@rightkit/release 0.6.16 → 0.6.20

package/rightkit-ownership.json

@@ -2,6 +2,270 @@
   "schema": 1,
   "version": "3.0.0",
   "capabilities": [
+    {
+      "package": "rightkit-adapt",
+      "capability": "adapt",
+      "summary": "Adaptive agent learning: outcome observation, guidance proposals, application receipts and scoring; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-adapt-taste",
+      "capability": "adaptive-learning",
+      "summary": "Governed behavioural learning from agent transcripts (taste preferences and insights), deterministic and model-free.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-demo",
+      "capability": "agent-demo-mode",
+      "summary": "Consented agent demo mode for Tauri hosts: an agent drives one catalog app through rightkit-automation, the host records that app's window into a sealed bundle, with a badge window, kill hotkey, tray stop item and audit log; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-engine-api-integrations",
+      "capability": "agent-api-integrations",
+      "summary": "Agent engine integrations HTTP API: plugin discovery, manifest projection and plugin middleware wiring; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-engine-api-platform",
+      "capability": "agent-api-platform",
+      "summary": "Agent engine platform HTTP API types; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-engine-api-sessions",
+      "capability": "agent-api-sessions",
+      "summary": "Agent engine session HTTP API routes; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-engine-api-workflows",
+      "capability": "agent-api-workflows",
+      "summary": "Agent engine workflow HTTP API: request/response types, error mapping and OpenAPI fragments; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-engine-attention",
+      "capability": "agent-attention",
+      "summary": "Agent attention inbox: unread/needs-input items, snooze, density, quiet hours and deep links as axum routes; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-engine-cli",
+      "capability": "agent-cli",
+      "summary": "Agent engine command-line argument model; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-engine-core",
+      "capability": "agent-engine",
+      "summary": "Agent engine core: the agent turn loop, tool dispatch, permission and approval flow, compaction, goals, guardian and worker agents; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-engine-history",
+      "capability": "agent-history",
+      "summary": "Agent engine conversation history store helpers; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-engine-mobile-runtime",
+      "capability": "agent-mobile-runtime",
+      "summary": "Agent engine mobile runtime: in-process engine host for platforms without fork/exec (iOS), with journal, FFI-friendly session API and portable tool profile; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-engine-protocol",
+      "capability": "agent-protocol",
+      "summary": "Agent engine protocol: events, envelopes, tool calls, trust wrapping and settlement types shared by agent hosts; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-engine-runtime-middleware",
+      "capability": "agent-runtime-middleware",
+      "summary": "Agent engine runtime middleware: request and turn interception hooks; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-engine-runtime-resources",
+      "capability": "agent-runtime-resources",
+      "summary": "Agent engine runtime resources: resource discovery and limits for agent turns; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-engine-storage",
+      "capability": "agent-storage",
+      "summary": "Agent engine SQLite storage: session event journal, transcripts, tasks, artifacts, goals and migrations; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-engine-tasks",
+      "capability": "agent-tasks",
+      "summary": "Agent engine task model: task records, states and transitions for agent hosts; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-gateway",
+      "capability": "agent-gateway",
+      "summary": "Local agent gateway for a mail-style app: pairing registry, append-only audit log, request gate profiles, untrusted-content wrapping and the user-approval flow.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-host-traits",
+      "capability": "agent-host-traits",
+      "summary": "Host traits for agent runtimes: a skill catalog the host implements and installs; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-orchestration",
+      "capability": "agent-orchestration",
+      "summary": "Agent orchestration runtime: plans, routes, tasks, budgets, grants, escalation, scheduling, delivery, inventories and platform layers; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-orchestration-handoff",
+      "capability": "agent-orchestration-handoff",
+      "summary": "Agent handoff packets, continuity gate and live state; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-plugins",
+      "capability": "agent-plugins",
+      "summary": "Agent plugin manifests, discovery and loader; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-policy",
+      "capability": "agent-policy",
+      "summary": "Agent tool-use policy: permission modes, command classification, path and network rules for agent hosts; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-agent-recipes",
+      "capability": "agent-recipes",
+      "summary": "Agent recipes: reusable, parameterised task recipes with validation; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-agent-tools",
       "capability": "agent-tools",
@@ -13,6 +277,17 @@
         "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
       ]
     },
+    {
+      "package": "rightkit-agent-transcript",
+      "capability": "agent-transcript",
+      "summary": "Deterministic agent transcript normalizer (TranscriptEventV1): Claude Code and Codex discovery, raw adapters, stable identities, source binding and provenance.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-agents",
       "capability": "agent-sessions",
@@ -24,6 +299,17 @@
         "0.2.0 adds the session lifecycle (feature session) over rightkit-child-process; the API backend lands in a later release."
       ]
     },
+    {
+      "package": "rightkit-ai-accounts",
+      "capability": "ai-accounts",
+      "summary": "Claude account management; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-align",
       "capability": "script-alignment",
@@ -78,6 +364,28 @@
         "Fingerprints identify review candidates; published two-host replacement qualification is not recorded."
