dist/types/app-registry.types.d.ts
-//#region src/types/app-registry.types.d.ts
 type AppInstallSourceKind = "bundle" | "directory" | "registry";
 //#endregion
 //#region src/features/service-apps/controllers/service-apps.controller.d.ts
@@ -826,6 +825,7 @@ declare class ServiceAppsRoutesController {
   constructor(params: {
     panelAppManager: PanelAppManager;
     serviceAppManager: ServiceAppManager;
+    portableRuntimeAcceptance: PortableRuntimeAcceptanceManager;
   });
   readonly listServiceApps: (c: Context) => Promise<Response & _$hono.TypedResponse<{
     ok: boolean;
@@ -874,6 +874,12 @@ declare class ServiceAppsRoutesController {
             mode: AppDocumentAccessMode;
             description?: string | undefined;
           }[] | undefined;
+          secrets?: {
+            id: string;
+            title: string;
+            description: string;
+            required: boolean;
+          }[] | undefined;
           allowedDomains?: string[] | undefined;
           storage?: boolean | {
             namespace?: string | undefined;
@@ -900,72 +906,924 @@ declare class ServiceAppsRoutesController {
         message: string;
       }[];
     };
-  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">>;
-  readonly getServiceApp: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">>;
+  readonly getServiceApp: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+    ok: boolean;
+    data: {
+      id: string;
+      title: string;
+      description?: string | undefined;
+      dirPath: string;
+      manifestPath: string;
+      command?: string | undefined;
+      args?: string[] | undefined;
+      cwd: string;
+      enabled: boolean;
+      protocol: _$_nextclaw_kernel0.ServiceAppProtocol;
+      status: _$_nextclaw_kernel0.ServiceAppRuntimeStatus;
+      lastError?: string | undefined;
+      lastStartedAt?: string | undefined;
+      lastReadyAt?: string | undefined;
+      lastFailedAt?: string | undefined;
+      sourceKind?: "workspace" | "package" | undefined;
+      packageId?: string | undefined;
+      packageVersion?: string | undefined;
+      packageDirectory?: string | undefined;
+      dataDirectory?: string | undefined;
+      instanceId?: string | undefined;
+      storage?: {
+        layout: AppStorageLayout;
+        layoutVersion: 1;
+        instanceId: string;
+        instanceDirectory: string;
+        dataDirectory: string;
+        configDirectory: string;
+        stateDirectory: string;
+        cacheDirectory: string;
+        temporaryDirectory: string;
+        logsDirectory: string;
+      } | undefined;
+      isolation?: AppRuntimeIsolation | undefined;
+      runtimeProfile?: AppRuntimeProfile | undefined;
+      permissions?: {
+        documentAccess?: {
+          id: string;
+          mode: AppDocumentAccessMode;
+          description?: string | undefined;
+        }[] | undefined;
+        secrets?: {
+          id: string;
+          title: string;
+          description: string;
+          required: boolean;
+        }[] | undefined;
+        allowedDomains?: string[] | undefined;
+        storage?: boolean | {
+          namespace?: string | undefined;
+        } | undefined;
+        capabilities?: {
+          hostBridge?: boolean | undefined;
+          nativeProcess?: boolean | undefined;
+        } | undefined;
+      } | undefined;
+      componentPath?: string | undefined;
+      providerIds?: string[] | undefined;
+      lifecycle?: {
+        mode: "action";
+      } | {
+        mode: "resident";
+        eventIntervalMs: number;
+      } | {
+        mode: "provider";
+      } | undefined;
+    };
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 400 | 401 | 403 | 404 | 422 | 502, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 500, "json">)>;
+  readonly inspectServiceAppAiCapabilities: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 400 | 401 | 403 | 404 | 422 | 502, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 500, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    data: {
+      ready: boolean;
+      requiredMissing: {
+        kind: "model" | "agent";
+        slotId: string;
+      }[];
+      bindings: {
+        kind: "model" | "agent";
+        slotId: string;
+        targetId: string;
+        grantedAt: string;
+      }[];
+    };
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
+  readonly verifyServiceAppAiCapabilities: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 400 | 401 | 403 | 404 | 422 | 502, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 500, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    data: {
+      ready: boolean;
+      requiredMissing: {
+        kind: "model" | "agent";
+        slotId: string;
+      }[];
+      bindings: {
+        kind: "model" | "agent";
+        slotId: string;
+        targetId: string;
+        grantedAt: string;
+      }[];
+    };
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
+  readonly bindServiceAppAiCapability: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 400 | 401 | 403 | 404 | 422 | 502, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 500, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    data: {
+      ready: boolean;
+      requiredMissing: {
+        kind: "model" | "agent";
+        slotId: string;
+      }[];
+      bindings: {
+        kind: "model" | "agent";
+        slotId: string;
+        targetId: string;
+        grantedAt: string;
+      }[];
+    };
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
+  readonly unbindServiceAppAiCapability: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 400 | 401 | 403 | 404 | 422 | 502, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 500, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    data: {
+      ready: boolean;
+      requiredMissing: {
+        kind: "model" | "agent";
+        slotId: string;
+      }[];
+      bindings: {
+        kind: "model" | "agent";
+        slotId: string;
+        targetId: string;
+        grantedAt: string;
+      }[];
+    };
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
+  readonly listServiceActions: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 400 | 401 | 403 | 404 | 422 | 502, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 500, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    data: {
+      actions: {
+        id: string;
+        appId: string;
+        name: string;
+        title?: string | undefined;
+        description?: string | undefined;
+        inputSchema?: {
+          [x: string]: _$hono_utils_types0.JSONValue;
+        } | undefined;
+        risk: _$_nextclaw_kernel0.ServiceActionRisk;
+        runtimeState?: _$_nextclaw_kernel0.ServiceActionRuntimeState | undefined;
+        grantState?: _$_nextclaw_kernel0.ServiceActionGrantState | undefined;
+      }[];
+    };
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
+  readonly discoverServiceAppActions: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 400 | 401 | 403 | 404 | 422 | 502, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 500, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    data: {
+      actions: {
+        id: string;
+        appId: string;
+        name: string;
+        title?: string | undefined;
+        description?: string | undefined;
+        inputSchema?: {
+          [x: string]: _$hono_utils_types0.JSONValue;
+        } | undefined;
+        risk: _$_nextclaw_kernel0.ServiceActionRisk;
+        runtimeState?: _$_nextclaw_kernel0.ServiceActionRuntimeState | undefined;
+        grantState?: _$_nextclaw_kernel0.ServiceActionGrantState | undefined;
+      }[];
+    };
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
+  readonly invokeServiceAction: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 400 | 401 | 403 | 404 | 422 | 502, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 500, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    data: {
+      actionId: string;
+      result: _$hono_utils_types0.JSONValue;
+      invocation?: {
+        callId: string;
+        traceId: string;
+        dataVersion: string;
+        verificationRunId: string;
+      } | undefined;
+    };
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
+  readonly invokeInstalledServiceAction: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 400 | 401 | 403 | 404 | 422 | 502, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 500, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    data: {
+      actionId: string;
+      result: _$hono_utils_types0.JSONValue;
+      invocation?: {
+        callId: string;
+        traceId: string;
+        dataVersion: string;
+        verificationRunId: string;
+      } | undefined;
+    };
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
+  /**
+   * Agent tool providers call the same manager method. This explicit endpoint
+   * is the non-LLM integration/diagnostic surface: it still requires a real
+   * configured Agent and its explicit Service Action grant, so it cannot
+   * impersonate either a Panel bridge or an arbitrary Agent.