       ]
     },
+    {
+      "package": "rightkit-app-host",
+      "capability": "app-host",
+      "summary": "Host services for companion crates; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-app-manager",
+      "capability": "app-manager",
+      "summary": "Installed-app management; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-app-settings",
       "capability": "settings-persistence",
@@ -105,6 +413,28 @@
         "Fingerprints identify review candidates; published two-host replacement qualification is not recorded."
       ]
     },
+    {
+      "package": "rightkit-apple-ops",
+      "capability": "apple-ops",
+      "summary": "Apple ops: App Store Connect API and upload, build analysis, preflight, profiling and SwiftUI traces; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-approvals",
+      "capability": "approvals",
+      "summary": "Launch-secret approval challenges and tokens; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-asr",
       "capability": "speech-recognition",
@@ -204,6 +534,17 @@
         "Fingerprints identify review candidates; published two-host replacement qualification is not recorded."
       ]
     },
+    {
+      "package": "rightkit-autoedit",
+      "capability": "video-autoedit",
+      "summary": "Automatic editing: transcript-driven cut engine, editorial engine, named cut variants, scoped editing rules and their resolution matrix.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-automation",
       "capability": "desktop-automation",
@@ -312,6 +653,28 @@
         "Fingerprints identify review candidates (competing dependencies and distinctive implementation code); published two-host replacement qualification is not recorded."
       ]
     },
+    {
+      "package": "rightkit-bench",
+      "capability": "benchmark-harness",
+      "summary": "Benchmark harness building blocks: warmup-and-percentile timing, SQLite EXPLAIN QUERY PLAN probes, and article-quality corpus scoring with a reference extractor.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-bot-messaging",
+      "capability": "bot-messaging",
+      "summary": "Bot messaging bridge: remote chat channels (Telegram, Slack, Discord style) relaying agent sessions with policy-checked commands; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-browser",
       "capability": "browser-automation",
@@ -523,72 +886,226 @@
       "detection": "fingerprinted",
       "policyNotes": [
         "Package contract retained; dependency declarations do not verify integration.",
-        "Fingerprints identify review candidates; published two-host replacement qualification is not recorded."
+        "Fingerprints identify review candidates; published two-host replacement qualification is not recorded."
+      ]
+    },
+    {
+      "package": "rightkit-captions",
+      "capability": "video-captions",
+      "summary": "Captions for Right Suite video apps: caption styles, per-language caption sets, cue layout and placement, font measurement, and swatch rendering through rightkit-typeset.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-channel-memory",
+      "capability": "channel-memory",
+      "summary": "Channel memory schema (channel-memory.v1, pending in tools/rightkit/contracts-pending) with serde types, schema and semantic validation, version gate, authoritative proof citation, and scope checks shared by PostRight P3 and GenRight G7.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration.",
+        "Revisioned daemon storage and conflict handling belong to the daemon (RK10); this crate validates records only."
+      ]
+    },
+    {
+      "package": "rightkit-chat-bridge",
+      "capability": "chat-bridge",
+      "summary": "Chat between AI chats: envelopes, linked computers and the device link, native delivery into running Claude and Codex chats (hooks, desktop), receipts, the chat skill and hook installer. The host app supplies its brand and state folder.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-child-process",
+      "capability": "owned-processes",
+      "summary": "Child processes owned as a tree: process groups / kill-on-close jobs, hidden windows",
+      "fingerprints": [
+        {
+          "id": "process.cargo.process-wrap",
+          "type": "dependency",
+          "ecosystem": "cargo",
+          "name": "process-wrap",
+          "tier": "advise",
+          "usageContext": {
+            "hosts": [
+              "macos",
+              "windows"
+            ],
+            "scope": "cargo direct competing dependency; transitive findings require authenticated reachability"
+          },
+          "tierReason": "No recorded published-version qualification for this usage context on both macOS & Windows."
+        },
+        {
+          "id": "process.cargo.command-group",
+          "type": "dependency",
+          "ecosystem": "cargo",
+          "name": "command-group",
+          "tier": "advise",
+          "usageContext": {
+            "hosts": [
+              "macos",
+              "windows"
+            ],
+            "scope": "cargo direct competing dependency; transitive findings require authenticated reachability"
+          },
+          "tierReason": "No recorded published-version qualification for this usage context on both macOS & Windows."
+        }
+      ],
+      "detection": "fingerprinted",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "Fingerprints identify review candidates; published two-host replacement qualification is not recorded."
+      ]
+    },
+    {
+      "package": "rightkit-code-audit-provider-sdk",
+      "capability": "code-audit-provider-sdk",
+      "summary": "Code audit provider SDK: provider registry, source and effect interfaces for audit providers; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-color",
+      "capability": "video-color",
+      "summary": "Colour grading for Right Suite video apps: grade parameters, LUTs and FFmpeg filter rendering, and video scopes (waveform, vectorscope, histogram).; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-compose",
+      "capability": "composition-model",
+      "summary": "Evaluated composition model for Right Suite video: layered video, stills, cursor sprites with hotspots, procedural backgrounds, rounded clipping, shadows, motion blur, canvas-space overlays and an independently timed webcam, with keyframed transforms, crops and opacity; pure per-frame evaluation shared by preview and export",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Declaration-only: the composition contract and evaluation are not an ownership fingerprint.",
+        "No renderer, codec or I/O lives in this crate; CutRight and the typed FFmpeg export consume its FrameDescription."
+      ]
+    },
+    {
+      "package": "rightkit-compositor",
+      "capability": "video-compositor",
+      "summary": "Native wgpu layer compositor: GPU context, layer blending, effect passes and SDF mask feathering, rendering evaluated frame descriptors. Product-neutral.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-content-plan",
+      "capability": "content-plan",
+      "summary": "Store-free content planning rules: manual draft approval gate, first-sentence disclosure check and per-platform posted-link host table.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-content-proof",
+      "capability": "content-proof",
+      "summary": "Exact claim-number reading for content proof review: currency, thousands separators, k/m/bn suffixes, percentages and number words as exact decimals, with tokenization.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-context",
+      "capability": "context",
+      "summary": "Context, memory and repository-graph commands for coding agents: the membrane CLI, hook entry points and the resident a host app supervises.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-context-client",
+      "capability": "context-client",
+      "summary": "Transport-injected client for canonical context v1 operation envelopes.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
       ]
     },
     {
-      "package": "rightkit-channel-memory",
-      "capability": "channel-memory",
-      "summary": "Channel memory schema (channel-memory.v1, pending in tools/rightkit/contracts-pending) with serde types, schema and semantic validation, version gate, authoritative proof citation, and scope checks shared by PostRight P3 and GenRight G7.",
+      "package": "rightkit-context-core",
+      "capability": "context-budget",
+      "summary": "Context budget and lane reconciliation: one cross-provider attention budget whose explicit lanes reconcile every receipt's selected and delivered tokens.; declaration-only detection (no precise implementation fingerprint)",
       "fingerprints": [],
       "detection": "declaration-only",
       "policyNotes": [
         "Package contract retained; dependency declarations do not verify integration.",
-        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration.",
-        "Revisioned daemon storage and conflict handling belong to the daemon (RK10); this crate validates records only."
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
       ]
     },
     {
-      "package": "rightkit-child-process",
-      "capability": "owned-processes",
-      "summary": "Child processes owned as a tree: process groups / kill-on-close jobs, hidden windows",
-      "fingerprints": [
-        {
-          "id": "process.cargo.process-wrap",
-          "type": "dependency",
-          "ecosystem": "cargo",
-          "name": "process-wrap",
-          "tier": "advise",
-          "usageContext": {
-            "hosts": [
-              "macos",
-              "windows"
-            ],
-            "scope": "cargo direct competing dependency; transitive findings require authenticated reachability"
-          },
-          "tierReason": "No recorded published-version qualification for this usage context on both macOS & Windows."
-        },
-        {
-          "id": "process.cargo.command-group",
-          "type": "dependency",
-          "ecosystem": "cargo",
-          "name": "command-group",
-          "tier": "advise",
-          "usageContext": {
-            "hosts": [
-              "macos",
-              "windows"
-            ],
-            "scope": "cargo direct competing dependency; transitive findings require authenticated reachability"
-          },
-          "tierReason": "No recorded published-version qualification for this usage context on both macOS & Windows."
-        }
-      ],
-      "detection": "fingerprinted",
+      "package": "rightkit-context-federation",
+      "capability": "context-federation",
+      "summary": "Context federation coordinator: immutable provider registry, fan-out of context operations across providers, and skill ranking.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
       "policyNotes": [
         "Package contract retained; dependency declarations do not verify integration.",
-        "Fingerprints identify review candidates; published two-host replacement qualification is not recorded."
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
       ]
     },
     {
-      "package": "rightkit-compose",
-      "capability": "composition-model",
-      "summary": "Evaluated composition model for Right Suite video: layered video, stills, cursor sprites with hotspots, procedural backgrounds, rounded clipping, shadows, motion blur, canvas-space overlays and an independently timed webcam, with keyframed transforms, crops and opacity; pure per-frame evaluation shared by preview and export",
+      "package": "rightkit-context-protocol",
+      "capability": "context-protocol",
+      "summary": "Context protocol contract: typed scope-grant, candidate-set, packet, receipt and knowledge-emission shapes, their canonical JSON Schemas, and the canonical byte/digest contract.; declaration-only detection (no precise implementation fingerprint)",
       "fingerprints": [],
       "detection": "declaration-only",
       "policyNotes": [
-        "Declaration-only: the composition contract and evaluation are not an ownership fingerprint.",
-        "No renderer, codec or I/O lives in this crate; CutRight and the typed FFmpeg export consume its FrameDescription."
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-context-provider-sdk",
+      "capability": "context-provider-sdk",
+      "summary": "Context provider SDK: the typed Provider trait, the canonical Fixture shape and the run_conformance harness for adapters implementing context operations.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-context-runtime",
+      "capability": "context-runtime",
+      "summary": "Context runtime: pull/push context packets, durable memory service, ledger, freshness, planning, background review and the resident service.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
       ]
     },
     {
@@ -838,6 +1355,127 @@
         "Fingerprints identify review candidates (competing dependencies and distinctive implementation code); published two-host replacement qualification is not recorded."