+   */
+  readonly invokeAgentServiceAction: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 400 | 401 | 403 | 404 | 422 | 502, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 500, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    data: {
+      actionId: string;
+      result: _$hono_utils_types0.JSONValue;
+      invocation?: {
+        callId: string;
+        traceId: string;
+        dataVersion: string;
+        verificationRunId: string;
+      } | undefined;
+    };
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
+  readonly listVerificationRecords: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 400 | 401 | 403 | 404 | 422 | 502, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 500, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    data: {
+      entries: ({
+        evidenceSchemaVersion: 2;
+        evidenceSource: _$_nextclaw_kernel0.PortableRuntimeAcceptanceEvidenceSource;
+        verificationRunId: string;
+        acceptanceId: string;
+        scenarioVersion: string;
+        productVersion: string;
+        runtimeVersion: string;
+        implementationFingerprint: string;
+        status: _$_nextclaw_kernel0.VerificationRecordStatus;
+        startedAt: string;
+        finishedAt: string;
+        environment: string;
+        appId: string;
+        componentId: string;
+        role: _$_nextclaw_kernel0.VerificationRecordRole;
+        entrySurface: _$_nextclaw_kernel0.VerificationRecordEntrySurface;
+        instanceId?: string | undefined;
+        actionOrEvent: string;
+        callId: string;
+        traceId: string;
+        capabilityDecisions: string[];
+        inputDigest: string;
+        outputDigest?: string | undefined;
+        dataVersion: string;
+        observation?: {
+          durationMs?: number | undefined;
+          runnerPid?: number | null | undefined;
+          memory?: {
+            rssBytes: number | null;
+            pssBytes: number | null;
+          } | null | undefined;
+        } | undefined;
+        error?: {
+          code?: string | undefined;
+          message: string;
+        } | undefined;
+        recovery?: string | undefined;
+        evidenceRefs: string[];
+      } | {
+        status: _$_nextclaw_kernel0.VerificationRecordStatus;
+        appId: string;
+        error?: {
+          code?: string | undefined;
+          message: string;
+        } | undefined;
+        instanceId?: string | undefined;
+        componentId: string;
+        role: _$_nextclaw_kernel0.VerificationRecordRole;
+        callId: string;
+        traceId: string;
+        dataVersion: string;
+        verificationRunId: string;
+        acceptanceId: string;
+        scenarioVersion: string;
+        startedAt: string;
+        finishedAt: string;
+        environment: string;
+        entrySurface: _$_nextclaw_kernel0.VerificationRecordEntrySurface;
+        actionOrEvent: string;
+        capabilityDecisions: string[];
+        inputDigest: string;
+        outputDigest?: string | undefined;
+        observation?: {
+          durationMs?: number | undefined;
+          runnerPid?: number | null | undefined;
+          memory?: {
+            rssBytes: number | null;
+            pssBytes: number | null;
+          } | null | undefined;
+        } | undefined;
+        recovery?: string | undefined;
+        evidenceRefs: string[];
+        evidenceSchemaVersion: 1;
+      })[];
+    };
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
+  /** Stable read-only projection of the single portable-runtime acceptance registry. */
+  readonly getPortableRuntimeAcceptanceContract: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 400 | 401 | 403 | 404 | 422 | 502, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 500, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    data: {
+      contractFingerprint: string;
+      locale: _$_nextclaw_kernel0.PortableRuntimeAcceptanceLocale;
+      definitions: {
+        id: string;
+        titleKey: string;
+        descriptionKey: string;
+        checkerKey: string;
+        category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+        required: boolean;
+        scenarioVersion: string;
+        evidenceSource: _$_nextclaw_kernel0.PortableRuntimeAcceptanceEvidenceSource;
+        platforms: readonly _$_nextclaw_kernel0.PortableRuntimeAcceptancePlatform[];
+        presentation: {
+          title: string;
+          description: string;
+        };
+      }[];
+    };
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
+  readonly getPortableRuntimeAcceptanceStatus: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 400 | 401 | 403 | 404 | 422 | 502, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 500, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    data: {
+      schemaVersion: 1;
+      contract: {
+        contractFingerprint: string;
+        locale: _$_nextclaw_kernel0.PortableRuntimeAcceptanceLocale;
+        definitions: {
+          id: string;
+          titleKey: string;
+          descriptionKey: string;
+          checkerKey: string;
+          category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+          required: boolean;
+          scenarioVersion: string;
+          evidenceSource: _$_nextclaw_kernel0.PortableRuntimeAcceptanceEvidenceSource;
+          platforms: readonly _$_nextclaw_kernel0.PortableRuntimeAcceptancePlatform[];
+          presentation: {
+            title: string;
+            description: string;
+          };
+        }[];
+      };
+      appId: string;
+      identity: {
+        available: true;
+        context: {
+          appId: string;
+          environment: _$_nextclaw_kernel0.PortableRuntimeAcceptancePlatform;
+          productVersion: string;
+          runtimeVersion: string;
+          implementationFingerprint: string;
+          contractFingerprint: string;
+        };
+        runtimeVersionSource: "configured" | "product-version-fallback";
+        runnerFingerprint: string;
+      } | {
+        available: false;
+        reason: string;
+        environment: _$_nextclaw_kernel0.PortableRuntimeAcceptancePlatform | null;
+        productVersion: string | null;
+        runtimeVersion: string | null;
+        runtimeVersionSource: "configured" | "product-version-fallback" | null;
+      };
+      entries: {
+        id: string;
+        titleKey: string;
+        descriptionKey: string;
+        checkerKey: string;
+        category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+        required: boolean;
+        scenarioVersion: string;
+        evidenceSource: _$_nextclaw_kernel0.PortableRuntimeAcceptanceEvidenceSource;
+        platforms: readonly _$_nextclaw_kernel0.PortableRuntimeAcceptancePlatform[];
+        presentation: {
+          title: string;
+          description: string;
+        };
+        result: {
+          status: _$_nextclaw_kernel0.PortableRuntimeAcceptanceResultStatus;
+          required: boolean;
+          acceptanceId: string;
+          latestRecord?: {
+            evidenceSchemaVersion: 2;
+            evidenceSource: _$_nextclaw_kernel0.PortableRuntimeAcceptanceEvidenceSource;
+            verificationRunId: string;
+            acceptanceId: string;
+            scenarioVersion: string;
+            productVersion: string;
+            runtimeVersion: string;
+            implementationFingerprint: string;
+            status: _$_nextclaw_kernel0.VerificationRecordStatus;
+            startedAt: string;
+            finishedAt: string;
+            environment: string;
+            appId: string;
+            componentId: string;
+            role: _$_nextclaw_kernel0.VerificationRecordRole;
+            entrySurface: _$_nextclaw_kernel0.VerificationRecordEntrySurface;
+            instanceId?: string | undefined;
+            actionOrEvent: string;
+            callId: string;
+            traceId: string;
+            capabilityDecisions: string[];
+            inputDigest: string;
+            outputDigest?: string | undefined;
+            dataVersion: string;
+            observation?: {
+              durationMs?: number | undefined;
+              runnerPid?: number | null | undefined;
+              memory?: {
+                rssBytes: number | null;
+                pssBytes: number | null;
+              } | null | undefined;
+            } | undefined;
+            error?: {
+              code?: string | undefined;
+              message: string;
+            } | undefined;
+            recovery?: string | undefined;
+            evidenceRefs: string[];
+          } | {
+            status: _$_nextclaw_kernel0.VerificationRecordStatus;
+            appId: string;
+            error?: {
+              code?: string | undefined;
+              message: string;
+            } | undefined;
+            instanceId?: string | undefined;
+            componentId: string;
+            role: _$_nextclaw_kernel0.VerificationRecordRole;
+            callId: string;
+            traceId: string;
+            dataVersion: string;
+            verificationRunId: string;
+            acceptanceId: string;
+            scenarioVersion: string;
+            startedAt: string;
+            finishedAt: string;
+            environment: string;
+            entrySurface: _$_nextclaw_kernel0.VerificationRecordEntrySurface;
+            actionOrEvent: string;
+            capabilityDecisions: string[];
+            inputDigest: string;
+            outputDigest?: string | undefined;
+            observation?: {
+              durationMs?: number | undefined;
+              runnerPid?: number | null | undefined;
+              memory?: {
+                rssBytes: number | null;
+                pssBytes: number | null;
+              } | null | undefined;
+            } | undefined;
+            recovery?: string | undefined;
+            evidenceRefs: string[];
+            evidenceSchemaVersion: 1;
+          } | undefined;
+          environment: _$_nextclaw_kernel0.PortableRuntimeAcceptancePlatform | null;
+        };
+      }[];
+      summary: {
+        failed: number;
+        missing: number;
+        "current-passed": number;
+        stale: number;
+        "not-applicable": number;
+      };
+    };
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
+  readonly exportPortableRuntimeAcceptance: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 400 | 401 | 403 | 404 | 422 | 502, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 500, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    data: {
+      schemaVersion: 1;
+      contract: {
+        contractFingerprint: string;
+        locale: _$_nextclaw_kernel0.PortableRuntimeAcceptanceLocale;
+        definitions: {
+          id: string;
+          titleKey: string;
+          descriptionKey: string;
+          checkerKey: string;
+          category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+          required: boolean;
+          scenarioVersion: string;
+          evidenceSource: _$_nextclaw_kernel0.PortableRuntimeAcceptanceEvidenceSource;
+          platforms: readonly _$_nextclaw_kernel0.PortableRuntimeAcceptancePlatform[];
+          presentation: {
+            title: string;
+            description: string;
+          };
+        }[];
+      };
+      appId: string;
+      identity: {
+        available: true;
+        context: {
+          appId: string;
+          environment: _$_nextclaw_kernel0.PortableRuntimeAcceptancePlatform;
+          productVersion: string;
+          runtimeVersion: string;
+          implementationFingerprint: string;
+          contractFingerprint: string;
+        };
+        runtimeVersionSource: "configured" | "product-version-fallback";
+        runnerFingerprint: string;
+      } | {
+        available: false;
+        reason: string;