       ]
     },
+    {
+      "package": "rightkit-device-link-types",
+      "capability": "device-link-types",
+      "summary": "Record types of the device link: device reference, effect classes, principals, paired-device registry records and the signed device-circle records.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-dictation-app-runtime",
+      "capability": "dictation-app-runtime",
+      "summary": "Dictation app runtime: the shell-side engine supervisor (spawn, launch frame, health, restart, sidecar logs) and engine process handle for a dictation app.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-dictation-command-host",
+      "capability": "dictation-command-host",
+      "summary": "Dictation command host: voice command dispatch (keys, app launch, Shortcuts, power with confirmation), text delivery and insertion, focus checks and screen capture for a dictation app.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-dictation-core",
+      "capability": "dictation",
+      "summary": "Dictation core: engine wire protocol and validation, provider key handoff, recording session state machine and controller, wake word state, mic selection and audio conditioning.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-dictation-engine",
+      "capability": "dictation-engine",
+      "summary": "Dictation engine: the speech engine sidecar binary and library facade over the dictation runtime, inference, text pipeline and command host, with engine contract tests and fixtures.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-dictation-inference",
+      "capability": "dictation-inference",
+      "summary": "Dictation inference: Parakeet TDT on CoreML and ONNX Runtime, Whisper, keyword spotting, VAD, calibration, file transcription and the ASR timeline, for a push-to-talk dictation engine.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-dictation-models",
+      "capability": "dictation-models",
+      "summary": "Dictation model store: speech model catalog, shared model leases and paths, downloads with grants and verification, on top of rightkit-models.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-dictation-runtime",
+      "capability": "dictation-runtime",
+      "summary": "Dictation engine runtime: the JSON-RPC sidecar worker (recording, finalize, polish, delivery decisions), speech service, IPC, crash capture and engine paths for a push-to-talk dictation engine.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-dictation-telemetry",
+      "capability": "dictation-telemetry",
+      "summary": "Dictation telemetry: local utterance timelines, telemetry writer, crash dump capture, feedback and HTTP client for diagnostics, redacted before anything is written.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-dictation-text-pipeline",
+      "capability": "dictation-text-pipeline",
+      "summary": "Dictation text pipeline: LLM cleanup (L1-L3) with provider transports and policy, provider keys, runtime settings, screen-context vocabulary and the text polish orchestration.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-disk-cleanup",
+      "capability": "disk-cleanup",
+      "summary": "Disk usage scanning and safe cleanup; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-docs",
       "capability": "document-io",
@@ -1033,54 +1671,153 @@
       "fingerprints": [],
       "detection": "declaration-only",
       "policyNotes": [
-        "Discovery alias so `rustright owns xlsx` resolves to the document-io owner; carries no fingerprints of its own."
+        "Discovery alias so `rustright owns xlsx` resolves to the document-io owner; carries no fingerprints of its own."
+      ]
+    },
+    {
+      "package": "rightkit-docs",
+      "capability": "document",
+      "summary": "Alias of document-io: read and write DOCX, XLSX and PDF documents; owner is rightkit-docs",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Discovery alias so `rustright owns document` resolves to the document-io owner; carries no fingerprints of its own."
+      ]
+    },
+    {
+      "package": "rightkit-docs",
+      "capability": "spreadsheet",
+      "summary": "Alias of document-io: read, create and edit spreadsheets (.xlsx); owner is rightkit-docs",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Discovery alias so `rustright owns spreadsheet` resolves to the document-io owner; carries no fingerprints of its own."
+      ]
+    },
+    {
+      "package": "rightkit-doctor",
+      "capability": "doctor",
+      "summary": "Doctor framework: check rows, verdicts, engine doctor report, neutral probes; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-document-workspace",
+      "capability": "document-workspace",
+      "summary": "Document workspace store: recent files, pinned files and folders, per-document view state and tab session in one SQLite file, with corruption quarantine and path purge.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-embed",
+      "capability": "embeddings",
+      "summary": "Local text embeddings",
+      "fingerprints": [
+        {
+          "id": "embed.cargo.fastembed",
+          "type": "dependency",
+          "ecosystem": "cargo",
+          "name": "fastembed",
+          "tier": "advise",
+          "usageContext": {
+            "hosts": [
+              "macos",
+              "windows"
+            ],
+            "scope": "cargo direct competing dependency; transitive findings require authenticated reachability"
+          },
+          "tierReason": "No recorded published-version qualification for this usage context on both macOS & Windows."
+        }
+      ],
+      "detection": "fingerprinted",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "Fingerprints identify review candidates; published two-host replacement qualification is not recorded."
+      ]
+    },
+    {
+      "package": "rightkit-engine-host",
+      "capability": "engine-host",
+      "summary": "Engine CLI and stdio sidecar framework; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-evidence",
+      "capability": "evidence",
+      "summary": "Evidence and spec records: requirement specs, acceptance evidence and verification status for agent work; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-evidence-contracts",
+      "capability": "evidence-contracts",
+      "summary": "Evidence contracts: plans, providers, findings reports, receipts, traces, source anchors and canonical JSON digests; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-evidence-decisions",
+      "capability": "evidence-decisions",
+      "summary": "Evidence decision store: recorded decisions with SQLite persistence and validation; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
       ]
     },
     {
-      "package": "rightkit-docs",
-      "capability": "document",
-      "summary": "Alias of document-io: read and write DOCX, XLSX and PDF documents; owner is rightkit-docs",
+      "package": "rightkit-evidence-effects",
+      "capability": "evidence-effects",
+      "summary": "Effect execution with sandboxed child processes and receipts; declaration-only detection (no precise implementation fingerprint)",
       "fingerprints": [],
       "detection": "declaration-only",
       "policyNotes": [
-        "Discovery alias so `rustright owns document` resolves to the document-io owner; carries no fingerprints of its own."
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
       ]
     },
     {
-      "package": "rightkit-docs",
-      "capability": "spreadsheet",
-      "summary": "Alias of document-io: read, create and edit spreadsheets (.xlsx); owner is rightkit-docs",
+      "package": "rightkit-evidence-governance",
+      "capability": "evidence-governance",
+      "summary": "Evidence governance: certification, judgment dispatch and lifecycle receipts over evidence contracts; declaration-only detection (no precise implementation fingerprint)",
       "fingerprints": [],
       "detection": "declaration-only",
       "policyNotes": [
-        "Discovery alias so `rustright owns spreadsheet` resolves to the document-io owner; carries no fingerprints of its own."
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
       ]
     },
     {
-      "package": "rightkit-embed",
-      "capability": "embeddings",
-      "summary": "Local text embeddings",
-      "fingerprints": [
-        {
-          "id": "embed.cargo.fastembed",
-          "type": "dependency",
-          "ecosystem": "cargo",
-          "name": "fastembed",
-          "tier": "advise",
-          "usageContext": {
-            "hosts": [
-              "macos",
-              "windows"
-            ],
-            "scope": "cargo direct competing dependency; transitive findings require authenticated reachability"
-          },
-          "tierReason": "No recorded published-version qualification for this usage context on both macOS & Windows."
-        }
-      ],
-      "detection": "fingerprinted",
+      "package": "rightkit-evidence-report",
+      "capability": "evidence-report",
+      "summary": "Evidence reports: findings report rendering to JSON, SARIF, Markdown and HTML; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
       "policyNotes": [
         "Package contract retained; dependency declarations do not verify integration.",
-        "Fingerprints identify review candidates; published two-host replacement qualification is not recorded."
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
       ]
     },
     {
@@ -1331,6 +2068,28 @@
         "Fingerprints identify review candidates (competing dependencies and distinctive implementation code); published two-host replacement qualification is not recorded."
       ]
     },
+    {
+      "package": "rightkit-github",
+      "capability": "github",
+      "summary": "GitHub App authority, forge specs, webhook verification, installation tokens and device-flow sign-in; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-google-apis",
+      "capability": "google-workspace-apis",
+      "summary": "Async Google Workspace REST clients: Gmail (sync, history, batch fetch, MIME, compose, labels, filters, settings, drafts, attachments), Calendar, Drive, People, Tasks and Meet, with desktop OAuth and shared retry/backoff.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-google-identity",
       "capability": "google-identity",
@@ -1631,6 +2390,17 @@
         "Fingerprints identify review candidates (competing dependencies and distinctive implementation code); published two-host replacement qualification is not recorded."
       ]
     },
+    {
+      "package": "rightkit-library",
+      "capability": "local-artifact-library",
+      "summary": "Local artifact library: SQLite-backed history/search index (files stay the source of truth) and a deterministic non-LLM enrichment pass (keywords, links, tags, segmentation).; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-license",
       "capability": "licensing",
@@ -1782,6 +2552,17 @@
         "Fingerprints identify review candidates; published two-host replacement qualification is not recorded."
       ]
     },
+    {
+      "package": "rightkit-local-gen",
+      "capability": "local-image-generation",
+      "summary": "Keyless local image generation: managed sd.cpp server runtime, memory modes, model profiles, durable job store and artifacts; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-logs",
       "capability": "structured-logging",
@@ -1869,6 +2650,17 @@
         "Fingerprints identify review candidates (competing dependencies and distinctive implementation code); published two-host replacement qualification is not recorded."
       ]
     },
+    {
+      "package": "rightkit-mail",
+      "capability": "mail-client-core",
+      "summary": "Mail-domain building blocks: Gmail-style search query compiler, SQL predicates and keyset paging, rank fusion, anti-phishing trust heuristics, and remote-image safety checks with a tracker blocklist.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-mcp",
       "capability": "mcp",
@@ -1911,6 +2703,83 @@
         "Fingerprints identify review candidates; published two-host replacement qualification is not recorded."