+        environment: _$_nextclaw_kernel0.PortableRuntimeAcceptancePlatform | null;
+        productVersion: string | null;
+        runtimeVersion: string | null;
+        runtimeVersionSource: "configured" | "product-version-fallback" | null;
+      };
+      entries: {
+        id: string;
+        titleKey: string;
+        descriptionKey: string;
+        checkerKey: string;
+        category: "execution" | "capability" | "lifecycle" | "entry" | "quality" | "release";
+        required: boolean;
+        scenarioVersion: string;
+        evidenceSource: _$_nextclaw_kernel0.PortableRuntimeAcceptanceEvidenceSource;
+        platforms: readonly _$_nextclaw_kernel0.PortableRuntimeAcceptancePlatform[];
+        presentation: {
+          title: string;
+          description: string;
+        };
+        result: {
+          status: _$_nextclaw_kernel0.PortableRuntimeAcceptanceResultStatus;
+          required: boolean;
+          acceptanceId: string;
+          latestRecord?: {
+            evidenceSchemaVersion: 2;
+            evidenceSource: _$_nextclaw_kernel0.PortableRuntimeAcceptanceEvidenceSource;
+            verificationRunId: string;
+            acceptanceId: string;
+            scenarioVersion: string;
+            productVersion: string;
+            runtimeVersion: string;
+            implementationFingerprint: string;
+            status: _$_nextclaw_kernel0.VerificationRecordStatus;
+            startedAt: string;
+            finishedAt: string;
+            environment: string;
+            appId: string;
+            componentId: string;
+            role: _$_nextclaw_kernel0.VerificationRecordRole;
+            entrySurface: _$_nextclaw_kernel0.VerificationRecordEntrySurface;
+            instanceId?: string | undefined;
+            actionOrEvent: string;
+            callId: string;
+            traceId: string;
+            capabilityDecisions: string[];
+            inputDigest: string;
+            outputDigest?: string | undefined;
+            dataVersion: string;
+            observation?: {
+              durationMs?: number | undefined;
+              runnerPid?: number | null | undefined;
+              memory?: {
+                rssBytes: number | null;
+                pssBytes: number | null;
+              } | null | undefined;
+            } | undefined;
+            error?: {
+              code?: string | undefined;
+              message: string;
+            } | undefined;
+            recovery?: string | undefined;
+            evidenceRefs: string[];
+          } | {
+            status: _$_nextclaw_kernel0.VerificationRecordStatus;
+            appId: string;
+            error?: {
+              code?: string | undefined;
+              message: string;
+            } | undefined;
+            instanceId?: string | undefined;
+            componentId: string;
+            role: _$_nextclaw_kernel0.VerificationRecordRole;
+            callId: string;
+            traceId: string;
+            dataVersion: string;
+            verificationRunId: string;
+            acceptanceId: string;
+            scenarioVersion: string;
+            startedAt: string;
+            finishedAt: string;
+            environment: string;
+            entrySurface: _$_nextclaw_kernel0.VerificationRecordEntrySurface;
+            actionOrEvent: string;
+            capabilityDecisions: string[];
+            inputDigest: string;
+            outputDigest?: string | undefined;
+            observation?: {
+              durationMs?: number | undefined;
+              runnerPid?: number | null | undefined;
+              memory?: {
+                rssBytes: number | null;
+                pssBytes: number | null;
+              } | null | undefined;
+            } | undefined;
+            recovery?: string | undefined;
+            evidenceRefs: string[];
+            evidenceSchemaVersion: 1;
+          } | undefined;
+          environment: _$_nextclaw_kernel0.PortableRuntimeAcceptancePlatform | null;
+        };
+      }[];
+      summary: {
+        failed: number;
+        missing: number;
+        "current-passed": number;
+        stale: number;
+        "not-applicable": number;
+      };
+    };
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
+  readonly listServiceAppJobs: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 400 | 401 | 403 | 404 | 422 | 502, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 500, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     data: {
-      id: string;
-      title: string;
-      description?: string | undefined;
-      dirPath: string;
-      manifestPath: string;
-      command?: string | undefined;
-      args?: string[] | undefined;
-      cwd: string;
-      enabled: boolean;
-      protocol: _$_nextclaw_kernel0.ServiceAppProtocol;
-      status: _$_nextclaw_kernel0.ServiceAppRuntimeStatus;
-      lastError?: string | undefined;
-      lastStartedAt?: string | undefined;
-      lastReadyAt?: string | undefined;
-      lastFailedAt?: string | undefined;
-      sourceKind?: "workspace" | "package" | undefined;
-      packageId?: string | undefined;
-      packageVersion?: string | undefined;
-      packageDirectory?: string | undefined;
-      dataDirectory?: string | undefined;
-      instanceId?: string | undefined;
-      storage?: {
-        layout: AppStorageLayout;
-        layoutVersion: 1;
+      entries: {
+        id: string;
+        appId: string;
         instanceId: string;
-        instanceDirectory: string;
-        dataDirectory: string;
-        configDirectory: string;
-        stateDirectory: string;
-        cacheDirectory: string;
-        temporaryDirectory: string;
-        logsDirectory: string;
-      } | undefined;
-      isolation?: AppRuntimeIsolation | undefined;
-      runtimeProfile?: AppRuntimeProfile | undefined;
-      permissions?: {
-        documentAccess?: {
-          id: string;
-          mode: AppDocumentAccessMode;
-          description?: string | undefined;
-        }[] | undefined;
-        allowedDomains?: string[] | undefined;
-        storage?: boolean | {
-          namespace?: string | undefined;
+        componentId: string;
+        actionName: string;
+        status: _$_nextclaw_kernel0.ServiceAppJobStatus;
+        createdAt: string;
+        updatedAt: string;
+        startedAt?: string | undefined;
+        completedAt?: string | undefined;
+        cancelRequestedAt?: string | undefined;
+        retryOf?: string | undefined;
+        callId: string;
+        traceId: string;
+        caller?: {
+          surface: "panel" | "agent" | "installed-app-cli";
+          id?: string | undefined;
         } | undefined;
-        capabilities?: {
-          hostBridge?: boolean | undefined;
-          nativeProcess?: boolean | undefined;
+        error?: {
+          code?: string | undefined;
+          message: string;
         } | undefined;
-      } | undefined;
-      componentPath?: string | undefined;
-      providerIds?: string[] | undefined;
-      lifecycle?: {
-        mode: "action";
-      } | {
-        mode: "resident";
-        eventIntervalMs: number;
-      } | {
-        mode: "provider";
-      } | undefined;
+      }[];
     };
-  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">) | (Response & _$hono.TypedResponse<{
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
+  readonly getServiceAppJob: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
     ok: boolean;
     error: {
       code: string;
@@ -983,8 +1841,35 @@ declare class ServiceAppsRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 500, "json">)>;
-  readonly listServiceActions: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+  }, 500, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    data: {
+      id: string;
+      appId: string;
+      instanceId: string;
+      componentId: string;
+      actionName: string;
+      status: _$_nextclaw_kernel0.ServiceAppJobStatus;
+      createdAt: string;
+      updatedAt: string;
+      startedAt?: string | undefined;
+      completedAt?: string | undefined;
+      cancelRequestedAt?: string | undefined;
+      retryOf?: string | undefined;
+      callId: string;
+      traceId: string;
+      caller?: {
+        surface: "panel" | "agent" | "installed-app-cli";
+        id?: string | undefined;
+      } | undefined;
+      error?: {
+        code?: string | undefined;
+        message: string;
+      } | undefined;
+    };
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
+  /** Cursor replay only; a disconnected client never changes Job execution. */
+  readonly watchServiceAppJob: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
     ok: boolean;
     error: {
       code: string;
@@ -1005,22 +1890,56 @@ declare class ServiceAppsRoutesController {
   }, 500, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     data: {
-      actions: {
+      job: {
         id: string;
         appId: string;
-        name: string;
-        title?: string | undefined;
-        description?: string | undefined;
-        inputSchema?: {
-          [x: string]: _$hono_utils_types0.JSONValue;
+        instanceId: string;
+        componentId: string;
+        actionName: string;
+        status: _$_nextclaw_kernel0.ServiceAppJobStatus;
+        createdAt: string;
+        updatedAt: string;
+        startedAt?: string | undefined;
+        completedAt?: string | undefined;
+        cancelRequestedAt?: string | undefined;
+        retryOf?: string | undefined;
+        callId: string;
+        traceId: string;
+        caller?: {
+          surface: "panel" | "agent" | "installed-app-cli";
+          id?: string | undefined;
         } | undefined;
-        risk: _$_nextclaw_kernel0.ServiceActionRisk;
-        runtimeState?: _$_nextclaw_kernel0.ServiceActionRuntimeState | undefined;
-        grantState?: _$_nextclaw_kernel0.ServiceActionGrantState | undefined;
-      }[];
+        error?: {
+          code?: string | undefined;
+          message: string;
+        } | undefined;
+      };
+      events: ({
+        sequence: number;
+        timestamp: string;
+        type: "progress";
+        current?: number | undefined;
+        total?: number | undefined;
+        message?: string | undefined;
+      } | {
+        sequence: number;
+        timestamp: string;
+        type: "stream-chunk";
+        content: string;
+      } | {
+        sequence: number;
+        timestamp: string;
+        type: "terminal";
+        status: _$_nextclaw_kernel0.ServiceAppTerminalJobStatus;
+        error?: {
+          code?: string | undefined;
+          message: string;
+        } | undefined;
+      })[];
+      cursor: number;
     };
   }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
-  readonly discoverServiceAppActions: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+  readonly cancelServiceAppJob: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
     ok: boolean;
     error: {
       code: string;
@@ -1041,22 +1960,80 @@ declare class ServiceAppsRoutesController {
   }, 500, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     data: {
-      actions: {
+      id: string;
+      appId: string;
+      instanceId: string;
+      componentId: string;
+      actionName: string;
+      status: _$_nextclaw_kernel0.ServiceAppJobStatus;
+      createdAt: string;
+      updatedAt: string;
+      startedAt?: string | undefined;
+      completedAt?: string | undefined;
+      cancelRequestedAt?: string | undefined;
+      retryOf?: string | undefined;
+      callId: string;
+      traceId: string;
+      caller?: {
+        surface: "panel" | "agent" | "installed-app-cli";
+        id?: string | undefined;
+      } | undefined;
+      error?: {
+        code?: string | undefined;
+        message: string;
+      } | undefined;
+    };