       ]
     },
+    {
+      "package": "rightkit-media-fetch",
+      "capability": "media-fetch",
+      "summary": "Media fetch: yt-dlp download and 16 kHz mono WAV normalize, playlist expansion, and a pure URL/file job classifier with a shared media-type table.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-media-gen",
+      "capability": "generative-media",
+      "summary": "Generative media providers (fal, WaveSpeed, Veo/Gemini, OpenAI Images, ElevenLabs, HeyGen, EvoLink, Higgsfield, Muapi, NanoBanana, Replicate, Wan2GP, Blender, local), model catalogue and facts, routing, durable generation jobs, result descriptors, library and spend ledger; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-media-pipeline",
+      "capability": "media-production-pipelines",
+      "summary": "Named production pipelines and campaign production stack; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-memory",
+      "capability": "agent-memory",
+      "summary": "Agent memory: durable memory store, write screening, adaptive retrieval routing and a typed backend over an external membrane CLI; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-memory-core",
+      "capability": "durable-memory-core",
+      "summary": "Durable-memory core primitives: memory records, token budgeting, ranking and embedding-backed recall helpers.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-memory-store",
+      "capability": "durable-memory",
+      "summary": "Durable memory store: SQLite memory store, installation identity, scopes and durable telemetry.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-mesh",
+      "capability": "device-mesh",
+      "summary": "Paired-device mesh: iroh live sessions, end-to-end encrypted mailbox, sync reconciliation and capped relayed transfers. Product-neutral; the host supplies identity and trust (PeerTrust).; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-models",
       "capability": "model-installation",
@@ -2392,6 +3261,17 @@
         "Visual design and the app's state machine stay per-app; the renderer, window ownership thread and layered-window presentation are shared (bogusyogi/rightkit#896)."
       ]
     },
+    {
+      "package": "rightkit-owner-approvals",
+      "capability": "owner-approvals",
+      "summary": "Signed owner approvals for privileged and reserved actions: owner-check and approver keys, key bindings, secret redaction and the security audit trail.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-ownership",
       "capability": "ownership-scanner",
@@ -2482,6 +3362,17 @@
         "Discovery alias so `rustright owns pdf` resolves to the PDF owner; carries no fingerprints of its own."
       ]
     },
+    {
+      "package": "rightkit-pipeline",
+      "capability": "generation-pipeline",
+      "summary": "Generation pipeline client: drive an installed generation engine (submit, follow, import), crash-safe journal and recovery, model catalog checks.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-platform-rules",
       "capability": "platform-rules",
@@ -2529,6 +3420,28 @@
         "Fingerprints identify review candidates (competing dependencies and distinctive implementation code); published two-host replacement qualification is not recorded."
       ]
     },
+    {
+      "package": "rightkit-policy-rules",
+      "capability": "policy-rules",
+      "summary": "Agent policy model and rule evaluator; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-privileged-helper",
+      "capability": "privileged-helper",
+      "summary": "Elevation broker for privileged-helper moves; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-qa",
       "capability": "desktop-qa",
@@ -2716,6 +3629,72 @@
         "The macOS ScreenCaptureKit helper (helpers/macos, Swift) ships with this crate sources and implements the same protocol; the crate never sends input. Capturing needs the OS Screen Recording permission on macOS."
       ]
     },
+    {
+      "package": "rightkit-reframe",
+      "capability": "video-reframe",
+      "summary": "Tracked 9:16 reframe for Right Suite video apps: ONNX face detection (YuNet; CoreML, DirectML or CPU), subject tracking, a smoothed crop path, and approval-gated crop plans.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-remote-compute",
+      "capability": "remote-compute",
+      "summary": "Rented GPU workers (Vast/SSH) lifecycle and time-billed spend; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-remote-gateway",
+      "capability": "remote-agent-gateway",
+      "summary": "Remote tools for agents on this computer: files, documents, terminals, processes, screen, app launch, media, clipboard, chat read and start, saved logins and payments; folder confinement, per-chat unlock, local approvals, owner settings and the activity trail.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-repo-graph",
+      "capability": "repo-graph",
+      "summary": "Repository code graph: tree-sitter extraction across 30+ languages, symbol/reference graph store, freshness tracking, watch and query.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-repo-graph-grammars",
+      "capability": "repo-graph-grammars",
+      "summary": "Vendored tree-sitter grammars (ql, systemrdl, vue) for the repository graph, with no crates.io equivalent for tree-sitter-language 0.1.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-research",
+      "capability": "research",
+      "summary": "Research pipeline: sources, claims and evidence with provenance; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-review",
       "capability": "content-review",
@@ -2768,6 +3747,17 @@
         "Fingerprints identify review candidates; published two-host replacement qualification is not recorded."
       ]
     },
+    {
+      "package": "rightkit-scheduler",
+      "capability": "scheduler",
+      "summary": "Agent schedule model; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-search",
       "capability": "search",
@@ -2936,6 +3926,17 @@
         "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
       ]
     },
+    {
+      "package": "rightkit-shorts",
+      "capability": "video-shorts",
+      "summary": "Shorts finder for Right Suite video apps: candidate moments from a long video's transcript, scored and ranked (heuristics plus an optional BYOK LLM pass), with hooks, captions and edit plans per short.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-sidecar",
       "capability": "framed-sidecar",
@@ -2984,6 +3985,39 @@
         "Fingerprints identify review candidates (competing dependencies and distinctive implementation code); published two-host replacement qualification is not recorded."
       ]
     },
+    {
+      "package": "rightkit-social-analytics",
+      "capability": "social-analytics",
+      "summary": "Store-free social campaign analytics pieces: tracked short links with public-https destination checks, UTM tagging, deterministic link ids and redirect-route rules.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-social-inbox",
+      "capability": "social-inbox",
+      "summary": "Signed social webhook inbox core: constant-time HMAC-SHA256 signature verification, bounded body decoding, app-secret handling, Meta delivery parsing into bounded events, and keyword matching for comment automation.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-social-publish",
+      "capability": "social-publish",
+      "summary": "Social platform publish adapters (X, Bluesky, Mastodon, Threads, Instagram, Facebook, LinkedIn, Pinterest, TikTok, YouTube) with a no-retry HTTP layer, Retry-After parsing, media checks, pinned API versions and error-text redaction.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-speech-client",
       "capability": "shared-speech-service",
@@ -3065,6 +4099,17 @@
         "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
       ]
     },
+    {
+      "package": "rightkit-system-monitor",
+      "capability": "system-monitor",
+      "summary": "Live system monitoring; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-tauri-shell",
       "capability": "desktop-shell",
@@ -3167,6 +4212,28 @@
         "Fingerprints identify review candidates; published two-host replacement qualification is not recorded."
       ]
     },
+    {
+      "package": "rightkit-terminal-ui",
+      "capability": "terminal-ui",
+      "summary": "Terminal UI for agent sessions: ratatui chat transcript, composer, approvals, diffs and status widgets; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-text-polish",
+      "capability": "text-polish",
+      "summary": "Transcript polish: deterministic L0 cleanup (numbers, dates, inline edits, formatting, casing), spoken control and AI-transform command parsing, vocabulary replacements and learning.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-time",
       "capability": "time-civil",
@@ -3178,6 +4245,17 @@
         "No time zone database: named zones and DST rules are not owned here; callers pass a fixed offset."
       ]
     },
+    {
+      "package": "rightkit-timeline",
+      "capability": "video-timeline",
+      "summary": "Portable video timeline core: tracks, clips, rational time, revisions, ripple edits, titles and visuals, and the render-plan compiler with its FFmpeg argument builder. Pure computation.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-transcript",
       "capability": "timed-transcripts",
@@ -3220,6 +4298,17 @@
         "Fingerprints identify review candidates; published two-host replacement qualification is not recorded."
       ]
     },
+    {
+      "package": "rightkit-transcript-library",
+      "capability": "transcript-library",
+      "summary": "Transcript library: delivery records (outcome, target, timings, source), history store contract with filters, paging, retention, scoped deletes and an in-memory store.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-tts",
       "capability": "text-to-speech",
@@ -3411,6 +4500,50 @@
         "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
       ]
     },
+    {
+      "package": "rightkit-video-project",
+      "capability": "video-project",
+      "summary": "Video project layer for Right Suite apps: project files, sources and their integrity, revisions on the timeline, render jobs, and portable project bundles.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-voice-commands",
+      "capability": "voice-commands",
+      "summary": "Voice command recognition: typed command actions, spoken-command catalog and matching, app-launch and shortcut queries, external link allowlist check.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-web-extract",
+      "capability": "article-extraction",
+      "summary": "Article extraction without transport: readable-text parsing, title and redirect resolution, blocked-page detection, BM25 fit filtering, and extraction-ladder decisions.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "rightkit-web-session",
+      "capability": "web-session",
+      "summary": "Agent browser logins: one owner-approved Chromium session at a time on the login profile, with a network policy limited to the approved sites, a live view for the owner and signed approvals.; declaration-only detection (no precise implementation fingerprint)",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "rightkit-workflow",
       "capability": "scenario-runtime",
@@ -3422,6 +4555,83 @@
         "No networking, GUI driving or capture lives in this crate; workers implement StepDriver and remote transport implements WorkerTransport in later slices."
       ]
     },
+    {
+      "package": "@rightkit/agent-ui-approvals",
+      "capability": "agent-ui-approvals",
+      "summary": "Agent approval queue and cards, agent settings, remote approvals, owner PIN and secure-box settings views.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "@rightkit/agent-ui-components",
+      "capability": "agent-ui-components",
+      "summary": "Coding-agent UI components: app frame, chat, composer, review, panels, delivery, remote and usage.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "@rightkit/agent-ui-core",
+      "capability": "agent-ui-core",
+      "summary": "Coding-agent UI core: daemon client, session and transcript types, stores and helpers.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "@rightkit/agent-ui-hooks",
+      "capability": "agent-ui-hooks",
+      "summary": "React hooks for coding-agent UIs: sessions, composer, workspace files, approvals and runtime.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "@rightkit/agent-ui-settings",
+      "capability": "agent-ui-settings",
+      "summary": "Settings panes for coding-agent UIs.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "@rightkit/agent-ui-web",
+      "capability": "agent-ui-web",
+      "summary": "Browser client for a coding-agent daemon: transcript, input bar, diff, model and usage panels.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "@rightkit/agent-ui-workbench",
+      "capability": "agent-ui-workbench",
+      "summary": "Workbench and runtime panels for coding-agent UIs.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "@rightkit/app-update",
       "capability": "update-policy",
@@ -3480,6 +4690,28 @@
         "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
       ]
     },
+    {
+      "package": "@rightkit/config",
+      "capability": "shared-presets",
+      "summary": "Shared presets for desktop apps: TypeScript configs, a Vite base config, a flat ESLint preset and Rust toolchain, cargo-deny, cargo-audit, rustfmt and cargo-about templates.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "@rightkit/dictation-ui",
+      "capability": "dictation-ui",
+      "summary": "Dictation UI: recording pill, microphone and hotkey hooks, voice conversation and dictation pages.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "@rightkit/doc-render",
       "capability": "document-rendering",
@@ -3507,6 +4739,39 @@
         "Fingerprints identify review candidates; published two-host replacement qualification is not recorded."