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
+  /** Inspect durable Resident delivery facts; payload stays private to the instance journal. */
+  readonly listResidentInbox: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 400 | 401 | 403 | 404 | 422 | 502, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 500, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    data: {
+      entries: {
         id: string;
         appId: string;
-        name: string;
-        title?: string | undefined;
-        description?: string | undefined;
-        inputSchema?: {
-          [x: string]: _$hono_utils_types0.JSONValue;
+        instanceId: string;
+        componentId: string;
+        eventId: string;
+        streamKey: string;
+        sequence: number;
+        status: _$_nextclaw_kernel0.ServiceAppResidentEventStatus;
+        receivedAt: string;
+        updatedAt: string;
+        attempt: number;
+        leaseExpiresAt?: string | undefined;
+        nextAttemptAt?: string | undefined;
+        ackedAt?: string | undefined;
+        deadLetteredAt?: string | undefined;
+        lastError?: {
+          code?: string | undefined;
+          message: string;
         } | undefined;
-        risk: _$_nextclaw_kernel0.ServiceActionRisk;
-        runtimeState?: _$_nextclaw_kernel0.ServiceActionRuntimeState | undefined;
-        grantState?: _$_nextclaw_kernel0.ServiceActionGrantState | undefined;
       }[];
+      cursors: {
+        [x: string]: number;
+      };
+      frozen: boolean;
     };
   }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
-  readonly invokeServiceAction: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+  readonly replayResidentDeadLetter: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
     ok: boolean;
     error: {
       code: string;
@@ -1077,8 +2054,25 @@ declare class ServiceAppsRoutesController {
   }, 500, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     data: {
-      actionId: string;
-      result: _$hono_utils_types0.JSONValue;
+      id: string;
+      appId: string;
+      instanceId: string;
+      componentId: string;
+      eventId: string;
+      streamKey: string;
+      sequence: number;
+      status: _$_nextclaw_kernel0.ServiceAppResidentEventStatus;
+      receivedAt: string;
+      updatedAt: string;
+      attempt: number;
+      leaseExpiresAt?: string | undefined;
+      nextAttemptAt?: string | undefined;
+      ackedAt?: string | undefined;
+      deadLetteredAt?: string | undefined;
+      lastError?: {
+        code?: string | undefined;
+        message: string;
+      } | undefined;
     };
   }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
   readonly grantServiceAction: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
@@ -1293,6 +2287,12 @@ declare class ServiceAppsRoutesController {
           mode: AppDocumentAccessMode;
           description?: string | undefined;
         }[] | undefined;
+        secrets?: {
+          id: string;
+          title: string;
+          description: string;
+          required: boolean;
+        }[] | undefined;
         allowedDomains?: string[] | undefined;
         storage?: boolean | {
           namespace?: string | undefined;
@@ -1361,6 +2361,10 @@ declare class ServiceAppsRoutesController {
   private requireBridgeSession;
   private readOptionalBridgeSession;
   private readCallerQuery;
+  private readOptionalQuery;
+  private readLocale;
+  private readLimit;
+  private readAfterSequence;
   private handleServiceAppError;
 }
 //#endregion
@@ -1383,6 +2387,13 @@ type ServiceActionGrantBatchRequestView = {
 type ServiceActionGrantListView = {
   grants: ServiceActionGrantView[];
 };
+type ServiceAppJobListView = ServiceAppJobList;
+type ServiceAppJobViewResponse = ServiceAppJobView;
+type ServiceAppJobWatchView = ServiceAppJobWatch;
+type RuntimeVerificationRecordListView = VerificationRecordList;
+type PortableRuntimeAcceptanceContractApiView = PortableRuntimeAcceptanceContractView;
+type PortableRuntimeAcceptanceStatusApiView = PortableRuntimeAcceptanceStatusView;
+type PortableRuntimeAcceptanceExportApiView = PortableRuntimeAcceptanceStatusView;
 //#endregion
 //#region src/features/sessions/types/session-observation-api.types.d.ts
 type UiNcpSessionObservationKind = "context" | "events";
@@ -2659,7 +3670,7 @@ type UiExtensionHost = {
   getChannelBindings: () => ExtensionChannelBinding[];
   getUiMetadata: () => ExtensionUiMetadata[];
 };
-type UiKernelHost = Pick<NextclawKernel, "assetStore" | "eventBus" | "ingress" | "inboxDeliveryManager" | "systemObjectReferenceManager" | "isSessionRunning" | "listSessionTypes" | "agentRunRequestManager" | "agentContextWindowManager" | "appPackageManager" | "appDataManager" | "llmProviders" | "providerModelCatalog" | "sessionManager" | "sessionRunManager" | "observations" | "extensions" | "capabilityGrants" | "featureControls" | "panelAppManager" | "preferenceManager" | "projectManager" | "serviceAppManager" | "sessionContextCompactionManager"> & {
+type UiKernelHost = Pick<NextclawKernel, "assetStore" | "eventBus" | "ingress" | "inboxDeliveryManager" | "systemObjectReferenceManager" | "isSessionRunning" | "listSessionTypes" | "agentRunRequestManager" | "agentContextWindowManager" | "appPackageManager" | "appDataManager" | "llmProviders" | "providerModelCatalog" | "sessionManager" | "sessionRunManager" | "observations" | "extensions" | "capabilityGrants" | "featureControls" | "portableRuntimeAcceptance" | "panelAppManager" | "preferenceManager" | "projectManager" | "serviceAppManager" | "sessionContextCompactionManager"> & {
   accessManager?: NextclawKernel["accessManager"];
 };
 type UiCronHost = {
@@ -3328,7 +4339,7 @@ declare class ConfigRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 404, "json">) | (Response & _$hono.TypedResponse<{
+  }, 400, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     error: {
       code: string;
@@ -3337,7 +4348,7 @@ declare class ConfigRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 400, "json">) | (Response & _$hono.TypedResponse<{
+  }, 404, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     data: {
       providerId: string;
@@ -3441,7 +4452,7 @@ declare class ConfigRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 404, "json">) | (Response & _$hono.TypedResponse<{
+  }, 400, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     error: {
       code: string;
@@ -3450,7 +4461,7 @@ declare class ConfigRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 400, "json">) | (Response & _$hono.TypedResponse<{
+  }, 404, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     data: {
       success: boolean;
@@ -3469,7 +4480,7 @@ declare class ConfigRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 404, "json">) | (Response & _$hono.TypedResponse<{
+  }, 400, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     error: {
       code: string;
@@ -3478,7 +4489,7 @@ declare class ConfigRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 400, "json">) | (Response & _$hono.TypedResponse<{
+  }, 404, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     data: {
       provider: string;
@@ -3505,7 +4516,7 @@ declare class ConfigRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 404, "json">) | (Response & _$hono.TypedResponse<{
+  }, 400, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     error: {
       code: string;
@@ -3514,7 +4525,7 @@ declare class ConfigRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 400, "json">) | (Response & _$hono.TypedResponse<{
+  }, 404, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     data: {
       provider: string;
@@ -3537,7 +4548,7 @@ declare class ConfigRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 404, "json">) | (Response & _$hono.TypedResponse<{
+  }, 400, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     error: {
       code: string;
@@ -3546,7 +4557,7 @@ declare class ConfigRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 400, "json">) | (Response & _$hono.TypedResponse<{
+  }, 404, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     data: {
       provider: string;
@@ -3564,7 +4575,7 @@ declare class ConfigRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 404, "json">) | (Response & _$hono.TypedResponse<{
+  }, 400, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     error: {
       code: string;
@@ -3573,7 +4584,7 @@ declare class ConfigRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 400, "json">) | (Response & _$hono.TypedResponse<{
+  }, 404, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     data: {
       provider: string;
@@ -3591,7 +4602,7 @@ declare class ConfigRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 404, "json">) | (Response & _$hono.TypedResponse<{
+  }, 400, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     error: {
       code: string;
@@ -3600,7 +4611,7 @@ declare class ConfigRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 400, "json">) | (Response & _$hono.TypedResponse<{
+  }, 404, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     data: {
       [x: string]: _$hono_utils_types0.JSONValue;
@@ -3615,7 +4626,7 @@ declare class ConfigRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 404, "json">) | (Response & _$hono.TypedResponse<{
+  }, 400, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     error: {
       code: string;
@@ -3624,7 +4635,7 @@ declare class ConfigRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 400, "json">) | (Response & _$hono.TypedResponse<{
+  }, 404, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     data: {
       channel: string;
@@ -3646,7 +4657,7 @@ declare class ConfigRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 404, "json">) | (Response & _$hono.TypedResponse<{
+  }, 400, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     error: {
       code: string;
@@ -3655,7 +4666,7 @@ declare class ConfigRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 400, "json">) | (Response & _$hono.TypedResponse<{
+  }, 404, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     data: {
       channel: string;
@@ -3675,7 +4686,7 @@ declare class ConfigRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 404, "json">) | (Response & _$hono.TypedResponse<{
+  }, 400, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     error: {
       code: string;
@@ -3684,7 +4695,7 @@ declare class ConfigRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 400, "json">) | (Response & _$hono.TypedResponse<{
+  }, 404, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     data: {
       channel: string;
@@ -3985,6 +4996,12 @@ declare class AppPackagesRoutesController {
               mode: AppDocumentAccessMode;
               description?: string | undefined;
             }[] | undefined;
+            secrets?: {
+              id: string;
+              title: string;
+              description: string;
+              required: boolean;
+            }[] | undefined;
             allowedDomains?: string[] | undefined;
             storage?: boolean | {
               namespace?: string | undefined;
@@ -4045,6 +5062,36 @@ declare class AppPackagesRoutesController {
             } | undefined;
           }[];
         };
+        secrets: {
+          readiness: {
+            status: _$_nextclaw_kernel0.AppPackageReadinessStatus;
+            requirements: {
+              componentId: string;
+              kind: "capability" | "configuration";
+              id: string;
+              title: string;
+              description?: string | undefined;
+              remediation?: {
+                kind: "agent-setup";
+                summary: string;
+                requiresUserAction?: boolean | undefined;
+              } | undefined;
+            }[];
+          };
+          slots: {