       ]
     },
+    {
+      "package": "@rightkit/document-core",
+      "capability": "document-core",
+      "summary": "Shared base for the document editors: platform bridge, settings, state, PDF helpers and the format registry.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "@rightkit/document-workspace",
+      "capability": "document-workspace-ui",
+      "summary": "Multi-format document workspace shell: tabs, sidebar, document router, loaders, savers and actions.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "@rightkit/docx-editor",
+      "capability": "docx-editor",
+      "summary": "DOCX editing pane over @eigenpal/docx-editor with a host-owned toolbar, find, print and Markdown export.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "@rightkit/hooks",
       "capability": "lifecycle-hooks",
@@ -3518,6 +4783,17 @@
         "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
       ]
     },
+    {
+      "package": "@rightkit/html-editor",
+      "capability": "html-editor",
+      "summary": "HTML document editor and viewer: ProseMirror editing, sanitising and source view.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "@rightkit/i18n",
       "capability": "localization",
@@ -3617,6 +4893,17 @@
         "Fingerprints identify review candidates (competing dependencies and distinctive implementation code); published two-host replacement qualification is not recorded."
       ]
     },
+    {
+      "package": "@rightkit/library-ui",
+      "capability": "library-ui",
+      "summary": "Library and queue UI for transcripts and downloads: queue board, job cards, library list, detail reader and history.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "@rightkit/license",
       "capability": "licensing",
@@ -3778,6 +5065,39 @@
         "Fingerprints identify review candidates (competing dependencies and distinctive implementation code); published two-host replacement qualification is not recorded."
       ]
     },
+    {
+      "package": "@rightkit/mail-ui",
+      "capability": "mail-ui",
+      "summary": "Mail client UI: inbox, reader, compose editor, recipients, attachments, account switcher and the mail store.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "@rightkit/markdown-editor",
+      "capability": "markdown-editor",
+      "summary": "Markdown and MDX editor: ProseMirror WYSIWYG, source mode, math, diagrams and properties panel.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "@rightkit/media-gen-ui",
+      "capability": "media-gen-ui",
+      "summary": "Generative media studio UI: generate, jobs, gallery, recipes, voices and production panels.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "@rightkit/media-ui",
       "capability": "media-ui",
@@ -4524,6 +5844,17 @@
         "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
       ]
     },
+    {
+      "package": "@rightkit/social-ui",
+      "capability": "social-ui",
+      "summary": "Social media management UI: accounts, drafts, approvals and analytics screens with their data layer.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "@rightkit/sync-worker",
       "capability": "sync-worker",
@@ -4535,6 +5866,17 @@
         "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
       ]
     },
+    {
+      "package": "@rightkit/system-ui",
+      "capability": "system-ui",
+      "summary": "System monitor views (activity, storage, cleanup, duplicates, drive health, apps, chat) and chart helpers for desktop utility apps.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "@rightkit/tauri",
       "capability": "tauri-host-adapters",
@@ -4581,6 +5923,17 @@
         "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
       ]
     },
+    {
+      "package": "@rightkit/terminal-ui",
+      "capability": "terminal-ui-components",
+      "summary": "Persistent terminal pane and its React hook.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "@rightkit/theme",
       "capability": "theme-ui",
@@ -4716,6 +6069,39 @@
         "Fingerprints identify review candidates (competing dependencies and distinctive implementation code); published two-host replacement qualification is not recorded."
       ]
     },
+    {
+      "package": "@rightkit/video-ui",
+      "capability": "video-ui",
+      "summary": "Video editor UI: timeline, inspector, preview and project views.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "@rightkit/waitlist-worker",
+      "capability": "waitlist-worker",
+      "summary": "Cloudflare Worker that captures waitlist email signups in KV, rate-limits per IP and sends an optional Resend confirmation email.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
+    {
+      "package": "@rightkit/workspace-ui",
+      "capability": "workspace-ui",
+      "summary": "Calendar, contacts, drive, tasks and meeting views for workspace-style apps.",
+      "fingerprints": [],
+      "detection": "declaration-only",
+      "policyNotes": [
+        "Package contract retained; dependency declarations do not verify integration.",
+        "No precise implementation fingerprint; declaration-only inventory, never enforced ownership or verified integration."
+      ]
+    },
     {
       "package": "RightKitSwift",
       "capability": "os-credential-store",