+            id: string;
+            description: string;
+            title: string;
+            required: boolean;
+            status: _$_nextclaw_kernel0.AppPackageSecretStatus;
+            binding?: {
+              source: "env" | "file" | "exec";
+              provider?: string | undefined;
+              id: string;
+            } | undefined;
+            errorCode?: "SECRET_BINDING_MISSING" | "SECRET_RESOLUTION_FAILED" | undefined;
+          }[];
+        };
         dependencies: {
           readiness: {
             status: _$_nextclaw_kernel0.AppPackageReadinessStatus;
@@ -4088,12 +5135,25 @@ declare class AppPackagesRoutesController {
                 id: string;
                 version?: string | undefined;
                 resourceTypes?: string[] | undefined;
+                wit?: {
+                  package: string;
+                  interface: string;
+                  version: string;
+                } | undefined;
               }[];
             }[];
           }[];
           resolvedProviderIds: {
             [x: string]: string[];
           };
+          diagnostics: {
+            code: _$_nextclaw_kernel0.AppPackageDependencyDiagnosticCode;
+            componentId: string;
+            requirementKind: "capability" | "resource";
+            requirementId: string;
+            providerId?: string | undefined;
+            message: string;
+          }[];
         };
       }[];
       hostTarget?: {
@@ -4131,15 +5191,6 @@ declare class AppPackagesRoutesController {
     };
   }, _$hono_utils_http_status0.ContentfulStatusCode, "json">>;
   readonly startInstallOperation: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
-    ok: boolean;
-    error: {
-      code: string;
-      message: string;
-      details: {
-        [x: string]: _$hono_utils_types0.JSONValue;
-      } | undefined;
-    };
-  }, 400 | 404 | 409, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     data: {
       id: string;
@@ -4162,8 +5213,7 @@ declare class AppPackagesRoutesController {
         dataRemoved?: boolean | undefined;
       } | undefined;
     };
-  }, 202, "json">)>;
-  readonly startUpdateOperation: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+  }, 202, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     error: {
       code: string;
@@ -4172,7 +5222,8 @@ declare class AppPackagesRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 400 | 404 | 409, "json">) | (Response & _$hono.TypedResponse<{
+  }, 400 | 404 | 409, "json">)>;
+  readonly startUpdateOperation: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
     ok: boolean;
     data: {
       id: string;
@@ -4195,8 +5246,7 @@ declare class AppPackagesRoutesController {
         dataRemoved?: boolean | undefined;
       } | undefined;
     };
-  }, 202, "json">)>;
-  readonly startRollbackOperation: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+  }, 202, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     error: {
       code: string;
@@ -4205,7 +5255,8 @@ declare class AppPackagesRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 400 | 404 | 409, "json">) | (Response & _$hono.TypedResponse<{
+  }, 400 | 404 | 409, "json">)>;
+  readonly startRollbackOperation: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
     ok: boolean;
     data: {
       id: string;
@@ -4228,8 +5279,7 @@ declare class AppPackagesRoutesController {
         dataRemoved?: boolean | undefined;
       } | undefined;
     };
-  }, 202, "json">)>;
-  readonly startUninstallOperation: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+  }, 202, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     error: {
       code: string;
@@ -4238,7 +5288,8 @@ declare class AppPackagesRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 400 | 404 | 409, "json">) | (Response & _$hono.TypedResponse<{
+  }, 400 | 404 | 409, "json">)>;
+  readonly startUninstallOperation: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
     ok: boolean;
     data: {
       id: string;
@@ -4261,7 +5312,16 @@ declare class AppPackagesRoutesController {
         dataRemoved?: boolean | undefined;
       } | undefined;
     };
-  }, 202, "json">)>;
+  }, 202, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 400 | 404 | 409, "json">)>;
   readonly get: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
     ok: boolean;
     error: {
@@ -4318,6 +5378,12 @@ declare class AppPackagesRoutesController {
             mode: AppDocumentAccessMode;
             description?: string | undefined;
           }[] | undefined;
+          secrets?: {
+            id: string;
+            title: string;
+            description: string;
+            required: boolean;
+          }[] | undefined;
           allowedDomains?: string[] | undefined;
           storage?: boolean | {
             namespace?: string | undefined;
@@ -4378,6 +5444,36 @@ declare class AppPackagesRoutesController {
           } | undefined;
         }[];
       };
+      secrets: {
+        readiness: {
+          status: _$_nextclaw_kernel0.AppPackageReadinessStatus;
+          requirements: {
+            componentId: string;
+            kind: "capability" | "configuration";
+            id: string;
+            title: string;
+            description?: string | undefined;
+            remediation?: {
+              kind: "agent-setup";
+              summary: string;
+              requiresUserAction?: boolean | undefined;
+            } | undefined;
+          }[];
+        };
+        slots: {
+          id: string;
+          description: string;
+          title: string;
+          required: boolean;
+          status: _$_nextclaw_kernel0.AppPackageSecretStatus;
+          binding?: {
+            source: "env" | "file" | "exec";
+            provider?: string | undefined;
+            id: string;
+          } | undefined;
+          errorCode?: "SECRET_BINDING_MISSING" | "SECRET_RESOLUTION_FAILED" | undefined;
+        }[];
+      };
       dependencies: {
         readiness: {
           status: _$_nextclaw_kernel0.AppPackageReadinessStatus;
@@ -4421,12 +5517,25 @@ declare class AppPackagesRoutesController {
               id: string;
               version?: string | undefined;
               resourceTypes?: string[] | undefined;
+              wit?: {
+                package: string;
+                interface: string;
+                version: string;
+              } | undefined;
             }[];
           }[];
         }[];
         resolvedProviderIds: {
           [x: string]: string[];
         };
+        diagnostics: {
+          code: _$_nextclaw_kernel0.AppPackageDependencyDiagnosticCode;
+          componentId: string;
+          requirementKind: "capability" | "resource";
+          requirementId: string;
+          providerId?: string | undefined;
+          message: string;
+        }[];
       };
     };
   }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
@@ -4484,12 +5593,25 @@ declare class AppPackagesRoutesController {
             id: string;
             version?: string | undefined;
             resourceTypes?: string[] | undefined;
+            wit?: {
+              package: string;
+              interface: string;
+              version: string;
+            } | undefined;
           }[];
         }[];
       }[];
       resolvedProviderIds: {
         [x: string]: string[];
       };
+      diagnostics: {
+        code: _$_nextclaw_kernel0.AppPackageDependencyDiagnosticCode;
+        componentId: string;
+        requirementKind: "capability" | "resource";
+        requirementId: string;
+        providerId?: string | undefined;
+        message: string;
+      }[];
     };
   }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
   readonly verifyDependencies: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
@@ -4546,12 +5668,25 @@ declare class AppPackagesRoutesController {
             id: string;
             version?: string | undefined;
             resourceTypes?: string[] | undefined;
+            wit?: {
+              package: string;
+              interface: string;
+              version: string;
+            } | undefined;
           }[];
         }[];
       }[];
       resolvedProviderIds: {
         [x: string]: string[];
       };
+      diagnostics: {
+        code: _$_nextclaw_kernel0.AppPackageDependencyDiagnosticCode;
+        componentId: string;
+        requirementKind: "capability" | "resource";
+        requirementId: string;
+        providerId?: string | undefined;
+        message: string;
+      }[];
     };
   }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
   readonly setupDependencies: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
@@ -4608,15 +5743,220 @@ declare class AppPackagesRoutesController {
             id: string;
             version?: string | undefined;
             resourceTypes?: string[] | undefined;
+            wit?: {
+              package: string;
+              interface: string;
+              version: string;
+            } | undefined;
+          }[];
+        }[];
+      }[];
+      resolvedProviderIds: {
+        [x: string]: string[];
+      };
+      diagnostics: {
+        code: _$_nextclaw_kernel0.AppPackageDependencyDiagnosticCode;
+        componentId: string;
+        requirementKind: "capability" | "resource";
+        requirementId: string;
+        providerId?: string | undefined;
+        message: string;
+      }[];
+    };
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
+  readonly bindDependency: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 400 | 404 | 409, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    data: {
+      readiness: {
+        status: _$_nextclaw_kernel0.AppPackageReadinessStatus;
+        requirements: {
+          componentId: string;
+          kind: "capability" | "configuration";
+          id: string;
+          title: string;
+          description?: string | undefined;
+          remediation?: {
+            kind: "agent-setup";
+            summary: string;
+            requiresUserAction?: boolean | undefined;
+          } | undefined;
+        }[];
+      };
+      bindings: {
+        componentId: string;
+        requirementKind: "capability" | "resource";
+        requirementId: string;
+        providerId: string;
+      }[];
+      candidates: {
+        requirement: {
+          componentId: string;
+          kind: "capability" | "configuration";
+          id: string;
+          title: string;
+          description?: string | undefined;
+          remediation?: {
+            kind: "agent-setup";
+            summary: string;
+            requiresUserAction?: boolean | undefined;
+          } | undefined;
+        };
+        providers: {
+          providerId: string;
+          appId: string;
+          componentId: string;
+          capabilities: {
+            id: string;
+            version?: string | undefined;
+            resourceTypes?: string[] | undefined;
+            wit?: {
+              package: string;
+              interface: string;
+              version: string;
+            } | undefined;
+          }[];
+        }[];
+      }[];
+      resolvedProviderIds: {
+        [x: string]: string[];
+      };
+      diagnostics: {
+        code: _$_nextclaw_kernel0.AppPackageDependencyDiagnosticCode;
+        componentId: string;
+        requirementKind: "capability" | "resource";
+        requirementId: string;
+        providerId?: string | undefined;
+        message: string;
+      }[];
+    };
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
+  readonly unbindDependency: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 400 | 404 | 409, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    data: {
+      readiness: {
+        status: _$_nextclaw_kernel0.AppPackageReadinessStatus;
+        requirements: {
+          componentId: string;
+          kind: "capability" | "configuration";
+          id: string;
+          title: string;
+          description?: string | undefined;
+          remediation?: {
+            kind: "agent-setup";
+            summary: string;
+            requiresUserAction?: boolean | undefined;
+          } | undefined;
+        }[];
+      };
+      bindings: {
+        componentId: string;
+        requirementKind: "capability" | "resource";
+        requirementId: string;
+        providerId: string;
+      }[];
+      candidates: {
+        requirement: {
+          componentId: string;
+          kind: "capability" | "configuration";
+          id: string;
+          title: string;
+          description?: string | undefined;
+          remediation?: {
+            kind: "agent-setup";
+            summary: string;
+            requiresUserAction?: boolean | undefined;
+          } | undefined;
+        };
+        providers: {
+          providerId: string;
+          appId: string;
+          componentId: string;
+          capabilities: {
+            id: string;
+            version?: string | undefined;
+            resourceTypes?: string[] | undefined;
+            wit?: {
+              package: string;
+              interface: string;
+              version: string;
+            } | undefined;
           }[];
         }[];
       }[];
       resolvedProviderIds: {
         [x: string]: string[];
       };
+      diagnostics: {
+        code: _$_nextclaw_kernel0.AppPackageDependencyDiagnosticCode;
+        componentId: string;
+        requirementKind: "capability" | "resource";
+        requirementId: string;
+        providerId?: string | undefined;
+        message: string;
+      }[];
+    };
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
+  readonly inspectSecrets: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 400 | 404 | 409, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    data: {
+      readiness: {
+        status: _$_nextclaw_kernel0.AppPackageReadinessStatus;
+        requirements: {
+          componentId: string;
+          kind: "capability" | "configuration";
+          id: string;
+          title: string;
+          description?: string | undefined;
+          remediation?: {
+            kind: "agent-setup";
+            summary: string;
+            requiresUserAction?: boolean | undefined;
+          } | undefined;
+        }[];
+      };
+      slots: {
+        id: string;
+        description: string;
+        title: string;
+        required: boolean;
+        status: _$_nextclaw_kernel0.AppPackageSecretStatus;
+        binding?: {
+          source: "env" | "file" | "exec";
+          provider?: string | undefined;
+          id: string;
+        } | undefined;
+        errorCode?: "SECRET_BINDING_MISSING" | "SECRET_RESOLUTION_FAILED" | undefined;
+      }[];
     };
   }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
-  readonly bindDependency: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+  readonly verifySecrets: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
     ok: boolean;
     error: {
       code: string;
@@ -4643,42 +5983,22 @@ declare class AppPackagesRoutesController {
           } | undefined;
         }[];
       };
-      bindings: {
-        componentId: string;
-        requirementKind: "capability" | "resource";
-        requirementId: string;
-        providerId: string;
-      }[];
-      candidates: {
-        requirement: {
-          componentId: string;
-          kind: "capability" | "configuration";
+      slots: {
+        id: string;
+        description: string;
+        title: string;
+        required: boolean;
+        status: _$_nextclaw_kernel0.AppPackageSecretStatus;
+        binding?: {
+          source: "env" | "file" | "exec";
+          provider?: string | undefined;
           id: string;
-          title: string;
-          description?: string | undefined;
-          remediation?: {
-            kind: "agent-setup";
-            summary: string;
-            requiresUserAction?: boolean | undefined;
-          } | undefined;
-        };
-        providers: {
-          providerId: string;
-          appId: string;
-          componentId: string;
-          capabilities: {
-            id: string;
-            version?: string | undefined;
-            resourceTypes?: string[] | undefined;
-          }[];
-        }[];
+        } | undefined;
+        errorCode?: "SECRET_BINDING_MISSING" | "SECRET_RESOLUTION_FAILED" | undefined;
       }[];
-      resolvedProviderIds: {
-        [x: string]: string[];
-      };
     };
   }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
-  readonly unbindDependency: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+  readonly bindSecret: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
     ok: boolean;
     error: {
       code: string;
@@ -4705,14 +6025,36 @@ declare class AppPackagesRoutesController {
           } | undefined;
         }[];
       };
-      bindings: {
-        componentId: string;
-        requirementKind: "capability" | "resource";
-        requirementId: string;
-        providerId: string;
+      slots: {
+        id: string;
+        description: string;
+        title: string;
+        required: boolean;
+        status: _$_nextclaw_kernel0.AppPackageSecretStatus;
+        binding?: {
+          source: "env" | "file" | "exec";
+          provider?: string | undefined;
+          id: string;
+        } | undefined;
+        errorCode?: "SECRET_BINDING_MISSING" | "SECRET_RESOLUTION_FAILED" | undefined;
       }[];
-      candidates: {
-        requirement: {
+    };
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
+  readonly unbindSecret: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
+    ok: boolean;
+    error: {
+      code: string;
+      message: string;
+      details: {
+        [x: string]: _$hono_utils_types0.JSONValue;
+      } | undefined;
+    };
+  }, 400 | 404 | 409, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    data: {
+      readiness: {
+        status: _$_nextclaw_kernel0.AppPackageReadinessStatus;
+        requirements: {
           componentId: string;
           kind: "capability" | "configuration";
           id: string;
@@ -4723,21 +6065,21 @@ declare class AppPackagesRoutesController {
             summary: string;
             requiresUserAction?: boolean | undefined;
           } | undefined;
-        };
-        providers: {
-          providerId: string;
-          appId: string;
-          componentId: string;
-          capabilities: {
-            id: string;
-            version?: string | undefined;
-            resourceTypes?: string[] | undefined;
-          }[];
         }[];
-      }[];
-      resolvedProviderIds: {
-        [x: string]: string[];
       };
+      slots: {
+        id: string;
+        description: string;
+        title: string;
+        required: boolean;
+        status: _$_nextclaw_kernel0.AppPackageSecretStatus;
+        binding?: {
+          source: "env" | "file" | "exec";
+          provider?: string | undefined;
+          id: string;
+        } | undefined;
+        errorCode?: "SECRET_BINDING_MISSING" | "SECRET_RESOLUTION_FAILED" | undefined;
+      }[];
     };
   }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
   readonly install: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
@@ -4796,6 +6138,12 @@ declare class AppPackagesRoutesController {
             mode: AppDocumentAccessMode;
             description?: string | undefined;
           }[] | undefined;
+          secrets?: {
+            id: string;
+            title: string;
+            description: string;
+            required: boolean;
+          }[] | undefined;
           allowedDomains?: string[] | undefined;
           storage?: boolean | {
             namespace?: string | undefined;
@@ -4856,6 +6204,36 @@ declare class AppPackagesRoutesController {
           } | undefined;
         }[];
       };
+      secrets: {
+        readiness: {
+          status: _$_nextclaw_kernel0.AppPackageReadinessStatus;
+          requirements: {
+            componentId: string;
+            kind: "capability" | "configuration";
+            id: string;
+            title: string;
+            description?: string | undefined;
+            remediation?: {
+              kind: "agent-setup";
+              summary: string;
+              requiresUserAction?: boolean | undefined;
+            } | undefined;
+          }[];
+        };
+        slots: {
+          id: string;
+          description: string;
+          title: string;
+          required: boolean;
+          status: _$_nextclaw_kernel0.AppPackageSecretStatus;
+          binding?: {
+            source: "env" | "file" | "exec";
+            provider?: string | undefined;
+            id: string;
+          } | undefined;
+          errorCode?: "SECRET_BINDING_MISSING" | "SECRET_RESOLUTION_FAILED" | undefined;
+        }[];
+      };
       dependencies: {
         readiness: {
           status: _$_nextclaw_kernel0.AppPackageReadinessStatus;
@@ -4899,12 +6277,25 @@ declare class AppPackagesRoutesController {
               id: string;
               version?: string | undefined;
               resourceTypes?: string[] | undefined;
+              wit?: {
+                package: string;
+                interface: string;
+                version: string;
+              } | undefined;
             }[];
           }[];
         }[];
         resolvedProviderIds: {
           [x: string]: string[];
         };
+        diagnostics: {
+          code: _$_nextclaw_kernel0.AppPackageDependencyDiagnosticCode;
+          componentId: string;
+          requirementKind: "capability" | "resource";
+          requirementId: string;
+          providerId?: string | undefined;
+          message: string;
+        }[];
       };
     };
   }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
@@ -4964,6 +6355,12 @@ declare class AppPackagesRoutesController {
             mode: AppDocumentAccessMode;
             description?: string | undefined;
           }[] | undefined;
+          secrets?: {
+            id: string;
+            title: string;
+            description: string;
+            required: boolean;
+          }[] | undefined;
           allowedDomains?: string[] | undefined;
           storage?: boolean | {
             namespace?: string | undefined;
@@ -5024,6 +6421,36 @@ declare class AppPackagesRoutesController {
           } | undefined;
         }[];
       };
+      secrets: {
+        readiness: {
+          status: _$_nextclaw_kernel0.AppPackageReadinessStatus;
+          requirements: {
+            componentId: string;
+            kind: "capability" | "configuration";
+            id: string;
+            title: string;
+            description?: string | undefined;
+            remediation?: {
+              kind: "agent-setup";
+              summary: string;
+              requiresUserAction?: boolean | undefined;
+            } | undefined;
+          }[];
+        };
+        slots: {
+          id: string;
+          description: string;
+          title: string;
+          required: boolean;
+          status: _$_nextclaw_kernel0.AppPackageSecretStatus;
+          binding?: {
+            source: "env" | "file" | "exec";
+            provider?: string | undefined;
+            id: string;
+          } | undefined;
+          errorCode?: "SECRET_BINDING_MISSING" | "SECRET_RESOLUTION_FAILED" | undefined;
+        }[];
+      };
       dependencies: {
         readiness: {
           status: _$_nextclaw_kernel0.AppPackageReadinessStatus;
@@ -5067,12 +6494,25 @@ declare class AppPackagesRoutesController {
               id: string;
               version?: string | undefined;
               resourceTypes?: string[] | undefined;
+              wit?: {
+                package: string;
+                interface: string;
+                version: string;
+              } | undefined;
             }[];
           }[];
         }[];
         resolvedProviderIds: {
           [x: string]: string[];
         };
+        diagnostics: {
+          code: _$_nextclaw_kernel0.AppPackageDependencyDiagnosticCode;
+          componentId: string;
+          requirementKind: "capability" | "resource";
+          requirementId: string;
+          providerId?: string | undefined;
+          message: string;
+        }[];
       };
     };
   }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
@@ -5132,6 +6572,12 @@ declare class AppPackagesRoutesController {
             mode: AppDocumentAccessMode;
             description?: string | undefined;
           }[] | undefined;
+          secrets?: {
+            id: string;
+            title: string;
+            description: string;
+            required: boolean;
+          }[] | undefined;
           allowedDomains?: string[] | undefined;
           storage?: boolean | {
             namespace?: string | undefined;
@@ -5192,6 +6638,36 @@ declare class AppPackagesRoutesController {
           } | undefined;
         }[];
       };
+      secrets: {
+        readiness: {
+          status: _$_nextclaw_kernel0.AppPackageReadinessStatus;
+          requirements: {
+            componentId: string;
+            kind: "capability" | "configuration";
+            id: string;
+            title: string;
+            description?: string | undefined;
+            remediation?: {
+              kind: "agent-setup";
+              summary: string;
+              requiresUserAction?: boolean | undefined;
+            } | undefined;
+          }[];
+        };
+        slots: {
+          id: string;
+          description: string;
+          title: string;
+          required: boolean;
+          status: _$_nextclaw_kernel0.AppPackageSecretStatus;
+          binding?: {
+            source: "env" | "file" | "exec";
+            provider?: string | undefined;
+            id: string;
+          } | undefined;
+          errorCode?: "SECRET_BINDING_MISSING" | "SECRET_RESOLUTION_FAILED" | undefined;
+        }[];
+      };
       dependencies: {
         readiness: {
           status: _$_nextclaw_kernel0.AppPackageReadinessStatus;
@@ -5235,12 +6711,25 @@ declare class AppPackagesRoutesController {
               id: string;
               version?: string | undefined;
               resourceTypes?: string[] | undefined;
+              wit?: {
+                package: string;
+                interface: string;
+                version: string;
+              } | undefined;
             }[];
           }[];
         }[];
         resolvedProviderIds: {
           [x: string]: string[];
         };
+        diagnostics: {
+          code: _$_nextclaw_kernel0.AppPackageDependencyDiagnosticCode;
+          componentId: string;
+          requirementKind: "capability" | "resource";
+          requirementId: string;
+          providerId?: string | undefined;
+          message: string;
+        }[];
       };
     };
   }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
@@ -5301,6 +6790,12 @@ declare class AppPackagesRoutesController {
               mode: AppDocumentAccessMode;
               description?: string | undefined;
             }[] | undefined;
+            secrets?: {
+              id: string;
+              title: string;
+              description: string;
+              required: boolean;
+            }[] | undefined;
             allowedDomains?: string[] | undefined;
             storage?: boolean | {
               namespace?: string | undefined;
@@ -5361,6 +6856,36 @@ declare class AppPackagesRoutesController {
             } | undefined;
           }[];
         };
+        secrets: {
+          readiness: {
+            status: _$_nextclaw_kernel0.AppPackageReadinessStatus;
+            requirements: {
+              componentId: string;
+              kind: "capability" | "configuration";
+              id: string;
+              title: string;
+              description?: string | undefined;
+              remediation?: {
+                kind: "agent-setup";
+                summary: string;
+                requiresUserAction?: boolean | undefined;
+              } | undefined;
+            }[];
+          };
+          slots: {
+            id: string;
+            description: string;
+            title: string;
+            required: boolean;
+            status: _$_nextclaw_kernel0.AppPackageSecretStatus;
+            binding?: {
+              source: "env" | "file" | "exec";
+              provider?: string | undefined;
+              id: string;
+            } | undefined;
+            errorCode?: "SECRET_BINDING_MISSING" | "SECRET_RESOLUTION_FAILED" | undefined;
+          }[];
+        };
         dependencies: {
           readiness: {
             status: _$_nextclaw_kernel0.AppPackageReadinessStatus;
@@ -5404,12 +6929,25 @@ declare class AppPackagesRoutesController {
                 id: string;
                 version?: string | undefined;
                 resourceTypes?: string[] | undefined;
+                wit?: {
+                  package: string;
+                  interface: string;
+                  version: string;
+                } | undefined;
               }[];
             }[];
           }[];
           resolvedProviderIds: {
             [x: string]: string[];
           };
+          diagnostics: {
+            code: _$_nextclaw_kernel0.AppPackageDependencyDiagnosticCode;
+            componentId: string;
+            requirementKind: "capability" | "resource";
+            requirementId: string;
+            providerId?: string | undefined;
+            message: string;
+          }[];
         };
       };
       result: {
@@ -5447,6 +6985,12 @@ declare class AppPackagesRoutesController {
             mode: AppDocumentAccessMode;
             description?: string | undefined;
           }[] | undefined;
+          secrets?: {
+            id: string;
+            title: string;
+            description: string;
+            required: boolean;
+          }[] | undefined;
           allowedDomains?: string[] | undefined;
           storage?: boolean | {
             namespace?: string | undefined;
@@ -5553,6 +7097,12 @@ declare class AppPackagesRoutesController {
               mode: AppDocumentAccessMode;
               description?: string | undefined;
             }[] | undefined;
+            secrets?: {
+              id: string;
+              title: string;
+              description: string;
+              required: boolean;
+            }[] | undefined;
             allowedDomains?: string[] | undefined;
             storage?: boolean | {
               namespace?: string | undefined;
@@ -5613,6 +7163,36 @@ declare class AppPackagesRoutesController {
             } | undefined;
           }[];
         };
+        secrets: {
+          readiness: {
+            status: _$_nextclaw_kernel0.AppPackageReadinessStatus;
+            requirements: {
+              componentId: string;
+              kind: "capability" | "configuration";
+              id: string;
+              title: string;
+              description?: string | undefined;
+              remediation?: {
+                kind: "agent-setup";
+                summary: string;
+                requiresUserAction?: boolean | undefined;
+              } | undefined;
+            }[];
+          };
+          slots: {
+            id: string;
+            description: string;
+            title: string;
+            required: boolean;
+            status: _$_nextclaw_kernel0.AppPackageSecretStatus;
+            binding?: {
+              source: "env" | "file" | "exec";
+              provider?: string | undefined;
+              id: string;
+            } | undefined;
+            errorCode?: "SECRET_BINDING_MISSING" | "SECRET_RESOLUTION_FAILED" | undefined;
+          }[];
+        };
         dependencies: {
           readiness: {
             status: _$_nextclaw_kernel0.AppPackageReadinessStatus;
@@ -5656,12 +7236,25 @@ declare class AppPackagesRoutesController {
                 id: string;
                 version?: string | undefined;
                 resourceTypes?: string[] | undefined;
+                wit?: {
+                  package: string;
+                  interface: string;
+                  version: string;
+                } | undefined;
               }[];
             }[];
           }[];
           resolvedProviderIds: {
             [x: string]: string[];
           };
+          diagnostics: {
+            code: _$_nextclaw_kernel0.AppPackageDependencyDiagnosticCode;
+            componentId: string;
+            requirementKind: "capability" | "resource";
+            requirementId: string;
+            providerId?: string | undefined;
+            message: string;
+          }[];
         };
       };
       result: {
@@ -5743,14 +7336,6 @@ declare class AppDataRoutesController {
     };
   }, _$hono_utils_http_status0.ContentfulStatusCode, "json">>;
   readonly deleteRetained: (c: Context) => Promise<(Response & _$hono.TypedResponse<{
-    ok: boolean;
-    data: {
-      deleted: true;
-      id: string;
-      appId: string;
-      instanceId: string;
-    };
-  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">) | (Response & _$hono.TypedResponse<{
     ok: boolean;
     error: {
       code: string;
@@ -5759,7 +7344,15 @@ declare class AppDataRoutesController {
         [x: string]: _$hono_utils_types0.JSONValue;
       } | undefined;
     };
-  }, 400 | 404 | 409, "json">)>;
+  }, 400 | 404 | 409, "json">) | (Response & _$hono.TypedResponse<{
+    ok: boolean;
+    data: {
+      deleted: true;
+      id: string;
+      appId: string;
+      instanceId: string;
+    };
+  }, _$hono_utils_http_status0.ContentfulStatusCode, "json">)>;
 }
 //#endregion
 //#region src/features/inbox-deliveries/controllers/inbox-deliveries.controller.d.ts
@@ -5856,5 +7449,5 @@ declare class InboxDeliveriesRoutesController {
   private handleManagerAction;
 }
 //#endregion
-export { AgentBindingView, type AgentCreateRequest, type AgentDeleteResult, type AgentProfileView, type AgentUpdateRequest, ApiError, ApiResponse, type AppDataDeleteResult, type AppDataEntry, type AppDataList, AppDataRoutesController, AppMetaView, type AppPackageHostTarget, type AppPackageList, type AppPackageOperationInput, type AppPackageOperationList, type AppPackageOperationStatus, type AppPackageOperationView, type AppPackageView, AppPackagesRoutesController, AuthEnabledUpdateRequest, AuthLoginRequest, AuthPasswordUpdateRequest, AuthSetupRequest, AuthStatusView, BindingPeerView, BochaFreshnessValue, BootstrapPhase, BootstrapRemoteState, BootstrapStageState, BootstrapStatusView, ChannelAuthConnectRequest, ChannelAuthConnectResult, ChannelAuthPollRequest, ChannelAuthPollResult, ChannelAuthStartRequest, ChannelAuthStartResult, ChannelSpecView, type ChatSessionTypeCtaView, type ChatSessionTypeOptionView, type ChatSessionTypesView, ConfigActionExecuteRequest, ConfigActionExecuteResult, ConfigActionManifest, ConfigActionType, ConfigMetaView, ConfigRoutesController, ConfigSchemaResponse, ConfigUiHint, ConfigUiHints, ConfigView, CronActionResult, CronCreateRequest, CronCreateResult, CronEnableRequest, CronJobStateView, CronJobView, CronListQuery, CronListStatus, CronListSummaryView, CronListView, CronPayloadView, CronRunRequest, CronScheduleView, InboxDeliveriesRoutesController, MarketplaceApiConfig, MarketplaceInstallKind, MarketplaceInstallRequest, MarketplaceInstallResult, MarketplaceInstallSkillParams, MarketplaceInstallSpec, MarketplaceInstalledRecord, MarketplaceInstalledView, MarketplaceInstaller, MarketplaceItemSummary, MarketplaceItemType, MarketplaceItemView, MarketplaceListView, MarketplaceLocalizedTextMap, MarketplaceManageAction, MarketplaceManageRequest, MarketplaceManageResult, MarketplaceMcpContentView, MarketplaceMcpDoctorResult, MarketplaceMcpInstallKind, MarketplaceMcpInstallRequest, MarketplaceMcpInstallResult, MarketplaceMcpInstallSpec, MarketplaceMcpManageAction, MarketplaceMcpManageRequest, MarketplaceMcpManageResult, MarketplaceMcpTemplateInput, MarketplaceRecommendationView, MarketplaceSceneView, MarketplaceScenesView, MarketplaceSkillContentView, MarketplaceSkillInstallKind, MarketplaceSkillInstallRequest, MarketplaceSkillInstallResult, MarketplaceSkillManageAction, MarketplaceSkillManageRequest, MarketplaceSkillManageResult, MarketplaceSort, McpConnectionCreateResult, McpConnectionRequest, McpConnectionTestResult, NcpAssetRoutesController, NcpSessionContextCompactionView, NcpSessionSkillsView, PanelAppAgentCapabilityView, PanelAppAgentGenerateObjectRequestView, PanelAppAgentGenerateObjectResultView, PanelAppAgentSendRequestView, PanelAppAgentSendResultView, PanelAppBridgeSessionCreateRequest, PanelAppBridgeSessionView, PanelAppCapabilityGrantView, PanelAppClientGrantView, PanelAppDeleteResultView, PanelAppEntryView, PanelAppListView, PanelAppPreferencesUpdateView, PanelAppsRoutesController, PreferenceDeleteResult, PreferenceEntryView, PreferenceUpdateRequest, PreferencesRoutesController, ProductAnalyticsAudience, ProductAnalyticsConfigUpdate, type ProductAnalyticsStatusView, ProductAnalyticsView, type ProjectAddExistingRequest, type ProjectCreateRequest, type ProjectListView, type ProjectTemplateView, type ProjectView, ProviderAuthImportResult, ProviderAuthPollRequest, ProviderAuthPollResult, ProviderAuthStartRequest, ProviderAuthStartResult, ProviderConfigUpdate, ProviderConfigView, ProviderConnectionTestRequest, ProviderConnectionTestResult, ProviderCreateRequest, ProviderCreateResult, ProviderDeleteResult, ProviderInstanceView, ProviderModelCatalogView, ProviderModelDiscoveryRequest, ProviderModelDiscoveryResult, ProviderTemplateView, ProviderTemplatesView, ProvidersView, RemoteAccessView, RemoteAccountProfileUpdateRequest, RemoteAccountView, RemoteBrowserAuthPollRequest, RemoteBrowserAuthPollResult, RemoteBrowserAuthStartRequest, RemoteBrowserAuthStartResult, RemoteConnectionDiagnosticsView, RemoteDisconnectView, RemoteDoctorCheckView, RemoteDoctorView, RemoteLoginRequest, RemoteRuntimeView, RemoteServiceAction, RemoteServiceActionResult, RemoteServiceView, RemoteSettingsUpdateRequest, RemoteSettingsView, RuntimeActionCapability, RuntimeActionImpact, RuntimeConfigUpdate, RuntimeControlAction, RuntimeControlActionResult, RuntimeControlEnvironment, RuntimeControlRoutesController, RuntimeControlView, RuntimeEntryView, RuntimeLifecycleState, RuntimePendingRestart, RuntimeServiceState, SearchConfigUpdate, SearchConfigView, SearchProviderConfigView, SearchProviderName, SearchProviderSpecView, SecretProviderEnvView, SecretProviderExecView, SecretProviderFileView, SecretProviderView, SecretRefView, SecretSourceView, SecretsConfigUpdate, SecretsView, ServerPathBreadcrumbView, ServerPathBrowseView, ServerPathDirectoryCreateRequest, ServerPathDirectoryCreateView, ServerPathEntryDeleteView, ServerPathEntryRenameRequest, ServerPathEntryRenameView, ServerPathEntryView, ServerPathFileCreateRequest, ServerPathFileCreateView, ServerPathFilesUploadView, ServerPathLocationView, ServerPathReadView, ServerPathSearchEntryView, ServerPathSearchView, ServerPathWatchRequest, ServerPathWatchView, ServiceActionGrantBatchRequestView, ServiceActionGrantListView, ServiceActionGrantView, ServiceActionInvokeRequestView, ServiceActionInvokeResultView, ServiceActionListView, ServiceActionView, ServiceAppDeleteResultView, ServiceAppListView, ServiceAppRecordView, ServiceAppsRoutesController, SessionConfigView, SessionEntryView, SessionEventView, SessionHistoryView, SessionMessageView, SessionPatchUpdate, SessionSkillEntryView, SessionTypeDescribeParams, SessionsListView, TavilySearchDepthValue, UiNcpAssetPutView, UiNcpAssetService, UiNcpAssetView, UiNcpSessionListView, UiNcpSessionMessagesView, UiNcpSessionObservationKind, UiNcpSessionObservationView, UiNcpSessionObservationsView, UiNcpSessionPendingInputView, UiNcpSessionPendingInputsView, UiNcpSessionQueuedInputView, UiNcpSessionQueuedInputsView, UiNcpSessionService, UiNcpSessionTokenUsageView, UiNcpStoredAssetRecord, type UiRemoteAccessHost, type UiRouterOptions, type UiRuntimeControlHost, type UiRuntimeUpdateHost, UiServerEvent, UiServerHandle, buildConfigMeta, buildConfigSchemaView, buildConfigView, buildProviderTemplatesView, buildProvidersView, createProvider, createUiRouter, deleteProvider, ensureUiBridgeSecret, executeConfigAction, getUiBridgeSecretPath, loadConfigOrDefault, readUiBridgeSecret, startUiServer, updateChannel, updateModel, updateProductAnalytics, updateProvider, updateRuntime, updateSearch, updateSecrets };
+export { AgentBindingView, type AgentCreateRequest, type AgentDeleteResult, type AgentProfileView, type AgentUpdateRequest, ApiError, ApiResponse, type AppDataDeleteResult, type AppDataEntry, type AppDataList, AppDataRoutesController, AppMetaView, type AppPackageHostTarget, type AppPackageList, type AppPackageOperationInput, type AppPackageOperationList, type AppPackageOperationStatus, type AppPackageOperationView, type AppPackageView, AppPackagesRoutesController, AuthEnabledUpdateRequest, AuthLoginRequest, AuthPasswordUpdateRequest, AuthSetupRequest, AuthStatusView, BindingPeerView, BochaFreshnessValue, BootstrapPhase, BootstrapRemoteState, BootstrapStageState, BootstrapStatusView, ChannelAuthConnectRequest, ChannelAuthConnectResult, ChannelAuthPollRequest, ChannelAuthPollResult, ChannelAuthStartRequest, ChannelAuthStartResult, ChannelSpecView, type ChatSessionTypeCtaView, type ChatSessionTypeOptionView, type ChatSessionTypesView, ConfigActionExecuteRequest, ConfigActionExecuteResult, ConfigActionManifest, ConfigActionType, ConfigMetaView, ConfigRoutesController, ConfigSchemaResponse, ConfigUiHint, ConfigUiHints, ConfigView, CronActionResult, CronCreateRequest, CronCreateResult, CronEnableRequest, CronJobStateView, CronJobView, CronListQuery, CronListStatus, CronListSummaryView, CronListView, CronPayloadView, CronRunRequest, CronScheduleView, InboxDeliveriesRoutesController, MarketplaceApiConfig, MarketplaceInstallKind, MarketplaceInstallRequest, MarketplaceInstallResult, MarketplaceInstallSkillParams, MarketplaceInstallSpec, MarketplaceInstalledRecord, MarketplaceInstalledView, MarketplaceInstaller, MarketplaceItemSummary, MarketplaceItemType, MarketplaceItemView, MarketplaceListView, MarketplaceLocalizedTextMap, MarketplaceManageAction, MarketplaceManageRequest, MarketplaceManageResult, MarketplaceMcpContentView, MarketplaceMcpDoctorResult, MarketplaceMcpInstallKind, MarketplaceMcpInstallRequest, MarketplaceMcpInstallResult, MarketplaceMcpInstallSpec, MarketplaceMcpManageAction, MarketplaceMcpManageRequest, MarketplaceMcpManageResult, MarketplaceMcpTemplateInput, MarketplaceRecommendationView, MarketplaceSceneView, MarketplaceScenesView, MarketplaceSkillContentView, MarketplaceSkillInstallKind, MarketplaceSkillInstallRequest, MarketplaceSkillInstallResult, MarketplaceSkillManageAction, MarketplaceSkillManageRequest, MarketplaceSkillManageResult, MarketplaceSort, McpConnectionCreateResult, McpConnectionRequest, McpConnectionTestResult, NcpAssetRoutesController, NcpSessionContextCompactionView, NcpSessionSkillsView, PanelAppAgentCapabilityView, PanelAppAgentGenerateObjectRequestView, PanelAppAgentGenerateObjectResultView, PanelAppAgentSendRequestView, PanelAppAgentSendResultView, PanelAppBridgeSessionCreateRequest, PanelAppBridgeSessionView, PanelAppCapabilityGrantView, PanelAppClientGrantView, PanelAppDeleteResultView, PanelAppEntryView, PanelAppListView, PanelAppPreferencesUpdateView, PanelAppsRoutesController, PortableRuntimeAcceptanceContractApiView, PortableRuntimeAcceptanceExportApiView, PortableRuntimeAcceptanceStatusApiView, PreferenceDeleteResult, PreferenceEntryView, PreferenceUpdateRequest, PreferencesRoutesController, ProductAnalyticsAudience, ProductAnalyticsConfigUpdate, type ProductAnalyticsStatusView, ProductAnalyticsView, type ProjectAddExistingRequest, type ProjectCreateRequest, type ProjectListView, type ProjectTemplateView, type ProjectView, ProviderAuthImportResult, ProviderAuthPollRequest, ProviderAuthPollResult, ProviderAuthStartRequest, ProviderAuthStartResult, ProviderConfigUpdate, ProviderConfigView, ProviderConnectionTestRequest, ProviderConnectionTestResult, ProviderCreateRequest, ProviderCreateResult, ProviderDeleteResult, ProviderInstanceView, ProviderModelCatalogView, ProviderModelDiscoveryRequest, ProviderModelDiscoveryResult, ProviderTemplateView, ProviderTemplatesView, ProvidersView, RemoteAccessView, RemoteAccountProfileUpdateRequest, RemoteAccountView, RemoteBrowserAuthPollRequest, RemoteBrowserAuthPollResult, RemoteBrowserAuthStartRequest, RemoteBrowserAuthStartResult, RemoteConnectionDiagnosticsView, RemoteDisconnectView, RemoteDoctorCheckView, RemoteDoctorView, RemoteLoginRequest, RemoteRuntimeView, RemoteServiceAction, RemoteServiceActionResult, RemoteServiceView, RemoteSettingsUpdateRequest, RemoteSettingsView, RuntimeActionCapability, RuntimeActionImpact, RuntimeConfigUpdate, RuntimeControlAction, RuntimeControlActionResult, RuntimeControlEnvironment, RuntimeControlRoutesController, RuntimeControlView, RuntimeEntryView, RuntimeLifecycleState, RuntimePendingRestart, RuntimeServiceState, RuntimeVerificationRecordListView, SearchConfigUpdate, SearchConfigView, SearchProviderConfigView, SearchProviderName, SearchProviderSpecView, SecretProviderEnvView, SecretProviderExecView, SecretProviderFileView, SecretProviderView, SecretRefView, SecretSourceView, SecretsConfigUpdate, SecretsView, ServerPathBreadcrumbView, ServerPathBrowseView, ServerPathDirectoryCreateRequest, ServerPathDirectoryCreateView, ServerPathEntryDeleteView, ServerPathEntryRenameRequest, ServerPathEntryRenameView, ServerPathEntryView, ServerPathFileCreateRequest, ServerPathFileCreateView, ServerPathFilesUploadView, ServerPathLocationView, ServerPathReadView, ServerPathSearchEntryView, ServerPathSearchView, ServerPathWatchRequest, ServerPathWatchView, ServiceActionGrantBatchRequestView, ServiceActionGrantListView, ServiceActionGrantView, ServiceActionInvokeRequestView, ServiceActionInvokeResultView, ServiceActionListView, ServiceActionView, ServiceAppDeleteResultView, ServiceAppJobListView, ServiceAppJobViewResponse, ServiceAppJobWatchView, ServiceAppListView, ServiceAppRecordView, ServiceAppsRoutesController, SessionConfigView, SessionEntryView, SessionEventView, SessionHistoryView, SessionMessageView, SessionPatchUpdate, SessionSkillEntryView, SessionTypeDescribeParams, SessionsListView, TavilySearchDepthValue, UiNcpAssetPutView, UiNcpAssetService, UiNcpAssetView, UiNcpSessionListView, UiNcpSessionMessagesView, UiNcpSessionObservationKind, UiNcpSessionObservationView, UiNcpSessionObservationsView, UiNcpSessionPendingInputView, UiNcpSessionPendingInputsView, UiNcpSessionQueuedInputView, UiNcpSessionQueuedInputsView, UiNcpSessionService, UiNcpSessionTokenUsageView, UiNcpStoredAssetRecord, type UiRemoteAccessHost, type UiRouterOptions, type UiRuntimeControlHost, type UiRuntimeUpdateHost, UiServerEvent, UiServerHandle, buildConfigMeta, buildConfigSchemaView, buildConfigView, buildProviderTemplatesView, buildProvidersView, createProvider, createUiRouter, deleteProvider, ensureUiBridgeSecret, executeConfigAction, getUiBridgeSecretPath, loadConfigOrDefault, readUiBridgeSecret, startUiServer, updateChannel, updateModel, updateProductAnalytics, updateProvider, updateRuntime, updateSearch, updateSecrets };
 //# sourceMappingURL=index.d.ts.map